ML17139D443: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
(5 intermediate revisions by the same user not shown)
Line 2: Line 2:
| number = ML17139D443
| number = ML17139D443
| issue date = 05/19/2017
| issue date = 05/19/2017
| title = 05/23/2017 Us NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold Site
| title = Us NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold Site
| author name = Dennis S
| author name = Dennis S
| author affiliation = NRC/RES/DRA/PRAB
| author affiliation = NRC/RES/DRA/PRAB
Line 15: Line 15:


=Text=
=Text=
{{#Wiki_filter:US NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold SitePublic MeetingMay 23, 2017TeleconferenceSuzanne Dennis301-415-7000Suzanne.Dennis@nrc.gov Acronymsac -alternating currentADS -automatic depressurization systemANS -American Nuclear SocietyATWS -anticipated transient without SCRAMCRDHS -control rod drive hydraulic systemDAEC -Duane Arnold Energy CenterECCS -emergency core cooling systemEDG -emergency diesel generatorFSG -FLEX Support GuidelineHPCI -high-pressure coolant injectionLOOP -loss of offsite powerLPI -low pressure injectionMELCOR -not an acronymMSIV -main steam isolation valvesNRC -Nuclear Regulatory CommissionPRA -probabilistic risk assessmentRCIC -reactor core isolation coolingRPV -reactor pressure vesselSDP -Significance Determination ProcessSPAR -Standardized Plant Analysis RiskSRV -safety relief valveSSC -system, structure, or componentConfirmatory Success Criteria Analysis Using the Duane Arnold Site205/23/2017 Purpose and desired outcomePurpose:-To discuss substantive aspects of work that the US NRC has initiated in the area of confirmatory success criteria analysis, as part of its normal activities to refine and improve its independent Standardized Plant Analysis Risk (SPAR) models using the Duane Arnold Energy Center (DAEC) as the reference plant, specifically the plans for upcoming MELCOR accident analyses;-To provide an opportunity for the NRC to describe the plans for this project, and for NextEra and other interested parties to provide feedback;-To communicate that this activity is not directly associated with an existing regulatory issue or decision for DAEC.Desired outcome:-Public awareness of the project;-Input on how the work should be framed and executed;-Identification of any related activities or interactions that might not be on the team's radar.Confirmatory Success Criteria Analysis Using the Duane Arnold Site305/23/2017 Meeting outlineIntroductionBackground on this projectCurrent status and non-proprietary aspects of the analysis plansDiscussionPublic commentsTransition to Closed PortionProprietary aspects of the analysis plansDiscussionWrap-upConfirmatory Success Criteria Analysis Using the Duane Arnold Site405/23/2017 BackgroundObjectives:-To support confirmation/changes to the independent SPAR models-To provide off-the-shelf analyses for NRC risk analysts to consult-To foster in-house expertise and knowledge transferLed by the Office of Nuclear Regulatory Research at the request of the Office of Nuclear Reactor RegulationTo support NRC risk analysts, but not part of a specific regulatory actionPRA scope:-Level 1 -i.e., beyond-design-basis scenarios up to the time of core damage-Equipment/system performance requirements to support system analysis (i.e., fault tree modeling) and sequence timing to support human reliability analysisConfirmatory Success Criteria Analysis Using the Duane Arnold Site505/23/2017 Background (2)Past work:-NUREG-1953: Surry and Peach Bottom success criteria-NUREG/CR-7177: investigation of broad success criteria modeling assumptions-NUREG-2187: Byron Unit 1 success criteria-Has both confirmed existing SPAR modeling assumptions and supported specific SPAR modeling changesThe approach:-perform plant-specific thermal-hydraulic (MELCOR) analysis for Duane Arnold, -apply the findings to the Duane Arnold SPAR model, and -extend the insights of the analyses to other plants' SPAR models, considering the important differences in design and operation that exist between the plants.The project will rely on the best available information in developing the MELCOR thermal-hydraulic model and performing the thermal-hydraulic analysisConfirmatory Success Criteria Analysis Using the Duane Arnold Site605/23/2017 MELCORMELCOR is a fully integrated, engineering-level computer code that models the progression of accidents in light water reactors.MELCOR simulates the thermal-hydraulic and post-core damage behavior of the plant, in terms of the major SSCs and actions that affect this responseMELCOR model is somewhat like the software used to support NPP simulator functionality, except that in the case of typical MELCOR models there is more capability in modeling the response after fuel heatup and less capability with respect to modeling support systems, normal operation, and the human-machine interfaceConfirmatory Success Criteria Analysis Using the Duane Arnold Site705/23/2017 MELCOR (2)Phenomena modeled by MELCOR include:-the thermal-hydraulic response of the primary reactor coolant system, the reactor cavity, the containment, and surrounding buildings; -core uncovery, fuel heatup, cladding oxidation, fuel degradation, and core melting and relocation; -thermal and mechanical loading and failure of the lower head; -core-concrete attack; -hydrogen production, transport, and combustion; -fission product release, transport, and deposition;-and the impact of engineered safety features (e.g., containment sprays, containment fan coolers, and filters) on thermal-hydraulic and radionuclide behaviorOnly the capabilities relevant prior to the onset of core damage are utilized for this project05/23/2017Confirmatory Success Criteria Analysis Using the Duane Arnold Site8 MELCOR modelModel was developed by Energy Research Inc.NRC reviewed and commented on modelModel quality assurance review and model testing have been performed Model has been handed off to the NRC from ERI05/23/2017Confirmatory Success Criteria Analysis Using the Duane Arnold Site9 High-level issues to be investigatedIntent is not to comprehensively confirm all success criteria in the chosen plant's SPAR modelFour specific performance topics were chosen:-Success criteria for depressurization during non-ATWS scenarios-FLEX Support Guidelines (FSGs) applied to loss-of-ac-power and other scenarios-ECCS injection following containment failure or venting-Safe and stable end-state considerationsConfirmatory Success Criteria Analysis Using the Duane Arnold Site1005/23/2017 Non-ATWS SRV/ADS