ML12319A479: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
Line 28: Line 28:
John Boska (By electronic mail only)
John Boska (By electronic mail only)
U.S. Nuclear Regulatory Commission One White Flint North, M/S O-8G9A 11555 Rockville Pike Rockville, MD 20852-2746 Victor McCree Regional Administrator, Region II U.S. Nuclear Regulatory Commission Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Ga. 30303-1257 Senior Resident Inspector Oconee Nuclear Station Susan E. Jenkins, Manager Radioactive & Infectious Waste Management SC Dept. of Health and Environmental Control 2600 Bull St.
U.S. Nuclear Regulatory Commission One White Flint North, M/S O-8G9A 11555 Rockville Pike Rockville, MD 20852-2746 Victor McCree Regional Administrator, Region II U.S. Nuclear Regulatory Commission Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Ga. 30303-1257 Senior Resident Inspector Oconee Nuclear Station Susan E. Jenkins, Manager Radioactive & Infectious Waste Management SC Dept. of Health and Environmental Control 2600 Bull St.
Columbia, SC 29201
Columbia, SC 29201 TSB revision
 
TSB revision


SSF 3.10.1 B 3.10 STANDBY SHUTDOWN FACILITY B 3.10.1  Standby Shutdown Facility (SSF)
SSF 3.10.1 B 3.10 STANDBY SHUTDOWN FACILITY B 3.10.1  Standby Shutdown Facility (SSF)

Latest revision as of 11:37, 6 February 2020

Technical Specification Bases (Tsb) Changes
ML12319A479
Person / Time
Site: Oconee  Duke Energy icon.png
Issue date: 11/12/2012
From: Gillespie T
Duke Energy Carolinas
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
Download: ML12319A479 (27)


Text

T. PRESTON GILLESPIE, Jr.

LDuke Vice President Energy, Oconee Nuclear Station Duke Energy ONO 1VP / 7800 Rochester Hwy.

Seneca, SC 29672 864-873-4478 864-873-4208 fax T.Gillespie@duke-energy.com November 12, 2012 U. S. Nuclear Regulatory Commission Washington, DC 20555 Attention: Document Control Desk

Subject:

Duke Energy Carolinas, LLC Oconee Nuclear Station Docket Numbers 50-269, 50-270, and 50-287 Technical Specification Bases (TSB) Changes Pursuant to Technical Specification 5.5.15, Technical Specifications (TS) Bases Control Program, please find attached the latest changes to the Oconee Technical Specification Bases (TSB) 3.10.1, Standby Shutdown Facility, and 3.10.2, Standby Shutdown Facility Battery Cell Parameters. These (TSB) were revised to remove references to 10 CFR 50, Appendix R. These changes are associated with Amendment Nos. 371, 373, 372.

If any additional information is needed, please contact Kent Alter at 864-873-3255.

Sincerely, T. Preston Gillespie, Jr.

Vice President Oconee Nuclear Station Attachment www.duke-energycom

U. S. Nuclear Regulatory Commission November 12, 2012 Page 2 cc:

John Boska (By electronic mail only)

U.S. Nuclear Regulatory Commission One White Flint North, M/S O-8G9A 11555 Rockville Pike Rockville, MD 20852-2746 Victor McCree Regional Administrator, Region II U.S. Nuclear Regulatory Commission Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Ga. 30303-1257 Senior Resident Inspector Oconee Nuclear Station Susan E. Jenkins, Manager Radioactive & Infectious Waste Management SC Dept. of Health and Environmental Control 2600 Bull St.

Columbia, SC 29201 TSB revision

SSF 3.10.1 B 3.10 STANDBY SHUTDOWN FACILITY B 3.10.1 Standby Shutdown Facility (SSF)

BASES BACKGROUND The Standby Shutdown Facility (SSF) is designed as a standby system for use under certain emergency conditions. The system provides additional "defense in-depth" protection for the health and safety of the public by serving as a backup to existing safety systems. The SSF is provided as an alternate means to achieve and maintain the unit in MODE 3 with average RCS temperature _>525 0 F (unless the initiating event causes the unit to be driven to a lower temperature) following a fire, sabotage, turbine building flood, station blackout (SBO) and tornado missile events, and is designed in accordance with criteria associated with these events. In that the SSF is a backup to existing safety systems, the single failure criterion is not required. Failures in the SSF systems will not cause failures or inadvertent operations in other plant systems.

The SSF requires manual activation and can be activated if emergency systems are not available.

The SSF is designed to maintain the reactor in a safe shutdown condition for a period of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> following a fire, turbine building flood, sabotage, SBO, or tornado missile events. This is accomplished by re-establishing and maintaining Reactor Coolant Pump Seal cooling; assuring natural circulation and core cooling by maintaining the primary coolant system filled to a sufficient level in the pressurizer while maintaining sufficient secondary side cooling water; and maintaining the reactor subcritical by isolating all sources of Reactor Coolant System (RCS) addition except for the Reactor Coolant Makeup System which supplies makeup of a sufficient boron concentration.

The main components of the SSF are the SSF Auxiliary Service Water (ASW) System, SSF Portable Pumping System, SSF Reactor Coolant (RC) Makeup System, SSF Power System, and SSF Instrumentation.

