ML11257A052: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(StriderTol Bot change)
 
(4 intermediate revisions by the same user not shown)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:Attachment 14 Bechtel Power Corporation Document 25402-011 -MRA-JDOI  
{{#Wiki_filter:Attachment 14 Bechtel Power Corporation Document 25402-011 -MRA-JDOI -00001, "NSSS and BOP Controls Upgrade," Revision 0 (Non-Proprietary)
-00001,"NSSS and BOP Controls Upgrade," Revision 0 (Non-Proprietary)
 
WBN UNIT 2 Construction Completion Project JOB NUMBER 25402-011 MATERIAL REQUISITION (Long Form)PURCHASE ORDER NO.69247 REQUISITION NO.25402-01 1-MRA-JDOI-00001 REVISION 000 Material:
WBN UNIT 2 Construction Completion Project                             PURCHASE ORDER NO.
NSSS and SOP Controls Upgrade EDCR 62378, 62671 Quality Related Cost Code: 000CXARMUL1TBI0 Required Delivery Date: Per original order (if necessary) (if necessary)
69247 JOB NUMBER 25402-011 MATERIAL REQUISITION                                     REQUISITION NO.
SUPPLIER QUALITY SURVEILLANCE REQUIREMENTS Audit of Supplier Required (to be coordinated with Supplier Quality Department) (Nuclear only -leave blank for Fossil or check "No")0 None 3. Full Scope [] Yes x I Final Only 4 Resident 2 Limited Scope 71X INo OechWl Confldenfah 0 Bechtel Power Corporatlon 2005. Contalns confidential andfor proprietary Information to Bechtel end Its offiliated companies which shal hot be used. disclosed, or reproduced In any format by any non-Bechtel party without Bechters pitor w~itten permlsslon.
25402-01 1-MRA-JDOI-00001 (Long Form)
All rights reserved.ThI, document Is prepared hcluaboLveIy for"VA In conneoton wllh WattS Bar Unit 2 Construetion Completion Projuot and is not to be relied upon by othear or used In conneotlon with any other project 000 Issued for quote for Contract fu---Supplement #0 Rev. Date Reason for Revision By Check EGS PSQS PQAM PEMIEM Page I  
REVISION 000 Material:             NSSS and SOP Controls Upgrade EDCR 62378, 62671 Quality Related Cost Code: 000CXARMUL1TBI0                                                             Required Delivery Date: Per original order (if necessary)                                                                         (if necessary)
-r Requisition Number: 25402-011-MRA-JDOI-00001 Revision:
SUPPLIER QUALITY SURVEILLANCE REQUIREMENTS                                                       Audit of Supplier Required (to be coordinated with Supplier Quality Department)                                   (Nuclear only - leave blank for Fossil or check "No")
000 TABLE OF CONTENTS Section 1.0 General Requirements Section 2.0 Specific Requirements Section 3.0 Quality Requirements Section 4.0 Inspection and Testing Section 5.0 Special Requirements APPENDICES Appendix A- Supplier Deviation Disposition Request ATTACHMENTS Attachment 1- Request for Approval, Noncompeted Contracts or Supplements Attachment 2- Section QR-1.6-3 of PNQAM Project Nuclear Quality Assurance Manual, Rev. 2 Attachment 3 -Quality Surveillance Plan Attachment 4- TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification", Revision 1* Beentel Pomwr Corporation 2008. Contains ronfldentlal andlor proprietary informalon to Bechtel and its affiliated companies which shall not be used, discosed.
0 None                                           3. Full Scope                                       []       Yes x       I   Final Only                                   4   Resident 2   Limited Scope                                                                                   71X INo OechWl Confldenfah 0 Bechtel Power Corporatlon 2005. Contalns confidential andfor proprietary Information to Bechtel end Its offiliated companies which shal hot be used. disclosed, or reproduced In any format by any non-Bechtel party without Bechters pitor w~itten permlsslon. All rights reserved.
or reproduced in any format by any non-Beitel party without Bechtel's pror written permission.
ThI, document Is prepared hcluaboLveIy for "VA Inconneoton wllh WattS Bar Unit 2 Construetion Completion Projuot and is not to be relied upon by othear or used Inconneotlon with any other project 000                   Issued for quote for Contract                                                               fu
All rights reserved.This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by odhers or used in connection with any other projed, Requisition Number: 25402-011-MRA-JD01  
                            - - - Supplement                   H**6/ #0 Rev.     Date             Reason for Revision                       By         Check           EGS       PSQS         PQAM         PEMIEM Page I
-00001 Revision.
 
000 Section 1.0 General Requirements Number Quantity Description Unit Extension Price 1.01 1 lot Controls and Monitoring equipment for the Auxiliary Control Room as defined by attached WBN Unit 2 NSSS and BOP Controls Upgrade Specification, Revision 1, Section 15 (CAT ID CND285Y)Section 2.0 Specific Requirements 2.1 System Requirements This material requisition adds additional equipment to an existing order placed with Invensys Process Systems (Foxboro).
                                                                                                          -r Requisition Number: 25402-011-MRA-JDOI-00001 Revision: 000 TABLE OF CONTENTS Section 1.0 General Requirements Section 2.0 Specific Requirements Section 3.0 Quality Requirements Section 4.0 Inspection and Testing Section 5.0 Special Requirements APPENDICES Appendix A- Supplier Deviation Disposition Request ATTACHMENTS - Request for Approval, Noncompeted Contracts or Supplements - Section QR-1.6-3 of PNQAM Project Nuclear Quality Assurance Manual, Rev. 2 - Quality Surveillance Plan - TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification", Revision 1
Refer to the attached specification for technical requirements.
* Beentel Pomwr Corporation 2008. Contains ronfldentlal andlor proprietary informalon to Bechtel and its affiliated companies which shall not be used, discosed. or reproduced in any format by any non-Beitel party without Bechtel's pror written permission. All rights reserved.
2.2 Additional Requirements ( t n t4 t Supplier shall provide all documents as specified in the specification, section 2.8.3.2.3 Seismic Requirements Refer to specification section 2.8.3.1 for seismic requirements.
This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by odhers or used in connection with any other projed,
Section 3.0 Quality Requirements 3.1 Supplier QA 3.1.1 Items are Quality Related. Supplier shall comply with requirements per Attachment 2, section QR-1 .6-3, Quality Assurance Program for Seismic Il/I Items of PNQAM, Project Nuclear Quality Assurance Manual.3.1.2 If not on the ASL or ESL, supplier shall submit evidence (e.g., QA Plan) that defines how Sec. 3.1.1 will be implemented.
 
3.1.3 Supplier is required to generate a Supplier Deviation Disposition Request (SDDR) for any deviation to procurement document requirements.
Requisition Number: 25402-011-MRA-JD01 -00001 Revision. 000 Section 1.0 General Requirements Number         Quantity                                                     Description                                                     Unit       Extension Price 1.01           1 lot         Controls and Monitoring equipment for the Auxiliary Control Room as defined by attached WBN Unit 2 NSSS and BOP Controls Upgrade Specification, Revision 1, Section 15 (CAT ID CND285Y)
The completed SDDR shall be forwarded to the Contractor for review and processing.
Section 2.0               Specific Requirements 2.1 System Requirements This material requisition adds additional equipment to an existing order placed with Invensys Process Systems (Foxboro). Refer to the attached specification for technical requirements.
The supplier is also required to describe in the SODR the recommended disposition based on appropriate analysis.3.1.4 Supplier shall supply a Certificate of Conformance stating that all requirements given in the procurement documents have been met.Section 4.0 Inspection and Testing 4.1 Receiving Inspection C Bechtel Power Corporation 20%8 Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechters pnor written permission.
2.2 Additional Requirements                                           (       t       n                                     t4 t Supplier shall provide all documents as specified in the specification, section 2.8.3.
All rights reserved This document is prepared exclusively for TVA in connection wth Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.
2.3 Seismic Requirements Refer to specification section 2.8.3.1 for seismic requirements.
Requisition Number: 25402-011-MRA-JDOI-00001 Revision:
Section 3.0               Quality Requirements 3.1 Supplier QA 3.1.1 Items are Quality Related. Supplier shall comply with requirements per Attachment 2, section QR-1 .6-3, Quality Assurance Program for Seismic Il/I Items of PNQAM, Project Nuclear Quality Assurance Manual.
000 4.1.1 Items procured shall be examined, upon receipt at the plant site, for identification, quantity, damage, and presence of appropriate documentation.
3.1.2 If not on the ASL or ESL, supplier shall submit evidence (e.g., QA Plan) that defines how Sec. 3.1.1 will be implemented.
Items meeting any of the following conditions shall be treated as nonconforming:
3.1.3 Supplier is required to generate a Supplier Deviation Disposition Request (SDDR) for any deviation to procurement document requirements. The completed SDDR shall be forwarded to the Contractor for review and processing. The supplier is also required to describe in the SODR the recommended disposition based on appropriate analysis.
: a. Items having physical defects.b. Errors in quality verification documentation, which indicate that the material does not conform to the technical or quality requirements of the procurement documents.
3.1.4 Supplier shall supply a Certificate of Conformance stating that all requirements given in the procurement documents have been met.
: c. Documentation required to be at the plant site missing at the time of receipt of the item.4.2 Testing Requirements 4.2.1 System shall undergo testing in accordance with the specification, section 3. 11.4.2.2 Test procedures and results shall be submitted for all tests per specification section 2.8.3.Section 5.0 Special Requirements 5.1 Delivery and Storage 5.1.1 Materials shall at all times be kept clean and protected from the weather or other contaminants and shall be free from excessive scale and rust.5.1.2 Supplier shall prepare all material and articles for shipment in such a manner as to facilitate handling and to protect them from damage in transit, and shall be responsible for and make good any and all damage due to improper preparation or loading for shipment.5.1.3 All loose min scale, rust, oil, grease, chalk, crayon, paint marks and other deleterious material shall be removed from the surfaces.
Section 4.0               Inspection and Testing 4.1 Receiving Inspection C Bechtel Power Corporation 20%8 Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechters pnor written permission. All rights reserved This document is prepared exclusively for TVA in connection wth Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.
At the time of shipment the system shall be clean.5.1.4 Supplier shall mark each piece, bundle or container in each shipment with the Bechtel contract number and other items of identification and shall furnish copies of shipping bills or memoranda for each shipment giving the contract number, description, number of pieces, total weight and, if shipped by railroad freight, the car initials and number.5.1.5 Supplier shall be responsible for the preparation of all equipment to facilitate handling and to protect it from damage in transit and storage.5.1.6 All finished surfaces shall be protected to preclude damage due to moisture or foreign material.
 
All tapped openings shall be plugged or otherwise adequately protected.
Requisition Number: 25402-011-MRA-JDOI-00001 Revision: 000 4.1.1 Items procured shall be examined, upon receipt at the plant site, for identification, quantity, damage, and presence of appropriate documentation. Items meeting any of the following conditions shall be treated as nonconforming:
Flanged openings shall be protected using solid materials such as wood or metal bolted in place.C Bechtel Power Corporation 2008. Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used, disclosed.
: a. Items having physical defects.
or reproduced in any format by any non-Bechtel party without Bechtel's prior wrtten permission.
: b. Errors in quality verification documentation, which indicate that the material does not conform to the technical or quality requirements of the procurement documents.
Al rights reserved This document is prepared exclusively tor TVA in connection with Wats Bar Unit 2 construcilon Completion Project and is not to be relied upon by others or used in connecton with any other project.
: c. Documentation required to be at the plant site missing at the time of receipt of the item.
Requisition Number: 25402-011-MRA-JD01-00001 Revision:
4.2 Testing Requirements 4.2.1 System shall undergo testing in accordance with the specification, section 3. 11.
000 Appendix A Supplier Deviation Disposition Request C Bechtel Power CorporAon 2008. Contains confidential and/or proprietary information to Bechtel and ris afSiated companies which shall not be used, disclosed, or reproduced in any frmato by any non-Bechtel partyvAtuout Becnters pnorwntten permission.
4.2.2 Test procedures and results shall be submitted for all tests per specification section 2.8.3.
All rights reserved.This document is prepared excusively for IVA in connection with Wadis Bar Unit 2 Cnenttction Completion Project and is not to be retied upon by others or used in connection with any other project.
Section 5.0               Special Requirements 5.1 Delivery and Storage 5.1.1 Materials shall at all times be kept clean and protected from the weather or other contaminants and shall be free from excessive scale and rust.
EXHIBIT A SUPPLIER DEVIATION DISPOSITION REQUEST NOTES: 1. COMPLETE INSTRUCTIONS ON BACK OF THIS SHEET 2. 1iami 1-13 below to be completed by supplier 3.
5.1.2 Supplier shall prepare all material and articles for shipment in such a manner as to facilitate handling and to protect them from damage in transit, and shall be responsible for and make good any and all damage due to improper preparation or loading for shipment.
* hnems, echtel emneoe only 4. Nonapplicabte Items to be marked 'WA" 8. Attuh additional Infomatsion whenever n4eeaga 6. Bech-l must be notfimd within l days after detection of deviaton 7. A copy of the completed SOOD form s hall be included by the SupplieW in the Quality verification data package for each item to which this SODN applies.FOR SUPPUER USE PROJEcTFOR BECHTEL USE SUPPLIEAmaiDnRO.
5.1.3 All loose min scale, rust, oil, grease, chalk, crayon, paint marks and other deleterious material shall be removed from the surfaces. At the time of shipment the system shall be clean.
DATE sUSM-rrTED JOSBE CHELS NO .OATE RMECEneD 1. Supplier Narme AdaI city £ sate Zip 2. Supplada Order No. 3. Pat No. 4 Suppiers Name a. Deviaes Detected 6. AH un s &0D1e iNumboro & Dolin)0e112 7. Be~ch P.O. £ Rue. NMo 8. Beclhtl Pan No. a. Bchel Pant Name 10. BechtelsONotImod
5.1.4 Supplier shall mark each piece, bundle or container in each shipment with the Bechtel contract number and other items of identification and shall furnish copies of shipping bills or memoranda for each shipment giving the contract number, description, number of pieces, total weight and, if shipped by railroad freight, the car initials and number.
: 11. Behtl Brig, Notilad D IrdAxamd Dub Ie~~12. Deviation De1licliplion (Anwr.h ýZ Ih*M.s iphtotoghlk oskefth. ftS. anecessay and Wdonly *lpntnity, andl mdal numberp as alp tilale)113.Suyipawu Proposed Okpepealon.
5.1.5 Supplier shall be responsible for the preparation of all equipment to facilitate handling and to protect it from damage in transit and storage.
UwAa'e Repair fj Modifyr So~te Raapshwmetn 14Vest upact 15. Schedue Ikepct 6.IPropoaed Diapoeo end Tactnkal (pls Coseiflhedaue if applicbin)
5.1.6 All finished surfaces shall be protected to preclude damage due to moisture or foreign material. All tapped openings shall be plugged or otherwise adequately protected. Flanged openings shall be protected using solid materials such as wood or metal bolted in place.
Juetiscalm:
C Bechtel Power Corporation 2008. Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used, disclosed. or reproduced in any format by any non-Bechtel party without Bechtel's prior wrtten permission. Al rights reserved This document is prepared exclusively tor TVA in connection with Wats Bar Unit 2 construcilon Completion Project and is not to be relied upon by others or used in connecton with any other project.
 
Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Appendix A Supplier Deviation Disposition Request C Bechtel Power CorporAon 2008. Contains confidential and/or proprietary information to Bechtel and risafSiated companies which shall not be used, disclosed, or reproduced in any frmatoby any non-Bechtel partyvAtuout Becnters pnorwntten permission. Allrights reserved.
This document is prepared excusively for IVA in connection with Wadis Bar Unit 2 Cnenttction Completion Project and is not to be retied upon by others or used in connection with any other project.
 
EXHIBIT A SUPPLIER DEVIATION DISPOSITION REQUEST NOTES:
: 1. COMPLETE INSTRUCTIONS ON BACK OF THIS SHEET                             8. Attuh additional Infomatsion whenever n4eeaga
: 2. 1iami 1-13 below to be completed by supplier                             6. Bech-l must be notfimd within l days after detection of deviaton
: 3.
* hnems, echtel emneoe only                                             7. A copy of the completed SOOD form s hall be included by the SupplieW in the
: 4. Nonapplicabte Items to be marked 'WA"                                       Quality verification data package for each item to which this SODN applies.
FOR SUPPUER USE                            PROJEcTFOR                                                BECHTEL USE SUPPLIEAmaiDnRO.                 DATE sUSM-rrTED        JOSBE                                                        CHELS      NO.            OATE RMECEneD
: 1. Supplier Narme                                AdaI                                              city £ sate                                    Zip
: 2. Supplada Order No.                 3. supp*a*'  Pat No.           4 Suppiers Pat* Name                   a. Deviaes Detected           6. AH un s&0D1e iNumboro &Dolin) 0e112
: 7. Be~ch P.O. £ Rue. NMo             8. Beclhtl Pan No.              a. Bchel Pant Name                    10. BechtelsONotImod          11. Behtl Brig, Notilad D      IrdAxamd        Dub            Ie~~
: 12. Deviation De1licliplion (Anwr.h ýZ Ih*M.s iphtotoghlk oskefth. ftS.anecessay and Wdonly lpntnity, andl mdal numberp as alp tilale) 113.Suyipawu Proposed Okpepealon.                       UwAa'e                               Repair               fj       Modifyr So~te Raapshwmetn 14Vest upact                                                                             15. Schedue Ikepct 6.IPropoaed Diapoeo end Tactnkal (pls Coseiflhedaue if applicbin) Juetiscalm:
Allach extra sheets, satkihn ae., a- neceassay.
Allach extra sheets, satkihn ae., a- neceassay.
117.Associsald Stpplier Dwuvuent Changele)11$.6upleli' Auftiteed Representa*$, --Nara 'I sinture Title I,.- Oftc. -20. l Dapoueon Stalefni Includng Juel#ca.lo lAmh e as sals, a alea hea , t tc. aas peaury), Ooaabuciacos Actina Requited YE NO~ I ''21. RacJal)VipoatoApprevttgiabnev Dat. 22L Suppflau Date REG: '2& Becbtal Supplier Quality Repurmnuuteve Date PERtEW I INSTRUCTIONS FOR COMPLETING SDDR FORM This form is to be used by a supplier to: Electronic documents, once printed, are uncontrolled and may become outdated.Refer to the electronic documents in TVA Business Support Ubrary (BSL) for curent revision.Bechtel Confidentlal S Bechtel CorporaUon 2000. 2001, 2004, 2006. All rights reserved.25402-30P-GQOG-00012-000 PAGE 1 of2 a) Notify Bechtel when manufactured product or service does root meet established contract requirements and to document the supplier's proposed disposition, with their technical (and where appropriate, Cost/Schedule) justification.
117.Associsald Stpplier Dwuvuent Changele) 11$.6upleli'   Auftiteed Representa*$,         --
b) Notify Bechtel when the supplier wants to propose changes to the contract documents unanticipated at time of award.c) Record Bechtel's disposition of the SDDR.A deviation is any departure from the requirements of the procuring documents, which the supplier has Incorporated or proposes to incorporate in the completed item or service provided, Deviation disposition can be classified as Use-As-la, Repair or Modify requirement.
Nara                                 'I                                                 sinture Title                                                                   *
Repair is defined as the process of restoring a nonconforming characteristic to a condition such that the capability of an item to function reliably and safely is unimpaired, even though the item may not conform to the original requirement.
* I,.- Oftc.
Repair includes alteratloos to the properties of the material through heat-treating, welding, metal disposition, chemical processing, etc. The SDDR form is not to be used for cases where Bechtel has previously provided authorization to proceed using an accepted repair procedure covering a specific type of repair, however, records must be maintained for each specific repair.Bechtel's engineering action and disposition statement does not relieve the Supplier from responsibility for the accuracy, adequacy, or suitability of the item or service being provided as defined in the procuring documents, nor does it constitute waiver of the right to renegotiate the terms of the procuring documents.
-20.         Dapoueon l           Stalefni Includng Juel#ca.lo   lAmh e   as sals, a                 , aas peaury),
Block No. Entry Information 1 Supplier's name and address -city and state and zip. List same information for lower-tier Suppliers if applicable.
alea t heatc.
: 2. Suppliers order number If one has been assigned.3. Suppliers Part No.(s) as applicable from Ite drawing, catalog, Internal specification, etc.4. Suppliers Part Name.5. Date deviation detected and method used to dated deviation (NDE, dimensional check, visual, etc.)-6. List all previous SDDRs (and their dates) that have been submitted for similar deviations requested on this Purchase Order or Subcontract.
Ooaabuciacos Actina Requited         YE           I      'NO~
: 7. Bechtel Purchase Order Number and Revision Number.8. Bechtel Material Requisition (item, part, tag or code) numbers), 9. Bechtel Part Name, if one has been assigned.10. Date and method (TWX, letter, etc,) used Io notify the Bechtel Supplier Quality Representative (SQR) whenever Bechtel Quality Surveillance is applicable.
'21. RacJal)VipoatoApprevttgiabnev                           Dat.                       22L Suppflau                                           Date REG:
                                                                                          '2& Becbtal Supplier Quality Repurmnuuteve             Date PERtEW                                                                                                                                                                     I INSTRUCTIONS FOR COMPLETING SDDR FORM This form is to be used by a supplier to:
Electronic documents, once printed, are uncontrolled and may become outdated.
Refer to the electronic documents in TVA Business Support Ubrary (BSL) for curent revision.
Bechtel Confidentlal S Bechtel CorporaUon 2000. 2001, 2004, 2006. All rights reserved.
25402-30P-GQOG-00012-000                                                                                                                                         PAGE 1 of2
 
a)     Notify Bechtel when manufactured product or service does root meet established contract requirements and to document the supplier's proposed disposition, with their technical (and where appropriate, Cost/Schedule) justification.
b)     Notify Bechtel when the supplier wants to propose changes to the contract documents unanticipated at time of award.
c)     Record Bechtel's disposition of the SDDR.
A deviation is any departure from the requirements of the procuring documents, which the supplier has Incorporated or proposes to incorporate in the completed item or service provided, Deviation disposition can be classified as Use-As-la, Repair or Modify requirement.
Repair is defined as the process of restoring a nonconforming characteristic to a condition such that the capability of an item to function reliably and safely is unimpaired, even though the item may not conform to the original requirement. Repair includes alteratloos to the properties of the material through heat-treating, welding, metal disposition, chemical processing, etc. The SDDR form is not to be used for cases where Bechtel has previously provided authorization to proceed using an accepted repair procedure covering a specific type of repair, however, records must be maintained for each specific repair.
Bechtel's engineering action and disposition statement does not relieve the Supplier from responsibility for the accuracy, adequacy, or suitability of the item or service being provided as defined in the procuring documents, nor does it constitute waiver of the right to renegotiate the terms of the procuring documents.
Block No.                                                       Entry Information 1       Supplier's name and address - city and state and zip. List same information for lower-tier Suppliers ifapplicable.
: 2.     Suppliers order number If one has been assigned.
: 3. Suppliers Part No.(s) as applicable from Ite drawing, catalog, Internal specification, etc.
: 4. Suppliers Part Name.
: 5.     Date deviation detected and method used to dated deviation (NDE, dimensional check, visual, etc.)-
: 6.     List all previous SDDRs (and their dates) that have been submitted for similar deviations requested on this Purchase Order or Subcontract.
: 7.     Bechtel Purchase Order Number and Revision Number.
: 8.     Bechtel Material Requisition (item, part, tag or code) numbers),
: 9.     Bechtel Part Name, if one has been assigned.
: 10. Date and method (TWX, letter, etc,) used Io notify the Bechtel Supplier Quality Representative (SQR) whenever Bechtel Quality Surveillance is applicable.
: 11. Date and method (TWX, letter, etc.) used to notify Bechtel Engineering.
: 11. Date and method (TWX, letter, etc.) used to notify Bechtel Engineering.
: 12. Describe the deviating characteristics and define the extent of the out-of-specification condition for each identified piece affected.
: 12. Describe the deviating characteristics and define the extent of the out-of-specification condition for each identified piece affected. Include quantities and Serial, lot, batch, heat or other numbers as appropriate, Identify the location of the deviating characteristic by print coordinates or specific location, as applicable. Attach reproducible-ulity extra sheets. sketches, photographs, etc., as necessary.
Include quantities and Serial, lot, batch, heat or other numbers as appropriate, Identify the location of the deviating characteristic by print coordinates or specific location, as applicable.
When propoeing a change in either supplier or B*echl documenl&; desc-libl the cting.: id:-thiy           d6,uJraemants cmrplftely in*clu-dg title or subject, date and revision; and where appropriate, attach a copy of areas in question.
Attach reproducible-ulity extra sheets. sketches, photographs, etc., as necessary.
: 13. State proposed disposition.
When propoeing a change in either supplier or documenl&;
desc-libl the cting.: id:-thiy d6,uJraemants cmrplftely title or subject, date and revision; and where appropriate, attach a copy of areas in question.13. State proposed disposition.
: 14. Enter cost impact that would result from proposed changes and which will be reflected in appropriate Procurement Documents.
: 14. Enter cost impact that would result from proposed changes and which will be reflected in appropriate Procurement Documents.
: 15. Enter delivery schedule Impact that would result from proposed changes.16. Describe the proposed disposition and provide technical (and where appropriate Cost/Schedule) justificatioin for Bechtel's evaluation.
: 15. Enter delivery schedule Impact that would result from proposed changes.
Attach reproducible-quality copies whenever required.
: 16. Describe the proposed disposition and provide technical (and where appropriate Cost/Schedule) justificatioin for Bechtel's evaluation. Attach reproducible-quality copies whenever required. If the deviation is correctable by repair, submit a detail repair procedure or reference the procedure previously submitted and assigned Level I by Bechtel for use in similar situations. Provide Bechtel control number, supplier control number and procedure tie. For documents, provide suggested corrective wording, procedure, documents, etc. Provide a copy of each SDDR attachment to the Bechtel SOR at the supplier's location, if applicable.
If the deviation is correctable by repair, submit a detail repair procedure or reference the procedure previously submitted and assigned Level I by Bechtel for use in similar situations.
: 17. Identify the nature of the changes that may be needed on associated supplier documents (drawings, apace., procedures, installation Instruction, etc.).
Provide Bechtel control number, supplier control number and procedure tie. For documents, provide suggested corrective wording, procedure, documents, etc. Provide a copy of each SDDR attachment to the Bechtel SOR at the supplier's location, if applicable.
: 18. Enter the name (typed or printed), and title of the supplier representative authorizing the disposition request and appropriate signature and date signed.
: 17. Identify the nature of the changes that may be needed on associated supplier documents (drawings, apace., procedures, installation Instruction, etc.).18. Enter the name (typed or printed), and title of the supplier representative authorizing the disposition request and appropriate signature and date signed."19- Check all applicable boxes to define the action required by Bechtel Project Engineering.
"19- Check all applicable boxes to define the action required by Bechtel Project Engineering. Note: Price adjustment requires Procurement Document (Purchase Order or Subcontract) Change.
Note: Price adjustment requires Procurement Document (Purchase Order or Subcontract)
"20. Provide appropriate detailed Justification for the Bechtel action(s) indicated in block 19. When changes to drawings, specifications, requilitions, or other Bechtel documents are involved, each document should be identified and the associated change briefly described. If other suppliers are aftfcted, indicate who they are and the document that initiated resolution of that involvement, 'Other' follow-up action (e.g., the need for additional Bechtel calculations, additional drawings or sketches, inspection by a Project Engineering representative, etc.)
Change."20. Provide appropriate detailed Justification for the Bechtel action(s) indicated in block 19. When changes to drawings, specifications, requilitions, or other Bechtel documents are involved, each document should be identified and the associated change briefly described.
should also be identified here. IfConstruction action is required, so indicate.
If other suppliers are aftfcted, indicate who they are and the document that initiated resolution of that involvement, 'Other' follow-up action (e.g., the need for additional Bechtel calculations, additional drawings or sketches, inspection by a Project Engineering representative, etc.)should also be identified here. If Construction action is required, so indicate.21 .RE -Signature of the Responsible Engineer and the date signed.CheckerNerifier-Signature of the checker (If required) and the date signed, EGS -Signature of the responsible Engineering Discipline Group Supervisor accepting the Engineering action and the date signed.PE -Signature of the Bechtel Project Engineer (or designee) and the date signed.-Other position and signature(s) if required by project and date signed.22. Signature of the supplier's inspector or other representative authorzed to verify that the accepted disposition was correctly accomplished and the date signed."23. Signature of the Bechtel SQR (when an SQR Is assigned to the order) and date. This signature Indicates that the accepted disposition was correctly implemented and verified (on a random sample basis if the SDDR applies to several parts).Electronic documents, once printed, are uncontrolled and may become outdated.Refer to the electronic documents in TVA Business Support Library (BSL) for current revision.Bechtel Confidential C Bechtel Corporation 2000, 2001, 2004, 2008. All rights reserved.25402-3DP-GOBG4=1 2-000 PAGE 2 of2 Requisition Number: 25402-011 -MRA-JD01  
21 . RE - Signature of the Responsible Engineer and the date signed.
-00001 Revision:
CheckerNerifier- Signature of the checker (Ifrequired) and the date signed, EGS - Signature of the responsible Engineering Discipline Group Supervisor accepting the Engineering action and the date signed.
000 Attachment 1 Request for Approval, Noncompeted Contracts or Supplements
PE - Signature of the Bechtel Project Engineer (or designee) and the date signed.
* Bechtel Power Corporation 2008. Contains confidentis andior proprietary infonmation to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission.
          - Other position and signature(s) if required by project and date signed.
All rights reserved.This document is prepared exclusively folr TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to te relied upon by others or used in connection with any other project.
: 22. Signature of the supplier's inspector or other representative authorzed to verify that the accepted disposition was correctly accomplished and the date signed.
Request For Approval Noncompeted Contracts or Supplements (Not required if cumulative amount, including any supplement, is less than $25K)[ Sole Source Procurement Date: September 19, 2008[ Contract Supplement  
"23. Signature of the Bechtel SQR (when an SQR Is assigned to the order) and date. This signature Indicates that the accepted disposition was correctly implemented and verified (on a random sample basis if the SDDR applies to several parts).
(*) Amount: 5 Emergency Procurement Contract No.: Supplier Foxboro/Invensys Requesting Org.: Design Engineering Description of Purchase: This procurement will provide non-safety related controls and monitoring instrumentation equipment for Nuclear Steam Supply Systems and Balance of Plant Systems on Watts Bar Nuclear Plant Unit 2.The controls and monitoring instrumentation equipment shall consist of electronic distributed digital equipment to be configured as defined by the Specification.
Electronic documents, once printed, are uncontrolled and may become outdated.
The System will power instrumentation sensors, monitor process variables, provide switching outputs, provide analog control outputs, and provide process variable status for use by the operators as defined in the Specification.
Refer to the electronic documents in TVA Business Support Library (BSL) for current revision.
Bechtel Confidential C Bechtel Corporation 2000, 2001, 2004, 2008. All rights reserved.
25402-3DP-GOBG4=1 2-000                                                                                                                 PAGE 2 of2
 
Requisition Number: 25402-011 -MRA-JD01 -00001 Revision: 000 Attachment 1 Request for Approval, Noncompeted Contracts or Supplements
* Bechtel Power Corporation 2008. Contains confidentis andior proprietary infonmation to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.
This document is prepared exclusively folr TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to te relied upon by others or used in connection with any other project.
 