analysisThe success criteria for automatic depressurization during           non-ATWS PRA sequences (e.g., minimum # of SRVs required) has been a point of departure between NRC and licensee PRA models during a couple of recent SDPsPreliminary sequences of interest:-A transient sequence with success of high-pressure injection, depressurization, and low-pressure injection (among other successes and failures), where core damage does not occur-A transient sequence with failure of high-pressure injection, failure of depressurization, and failure of CRDHS (among other successes and failures), where core damage occurs-A small loss-of-coolant accident sequence with failure of high-pressure injection, and success of depressurization and low-pressure injection (among other successes and failures), where core damage does not occurConfirmatory Success Criteria Analysis Using the Duane Arnold Site1105/23/2017 Non-ATWS SRV/ADS analysis (2)Preliminary modeling assumptions-Number of SRVs that actuateOne, two, or three-Credit for CRDHS flow prior to and following depressurizationNominal or maximized-Manual actions taken prior to depressurization to stabilize pressure below the relevant set-point(s)Closure of MSIVs or traditional plant cooldown-Timing of manual actuation Additional sensitivity studies will be run for other variables, including-Failure of HPCI-Higher recirculation pump leakage-Reduced LPI flow-Automatic initiation of ADSConfirmatory Success Criteria Analysis Using the Duane Arnold Site1205/23/2017 FLEX Support Guideline strategies for loss-of-ac power and other scenariosNew capabilities have been put in to place under Order EA-12-049 and Order EA-13-109, relating to mitigating strategies and hardened containment venting in response to Fukushima lessons-learnedThe current activity is focused solely on scoping success criteria and sequence timing issues that may be informative for future NRC risk modelingPreliminary sequences of interest:-A grid-related LOOP with failure of EDGs, success of RCIC prior to battery depletion, failure to align a portable diesel generator to supply power to station battery chargers, successful manual depressurization, successful alternate injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures),
{{#Wiki_filter:US NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold Site Public Meeting May 23, 2017 Teleconference Suzanne Dennis 301-415-7000 Suzanne.Dennis@nrc.gov
where core damage is averted-A loss of main feedwater with success of high-pressure injection, failure of suppression pool cooling, success of manual depressurization, failure of CRDHS and low-pressure injection, success of alternate low-pressure injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures), where core damage is avertedConfirmatory Success Criteria Analysis Using the Duane Arnold Site1305/23/2017 FLEX Support Guideline strategies for loss-of-ac power and other scenarios (2)Preliminary modeling assumptions-Time of loss-of-acZero or two hours-Time of battery depletion, if at allFour hours, eight hours, and indefinite operation (with successful use of portable pump)Time of RCIC failureFour hours or eight hours-Flow rate achieved by ac-independent injection, and timing of injectionNominal flow and plus or minus 25%-Timing of containment venting or failureProcedurally-driven ventingAdditional sensitivity studies will be run for other variables, including-Changes in recirculation seal leakage-Reduced RCIC flow-Failure of alternate injectionConfirmatory Success Criteria Analysis Using the Duane Arnold Site1405/23/2017 ECCS injection following containment failure or ventingRPV coolant injection following containment venting or containment failure caused by the slow over-pressurization of containment, resulting from a loss of containment heat removalThe current thought is to leverage the sequences already used for the FSG investigation above.Preliminary modeling assumptions-The timing (and associated pressure) of ventingProceduralized pressures-The vent path usedDrywell or hard pipe vent-At what point the vent path is closedBased on accident progression and intent of vent (e.g., to maintain pressure or temperature)-The response of the SRVs and ECCS pumps to the elevated pressure and the depressurizationFunctional, degraded, or non-functionalConfirmatory Success Criteria Analysis Using the Duane Arnold Site1505/23/2017 ECCS injection following containment failure or venting (2)Additional sensitivity studies will be run for other variables, including-Size of rupture area in event of containment failure-Reduction of alternate injection flow-SRV failureConfirmatory Success Criteria Analysis Using the Duane Arnold Site1605/23/2017 Safe and stable end-stateTypically, PRAs have used a 24-hour mission time for component reliability and sequence truncation; sequences are sometimes carried beyond 24 hours if a cliff-edge is known to existThe ASME/ANS PRA Standard (Requirement AS-A2) states, "For each modeled initiating event, IDENTIFY the key safety functions that are necessary to reach a safe, stable state and prevent core damage"Goal -to scope what additional success criteria-related requirements would be needed to extend typical PRA sequences to a longer period of time (e.g., 48 or 72 hours)Again, the current thought is to leverage the sequences already used for the FSG investigation above.Confirmatory Success Criteria Analysis Using the Duane Arnold Site1705/23/2017 Safe and stable end-state (2)Preliminary modeling assumptions-The initial volume of water in the condensate storage tankHigh normal or low normal-The initial volume of water in the suppression poolHigh normal or low normal-Recirculation pump seal leakageNormal, low, or high-Decay heat formulaScaled from another BWR/4 MELCOR model or ANS curve-CRDHS flowNominal or maximized-MELCOR thermal-hydraulic coefficientsAdditional sensitivity studies will be run for other variables, including:-SRV failure-Decreased RCIC flow-Reduction in alternate injection flowConfirmatory Success Criteria Analysis Using the Duane Arnold Site1805/23/2017 Going forwardNear-term effort will be focused on:-Continuing model shakedown/validation-Performing MELCOR calculations and analysis-Performing peer reviewThe analysis will be documented in a NUREGConfirmatory Success Criteria Analysis Using the Duane Arnold Site1905/23/2017 QUESTIONS OR FEEDBACK?05/23/2017Confirmatory Success Criteria Analysis Using the Duane Arnold Site20 CLOSED PORTIONConfirmatory Success Criteria Analysis Using the Duane Arnold Site2105/23/2017
 