The SSF ASW System is a high head, high volume system designed to provide sufficient steam generator (SG) inventory for adequate decay heat removal for three units during a loss of normal AC power in conjunction with the loss of the normal and emergency feedwater systems. One motor driven SSF ASW pump, located in the SSF, serves all three units. The SSF ASW pump, two HVAC service water pumps, and the Diesel Service Water (DSW) pump share a common suction supply of lake water from the embedded Unit 2 condenser circulating water (CCW) piping. The SSF DSW pump and an HVAC pump must be operable in order to satisfy the operability requirements for the Power System. (Only one HVAC service water pump is required to be operable to satisfy the LCO.)

OCONEE UNITS 1, 2, & 3 B 3.10.1 -1 BASES REVISION DATED 10/23/12

SSF B 3.10.1 BASES BACKGROUND The SSF ASW System is used to provide adequate cooling to (continued) maintain single phase RCS natural circulation flow in MODE 3 with an average RCS temperature _> 525 0 F (unless the initiating event causes the unit to be driven to a lower temperature). In order to maintain single phase RCS natural circulation flow, an adequate number of Bank 2, Group B and C pressurizer heaters must be OPERABLE. These heaters are needed to compensate for ambient heat loss from the pressurizer.

As long as the temperature in the pressurizer is maintained, RCS pressure will also be maintained. This will preclude hot leg voiding and ensure adequate natural circulation cooling.

The SSF Portable Pumping System, which includes a submersible pump and a flow path capable of taking suction from the intake canal and discharging into the Unit 2 CCW line, is designed to provide a backup supply of water to the SSF in the event of loss of CCW and subsequent loss of CCW siphon flow. The SSF Portable Pumping System is installed manually according to procedures.

The SSF RC Makeup System is designed to supply makeup to the RCS in the event that normal makeup systems are unavailable. An SSF RC Makeup Pump located in the Reactor Building of each unit supplies makeup to the RCS should the normal makeup system flow and seal cooling become unavailable. The system is designed to ensure that sufficient borated water is provided from the spent fuel pools to allow the SSF to maintain all three units in MODE 3 with average RCS temperature

_>525 0 F (unless the initiating event causes the unit to be driven to a lower temperature) for approximately 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. An SSF RC Makeup Pump is capable of delivering borated water from the Spent Fuel Pool to the RC pump seal injection lines. A portion of this seal injection flow is used to makeup for reactor coolant pump seal leakage while the remainder flows into the RCS to makeup for other RCS leakage (non LOCA).

The SSF Power System provides electrical isolation of SSF equipment from non-SSF equipment. The SSF Power System includes 4160 VAC, 600 VAC, 208 VAC, 120 VAC and 125 VDC power. It consists of switchgear, a load center, motor control centers, panelboards, remote starters, batteries, battery chargers, inverters, a diesel generator (DG),

relays, control devices, and interconnecting cable supplying the appropriate loads.

The AC power system consists of 4160 V switchgear OTS1; 600 V load center OXSF; 600 V motor control centers XSF, 1XSF, 2XSF, 3XSF, PXSF; 208 V motor control centers 1XSF, 1XSF-1, 2XSF, 2XSF-1, 3XSF, 3XSF-1; 120 V panelboards KSF, KSFC.

OCONEE UNITS 1, 2, & 3 B 3.10.1-2 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES BACKGROUND The SSF 125 VDC Power System provides a reliable source of power for (continued) DC loads needed to black start the diesel. The DC power system consists of two 125 VDC batteries and associated chargers, two 125 VDC distribution centers (DCSF, DCSF-1), and a DC power panelboard (DCSF). Only one battery and associated charger is required to be operable and connected to the 125 VDC distribution center to supply the 125 VDC loads. In this alignment, which is normal, the battery is floated on the distribution center and is available to assure power without interruption upon loss of its associated battery charger or AC power source. The other 125 VDC battery and its associated charger are in a standby mode and are not normally connected to the 125 VDC distribution center. However, they are available via manual connection to the 125 VDC distribution center to supply SSF loads, if required.

The SSF Power System is provided with standby power from a dedicated DG. The SSF DG and support systems consists of the diesel generator, fuel oil transfer system, air start system, diesel engine service water system, as well as associated controls and instrumentation. This SSF DG is rated for continuous operation at 3500 kW, 0.8 pf, and 4160 VAC.

The SSF electrical design load does not exceed the continuous rating of the DG. The auxiliaries required to assure proper operation of the SSF DG are supplied entirely from the SSF Power System. The SSF DG is provided with manual start capability from the SSF only. It uses a compressed air starting system with four air storage tanks. An independent fuel system, complete with a separate underground storage tank, duplex filter arrangement, a fuel oil transfer pump, and a day tank, is supplied for the DG.

OCONEE UNITS 1, 2, & 3 B 3.10.1-3 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES BACKGROUND The following information will aid in determination of SSF Operability:

(continued)

Associated Inoperable Systems SSF SSF SSF SSF SSF ASW Portable RCMU Power Instruments System Pumping System System System SSF ASW System YES YES YES YES YES SSF Portable YES YES YES YES YES Pumping E SSF RCMU 0

L. System NO NO YES NO NO U-SSF Power a) System YES YES YES YES YES 0 SSF Instr.

E System NO NO NO NO YES SSF PZR.