Request For Approval Noncompeted Contracts or Supplements (Not required ifcumulative amount, including any supplement, is less than $25K)
[   Sole Source Procurement                                                         Date:         September 19, 2008
[   Contract Supplement             (*)                                             Amount:
5 Emergency Procurement                                                             Contract No.:
Supplier       Foxboro/Invensys                                                     Requesting Org.:                 Design Engineering Description of Purchase:
This procurement will provide non-safety related controls and monitoring instrumentation equipment for Nuclear Steam Supply Systems and Balance of Plant Systems on Watts Bar Nuclear Plant Unit 2.
The controls and monitoring instrumentation equipment shall consist of electronic distributed digital equipment to be configured as defined by the Specification. The System will power instrumentation sensors, monitor process variables, provide switching outputs, provide analog control outputs, and provide process variable status for use by the operators as defined in the Specification.
Justificaton for Not Comretina Recuirement This procurement is required to purchase non-safety related controls and monitoring instrumentation equipment for WBN Unit 2 as described above. Components from the original Unit 2 controls and monitoring instrumentation systems have been used as replacement components to support Unit I operation or have been in lay-up for approximately 30 years, and therefore, Unit 2 does not have complete and functional hardware for the subject controls and monitoring instrumentation.
Justificaton for Not Comretina Recuirement This procurement is required to purchase non-safety related controls and monitoring instrumentation equipment for WBN Unit 2 as described above. Components from the original Unit 2 controls and monitoring instrumentation systems have been used as replacement components to support Unit I operation or have been in lay-up for approximately 30 years, and therefore, Unit 2 does not have complete and functional hardware for the subject controls and monitoring instrumentation.
Non-competed procurement is required for consistency and operability of equipment across the TVA Nuclear Fleet. Foxboro IA Systems have been selected as the non-safety related equipment of choice for Brown's Ferry Units 1, 2, and 3 (already installed), NSSS Controls for Sequoyah I and 2, and Watts Bar Unit 1 (contract awarded and procurement and installation approved as either future projects or projects underway.)
Non-competed procurement is required for consistency and operability of equipment across the TVA Nuclear Fleet. Foxboro IA Systems have been selected as the non-safety related equipment of choice for Brown's Ferry Units 1, 2, and 3 (already installed), NSSS Controls for Sequoyah I and 2, and Watts Bar Unit 1 (contract awarded and procurement and installation approved as either future projects or projects underway.) Operating experience with this equipment at BFN has been excellent.
Operating experience with this equipment at BFN has been excellent.
This procurement will provide Foxboro IA for controls and monitoring instrumentation for WBN Unit 2.
This procurement will provide Foxboro IA for controls and monitoring instrumentation for WBN Unit 2.The purchased control systems will be functionally and physically equivalent to the systems being used at BFN and being planned for SQN1, SQN2, and WBNI.Foxboro IA has a proven record of service in controls and monitoring instrumentation applications.
The purchased control systems will be functionally and physically equivalent to the systems being used at BFN and being planned for SQN1, SQN2, and WBNI.
The Foxboro IA equipment was selected among multiple bidders fot SQN1, SQN2, WBN1, and BFN based on competitive bidding. Use of Foxboro IA for WBN2 will have the added benefits of providing maximum Fleet flexibility in sharing trained Engineering, Operations, and Maintenance resources and material.
Foxboro IA has a proven record of service in controls and monitoring instrumentation applications.
Material sharing will have an added benefit of inventory reduction Fleet wide. In addition, in March 2007, WBN2 Design Scoping and Estimating Project requested estimates from Both Westinghouse and Foxboro/Invensys for NSSS/BOP digital control systems. Invensys was selected based on price and technical considerations.
The Foxboro IA equipment was selected among multiple bidders fot SQN1, SQN2, WBN1, and BFN based on competitive bidding. Use of Foxboro IA for WBN2 will have the added benefits of providing maximum Fleet flexibility in sharing trained Engineering, Operations, and Maintenance resources and material. Material sharing will have an added benefit of inventory reduction Fleet wide. In addition, in March 2007, WBN2 Design Scoping and Estimating Project requested estimates from Both Westinghouse and Foxboro/Invensys for NSSS/BOP digital control systems. Invensys was selected based on price and technical considerations.
The estimated pricing of this procurement is consistent with pricing of similar control systems for other TVA Nuclear applications.
The estimated pricing of this procurement is consistent with pricing of similar control systems for other TVA Nuclear applications.
© Bechtel Power Corporation 2008, Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission.
© Bechtel Power Corporation 2008, Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.
All rights reserved.This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project, Request For Approval Noncompeted Contracts or Supplements (Not required if cumulative amount, including any supplement, is less than $25K)*Additional Information Needed for Contract Supplement:
This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project,
Original Contract Award Date: 3131/08 Current Contract Amount: 1 Revised Contract Amount: Current Expiration Date: n/a Revised Expiration Date: n/a Was original contract competed?
 
Yes E No 21 Business Unit Approval*($25K to $100K)Procurement Associate/Contract Manager SVP, Procurement (If Greater than $1100K)Department Manager, Procurement
Request For Approval Noncompeted Contracts or Supplements (Not required ifcumulative amount, including any supplement, is less than $25K)
($25K to $IOOK)Business Unit Executive Committee Member (If Greater than $10OK)*Department Manager or higher depending upon BU policy.0 Bechtel Power Corporation 2008, Contains confidential and/or proprietary Information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission.
                            *Additional Information Needed for Contract Supplement:
All rights reserved.This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project, Requisition Number: 25402-011-MRA-JD01-00001 Revision:
Original Contract Award Date:                     3131/08 Current Contract Amount:                 1                                   Revised Contract Amount:
000 Attachment 2 Section QR- 1.6-3 of PNQAM Project Nuclear Quality Assurance Manual Rev. 2 a Bechtel Power Corpration 2008, Contains confidential and/or proprietary Inrfonaelon to Bechtel and its affiliated companies wich shall rot be used, disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission.
Current Expiration Date:                 n/a                                 Revised Expiration Date:                       n/a Was original contract competed?                           Yes     E         No 21 Business Unit Approval*                                                   Procurement Associate/Contract Manager
All rights reserved.This document is prepared exclusively for WA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection wilh any other project.
($25K to $100K)
Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3 Quality Assurance Program for Seismic Il/I Items 1.0 PURPOSE This policy provides guidelines for applying the Project Quality Assurance Program to the Seismic Il/I items in a nuclear power plant.NOTE: Refer to Attachment B for Watts Bar Seismic requirements.
Department Manager, Procurement                                                                   SVP, Procurement
2.0 SCOPE Seismic II! items are those portions of structures, systems, and components whose continued function is not required but whose failure caused by a safe shutdown earthquake (SSE) could reduce the functioning of a Seismic Category I structure, system, or component to an unacceptable safety level or could result in an incapacitating injury to occupants of the control room.This policy applies to project QA program formulated to satisfy NRC Regulatory Guide 1.29, "Seismic Design Classification" Regulatory Positon C.4 for items identified in C.2.3.0 GENERAL The Seismic Il/I QA Program utilize portions of the Project Nuclear QA Program to the extent necessary to satisfy the NRC Regulatory Guide requirements identified above.4,Q REQUIREMENTG 4.1 The projects Seismic 11/I QA Program shall be under the management control of the POAM.4.2 The project team, under the direction of the Project Manager, is responsible for the implementation of the Seismic 111 QA Program.4.3 Structures, systems, and components to which the Seismic I1/I QA Program applies shall be identified by Bechtel Engineering, TVA or the TVA's agent(s), depending upon project requirements.
($25K to $IOOK)                                                                   (If Greater than $1100K)
4.4 Construction is responsible for obtaining an engineering review and evaluation of field-routed items that have the potential for creating a Seismic Il/I condition.
Business Unit Executive Committee Member (If Greater than $10OK)
4.5 In addition to the requirements Identified in Attachment A, specific TVA requirements shall also apply to the Seismic II/I Items QA Program.5.0 PROGRAM APPLICABILITY Attachment A identifies the scope (policy number and degree of applicability) of the PNQAM applicable to the Seismic 111 QA Program to address the pertinent QA requirements of Appendix B to 10 CFR Part 50.6.0 A'TACHMENT Attachment A Quality Assurance Program for Seismic I/I1 Items Bechtel OR-1.6-3 Rev. 0 Page I of 1 Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3 Quality Assurance Program for Seismic Il/I Items Attachmt A REQUIREMENTS PNQAM POLICY Regulatory Guide 1.29, "Seismic Design Classification," NSR-1.6-3 C.4. 'The pertinent quality assurance requirements of The Quality Assurance Program shall be under the management of Quality Appendix B to 10 CFR Part 50 should be applied to all activities affecting the safety-related functions of those portions of structures, systems, and components covered under Regulatory Positions 2 and 3.Design Control and Procurement Document Control WBN-3.1 WBN-3.3 WBN-3.5 WBN-6.2 WBN-3.2 WBN-3.4 WBN-4.1 These policies are applicable to the extent necessary to accomplish the following:
*Department Manager or higher depending upon BU policy.
: 1. Identification of items covered by the Seismic li1t Quality Assurance Program.2. Identification of potential Seismic II/I items for engineering review and evaluation.
0 Bechtel Power Corporation 2008, Contains confidential and/or proprietary Information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.
This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project,
 
Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Attachment 2 Section QR- 1.6-3 of PNQAM Project Nuclear Quality Assurance Manual Rev. 2 a Bechtel Power Corpration 2008, Contains confidential and/or proprietary Inrfonaelon to Bechtel and its affiliated companies wich shall rot be used, disclosed, or reproduced inany format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.
This document is prepared exclusively for WA inconnection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection wilh any other project.
 
Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3     Quality Assurance Program for Seismic Il/I Items 1.0   PURPOSE This policy provides guidelines for applying the Project Quality Assurance Program to the Seismic Il/I items in a nuclear power plant.
NOTE: Refer to Attachment B for Watts Bar Seismic requirements.
2.0   SCOPE Seismic II! items are those portions of structures, systems, and components whose continued function is not required but whose failure caused by a safe shutdown earthquake (SSE) could reduce the functioning of a Seismic Category Istructure, system, or component to an unacceptable safety level or could result in an incapacitating injury to occupants of the control room.
This policy applies to project QA program formulated to satisfy NRC Regulatory Guide 1.29, "Seismic Design Classification" Regulatory Positon C.4 for items identified in C.2.
3.0   GENERAL The Seismic Il/I QA Program utilize portions of the Project Nuclear QA Program to the extent necessary to satisfy the NRC Regulatory Guide requirements identified above.
4,Q   REQUIREMENTG 4.1   The projects Seismic 11/I QA Program shall be under the management control of the POAM.
4.2   The project team, under the direction of the Project Manager, is responsible for the implementation of the Seismic 111 QA Program.
4.3   Structures, systems, and components to which the Seismic I1/I QA Program applies shall be identified by Bechtel Engineering, TVA or the TVA's agent(s), depending upon project requirements.
4.4   Construction is responsible for obtaining an engineering review and evaluation of field-routed items that have the potential for creating a Seismic Il/I condition.
4.5   Inaddition to the requirements Identified inAttachment A, specific TVA requirements shall also apply to the Seismic II/I Items QA Program.
5.0   PROGRAM APPLICABILITY Attachment A identifies the scope (policy number and degree of applicability) of the PNQAM applicable to the Seismic 111   QA Program to address the pertinent QA requirements of Appendix B to 10 CFR Part 50.
6.0   A'TACHMENT Attachment A             Quality Assurance Program for Seismic I/I1 Items Bechtel                       OR-1.6-3                     Rev. 0                   Page I of 1
 
Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3         Quality Assurance Program for Seismic Il/I Items Attachmt A REQUIREMENTS                                                               PNQAM POLICY Regulatory Guide 1.29, "Seismic Design Classification,"       NSR-1.6-3 C.4. 'The pertinent quality assurance requirements of         The Quality Assurance Program shall be under the management of Quality Appendix B to 10 CFR Part 50 should be applied to all activities affecting the safety-related functions of those portions of structures, systems, and components covered under Regulatory Positions 2 and 3.
Design Control and Procurement Document Control                 WBN-3.1             WBN-3.3           WBN-3.5                 WBN-6.2 WBN-3.2             WBN-3.4           WBN-4.1 These policies are applicable to the extent necessary to accomplish the following:
: 1. Identification of items covered by the Seismic li1t Quality Assurance Program.
: 2. Identification of potential Seismic II/I items for engineering review and evaluation.
: 3. Incorporation of design bases and regulatory requirements in design documents.
: 3. Incorporation of design bases and regulatory requirements in design documents.
: 4. Control of design document changes equivalent to those applied to original documents.
: 4. Control of design document changes equivalent to those applied to original documents.
: 5. Incorporating or referencing applicable technical and quality assurance requirements in procurement documents.
: 5. Incorporating or referencing applicable technical and quality assurance requirements in procurement documents.
: 6. Controlled release and distribution of design and procurement documents to ensure that activities are performed to current and authorized documents.
: 6. Controlled release and distribution of design and procurement documents to ensure that activities are performed to current and authorized documents.
Bechtel QR-1.6-3 Attachment A Rev. 0 Page I of 4 Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Instructions, Procedures, and Drawings WBN-5.1 This policy is applicable to the extent necessary to accomplish the following:
Bechtel                                         QR-1.6-3               Attachment A                       Rev. 0                       Page I of 4
 
Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS                                                             PNQAM POLICY Instructions, Procedures, and Drawings                     WBN-5.1 This policy is applicable to the extent necessary to accomplish the following:
: 1. Instructions and procedures pertaining to this program shall be identified.
: 1. Instructions and procedures pertaining to this program shall be identified.
: 2. New instructions and procedures may be prepared for QA activities unique to this program, as necessary.
: 2.     New instructions and procedures may be prepared for QA activities unique to this program, as necessary.
Control of Purchased Material, Equipment and Services WBN-7.1 WBN-7.4 WBN-7.2 WBN-7.5 WBN-7.3 WBN-7.6 These policies are applicable to the extent necessary to accomplish the following requirements for pro-identified Seismic III items: 1. iiReceipt inspection.
Control of Purchased Material, Equipment and Services       WBN-7.1             WBN-7.4           WBN-7.2 WBN-7.5             WBN-7.3           WBN-7.6 These policies are applicable to the extent necessary to accomplish the following requirements for pro-identified Seismic III items:
: 2. .Surveillance of work performed by field subcontractor/contractors.
: 1. iiReceipt inspection.
Control of Special Processes WBN-9.1 This policy is applicable to the extent necessary to accomplish the following:
: 2.     .Surveillance of work performed by field subcontractor/contractors.
Inspection of welding and NDE Bechtel QR-1.6-3 Attachment A Rev. 0 Page 2 of 4 Watts Bar Unit 2 Constmrction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Inspection WBN-1O.1 This policy is applicable to the extent necessary to accomplish the following:
Control of Special Processes                               WBN-9.1 This policy is applicable to the extent necessary to accomplish the following:
Inspection of welding and NDE Bechtel                                   QR-1.6-3                   Attachment A                   Rev. 0                       Page 2 of 4
 
Watts Bar Unit 2 Constmrction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS                                                             PNQAM POLICY Inspection                                               WBN-1O.1 This policy is applicable to the extent necessary to accomplish the following:
1, The site inspection program shall assure conformance to engineering requirements that are important to structural integrity.
1, The site inspection program shall assure conformance to engineering requirements that are important to structural integrity.
: 2. Inspections shall be performed by personnel independent from the individuals performing the activity.3. Inspection records shall provide evidence of inspections performed.
: 2.     Inspections shall be performed by personnel independent from the individuals performing the activity.
Nonconforming Items Control and Corrective Action WBN-7.4 WBN-15.1 WBN-16.1 These policies are applicable to the extent necessary to accomplish the following:
: 3.     Inspection records shall provide evidence of inspections performed.
: 1. dNonconforming items are to be controfled by segregation, tagging, or other:suitable means to prevent inadvertent use.2. INonconformances are to be documented and dispositioned by authorized personnel.
Nonconforming Items Control and Corrective Action         WBN-7.4                       WBN-15.1                           WBN-16.1 These policies are applicable to the extent necessary to accomplish the following:
: 1. dNonconforming items are to be controfled by segregation, tagging, or other
:suitable means to prevent inadvertent use.
: 2. INonconformances are to be documented and dispositioned by authorized personnel.
: 3. Actions taken to correct the nonconformance are to be documented.
: 3. Actions taken to correct the nonconformance are to be documented.
Quality Assurance Records WBN-1 7.1 WBN-17.2 WBN-17.3 These policies are applicable to the extent necessary to accomplish the following The quality assurance records associated with the Seismic 11/1 QA Program shall be identified and retained.Bechtel QR-1.6-3 Attachment A Rev. 0 Page 3 of 4 Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUAJLITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Audits WBN-18.1 This policy is applicable to the extent necessary to accomplish the following:
Quality Assurance Records                                 WBN-1 7.1                     WBN-17.2                         WBN-17.3 These policies are applicable to the extent necessary to accomplish the following The quality assurance records associated with the Seismic 11/1 QA Program shall be identified and retained.
: 1. Audits performed by Quality Services shall include activities pertaining to the Seismic II/I Program.2. Audit results shall be documented and reported to cognizant levels of'management NOTE: Supplier audits are not required as part of the audit program.Bechtel QR-1.6-3 Attachment A Rev. 0 Page 4 of 4 Requisition Number: 25402-011-MRA-JD01-00001 Revision:
Bechtel                                   QR-1.6-3                   Attachment A                       Rev. 0                     Page 3 of 4
000 Attachment 3 Quality Surveillance Plan 0 Bechtel Power Corporation 2008. Contains convIldential andfor propretary information to Bechtel and its affiliated companies which shaD not be used, disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's pnor written permission.
 
All rights reserved.This document is prepared eXClUSively for TVA in connection with Watts Bar Unit 2 Constmruton Completion Project and is not to be relied upon by others or used in connection withl any other proiect.I Watts Bar Unit 2 Construction Compleoion Project QUALITY SURVEILLANCE PLAN COMMODITY-SURVEILLANCE PLAN PAGE PROJECT Non Sfety-Quetlty Related Watts Bar Unft 2 CC Project I & C Equipment I.P. EDCR 62378152671 1 of 2 NO, ACTIVITY H W IP FREQUENCYINOTES
Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUAJLITY ASSURANCE MANUAL Attachment A REQUIREMENTS                                                       PNQAM POLICY Audits                                 WBN-18.1 This policy is applicable to the extent necessary to accomplish the following:
: 1. INITIAL VISIT- AN IN)TIAL VISIT IS NOT REQUIRED Address PO-applicable attributes required by S-221 IV Initial Visit form Section VI and stress the following:
: 1. Audits performed by Quality Services shall include activities pertaining to the Seismic II/I Program.
: 2. Audit results shall be documented and reported to cognizant levels of
                                              'management NOTE: Supplier audits are not required as part of the audit program.
Bechtel               QR-1.6-3                 Attachment A                     Rev. 0                     Page 4 of 4
 
Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Attachment 3 Quality Surveillance Plan 0 Bechtel Power Corporation 2008. Contains convIldential andfor propretary information to Bechtel and its affiliated companies which shaD not be used, disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's pnor written permission. All rights reserved.
This document is prepared eXClUSively for TVA in connection with Watts Bar Unit 2 Constmruton Completion Project and is not to be relied upon by others or used in connection withlany other proiect.
I
 
Watts Bar Unit 2 Construction Compleoion Project QUALITY SURVEILLANCE PLAN COMMODITY-                               SURVEILLANCE PLAN                           PAGE       PROJECT Non Sfety-Quetlty Related                                                                       Watts Bar Unft 2 CC Project I &C   Equipment                   I.P.       EDCR 62378152671               1 of 2 NO,                                   ACTIVITY                             H     W       IP             FREQUENCYINOTES
: 1. INITIAL VISIT-                                                                             AN IN)TIAL VISIT IS NOT REQUIRED Address PO-applicable attributes required by S-221 IV Initial Visit form Section VI and stress the following:
* P.O. requirements, data steets and specilicatlona.
* P.O. requirements, data steets and specilicatlona.
* Document submittal requirements, engineering review requirements, and engineering review levels.* Review and establish hold points." Verify fabricatlon and shipping schedule(s).
* Document submittal requirements, engineering review requirements, and engineering review levels.
: 2. FUNCTIONAL TESTING X rhe supplier Is to provide Bechtel Project Engineering no-lees-than 10 days System BumIn performance I endurance tdftii indre wntral adwlvned notia regardlin the Burn-in and system. Note: Ouration Is two weeks uninterrupted without fauits, Phase 2 FAT performance tesi schedules.
* Review and establish hold points.
Open and closed loop FAT- entire control system as prescribed by Bechtel ProJect Engineering shall be for Phase 2 testing within the MPG Slta-Specific Engineering responsible to further manage this HOLD Spaclflctiork  
          "     Verify fabricatlon and shipping schedule(s).
'WBN Unit 2 NSSS and SOP Conirols Upgrade point. Bechtel Project Engineering end TVA Specificatlort' Revision 1. representation Is required by PO unlaess waived by the TVA Lead Electrical Engineer.REV IDATE DESCRIPTION PREPARED BY ENGR. Approved 0 Initial lastsu R.Webbe, PURCHASE COMMODITY ASSIGNMENT K.S. Leve UP-GRADE NSSS and BOP CONTROLS 21402-0l1-YZA-9247-10001 WBNP UNIT 2 Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN COMMODITY-SURVEILLANCE PLAN PAGE PROJECT Non Safety.QualIly IRelsad Watts Bar Unit 2 CC Project I & C Equipment I.P. EDCR 52378 / 52671 2 OF 2 NO, ACTIVITY H W IP FREQUENCY I NOTES 3. FINAL INSPECTION I RELEASE FOR SHIPMENT x (Peoned by SOR)Verify with Projeol that required submittals have been received and ac~epted.
: 2. FUNCTIONAL TESTING                                                   X                   rhe supplier Isto provide Bechtel Project Engineering no-lees-than 10 days System BumIn performance Iendurance tdftii         indre wntral                         adwlvned notia regardlin the Burn-in and system. Note: Ouration Is two weeks uninterrupted without fauits,                       Phase 2 FAT performance tesi schedules.
All documents to be In accordance with SVeadly completion of englneering-dlreeted punch-tsl Items that contract (DSR) submittal requirements.
Open and closed loop FAT- entire control system as prescribed by                         Bechtel ProJect Engineering shall be for Phase 2 testing within the MPG Slta-Specific Engineering                             responsible to further manage this HOLD Spaclflctiork 'WBN Unit 2 NSSS and SOP Conirols Upgrade                                 point. Bechtel Project Engineering end TVA Specificatlort' Revision 1.                                                             representation Is required by PO unlaess waived by the TVA Lead Electrical Engineer.
may have resulted from pearormmnoe i funotworal acceptance testing.Burnin and Final Factory Acceptance Test Reports submitted and accepted (must document the resolution of any test No release far shipment will be granted until deflcienclas or open items from a punch-list (See above), all test results have been submitted and Review quality verlitcation dowmmentaffon as required by PO approved.or PO-referenced requirements.
REV     IDATE                             DESCRIPTION                 PREPARED BY         ENGR. Approved 0                                         Initial lastsu                 R.Webbe, PURCHASE COMMODITY                                               ASSIGNMENT K.S.                                   Leve UP-GRADE NSSS and BOP CONTROLS                                         21402-0l1-YZA-9247-10001 WBNP UNIT 2
Conirm overall dimensions and the conltpuution of cabinets, panels., and nests.* Vedfy that all dir, metal chips, wire cllpplngs...have been removed form wire ways, instruments, electrical devices, Aft Assemblies, Cabling ard Equipment.
 
panels, cabinets, and nsts.* Perform visual examinations for workmanhlip.
Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN COMMODITY-                               SURVEILLANCE PLAN                               PAGE       PROJECT Non Safety.QualIly IRelsad                                                                           Watts Bar Unit 2 CC Project I& C Equipment                   I.P.       EDCR 52378 / 52671                 2 OF 2 NO,                                   ACTIVITY                                 H     W     IP               FREQUENCY I NOTES
masking.tagging, and traceability to qualty verificalion documents* Examinations should ensure against visible damage, contamination, ordeterioration.
: 3.     FINAL INSPECTION I RELEASE FOR SHIPMENT                                 x                 (Peoned by SOR)
Veriy pre-shlpment requirements for cleaing, sealing, preservation, and packaging are met, SOR to prepare and Issue a Release Authorization Form (PS-231)Transmit completed PS0-231 to tte responsible PSQR vis e-mail on the day of release.Provide copy of PS-231 to Supplier for Inclusion with shipment(s).
Verify with Projeol that required submittals have been received and ac~epted.                                                                         All documents to be In accordance with SVeadly completion of englneering-dlreeted punch-tsl Items that                       contract (DSR) submittal requirements.
REV DATE DESCRIPTION PREPARED BY EiNGR. Approved uSaInitial Issue a2P I/PURCHASE COMMODITY NMENd %5. , UP-GRADE OF N$S$ and BOP CONTROLS 26402-011-YZA49247-10001 WBNP UNIT 2 2 Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN SUPPLIER SOURCE SURVEILLANCE Quality Surveillance Quality Surveillance is defined as the selective review, observation and evaluation of seller's activities to determine seller compliance with contractual quality requirements, Witness Points Witness polnts are defined as critical steps in manufacturing and testing, whereby SELLER shall advise the-BUYER'S Supplier Quality Representative (hereafter referred to as the SQR) ten (10) working days in advance of the operation so that it may be witnessed by the SR. The SELLER may proceed with work past the witness point only if the SR cannot attend. In the event a witness point Is deferred by the SCR, the next same operation will be witnessed, Hold Points Hold points are defined as critical steps in manufacturing and tesUng whereby SELLER Is obligated to advise the S8R ten (10) working days in advance of the operation so that it can be witnessed by the SR.The SELLER cannot proceed with work past the hold point without witness by the SQR. except by prior Written agreement from the Project Engineer with the concurrence of the Project Quality Assurance Engineer.Initial Visit Prior to the start of manufacturing, the assigned Supplier Quality Representative may conduct an initial visit to review with responsible SELLER management the quality requirements of the AGREEMENT, I. PRODUCTS on this order shall be subject to surveillance by SQR, or by OWNER, who shall be granted free access to any and all parts of SELLER'S plant(s) or SELLER'S suppliers plant(s)engaged In the manufacture or process of the PRODUCTS.2. The 8QR shall be allowed access to SELLER'8 supplier quality process control and quality verification records In order to review process and quality verification documents.
may have resulted from pearormmnoe i funotworal acceptance testing.
Review of these documents will Include verification of compliance with the specifications and applicable codes or standard requirements.
Burnin and Final Factory Acceptance Test Reports submitted and accepted (must document the resolution of any test                               No release far shipment will be granted until deflcienclas or open items from a punch-list (See above),                             all test results have been submitted and Review quality verlitcation dowmmentaffon as required by PO                           approved.
: 3. It is essential that SELLER understand that It Is SELLER'S responsibility to properly manufacture and to thoroughly Inspect the PRODUCTS prior to presentation to BUYER for surveillance.
or PO-referenced requirements.
All PRODUCTS are subject to release by the SCR. Release may be established as a witnbss or hold point dependent on the critical nature or production schedule of the item(s). SELLER may be required to furnish the manufacturer's written certification that PRODUCTS furnished conform to the requirements of this AGREEMENT.
Conirm overall dimensions and the conltpuution of cabinets, panels., and nests.
: 4. The contact for Quality Surveillance is as follows: Tennessee Valley Authority Watts Bar Unit 2 CCP Spring City, Tn. USA Project Supplier Quality Supervisor David J. Carraghan" 423-366-7902 dlcarraahenftvapov Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN 5. it is understood that the PURCHASE ORDER prices include these surveillance requirements.
* Vedfy that all dir, metal chips, wire cllpplngs...have been removed form wire ways, instruments, electrical devices,                               Aft Assemblies, Cabling ard Equipment.
No request for extra cost on account of surveillance requirements will be entertained.
panels, cabinets, and nsts.
* Perform visual examinations for workmanhlip. masking.
tagging, and traceability to qualty verificalion documents
* Examinations should ensure against visible damage, contamination, ordeterioration. Veriy pre-shlpment requirements for cleaing, sealing, preservation, and packaging are met, SOR to prepare and Issue a Release Authorization Form (PS-231)
Transmit completed PS0-231 to tte responsible PSQR vis e-mail on the day of release.
Provide copy of PS-231 to Supplier for Inclusion with shipment(s).
REV         DATE                         DESCRIPTION                     PREPARED BY         EiNGR. Approved uSaInitial Issue                                               a2P                                                     I
                  /PURCHASE COMMODITY                                                         NMENd                                 %5.
UP-GRADE OF N$S$ and BOP CONTROLS                                             26402-011-YZA49247-10001 WBNP UNIT 2                                             2
 
Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN SUPPLIER SOURCE SURVEILLANCE Quality Surveillance Quality Surveillance is defined as the selective review, observation and evaluation of seller's activities to determine seller compliance with contractual quality requirements, Witness Points Witness polnts are defined as critical steps inmanufacturing and testing, whereby SELLER shall advise the-BUYER'S Supplier Quality Representative (hereafter referred to as the SQR) ten (10) working days in advance of the operation so that it may be witnessed by the SR. The SELLER may proceed with work past the witness point only ifthe SR cannot attend. Inthe event a witness point Isdeferred by the SCR, the next same operation will be witnessed, Hold Points Hold points are defined as critical steps inmanufacturing and tesUng whereby SELLER Isobligated to advise the S8R ten (10) working days inadvance of the operation so that itcan be witnessed by the SR.
The SELLER cannot proceed with work past the hold point without witness by the SQR. except by prior Written agreement from the Project Engineer with the concurrence of the Project Quality Assurance Engineer.
Initial Visit Prior to the start of manufacturing, the assigned Supplier Quality Representative may conduct an initial visit to review with responsible SELLER management the quality requirements of the AGREEMENT, I.       PRODUCTS on this order shall be subject to surveillance by SQR, or by OWNER, who shall be granted free access to any and all parts of SELLER'S plant(s) or SELLER'S suppliers plant(s) engaged Inthe manufacture or process of the PRODUCTS.
: 2.       The 8QR shall be allowed access to SELLER'8 supplier quality process control and quality verification records Inorder to review process and quality verification documents. Review of these documents will Include verification of compliance with the specifications and applicable codes or standard requirements.
: 3.       It isessential that SELLER understand that ItIsSELLER'S responsibility to properly manufacture and to thoroughly Inspect the PRODUCTS prior to presentation to BUYER for surveillance. All PRODUCTS are subject to release by the SCR. Release may be established as a witnbss or hold point dependent on the critical nature or production schedule of the item(s). SELLER may be required to furnish the manufacturer's written certification that PRODUCTS furnished conform to the requirements of this AGREEMENT.
: 4.       The contact for Quality Surveillance is as follows:
Tennessee Valley Authority Watts Bar Unit 2 CCP Spring City, Tn. USA Project Supplier Quality Supervisor David J. Carraghan" 423-366-7902 dlcarraahenftvapov
 
Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN
: 5. it is understood that the PURCHASE ORDER prices include these surveillance requirements. No request for extra cost on account of surveillance requirements will be entertained.
: 6. Source Surveillance Plan descriptions:
: 6. Source Surveillance Plan descriptions:
H Hold Point W = Witness Point IP In Process SPECIFIC QUALITY SURVEILLANCE The PRODUCTS covered by the PURCHASE ORDER will be subject to the level or Quality Surveillance activity as defined In the attached Surveillance Plan, or other technical requirements.
H Hold Point W = Witness Point IP In Process SPECIFIC QUALITY SURVEILLANCE The PRODUCTS covered by the PURCHASE ORDER will be subject to the level or Quality Surveillance activity as defined Inthe attached Surveillance Plan, or other technical requirements.
Witness and Hold Points are as defined in the Surveillance Plan and/or Technical Speclfical:Ions...
Witness and Hold Points are as defined in the Surveillance Plan and/or Technical Speclfical:Ions...
Requisition Number: 25402-011 -MRA-JD01
-00001 Revision:
000 Attachment 4 TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification", Revision I a Bechtel Power Corporation 2008. Contains coanlidential anrd/or proprietary information to Bechtel and its affiliated companies which shan not be used, disclosed, or reproduced in any format by any non-Bechtel party vAthout Bechtel's prior written permission.
All rights reserved.This document is prepared exclusively for WVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.
q U TITLE WBN Unit 2 NSSS and BOP Controls Upgrade Specification Specification Rev. 0001 Page 1 of440 NPG Site-Specific Engineering Specification Effective Date s o/7-/ y L _______________________________________________________________________________________________
Prepared by: Henry Webber ((Reviewed by: 'Dan Faulkner Date Approved by: 4Ck.:: a,1dB, Steve Hilmes ..ate i NPG Site-Specific W1N Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 2 of 440 Revision Log Revision or Affected Change Effective Page Number Date Numbers Description of RevisionlChange 0 Initial issue 1 Various Revised per Foxboro comments and to incorporate Auxilliary Control Room scope. All changes have revision bars on the right side.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 3 of 440 Table of Contents


==1.0 INTRODUCTION==
Requisition Number: 25402-011 -MRA-JD01 -00001 Revision: 000 Attachment 4 TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification",
Revision I a Bechtel Power Corporation 2008. Contains coanlidential anrd/or proprietary information to Bechtel and its affiliated companies which shan not be used, disclosed, or reproduced in any format by any non-Bechtel party vAthout Bechtel's prior written permission. All rights reserved.
This document is prepared exclusively for WVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.
 
q                                  U TITLE                                Specification WBN Unit 2 NSSS and BOP Controls    Rev. 0001 Upgrade Specification          Page 1 of440 NPG Site-Specific Engineering Specification Effective Date    s o/7-/  y L __________________________________________________
Prepared by:                    Henry Webber  ((
Reviewed by:                                                                          '
Dan Faulkner                                Date Approved by:    4Ck.:: a,1dB, Steve Hilmes                ..               ate i


....................................................................................................................
NPG Site-Specific     W1N Unit 2 NSSS and BOP Controls         Specification Engineering               Upgrade Specification               Rev. 0001 Specification                                                 Page 2 of 440 Revision Log Revision or                Affected Change        Effective      Page Number          Date      Numbers                Description of RevisionlChange 0                                   Initial issue 1                   Various        Revised per Foxboro comments and to incorporate Auxilliary Control Room scope. All changes have revision bars on the right side.
10 1 .1 O v e rv ie w ....... ........................................................................................................................
1 0 1.2 Equipment, Material, And Services To Be Supplied By The Offerer ...................................
11 1.3 Equipment, Material, and Services To Be Supplied By Others ...........................................
13 1.4 Project Review Meetings ...................................................................................................
14 1.5 Target Project Schedule ..............................................
14 2.0 INSTRUCTIONS FOR PROPOSAL ..................................................................................
14 2.1 Bases for Technical Evaluation
..........................................................................................
15 2.2 W BN Simulator Upgrade ...................................................................................................
15 2.3 Multi-Unit Proposal ..................................................
16 2.4 Architectural Engineering (AE) Services ............................................................................
16 2.5 Hardware Requirements
...................................................................................................
16 2.6 Software Requirements
.....................................................................................................
19_.7 _Digita Interface Requirem ents ..__....., ....... ...........................
2....... 3 2.8 Deliverables
...........................................................................................................................
23 2 .9 S c h e d u le ................................................................................................................................
3 6 3.0 GENERAL CONTROL SYSTEM REQUIREMENTS
...........................................................
38 3.1 Overview ................................................................................................................................
38 3.2 Hardware Requirements
...................................................................................................
39 3.3 Environmental Requirements
.............................................................................................
61 3.4 M an Machine Interfaces
...................................................................................................
63 3.5 Software Q uality .....................................................................................................................
70 3.6 Interface Requirem ents ........................................................................................................
73 3.7 Maintenance
..........................................................................................................................
74 3.8 Equipment Cabinets ...............................................................................................................
75 3.9 Accuracies
..............................................................................................................................
76 3.10 Response Tim e Requirements
..........................................................................................
76 3.11 System Acceptance Test Requirem ents ............................................................................
77 3.12 Long Term Support .................................................................................................................
80 3.13 Spare Parts ............................................................................................................................
81 3.14 M iscellaneous System Requirements
...............................................................................
81 3.15 References
.............................................................................................................................
81 NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 4 of 440 Table of Contents (continued) 4.0 STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS
...........................
82 4.1 System Description
.................................................................................................................
82 4.2 SGL Control System ......................................
................................................
83 4.3 Applicable Criteria & Standards
........................................................................................
87 4.4 W BN System Description, System Diagrams ....................................................................
87 4.5 Indicators, Status Lights. and Controls ..............................................................................
87 4.6 Alarms and Annunciators
...................................................................................................
87 4.7 Performance Lim its ................................................................................................................
88 4.8 Specific Requirem ents ......................................................................................................
88 4.9 Accuracy .................................................................................................................................
89 4 .10 R a n g e ..........................................................................................................
..........................
g0 4 .1 1 In p u ts .....................................................................................................................................
9 0 4.12 Outputs.................................................................................................................................
91 4.13 Proposed Signal Validation Designs .................................................................................
91 4.14 Time Response .................................................................................................................
95 4.15 Controller Reset W indup and Recovery Characteristics
....................................................
96 4.16 Noise Levels ..........................................................................................................................
96 4.17 Programmed Functions
.....................................................................................................
96 4.18 Setpoints
................................................................................................................................
97 4.19 Requirements for Test and Calibration
..............................................................................
97 4.20 Requirements for Associated Equipment
..........................................................................
98 5.0 ROD CO NTROL .....................................................................................................................
98 5.1 System Description
.................................................................................................................
98 5.2 Rod Control System................................................................................................................
98 5.3 Applicable Criteria & Standards
............................................................................................
103 5.4 W BN System Description, System Diagrams ........................................................................
103 5.5 Indicators, Status Lights. and Controls .................................................................................
105 5.6 Alarms and Annunciators
.....................................................................................................
105 5.7 Perform ance Lim its ...............................................................................................................
105 5.8 Specific Requirem ents .........................................................................................................
106 5 .9 A c c u ra cy ..............................................................................................................................
10 6 5 .1 0 R a n g e ...................................................................................................................................
1 0 7 5 .1 1 In p u ts ...................................................................................................................................
1 0 7 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 5 of 440 Table of Contents (continued) 5.12 Outputs .................................................................................................................................
107 5.13 Proposed Signal Validation Designs .....................................................................................
107 5.14 Tim e Response ....................................................................................................................
109 5.15 Controller Reset W indup and Recovery Characteristics
........................................................
109 5.16 Noise Levels .........................................................................................................................
109 5.17 Programmed Functions
........................................................................................................
110 5.18 Setpoints
..............................................................................................................................
111 5.19 Requirem ents for Test and Calibration
.................................................................................
114 5.20 Requirem ents for Associated Equipm ent ..............................................................................
114 6.0 STEAM DUMP CONTROL SYSTEM REQUIREMENTS
.................................................
115 6.1 System Description
..............................................................................................................
115 6.2 Secondary Side Pressure Control System ............................................................................
116 6.3 Applicable Criteria & Standards
............................................................................................
123 6.4 W BN System Diagrams ........................................................................................................
123 6.5 Indicators, Status Lights, and Controls .................................................................................
128 6.6 Alarm s and Annunciators
......................................................................................................
129 6.7 Perform ance Lim its ...............................................................................................................
130 6.8 Specific Requirem ents .........................................................................................................
130 6.9 Accuracy ...............................................................................................................................
131 6 .10 R a n g e ...................................................................................................................................
13 1 6 .1 1 In p u ts ...........................................
.......................................................................................
1 3 2 6 .1 2 O u tp u ts .................................................................................................................................
13 2 6.13 Input Signal Validation
..........................................................................................................
132 6.14 Time Response ...................................................................................................................
133 6.15 Controller Reset W indup and Recovery Characteristics
.......................................................
134 6.16 Noise Levels .........................................................................................................................
134 6.17 Program med Functions
........................................................................................................
135 6.18 Setpoints
..............................................................................................................................
135 6.19 Requirements for Test and Calibration
.................................................................................
138 6.20 Requirements for Associated Equipment
..............................................................................
138 7.0 PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQ UIREMENTS
.................................................................................................................
139 7.1 System Description
...............................................................................................................
139 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 6 of 440 Table of Contents (continued) 7.2 Pressurizer Control System ..................................................................................................
139 7.3 Applicable Criteria & Standards
...........................................................................................
154 7.4 W BN System Description, System Diagrams ........................................................................
155 7.5 Indicators, Status Lights. and Controls .................................................................................
161 7.6 Alarms and Annunciators
......................................................................................................
163 7.7 Performance Limits ...............................................................................................................
164 7.8 Failure Mode and Special Requirements
..............................................................................
164 7 .9 A c c u ra cy ...............................................................................................................................
1 6 5 7 .10 R a n g e ...................................................................................................................................
1 6 6 7 .1 1 In p u ts ...................................................................................................................................
1 6 6 7 .1 2 O utp uts .................................................................................................................................
1 6 7 7.13 Proposed Signal Validation Designs .....................................................................................
167 7.14 Time Response ...................................................................................................................
169 7.15 Controller Reset W indup and Recovery Characteristics........................................................
170 7.16 Noise Levels ..........................................................................................................................
170 7.17 Programmed Functions
........................................................................................................
170 7 .18 S e tp o ints ..............................................................................................................................
17 2 7.19 Requirements for Test and Calibration
.................................................................................
174 7.20 Applicable Criteria & Standards
............................................................................................
174 8.0 BA BLENDER CONTROLS INTRODUCTION
.....................................................................
175 8 .1 O ve rv ie w .................................
.............................................................................................
1 75 8.2 Boric Acid Blender Control System Upgrade ........................................................................
175 8.3 Indicators, Status Lights. and Controls .................................................................................
183 8.4 Alarms and Annunciators
......................................................................................................
184 8.5 Performance Limits ...............................................................................................................
184 8 .6 A cc u ra c y ...............................................................................................................................
18 5 8 .7 R a n g e ...................................................................................................................................
18 5 8 .8 In p u ts .................................................................................
.................................................
1 8 5 8 .9 O u tp u ts .................................................................................................................................
18 5 8.10 Time Response ....................................................................................................................
185 8.11 Noise Levels .........................................................................................................................
186 8.12 Setpoints
...................................................................
.........
...................
186 8.13 Requirements for Test and Calibration
.................................................................................
187 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 7 of 440 Table of Contents (continued) 9.0 CVCS CONTRO L SYSTEM REQUIREMENTS
....................................................................
187 9.1 System Description
...............................................................................................................
187 9.2 CVCS Control System s ........................................................................................................
187 9.3 Applicable Criteria & Standards
............................................................................................
193 9.4 W BN System Diagrams ........................................................................................................
193 9.5 Indicators, Status Lights. and Controls .................................................................................
193 9.6 Alarms and Annunciators
.....................................................................................................
193 9.7 Perform ance Limits ...............................................................................................................
194 9.8 Specific Requirements
..........................................................................................................
194 9.9 Accuracy ...............................................................................................................................
194 9 .10 R a n g e ...................................................................................................................................
1 9 4 9.11 Inputs ...................................................................................................................................
194 9.12 Outputs .................................................................................................................................
195 9.13 Proposed Signal Validation Designs .....................................................................................
195 9.14 Tim e Response ....................................................................................................................
195 9.15 Controller Reset W indup and Recovery Characteristics
........................................................
196 9.16 Noise Levels .........................................................................................................................
196 9.17 Program med Functions
........................................................................................................
196 9.18 Setpoints
..............................................................................................................................
196 9.19 Requirements for Test and Calibration
.................................................................................
202 10.0 M ISC NSSS CONTRO L SYSTEMS .....................................................................................
203 11.0 BOP CONTROL AND INDICATION SYSTEM REQUIREMENTS
........................................
208 11.1 System Description
...............................................................................................................
208 11.2 System Functional Details ....................................................................................................
209 11.3 Applicable Criteria & Standards............................................................................................
214 11.4 W BN System Diagram s ......................................................................................................
214 11.5 Indicators, Status Lights. and Controls .................................................................................
214 11.6 Alarms and Annunciators
......................................................................................................
215 11.7 Performance Lim its ...............................................................................................................
215 11.8 Specific Requirements
..........................................................................................................
215 11.9 Accuracy ...............................................................................................................................
215 1 1 .10 R a n g e ............................
......................................................................................................
2 1 5 1 1 .1 1 In p u ts ........ ...........................................................................................................................
2 1 5 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 8 of 440 Table of Contents (continued) 1 1 .12 O u tp uts .................................................................................................................................
2 1 6 11.13 Proposed Signal Validation Designs .....................................................................................
216 11.14 Time Response ...................................................................................................................
216 11.15 Controller Reset W indup and Recovery Characteristics
........................................................
217 11.16 Noise Levels .........................................................................................................................
217 11.17 Program med Functions
........................................................................................................
217 1 1 .18 S e tp o ints .........................................
....................................................................................
2 1 7 11.19 Requirem ents for Test and Calibration
...................................................................
.............
217 12.0 TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS
.................................................................................................................
218 12.1 System Description  
...............................................................................................
............
218 12.2 Instrument Rack Specifications
............................................................................................
219 12.3 Detailed Functional Descriptions
..........................................................................................
222 12.4 Indicators, Status Lights. and Controls .................................................................................
222 12.5 Alarms and Annurtidators......................................................................................................
223 12.6 Perform ance Lim its ...............................................................................................................
223 12.7 Specific Requirements
..........................................................................................................
223 12.8 Accuracy ...............................................................................................................................
223 12 .9 R a n g e ............................................
......................................................................................
2 2 3 1 2 .10 In p u ts ...................................................................................................................................
2 2 4 12 .1 1 O utp uts .................................................................................................................................
2 2 4 12.12 Proposed Signal Validation Designs .....................................................................................
224 12.13 Time Response ....................................................................................................................
224 12.14 Controller Reset W indup and Recovery Characteristics
........................................................
225 12.15 Noise Levels .........................................................................................................................
225 12.16 Program med Functions
........................................................................................................
225 12.17 Setpoints
..............................................................................................................................
225 12.18 Requirements for Test and Calibration
.................................................................................
225 13.0 SHIPM ENT AND STORAGE ................................................................................................
226 13.1 Marking and Identification
.....................................................................................................
226 13.2 Preparation For Shipment ....................................................................................................
226 13.3 Shipping Notice ....................................................................................................................
226 13.4 Storage Requirements
..........................................................................................................
226 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 9 of 440 Table of Contents (continued) 13.5 Spare Parts ..........................................................................................................................
227 13.6 Shipment ..............................................................................................................................
227 14.0 DEFINITIO NS .......................................................................................................................
227 15.0 AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS
......................................
232 15.1 System Description
...............................................................................................................
232 15.2 System Functional Details ....................................................................................................
232 15.3 Time Response ....................................................................................................................
233 15.4 Controller Reset W indup and Recovery Characteristics
........................................................
234 15.5 Noise Levels .........................................................................................................................
234 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 10 of 440


==1.0 INTRODUCTION==
NPG Site-Specific                  WBN Unit 2 NSSS and BOP Controls                                              Specification Engineering                                  Upgrade Specification                                            Rev. 0001 Specification                                                                                                Page 3 of 440 Table of Contents


1.1 Overview A completely engineered Control and Monitoring System (C&MS) shall be provided for Watts Bar Unit 2. The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
==1.0    INTRODUCTION==
The C&MS shall be a distributed digital microprocessor based control and monitoring system, designed and implemented specifically for power plant applications in terms of materials of construction, industry accepted design conventions, and application software.The C&MS architecture shall be functionally composed of a number of building blocks which can be expanded or modified during or after installation.
....................................................................................................................              10 1 .1    O ve rv ie w ....... ........................................................................................................................ 10 1.2    Equipment, Material, And Services To Be Supplied By The Offerer ...................................                                            11 1.3    Equipment, Material, and Services To Be Supplied By Others ...........................................                                          13 1.4    Project Review Meetings ...................................................................................................                    14 1.5    Target Project Schedule ..............................................                                                                          14 2.0    INSTRUCTIONS FOR PROPOSAL ..................................................................................                                    14 2.1    Bases for Technical Evaluation ..........................................................................................                      15 2.2    WBN Simulator Upgrade ...................................................................................................                      15 2.3    Multi-Unit Proposal ..................................................                                                                          16 2.4    Architectural Engineering (AE) Services ............................................................................                            16 2.5      Hardware Requirements ...................................................................................................                      16 2.6    Software Requirements .....................................................................................................                    19
The basic components are the control micro-processor pairs and associated input/output hardware, operator interface, and the communications network. This specification details the minimum requirements of the C&MS. The required quantities of I/O, peripherals, and equipment summarized in this specification are an estimate for the basis of bidding. The Offerer shall have ownership of the system databases and shall complete all fields.The C&MS upgrade shall replace the NSSS supplied Control Racks, the TVA supplied Balance of Plant (BOP) racks located in the Auxiliary Instrument Room (AIR), and a portion of the TVA supplied Balance of Plant (TBBOP) instrumentation located in the Turbine Building.
_.7      _Digita Interface Requirem ents ..                __.....,        ....... . ..........................                                      2.......
The TVA supplied BOP racks are originally supplied by GEMAC and Robertshaw.
3 2.8      Deliverables ...........................................................................................................................      23 2 .9    S c h e d u le ................................................................................................................................ 36 3.0      GENERAL CONTROL SYSTEM REQUIREMENTS ...........................................................                                                38 3.1      Overview ................................................................................................................................      38 3.2      Hardware Requirements ...................................................................................................                      39 3.3      Environmental Requirements .............................................................................................                      61 3.4    M an Machine Interfaces ...................................................................................................                    63 3.5    Software Q uality .....................................................................................................................        70 3.6      Interface Requirem ents ........................................................................................................              73 3.7      Maintenance ..........................................................................................................................        74 3.8      Equipment Cabinets ...............................................................................................................            75 3.9    Accuracies ..............................................................................................................................      76 3.10    Response Tim e Requirements ..........................................................................................                        76 3.11    System Acceptance Test Requirem ents ............................................................................                              77 3.12    Long Term Support .................................................................................................................            80 3.13    Spare Parts ............................................................................................................................      81 3.14    Miscellaneous System Requirements ...............................................................................                              81 3.15    References .............................................................................................................................      81
 
NPG Site-Specific                  WBN Unit 2 NSSS and SOP Controls                                              Specification Engineering                                  Upgrade Specification                                            Rev. 0001 Specification                                                                                                  Page 4 of 440 Table of Contents (continued) 4.0    STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS ...........................                                                                                  82 4.1    System Description .................................................................................................................                            82 4.2    SGL Control System ......................................                      .      ............................................... 83 4.3    Applicable Criteria & Standards ........................................................................................                                        87 4.4    WBN System Description, System Diagrams ....................................................................                                                  87 4.5    Indicators, Status Lights. and Controls ..............................................................................                                        87 4.6    Alarms and Annunciators ...................................................................................................                                    87 4.7    Performance Lim its ................................................................................................................                          88 4.8    Specific Requirem ents ......................................................................................................                                  88 4.9    Accuracy .................................................................................................................................                      89 4 .10  R a n g e ..........................................................................................................              .......................... g0 4 .1 1  Inpu ts .....................................................................................................................................                  90 4.12    Outputs.................................................................................................................................                      91 4.13    Proposed Signal Validation Designs .................................................................................                                          91 4.14    Time Response .................................................................................................................                                95 4.15    Controller Reset W indup and Recovery Characteristics ....................................................                                                    96 4.16    Noise Levels ..........................................................................................................................                        96 4.17    Programmed Functions .....................................................................................................                                    96 4.18    Setpoints ................................................................................................................................                    97 4.19    Requirements for Test and Calibration ..............................................................................                                          97 4.20    Requirements for Associated Equipment ..........................................................................                                              98 5.0    ROD CO NTROL .....................................................................................................................                            98 5.1    System Description .................................................................................................................                          98 5.2    Rod Control System................................................................................................................                            98 5.3    Applicable Criteria & Standards ............................................................................................                                  103 5.4    WBN System Description, System Diagrams ........................................................................                                              103 5.5    Indicators, Status Lights. and Controls .................................................................................                                    105 5.6    Alarms and Annunciators .....................................................................................................                                105 5.7    Perform ance Lim its ...............................................................................................................                          105 5.8    Specific Requirem ents .........................................................................................................                              106 5 .9    Ac cu ra cy ..............................................................................................................................                    10 6 5 .10    R a n g e ...................................................................................................................................                10 7 5 .1 1  Inp u ts ...................................................................................................................................                10 7
 
NPG Site-Specific                  WBN Unit 2 NSSS and BOP Controls                                              Specification Engineering                                  Upgrade Specification                                          Rev. 0001 Specification                                                                                                  Page 5 of 440 Table of Contents (continued) 5.12    Outputs .................................................................................................................................        107 5.13    Proposed Signal Validation Designs .....................................................................................                          107 5.14    Tim e Response ....................................................................................................................              109 5.15    Controller Reset W indup and Recovery Characteristics ........................................................                                    109 5.16    Noise Levels .........................................................................................................................            109 5.17    Programmed Functions ........................................................................................................                    110 5.18    Setpoints ..............................................................................................................................          111 5.19    Requirem ents for Test and Calibration .................................................................................                          114 5.20    Requirem ents for Associated Equipm ent ..............................................................................                            114 6.0    STEAM DUMP CONTROL SYSTEM REQUIREMENTS .................................................                                                          115 6.1    System Description ..............................................................................................................                115 6.2    Secondary Side Pressure Control System ............................................................................                              116 6.3    Applicable Criteria & Standards ............................................................................................                      123 6.4    W BN System Diagrams ........................................................................................................                    123 6.5    Indicators, Status Lights, and Controls .................................................................................                        128 6.6    Alarm s and Annunciators ......................................................................................................                  129 6.7    Perform ance Lim its ...............................................................................................................              130 6.8    Specific Requirem ents .........................................................................................................                  130 6.9    Accuracy ...............................................................................................................................          131 6 .10  R a ng e ...................................................................................................................................      13 1 6 .1 1  In p u ts ...........................................    ....................................................................................... 1 32 6 .12  O utp u ts .................................................................................................................................      13 2 6.13    Input Signal Validation ..........................................................................................................                132 6.14    Time Response ...................................................................................................................                133 6.15    Controller Reset W indup and Recovery Characteristics .......................................................                                    134 6.16    Noise Levels .........................................................................................................................            134 6.17    Program med Functions ........................................................................................................                    135 6.18    Setpoints ..............................................................................................................................          135 6.19    Requirements for Test and Calibration .................................................................................                          138 6.20    Requirements for Associated Equipment ..............................................................................                              138 7.0    PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQ UIREMENTS .................................................................................................................                  139 7.1    System Description ...............................................................................................................                139
 
NPG Site-Specific                  WBN Unit 2 NSSS and BOP Controls                                                Specification Engineering                                  Upgrade Specification                                            Rev. 0001 Specification                                                                                                  Page 6 of 440 Table of Contents (continued) 7.2    Pressurizer Control System ..................................................................................................                            139 7.3    Applicable Criteria & Standards ...........................................................................................                              154 7.4    W BN System Description, System Diagrams ........................................................................                                        155 7.5    Indicators, Status Lights. and Controls .................................................................................                                161 7.6    Alarms and Annunciators ......................................................................................................                          163 7.7    Performance Limits ...............................................................................................................                      164 7.8    Failure Mode and Special Requirements ..............................................................................                                    164 7 .9    A c c u ra cy ...............................................................................................................................            16 5 7 .10  R a ng e ...................................................................................................................................            16 6 7 .1 1  In p uts ...................................................................................................................................            16 6 7 .12  O utp uts .................................................................................................................................              16 7 7.13    Proposed Signal Validation Designs .....................................................................................                                167 7.14    Time Response ...................................................................................................................                        169 7.15    Controller Reset W indup and Recovery Characteristics........................................................ 170 7.16    Noise Levels ..........................................................................................................................                  170 7.17    Programmed Functions ........................................................................................................                            170 7 .18  S etpo ints ..............................................................................................................................              17 2 7.19    Requirements for Test and Calibration .................................................................................                                  174 7.20    Applicable Criteria & Standards ............................................................................................                            174 8.0    BA BLENDER CONTROLS INTRODUCTION .....................................................................                                                  175 8 .1    O ve rv ie w .................................      .............................................................................................      175 8.2    Boric Acid Blender Control System Upgrade ........................................................................                                      175 8.3    Indicators, Status Lights. and Controls .................................................................................                                183 8.4    Alarms and Annunciators ......................................................................................................                          184 8.5    Performance Limits ...............................................................................................................                      184 8 .6    A ccu ra cy ...............................................................................................................................              18 5 8 .7    R a n g e ...................................................................................................................................            18 5 8 .8    Inp uts .................................................................................              ................................................. 18 5 8 .9    O u tputs .................................................................................................................................              18 5 8.10    Time Response ....................................................................................................................                      185 8.11    Noise Levels .........................................................................................................................                  186 8.12    Setpoints ...................................................................                  ......... ...................                            186 8.13    Requirements for Test and Calibration .................................................................................                                  187
 
NPG Site-Specific                    WBN Unit 2 NSSS and BOP Controls                                              Specification Engineering                                    Upgrade Specification                                            Rev. 0001 Specification                                                                                                    Page 7 of 440 Table of Contents (continued) 9.0      CVCS CONTRO L SYSTEM REQUIREMENTS ....................................................................                                            187 9.1      System Description ...............................................................................................................                187 9.2      CVCS Control System s ........................................................................................................                    187 9.3      Applicable Criteria & Standards ............................................................................................                      193 9.4      W BN System Diagrams ........................................................................................................                    193 9.5      Indicators, Status Lights. and Controls .................................................................................                        193 9.6      Alarms and Annunciators .....................................................................................................                    193 9.7      Perform ance Limits ...............................................................................................................              194 9.8      Specific Requirements ..........................................................................................................                  194 9.9      Accuracy ...............................................................................................................................          194 9 .10    R a n g e ................................................................................................................................... 19 4 9.11    Inputs ...................................................................................................................................        194 9.12    Outputs .................................................................................................................................        195 9.13    Proposed Signal Validation Designs .....................................................................................                          195 9.14    Tim e Response ....................................................................................................................              195 9.15    Controller Reset W indup and Recovery Characteristics ........................................................                                    196 9.16    Noise Levels .........................................................................................................................            196 9.17    Program med Functions ........................................................................................................                    196 9.18    Setpoints ..............................................................................................................................          196 9.19    Requirements for Test and Calibration .................................................................................                          202 10.0    MISC NSSS CONTRO L SYSTEMS .....................................................................................                                  203 11.0    BOP CONTROL AND INDICATION SYSTEM REQUIREMENTS ........................................                                                          208 11.1    System Description ...............................................................................................................                208 11.2    System Functional Details ....................................................................................................                    209 11.3    Applicable Criteria & Standards............................................................................................                      214 11.4    W BN System Diagram s ......................................................................................................                      214 11.5    Indicators, Status Lights. and Controls .................................................................................                        214 11.6    Alarms and Annunciators ......................................................................................................                    215 11.7    Performance Lim its ...............................................................................................................              215 11.8    Specific Requirements ..........................................................................................................                  215 11.9    Accuracy ...............................................................................................................................          215 1 1.10 R a n g e ............................      ...................................................................................................... 2 15 1 1 .1 1 Inp u ts ........ ........................................................................................................................... 2 15
 