}}
Acronyms
* ac - alternating current
* LPI - low pressure injection
* ADS - automatic depressurization
* MELCOR - not an acronym system
* MSIV - main steam isolation valves
* ANS - American Nuclear Society
* NRC - Nuclear Regulatory
* ATWS - anticipated transient without               Commission SCRAM
* PRA - probabilistic risk assessment
* CRDHS - control rod drive hydraulic
* RCIC - reactor core isolation cooling system
* RPV - reactor pressure vessel
* DAEC - Duane Arnold Energy Center
* SDP - Significance Determination
* ECCS - emergency core cooling                      Process system
* SPAR - Standardized Plant Analysis
* EDG - emergency diesel generator                    Risk
* FSG - FLEX Support Guideline
* SRV - safety relief valve
* HPCI - high-pressure coolant
* SSC - system, structure, or injection                                          component
* LOOP - loss of offsite power 05/23/2017                      Confirmatory Success Criteria Analysis 2
Using the Duane Arnold Site
 
Purpose and desired outcome
 
==Purpose:==
- To discuss substantive aspects of work that the US NRC has initiated in the area of confirmatory success criteria analysis, as part of its normal activities to refine and improve its independent Standardized Plant Analysis Risk (SPAR) models using the Duane Arnold Energy Center (DAEC) as the reference plant, specifically the plans for upcoming MELCOR accident analyses;
        - To provide an opportunity for the NRC to describe the plans for this project, and for NextEra and other interested parties to provide feedback;
        - To communicate that this activity is not directly associated with an existing regulatory issue or decision for DAEC.
* Desired outcome:
        - Public awareness of the project;
        - Input on how the work should be framed and executed;
        - Identification of any related activities or interactions that might not be on the teams radar.
05/23/2017                        Confirmatory Success Criteria Analysis 3
Using the Duane Arnold Site
 