E Heaters** YES NO NO NO NO SSF RCS Isolation NO NO YES NO NO U- Valves SSF HVAC System YES YES YES YES YES

    • When SSF pressurizer heaters are inoperable, the resulting inoperability of the SSF ASW System does NOT render other SSF systems inoperable.

SSF ASW System Provides motive force for SSF ASW suction pipe air ejector. The air ejector is needed to maintain siphon flow to the SSF HVAC service water pump, the SSF DSW pump, and the SSF ASW pump when the water level in the U2 CCW supply pipe becomes too low. If the SSF DSW pump becomes inoperable, the SSF Power System will become inoperable. Since an inoperable SSF Power System causes all other SSF subsystems to be inoperable, an inoperable SSF ASW System will also cause other SSF Subsystems to be inoperable.

Provides adequate SG cooling to reduce & maintain RCS pressure below the pressure where the SSF RC makeup pump discharge relief valve, HP-404, begins to leak flow. Therefore, full SSF RC Makeup System seal injection flow will be provided to the RC pump seals in time to prevent seal degradation or failure.

OCONEE UNITS 1, 2, &3 B 3.10.1-4 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES BACKGROUND SSF ASW pump should be operated when the diesel is operated to (continued) provide a load for the diesel. This is not a requirement for operability since the diesel could be operated to provide long term power to one or more units RC makeup pumps without operating the SSF ASW pump as long as a large load (SSF ASW pump ) is not added later (diesel desouping concern).

SSF Portable Pumping Supplies makeup water to the SSF ASW System, the SSF DSW System, and the SSF HVAC Service Water System after siphon flow / gravity flow and forced CCW flow.are lost.

SSF Power System Other SSF Systems cannot operate without receiving power from the diesel for SSF scenarios where power from U2 MFB is not available.

SSF Pressurizer Heaters Single phase RCS natural circulation flow cannot be maintained without the pressurizer heaters. The number of SSF heaters utilized is based on testing and calculations performed on a unit by unit basis to determine the minimum number of required heaters needed to overcome actual pressurizer ambient losses. Since the heaters do not have their own action statement, the SSF ASW System is declared inoperable when the heaters are inoperable.

SSF RCS Isolation Valves (HP-3, HP-4, HP-20, RC-4, RC-5, RC-6)

These valves do not have their own action statement. When they are inoperable, their corresponding SSF RC makeup system is considered inoperable.

SSF HVAC System Portions of the SSF HVAC System, consisting of the SSF Air Conditioning (AC) and Ventilation Systems support the SSF Power System OPERABILITY. The SSF AC System, which includes the HVAC service water system and AC equipment (fan motors, compressors, condensers, and coils), must be operable to support SSF Power System operability. Since an inoperable SSF Power System results in all other SSF subsystems being inoperable, an SSF HVAC System operability problem that makes the SSF Power System inoperable also results in other SSF Subsystems being inoperable.

OCONEE UNITS 1, 2, & 3 B 3.10.1-5 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES BACKGROUND The SSF AC System is designed to maintain the SSF Control Room, (continued) Computer Room, and Battery Rooms within their design temperature range. Elevated temperatures in the SSF Control Room and Computer Room could cause the SSF Power System to fail during an accident which requires operation of the SSF. The SSF AC System consists of two refrigeration circuits and an air handling unit. The requirements for the refrigeration circuits vary with outdoor air temperature. Depending on outdoor air temperature and Air Conditioning System performance, the two refrigeration circuits may not be required to support SSF power system OPERABILITY. The air handling unit is required to circulate air regardless of the number of refrigeration circuits required. Since the SSF HVAC service water pumps perform a redundant function, only one of the two are required to be operable for the SSF HVAC service water system to be considered operable. The SSF Ventilation System, which supplies outside air to the Switchgear, Pump, HVAC and Diesel Generator Rooms, is composed of the following four subsystems: Constant Ventilation, Summer Ventilation, On-line Ventilation, and Diesel Generator Engine Ventilation. These ventilation systems work together to provide cooling to the various rooms of the SSF under both standby and on-line modes. The Diesel Generator Engine Ventilation fan is required for operability of the SSF Power System. The six fans associated with the other three ventilation systems may or may not be required for SSF operability dependent upon outside air temperature. If the SSF AC System refrigeration circuits or one of the ventilation fans fail, an engineering evaluation must be performed to determine if any of the SSF Systems or instrumentation are inoperable.

SSF Instrumentation System SSF Instrumentation is provided to monitor RCS pressure, RCS Loop A and B temperature (hot leg and cold leg), pressurizer water level, and SG A and B water level. Indication is displayed on the SSF control panel.

APPLICABLE The SSF serves as a backup for existing safety systems to SAFETY ANALYSES provide an alternate and independent means to achieve and maintain one, two, or three Oconee units in MODE 3 with average RCS temperature > 525 0 F (unless the initiating event causes the unit to be driven to a lower temperature) for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> following a fire, a turbine building flood, sabotage, SBO, or tornado missile events (Refs. 1, 6, 7, and 8).

The OPERABILITY of the SSF is consistent with the assumptions of the Oconee Probabilistic Risk Assessment (Ref. 2). Therefore, the SSF satisfies Criterion 4 of 10 CFR 50.36 (Ref. 3).