NPG Site-Specific                    WBN Unit 2 NSSS and BOP Controls                                            Specification Engineering                                  Upgrade Specification                                          Rev. 0001 Specification                                                                                                Page 8 of 440 Table of Contents (continued) 1 1 .12 O u tputs .................................................................................................................................                2 16 11.13 Proposed Signal Validation Designs .....................................................................................                                      216 11.14 Time Response ...................................................................................................................                            216 11.15 Controller Reset Windup and Recovery Characteristics ........................................................                                                217 11.16 Noise Levels .........................................................................................................................                        217 11.17 Program med Functions ........................................................................................................                                217 1 1.18 S e tpo ints .........................................        ....................................................................................          2 17 11.19 Requirem ents for Test and Calibration ...................................................................                                      ............. 217 12.0    TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS .................................................................................................................                            218 12.1    System Description ...............................................................................................                            ............ 218 12.2    Instrument Rack Specifications ............................................................................................                                219 12.3    Detailed Functional Descriptions ..........................................................................................                                222 12.4    Indicators, Status Lights. and Controls .................................................................................                                  222 12.5    Alarms and Annurtidators...................................................................................................... 223 12.6    Perform ance Lim its ...............................................................................................................                      223 12.7    Specific Requirements ..........................................................................................................                          223 12.8    Accuracy ...............................................................................................................................                  223 12 .9    R a n g e ............................................    ......................................................................................          223 12 .10 Inp uts ...................................................................................................................................                  2 24 12 .1 1 Outp uts .................................................................................................................................                  2 24 12.12 Proposed Signal Validation Designs .....................................................................................                                      224 12.13 Time Response ....................................................................................................................                            224 12.14 Controller Reset W indup and Recovery Characteristics ........................................................                                                225 12.15 Noise Levels .........................................................................................................................                        225 12.16 Program med Functions ........................................................................................................                                225 12.17 Setpoints ..............................................................................................................................                      225 12.18 Requirements for Test and Calibration .................................................................................                                      225 13.0    SHIPM ENT AND STORAGE ................................................................................................                                    226 13.1    Marking and Identification .....................................................................................................                          226 13.2    Preparation For Shipment ....................................................................................................                              226 13.3    Shipping Notice ....................................................................................................................                      226 13.4    Storage Requirements ..........................................................................................................                            226
 
NPG Site-Specific          WBN Unit 2 NSSS and BOP Controls                                              Specification Engineering                            Upgrade Specification                                            Rev. 0001 Specification                                                                                          I Page 9 of 440 Table of Contents (continued) 13.5  Spare Parts .......................................................................................................................... 227 13.6  Shipment .............................................................................................................................. 227 14.0  DEFINITIO NS ....................................................................................................................... 227 15.0  AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS ......................................                                                  232 15.1  System Description ...............................................................................................................      232 15.2  System Functional Details ....................................................................................................          232 15.3  Time Response ....................................................................................................................      233 15.4  Controller Reset W indup and Recovery Characteristics ........................................................                          234 15.5  Noise Levels ......................................................................................................................... 234
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls              Specification Engineering                    Upgrade Specification                  Rev. 0001 Specification                                                          Page 10 of 440
 
==1.0        INTRODUCTION==
 
1.1        Overview A completely engineered Control and Monitoring System (C&MS) shall be provided for Watts Bar Unit 2. The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
The C&MS shall be a distributed digital microprocessor based control and monitoring system, designed and implemented specifically for power plant applications in terms of materials of construction, industry accepted design conventions, and application software.
The C&MS architecture shall be functionally composed of a number of building blocks which can be expanded or modified during or after installation. The basic components are the control micro-processor pairs and associated input/output hardware, operator interface, and the communications network. This specification details the minimum requirements of the C&MS. The required quantities of I/O, peripherals, and equipment summarized in this specification are an estimate for the basis of bidding. The Offerer shall have ownership of the system databases and shall complete all fields.
The C&MS upgrade shall replace the NSSS supplied Control Racks, the TVA supplied Balance of Plant (BOP) racks located in the Auxiliary Instrument Room (AIR), and a portion of the TVA supplied Balance of Plant (TBBOP) instrumentation located in the Turbine Building. The TVA supplied BOP racks are originally supplied by GEMAC and Robertshaw.
Also the Offerer shall furnish field racks to interface with process equipment in other remote locations.
Also the Offerer shall furnish field racks to interface with process equipment in other remote locations.
NSSS Control Racks Upgrade The scope of this upgrade consists of replacement of the existing 4 NSSS control rack groupings (grouped by their associated power feeds). The originally supplied cabinets, 19 inch mounting supports and field terminations will remain. Each grouping will be replaced with a set of redundant control processors and associated 1/O modules. The redundant processors and I/O modules will be supplied by two diverse 120 VAC control power sources.The C&MS shall have redundant internal DC auctionneered power supply modules associated with each of the customer supplied 120 VAC power sources. Critical Analog Output signals will have redundant output modules. All analog output devices will be changed out by the customer from 10 to 50 mA to 4 to 20 mA loops (including indicators, I/P converters, etc.) All transmitters that input to the NSSS control racks that have 10 to 50 mA outputs will be maintained using a voltage input module or replaced with 4 to 20 mA transmitters (not to be supplied by Offerer).
NSSS Control Racks Upgrade The scope of this upgrade consists of replacement of the existing 4 NSSS control rack groupings (grouped by their associated power feeds). The originally supplied cabinets, 19 inch mounting supports and field terminations will remain. Each grouping will be replaced with a set of redundant control processors and associated 1/O modules. The redundant processors and I/O modules will be supplied by two diverse 120 VAC control power sources.
The individual transmitter loop power supplies along with the indicating fuse panel will be replaced with isolated power being feed from the C&MS. Critical analog computer points will remain as a voltage input signal to the Integrated Computer System (ICS). A digital link to the ICS will be added to provide digitally these values plus others those where their analog points are deleted. All communications will be redundant.
The C&MS shall have redundant internal DC auctionneered power supply modules associated with each of the customer supplied 120 VAC power sources. Critical Analog Output signals will have redundant output modules. All analog output devices will be changed out by the customer from 10 to 50 mA to 4 to 20 mA loops (including indicators, I/P converters, etc.) All transmitters that input to the NSSS control racks that have 10 to 50 mA outputs will be maintained using a voltage input module or replaced with 4 to 20 mA transmitters (not to be supplied by Offerer). The individual transmitter loop power supplies along with the indicating fuse panel will be replaced with isolated power being feed from the C&MS. Critical analog computer points will remain as a voltage input signal to the Integrated Computer System (ICS). A digital link to the ICS will be added to provide digitally these values plus others those where their analog points are deleted. All communications will be redundant. The Digital Contact Outputs must be rated for the existing interfacing circuit. The use of interposing relays to provide adequate contact ratings for the existing output circuits will be considered if required.
The Digital Contact Outputs must be rated for the existing interfacing circuit. The use of interposing relays to provide adequate contact ratings for the existing output circuits will be considered if required.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification 1Page 11 of 440 1.1 Overview (continued)
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       1Page 11 of 440 1.1       Overview (continued)
Non-Safety BOP GEMAC and Robertehaw Racks Upgrade This upgrade will be similar to the NSSS Rack upgrade except there will be a minimum of 2 groupings based upon independent divisional power feeds. The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. The majority of these Racks contain Indication and Alarm functions.
Non-Safety BOP GEMAC and Robertehaw Racks Upgrade This upgrade will be similar to the NSSS Rack upgrade except there will be a minimum of 2 groupings based upon independent divisional power feeds. The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. The majority of these Racks contain Indication and Alarm functions. The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
Non-Safety Turbine Building BOP (TBBOP) Up-grade This upgrade will replace BOP instrumentation located in the Turbine Building. The Offerer will provide cabinets to be located in the Turbine Building. The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. This instrumentation contains both Critical control functions and Indication and alarm functions. This portion of the system shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification. The TBBOP graphical displays will be displayed on the MCR monitors. It was assumed that 2 racks (designated as TB-N and TB-S in the I/O List) would be adequate space for the required I/O.
Non-Safety Turbine Building BOP (TBBOP) Up-grade This upgrade will replace BOP instrumentation located in the Turbine Building.
Generic Information Both the NSSS and BOP upgrades consist of the control system equipment located in the Auxiliary Instrument Room (AIR), the Main Control Room (MCR), and the Turbine Building (TB).
The Offerer will provide cabinets to be located in the Turbine Building.
1.1.1       Existing NSSS and BOP Racks Upgrade The existing controls will be removed from the existing NSSS and BOP racks (TVA scope).
The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. This instrumentation contains both Critical control functions and Indication and alarm functions.
The Offerer shall supply control processors and 1/0 terminations to be terminated within the existing NSSS and BOP cabinets in a distributive manner and then tied together where necessary via a communications network. The new TBBOP racks will also be connected to this network.
This portion of the system shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
1.2         Equipment, Material, And Services To Be Supplied By The Offerer Equipment, material and services supplied by the Offerer shall include, as a summary, the following equipment and services. The actual requirements are described throughout the specification, attached databases and appendices. NOTE: Should the database, descriptions, and/or appendices be in conflict, the Offerer shall promptly seek clarification from TVA. TVA retains the sole right for the determination of the issue and/or requirement.
The TBBOP graphical displays will be displayed on the MCR monitors.
A. The Offerer shall provide a control system, complete with all necessary hardware, software, termination units, and supporting power supplies.
It was assumed that 2 racks (designated as TB-N and TB-S in the I/O List) would be adequate space for the required I/O.Generic Information Both the NSSS and BOP upgrades consist of the control system equipment located in the Auxiliary Instrument Room (AIR), the Main Control Room (MCR), and the Turbine Building (TB).1.1.1 Existing NSSS and BOP Racks Upgrade The existing controls will be removed from the existing NSSS and BOP racks (TVA scope).The Offerer shall supply control processors and 1/0 terminations to be terminated within the existing NSSS and BOP cabinets in a distributive manner and then tied together where necessary via a communications network. The new TBBOP racks will also be connected to this network.1.2 Equipment, Material, And Services To Be Supplied By The Offerer Equipment, material and services supplied by the Offerer shall include, as a summary, the following equipment and services.
B. The Offerer shall provide complete details of any exceptions taken, in part or in whole, in their proposal,
The actual requirements are described throughout the specification, attached databases and appendices.
 
NOTE: Should the database, descriptions, and/or appendices be in conflict, the Offerer shall promptly seek clarification from TVA. TVA retains the sole right for the determination of the issue and/or requirement.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 12 of 440 1.2       Equipment, Material, And Services To Be Supplied By The Offerer (continued)
A. The Offerer shall provide a control system, complete with all necessary hardware, software, termination units, and supporting power supplies.B. The Offerer shall provide complete details of any exceptions taken, in part or in whole, in their proposal, NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 12 of 440 1.2 Equipment, Material, And Services To Be Supplied By The Offerer (continued)
C. The Offerer shall provide engineering work stations, data storage and retrieval drops, printers, and interface hardware and software as described herein, or as may be reasonably required to meet the intent of this specification.
C. The Offerer shall provide engineering work stations, data storage and retrieval drops, printers, and interface hardware and software as described herein, or as may be reasonably required to meet the intent of this specification.
D. The Offerer shall provide project management, project engineering, system engineering, software engineering, design, programming, graphics configuration and implementation effort to support the project, E. The Offerer shall supply complete logic diagrams and supporting descriptions detailing the system's control actions using symbology consistent with SAMA/ISA standards for continuous (analog) and discrete (Boolean) logic. This method is understood to be to the satisfaction of the Lead Electrical Engineer (LEE).F. The Offerer shall provide, in their proposal, a list of spare parts and recommended quantities to be maintained in the TVA storeroom.
D. The Offerer shall provide project management, project engineering, system engineering, software engineering, design, programming, graphics configuration and implementation effort to support the project, E. The Offerer shall supply complete logic diagrams and supporting descriptions detailing the system's control actions using symbology consistent with SAMA/ISA standards for continuous (analog) and discrete (Boolean) logic. This method is understood to be to the satisfaction of the Lead Electrical Engineer (LEE).
The spare parts list shall contain the Offerer's part number, the OEM name and OEM part number, and the proposed unit pricing for each part listed. Inclusion of the OEM information is MANDATORY.
F. The Offerer shall provide, in their proposal, a list of spare parts and recommended quantities to be maintained in the TVA storeroom. The spare parts list shall contain the Offerer's part number, the OEM name and OEM part number, and the proposed unit pricing for each part listed. Inclusion of the OEM information is MANDATORY.
G. The Offerer shall provide any special tools, test equipment and software required for the installation, and continued operation and maintenance of the purchased equipment not commonly available in a power plant. The special tools, test equipment or software shall be supplied as part of the base price for this project, and will be permanently retained for TVA's use at WBN 2.H. Cables shall be provided as shown in the table below.Cable type Provided by Field Termination Assembly to existing field TVA wiring terminal strip Fieldbus Module to Field Termination Offeror Assembly Control processors to 110 baseplate (within Offeror panels, copper)Control processors to 110 baseplate (panel to TVA panel, fiber optic)Control processors to network switch (fiber Offeror optic)Operator workstation PC in Aux Instrument TVA Room to display in Main Control Room Operator workstation PC in Aux Instrument TVA Room to ICS system _The Offerer shall supply an engineering work station for Unit 2 to provide a means of changing the system configuration, modifying system programs, creating and modifying graphics and performing diagnostic tests. The Unit 2 engineering work stations shall be independent and separate from the Unit 1 work station being added for the Steam Generator Level upgrade.I NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 13 of 440 1.2 Equipment, Material, And Services To Be Supplied By The Offerer (continued)
G. The Offerer shall provide any special tools, test equipment and software required for the installation, and continued operation and maintenance of the purchased equipment not commonly available in a power plant. The special tools, test equipment or software shall be supplied as part of the base price for this project, and will be permanently retained for TVA's use at WBN 2.
J. The Offerer shall supply 2 (touch screen will not be utilized) displays.
H. Cables shall be provided as shown in the table below.
The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.
Cable type                           Provided by Field Termination Assembly to existing field           TVA wiring terminal strip Fieldbus Module to Field Termination                   Offeror Assembly Control processors to 110 baseplate (within             Offeror panels, copper)
K. The Offerer shall provide an option to shall supply 4 (touch screen will not be utilized)displays.
Control processors to 110 baseplate (panel to           TVA panel, fiber optic)
The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.
Control processors to network switch (fiber             Offeror optic)
L, The Offerer shall supply 2 new free standing instrument racks complete with necessary I/O for the Turbine Building BOP equipment.
Operator workstation PC in Aux Instrument               TVA Room to display in Main Control Room Operator workstation PC in Aux Instrument               TVA                         I Room to ICS system               _
M. The Offerer shall perform an open and closed loop factory test on the entire control system. This shall be accomplished in two phases. Phase One is totally the Offerer's responsibility to provide a completely engineered, configured and tested system.Phase One shall include verification and validation of all system 110 by the Offeror and shall ensure that the application software and operator interface configurations are complete, accurate, and ready for inspection by TVA during Phase Two. Phase Two shall be conducted by the Offerer per the factory acceptance test (Section 2.8.3M) and will be witnessed by the Engineer.
The Offerer shall supply an engineering work station for Unit 2 to provide a means of changing the system configuration, modifying system programs, creating and modifying graphics and performing diagnostic tests. The Unit 2 engineering work stations shall be independent and separate from the Unit 1 work station being added for the Steam Generator Level upgrade.
This shall include checking 100 percent of the 110, all single point failures, control loop functionality, or other tests as required by the Engineer to ensure compliance with the specification.
 
No equipment shall be released for shipment without satisfactory completion of the Phase Two test, unless specifically waived, in writing, by the LEE. A closed loop model shall be used for closed loop testing and does not require a high level of plant response fidelity, but it should be capable of exercising all control loops as an integrated system (with both primary and secondary side responses).
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 13 of 440 1.2       Equipment, Material, And Services To Be Supplied By The Offerer (continued)
It shall able to test associated functions such as input validation algorithms to ensure a correct control system response (ie., PID input to output relationship, etc.). The use of engineered lag/delays to simulate plant response feedback delays is acceptable (first principal modeling is not required).
J. The Offerer shall supply 2 (touch screen will not be utilized) displays. The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.
K. The Offerer shall provide an option to shall supply 4 (touch screen will not be utilized) displays. The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.
L,   The Offerer shall supply 2 new free standing instrument racks complete with necessary I/O for the Turbine Building BOP equipment.
M. The Offerer shall perform an open and closed loop factory test on the entire control system. This shall be accomplished in two phases. Phase One is totally the Offerer's responsibility to provide a completely engineered, configured and tested system.
Phase One shall include verification and validation of all system 110 by the Offeror and shall ensure that the application software and operator interface configurations are complete, accurate, and ready for inspection by TVA during Phase Two. Phase Two shall be conducted by the Offerer per the factory acceptance test (Section 2.8.3M) and will be witnessed by the Engineer. This shall include checking 100 percent of the 110, all single point failures, control loop functionality, or other tests as required by the Engineer to ensure compliance with the specification. No equipment shall be released for shipment without satisfactory completion of the Phase Two test, unless specifically waived, in writing, by the LEE. A closed loop model shall be used for closed loop testing and does not require a high level of plant response fidelity, but it should be capable of exercising all control loops as an integrated system (with both primary and secondary side responses). It shall able to test associated functions such as input validation algorithms to ensure a correct control system response (ie., PID input to output relationship, etc.). The use of engineered lag/delays to simulate plant response feedback delays is acceptable (first principal modeling is not required).
N. The Offerer shall provide services of a qualified field representative(s) for system start-up and tuning. These services shall include all power-up checks according to the Offerer's recommended practices and shall be scheduled at the Engineer's convenience.
N. The Offerer shall provide services of a qualified field representative(s) for system start-up and tuning. These services shall include all power-up checks according to the Offerer's recommended practices and shall be scheduled at the Engineer's convenience.
The Offerer shall provide a man hour rate for these services along with per diem costs.0. The Offerer shall provide training as outlined in Section 2.8.4 1.3 Equipment, Material, and Services To Be Supplied By Others The following items are not included under the scope of this specification, and have been, or will be performed by Others: A. TVA will furnish the Offerer, without charge, necessary copies of the contract and specifications as may be reasonably required for performance of the work.B. TVA will provide the Offerer with any technical data on file which TVA considers essential for completion of the work required.
The Offerer shall provide a man hour rate for these services along with per diem costs.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 14 of 440 1.3 Equipment, Material, and Services To Be Supplied By Others (continued)
: 0. The Offerer shall provide training as outlined in Section 2.8.4 1.3       Equipment, Material, and Services To Be Supplied By Others The following items are not included under the scope of this specification, and have been, or will be performed by Others:
C. Receiving, storage, and field installation of the control system.D. All field wiring external to the control system with the control system boundary ending at the existing rack terminal block. (Note: Pre-fabricated cables, such as FBM to processor cable, specified in this specification are to be supplied by the Offerer, but will be installed by TVA if routed outside of the cabinet or console.)1.4 Project Review Meetings The Offerer shall include in his base offer attendance at monthly project review meetings.These meetings will commence with the kick-off meeting and occur on a scheduled monthly basis up to one month after return of the unit to electrical generation.
A. TVA will furnish the Offerer, without charge, necessary copies of the contract and specifications as may be reasonably required for performance of the work.
Meeting agendas will include schedule, technical and commercial issues to ensure continued progress of the project, specific accomplishments of the past month and action/objectives to be completed in the coming month. These meetings are site specific and may not be held at the same time or place.The Offerer shall be responsible for generation and transmission to the Engineer (within 1 week of meetings) of formal meeting minutes for the Engineer's review, and will contain a proposed agenda and topics list for the next meeting. Following receipt and review of the Offerer minutes, an official meeting minutes will be generated by the Engineer and distributed to all participants.
B. TVA will provide the Offerer with any technical data on file which TVA considers essential for completion of the work required.
This process is implemented to ensure that TVA's and the Offerer's perspectives on all issues are thoroughly understood.
 
The time and place of all meetings will be established by WVA at a TVA facility unless the Engineer determines that the meeting objectives would be better accomplished at another location.1.5 Target Project Schedule The Offerer shall prepare (and maintain for the life of the project) a working project schedule.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 14 of 440 1.3       Equipment, Material, and Services To Be Supplied By Others (continued)
The project schedule milestones, events and dates are to be the basis of working project schedule.
C. Receiving, storage, and field installation of the control system.
The Offerer's project schedule shall be submitted for approval to the Engineer.
D. All field wiring external to the control system with the control system boundary ending at the existing rack terminal block. (Note: Pre-fabricated cables, such as FBM to processor cable, specified in this specification are to be supplied by the Offerer, but will be installed by TVA if routed outside of the cabinet or console.)
The key areas for scheduling are receipt of information required for determination of contract compliance, support of balance of plant design, and pre-outage receipt of materials.
1.4         Project Review Meetings The Offerer shall include in his base offer attendance at monthly project review meetings.
Refer to the contract milestone schedule for required dates.2.0 INSTRUCTIONS FOR PROPOSAL The functional requirements, description of operation and control requirements included herein establish the criteria for the control system. However, it is not intended to limit the operation, functions, and safeguards to those either mentioned or implied. The Offerer shall make any additional suggestions or recommendations that will improve the proposed operational procedures or method of control. All the system engineering and hardware needed to constitute a fully integrated, complete and operable start-up; shut-down and on-line control system shall be supplied by the Offerer whether or not specifically detailed herein.
These meetings will commence with the kick-off meeting and occur on a scheduled monthly basis up to one month after return of the unit to electrical generation. Meeting agendas will include schedule, technical and commercial issues to ensure continued progress of the project, specific accomplishments of the past month and action/objectives to be completed in the coming month. These meetings are site specific and may not be held at the same time or place.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 15 of 440 2.1 Bases for Technical Evaluation Proposals submitted for consideration will be evaluated based on the criteria listed below but not necessarily in the order listed.A. Previous Experience The Offerer's previous experience with similar applications, experience with the nuclear industry, TVA nuclear specific experience, and industry wide similar applications will be considered.
The Offerer shall be responsible for generation and transmission to the Engineer (within 1 week of meetings) of formal meeting minutes for the Engineer's review, and will contain a proposed agenda and topics list for the next meeting. Following receipt and review of the Offerer minutes, an official meeting minutes will be generated by the Engineer and distributed to all participants. This process is implemented to ensure that TVA's and the Offerer's perspectives on all issues are thoroughly understood.
Offerer must have previous demonstrated experience in the specific area of digital SGL control systems (see Section 4.0 of this specification).
The time and place of all meetings will be established by WVA at a TVA facility unless the Engineer determines that the meeting objectives would be better accomplished at another location.
1.5         Target Project Schedule The Offerer shall prepare (and maintain for the life of the project) a working project schedule. The project schedule milestones, events and dates are to be the basis of working project schedule. The Offerer's project schedule shall be submitted for approval to the Engineer. The key areas for scheduling are receipt of information required for determination of contract compliance, support of balance of plant design, and pre-outage receipt of materials.
Refer to the contract milestone schedule for required dates.
2.0       INSTRUCTIONS FOR PROPOSAL The functional requirements, description of operation and control requirements included herein establish the criteria for the control system. However, it is not intended to limit the operation, functions, and safeguards to those either mentioned or implied. The Offerer shall make any additional suggestions or recommendations that will improve the proposed operational procedures or method of control. All the system engineering and hardware needed to constitute a fully integrated, complete and operable start-up; shut-down and on-line control system shall be supplied by the Offerer whether or not specifically detailed herein.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                     Upgrade Specification                     Rev. 0001 Specification                                                             Page 15 of 440 2.1       Bases for Technical Evaluation Proposals submitted for consideration will be evaluated based on the criteria listed below but not necessarily in the order listed.
A. Previous Experience The Offerer's previous experience with similar applications, experience with the nuclear industry, TVA nuclear specific experience, and industry wide similar applications will be considered. Offerer must have previous demonstrated experience in the specific area of digital SGL control systems (see Section 4.0 of this specification).
B. Expansion Capability/Flexibility The ability of the Offerer's proposed system to be expanded, utilizing built in spare capacity, and ease of integration with the plant's Reactor Protection Systems, Plant Annunciator Systems, and the plant process computer "Integrated Computer System" (ICS) will be considered.
B. Expansion Capability/Flexibility The ability of the Offerer's proposed system to be expanded, utilizing built in spare capacity, and ease of integration with the plant's Reactor Protection Systems, Plant Annunciator Systems, and the plant process computer "Integrated Computer System" (ICS) will be considered.
C. Ease of Maintenance/Modification The ability of the Offerer's proposed system to perform on-line maintenance and modification while the system is operating, self-diagnostic capability, reuse of existing cabling, and ease of engineering modifications will be considered.
C. Ease of Maintenance/Modification The ability of the Offerer's proposed system to perform on-line maintenance and modification while the system is operating, self-diagnostic capability, reuse of existing cabling, and ease of engineering modifications will be considered.
Line 509: Line 350:
F. Product Support The expected product lifetime of the Offerer's proposed system and previous experience with the Offerer as relates to product support will be considered.
F. Product Support The expected product lifetime of the Offerer's proposed system and previous experience with the Offerer as relates to product support will be considered.
G. Schedule The ability of the Offerer to meet the required schedule will be considered.
G. Schedule The ability of the Offerer to meet the required schedule will be considered.
2.2 WBN Simulator Upgrade NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 16 of 440 2.2 WBN Simulator Upgrade (continued)
2.2       WBN Simulator Upgrade
The Offerer shall also provide a proposal for any hardware/software required to modify the WBN Main Control Room Simulator to reflect the changes that will result from the proposed Control system upgrade. The preferred implementation method is to use "faceplate" type instruments to be driven by the simulator computer, but a full Control System with interface box can be proposed.
 