Meeting outline
* Introduction
* Background on this project
* Current status and non-proprietary aspects of the analysis plans
* Discussion
* Public comments
* Transition to Closed Portion
* Proprietary aspects of the analysis plans
* Discussion
* Wrap-up 05/23/2017                Confirmatory Success Criteria Analysis 4
Using the Duane Arnold Site
 
===Background===
* Objectives:
        - To support confirmation/changes to the independent SPAR models
        - To provide off-the-shelf analyses for NRC risk analysts to consult
        - To foster in-house expertise and knowledge transfer
* Led by the Office of Nuclear Regulatory Research at the request of the Office of Nuclear Reactor Regulation
* To support NRC risk analysts, but not part of a specific regulatory action
* PRA scope:
        - Level 1 - i.e., beyond-design-basis scenarios up to the time of core damage
        - Equipment/system performance requirements to support system analysis (i.e., fault tree modeling) and sequence timing to support human reliability analysis 05/23/2017                        Confirmatory Success Criteria Analysis 5
Using the Duane Arnold Site
 
Background (2)
* Past work:
        - NUREG-1953: Surry and Peach Bottom success criteria
        - NUREG/CR-7177: investigation of broad success criteria modeling assumptions
        - NUREG-2187: Byron Unit 1 success criteria
        - Has both confirmed existing SPAR modeling assumptions and supported specific SPAR modeling changes
* The approach:
        - perform plant-specific thermal-hydraulic (MELCOR) analysis for Duane Arnold,
        - apply the findings to the Duane Arnold SPAR model, and
        - extend the insights of the analyses to other plants SPAR models, considering the important differences in design and operation that exist between the plants.
* The project will rely on the best available information in developing the MELCOR thermal-hydraulic model and performing the thermal-hydraulic analysis 05/23/2017                      Confirmatory Success Criteria Analysis 6
Using the Duane Arnold Site
 
MELCOR
* MELCOR is a fully integrated, engineering-level computer code that models the progression of accidents in light water reactors.
* MELCOR simulates the thermal-hydraulic and post-core damage behavior of the plant, in terms of the major SSCs and actions that affect this response
* MELCOR model is somewhat like the software used to support NPP simulator functionality, except that in the case of typical MELCOR models there is more capability in modeling the response after fuel heatup and less capability with respect to modeling support systems, normal operation, and the human-machine interface 05/23/2017              Confirmatory Success Criteria Analysis 7
Using the Duane Arnold Site
 
MELCOR (2)
* Phenomena modeled by MELCOR include:
        - the thermal-hydraulic response of the primary reactor coolant system, the reactor cavity, the containment, and surrounding buildings;
        - core uncovery, fuel heatup, cladding oxidation, fuel degradation, and core melting and relocation;
        - thermal and mechanical loading and failure of the lower head;
        - core-concrete attack;
        - hydrogen production, transport, and combustion;
        - fission product release, transport, and deposition;
        - and the impact of engineered safety features (e.g., containment sprays, containment fan coolers, and filters) on thermal-hydraulic and radionuclide behavior
* Only the capabilities relevant prior to the onset of core damage are utilized for this project 05/23/2017                          Confirmatory Success Criteria Analysis 8
Using the Duane Arnold Site
 
MELCOR model
* Model was developed by Energy Research Inc.
* NRC reviewed and commented on model
* Model quality assurance review and model testing have been performed
* Model has been handed off to the NRC from ERI 05/23/2017              Confirmatory Success Criteria Analysis 9
Using the Duane Arnold Site
 
High-level issues to be investigated
* Intent is not to comprehensively confirm all success criteria in the chosen plants SPAR model
* Four specific performance topics were chosen:
        - Success criteria for depressurization during non-ATWS scenarios
        - FLEX Support Guidelines (FSGs) applied to loss-of-ac-power and other scenarios
        - ECCS injection following containment failure or venting
        - Safe and stable end-state considerations 05/23/2017              Confirmatory Success Criteria Analysis 10 Using the Duane Arnold Site
 