OCONEE UNITS 1, 2, & 3 B 3.10.1-6 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES LCO The SSF Instrumentation in Table B 3.10.1-1 and the following SSF Systems shall be OPERABLE:

a. SSF Auxiliary Service Water System;
b. SSF Portable Pumping System;
c. SSF Reactor Coolant Makeup System; and
d. SSF Power System.

An OPERABLE SSF ASW System includes pressurizer heaters capable of being powered from the SSF, and an SSF ASW pump, piping, instruments, and controls to ensure a flow path capable of taking suction from the Unit 2 condenser circulating water (CCW) line and discharging into the secondary side of each SG. The minimum number of pressurizer heaters capable of being powered from the SSF is based on maintaining RCS natural circulation flow. The number of SSF controlled pressurizer heaters needed to meet this requirement is dependent upon ambient heat loss from the pressurizer and the steam leakage rate from the pressurizer. The following table provides combination of SSF controlled pressurizer heaters versus steam space leakage rates that have been previously determined to meet Operability requirements for the SSF.

This is based on an Oconee calculation, with additional margin to prevent frequent revision. Engineering Input is needed to determine if other combinations of pressurizer heaters versus steam space leakage rate are acceptable.

Unit 1 Number of Bank 2, Group B & C Maximum Allowed Pressurizer Pressurizer Heaters Available Steam Space Leakage 17 0.50 GPM 16 0.25 GPM 15 0.10 GPM 14 0.00 GPM Unit 2 Number of Bank 2, Group B & C Maximum Allowed Pressurizer Pressurizer Heaters Available Steam Space Leakage 18 0.50 GPM 17 0.25 GPM 16 0.10 GPM 15 0.00 GPM OCONEE UNITS 1, 2, & 3 B 3.10.1-7 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES LCO Unit 3 (continued) Number of Bank 2, Group B & C Maximum Allowed Pressurizer Pressurizer Heaters Available Steam Space Leakage 17 0.50 GPM 16 0.25 GPM 15 0.10 GPM 14 0.00 GPM An OPERABLE SSF Portable Pumping System includes an SSF submersible pump and a flow path capable of taking suction from the intake canal and discharging into the Unit 2 CCW line. An OPERABLE Reactor Coolant Makeup System includes an SSF RC Makeup pump, piping, instruments, and controls to ensure a flow path capable of taking suction from the spent fuel pool and discharging into the RCS. The following leakage limits are applicable for the SSF RC Makeup System to be considered OPERABLE:

Maximum Allowed Total Combined RCS Leakage for SSF RC Makeup System Operability The "maximum allowed total combined RCS leakage" is 24.7 GPM. A Unit's "total combined RCS leakage" shall be < 24.7 GPM for its corresponding SSF RC Makeup System to be considered OPERABLE.

Total Combined RCS leakage is based on "Total RCS Leakage Rate +

Quench Tank Level Increase + Total RC Pump Seal Return Flow." Total RC Pump Seal Return Flow is determined by summing the seal return flow rate for all four RC Pumps. If the seal return flow rate for a RC Pump is not available, 3.35 GPM may be used as the seal return flow rate for the affected pump. This worst case seal leakage occurs when two seal stages are failed with the third seal stage leaking maximum outflow to the leakage system.

An OPERABLE SSF Power System includes the SSF DG, diesel support systems, 4160 VAC, 600 VAC, 208 VAC, 120 VAC, and 125 VDC systems. Only one 125 VDC SSF battery and its associated charger are required to be OPERABLE to support OPERABILITY of the 125 VDC system.

OCONEE UNITS 1, 2, & 3 B 3.10.1-8 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES (continued)

APPLICABILITY The SSF System is required in MODES 1, 2, and 3 to provide an alternate means to achieve and maintain, the unit in MODE 3 with average RCS temperature _>525 0 F (unless the initiating event causes the unit to be driven to a lower temperature) following a fire, turbine building flood, sabotage, SBO and tornado missile events. The safety function of the SSF is to achieve and maintain the unit in MODE 3 with average RCS temperature > 525 0 F (unless the initiating event causes the unit to be driven to a lower temperature); therefore, this LCO is not applicable in MODES 4, 5, or 6.

ACTIONS The exception for LCO 3.0.4, provided in the Note of the Actions, permits entry into MODES 1, 2, and 3 with the SSF not OPERABLE. This is acceptable because the SSF is not required to support normal operation of the facility or to mitigate a design basis accident.

A.1, B.1, C.1, D.1, and E.1 With one or more of the SSF Systems inoperable or the required SSF instrumentation of Table B 3.10.1-1 inoperable, the SSF is in a degraded condition and the system(s) or instrumentation must be restored to OPERABLE status within 7 days. The 7 day Completion Time is based on the low probability of an event occurring which would require the SSF to be utilized.

F. 1 If the Required Action and associated Completion Time of Condition A, B, C, D, or E are not met when SSF Systems or Instrumentation are inoperable due to maintenance, the unit may continue to operate provided that the SSF is restored to OPERABLE status within 45 days from discovery of initial inoperability.