Any hardware/software proposed for the MCR simulator shall incorporate the ability to allow the simulator operation to be "frozen" and initialized to a predetermined state. See Appendix D for WBN detailed requirements.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 16 of 440 2.2       WBN Simulator Upgrade (continued)
Differences resulting from the partial WBN Unit 1 SGL upgrade must be integrated with the Unit 2 changes. The scope included within the current WBN I project shall not be duplicated within this proposal.2.3 Multi-Unit Proposal To be determined later.2.4 Architectural Engineering (AE) Services Omitted 2.6 Hardware Requirements The hardware requirements associated with the proposed system are as follows: A. The proposed system shall be a microprocessor based distributed system.B. The proposed system shall have a Mean Time Between Failure (MTBF) of greater than 40 years. A failure for this case is considered the loss of system ability to automatically control. The Offerer shall provide MTBF data for the proposed system and the rationale behind it.C. The proposed system shall have a Mean Time To Repair (MTTR) of less than 2 hours.The Offerer shall provide MTTR data for the proposed system and the rationale behind it.D. The proposed system shall be capable of being powered from two 120V AC 60 Hz (non-synchronized) voltage sources.E. The proposed system shall provide power for 4 to 20 ma inputs/outputs and specified digital outputs.F. All system inputs, including power inputs, shall be filtered to remove high frequency EMI/RFI, and process noise (see required testing in section 3.11.1).G. The operator handstations for the proposed system shall be labeled "NM" for Auto/Manual.
The Offerer shall also provide a proposal for any hardware/software required to modify the WBN Main Control Room Simulator to reflect the changes that will result from the proposed Control system upgrade. The preferred implementation method is to use "faceplate" type instruments to be driven by the simulator computer, but a full Control System with interface box can be proposed. Any hardware/software proposed for the MCR simulator shall incorporate the ability to allow the simulator operation to be "frozen" and initialized to a predetermined state. See Appendix D for WBN detailed requirements. Differences resulting from the partial WBN Unit 1 SGL upgrade must be integrated with the Unit 2 changes. The scope included within the current WBN I project shall not be duplicated within this proposal.
Other proposed labeling schemes shall be noted in the Offerer's bid proposal for evaluation.
2.3       Multi-Unit Proposal To be determined later.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 17 of 440 2.5 Hardware Requirements (continued)
2.4       Architectural Engineering (AE) Services Omitted 2.6       Hardware Requirements The hardware requirements associated with the proposed system are as follows:
H. All rack mounted hardware, unless otherwise noted, is to be located in existing Auxiliary Instrument Room (AIR) cabinets/Racks and the MCR or in new racks supplied under this proposal for the TBBOP. Each Offerer shall assume that all components are front mounted into the racks. Unless otherwise noted, all indicators and handstations will be located in the MCR. The TBBOP rack mounted hardware will be located in the Turbine Building in new cabinets and will have or supply local handstations and indications as defined in the 110 listing and will be mounted in specific locations TBD by TVA.For the Engineering Workstations and operator display units (ODUs), removable storage devices, mouse/trackballs, and keyboards shall be provided for maintenance and operations use.J. The hardware supplied for mounting in the existing panels shall be configured in such a way as to simplify installation.
A. The proposed system shall be a microprocessor based distributed system.
For example, component racks should be supplied with all hardware necessary to allow for direct bolt-in installation without panel modifications.
B. The proposed system shall have a Mean Time Between Failure (MTBF) of greater than 40 years. A failure for this case is considered the loss of system ability to automatically control. The Offerer shall provide MTBF data for the proposed system and the rationale behind it.
TVA will provide plans for clear mounting space in existing cabinets and to be verified by the Offerer prior to final hardware design drawings and documents are issued (prior to 100% Design Review).K. An Engineering Workstation system interface and printer interface shall be provided for remote installation.
C. The proposed system shall have a Mean Time To Repair (MTTR) of less than 2 hours.
The Offerer shall specify the maximum distance this Engineering Workstation and Operator Console may be located from the control system. Security shall be provided to prevent unauthorized modification of system programming or operational parameters.
The Offerer shall provide MTTR data for the proposed system and the rationale behind it.
L. The proposed system configuration shall be tested and demonstrated to be resistant to EMI/RFI induced malfunctions as specified in TVA Standard Spec SS-El 8.14.01.However, the Offerer may substitute his standard EMI/RFI test if approved by WVA.Previously approved reports were only conditionally approved by Brown Ferry Nuclear and are not directly applicable to the WBN C&MS application.
D. The proposed system shall be capable of being powered from two 120V AC 60 Hz (non-synchronized) voltage sources.
The SQN/WBN upgrade approval may be used to fulfill this requirement when completed.
E. The proposed system shall provide power for 4 to 20 ma inputs/outputs and specified digital outputs.
M. The proposed system shall be capable of interfacing with the plant Integrated Computer System (ICS).1. The proposed system hardware interface to the ICS shall be twisted pair or fiber optic Ethernet conforming to IEEE Standard 802.3 2. The proposed system hardware interface protocol to the ICS shall be TCP/IP using OPC format. See Figure 4 of the proposed control system and ICS interface.
F. All system inputs, including power inputs, shall be filtered to remove high frequency EMI/RFI, and process noise (see required testing in section 3.11.1).
G. The operator handstations for the proposed system shall be labeled "NM" for Auto/Manual. Other proposed labeling schemes shall be noted in the Offerer's bid proposal for evaluation.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 17 of 440 2.5       Hardware Requirements (continued)
H. All rack mounted hardware, unless otherwise noted, is to be located in existing Auxiliary Instrument Room (AIR) cabinets/Racks and the MCR or in new racks supplied under this proposal for the TBBOP. Each Offerer shall assume that all components are front mounted into the racks. Unless otherwise noted, all indicators and handstations will be located in the MCR. The TBBOP rack mounted hardware will be located in the Turbine Building in new cabinets and will have or supply local handstations and indications as defined in the 110 listing and will be mounted in specific locations TBD by TVA.
For the Engineering Workstations and operator display units (ODUs), removable storage devices, mouse/trackballs, and keyboards shall be provided for maintenance and operations use.
J. The hardware supplied for mounting in the existing panels shall be configured in such a way as to simplify installation. For example, component racks should be supplied with all hardware necessary to allow for direct bolt-in installation without panel modifications. TVA will provide plans for clear mounting space in existing cabinets and to be verified by the Offerer prior to final hardware design drawings and documents are issued (prior to 100% Design Review).
K. An Engineering Workstation system interface and printer interface shall be provided for remote installation. The Offerer shall specify the maximum distance this Engineering Workstation and Operator Console may be located from the control system. Security shall be provided to prevent unauthorized modification of system programming or operational parameters.
L. The proposed system configuration shall be tested and demonstrated to be resistant to EMI/RFI induced malfunctions as specified in TVA Standard Spec SS-El 8.14.01.
However, the Offerer may substitute his standard EMI/RFI test if approved by WVA.
Previously approved reports were only conditionally approved by Brown Ferry Nuclear and are not directly applicable to the WBN C&MS application. The SQN/WBN upgrade approval may be used to fulfill this requirement when completed.
M. The proposed system shall be capable of interfacing with the plant Integrated Computer System (ICS).
: 1. The proposed system hardware interface to the ICS shall be twisted pair or fiber optic Ethernet conforming to IEEE Standard 802.3
: 2. The proposed system hardware interface protocol to the ICS shall be TCP/IP using OPC format. See Figure 4 of the proposed control system and ICS interface.
: 3. The proposed system shall transmit analog data with the following information:
: 3. The proposed system shall transmit analog data with the following information:
Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)
Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 18 of 440 2.5 Hardware Requirements (continued)
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 18 of 440 2.5       Hardware Requirements (continued)
: 4. The proposed system shall transmit digital data with the following information:
: 4. The proposed system shall transmit digital data with the following information:
Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)or Packed digitals with 1 bit per point. Packing is acceptable only if point quality is also transmitted.
Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)
: 5. The proposed system shall associate a time stamp with each data point corresponding to the time the data was acquired and transmit this time stamp with the point value. If all values in a transmission are acquired within the update rate (as specified in the Functional Requirements in Sections 4 through 12 below) then a single time stamp may be associated with the data block rather than individual points.6. The proposed system shall be capable of transmitting updates of all data points (including existing and spare capacity) at a rate that meets the Functional Requirements of Sections 4 through 12 below. Faster update rates are desirable for selected points. The system must provide the capability to slow down or throttle the data transfer to the minimum rate if necessary.
or Packed digitals with 1 bit per point. Packing is acceptable only if point quality is also transmitted.
: 5. The proposed system shall associate a time stamp with each data point corresponding to the time the data was acquired and transmit this time stamp with the point value. If all values in a transmission are acquired within the update rate (as specified in the Functional Requirements in Sections 4 through 12 below) then a single time stamp may be associated with the data block rather than individual points.
: 6. The proposed system shall be capable of transmitting updates of all data points (including existing and spare capacity) at a rate that meets the Functional Requirements of Sections 4 through 12 below. Faster update rates are desirable for selected points. The system must provide the capability to slow down or throttle the data transfer to the minimum rate if necessary.
: 7. The proposed system shall be capable of accepting a time synchronization signal (either over the Ethernet or an IRIG-B signal) from the ICS and setting its timebase to this value. However, the system must not be dependent upon this signal for time stamping of data or other time related operations.
: 7. The proposed system shall be capable of accepting a time synchronization signal (either over the Ethernet or an IRIG-B signal) from the ICS and setting its timebase to this value. However, the system must not be dependent upon this signal for time stamping of data or other time related operations.
: 8. The proposed system shall be capable of notifying the ICS of internal self-test results/values.
: 8. The proposed system shall be capable of notifying the ICS of internal self-test results/values.
: 9. A failure in the ICS shall not affect the control system. Example: ICS failure results in repeated requests for information shall not affect the response time of the control system and shall be proven by test. Testing shall be based upon type of communication buffering device (e.g. firewall), ICS broadcast capability, communication and protocol being used. Any required configuration limits (e.g., amount of allowable requests within a specific time and/or authorized IP requests)for the buffering device shall be documented and placed under configuration control.N. The proposed system shall have redundant error checking computation processors or modules.0. The proposed system shall have installed spare CPU, memory, communications, and other system capacities reserved to support future expansion.
: 9. A failure in the ICS shall not affect the control system. Example: ICS failure results in repeated requests for information shall not affect the response time of the control system and shall be proven by test. Testing shall be based upon type of communication buffering device (e.g. firewall), ICS broadcast capability, communication and protocol being used. Any required configuration limits (e.g.,
See Section 3.2.1 H for the specific requirements.
amount of allowable requests within a specific time and/or authorized IP requests) for the buffering device shall be documented and placed under configuration control.
The Offerer shall specify the spare capacity of the proposed system. Additional spare capacity shall be offered as an option. Offerer shall identify where spare capability requirements cannot be met without the addition of additional cabinets.
N. The proposed system shall have redundant error checking computation processors or modules.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 19 of 440 2.5 Hardware Requirements (continued)
: 0. The proposed system shall have installed spare CPU, memory, communications, and other system capacities reserved to support future expansion. See Section 3.2.1 H for the specific requirements. The Offerer shall specify the spare capacity of the proposed system. Additional spare capacity shall be offered as an option. Offerer shall identify where spare capability requirements cannot be met without the addition of additional cabinets.
P. The proposed system shall have self-diagnostics and identify any hardware watchdog timers to detect any inadvertent software loops/failures.
 
The Offerer shall specify the level of coverage in percent of the system self-diagnostics.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 19 of 440 2.5       Hardware Requirements (continued)
Q. All proposed system components such as power supplies, processor/computational modules, I/O modules, etc., shall be removable one at a time for maintenance with the system energized without loss of system functionality or component damage.R. For control functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.S. For indication and alarm functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.T. The proposed system trending and history sampling shall be at the rate specified in the system functional requirements.
P. The proposed system shall have self-diagnostics and identify any hardware watchdog timers to detect any inadvertent software loops/failures. The Offerer shall specify the level of coverage in percent of the system self-diagnostics.
Q. All proposed system components such as power supplies, processor/computational modules, I/O modules, etc., shall be removable one at a time for maintenance with the system energized without loss of system functionality or component damage.
R. For control functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.
S. For indication and alarm functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.
T. The proposed system trending and history sampling shall be at the rate specified in the system functional requirements.
U. The proposed system Operational Display Unit (ODU) screens shall be updated every 1 second as constrained by NUREG-0700 guideline to reduce eye fatigue from video flicker. MCR handstation controllers shall be updated at the rate specified in the functional requirements.
U. The proposed system Operational Display Unit (ODU) screens shall be updated every 1 second as constrained by NUREG-0700 guideline to reduce eye fatigue from video flicker. MCR handstation controllers shall be updated at the rate specified in the functional requirements.
V. All panel wiring and cable supplied by the Offerer should be certified to have PVC free insulating material and jacket. If used, Offerer must identify the amount of PVC for TVA's evaluation.
V. All panel wiring and cable supplied by the Offerer should be certified to have PVC free insulating material and jacket. If used, Offerer must identify the amount of PVC for TVA's evaluation.
W. All Offerer installed panel wiring shall be installed in accordance with accepted industry standards and practices, with all external interface wiring utilizing ring tongue lugs. The Offerer shall describe the proposed wiring standards or procedures to be utilized.
W. All Offerer installed panel wiring shall be installed in accordance with accepted industry standards and practices, with all external interface wiring utilizing ring tongue lugs. The Offerer shall describe the proposed wiring standards or procedures to be utilized. Particular attention shall be directed at termination and bend radii.
Particular attention shall be directed at termination and bend radii.2.6 Software Requirements The Offerer shall meet the requirements of TVA Standard Specification SS E18.15.01 as defined in this specification.
2.6       Software Requirements The Offerer shall meet the requirements of TVA Standard Specification SS E18.15.01 as defined in this specification. The standard spec classification is for Critical to Plant Operations. See Appendix B for details.
The standard spec classification is for Critical to Plant Operations.
Additional generic software requirements associated with the proposed system are as follows:
See Appendix B for details.Additional generic software requirements associated with the proposed system are as follows: A. Process variable signal validation for all inputs shall be performed.
A. Process variable signal validation for all inputs shall be performed. For critical inputs, any input signal greater than nominal +/-5% out of range (an input deviation from the Medium Signal Select/Averaged output) shall be considered automatically invalid.
For critical inputs, any input signal greater than nominal +/-5% out of range (an input deviation from the Medium Signal Select/Averaged output) shall be considered automatically invalid.The out of range limit selection shall allow for deviation during transient conditions.
The out of range limit selection shall allow for deviation during transient conditions.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 20 of 440 2.6 Software Requirements (continued)
 
B. If an input signal is invalid (exceeds deviation) for more than a short period of time (approximately five seconds, exact time to be determined later), it shall be "locked out", alarmed (output contact) and system alarm, and require manual re-initialization prior to use.C. All process variable signal inputs shall be linearized and converted into proper engineering units. All scaling input to be provided by TVA must have second party review by TVA and incorporated by Offerer. Offerer shall also perform and document second party review of this scaling once it is implemented.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls             Specification Engineering                       Upgrade Specification               Rev. 0001 Specification                                                         Page 20 of 440 2.6       Software Requirements (continued)
D. Only one redundant input shall be manually bypassed at a given time. The User shall have the capability of setting the input value for the bypassed input.E. An alarm shall be generated upon loss of: 1. Any input signal as a result of an input validation scheme.2. This alarm shall be capable of being individually manually bypassed for maintenance purposes.3. A trouble alarm shall be generated upon loss or degradation of any process variable input, control variable output, or system diagnostic failure.4. A trouble alarm shall be generated upon loss of power to any system component, or the failure of any system power supply.5. Non-catastrophic system faults shall generate an alarm and be specifically identified upon request.F. On-line real time diagnostics shall be performed to verify the proper operation of I/O, CPU, Memory, overall system operability, process variable inputs, and control variable outputs.G. All ODU graphic displays shall conform to the conventions as given in Section 3.4.7 of this spec to assure similarity to the existing Integrated Computer System (ICS)displays.H. All ODUs shall provide for verification of on-line control system changes via the feature. For example, to bypass a transmitter for maintenance, it would be necessary to select an area label "Bypass LT-3-56", and also an area labeled "Confirm Bypass LT-3-56".1. Software configuration management shall be implemented, documented, and maintained for all development and control software.
B. If an input signal is invalid (exceeds deviation) for more than a short period of time (approximately five seconds, exact time to be determined later), it shall be "locked out", alarmed (output contact) and system alarm, and require manual re-initialization prior to use.
The software development system shall be self documenting and should have a revision history function that documents the specific changes that were implemented.
C. All process variable signal inputs shall be linearized and converted into proper engineering units. All scaling input to be provided by TVA must have second party review by TVA and incorporated by Offerer. Offerer shall also perform and document second party review of this scaling once it is implemented.
Configurable parameters are covered by the management system.J. The following system graphics, at a minimum, shall be supplied.
D. Only one redundant input shall be manually bypassed at a given time. The User shall have the capability of setting the input value for the bypassed input.
The Offerer shall list and describe the number and type of graphics that are proposed.
E. An alarm shall be generated upon loss of:
Offerer should provide cost of additional screens.
: 1. Any input signal as a result of an input validation scheme.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 , Specification I Page 21 of 440 2.6 Software Requirements (continued)
: 2. This alarm shall be capable of being individually manually bypassed for maintenance purposes.
I System Mimics A minimum of 60 mimics will be developed for all the major NSSS control systems and selected BOP systems. The major NSSS control systems are discussed in more detail in the following sections.As an example, the mimics for the SGL controls will consist of: a. MFPT overview with speed, discharge pressure, SG dP, and flow. This mimic is to be the default mimic for one of the ODUs so that it is continuously displayed during normal operation.
: 3. A trouble alarm shall be generated upon loss or degradation of any process variable input, control variable output, or system diagnostic failure.
The Operator can manually change to another display if desired.b. Main Feedwater control system overview c. Subsystems within the control system such as each SG Loop d. Each Input Validation scheme where specified e. Each Controller and Setpoint Station 2. System and Process Alarms A screen or screens displaying at a minimum system and process alarms, along with time and date of initiation, and acknowledged status shall be provided.
: 4. A trouble alarm shall be generated upon loss of power to any system component, or the failure of any system power supply.
It shall be possible to acknowledge alarms from this graphic. A minimum of 3 levels of Alarm priorization shall be provided.
: 5. Non-catastrophic system faults shall generate an alarm and be specifically identified upon request.
TVA and the Offerer shall work together to implement a design that minimizes the possibility of nusiance alarms.3. Trends Provide graphics capable of bar graphs and trends for the C&MS. Trending parameters and scaling shall be selectable by the Operator and shall open will a predefined amount of data history displayed.
F. On-line real time diagnostics shall be performed to verify the proper operation of I/O, CPU, Memory, overall system operability, process variable inputs, and control variable outputs.
: 4. Maintenance Bypass A graphic shall be provided to allow bypass of process variable inputs and the associated alarms as required for maintenance.
G. All ODU graphic displays shall conform to the conventions as given in Section 3.4.7 of this spec to assure similarity to the existing Integrated Computer System (ICS) displays.
Indication of bypass permissive (without affecting system operation) shall be provided.5. Loop Tuning Parameters A graphic shall be provided to display and allow online adjustment of tunable values. This screen(s) shall allow for tuning of all tuneable values. Tuning values that are updated on-line shall be bumpless and take effect without system reboot or process step change/upset.
H. All ODUs shall provide for verification of on-line control system changes via the feature. For example, to bypass a transmitter for maintenance, it would be necessary to select an area label "Bypass LT-3-56", and also an area labeled "Confirm Bypass LT-3-56".
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 22 of 440 2.6 Software Requirements (continued)
: 1. Software configuration management shall be implemented, documented, and maintained for all development and control software. The software development system shall be self documenting and should have a revision history function that documents the specific changes that were implemented. Configurable parameters are covered by the management system.
: 6. Interlock and Permissive Status A graphic depicting the status of all Interlocks and Permissives defined in this spec.7. Additional Maintenance Graphs Allow for 5 additional mimics to support maintenance functions.
J. The following system graphics, at a minimum, shall be supplied. The Offerer shall list and describe the number and type of graphics that are proposed. Offerer should provide cost of additional screens.
: 8. Reports A graphic allowing the generation of reports for Operations, Maintenance, and Engineering shall be provided.
 
The number, contents, and format of these reports will be defined by TVA after award of Contract.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                 Rev. 0001
To allow for equitable evaluation of proposals, each Offerer should allow for a total of nine reports, with approximately twenty to thirty parameters per report, with the report output being directable either to a printer, to a file on both hard drive, a removable storage drive, and to ICS.a. Layouts All graphics that are developed shall be arranged in a logical progression.
, Specification   I                                                   Page 21 of 440 2.6     Software Requirements (continued)
K. The proposed system shall have a minimum of four distinct environments or levels of access. The current environment shall be readily identifiable by the user. These environments are: 1. Display Only This shall be the default boot-up environment.
I   System Mimics A minimum of 60 mimics will be developed for all the major NSSS control systems and selected BOP systems. The major NSSS control systems are discussed in more detail in the following sections.
No password or security measures are applicable to this environment.
As an example, the mimics for the SGL controls will consist of:
The minimum available displays shall include the System Mimic, Process Overview, System and Process Alarms, Trends, Loop Tuning Parameters, Interlocks and Permissives Status screens. No system parameters shall be alterable from these screens in this environment.
: a. MFPT overview with speed, discharge pressure, SG dP, and flow. This mimic is to be the default mimic for one of the ODUs so that it is continuously displayed during normal operation. The Operator can manually change to another display if desired.
It shall be possible to enter all other environments from this level, with an appropriate password.2. Operations The Operations environment shall consist of the same displays as the Display Only environment except for deletion of the Loop Tuning Parameters display and the addition of the Reports display, Changes of setpoints, input parameter bypasses, and alarm acknowledgments shall be operational from this environment.
: b. Main Feedwater control system overview
Loop tuning parameters and control system configuration parameters shall not be alterable from this environment.
: c. Subsystems within the control system such as each SG Loop
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 23 of 440 2.6 Software Requirements (continued)
: d. Each Input Validation scheme where specified
: 3. Maintenance The maintenance environment shall consist of the same displays as the Display Only environment.
: e. Each Controller and Setpoint Station
Loop tuning parameters shall be alterable from this environment, and input parameter bypasses shall be operational.
: 2. System and Process Alarms A screen or screens displaying at a minimum system and process alarms, along with time and date of initiation, and acknowledged status shall be provided. It shall be possible to acknowledge alarms from this graphic. A minimum of 3 levels of Alarm priorization shall be provided. TVA and the Offerer shall work together to implement a design that minimizes the possibility of nusiance alarms.
: 4. Outage/Design The Outage Environment shall consist of the same displays as the Display Only environment.
: 3. Trends Provide graphics capable of bar graphs and trends for the C&MS. Trending parameters and scaling shall be selectable by the Operator and shall open will a predefined amount of data history displayed.
All parameters shall be alterable and all features operational.
: 4. Maintenance Bypass A graphic shall be provided to allow bypass of process variable inputs and the associated alarms as required for maintenance. Indication of bypass permissive (without affecting system operation) shall be provided.
2.7 Digital Interface Requirements All digital communications interfaces must be fully documented, both hardware and software, to allow TVA to develop interface software to interrogate, program, and exchange data with the subject C&MS. Proper security (i.e., firewalls, etc.) shall be included.2.8 Deliverables 2.8.1 Hardware A. Control System Hardware The Offerer shall supply all control system hardware required to meet the specifications of this document.
: 5. Loop Tuning Parameters A graphic shall be provided to display and allow online adjustment of tunable values. This screen(s) shall allow for tuning of all tuneable values. Tuning values that are updated on-line shall be bumpless and take effect without system reboot or process step change/upset.
The system supplied is not required to be in strict compliance with ANSI/IEEE Standard 379,"Single Failure Criteria", but should be configured and designed in such a manner that the failure of a single device or component, excluding a catastrophic failure of the entire cabinet, will not affect the operation of the system. All system components shall be capable of being removed one at a time with the system powered and operational without affecting system operation (to be tested during FAT).B. Indications TVA shall supply all indicators and recorders for compatability with 4 to 20 ma outputs.C. Valve Positioners (I/P Converters)
 
TVA shall supply all I/P converters and electro pneumatic positioners for compatability with 4 to 20 ma outputs.D. Critical Outputs Critical outputs such as an output for a critical control valve (i1P converter) shall have redundancy.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                           Page 22 of 440 2.6       Software Requirements (continued)
TVA will identify all known critical output control functions.
: 6. Interlock and Permissive Status A graphic depicting the status of all Interlocks and Permissives defined in this spec.
The Offerer shall provide input to TVA for inclusion of other critical outputs based on the results of the System Hazards Analysis (see section 3.2.2.G).
: 7. Additional Maintenance Graphs Allow for 5 additional mimics to support maintenance functions.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 24 of 440 2.8.1 Hardware (continued)
: 8. Reports A graphic allowing the generation of reports for Operations, Maintenance, and Engineering shall be provided. The number, contents, and format of these reports will be defined by TVA after award of Contract. To allow for equitable evaluation of proposals, each Offerer should allow for a total of nine reports, with approximately twenty to thirty parameters per report, with the report output being directable either to a printer, to a file on both hard drive, a removable storage drive, and to ICS.
E. Main Feedwater Pump Control Interface The Offerer shall supply a 10 to 50 ma output converter using a passive device (i.e., diodes) to provide for control system output redundancy.
: a. Layouts All graphics that are developed shall be arranged in a logical progression.
For example, the MFPT speed control outputs, the redundant 4 to 20 mA outputs shall be converted to a 10 to 50 mA prior to input to a passive switching device.F. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied hardware.2.8.2 Software A. Development Software The Offerer shall supply to TVA any software used in the programming/
K. The proposed system shall have a minimum of four distinct environments or levels of access. The current environment shall be readily identifiable by the user. These environments are:
configuration of the system and the building of graphic displays.
: 1. Display Only This shall be the default boot-up environment. No password or security measures are applicable to this environment. The minimum available displays shall include the System Mimic, Process Overview, System and Process Alarms, Trends, Loop Tuning Parameters, Interlocks and Permissives Status screens. No system parameters shall be alterable from these screens in this environment. It shall be possible to enter all other environments from this level, with an appropriate password.
This software may include such items as compilers, linkers, CAD programs, etc. The Offerer shall identify the operating system needed for this software.B. Control Software The Offerer shall develop and supply software for the proposed system, including system graphics, operational and maintenance displays, and user defined trends, to provide an accurate and reliable control system that has successfully passed the Factory Acceptance Test (FAT). The features and requirements as defined by this document shall be incorporated into the control system software.C. Configuration Control Software The Offerer shall develop and supply software to assist in the establishment and maintenance of system software configuration control. This software shall provide documentation (printed output and/or files) of system configuration to allow comparison to the baseline configuration as established by the FAT. Successful completion of the FAT with no open test anomalies shall establish the C&MS software baseline (rev 0).D. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied software.
: 2. Operations The Operations environment shall consist of the same displays as the Display Only environment except for deletion of the Loop Tuning Parameters display and the addition of the Reports display, Changes of setpoints, input parameter bypasses, and alarm acknowledgments shall be operational from this environment. Loop tuning parameters and control system configuration parameters shall not be alterable from this environment.
NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 25 of 440 2.8.3 Documentation TVA intends to obtain a complete system including all documentation so that future changes can be incorporated with confidence and error free maintenance (cannot cause process upset or control systems problems) can be accomplished on the system. The Offerer shall provide detailed documentation of any and all functions that are unique to this system. The Offerers standard documentation may be used for standard functions provided it is complete and usable.The Offerer shall provide completely filled out (including reference and cross-referencing) logic and functional SAMA diagrams, loop schematic drawings (items internal to the Control System such as relays, isolators, etc. are to be shown to the field terminal blocks), cabinet drawings, recommended spare parts list, bill of material, data base documents, detailed functional specifications, operating and maintenance instruction books. The use of non-standard SAMA symbology and structure must be approved by the WVA.Documentation should be divided into operator manuals, engineering and maintenance manuals and system overview manuals. The engineering and maintenance manuals shall include all system data and database information including updates until final acceptance.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 23 of 440 2.6       Software Requirements (continued)
: 3. Maintenance The maintenance environment shall consist of the same displays as the Display Only environment. Loop tuning parameters shall be alterable from this environment, and input parameter bypasses shall be operational.
: 4. Outage/Design The Outage Environment shall consist of the same displays as the Display Only environment. All parameters shall be alterable and all features operational.
2.7         Digital Interface Requirements All digital communications interfaces must be fully documented, both hardware and software, to allow TVA to develop interface software to interrogate, program, and exchange data with the subject C&MS. Proper security (i.e., firewalls, etc.) shall be included.
2.8         Deliverables 2.8.1       Hardware A. Control System Hardware The Offerer shall supply all control system hardware required to meet the specifications of this document. The system supplied is not required to be in strict compliance with ANSI/IEEE Standard 379,"Single Failure Criteria", but should be configured and designed in such a manner that the failure of a single device or component, excluding a catastrophic failure of the entire cabinet, will not affect the operation of the system. All system components shall be capable of being removed one at a time with the system powered and operational without affecting system operation (to be tested during FAT).
B. Indications TVA shall supply all indicators and recorders for compatability with 4 to 20 ma outputs.
C. Valve Positioners (I/P Converters)
TVA shall supply all I/P converters and electro pneumatic positioners for compatability with 4 to 20 ma outputs.
D. Critical Outputs Critical outputs such as an output for a critical control valve (i1P converter) shall have redundancy. TVA will identify all known critical output control functions. The Offerer shall provide input to TVA for inclusion of other critical outputs based on the results of the System Hazards Analysis (see section 3.2.2.G).
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                     Page 24 of 440 2.8.1     Hardware (continued)
E. Main Feedwater Pump Control Interface The Offerer shall supply a 10 to 50 ma output converter using a passive device (i.e.,
diodes) to provide for control system output redundancy. For example, the MFPT speed control outputs, the redundant 4 to 20 mA outputs shall be converted to a 10 to 50 mA prior to input to a passive switching device.
F. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied hardware.
2.8.2     Software A. Development Software The Offerer shall supply to TVA any software used in the programming/ configuration of the system and the building of graphic displays. This software may include such items as compilers, linkers, CAD programs, etc. The Offerer shall identify the operating system needed for this software.
B. Control Software The Offerer shall develop and supply software for the proposed system, including system graphics, operational and maintenance displays, and user defined trends, to provide an accurate and reliable control system that has successfully passed the Factory Acceptance Test (FAT). The features and requirements as defined by this document shall be incorporated into the control system software.
C. Configuration Control Software The Offerer shall develop and supply software to assist in the establishment and maintenance of system software configuration control. This software shall provide documentation (printed output and/or files) of system configuration to allow comparison to the baseline configuration as established by the FAT. Successful completion of the FAT with no open test anomalies shall establish the C&MS software baseline (rev 0).
D. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied software.
 
NPG Site-Specific         WBN Unit 2 NSSS and SOP Controls               Specification Engineering                       Upgrade Specification                 Rev. 0001 Specification                                                         I Page 25 of 440 2.8.3       Documentation TVA intends to obtain a complete system including all documentation so that future changes can be incorporated with confidence and error free maintenance (cannot cause process upset or control systems problems) can be accomplished on the system. The Offerer shall provide detailed documentation of any and all functions that are unique to this system. The Offerers standard documentation may be used for standard functions provided it is complete and usable.
The Offerer shall provide completely filled out (including reference and cross-referencing) logic and functional SAMA diagrams, loop schematic drawings (items internal to the Control System such as relays, isolators, etc. are to be shown to the field terminal blocks), cabinet drawings, recommended spare parts list, bill of material, data base documents, detailed functional specifications, operating and maintenance instruction books. The use of non-standard SAMA symbology and structure must be approved by the WVA.
Documentation should be divided into operator manuals, engineering and maintenance manuals and system overview manuals. The engineering and maintenance manuals shall include all system data and database information including updates until final acceptance.
The Operator Manuals shall contain operating procedures and instructions for the proper operation of the operator's console and the Control System equipment.
The Operator Manuals shall contain operating procedures and instructions for the proper operation of the operator's console and the Control System equipment.
All documentation customized to this contract such as engineering drawings, engineering lists, tabulations, procedures, data bases, etc. shall be supplied to TVA in Windows XP compatible format of either the most recent version of AutoCAD, Word, Excel, Access or FoxPro. This documentation may be supplied to TVA on CD ROM or DVDs. Each disk submitted shall be clearly labeled as to the contents including TVA plant name, contract number, software format, contents description.
All documentation customized to this contract such as engineering drawings, engineering lists, tabulations, procedures, data bases, etc. shall be supplied to TVA in Windows XP compatible format of either the most recent version of AutoCAD, Word, Excel, Access or FoxPro. This documentation may be supplied to TVA on CD ROM or DVDs. Each disk submitted shall be clearly labeled as to the contents including TVA plant name, contract number, software format, contents description. TVA will determine the acceptability of any proposed alternative. All electronic media shall be certified as virus free before shipping to TVA.
TVA will determine the acceptability of any proposed alternative.
A. Required Plant Data The Offerer shall submit a document delineating the specific plant data required to implement the proposed system. This shall include transmitter ranges, failure modes, etc. The Offerer is requested to quote as an option the cost of providing personnel on site to retrieve this data. Some plant specific details may be proprietary information that will not be released before contract approval. Post award release will have to be negotiated based upon all applicable legal requirements.
All electronic media shall be certified as virus free before shipping to TVA.A. Required Plant Data The Offerer shall submit a document delineating the specific plant data required to implement the proposed system. This shall include transmitter ranges, failure modes, etc. The Offerer is requested to quote as an option the cost of providing personnel on site to retrieve this data. Some plant specific details may be proprietary information that will not be released before contract approval.
B. Software Quality Assurance Plan (SQAP)
Post award release will have to be negotiated based upon all applicable legal requirements.
The Offerer shall develop and submit for TVA approval an SQAP as required by WVA Standard Specification SS-EI8.15.01.
B. Software Quality Assurance Plan (SQAP)The Offerer shall develop and submit for TVA approval an SQAP as required by WVA Standard Specification SS-EI8.15.01.
C.     Software Requirements Specification The Offerer shall use this document as the Software Requirements Specification.
C. Software Requirements Specification The Offerer shall use this document as the Software Requirements Specification.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 26 of 440 2.8.3 Documentation (continued)
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 26 of 440 2.8.3   Documentation (continued)
D. System Design Description and Logic Drawings The Offerer shall develop and submit for TVA approval a System Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-EI8.15.01.
D. System Design Description and Logic Drawings The Offerer shall develop and submit for TVA approval a System Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-EI8.15.01. Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by TVA.
Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by TVA.Logic diagrams shall be submitted for approval using SAMM/ISA-like, Boolean, ladder, or other logic document forms readily understandable by a controls engineer without specific training on the Offeror's system. Once approved, these drawings will be subsequently "interpreted" by the Offerer and programmed using techniques specific to the Offeror's platform.
Logic diagrams shall be submitted for approval using SAMM/ISA-like, Boolean, ladder, or other logic document forms readily understandable by a controls engineer without specific training on the Offeror's system. Once approved, these drawings will be subsequently "interpreted" by the Offerer and programmed using techniques specific to the Offeror's platform. The Offerer would then produce a set of configuration documents reflecting that effort which TVA would also have to review for adequacy.
The Offerer would then produce a set of configuration documents reflecting that effort which TVA would also have to review for adequacy.The Offerer submitting a proposal is required to submit examples of the documentation to be submitted and subsequently electronically converted to machine code. The Engineer shall be the sole judge of the intuitive requirement of the submitted example. As an example, SAMA and Boolean forms are highly preferred, although SAMA, Boolean, and ladder variants may be acceptable if sufficiently obvious to the Engineer.E. Component Physical Drawings The Offerer shall supply detailed physical outline drawings of all supplied hardware, such as instrument racks, operators displays, weights, outline dimensions, mounting and termination details, etc.F. Wiring Connection Drawings The Offerer shall supply wiring connections drawings clearly showing all required external connections points, their size, their function/marking, and specifying the size and type of cable required.
The Offerer submitting a proposal is required to submit examples of the documentation to be submitted and subsequently electronically converted to machine code. The Engineer shall be the sole judge of the intuitive requirement of the submitted example. As an example, SAMA and Boolean forms are highly preferred, although SAMA, Boolean, and ladder variants may be acceptable if sufficiently obvious to the Engineer.
All terminations shall be clearly labeled as documented on these drawings.
E. Component Physical Drawings The Offerer shall supply detailed physical outline drawings of all supplied hardware, such as instrument racks, operators displays, weights, outline dimensions, mounting and termination details, etc.
All terminations shall be properly sized to interface to existing plant wiring.G. System Power and Heat Load Requirements The Offerer shall submit to WVA a document specifying the power requirements of the proposed system, including power consumption, in rush current, voltage limits, and noise limits. System/cabinet heat load and cooling limit requirement shall also be provided.H. Component Accuracy and Drift Data The Offerer shall supply accuracy and drift data for all components supplied.
F. Wiring Connection Drawings The Offerer shall supply wiring connections drawings clearly showing all required external connections points, their size, their function/marking, and specifying the size and type of cable required. All terminations shall be clearly labeled as documented on these drawings. All terminations shall be properly sized to interface to existing plant wiring.
This shall include as a minimum the inaccuracies due to temperature, power supply, time dependent drift, and repeatability.
G. System Power and Heat Load Requirements The Offerer shall submit to WVA a document specifying the power requirements of the proposed system, including power consumption, in rush current, voltage limits, and noise limits. System/cabinet heat load and cooling limit requirement shall also be provided.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 27 of 440 2.8.3 Documentation (continued)
H. Component Accuracy and Drift Data The Offerer shall supply accuracy and drift data for all components supplied. This shall include as a minimum the inaccuracies due to temperature, power supply, time dependent drift, and repeatability.
: 1. Seismic Qualification Information See Appendix H for seismic response curves to be used in conjunction with these requirements, 1. Control Cabinet Where existing cabinets are not used, the Offerer shall supply a cabinet to house control system hardware, power supplies, and 110 hardware.
 