Non-ATWS SRV/ADS analysis
* The success criteria for automatic depressurization during non-ATWS PRA sequences (e.g., minimum # of SRVs required) has been a point of departure between NRC and licensee PRA models during a couple of recent SDPs
* Preliminary sequences of interest:
        - A transient sequence with success of high-pressure injection, depressurization, and low-pressure injection (among other successes and failures), where core damage does not occur
        - A transient sequence with failure of high-pressure injection, failure of depressurization, and failure of CRDHS (among other successes and failures), where core damage occurs
        - A small loss-of-coolant accident sequence with failure of high-pressure injection, and success of depressurization and low-pressure injection (among other successes and failures), where core damage does not occur 05/23/2017                    Confirmatory Success Criteria Analysis 11 Using the Duane Arnold Site
 
Non-ATWS SRV/ADS analysis (2)
* Preliminary modeling assumptions
        - Number of SRVs that actuate
* One, two, or three
        - Credit for CRDHS flow prior to and following depressurization
* Nominal or maximized
        - Manual actions taken prior to depressurization to stabilize pressure below the relevant set-point(s)
* Closure of MSIVs or traditional plant cooldown
        - Timing of manual actuation
* Additional sensitivity studies will be run for other variables, including
        - Failure of HPCI
        - Higher recirculation pump leakage
        - Reduced LPI flow
        - Automatic initiation of ADS 05/23/2017                        Confirmatory Success Criteria Analysis 12 Using the Duane Arnold Site
 
FLEX Support Guideline strategies for loss-of-ac power and other scenarios
* New capabilities have been put in to place under Order EA-12-049 and Order EA-13-109, relating to mitigating strategies and hardened containment venting in response to Fukushima lessons-learned
* The current activity is focused solely on scoping success criteria and sequence timing issues that may be informative for future NRC risk modeling
* Preliminary sequences of interest:
        - A grid-related LOOP with failure of EDGs, success of RCIC prior to battery depletion, failure to align a portable diesel generator to supply power to station battery chargers, successful manual depressurization, successful alternate injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures),
where core damage is averted
        - A loss of main feedwater with success of high-pressure injection, failure of suppression pool cooling, success of manual depressurization, failure of CRDHS and low-pressure injection, success of alternate low-pressure injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures), where core damage is averted 05/23/2017                            Confirmatory Success Criteria Analysis 13 Using the Duane Arnold Site
 
FLEX Support Guideline strategies for loss-of-ac power and other scenarios (2)
* Preliminary modeling assumptions
        - Time of loss-of-ac
* Zero or two hours
        - Time of battery depletion, if at all
* Four hours, eight hours, and indefinite operation (with successful use of portable pump)
* Time of RCIC failure
* Four hours or eight hours
        - Flow rate achieved by ac-independent injection, and timing of injection
* Nominal flow and plus or minus 25%
        - Timing of containment venting or failure
* Procedurally-driven venting
* Additional sensitivity studies will be run for other variables, including
        - Changes in recirculation seal leakage
        - Reduced RCIC flow
        - Failure of alternate injection 05/23/2017                        Confirmatory Success Criteria Analysis 14 Using the Duane Arnold Site
 
ECCS injection following containment failure or venting
* RPV coolant injection following containment venting or containment failure caused by the slow over-pressurization of containment, resulting from a loss of containment heat removal
* The current thought is to leverage the sequences already used for the FSG investigation above.
* Preliminary modeling assumptions
        - The timing (and associated pressure) of venting
* Proceduralized pressures
        - The vent path used
* Drywell or hard pipe vent
        - At what point the vent path is closed
* Based on accident progression and intent of vent (e.g., to maintain pressure or temperature)
        - The response of the SRVs and ECCS pumps to the elevated pressure and the depressurization
* Functional, degraded, or non-functional 05/23/2017                        Confirmatory Success Criteria Analysis 15 Using the Duane Arnold Site
 
ECCS injection following containment failure or venting (2)
* Additional sensitivity studies will be run for other variables, including
        - Size of rupture area in event of containment failure
        - Reduction of alternate injection flow
        - SRV failure 05/23/2017              Confirmatory Success Criteria Analysis 16 Using the Duane Arnold Site
 
Safe and stable end-state
* Typically, PRAs have used a 24-hour mission time for component reliability and sequence truncation; sequences are sometimes carried beyond 24 hours if a cliff-edge is known to exist
* The ASME/ANS PRA Standard (Requirement AS-A2) states, For each modeled initiating event, IDENTIFY the key safety functions that are necessary to reach a safe, stable state and prevent core damage
* Goal - to scope what additional success criteria-related requirements would be needed to extend typical PRA sequences to a longer period of time (e.g., 48 or 72 hours)
* Again, the current thought is to leverage the sequences already used for the FSG investigation above.
05/23/2017                Confirmatory Success Criteria Analysis 17 Using the Duane Arnold Site
 