This Completion Time is modified by a Note that indicates that the SSF shall not be in Condition F for more than a total of 45 days in a calendar OCONEE UNITS 1, 2, & 3 B 3.10.1-9 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES ACTIONS F.1 (continued) year. This includes the 7 day Completion Time that leads to entry into Condition F. For example, if the SSF ASW System is inoperable for 10 days, the 45 day special inoperability period is reduced to 35 days. If the SSF ASW System is inoperable for 6 days, Condition A applies and there is no reduction in the 45 day allowance. The limit of 45 days per calendar year minimizes the number and duration of extended outages associated with exceeding the 7 day Completion Time of a Condition.

G.1 and G.2 If the Required Action and associated Completion Time of Condition F are not met or if the Required Action and associated Completion Time of Condition A, B, C, D, or E are not met for reasons other than Condition F, the unit must be brought to a MODE in which the LCO does not apply.

To achieve this status, the plant must be brought to MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and MODE 4 within 84 hours9.722222e-4 days <br />0.0233 hours <br />1.388889e-4 weeks <br />3.1962e-5 months <br />. The allowed Completion Times are appropriate, to reach the required unit conditions from full power conditions in an orderly manner and without challenging plant systems, considering a three unit shutdown may be required.

SURVEILLANCE SR 3.10.1.1 REQUIREMENTS Performance of the CHANNEL CHECK for each required instrumentation channel ensures that a gross failure of instrumentation has not occurred.

A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel with a similar parameter on other channels. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the two instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. A CHANNEL CHECK will detect gross channel failure; therefore, it is key in verifying that the instrumentation continues to operate properly between each CHANNEL CALIBRATION. This SR is modified by a Note to indicate that it is not applicable to the SSF RCS temperature instrument channels, which are common to the RPS RCS temperature instrument channels and are normally aligned through a transfer isolation device to each Unit control room. The instrument string to the SSF control room is checked and calibrated periodically per the Surveillance Frequency Control Program.

Agreement criteria are determined based on a combination of the channel instrument uncertainties, including indication and readability. If a OCONEE UNITS 1, 2, & 3 B 3.10.1-10 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.1 (continued)

REQUIREMENTS channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limit. If the channels are within the criteria, it is an indication that the channels are OPERABLE. If the channels are normally off scale during times when surveillance is required, the CHANNEL CHECK will only verify that they are off scale in the same direction. Off scale low current loop channels are verified to be reading at the bottom of the range and not failed downscale.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.2 Verifying battery terminal voltage while on float charge for the batteries helps to ensure the effectiveness of the charging system and the ability of the batteries to perform their intended function. Float charge is the condition in which the charger is supplying the continuous charge required to overcome the internal losses of a battery (or battery cell) and maintain the battery (or a battery cell) in a fully charged state. The voltage requirements are based on the nominal design voltage of the battery and are consistent with the initial voltages assumed in the battery sizing calculations. The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.3 and 3.10.1.4 SR 3.10.1.3 provides verification that the level of fuel oil in the day tank is at or above the level at which fuel oil is automatically added. The level is expressed as an equivalent volume in gallons. The day tank is sized based on the amount of fuel oil required to successfully start the DG and to allow for orderly shutdown of the DG upon loss of fuel oil from the main storage tank.

SR 3.10.1.4 provides verification that there is an adequate inventory of fuel oil in the storage tanks to support SSF DG operation for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> at full load. The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> period is sufficient time to place the unit in a safe shutdown condition The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program during this period.

OCONEE UNITS 1, 2, & 3 B 3.10.1-11 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.5 REQUIREMENTS (continued) The SR requires the DG to start (normal or emergency) from standby conditions and achieve required voltage and frequency. Standby conditions for a DG means that the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations. This SR is modified by a Note to indicate that all DG starts for this Surveillance may be preceded by an engine prelube period and followed by a warmup period prior to loading. This minimizes wear on moving parts that do not get lubricated when the engine is running.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.6 This Surveillance ensures that sufficient air start capacity for the SSF DG is available, without the aid of the refill compressor. The SSF DG air start system is equipped with four air storage tanks. Each set of two tanks will provide sufficient air to start the SSF DG a minimum of three successive times without recharging. The pressure specified in this SR is intended to reflect the lowest value at which the three starts can be accomplished.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.7 This Surveillance demonstrates that the fuel oil transfer pump automatically starts and transfers fuel oil from the underground fuel oil storage tank to the day tank. This is required to support continuous operation of SSF DG. This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer systems are OPERABLE.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

OCONEE UNITS 1, 2, & 3 B 3.10.1-12 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.8 REQUIREMENTS (continued) A sample of fuel oil is required to be obtained from the SSF day tank and underground fuel oil storage tank in accordance with the Diesel Fuel Oil Testing Program in order to ensure that fuel oil viscosity, water, and sediment are within the limits of the Diesel Fuel Oil Testing Program.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.9 This Surveillance verifies that the SSF DG is capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads. A minimum run time of 60 minutes is required to stabilize electrical loads, while minimizing the time that the DG is connected to the offsite source.

Although no power factor requirements are established by this SR, the DG is normally operated at a power factor between 0.8 lagging and 1.0.