The cabinet shall be similar to existing Foxboro control cabinets.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 27 of 440 2.8.3     Documentation (continued)
Offerer shall perform walkdown to scope out size, placement, and mounting.Cabinet and processor loading should allow future expansion capability within the existing cabinets.
: 1. Seismic Qualification Information See Appendix H for seismic response curves to be used in conjunction with these requirements,
The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials.
: 1. Control Cabinet Where existing cabinets are not used, the Offerer shall supply a cabinet to house control system hardware, power supplies, and 110 hardware. The cabinet shall be similar to existing Foxboro control cabinets. Offerer shall perform walkdown to scope out size, placement, and mounting.
The Offerer shall demonstrate cabinet seismic structural integrity in accordance with WVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment." The Offerer shall verify sufficient clearance is available to transport control cabinets through existing entry ways.2. Control Racks Remote I/O hardware must be installed in existing process control system instrument racks with a minimum impact on field terminations and cabinet structural configuration.
Cabinet and processor loading should allow future expansion capability within the existing cabinets. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials. The Offerer shall demonstrate cabinet seismic structural integrity in accordance with WVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment."
Offerer shall evaluate the rack structure (including on-site visits) and provide all necessary mounting hardware.
The Offerer shall verify sufficient clearance is available to transport control cabinets through existing entry ways.
If an enclosure is supplied, the Offerer shall demonstrate seismic structural integrity in accordance with TVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment." 3. Handstations/Operator Console The MCR handstations must be installed within the existing main control board cutouts with a minimum impact on the control boards. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13, "Seismic Qualification of Category 1 (L) Fluid System Components and Electrical or Mechanical Equipment".
: 2. Control Racks Remote I/O hardware must be installed in existing process control system instrument racks with a minimum impact on field terminations and cabinet structural configuration.
TVA shall select handstations.
Offerer shall evaluate the rack structure (including on-site visits) and provide all necessary mounting hardware. If an enclosure is supplied, the Offerer shall demonstrate seismic structural integrity in accordance with TVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment."
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 28 of 440 2.8.3 Documentation (continued)
: 3. Handstations/Operator Console The MCR handstations must be installed within the existing main control board cutouts with a minimum impact on the control boards. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13, "Seismic Qualification of Category 1(L) Fluid System Components and Electrical or Mechanical Equipment". TVA shall select handstations.
: 4. MCR Remote I/O Remote IO in the Main Control Room shall be mounted in a location in existing MCR panels. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13,"Seismic Qualification of Category 1 (L) Fluid System Components and Electrical or Mechanical Equipment".
 
: 5. Engineering Workstations One Engineering Workstation will be installed in the Unit 2 Auxiliary Instrument Room located in a locking cabinet. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow TVA to seismically qualify the installation of all components for Seismic Class I(L).6. Operator Control Station Two Operator Control Displays (minimum of 19 inch preferred is 20 inch LCD displays) will be located in the Main Control Room. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow WVA to seismically qualify the installation of all components for Seismic Class I(L).J. EMI/RFI Test Plan If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Plan in accordance with TVA SS-E1B.14.01 shall be submitted for approval by TVA. TVA shall witness testing. If testing is to be performed on the SQN I project this requirement shall be considered to be fulfilled by that project.Special Testing Requirements
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 28 of 440 2.8.3   Documentation (continued)
: 4.     MCR Remote I/O Remote IO in the Main Control Room shall be mounted in a location in existing MCR panels. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13, "Seismic Qualification of Category 1 (L) Fluid System Components and Electrical or Mechanical Equipment".
: 5. Engineering Workstations One Engineering Workstation will be installed in the Unit 2 Auxiliary Instrument Room located in a locking cabinet. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow TVA to seismically qualify the installation of all components for Seismic Class I(L).
: 6. Operator Control Station Two Operator Control Displays (minimum of 19 inch preferred is 20 inch LCD displays) will be located in the Main Control Room. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow WVA to seismically qualify the installation of all components for Seismic Class I(L).
J. EMI/RFI Test Plan If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Plan in accordance with TVA SS-E1B.14.01 shall be submitted for approval by TVA. TVA shall witness testing. If testing is to be performed on the SQN I project this requirement shall be considered to be fulfilled by that project.
Special Testing Requirements
: 1. Testing shall be performed with rack enclosures and wiring configuration similar to the actual plant installation.
: 1. Testing shall be performed with rack enclosures and wiring configuration similar to the actual plant installation.
: 2. The EMI/RFI tests shall be perform with the rack doors open and closed.K. EMI/RFI Test Report If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Report in accordance with WVA SS-E18.14.01 shall be submitted for approval by WVA. If testing is to be performed on the SQN 1 project, this requirement shall be considered to be fulfilled by that project.
: 2. The EMI/RFI tests shall be perform with the rack doors open and closed.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 29 of 440 2.8.3 Documentation (continued)
K. EMI/RFI Test Report If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Report in accordance with WVA SS-E18.14.01 shall be submitted for approval by WVA. If testing is to be performed on the SQN 1 project, this requirement shall be considered to be fulfilled by that project.
L. Burn In Testing The completed system (includes the control system and all supporting peripherals such as displays, hand/auto stations, etc.) or any component shall receive a two week burn in testing. During the two weeks, the system shall be continuously monitored for abnormal operation.
 
The system or any subcomponent shall not reboot, fail, or lose power during this period. If the system reboots or fails, the two week clock for this test shall be reset following corrections for the reboot.M. Factory Acceptance Test (FAT) Plan and Procedures The Offerer shall prepare a comprehensive FAT plan and procedures to be submitted for approval by IVA. This plan shall test and verify system configuration and all system functions as defined in this specification.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 29 of 440 2.8.3     Documentation (continued)
The FAT will validate all application requirements of this specification.
L. Burn In Testing The completed system (includes the control system and all supporting peripherals such as displays, hand/auto stations, etc.) or any component shall receive a two week burn in testing. During the two weeks, the system shall be continuously monitored for abnormal operation. The system or any subcomponent shall not reboot, fail, or lose power during this period. If the system reboots or fails, the two week clock for this test shall be reset following corrections for the reboot.
Both Open loop and closed loop testing will be performed.
M. Factory Acceptance Test (FAT) Plan and Procedures The Offerer shall prepare a comprehensive FAT plan and procedures to be submitted for approval by IVA. This plan shall test and verify system configuration and all system functions as defined in this specification. The FAT will validate all application requirements of this specification. Both Open loop and closed loop testing will be performed. The Offerer should provide a description of their closed loop simulation capabilities for evaluation. These simulation capabilities can be bid as an option or included in the bid. WVA shall witness testing. Upon successful completion of FAT, the C&MS design will be documented as the baseline design and no changes (hardware or software) shall be made outside of TVA's DCN process.
The Offerer should provide a description of their closed loop simulation capabilities for evaluation.
N. Factory Acceptance Test (FAT) Report Before Site delivery, a FAT final report (executed FAT Plan/Procedures) shall be submitted for approval by WVA to document performance of the FAT test, and document the resolution of any test anomalies or open items.
These simulation capabilities can be bid as an option or included in the bid. WVA shall witness testing. Upon successful completion of FAT, the C&MS design will be documented as the baseline design and no changes (hardware or software) shall be made outside of TVA's DCN process.N. Factory Acceptance Test (FAT) Report Before Site delivery, a FAT final report (executed FAT Plan/Procedures) shall be submitted for approval by WVA to document performance of the FAT test, and document the resolution of any test anomalies or open items.0. Bill of Material The Offerer shall submit a (by both technical and commercial interfaces)
: 0. Bill of Material The Offerer shall submit a (by both technical and commercial interfaces) Bill of Material for approval for all supplied components with a description, part number and quantity supplied for each item.
Bill of Material for approval for all supplied components with a description, part number and quantity supplied for each item.P. Software Configuration Control Information Software configuration control information shall be supplied for the final system software configuration to provide traceability to the software baseline tested and approved by the FAT.Q. System Storage Requirements Offeror approved storage requirements for all system components shall be provided, including shelf life specifications and any routine maintenance required while in storage, such as battery replacement.
P. Software Configuration Control Information Software configuration control information shall be supplied for the final system software configuration to provide traceability to the software baseline tested and approved by the FAT.
R. Operators Guide A complete and comprehensive Operator's Guide(s) shall be submitted for approval by TVA for all system developmental and simulation software.
Q. System Storage Requirements Offeror approved storage requirements for all system components shall be provided, including shelf life specifications and any routine maintenance required while in storage, such as battery replacement.
This is anticipated to be a combination of standard documentation and training documentation.
R. Operators Guide A complete and comprehensive Operator's Guide(s) shall be submitted for approval by TVA for all system developmental and simulation software. This is anticipated to be a combination of standard documentation and training documentation.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 30 of 440 2.8.3 Documentation (continued)
 
S. Vendor Manuals Five copies of a complete and comprehensive set of Vendor Manuals for all supplied equipment shall be submitted for approval by TVA. The Offerer shall identify any periodic maintenance required to achieve the submitted reliability numbers and any recommended maintenance for improved performance.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 30 of 440 2.8.3   Documentation (continued)
Components with Electrolytic capacitors shall be identified along with a recommended replacement frequency and shelf life.T. Other Documentation All documentation submitted to WVA shall be upgraded to the as built condition by the Offerer within 90 days after System Acceptance.
S. Vendor Manuals Five copies of a complete and comprehensive set of Vendor Manuals for all supplied equipment shall be submitted for approval by TVA. The Offerer shall identify any periodic maintenance required to achieve the submitted reliability numbers and any recommended maintenance for improved performance. Components with Electrolytic capacitors shall be identified along with a recommended replacement frequency and shelf life.
Drawings shall be submitted electronically to TVA in AutoCad format, Release 14 or later.The required documentation shall include but is not limited to the following.
T. Other Documentation All documentation submitted to WVA shall be upgraded to the as built condition by the Offerer within 90 days after System Acceptance. Drawings shall be submitted electronically to TVA in AutoCad format, Release 14 or later.
: 1. Organizational Chart -This chart shall show the Offerer's key technical and administrative personnel relative to this contract.2. Input/Output List(s) -The I/O list(s) shall show all signals entering and leaving the cabinets.
The required documentation shall include but is not limited to the following.
The list shall include unique alphanumeric identifiers for all new cables, TVA cable or wire identifiers for reused signals, IO point descriptions in English, and the I/O signal level. The data is anticipated to be a Microsoft Access file.3. Bill of Materials  
: 1. Organizational Chart - This chart shall show the Offerer's key technical and administrative personnel relative to this contract.
-The bill of materials shall itemize all equipment provided.
: 2. Input/Output List(s) - The I/O list(s) shall show all signals entering and leaving the cabinets. The list shall include unique alphanumeric identifiers for all new cables, TVA cable or wire identifiers for reused signals, IO point descriptions in English, and the I/O signal level. The data is anticipated to be a Microsoft Access file.
This bill shall include unique identification of each component (part number), range, accuracy, description of purpose or application, and manufacturer if other than the Offerer. This documentation shall be maintained as a xbase file for the life of the project.4. Mechanical Drawings -These drawings should show all outline dimensions, sections, details, and all external connections of all equipment showing type, location, size, and mounting details. Further, these drawings must show general equipment arrangement including plans, elevations, sections, and details of all the control system components in their recommended orientations and locations.
: 3. Bill of Materials - The bill of materials shall itemize all equipment provided. This bill shall include unique identification of each component (part number), range, accuracy, description of purpose or application, and manufacturer if other than the Offerer. This documentation shall be maintained as a xbase file for the life of the project.
: 5. Wiring and Schematic Diagrams -Wiring, schematic, and cable termination diagrams shall consist of the following:
: 4. Mechanical Drawings - These drawings should show all outline dimensions, sections, details, and all external connections of all equipment showing type, location, size, and mounting details. Further, these drawings must show general equipment arrangement including plans, elevations, sections, and details of all the control system components in their recommended orientations and locations.
: a. Wiring Diagrams -A complete set of wiring diagrams that clearly show the wiring, including cable connections between the Input/Output termination cabinet(s), internal or external prefabricated cables, jumpers, and other wiring.
: 5. Wiring and Schematic Diagrams - Wiring, schematic, and cable termination diagrams shall consist of the following:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 31 of 440 2.8.3 Documentation (continued)
: a. Wiring Diagrams - A complete set of wiring diagrams that clearly show the wiring, including cable connections between the Input/Output termination cabinet(s), internal or external prefabricated cables, jumpers, and other wiring.
: b. Terminal Block Drawings -A detailed terminal board or terminal block arrangement diagram clearly showing the field termination.
 
The I/O termination drawings shall show actual physical locations and point assignments (Offerer's wiring). All I/O point names and Offerer wiring shall appear on these drawings.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                 Rev. 0001 Specification                                                       Page 31 of 440 2.8.3   Documentation (continued)
Complete cross reference information shall be provided on each drawing for each I/O point.6. System Functional Drawings -System functional diagrams and digital logic diagrams shall be functionally oriented rather than hardware or system programming oriented.
: b. Terminal Block Drawings - A detailed terminal board or terminal block arrangement diagram clearly showing the field termination. The I/O termination drawings shall show actual physical locations and point assignments (Offerer's wiring). All I/O point names and Offerer wiring shall appear on these drawings. Complete cross reference information shall be provided on each drawing for each I/O point.
In a clear and concise manner, these functional diagrams shall show the functional operation of the controls and associated devices. These diagrams shall be prepared using the latest issue of the standard ISA $5.1 instrumentation and control symbols or equivalent.
: 6. System Functional Drawings - System functional diagrams and digital logic diagrams shall be functionally oriented rather than hardware or system programming oriented. In a clear and concise manner, these functional diagrams shall show the functional operation of the controls and associated devices. These diagrams shall be prepared using the latest issue of the standard ISA $5.1 instrumentation and control symbols or equivalent. The logic diagrams shall denote all interlocking that is provided.
The logic diagrams shall denote all interlocking that is provided.7. Configuration Drawings -Configuration diagrams shall detail the control processors configurations or programs.
: 7. Configuration Drawings - Configuration diagrams shall detail the control processors configurations or programs. Unlike the functional and logic diagrams, these drawings shall be hardware oriented. The partitioning of functions between control processors shall be clearly shown. These diagrams shall be annotated to clearly show the control functions and interlocks. The Offerer may use his standard symbology for this submittal. A key diagram shall be provided for all of the Offerer symbols.
Unlike the functional and logic diagrams, these drawings shall be hardware oriented.
: 8. Configuration Download - Two complete sets of downloadable system configuration shall be provided on magnetic media, CDROM, or DVDs. This media shall provide the ability to completely configure the control system and all auxiliaries. The media size and type shall be compatible with the control system capabilities.
The partitioning of functions between control processors shall be clearly shown. These diagrams shall be annotated to clearly show the control functions and interlocks.
The system shall provide ability to verify error free download configurations, such as checksum, etc.
The Offerer may use his standard symbology for this submittal.
: 9. Control System Functional Description - The Offerer shall submit ten copies of the complete functional description (Functional Drawings and Software Design Descriptions) of the supplied contror system and all its auxiliaries. This document shall provide complete descriptions of the control system for operation and maintenance personnel. It shall provide technical explanations of overall system and individual loop functions and configurations. The objectives of overall control system and each loop shall be stated. The methods of selecting control modes shall be described. In addition, all control functions including interlocks, permissives functions, tracking of output signals, lockout and bypass features, deadbands, etc., shall be described.
A key diagram shall be provided for all of the Offerer symbols.8. Configuration Download -Two complete sets of downloadable system configuration shall be provided on magnetic media, CDROM, or DVDs. This media shall provide the ability to completely configure the control system and all auxiliaries.
: 10. Service Manuals - The Offerer shall provide two copies of manufacturer service (shop) manuals for each type of equipment provided. These manuals shall provide detailed diagnostic, repair, and service instructions with detailed explanations of system design concepts for all field-repairable modules.
The media size and type shall be compatible with the control system capabilities.
 
The system shall provide ability to verify error free download configurations, such as checksum, etc.9. Control System Functional Description  
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 32 of 440 2.8.3   Documentation (continued)
-The Offerer shall submit ten copies of the complete functional description (Functional Drawings and Software Design Descriptions) of the supplied contror system and all its auxiliaries.
: 11. Power load Data - Power load Data for the system, each cabinet, and for individual components shall be supplied. This data is to includes full load current, voltage rating, power consumption, in rush current magnitude and duration, and the characteristic curves of any protective devices in the equipment.
This document shall provide complete descriptions of the control system for operation and maintenance personnel.
: 12. Heat load Data - The Offerer shall provide the heat load in Btu/hr for system cabinets and work stations that are located in a controlled environment.
It shall provide technical explanations of overall system and individual loop functions and configurations.
: 13. Project Document List - The project document list (PDL) shall be a data base of all Offerer drawings and other documentation submitted or planned to be submitted during the life of the project. The data base shall be updated and issued, as both a paper report and electronic file, with each drawing or document transmittal. The data base shall be maintained for the life of the project. Included in the data base shall be the transmittal of I/O lists, manuals, cable lists, and other documentation which normally is not considered a drawing. The PDL shall serve as the inventory of engineering and design deliverables. The format of the data base and reports shall be mutually agreed to during the kickoff meeting(s). The fields in the data base shall include, but are not limited to, the following: Drawing or document number; revision number; description; submittal date; approval status of drawing or document.
The objectives of overall control system and each loop shall be stated. The methods of selecting control modes shall be described.
: 14. PVC Certificate of Conformance - a certificate of conformance for PVC free material and a listing of all external wiringlcabling and components containing PVC with estimated PVC mass shall be provided.
In addition, all control functions including interlocks, permissives functions, tracking of output signals, lockout and bypass features, deadbands, etc., shall be described.
2.8.4       Training System training on the Control system operations and functions are required. This article is intended to identify the minimum training needed to support system design, installation, start-up, and maintenance.
: 10. Service Manuals -The Offerer shall provide two copies of manufacturer service (shop) manuals for each type of equipment provided.
Training shall be conducted by experienced professional training personnel, supported by modern training aids and shall use the actual system hardware as much as possible.
These manuals shall provide detailed diagnostic, repair, and service instructions with detailed explanations of system design concepts for all field-repairable modules.
Participants shall receive individual copies of the technical manuals and pertinent documentation which describe actual TVA system hardware and software. The cost of all courses described in this section shall be separately priced, on a per-student basis.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 32 of 440 2.8.3 Documentation (continued)
The following training shall be included in the Offerer's bid. The training shall be applicable for the following disciplines.
: 11. Power load Data -Power load Data for the system, each cabinet, and for individual components shall be supplied.
 
This data is to includes full load current, voltage rating, power consumption, in rush current magnitude and duration, and the characteristic curves of any protective devices in the equipment.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 33 of 440 2.8.4   Training (continued)
: 12. Heat load Data -The Offerer shall provide the heat load in Btu/hr for system cabinets and work stations that are located in a controlled environment.
A. Engineering The Offerer shall provide training for a class of 12 engineering personnel to allow these individuals to train other engineering personnel sufficient to adequately install, test, startup, operate, maintain, and modify the proposed system.
: 13. Project Document List -The project document list (PDL) shall be a data base of all Offerer drawings and other documentation submitted or planned to be submitted during the life of the project. The data base shall be updated and issued, as both a paper report and electronic file, with each drawing or document transmittal.
Training shall instruct engineers on system architecture, electronic modules, interfacing problems, electromagnetic noise, cabling requirements, control and graphic system configuration, as well as installation and maintenance considerations. Also training shall instruct the engineers on how to use the operating software, utilities, and special high level software packages for operation, configuration, tuning, and diagnostics. This training shall be conducted at the plant site.
The data base shall be maintained for the life of the project. Included in the data base shall be the transmittal of I/O lists, manuals, cable lists, and other documentation which normally is not considered a drawing. The PDL shall serve as the inventory of engineering and design deliverables.
B. Maintenance The Offerer shall supply training for a class of 12 maintenance personnel sufficient to allow these individuals to train other maintenance personnel to adequately maintain and troubleshoot the system. Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.
The format of the data base and reports shall be mutually agreed to during the kickoff meeting(s).
Training shall instruct technicians on how to do routine maintenance and troubleshooting of the control system and its components. This training shall include additional maintenance and repair instructions for any component not common in the power industry. To facilitate diagnosing system irregularities, this training shall be system oriented to brief technicians on how controls and instruments relate to other system components. This training shall provide an overview of the controls and graphics configuration as implemented by this project. The duration of this training should not be less than 2 weeks.
The fields in the data base shall include, but are not limited to, the following:
The course shall familiarize TVA personnel with a full-scale preventive maintenance program for the system. Hardware training shall include a section on the use of all processors, peripheral, and other diagnostic software.
Drawing or document number; revision number; description; submittal date; approval status of drawing or document.14. PVC Certificate of Conformance  
Instrument technician training shall be conducted at the plant site. The training classes shall include a "hands on" laboratory. The equipment for this training should not use any of the components to be installed in the generating units. The training hardware shall be shipped to the site in advance of the class sessions. In advance of the class session, the Offerer shall set up and check out all hardware supplied for training.
-a certificate of conformance for PVC free material and a listing of all external wiringlcabling and components containing PVC with estimated PVC mass shall be provided.2.8.4 Training System training on the Control system operations and functions are required.
 
This article is intended to identify the minimum training needed to support system design, installation, start-up, and maintenance.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 34 of 440 2.8.4   Training (continued)
Training shall be conducted by experienced professional training personnel, supported by modern training aids and shall use the actual system hardware as much as possible.Participants shall receive individual copies of the technical manuals and pertinent documentation which describe actual TVA system hardware and software.
C. Operations The Offerer shall supply training for a class of 12 operations personnel sufficient to allow these individuals to train other operations personnel to adequately operate and manipulate the system and write operating procedures. Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.
The cost of all courses described in this section shall be separately priced, on a per-student basis.The following training shall be included in the Offerer's bid. The training shall be applicable for the following disciplines.
Training shall be split into two phases. The first shall instruct operators in the operation of the operator interface devices, describe overall system operation, and the recommended operation procedures. The second phase shall be customized to the control system design and implementation with focus on soft controls, failure mode, alarms, etc. At the conclusion of this training the operator shall have an understanding of the operation of the Control System hardware, the controls configuration, and the operator graphics configuration as implemented. The operator training classes shall be conducted at the plant site.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 33 of 440 2.8.4 Training (continued)
D. Instructors The principal instructor in each course provided by the Offerer shall have had previous formal classroom instructor experience. The software instructor shall have a complete and thorough technical knowledge of the hardware and software to be supplied under this contract. He shall be experienced in the skills involved in development, updating and operation of the software. The hardware instructor shall have a complete and thorough knowledge of test and laboratory equipment, diagnostic software, handbooks, guides and the use of tools and other aids in maintenance troubleshooting and taking proper corrective actions for the system.
A. Engineering The Offerer shall provide training for a class of 12 engineering personnel to allow these individuals to train other engineering personnel sufficient to adequately install, test, startup, operate, maintain, and modify the proposed system.Training shall instruct engineers on system architecture, electronic modules, interfacing problems, electromagnetic noise, cabling requirements, control and graphic system configuration, as well as installation and maintenance considerations.
E. Course Outlines A course outline for each course to be presented shall be forwarded to the Engineer with the proposal. This outline shall contain a short review of the subject of the course and how the course fits into the overall training program. The outline shall be in sufficient detail to allow the Engineer to evaluate the material in relation to the needs of the personnel attending the course. The Engineer may then make recommendations for additions and/or deletions to the subject matter as dictated by these and other considerations.
Also training shall instruct the engineers on how to use the operating software, utilities, and special high level software packages for operation, configuration, tuning, and diagnostics.
 
This training shall be conducted at the plant site.B. Maintenance The Offerer shall supply training for a class of 12 maintenance personnel sufficient to allow these individuals to train other maintenance personnel to adequately maintain and troubleshoot the system. Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.Training shall instruct technicians on how to do routine maintenance and troubleshooting of the control system and its components.
NPG Site-Specific         WBN Unit 2 NSSS and SOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 35 of 440 2.8.4   Training (continued)
This training shall include additional maintenance and repair instructions for any component not common in the power industry.
F. Course Content Lesson plans and training manuals for Offerer supplied custom courses shall be prepared by the Offerer and submitted to the Engineer for review at least two months prior to the start of classroom instruction. The Engineer considers it desirable that the manuals used for training have been specifically designed to be used as training aids.
To facilitate diagnosing system irregularities, this training shall be system oriented to brief technicians on how controls and instruments relate to other system components.
The exclusive use of computer reference manuals and maintenance manuals for this purpose is unacceptable. Upon completion of each course, the student will retain the training manuals.
This training shall provide an overview of the controls and graphics configuration as implemented by this project. The duration of this training should not be less than 2 weeks.The course shall familiarize TVA personnel with a full-scale preventive maintenance program for the system. Hardware training shall include a section on the use of all processors, peripheral, and other diagnostic software.Instrument technician training shall be conducted at the plant site. The training classes shall include a "hands on" laboratory.
The Offerer shall provide all special tools, equipment, training aids and any other materials required to assure that a meaningful course is taught. The number of special tools and other training equipment shall be adequate for the number of students attending the course. TVA will provide classroom space for any on-site training. For all off-site training the classroom space shall be provided by the Offerer.
The equipment for this training should not use any of the components to be installed in the generating units. The training hardware shall be shipped to the site in advance of the class sessions.
2.8.5       Installation and Startup Support The Offerer shall supply Engineering field support at the WBN plant site to support the installation and startup of the proposed system. TVA has overall responsibility for the installation of the new C&MS and cabinets. WBN will provide the craft workers needed for this installation. The Offerer can provide as a quoted option of this spec, an itemized detail listing of job functions and associated costs for the use of their people to perform the installation. This will include any support required for the Site Acceptance Test, Post Modification Test and plant startup to be run by TVA after system installation and a minimum of fifteen non-consecutive days of support by one individual.
In advance of the class session, the Offerer shall set up and check out all hardware supplied for training.
In the base offering, provide a field service engineer to assist with the initial installation up to and including system start-up. This shall include all pre-power up checks according to Offerers recommended practices. Once tuning begins, the Service Engineer shall remain on-site until tuning is complete assuming the unit is available. The Offerer shall break out the cost of the field service and list it as labor and travel/per diem categories. Overtime calculations shall not be applied to the travel and per diem costs. The customary outage schedule calls for six 10-hour days. The field service engineer's schedule shall correspond to the availability of the generating unit for tuning. This could mean day, evening, night, or weekend shifts for which there shall be no overtime differential.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 34 of 440 2.8.4 Training (continued)
A.     Expected Duties The Offerer's Field Service Engineer will be asked to perform, but not be limited to, the following for each control system.
C. Operations The Offerer shall supply training for a class of 12 operations personnel sufficient to allow these individuals to train other operations personnel to adequately operate and manipulate the system and write operating procedures.
: 1. Oversee the installation of the Control System.
Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.Training shall be split into two phases. The first shall instruct operators in the operation of the operator interface devices, describe overall system operation, and the recommended operation procedures.
: 2. Support placing system into initial operation.
The second phase shall be customized to the control system design and implementation with focus on soft controls, failure mode, alarms, etc. At the conclusion of this training the operator shall have an understanding of the operation of the Control System hardware, the controls configuration, and the operator graphics configuration as implemented.
: 3. Support testing the system for proper operation verifying power, grounding, communications, module status, power supplies, etc.
The operator training classes shall be conducted at the plant site.D. Instructors The principal instructor in each course provided by the Offerer shall have had previous formal classroom instructor experience.
: 4. Support placing all loops in manual operation.
The software instructor shall have a complete and thorough technical knowledge of the hardware and software to be supplied under this contract.
 