Safe and stable end-state (2)
* Preliminary modeling assumptions
        - The initial volume of water in the condensate storage tank
* High normal or low normal
        - The initial volume of water in the suppression pool
* High normal or low normal
        - Recirculation pump seal leakage
* Normal, low, or high
        - Decay heat formula
* Scaled from another BWR/4 MELCOR model or ANS curve
        - CRDHS flow
* Nominal or maximized
        - MELCOR thermal-hydraulic coefficients
* Additional sensitivity studies will be run for other variables, including:
        - SRV failure
        - Decreased RCIC flow
        - Reduction in alternate injection flow 05/23/2017                        Confirmatory Success Criteria Analysis 18 Using the Duane Arnold Site
 
Going forward
* Near-term effort will be focused on:
        - Continuing model shakedown/validation
        - Performing MELCOR calculations and analysis
        - Performing peer review
* The analysis will be documented in a NUREG 05/23/2017            Confirmatory Success Criteria Analysis 19 Using the Duane Arnold Site
 
QUESTIONS OR FEEDBACK?
05/23/2017    Confirmatory Success Criteria Analysis 20 Using the Duane Arnold Site
 
CLOSED PORTION 05/23/2017    Confirmatory Success Criteria Analysis 21 Using the Duane Arnold Site}}

Latest revision as of 17:51, 4 February 2020

Us NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold Site
ML17139D443
Person / Time
Site: Duane Arnold NextEra Energy icon.png
Issue date: 05/19/2017
From: Suzanne Dennis
NRC/RES/DRA/PRAB
To:
S. Dennis 301-415-7000
References
Download: ML17139D443 (21)


Text

US NRC Probabilistic Risk Assessment Confirmatory Success Criteria Analysis Using the Duane Arnold Site Public Meeting May 23, 2017 Teleconference Suzanne Dennis 301-415-7000 Suzanne.Dennis@nrc.gov

Acronyms

  • ac - alternating current
  • LPI - low pressure injection
  • ADS - automatic depressurization
  • ANS - American Nuclear Society
  • NRC - Nuclear Regulatory
  • DAEC - Duane Arnold Energy Center
  • SDP - Significance Determination
  • ECCS - emergency core cooling Process system
  • SPAR - Standardized Plant Analysis
  • HPCI - high-pressure coolant
  • SSC - system, structure, or injection component
  • LOOP - loss of offsite power 05/23/2017 Confirmatory Success Criteria Analysis 2

Using the Duane Arnold Site

Purpose and desired outcome

Purpose:

- To discuss substantive aspects of work that the US NRC has initiated in the area of confirmatory success criteria analysis, as part of its normal activities to refine and improve its independent Standardized Plant Analysis Risk (SPAR) models using the Duane Arnold Energy Center (DAEC) as the reference plant, specifically the plans for upcoming MELCOR accident analyses;

- To provide an opportunity for the NRC to describe the plans for this project, and for NextEra and other interested parties to provide feedback;

- To communicate that this activity is not directly associated with an existing regulatory issue or decision for DAEC.

  • Desired outcome:

- Public awareness of the project;

- Input on how the work should be framed and executed;

- Identification of any related activities or interactions that might not be on the teams radar.

05/23/2017 Confirmatory Success Criteria Analysis 3

Using the Duane Arnold Site

Meeting outline

  • Introduction
  • Background on this project
  • Current status and non-proprietary aspects of the analysis plans
  • Discussion
  • Public comments
  • Transition to Closed Portion
  • Proprietary aspects of the analysis plans
  • Discussion
  • Wrap-up 05/23/2017 Confirmatory Success Criteria Analysis 4

Using the Duane Arnold Site

Background

  • Objectives:

- To support confirmation/changes to the independent SPAR models

- To provide off-the-shelf analyses for NRC risk analysts to consult

- To foster in-house expertise and knowledge transfer

  • Led by the Office of Nuclear Regulatory Research at the request of the Office of Nuclear Reactor Regulation
  • To support NRC risk analysts, but not part of a specific regulatory action

- Level 1 - i.e., beyond-design-basis scenarios up to the time of core damage

- Equipment/system performance requirements to support system analysis (i.e., fault tree modeling) and sequence timing to support human reliability analysis 05/23/2017 Confirmatory Success Criteria Analysis 5

Using the Duane Arnold Site

Background (2)

  • Past work:

- NUREG-1953: Surry and Peach Bottom success criteria

- NUREG/CR-7177: investigation of broad success criteria modeling assumptions

- NUREG-2187: Byron Unit 1 success criteria

- Has both confirmed existing SPAR modeling assumptions and supported specific SPAR modeling changes

  • The approach:

- perform plant-specific thermal-hydraulic (MELCOR) analysis for Duane Arnold,

- apply the findings to the Duane Arnold SPAR model, and

- extend the insights of the analyses to other plants SPAR models, considering the important differences in design and operation that exist between the plants.