The 0.8 value is the design rating of the machine, while the 1.0 is an operational limitation to ensure circulating currents are minimized. The load band is provided to avoid routine overloading of the DG. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

This SR is modified by three Notes. Note 1 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized. Note 2 states that momentary transients because of changing bus loads do not invalidate this test. Similarly, momentary power factor transients above the limit will not invalidate the test. Note 3 indicates that all DG starts for this Surveillance may be preceded by an engine prelube period and followed by a warmup period prior to loading.

This minimizes wear on moving parts that do not get lubricated.

OCONEE UNITS 1, 2, & 3 B 3.10.1-13 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.10 REQUIREMENTS (continued) Visual inspection of the battery cells, cell plates, and battery racks provides an indication of physical damage or abnormal deterioration that could potentially degrade battery performance.

The presence of physical damage or deterioration does not necessarily represent a failure of this SR, provided an evaluation determines that the physical damage or deterioration does not affect the OPERABILITY of the battery (its ability to perform its design function).

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.11 Visual inspection of battery cell to cell and terminal connections provides an indication of physical damage that could potentially degrade battery performance. The anti-corrosion material is used to help ensure good electrical connections and to reduce terminal deterioration. The visual inspection for corrosion is not intended to require removal of and inspection under each terminal connection.

The limits established for this SR must be no more than 20% above the resistance as measured during installation or not above the ceiling value established by the manufacturer.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

OCONEE UNITS 1, 2, & 3 B 3.10.1-14 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.12 REQUIREMENTS (continued) A battery service test is a special test of the battery capability, as found, to satisfy the design requirements (battery duty cycle) of the DC electrical power system. The discharge rate and test length correspond to the design duty cycle requirements. The design basis discharge time for the SSF battery is one hour.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.13 CHANNEL CALIBRATION is a complete check of the instrument channel, including the sensor. The test verifies that the channel responds to a measured parameter within the necessary range and accuracy.

CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift to ensure that the instrument channel remains operational between successive tests. CHANNEL CALIBRATION shall find that measurement errors and bistable setpoint errors are within the assumptions of the setpoint analysis. CHANNEL CALIBRATIONS must be performed consistent with the assumptions of the setpoint analysis.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.1.14 Inservice Testing of the SSF valves demonstrates that the valves are mechanically OPERABLE and will operate when required. These valves are required to operate to ensure the required flow path.

The specified Frequency is in accordance with the IST Program requirements. Operating experience has shown that these components usually pass the SR when performed at the IST Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

OCONEE UNITS 1, 2, & 3 B 3.10.1-15 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 BASES SURVEILLANCE SR 3.10.1.15 REQUIREMENTS (continued) This SR requires the SSF pumps to be tested in accordance with the IST Program. The IST verifies the required flow rate at a discharge pressure to verify OPERABILITY. The SR is modified by a note indicating that it is not applicable to the SSF submersible pump.

The specified Frequency is in accordance with the IST Program requirements. Operating experience has shown that these components usually pass the SR when performed at the IST Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

SR 3.10.1.16 This SR requires the SSF submersible pump to be tested on a 2 year Frequency and verifies the required flow rate at a discharge pressure to verify OPERABILITY.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

REFERENCES 1. UFSAR, Section 9.6.

2. Oconee Probabilistic Risk Assessment.
3. 10 CFR 50.36.
4. IEEE-450-1987.
5. Regulatory Guide 1.9, Rev. 0, December 1974.
6. NRC Letter from L. A. Wiens to H. B. Tucker, "Safety Evaluation Report on Effect of Tornado Missiles on Oconee Emergency Feedwater System," dated July 28, 1989.
7. NRC Letter from L. A. Wiens to J. W. Hampton, "Safety Evaluation for Station Blackout (10 CFR 50.63) - Oconee Nuclear Station, Units 1, 2, and 3," dated March 10, 1992.

OCONEE UNITS 1, 2, & 3 B 3.10.1-16 BASES REVISION DATED 10/23/12 1

SSF B 3.10.1 BASES REFERENCES 8. NRC Letter from L. A. Wiens to J. W. Hampton, "Supplemental (continued) Safety Evaluation for Station Blackout (10 CFR 50.63) - Oconee Nuclear Station, Units 1, 2, and 3," dated December 10, 1992.

OCONEE UNITS 1, 2, & 3 B 3.10.1-17 BASES REVISION DATED 10/23/12 I

SSF B 3.10.1 Table B 3.10.1-1 (page 1 of 1)

SSF Instrumentation FUNCTION REQUIRED CHANNELS PER UNIT

1. Reactor Coolant System Pressure 1
2. Reactor Coolant System Temperature (Tc) 1/Loop
3. Reactor Coolant System Temperature (Th) 1/Loop
4. Pressurizer Water Level 1
5. Steam Generator A & B Water Level 1/SG OCONEE UNITS 1, 2, & 3 B 3.10.1-18 BASES REVISION DATED 10/23/12 1

SSF Battery Cell Parameters B 3.10.2 B 3.10 STANDBY SHUTDOWN FACILITY B 3.10.2 Standby Shutdown Facility (SSF) Battery Cell Parameters BASES BACKGROUND This LCO delineates the limits on electrolyte temperature level, float voltage, and specific gravity for the SSF Power System batteries. A discussion of these batteries and their OPERABILITY requirements is provided in the Bases for LCO 3.10.1, "Standby Shutdown Facility (SSF)."