He shall be experienced in the skills involved in development, updating and operation of the software.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 36 of 440 2.8.5   Installation and Startup Support (continued)
The hardware instructor shall have a complete and thorough knowledge of test and laboratory equipment, diagnostic software, handbooks, guides and the use of tools and other aids in maintenance troubleshooting and taking proper corrective actions for the system.E. Course Outlines A course outline for each course to be presented shall be forwarded to the Engineer with the proposal.
This outline shall contain a short review of the subject of the course and how the course fits into the overall training program. The outline shall be in sufficient detail to allow the Engineer to evaluate the material in relation to the needs of the personnel attending the course. The Engineer may then make recommendations for additions and/or deletions to the subject matter as dictated by these and other considerations.
NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 35 of 440 2.8.4 Training (continued)
F. Course Content Lesson plans and training manuals for Offerer supplied custom courses shall be prepared by the Offerer and submitted to the Engineer for review at least two months prior to the start of classroom instruction.
The Engineer considers it desirable that the manuals used for training have been specifically designed to be used as training aids.The exclusive use of computer reference manuals and maintenance manuals for this purpose is unacceptable.
Upon completion of each course, the student will retain the training manuals.The Offerer shall provide all special tools, equipment, training aids and any other materials required to assure that a meaningful course is taught. The number of special tools and other training equipment shall be adequate for the number of students attending the course. TVA will provide classroom space for any on-site training.
For all off-site training the classroom space shall be provided by the Offerer.2.8.5 Installation and Startup Support The Offerer shall supply Engineering field support at the WBN plant site to support the installation and startup of the proposed system. TVA has overall responsibility for the installation of the new C&MS and cabinets.
WBN will provide the craft workers needed for this installation.
The Offerer can provide as a quoted option of this spec, an itemized detail listing of job functions and associated costs for the use of their people to perform the installation.
This will include any support required for the Site Acceptance Test, Post Modification Test and plant startup to be run by TVA after system installation and a minimum of fifteen non-consecutive days of support by one individual.
In the base offering, provide a field service engineer to assist with the initial installation up to and including system start-up.
This shall include all pre-power up checks according to Offerers recommended practices.
Once tuning begins, the Service Engineer shall remain on-site until tuning is complete assuming the unit is available.
The Offerer shall break out the cost of the field service and list it as labor and travel/per diem categories.
Overtime calculations shall not be applied to the travel and per diem costs. The customary outage schedule calls for six 10-hour days. The field service engineer's schedule shall correspond to the availability of the generating unit for tuning. This could mean day, evening, night, or weekend shifts for which there shall be no overtime differential.
A. Expected Duties The Offerer's Field Service Engineer will be asked to perform, but not be limited to, the following for each control system.1. Oversee the installation of the Control System.2. Support placing system into initial operation.
: 3. Support testing the system for proper operation verifying power, grounding, communications, module status, power supplies, etc.4. Support placing all loops in manual operation.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 36 of 440 2.8.5 Installation and Startup Support (continued)
: 5. Support tuning for the all control functions in the C&MS, both for low power and full power plant operation.
: 5. Support tuning for the all control functions in the C&MS, both for low power and full power plant operation.
: 6. Support troubleshooting of the C&MS, 7. Support development of configuration changes in conjunction with the Offeror project team, the Engineer, and Operations representatives as necessary for successful unit operation.
: 6. Support troubleshooting of the C&MS,
: 8. Support development of proper documentation of system changes and upgrades.9. Support the running of system diagnostics.
: 7. Support development of configuration changes in conjunction with the Offeror project team, the Engineer, and Operations representatives as necessary for successful unit operation.
: 10. Review system functionality.
: 8. Support development of proper documentation of system changes and upgrades.
If applicable, Offerer input pertaining to potential improvement areas.11. Provide milestone schedule.12. Support verification of correct system wiring.13. Support final tuning all control loops and the revision all I/O and data bases as required by actual field conditions.
: 9. Support the running of system diagnostics.
: 14. Support the final system level pre-operational testing.15. Participate in System Acceptance Testing and Post Modification Testing.16. Place into proper operation all peripheral devices such as printers, loggers (includes updates post startup), LAN interfaces, and the like.17. Support installation and the proper and acceptable operation of the Simulator component.
: 10. Review system functionality. If applicable, Offerer input pertaining to potential improvement areas.
B. Field Service Engineer Selection/Retention The Offerer's Field Service Engineers' names and resumes shall be submitted to TVA for selection and approval.
: 11. Provide milestone schedule.
After obtaining TVA's approval, the Offerer may not replace the service personnel without TVA's written consent. TVA reserves the right to reject any Offerer personnel if, in TVA's opinion, said person fails to provide the degree of expertise, responsibility, or adherence to TVA policies and practices.
: 12. Support verification of correct system wiring.
In such case, TVA will notify the Offerer that a replacement is required.
: 13. Support final tuning all control loops and the revision all I/O and data bases as required by actual field conditions.
A replacement person will be promptly provided.
: 14. Support the final system level pre-operational testing.
TVA reserves the right to back charge the contract for any financial impact brought about by the failure of the Offerer to provide adequate field services.2.9 Schedule Refer to the contract milestone schedule.
: 15. Participate in System Acceptance Testing and Post Modification Testing.
The Offeror shall maintain and update status of the project's working schedule.
: 16. Place into proper operation all peripheral devices such as printers, loggers (includes updates post startup), LAN interfaces, and the like.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 37 of 440 2.9 Schedule (continued)
: 17. Support installation and the proper and acceptable operation of the Simulator component.
Table Table I -- Milestone Events ID Vendor Contract Supplement Award 1 A&E Starts work on DCN Package 2 Engineering Training 3 Foxboro submittal of Required Data Reques t 4 TVA supply of Requested data 5 SOAP Submittal; Preliminary SDD Submittal; Preliminary Component Physical Dwgs submittal; Preliminary Wiring Connection and Hardware Configuration Drawings;System Power Req and heat load data; Accuracy and Drift data; 6 10% Design Review, Maintenance Training 7 EMI/RFI Test Plan submittal; Seismic Qual info submittal;, Preliminary System Hazards Analysis Submittal:
B. Field Service Engineer Selection/Retention The Offerer's Field Service Engineers' names and resumes shall be submitted to TVA for selection and approval. After obtaining TVA's approval, the Offerer may not replace the service personnel without TVA's written consent. TVA reserves the right to reject any Offerer personnel if, in TVA's opinion, said person fails to provide the degree of expertise, responsibility, or adherence to TVA policies and practices. In such case, TVA will notify the Offerer that a replacement is required. A replacement person will be promptly provided. TVA reserves the right to back charge the contract for any financial impact brought about by the failure of the Offerer to provide adequate field services.
FAT plan (TVA FAT Scoping document);
2.9       Schedule Refer to the contract milestone schedule. The Offeror shall maintain and update status of the project's working schedule.
8 Final Component Physical Dwgs submittal; Final SDD Submittal; Preliminary Winng Connection and Hardware Configuration Drawings 9 8imulation MWdification Plan 10 Software Configuration control info submittal; System Hazards Analysis Submitlal; Build of Material submittal; 11 50% Design Review; 12 Preliminary Simulator Modification Information Submittal-, Draft FAT procedure submittal; EM[/RFI Test Report Submittal 13"[VAN FAT Approval; PMT Scoping Document; Preliminary Operator Guide subm itta;Vendor Manual Submittale; Storage Requirement submittal; 14 100% Design Review; 15 FAT Performed IS FAT Final Report; Approved Operator Guide submittal; Approved Vendor Manuals;DCN Issued; Mods Starts Work Packages 17 System Delivery; Simulator Upgrade Delivery; Site Acceptance Testing 18 Simulator Testing Performed 19 Operator Training; 20 Plant Installation 21 Post Mod/Startup Testing 22 NPG Site-Specific i WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 38 of 440 3.0 GENERAL CONTROL SYSTEM REQUIREMENTS 3.1 Overview 3.1.1 Foxboro, GEMAC, and Robertshaw Control Racks Upgrade, and Turbine Building BOP Expansion Racks This upgrade replaces most of the existing NSSS control system equipment, BOP GEMAC and Robertshaw equipment located in the Auxiliary Instrument Room (AIR)and the Main Control Room (MCR). Also, the C&MS shall supply new racks and hardware for interface with process equipment located in the Turbine Building (TBBOP).3.1.2 Existing Specific Groupings NSSS Groupings Group 1 will consist of Racks 14, 15, and 16 with the main AC source supplied from Vital Inverter I Group 2 will consist of Racks 17, 18, and 19 with the main AC source supplied from Vital Inverter II Group 3 Will consist of Racks 20 and 21 with the main AC source supplied from Vital Inverter Ill Group 4 will consist of Racks 22, 23, 24, and 25 with the main AC source supplied from Vital Inverter IV Racks 26 and 27 -ICS Interface Racks GEMAC and Robertshaw Racks 2-R-121 GEMAC Rack powered from Vital Inverter II 2-R-122 GEMAC Rack powered from Vital Inverter II 2-R-123 through 2-R-126 is a four bay GEMAC rack with all field cables terminated in 2-R-126 and powered from Vital Inverter I 2-R-130 GEMAC Rack powered from Vital Inverter II 2-R-137 Robertshaw Rack powered from Vital Inverter I 2-R-141 Robertshaw Rack powered from powered from Vital Inverter I 2-R-1 42 Robertshaw Rack powered from Vital Inverter I Power feeds for the new TBBOP Racks will be established later as design requirements dictate.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 39 of 440 3.2 Hardware Requirements 3.2.1 Hardware Requirements for the Control System A. System Safety Classification This C&MS is classified as Quality Related (OR), IEEE Class Non-1 E, Seismic Category 1L(B) (position retention) with the exception of equipment located in the Turbine Building.
NPG Site-Specific                 WBN Unit 2 NSSS and BOP Controls                       Specification Engineering                             Upgrade Specification                       Rev. 0001 Specification                                                                         Page 37 of 440 2.9           Schedule (continued)
The Turbine Building equipment is classified as Non-quality related (NOR), non-seismic.
Table Table I -- Milestone Events                                                     ID Vendor Contract Supplement Award                                                     1 A&E Starts work on DCN Package                                                       2 Engineering Training                                                                 3 Foxboro submittal of Required Data Reques t                                           4 TVA supply of Requested data                                                         5 SOAP Submittal; Preliminary SDD Submittal; Preliminary Component Physical Dwgs submittal; Preliminary Wiring Connection and Hardware Configuration Drawings; System Power Req and heat load data; Accuracy and Drift data;                         6 10% Design Review, Maintenance Training                                               7 EMI/RFI Test Plan submittal; Seismic Qual info submittal;, Preliminary System Hazards Analysis Submittal: FAT plan (TVA FAT Scoping document);                               8 Final Component Physical Dwgs submittal; Final SDD Submittal; Preliminary Winng Connection and Hardware Configuration Drawings                                         9 8imulation MWdification Plan                                                         10 Software Configuration control info submittal; System Hazards Analysis Submitlal; Build of Material submittal;                                                         11 50% Design Review;                                                                   12 Preliminary Simulator Modification Information Submittal-, Draft FAT procedure submittal; EM[/RFI Test Report Submittal                                             13
B. Control System Architecture The proposed system shall have the capability for distributed architecture comprised of a family of independent functional processors.
"[VAN FAT Approval; PMT Scoping Document; Preliminary Operator Guide subm itta; Vendor Manual Submittale; Storage Requirement submittal;                             14 100% Design Review;                                                                 15 FAT Performed                                                                       IS FAT Final Report; Approved Operator Guide submittal; Approved Vendor Manuals; DCN Issued; Mods Starts Work Packages                                                 17 System Delivery; Simulator Upgrade Delivery; Site Acceptance Testing                 18 Simulator Testing Performed                                                         19 Operator Training;                                                                 20 Plant Installation                                                                 21 Post Mod/Startup Testing                                                             22
Redundant control processor pairs will be located in individual racks to meet all the performance requirements of this specification which includes areas such as response time requirements, failure modes requirements, control system segmentation requirements, etc. The Offerer shall determine the number and location for the purpose providing a bid and shall submit this detail as part of the bid proposal.The functional processors shall have a configurable module/block based program to execute specific dedicated tasks. Systems that require a centralized computer for normal operation are not acceptable (i.e., a personal computer or mainframe computer).
 
The controlling application shall be running in the local control processors.
NPG Site-Specific   i   WBN Unit 2 NSSS and SOP Controls           Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 38 of 440 3.0       GENERAL CONTROL SYSTEM REQUIREMENTS 3.1       Overview 3.1.1     Foxboro, GEMAC, and Robertshaw Control Racks Upgrade, and Turbine Building BOP Expansion Racks This upgrade replaces most of the existing NSSS control system equipment, BOP GEMAC and Robertshaw equipment located in the Auxiliary Instrument Room (AIR) and the Main Control Room (MCR). Also, the C&MS shall supply new racks and hardware for interface with process equipment located in the Turbine Building (TBBOP).
Network switches shall not be used to process critical control system I/O.The control system architecture shall be fault tolerant consisting of a minimum of two redundant channels consisting of microprocessor based controllers and multiple I/O interface modules with remote mount capability.
3.1.2     Existing Specific Groupings NSSS Groupings Group 1 will consist of Racks 14, 15, and 16 with the main AC source supplied from Vital Inverter I Group 2 will consist of Racks 17, 18, and 19 with the main AC source supplied from Vital Inverter II Group 3 Will consist of Racks 20 and 21 with the main AC source supplied from Vital Inverter Ill Group 4 will consist of Racks 22, 23, 24, and 25 with the main AC source supplied from Vital Inverter IV Racks 26 and 27 - ICS Interface Racks GEMAC and Robertshaw Racks 2-R-121 GEMAC Rack powered from Vital Inverter II 2-R-122 GEMAC Rack powered from Vital Inverter II 2-R-123 through 2-R-126 is a four bay GEMAC rack with all field cables terminated in 2-R-126 and powered from Vital Inverter I 2-R-130 GEMAC Rack powered from Vital Inverter II 2-R-137 Robertshaw Rack powered from Vital Inverter I 2-R-141 Robertshaw Rack powered from powered from Vital Inverter I 2-R-1 42 Robertshaw Rack powered from Vital Inverter I Power feeds for the new TBBOP Racks will be established later as design requirements dictate.
The control system shall be linked together by a network of redundant digital communication paths to form a completely integrated, distributed process control system. The system will interface with equipment located on the main control board, process control racks, plant Annunciator Systems, the plant's Integrated Computer System (ICS), the operator's ODU based console displays, and an engineering workstation.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 39 of 440 3.2     Hardware Requirements 3.2.1   Hardware Requirements for the Control System A. System Safety Classification This C&MS is classified as Quality Related (OR), IEEE Class Non-1 E, Seismic Category 1L(B) (position retention) with the exception of equipment located in the Turbine Building. The Turbine Building equipment is classified as Non-quality related (NOR), non-seismic.
B. Control System Architecture The proposed system shall have the capability for distributed architecture comprised of a family of independent functional processors. Redundant control processor pairs will be located in individual racks to meet all the performance requirements of this specification which includes areas such as response time requirements, failure modes requirements, control system segmentation requirements, etc. The Offerer shall determine the number and location for the purpose providing a bid and shall submit this detail as part of the bid proposal.
The functional processors shall have a configurable module/block based program to execute specific dedicated tasks. Systems that require a centralized computer for normal operation are not acceptable (i.e., a personal computer or mainframe computer). The controlling application shall be running in the local control processors. Network switches shall not be used to process critical control system I/O.
The control system architecture shall be fault tolerant consisting of a minimum of two redundant channels consisting of microprocessor based controllers and multiple I/O interface modules with remote mount capability. The control system shall be linked together by a network of redundant digital communication paths to form a completely integrated, distributed process control system. The system will interface with equipment located on the main control board, process control racks, plant Annunciator Systems, the plant's Integrated Computer System (ICS), the operator's ODU based console displays, and an engineering workstation.
In order to perform its control function, the system shall also be responsible for receiving, conditioning, and automatically selecting valid process measurement signals and providing the necessary interlocks and alarms.
In order to perform its control function, the system shall also be responsible for receiving, conditioning, and automatically selecting valid process measurement signals and providing the necessary interlocks and alarms.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 40 of 440 3.2.1 Hardware Requirements for the Control System (continued)
 
C. Micro-processor Controller The controller modules shall contain the process system's control strategies and support needs (e.g., alarms) which will be defined as the controller's configuration.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                   Upgrade Specification                     Rev. 0001 Specification                                                           Page 40 of 440 3.2.1     Hardware Requirements for the Control System (continued)
This configuration shall be composed of standard library functions connected together to provide the defined control strategies.
C. Micro-processor Controller The controller modules shall contain the process system's control strategies and support needs (e.g., alarms) which will be defined as the controller's configuration. This configuration shall be composed of standard library functions connected together to provide the defined control strategies. Both the standard library functions and the specific user configuration shall be stored in nonvolatile memory. The software of the library functions shall be validated by the Offerer through design review, testing, and actual operation experience and shall be in compliance with Reference 3.15B. Appendix C is a listing of the required minimum library functions. In addition, the modules shall provide user programmable capabilities to allow the development of sophisticated, customized control strategies. All components shall be hot swappable and capable of online reconfiguration without interrupting the operating control system. Hot swappable means to change out the controller without affecting the automatic control functions.
Both the standard library functions and the specific user configuration shall be stored in nonvolatile memory. The software of the library functions shall be validated by the Offerer through design review, testing, and actual operation experience and shall be in compliance with Reference 3.15B. Appendix C is a listing of the required minimum library functions.
In addition, the modules shall provide user programmable capabilities to allow the development of sophisticated, customized control strategies.
All components shall be hot swappable and capable of online reconfiguration without interrupting the operating control system. Hot swappable means to change out the controller without affecting the automatic control functions.
D. Redundancy The control system shall be organized using a redundancy design which is electrically isolated from each other such that a failure of one component will not result in the loss of control capability of C&MS. A hardware failure (ie., electrical short) or software problem in any module will not affect proper operation of the redundant channel. The system shall allow for the replacement of faulty modules online. Upon the subsequent power up of the replaced module, it shall be capable of detecting the redundant controller already having control, being reconfigured either automatically or manually and shall assume the role of backup controller.
D. Redundancy The control system shall be organized using a redundancy design which is electrically isolated from each other such that a failure of one component will not result in the loss of control capability of C&MS. A hardware failure (ie., electrical short) or software problem in any module will not affect proper operation of the redundant channel. The system shall allow for the replacement of faulty modules online. Upon the subsequent power up of the replaced module, it shall be capable of detecting the redundant controller already having control, being reconfigured either automatically or manually and shall assume the role of backup controller.
: 1. Controllers The C&MS shall be designed with a minimum of a primary and backup digital controls consisting of redundant, distributed microprocessor based systems operating in parallel such that a failure of the primary controller will result in the automatic transfer of control to its corresponding backup controller.
: 1. Controllers The C&MS shall be designed with a minimum of a primary and backup digital controls consisting of redundant, distributed microprocessor based systems operating in parallel such that a failure of the primary controller will result in the automatic transfer of control to its corresponding backup controller. Uninterrupted automatic control capability for plant operation is mandatory; therefore, the automatic transfer of control between a failed and the good backup controller shall be fault tolerant and unrecognizable to the controlled devices. See Section 3.2.2H for definition. If the Offerer's definition is different, they shall define their definition of Fault Tolerant. For a redundant control system, only one controller will be allowed control at any given time. Triple redundant systems are also acceptable and shall be fault tolerant with 100% coverage. The loss of any controller shall be alarmed.
Uninterrupted automatic control capability for plant operation is mandatory; therefore, the automatic transfer of control between a failed and the good backup controller shall be fault tolerant and unrecognizable to the controlled devices. See Section 3.2.2H for definition.
 
If the Offerer's definition is different, they shall define their definition of Fault Tolerant.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 41 of 440 3.2.1   Hardware Requirements for the Control System (continued)
For a redundant control system, only one controller will be allowed control at any given time. Triple redundant systems are also acceptable and shall be fault tolerant with 100% coverage.
: 2. Inputs Where specified, redundant input signals shall interface with the control system using independent input module/cards (such as separate input card for each redundant input) so that a loss of an input module would result in the loss of only one input signal. Redundant input modules can also be used to meet this requirement. Since the input module/card will contain multiple inputs, the complete loss of a single module/card shall not affect the controlled process. These requirements shall be analyzed in the FMEA and tested in the FAT. TVA has initially identified the inputs requiring redundancy in the specific control system sections. The hazards analysis (system FMEA) and system functional requirements (Sections 4 through 12 below) shalt identify any additional inputs that are critical.
The loss of any controller shall be alarmed.
: 3. Outputs All critical control system outputs shall have redundant output module/cards so that the loss of a single output module/card would not result in the loss of automatic control and would not create a process upset transient. The redundant pair will connect to a single signal cable going to the final control device. These requirements shall be tested in the FAT. Upon loss of both redundant processors, the output shall maintain the last good value to prevent a plant transient (see Section 3.2.2G.2.b). Note: For the MFPT interface (10 to 50 ma outputs), the final output selector shall be a passive diode based circuit design.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 41 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: 4. Control Network Internal communications between the redundant control system and also between the system and certain peripherals (operator's LCDs, engineering workstation, and ICS) shall occur over redundant digital control networks.
: 2. Inputs Where specified, redundant input signals shall interface with the control system using independent input module/cards (such as separate input card for each redundant input) so that a loss of an input module would result in the loss of only one input signal. Redundant input modules can also be used to meet this requirement.
Isolation between the networks shall prevent failure in one side from affecting the alternate side. The loss of either network side shall be alarmed. The control network should be capable of transmitting process signals to be used for process control and to support generation of validation signals to eliminate single input signal failure from causing process perturbations. The control network shall be robust enough to carry worst case data transmission, in the presence of a single failure up to and including the loss of one of the two redundant sides of the network.
Since the input module/card will contain multiple inputs, the complete loss of a single module/card shall not affect the controlled process. These requirements shall be analyzed in the FMEA and tested in the FAT. TVA has initially identified the inputs requiring redundancy in the specific control system sections.
 
The hazards analysis (system FMEA) and system functional requirements (Sections 4 through 12 below) shalt identify any additional inputs that are critical.3. Outputs All critical control system outputs shall have redundant output module/cards so that the loss of a single output module/card would not result in the loss of automatic control and would not create a process upset transient.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 42 of 440 3.2.1     Hardware Requirements for the Control System (continued)
The redundant pair will connect to a single signal cable going to the final control device. These requirements shall be tested in the FAT. Upon loss of both redundant processors, the output shall maintain the last good value to prevent a plant transient (see Section 3.2.2G.2.b).
: 5. ICS Interface For communications interfacing to ICS, TVA defined interfaces shall be utilized. The interface should provide buffered digital to digital communication with the plant computer. The C&MS shall provide digital interface with TVA ICS for all process inputs and output values, intermediate calculated values, and the status of logic parameters.
Note: For the MFPT interface (10 to 50 ma outputs), the final output selector shall be a passive diode based circuit design.4. Control Network Internal communications between the redundant control system and also between the system and certain peripherals (operator's LCDs, engineering workstation, and ICS) shall occur over redundant digital control networks.Isolation between the networks shall prevent failure in one side from affecting the alternate side. The loss of either network side shall be alarmed. The control network should be capable of transmitting process signals to be used for process control and to support generation of validation signals to eliminate single input signal failure from causing process perturbations.
E. Physical Layout of Control System The proposed locations of the racks being added is depicted in Figure 1 and 2.
The control network shall be robust enough to carry worst case data transmission, in the presence of a single failure up to and including the loss of one of the two redundant sides of the network.
The Offerer shall be responsible for performing a walkdown of the AIR and MCR, obtaining measurements, and proposing a design that will fit within the defined areas. Future addition of expansion cabinets shall be considered.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 42 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: 5. ICS Interface For communications interfacing to ICS, TVA defined interfaces shall be utilized.
The interface should provide buffered digital to digital communication with the plant computer.
The C&MS shall provide digital interface with TVA ICS for all process inputs and output values, intermediate calculated values, and the status of logic parameters.
E. Physical Layout of Control System The proposed locations of the racks being added is depicted in Figure 1 and 2.The Offerer shall be responsible for performing a walkdown of the AIR and MCR, obtaining measurements, and proposing a design that will fit within the defined areas. Future addition of expansion cabinets shall be considered.
The MCR Remote I/O proposed location is to be mounted in a panel in the Main Horseshoe or external panel such as 2-M-1 1 (see Figure 2). WVA shall perform walkdown to determine final location.
The MCR Remote I/O proposed location is to be mounted in a panel in the Main Horseshoe or external panel such as 2-M-1 1 (see Figure 2). WVA shall perform walkdown to determine final location.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 43 of 440 3.2.1 Hardware Requirements for the Control System (continued)
 
New Cabinet-..Figure I -WBN U2 AIR, Control Bldg, Elevation 708' NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 44 of 440 3.2.1 Hardware Requirements for the Control System (continued)
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls         Specification Engineering               Upgrade Specification           Rev. 0001 Specification                                               Page 43 of 440 3.2.1   Hardware Requirements for the Control System (continued)
ý.3 7zA Figure 2 -WBN U2 MCR, Control Bldg, Elevation 755' NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 45 of 440 3.2.1 Hardware Requirements for the Control System (continued)
New Cabinet Figure I - WBN U2 AIR, Control Bldg, Elevation 708'
FOXBORO WORKSTATION Figure 4 -Proposed ICS Interface Diagram NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 40 of 440 3.2.1 Hardware Requirements for the Control System (continued)
 
F. Process Signals Complete physical redundancy of the instrument loops shall be provided for those signals deemed critical for control of the plant (those signals whose failure would adversely affect plant operation such plant trip or runback).
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls         Specification Engineering               Upgrade Specification             Rev. 0001 Specification                                               Page 44 of 440 3.2.1     Hardware Requirements for the Control System (continued)
These critical signals are to be determined by the Offerer as specified in Section 3.2.2 by the Single Point Failure/Hazards analysis.
                                                                            ý.3 7zA Figure 2 - WBN U2 MCR, Control Bldg, Elevation 755'
Non-critical signals would include those used for alarms, indication only, and interlocks whose failure would pose no threat to plant availability.
 
Redundancy of the critical loops shall be designed with physical and electrical isolation such that a single failure in any portion of the string (A/D, signal conditioning, computation, output, etc.) shall not cause a loss of control for the final output devices. Indicators, recorders, etc., that monitor the controlled parameter shall always monitor the signal sent to the controlled device. Analytical redundancy may be used in addition to the above requirement and for fault detection, but shall not be substituted for physical redundancy for critical control purposes.
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls         Specification Engineering             Upgrade Specification             Rev. 0001 Specification                                               Page 45 of 440 3.2.1   Hardware Requirements for the Control System (continued)
Any additional inputs required to meet these redundancy requirements shall be identified by the Offerer.G. Input/Output System Input/output (I/O) modules shall be provided which shall convert signals to/from field devices to digital communications compatible with the distributed control processors.
FOXBORO WORKSTATION Figure 4 - Proposed ICS Interface Diagram
These modules shall be capable of being distributed throughout the plant as required by geographical location.
 
All modules communicating back to the control processors will provide fault tolerant communications in either a centralized or geographically distributed system.1. Isolation All inputs and outputs shall be isolated to 600 Vac and 250 Vdc between any I/O point and ground or between any pair of I/O points. Isolation shall comply with WBN Design Criteria, WBN-DC-30-4 Rev. 21,"Separation/Isolation." All inputs and outputs shall be current limited to prevent damage to the I/O system due to inadvertent dead shorts in the field wiring. A dead short in the wiring of any field device shall not affect the proper operation of any other input and/or output.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 40 of 440 3.2.1     Hardware Requirements for the Control System (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification 1 Page 47 of 440 3.2.1 Hardware Requirements for the Control System (continued)
F. Process Signals Complete physical redundancy of the instrument loops shall be provided for those signals deemed critical for control of the plant (those signals whose failure would adversely affect plant operation such plant trip or runback). These critical signals are to be determined by the Offerer as specified in Section 3.2.2 by the Single Point Failure/Hazards analysis. Non-critical signals would include those used for alarms, indication only, and interlocks whose failure would pose no threat to plant availability. Redundancy of the critical loops shall be designed with physical and electrical isolation such that a single failure in any portion of the string (A/D, signal conditioning, computation, output, etc.) shall not cause a loss of control for the final output devices. Indicators, recorders, etc., that monitor the controlled parameter shall always monitor the signal sent to the controlled device. Analytical redundancy may be used in addition to the above requirement and for fault detection, but shall not be substituted for physical redundancy for critical control purposes. Any additional inputs required to meet these redundancy requirements shall be identified by the Offerer.
: 2. Field Power Supplies -Channel and Module Isolation Input loop power supplies shall be dedicated at a module/input card level so that grounding problems (ie., multiple grounds) will only affect one input module/card.
G. Input/Output System Input/output (I/O) modules shall be provided which shall convert signals to/from field devices to digital communications compatible with the distributed control processors. These modules shall be capable of being distributed throughout the plant as required by geographical location. All modules communicating back to the control processors will provide fault tolerant communications in either a centralized or geographically distributed system.
These power supplies shall be capable of supplying the voltage required for the existing field devices as specified in Appendix E.These higher voltage power supplies may be external to the input card but should be designed to minimize the effects of multiple grounds (ground loops). These power supplies shall be supplied by the Offerer.3. Accuracy The total loop accuracy (input to output) of the Control System signal processing shall be less than +/- 0.5% of calibrated span. This accuracy shall include as a minimum the reference accuracy, 18 months of time related drift, temperature effects over the stated operating range, software induced errors, etc. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion shall not contribute any additional inaccuracies greater than +/- 0.036% of channel span to the uncertainties specified in the system requirements sections.
: 1. Isolation All inputs and outputs shall be isolated to 600 Vac and 250 Vdc between any I/O point and ground or between any pair of I/O points. Isolation shall comply with WBN Design Criteria, WBN-DC-30-4 Rev. 21, "Separation/Isolation."
See ISA Standard 67.04 for methods on combining individual uncertainties.
All inputs and outputs shall be current limited to prevent damage to the I/O system due to inadvertent dead shorts in the field wiring. A dead short in the wiring of any field device shall not affect the proper operation of any other input and/or output.
: 4. Input Filtering and Noise Sources All inputs susceptible to EMII/RFI noise shall have hardware filtering.
 