  • The project will rely on the best available information in developing the MELCOR thermal-hydraulic model and performing the thermal-hydraulic analysis 05/23/2017 Confirmatory Success Criteria Analysis 6

Using the Duane Arnold Site

MELCOR

  • MELCOR is a fully integrated, engineering-level computer code that models the progression of accidents in light water reactors.
  • MELCOR simulates the thermal-hydraulic and post-core damage behavior of the plant, in terms of the major SSCs and actions that affect this response
  • MELCOR model is somewhat like the software used to support NPP simulator functionality, except that in the case of typical MELCOR models there is more capability in modeling the response after fuel heatup and less capability with respect to modeling support systems, normal operation, and the human-machine interface 05/23/2017 Confirmatory Success Criteria Analysis 7

Using the Duane Arnold Site

MELCOR (2)

  • Phenomena modeled by MELCOR include:

- the thermal-hydraulic response of the primary reactor coolant system, the reactor cavity, the containment, and surrounding buildings;

- core uncovery, fuel heatup, cladding oxidation, fuel degradation, and core melting and relocation;

- thermal and mechanical loading and failure of the lower head;

- core-concrete attack;

- hydrogen production, transport, and combustion;

- fission product release, transport, and deposition;

- and the impact of engineered safety features (e.g., containment sprays, containment fan coolers, and filters) on thermal-hydraulic and radionuclide behavior

  • Only the capabilities relevant prior to the onset of core damage are utilized for this project 05/23/2017 Confirmatory Success Criteria Analysis 8

Using the Duane Arnold Site

MELCOR model

  • Model was developed by Energy Research Inc.
  • NRC reviewed and commented on model
  • Model quality assurance review and model testing have been performed
  • Model has been handed off to the NRC from ERI 05/23/2017 Confirmatory Success Criteria Analysis 9

Using the Duane Arnold Site

High-level issues to be investigated

  • Intent is not to comprehensively confirm all success criteria in the chosen plants SPAR model
  • Four specific performance topics were chosen:

- Success criteria for depressurization during non-ATWS scenarios

- FLEX Support Guidelines (FSGs) applied to loss-of-ac-power and other scenarios

- ECCS injection following containment failure or venting

- Safe and stable end-state considerations 05/23/2017 Confirmatory Success Criteria Analysis 10 Using the Duane Arnold Site

Non-ATWS SRV/ADS analysis

  • The success criteria for automatic depressurization during non-ATWS PRA sequences (e.g., minimum # of SRVs required) has been a point of departure between NRC and licensee PRA models during a couple of recent SDPs
  • Preliminary sequences of interest:

- A transient sequence with success of high-pressure injection, depressurization, and low-pressure injection (among other successes and failures), where core damage does not occur

- A transient sequence with failure of high-pressure injection, failure of depressurization, and failure of CRDHS (among other successes and failures), where core damage occurs

- A small loss-of-coolant accident sequence with failure of high-pressure injection, and success of depressurization and low-pressure injection (among other successes and failures), where core damage does not occur 05/23/2017 Confirmatory Success Criteria Analysis 11 Using the Duane Arnold Site

Non-ATWS SRV/ADS analysis (2)

  • Preliminary modeling assumptions

- Number of SRVs that actuate

  • One, two, or three

- Credit for CRDHS flow prior to and following depressurization

  • Nominal or maximized

- Manual actions taken prior to depressurization to stabilize pressure below the relevant set-point(s)

  • Closure of MSIVs or traditional plant cooldown

- Timing of manual actuation

  • Additional sensitivity studies will be run for other variables, including

- Failure of HPCI

- Higher recirculation pump leakage

- Reduced LPI flow

- Automatic initiation of ADS 05/23/2017 Confirmatory Success Criteria Analysis 12 Using the Duane Arnold Site

FLEX Support Guideline strategies for loss-of-ac power and other scenarios

  • New capabilities have been put in to place under Order EA-12-049 and Order EA-13-109, relating to mitigating strategies and hardened containment venting in response to Fukushima lessons-learned
  • The current activity is focused solely on scoping success criteria and sequence timing issues that may be informative for future NRC risk modeling
  • Preliminary sequences of interest:

- A grid-related LOOP with failure of EDGs, success of RCIC prior to battery depletion, failure to align a portable diesel generator to supply power to station battery chargers, successful manual depressurization, successful alternate injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures),

where core damage is averted

- A loss of main feedwater with success of high-pressure injection, failure of suppression pool cooling, success of manual depressurization, failure of CRDHS and low-pressure injection, success of alternate low-pressure injection using a FLEX pump, successful containment venting, and successful late injection (amongst other successes and failures), where core damage is averted 05/23/2017 Confirmatory Success Criteria Analysis 13 Using the Duane Arnold Site

FLEX Support Guideline strategies for loss-of-ac power and other scenarios (2)

  • Preliminary modeling assumptions

- Time of loss-of-ac

  • Zero or two hours

- Time of battery depletion, if at all

  • Four hours, eight hours, and indefinite operation (with successful use of portable pump)
  • Time of RCIC failure
  • Four hours or eight hours

- Flow rate achieved by ac-independent injection, and timing of injection

  • Nominal flow and plus or minus 25%

- Timing of containment venting or failure

  • Procedurally-driven venting
  • Additional sensitivity studies will be run for other variables, including

- Changes in recirculation seal leakage

- Reduced RCIC flow

- Failure of alternate injection 05/23/2017 Confirmatory Success Criteria Analysis 14 Using the Duane Arnold Site

ECCS injection following containment failure or venting

  • RPV coolant injection following containment venting or containment failure caused by the slow over-pressurization of containment, resulting from a loss of containment heat removal
  • The current thought is to leverage the sequences already used for the FSG investigation above.
  • Preliminary modeling assumptions

- The timing (and associated pressure) of venting

  • Proceduralized pressures

- The vent path used

  • Drywell or hard pipe vent

- At what point the vent path is closed

  • Based on accident progression and intent of vent (e.g., to maintain pressure or temperature)

- The response of the SRVs and ECCS pumps to the elevated pressure and the depressurization

  • Functional, degraded, or non-functional 05/23/2017 Confirmatory Success Criteria Analysis 15 Using the Duane Arnold Site

ECCS injection following containment failure or venting (2)

  • Additional sensitivity studies will be run for other variables, including

- Size of rupture area in event of containment failure

- Reduction of alternate injection flow

- SRV failure 05/23/2017 Confirmatory Success Criteria Analysis 16 Using the Duane Arnold Site

Safe and stable end-state

  • Typically, PRAs have used a 24-hour mission time for component reliability and sequence truncation; sequences are sometimes carried beyond 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> if a cliff-edge is known to exist
  • The ASME/ANS PRA Standard (Requirement AS-A2) states, For each modeled initiating event, IDENTIFY the key safety functions that are necessary to reach a safe, stable state and prevent core damage
  • Goal - to scope what additional success criteria-related requirements would be needed to extend typical PRA sequences to a longer period of time (e.g., 48 or 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />)
  • Again, the current thought is to leverage the sequences already used for the FSG investigation above.

05/23/2017 Confirmatory Success Criteria Analysis 17 Using the Duane Arnold Site

Safe and stable end-state (2)

  • Preliminary modeling assumptions

- The initial volume of water in the condensate storage tank

  • High normal or low normal

- The initial volume of water in the suppression pool

  • High normal or low normal

- Recirculation pump seal leakage

  • Normal, low, or high

- Decay heat formula

  • Scaled from another BWR/4 MELCOR model or ANS curve

- CRDHS flow

  • Nominal or maximized

- MELCOR thermal-hydraulic coefficients

  • Additional sensitivity studies will be run for other variables, including:

- SRV failure

- Decreased RCIC flow

- Reduction in alternate injection flow 05/23/2017 Confirmatory Success Criteria Analysis 18 Using the Duane Arnold Site

Going forward

  • Near-term effort will be focused on:

- Continuing model shakedown/validation

- Performing MELCOR calculations and analysis

- Performing peer review

  • The analysis will be documented in a NUREG 05/23/2017 Confirmatory Success Criteria Analysis 19 Using the Duane Arnold Site

QUESTIONS OR FEEDBACK?

05/23/2017 Confirmatory Success Criteria Analysis 20 Using the Duane Arnold Site

CLOSED PORTION 05/23/2017 Confirmatory Success Criteria Analysis 21 Using the Duane Arnold Site