APPLICABLE The SSF serves as a backup for existing safety systems to provide an SAFETY ANALYSES alternate and independent means to achieve and maintain one, two, or three Oconee units in MODE 3 with average RCS temperature _> 525 0 F (unless the initiating event causes the unit to be driven to a lower temperature) for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> following a fire event, a turbine building flood, sabotage, SBO, or tornado missile events (Refs. 1, 5, 6, and 7).

The OPERABILITY of the SSF DC system is consistent with the assumptions of the Oconee Probabilistic Risk Assessment (Ref. 2).

Therefore, the SSF battery cell parameters satisfy Criterion 4 of 10 CFR 50.36 (Ref. 3).

LCO The SSF Battery cell parameters must remain within acceptable limits to ensure availability of the required SSF Power System DC power to shut down the reactor and maintain it in a safe condition after a fire, turbine building flood, sabotage, SBO, or tornado missile events. Electrolyte limits are conservatively established, allowing continued DC electrical system function even with Category A and B limits not met.

APPLICABILITY The SSF battery cell parameters are required solely for the support of the associated SSF power system battery. Therefore, battery cell parameters are only required to be met when the SSF DC power source is required to be OPERABLE. Refer to the Applicability discussion in Bases for LCO 3.10.1.

OCONEE UNITS 1, 2, & 3 B 3.10.2:1 BASES REVISION DATED 10/23/12

SSF Battery Cell Parameters B 3.10.2 BASES (continued)

ACTIONS The ACTIONS Table is modified by a Note which indicates that LCO 3.0.4 is not applicable. This is acceptable since a battery remains OPERABLE when one or more cells does not meet Category A or B limits but continues to meet Category C limits. Failure to meet Category C limits requires declaring the SSF battery inoperable.

A.1, A.2, and A.3 With one or more cells in a required SSF battery not within limits (i.e.,

Category A limits not met or Category B limits not met or Category A and B limits not met) but within the Category C limits specified in Table 3.10.2-1 in the accompanying LCO, the battery is degraded but there is still sufficient capacity to perform the intended function. Therefore, the affected battery is not required to be considered inoperable solely as a result of Category A or B limits not met, and continued operation is permitted for a limited period.

The pilot cell electrolyte level and float voltage are required to be verified to meet the Category C limits within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> (Required Action A.1). This check will provide a quick indication of the status of the remainder of the battery cells. One hour provides time to inspect the electrolyte level and to confirm the float voltage of the pilot cells. One hour is considered a reasonable amount of time to perform the required verification.

Verification that the Category C limits are met (Required Action A.2) provides assurance that during the time needed to restore the parameters to the Category A and B limits, the battery will still be capable of performing its intended function. A period of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is allowed to complete the initial verification because specific gravity measurements must be obtained for each connected cell. Taking into consideration both the time required to perform the required verification and the assurance that the battery cell parameters are not severely degraded, this time is considered reasonable.

The verification is repeated at 7 day intervals until the parameters are restored to Category A and B limits. This periodic verification is consistent with the normal Frequency of pilot cell Surveillances.

Continued operation is only permitted for 90 days before battery cell parameters must be restored to within Category A and B limits. With the consideration that, while battery capacity is degraded, sufficient capacity exists to perform the intended function and to allow time to fully restore the battery cell parameters to normal limits, this time is acceptable prior to declaring the battery inoperable.

OCONEE UNITS 1, 2, & 3 B 3.10.2-2 BASES REVISION DATED 10/23/12 1

SSF Battery Cell Parameters B 3.10.2 BASES ACTIONS B. 1 (continued)

With the Required Action and associated Completion Time not met, or with the required SSF battery with one or more battery cell parameters outside the Category C limit for any connected cell, or with the average electrolyte temperature of representative cells falling below 60 0 F, sufficient capacity to supply the maximum expected load requirement is not assured and the SSF Power System must be declared inoperable immediately.

SURVEILLANCE SR 3.10.2.1 REQUIREMENTS This SR verifies that Category A battery cell parameters are consistent with IEEE-450 (Ref. 4), which recommends regular battery inspections including voltage, specific gravity, and electrolyte temperature of pilot cells.

The Surveillance Frequency is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.2.2 The periodic inspection of specific gravity and voltage is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

SR 3.10.2.3 This Surveillance verification that the average temperature of representative cells is > 60°F is based on operating experience, equipment reliability, and plant risk and is controlled under the Surveillance Frequency Control Program.

Lower than normal temperatures act to inhibit or reduce battery capacity.

This SR ensures that the operating temperatures remain within an acceptable operating range. This limit is based on plant specific calculations.

Table 3.10.2-1 This table delineates the limits on electrolyte level, float voltage, and specific gravity for three different categories. The meaning of each category is discussed below.

OCONEE UNITS 1, 2, & 3 B 3.10.2-3 BASES REVISION DATED 10/23/12 1

SSF Battery Cell Parameters B 3.10.2 BASES SURVEILLANCE Table 3.10.2-1 (continued)

REQUIREMENTS Category A defines the normal parameter limit for each designated pilot cell in each battery. The cells selected as pilot cells are those whose temperature, voltage and electrolyte specific gravity are considered to approximate the state of charge of the entire battery.

The Category A limits specified for electrolyte level are based on manufacturer recommendations and are consistent with the guidance in IEEE-450 (Ref. 4), with the extra 1/4 inch allowance above the high water level indication for operating margin to account for temperatures and charge effects. In addition to this allowance, footnote (a) to Table 3.10.2-1 permits the electrolyte level to be above the specified maximum level during equalizing charge, provided it is not overflowing. These limits ensure that the plates suffer no physical damage and that adequate electron transfer capability is maintained in the event of transient conditions. IEEE-450 (Ref. 4) recommends that electrolyte level readings should be made only after the battery has been at float charge for at least 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

The Category A limit specified for float voltage is _>2.13 V per cell. This value is based on a recommendation of IEEE-450 (Ref. 4), which states that prolonged operation of cells < 2.13 V can reduce the life expectancy of cells.

The Category A limit specified for specific gravity for each pilot cell is >

1.200 (0.015 below the manufacturer fully charged nominal specific gravity or a battery charging current that had stabilized at a low value). This value is characteristic of a charged cell with adequate capacity. According to IEEE-450 (Ref. 4), the specific gravity readings are based on a temperature of 77 0 F (25 0 C).

The specific gravity readings are corrected for actual electrolyte temperature and level. For each 30 F (1.67 0 C) above 77 0 F (25 0 C), 1 point (0.001) is added to the reading; 1 point is subtracted for each 3 0 F below 77 0 F. The specific gravity of the electrolyte in a cell increases with a loss of water due to electrolysis or evaporation.

Category B defines the normal parameter limits for each connected cell.

The term "connected cell" excludes any battery cell that may be jumpered out.

The Category B limits specified for electrolyte level, float voltage, and specific gravity are the same as those specified for Category A and have been discussed above. In addition, it is required that the specific gravity for each connected cell must be no less than 0.010 below the average of all OCONEE UNITS 1, 2, & 3 B 3.10.2-4 BASES REVISION DATED 10/23/12 I

SSF Battery Cell Parameters B 3.10.2 BASES SURVEILLANCE TABLE 3.10.2-1 (continued)

REQUIREMENTS connected cells. This limit ensures that the effect of a highly charged or new cell does not mask overall degradation of the battery.

Category C defines the limits for each connected cell. These values, although reduced, provide assurance that sufficient capacity exists to perform the intended function and maintain a margin of safety. When any battery parameter is outside the Category C limits, the assurance of sufficient capacity described above no longer exists and the battery must be declared inoperable.

The Category C limits specified for electrolyte level (above the top of the plates and not overflowing) ensure that the plates suffer no physical damage and maintain adequate electron transfer capability. The Category C limits for float voltage is based on IEEE-450 (Ref. 4), which states that a cell voltage of 2.07 V or below, under float conditions and not caused by elevated temperature of the cell, indicates internal cell problems and may require cell replacement.

The Category C limit for specific gravity is the same as that specified for Category A and has been discussed above.

The footnotes to Table 3.10.2-1 are applicable to Category A, B, and C specific gravity. Footnote (b) to Table 3.10.2-1 requires the above mentioned correction for electrolyte level and temperature, with the exception that level correction is not required when battery float current is

< 2 amps on float charge. This current provides, in general, an indication of overall battery condition.

Because of specific gravity gradients that are produced during the recharging process, delays of several days may occur while waiting for the specific gravity to stabilize. A stabilized charger current is an acceptable alternative to specific gravity measurement for determining the state of charge. This phenomenon is discussed in IEEE-450 (Ref. 4). Footnote (c) to Table 3.10.2-1 allows the float (charger) current to be used as an alternate to specific gravity for up to 7 days following a battery recharge.

When battery float current is verified in lieu of specific gravity, the specific gravity of each connected cell shall be measured prior to expiration of the 7 day allowance. Within 7 days each connected cell's specific gravity must be measured to confirm the state of charge. Following a minor battery recharge (such as equalizing charge that does not follow a deep discharge) specific gravity gradients are not significant, and confirming measurements may be made in less that 7 days.

OCONEE UNITS 1, 2, & 3 B 3.10.2-5 BASES REVISION DATED 10/23/12 1

4i.

SSF Battery Cell Parameters B 3.10.2 BASES (continued)

REFERENCES 1. UFSAR, Section 9.6.

2. Oconee Probabilistic Risk Assessment.
3. 10 CFR 50.36.
4. IEEE-450-1980.
5. NRC Letter from L. A. Wiens to J. W. Hampton, "Safety Evaluation for Station Blackout (10 CFR 50.63) - Oconee Nuclear Station, Units 1, 2, and 3," dated March 10, 1992.
6. NRC Letter from L. A. Wiens to J. W. Hampton, "Supplemental Safety Evaluation for Station Blackout (10 CFR 50.63) - Oconee Nuclear Station, Units 1, 2, and 3," dated December 10, 1992.
7. NRC Letter from L. A. Wiens to H. B. Tucker, "Safety Evaluation Report on Effect of Tornado Missiles on Oconee Emergency Feedwater System," dated July 28, 1989.

OCONEE UNITS 1, 2, & 3 B 3.10.2-6 BASES REVISION DATED 10/23/12 1