All inputs shall have the capability of software filtering of process noise to prevent control system upsets. The system must comply with the response time requirements in sections 4.14 through 12 with filtering in place.All DC and AC contact outputs shall be rated to interrupt the maximum design load current at the maximum design voltage (TVA to define max voltages and currents) and shall have noise suppression to prevent EMI/RF1 noise generation.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                 Rev. 0001 Specification                                                       1Page 47 of 440 3.2.1   Hardware Requirements for the Control System (continued)
Interposing relays can be used to meet this requirement but must be approved by TVA on a case by case basis.DC Contacts with inductive loads shall be evaluated with respect to contact ratings, reduced reliability, and noise generation.
: 2. Field Power Supplies - Channel and Module Isolation Input loop power supplies shall be dedicated at a module/input card level so that grounding problems (ie., multiple grounds) will only affect one input module/card. These power supplies shall be capable of supplying the voltage required for the existing field devices as specified in Appendix E.
Arc suppression shall be supplied based upon the results of these evaluations.
These higher voltage power supplies may be external to the input card but should be designed to minimize the effects of multiple grounds (ground loops). These power supplies shall be supplied by the Offerer.
Arc suppression is TVA scope.5. Input and Output Types The system must accept all the process signals listed below without additional devices converting them to milli-amps or voltage signals.
: 3. Accuracy The total loop accuracy (input to output) of the Control System signal processing shall be less than +/- 0.5% of calibrated span. This accuracy shall include as a minimum the reference accuracy, 18 months of time related drift, temperature effects over the stated operating range, software induced errors, etc. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion shall not contribute any additional inaccuracies greater than +/- 0.036% of channel span to the uncertainties specified in the system requirements sections. See ISA Standard 67.04 for methods on combining individual uncertainties.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 48 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: 4. Input Filtering and Noise Sources All inputs susceptible to EMII/RFI noise shall have hardware filtering. All inputs shall have the capability of software filtering of process noise to prevent control system upsets. The system must comply with the response time requirements in sections 4.14 through 12 with filtering in place.
Inputs Outputs 4 to 20 mA 4 to 20 mA Pulse (0 to 48 VDC, nominal 36 VDC 100 to Dry Contact 20,000 counts/hr)
All DC and AC contact outputs shall be rated to interrupt the maximum design load current at the maximum design voltage (TVA to define max voltages and currents) and shall have noise suppression to prevent EMI/RF1 noise generation. Interposing relays can be used to meet this requirement but must be approved by TVA on a case by case basis.
Thermocouple/milli-volt (Types B,E,J,K,R,S,T,N,W Digital Output 0 to 132 VAC output and other mV signals) (Bistable) 0 to 132 VDO RTD inputs (Foxboro Types NR-226 and NR-266 0 to 10 VDC IEC platinum:
DC Contacts with inductive loads shall be evaluated with respect to contact ratings, reduced reliability, and noise generation. Arc suppression shall be supplied based upon the results of these evaluations. Arc suppression is TVA scope.
nickel; and 2, 3, and 4 wire types)10 to 50 mA with a 200 input ohm resistor Pulse Dry Contact Special 10 to 50 ma redundant design 0 to 10 VDC NA Digital Input 0 to 120 VAC NA Smart transmitters with HART communication NA protocol(The Offerer should list supported protocols)
: 5. Input and Output Types The system must accept all the process signals listed below without additional devices converting them to milli-amps or voltage signals.
: 6. I/O Density TVA is concerned about the number of points that must be forced when a single I/O card is replaced.
 
No more than 8 points per card are allowed (4 max is preferred) to be utilized in the delivered system. Because a particular Offeror may incorporate more than 8 points in their card design, WVA will permit a larger point count card to be used, but will not permit greater than 8 points per card to be assigned.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 48 of 440 3.2.1     Hardware Requirements for the Control System (continued)
Please note that in calculating the number of spare I/O points provided, the points in excess of 8 per card will NOT be counted. In any case, each of the points on a card will be individually addressable and useable to the fullest extent.Subsystems I/O not fully addressable and/or incapable of being individually monitored are specifically forbidden.
Inputs                                     Outputs 4 to 20 mA                                           4 to 20 mA Pulse (0 to 48 VDC, nominal 36 VDC 100 to             Dry Contact 20,000 counts/hr)
Exceptions to this policy may be granted where the 110 count exceeding 8 points is all associated with a single function, such as the manuallautomatlc controller or is involved with redundant signals.
Thermocouple/milli-volt (Types B,E,J,K,R,S,T,N,W     Digital Output 0 to 132 VAC output and other mV signals)                         (Bistable)     0 to 132 VDO RTD inputs (Foxboro Types NR-226 and NR-266           0 to 10 VDC IEC platinum: nickel; and 2, 3, and 4 wire types) 10 to 50 mA with a 200 input ohm resistor             Pulse Dry Contact                                           Special 10 to 50 ma redundant design 0 to 10 VDC                                           NA Digital Input 0 to 120 VAC                             NA Smart transmitters with HART communication             NA protocol(The Offerer should list supported protocols)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 49 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: 6. I/O Density TVA is concerned about the number of points that must be forced when a single I/O card is replaced. No more than 8 points per card are allowed (4 max is preferred) to be utilized in the delivered system. Because a particular Offeror may incorporate more than 8 points in their card design, WVA will permit a larger point count card to be used, but will not permit greater than 8 points per card to be assigned. Please note that in calculating the number of spare I/O points provided, the points in excess of 8 per card will NOT be counted. In any case, each of the points on a card will be individually addressable and useable to the fullest extent.
: 7. Forced Inputs/Outputs or Bypass The system shall allow any input or output to be individually removed from actual scan, that is, placed In manual control, in which the point shall freeze to last value. At the users option, the point can be subsequently forced such that any digital point can be set to "on" or 'off" and any analog point can be set to any value within its defined range. This function shall be restricted to authorized users by password protection.
Subsystems I/O not fully addressable and/or incapable of being individually monitored are specifically forbidden. Exceptions to this policy may be granted where the 110 count exceeding 8 points is all associated with a single function, such as the manuallautomatlc controller or is involved with redundant signals.
Any point that is bypassed (frozen or forced) shall be indicated to the operator via an alarm point and engineering stations with distinctive and consistent color and/or text change to the extent that it is intuitively obvious that the indicated value is not based on live data. The operator and engineering consoles shall include the capability to list all points not in scan, which points are forced, and what values are in use by the system.H. Installed Spare Capacity The system shall have spare capacity for future modifications.
 
Three types of"spare capacity" are of concern: 1) the spare capacity that uses the processor memory and speed; 2) the spare 1(0 capacity and Terminating Assemblies (TA)that is immediately available for use; and 3) the spare capacity that could be used if additional I/O cards and termination space were purchased and installed.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                   Upgrade Specification                     Rev. 0001 Specification                                                           Page 49 of 440 3.2.1   Hardware Requirements for the Control System (continued)
The Offerer is responsible for ensuring that all power supplies, distributions, air conditioners, termination areas, and the like are of sufficient capacity and capability to support any given cabinet when fully populated. "Fully populated" shall refer to the cabinet in which all three types of capacity are entirely utilized.1. Spare Processor capability  
: 7. Forced Inputs/Outputs or Bypass The system shall allow any input or output to be individually removed from actual scan, that is, placed In manual control, in which the point shall freeze to last value. At the users option, the point can be subsequently forced such that any digital point can be set to "on" or 'off" and any analog point can be set to any value within its defined range. This function shall be restricted to authorized users by password protection. Any point that is bypassed (frozen or forced) shall be indicated to the operator via an alarm point and engineering stations with distinctive and consistent color and/or text change to the extent that it is intuitively obvious that the indicated value is not based on live data. The operator and engineering consoles shall include the capability to list all points not in scan, which points are forced, and what values are in use by the system.
-On a controller pair basis, the spare computational or control capacity at time of shipment should be at least 40 percent as determined by the most limiting factor, such as free memory, spare blocks, cycle time, or any other meaningful measure. In situations where control integrity requires additional loading, this requirement may be waived by the engineer on a Case-by-Case basis.2. Immediately Available 110 points (wired spares, including TAs) -Only points "left over" on 110 modules after assigning the points in Appendix E or G shall be provided as wired spares.
H. Installed Spare Capacity The system shall have spare capacity for future modifications. Three types of "spare capacity" are of concern: 1) the spare capacity that uses the processor memory and speed; 2) the spare 1(0 capacity and Terminating Assemblies (TA) that is immediately available for use; and 3) the spare capacity that could be used if additional I/O cards and termination space were purchased and installed.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 50 of 440 3.2.1 Hardware Requirements for the Control System (continued)
The Offerer is responsible for ensuring that all power supplies, distributions, air conditioners, termination areas, and the like are of sufficient capacity and capability to support any given cabinet when fully populated. "Fully populated" shall refer to the cabinet in which all three types of capacity are entirely utilized.
: 3. Future 1/O Expansion capability for the new AIR and TBBOP cabinets (added hardware)
: 1. Spare Processor capability - On a controller pair basis, the spare computational or control capacity at time of shipment should be at least 40 percent as determined by the most limiting factor, such as free memory, spare blocks, cycle time, or any other meaningful measure. In situations where control integrity requires additional loading, this requirement may be waived by the engineer on a Case-by-Case basis.
Expansion capability for a minimum of 40 % spare I/O module slots and associated field termination assembly space shall be provided.
: 2. Immediately Available 110 points (wired spares, including TAs) - Only points "left over" on 110 modules after assigning the points in Appendix E or G shall be provided as wired spares.
To clarify, TVA would reasonably have to procure cards, termination strips, and interconnecting cables, but would not be limited by the lack of space into which they could be mounted. Expansion by hardware population of the spare slot capacity (beyond the installed spare capacity)shall not be limited by the termination space available, air conditioning capacity, power distribution capacity, and the like, of the base system provided.1. Start Up Spare Parts TVA intends to procure an initial stock of spare parts to be located separately in each plant's storeroom.
 
Any TVA stocked item can be used to replace components which fail prior to release of the system for operation, or during the warranty period. A replacement part shall be replaced at no cost to WVA promptly.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 50 of 440 3.2.1     Hardware Requirements for the Control System (continued)
After reaching agreement on an appropriate maintenance agreement, the Offerer shall be responsible for ensuring the availability at the plant site, within 24 hours, of any part not stocked by WVA that fails prior to release of the system for operation, The release of the supplied system for operation shall occur at such time as the installed system is commissioned, the plant started, and TVA has verified that all contractual obligations have been met.J. Power Supply Design 1. AC Power Distribution
: 3. Future 1/O Expansion capability for the new AIR and TBBOP cabinets (added hardware) Expansion capability for a minimum of 40 % spare I/O module slots and associated field termination assembly space shall be provided. To clarify, TVA would reasonably have to procure cards, termination strips, and interconnecting cables, but would not be limited by the lack of space into which they could be mounted. Expansion by hardware population of the spare slot capacity (beyond the installed spare capacity) shall not be limited by the termination space available, air conditioning capacity, power distribution capacity, and the like, of the base system provided.
: a. Power distribution for the control system shall be designed such that the loss of a single ac power source will not result in the loss or degradation of system operation.
: 1. Start Up Spare Parts TVA intends to procure an initial stock of spare parts to be located separately in each plant's storeroom. Any TVA stocked item can be used to replace components which fail prior to release of the system for operation, or during the warranty period. A replacement part shall be replaced at no cost to WVA promptly. After reaching agreement on an appropriate maintenance agreement, the Offerer shall be responsible for ensuring the availability at the plant site, within 24 hours, of any part not stocked by WVA that fails prior to release of the system for operation, The release of the supplied system for operation shall occur at such time as the installed system is commissioned, the plant started, and TVA has verified that all contractual obligations have been met.
A minimum of two diverse primary power sources shall be provided to critical components (such as each redundant pair of processors, I/O modules, etc.) and Operator Interfaces (such as Handstations and ODUs) of the control system.Alarms shall be provided to identify the loss or degradation of any ac source.b. The control system shall be designed for continuous operation when supplied with 120 VAC +/- 10 percent and 60 Hz +/-5 percent, single phase, with a harmonic content not to exceed 5 percent total and with a 10 percent peak maximum deviation from the sine wave. The control system shall be designed not to consume more than the available analyzed supply capability of plant's AC inverters.
J. Power Supply Design
This is TVA scope of work and shall use the plant's Loading calculations along with the Offerer's power consumption specifications as the basis for meeting this requirement.
: 1. AC Power Distribution
This requirement must be further developed based upon actual selection of the AC power sources.
: a. Power distribution for the control system shall be designed such that the loss of a single ac power source will not result in the loss or degradation of system operation. A minimum of two diverse primary power sources shall be provided to critical components (such as each redundant pair of processors, I/O modules, etc.) and Operator Interfaces (such as Handstations and ODUs) of the control system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 51 of 440 3.2.1 Hardware Requirements for the Control System (continued)
Alarms shall be provided to identify the loss or degradation of any ac source.
: c. All AC loads shall be evaluated by the Offerer to ensure proper ride through capability (no effect on system or output loads) for a complete loss of one AC source.d. Diverse AC power sources shall be provided to the redundant processor pair of the control system such that the loss of power from any one source will not affect proper operation of the system. All AC/DC loads from the system power bus to external loads shall be fused and coordinated with upstream and downstream fuses/breakers.
: b. The control system shall be designed for continuous operation when supplied with 120 VAC +/- 10 percent and 60 Hz +/-5 percent, single phase, with a harmonic content not to exceed 5 percent total and with a 10 percent peak maximum deviation from the sine wave. The control system shall be designed not to consume more than the available analyzed supply capability of plant's AC inverters. This is TVA scope of work and shall use the plant's Loading calculations along with the Offerer's power consumption specifications as the basis for meeting this requirement. This requirement must be further developed based upon actual selection of the AC power sources.
Any fuse assembly shall be an indicating type, capable of actuating an alarm for remote annunciation of a blown fuse. The power distribution system shall be designed in such a manner that fuse and breaker sizing is coordinated to ensure clearing of load side faults.2. DC Power Distribution
 
: a. The DC distribution system shall employ redundant DC power supplies (a minimum of two per processor pair) associated with each of the two diverse AC power supply sources. Auctioneering of the supplies'outputs should be performed at the lowest level practicable (individual card, module, nest, etc.). Fault protection and detection shall be provided for the auctioneered DC power supplies.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 51 of 440 3.2.1     Hardware Requirements for the Control System (continued)
The failure of any power supply shall be alarmed. Power supply status shall be indicated on the power supply itself. The System design shall employ sufficient means to replace failed power supplies, while online, without affecting control system's operation and shall be easily accessible.
: c. All AC loads shall be evaluated by the Offerer to ensure proper ride through capability (no effect on system or output loads) for a complete loss of one AC source.
: d. Diverse AC power sources shall be provided to the redundant processor pair of the control system such that the loss of power from any one source will not affect proper operation of the system. All AC/DC loads from the system power bus to external loads shall be fused and coordinated with upstream and downstream fuses/breakers.
Any fuse assembly shall be an indicating type, capable of actuating an alarm for remote annunciation of a blown fuse. The power distribution system shall be designed in such a manner that fuse and breaker sizing is coordinated to ensure clearing of load side faults.
: 2. DC Power Distribution
: a. The DC distribution system shall employ redundant DC power supplies (a minimum of two per processor pair) associated with each of the two diverse AC power supply sources. Auctioneering of the supplies' outputs should be performed at the lowest level practicable (individual card, module, nest, etc.). Fault protection and detection shall be provided for the auctioneered DC power supplies. The failure of any power supply shall be alarmed. Power supply status shall be indicated on the power supply itself. The System design shall employ sufficient means to replace failed power supplies, while online, without affecting control system's operation and shall be easily accessible.
: b. If the loss of the power supply to any control system inputs, control board indicators, or manual/automatic stations results in a plant trip, runback, or entry into a Tech Spec Limiting Condition for Operation, the power supplies shall be redundant.
: b. If the loss of the power supply to any control system inputs, control board indicators, or manual/automatic stations results in a plant trip, runback, or entry into a Tech Spec Limiting Condition for Operation, the power supplies shall be redundant.
: c. Auctioneering shall be performed utilizing a sharing process and the Offerer must be demonstrate that the redundant supply is capable of carrying the system load if the first supply fails.d. A power supply failure in the high direction shall not result in the complete loss of power.3. Loss and Restoration of Power The control system shall be designed to meet the following requirements on the loss and restoration of power: a. Upon the loss of one DC redundant power supply, the control system shall be capable of recognizing the failure, transferring power to prevent control system upset, and alarming both the loss of power and the corrective action taken by the control system.
: c. Auctioneering shall be performed utilizing a sharing process and the Offerer must be demonstrate that the redundant supply is capable of carrying the system load if the first supply fails.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 52 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: d. A power supply failure in the high direction shall not result in the complete loss of power.
: b. Upon the loss of all AC and/or all DC power, the output signals shall fail to zero; position actuated equipment shall be designed by others to fail to their defined design basis failure state.c. Upon the loss of all power, the control system shall be designed so that all indicators and recorders associated with that system are readily detectable as in the failed state (ie., fail downscale).
: 3. Loss and Restoration of Power The control system shall be designed to meet the following requirements on the loss and restoration of power:
: d. Upon the restoration of power (AC, DC, or both), indication shall be provided to the main control room to indicate the restoration of power.e. Upon the restoration of power, the actuated equipment positions shall be predictable and repeatable.
: a. Upon the loss of one DC redundant power supply, the control system shall be capable of recognizing the failure, transferring power to prevent control system upset, and alarming both the loss of power and the corrective action taken by the control system.
Where identified in the system functional requirements, power-up initialization control shall be executed to bring plant systems to a known state.f. On restoration of power, the system shall be capable of restoring normal operation without requiring a manual download of program from a central computer system (i.e. program must be stored within the CPU).g. The Offerer shall be provided the momentary loss of AC power ride through time.4. Field Supplied Loads For field supplied loads such as transmitters, the power supply arrangement shall meet the following requirements:
 
: a. Each load shall be individually isolated such as transformer isolation so that multiple grounds on fields will not affect the control system.b. Uses differential input design to reduce the potential for noise.c. Shall be capable of supplying voltages required for each field load.K. Grounding Requirements Each Rack enclosure shall have an electrical safety ground bus and an isolated instrument ground bus. A compression fitting suitable for connection to a 4/0 AWG main plant grounding cable shall be provided in the appropriate enclosures.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                   Upgrade Specification                     Rev. 0001 Specification                                                             Page 52 of 440 3.2.1   Hardware Requirements for the Control System (continued)
The Offerer shall provide all engineering and materials required to ensure the adequacy of their cabinet ground system as it pertains to the installed system.
: b. Upon the loss of all AC and/or all DC power, the output signals shall fail to zero; position actuated equipment shall be designed by others to fail to their defined design basis failure state.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 53 of 440 3.2.1 Hardware Requirements for the Control System (continued)
: c. Upon the loss of all power, the control system shall be designed so that all indicators and recorders associated with that system are readily detectable as in the failed state (ie., fail downscale).
All cables that are ground system related shall be clearly marked and shall be green or green with trace color. For bare copper cables, a color sleeve shall be attached at each point of connection.
: d. Upon the restoration of power (AC, DC, or both), indication shall be provided to the main control room to indicate the restoration of power.
Color coding for separate ground systems shall be consistent and unique L. Internal Rack Cabling Requirements All cabling provided by the Offerer shall use documented cable and wiring good practices for internal panel wiring. These good wiring practices should encompass such issues as proper wire sizing associated with current loading;EMI/RFI protection by the use of shielding and proper termination, use of twisted pair wiring, enclosure protection, separation of noise generation circuit (relays), etc.; and proper termination as specified in this specification.
: e. Upon the restoration of power, the actuated equipment positions shall be predictable and repeatable. Where identified in the system functional requirements, power-up initialization control shall be executed to bring plant systems to a known state.
: 1. System Cabling Interconnecting Control System rack cables, network cables, and the like shall be supplied by the Offerer.Prefabricated cables with multi-conductor cable connectors shall be supplied to connect the control logic cabinets with each peripheral or field termination cabinet. The field end of any cable used shall be capable of being cut and re-terminated during installation or pulled through existing plant conduit.Where prefabricated cables are furnished by the Offerer, the cables shall be terminated with the use of Cannon plugs, or approved equal. The connectors (plug and receptacle) shall have rugged metal shells or be manufactured of high-strength insulating material.
: f. On restoration of power, the system shall be capable of restoring normal operation without requiring a manual download of program from a central computer system (i.e. program must be stored within the CPU).
When separate, the live part shall be a female contact so that shorting of pins is not possible.Adequate cable strain-relief clamps shall be provided.
: g. The Offerer shall be provided the momentary loss of AC power ride through time.
There shall be no exposed live parts on the rear of the plug. An environmental seal is preferred.
: 4. Field Supplied Loads For field supplied loads such as transmitters, the power supply arrangement shall meet the following requirements:
The plug and receptacle design shall be such that electrical contact cannot be established until the plug and receptacle are correctly aligned.2. Cabinet Wiring All wiring shall be securely installed and neatly bundled with flame resistant, nonmetallic tie bands. All electrical connections shall be readily accessible.
: a. Each load shall be individually isolated such as transformer isolation so that multiple grounds on fields will not affect the control system.
It shall be possible to inspect, remove, and add connections to any device without removal of the device, mounting steel, piping, wire-ways, or tubing.Where wiring must cross sharp metal edges, adequate protection shall be provided, preferably by Autolyze or by approved grommets.
: b. Uses differential input design to reduce the potential for noise.
In addition, each device shall be removable without disturbing other devices, mounting steel, etc.
: c. Shall be capable of supplying voltages required for each field load.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 54 of 440 3.2.1 Hardware Requirements for the Control System (continued)
K. Grounding Requirements Each Rack enclosure shall have an electrical safety ground bus and an isolated instrument ground bus. A compression fitting suitable for connection to a 4/0 AWG main plant grounding cable shall be provided in the appropriate enclosures. The Offerer shall provide all engineering and materials required to ensure the adequacy of their cabinet ground system as it pertains to the installed system.
All terminal points shall be clearly and permanently labeled and conveniently located. All terminal points shall be clearly labeled in accordance with the Offerer's wiring drawings, which shall contain physical location by cabinet, rack, terminal block, and terminal.Offerer factory wiring shall all be terminated on the same side of the terminal block or column of terminal blocks. All electrical connections between cabinets shall be by Offerer supplied prefabricated cables. Prefab cable plugs shall be keyed.The Offerer shall segregate by voltage level all terminal blocks for internal wiring and field cable connections.
 
The Offerer shall make provisions for terminating and grounding individual shield and overall cable shield wires for all analog inputs. Provisions for powering of interposing relay coils shall be the responsibility of the Offerer.High density I/O termination panels or blocks are not acceptable.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 53 of 440 3.2.1     Hardware Requirements for the Control System (continued)
The intent is to provide ease of installation and maintenance of the system.3. Fiber Optic Media All fiber optic cable used in Class I structures shall meet the requirements of UL 910 and iF_2 383. This cable should also meet the requirements for multimode, tight buffered fiber optic cable suitable for broadband transmission of video, audio, and data signals and be suitable for indoor or underground conduit installation in wet or dry locations.In addition, plastic fiber optic cable is not acceptable.
All cables that are ground system related shall be clearly marked and shall be green or green with trace color. For bare copper cables, a color sleeve shall be attached at each point of connection. Color coding for separate ground systems shall be consistent and unique L. Internal Rack Cabling Requirements All cabling provided by the Offerer shall use documented cable and wiring good practices for internal panel wiring. These good wiring practices should encompass such issues as proper wire sizing associated with current loading; EMI/RFI protection by the use of shielding and proper termination, use of twisted pair wiring, enclosure protection, separation of noise generation circuit (relays),
Metallic or conductive coverings, strength members or fibers shall not be used.M. Fusing TVA shall ensure all fusing shall be coordinated with upstream and downstream protective devices. The Offerer shall provide a fuse list with manufacture and part number. Output fuse protection shall be replaceable without affecting other control outputs mounted on the same circuit card. i.e., fuses should be replaceable without unplugging cards from the system.3.2.2 Critical Control System Signals A. Critical Control System Signal Definition The definition of whether a control system is critical or non-critical is provided in the system functional requirements defined in Sections 4 through 12.
etc.; and proper termination as specified in this specification.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 55 of 440 3.2.2 Critical Control System Signals (continued)
: 1. System Cabling Interconnecting Control System rack cables, network cables, and the like shall be supplied by the Offerer.
B. Protection/Control System Interaction The control system's signals shall use input signal validation such as median signal selection in order to meet the "Single Random Failure" requirements of IEEE 279 1971, Section 4.7.3. These requirements are defined in Sections 4 through 12 below.C, Control System Segmentation The following control systems segmentation shall be maintained by implementing in different control processing pairs with no dependencies between the different control processing pairs. The following provides initial guidance/requirements for functional groupings assignments for the different control processor pairs. (Meeting this criteria may require reassignment of field cables to different racks)1. SG Level Control shall be divided up by loops, one control processor pair per loop.2. Condenser Dumps and Atmospheric Dumps valve controls shall be separated.
Prefabricated cables with multi-conductor cable connectors shall be supplied to connect the control logic cabinets with each peripheral or field termination cabinet. The field end of any cable used shall be capable of being cut and re-terminated during installation or pulled through existing plant conduit.
Where prefabricated cables are furnished by the Offerer, the cables shall be terminated with the use of Cannon plugs, or approved equal. The connectors (plug and receptacle) shall have rugged metal shells or be manufactured of high-strength insulating material. When separate, the live part shall be a female contact so that shorting of pins is not possible.
Adequate cable strain-relief clamps shall be provided. There shall be no exposed live parts on the rear of the plug. An environmental seal is preferred. The plug and receptacle design shall be such that electrical contact cannot be established until the plug and receptacle are correctly aligned.
: 2. Cabinet Wiring All wiring shall be securely installed and neatly bundled with flame resistant, nonmetallic tie bands. All electrical connections shall be readily accessible.
It shall be possible to inspect, remove, and add connections to any device without removal of the device, mounting steel, piping, wire-ways, or tubing.
Where wiring must cross sharp metal edges, adequate protection shall be provided, preferably by Autolyze or by approved grommets. In addition, each device shall be removable without disturbing other devices, mounting steel, etc.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 54 of 440 3.2.1     Hardware Requirements for the Control System (continued)
All terminal points shall be clearly and permanently labeled and conveniently located. All terminal points shall be clearly labeled in accordance with the Offerer's wiring drawings, which shall contain physical location by cabinet, rack, terminal block, and terminal.
Offerer factory wiring shall all be terminated on the same side of the terminal block or column of terminal blocks. All electrical connections between cabinets shall be by Offerer supplied prefabricated cables. Prefab cable plugs shall be keyed.
The Offerer shall segregate by voltage level all terminal blocks for internal wiring and field cable connections. The Offerer shall make provisions for terminating and grounding individual shield and overall cable shield wires for all analog inputs. Provisions for powering of interposing relay coils shall be the responsibility of the Offerer.
High density I/O termination panels or blocks are not acceptable. The intent is to provide ease of installation and maintenance of the system.
: 3. Fiber Optic Media All fiber optic cable used in Class I structures shall meet the requirements of UL 910 and iF_2 383. This cable should also meet the requirements for multimode, tight buffered fiber optic cable suitable for broadband transmission of video, audio, and data signals and be suitable for indoor or underground conduit installation in wet or dry locations.In addition, plastic fiber optic cable is not acceptable. Metallic or conductive coverings, strength members or fibers shall not be used.
M. Fusing TVA shall ensure all fusing shall be coordinated with upstream and downstream protective devices. The Offerer shall provide a fuse list with manufacture and part number. Output fuse protection shall be replaceable without affecting other control outputs mounted on the same circuit card. i.e., fuses should be replaceable without unplugging cards from the system.
3.2.2     Critical Control System Signals A. Critical Control System Signal Definition The definition of whether a control system is critical or non-critical is provided in the system functional requirements defined in Sections 4 through 12.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 55 of 440 3.2.2     Critical Control System Signals (continued)
B. Protection/Control System Interaction The control system's signals shall use input signal validation such as median signal selection in order to meet the "Single Random Failure" requirements of IEEE 279 1971, Section 4.7.3. These requirements are defined in Sections 4 through 12 below.
C,   Control System Segmentation The following control systems segmentation shall be maintained by implementing in different control processing pairs with no dependencies between the different control processing pairs. The following provides initial guidance/requirements for functional groupings assignments for the different control processor pairs. (Meeting this criteria may require reassignment of field cables to different racks)
: 1. SG Level Control shall be divided up by loops, one control processor pair per loop.
: 2. Condenser Dumps and Atmospheric Dumps valve controls shall be separated.
: 3. Pressurizer Pressure channels for each PORV shall be separated.
: 3. Pressurizer Pressure channels for each PORV shall be separated.
: 4. Pressurizer Pressure channels for each Spray Valve shall be separated 5. A control processor pair failure (all outputs failing open, closed, or as is)shall not cause the following:
: 4. Pressurizer Pressure channels for each Spray Valve shall be separated
: a. More than One SG Level control valve failing open;b. Greater than a 10% increase in steam flow (Condenser and/or Atmospheric Steam Dump valves failing open);c. Both Pressurizer PORVs failing open or closed (Block valve controls outside of the C&MS are diverse from PORV controls);
: 5. A control processor pair failure (all outputs failing open, closed, or as is) shall not cause the following:
: a. More than One SG Level control valve failing open;
: b. Greater than a 10% increase in steam flow (Condenser and/or Atmospheric Steam Dump valves failing open);
: c. Both Pressurizer PORVs failing open or closed (Block valve controls outside of the C&MS are diverse from PORV controls);
: d. Both Pressurizer Spray Valve failing open or closed (Spray isolation valve controls outside of the C&MS are diverse from the spray valve controls);
: d. Both Pressurizer Spray Valve failing open or closed (Spray isolation valve controls outside of the C&MS are diverse from the spray valve controls);
: e. Total loss of both letdown paths;-f. Loss of CVCS flow to the Reactor Coolant Pump seals;g. Total loss of CVCS makeup capability for Pressurizer Level control and Boron and Dilution control; NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 56 of 440 3.2.2 Critical Control System Signals (continued)
: e. Total loss of both letdown paths;-
: h. Total loss of Pressurizer heater control;The following table summarizes these segmentation requirements.
: f. Loss of CVCS flow to the Reactor Coolant Pump seals;
Function Controller Assignment Each SG level One controller pair per Steam Generator Rod Control One controller pair Steam Dump to Atmosphere One controller pair per dump valve Steam Dump to Condenser One controller pair Pressurizer Pressure and Level, Charging, Two Controller Pairs Letdown D. Automatic Signal Selection A major responsibility of the control system is to ensure the signals it uses for critical control functions are valid. To achieve this objective, three physically redundant inputs shall be supplied to the system for each critical control signal or two redundant inputs with a 3rd coorelated input to be used as a voter. The control system shall employ signal validation such as medium signal selection technique which automatically selects the middle input signal for control use.This control signal transfer upon 1 input failure will occur in such a manner that plant control and signal indication shall continue uninterrupted or un-affected.
: g. Total loss of CVCS makeup capability for Pressurizer Level control and Boron and Dilution control;
When an input failure occurs, the control system shall be required to perform an automatic signal selection between the remaining two valid signals. This selection may be based upon a comparison to another input that is representative to the remaining two inputs or could be based upon other techniques such as abnormal rate of change (an out of range condition), use the average of the remaining two inputs, etc. Another option would be to place the control system in manual. All other requirements given for operation with three signals apply. The Offerer shall recommend the best control technique based on operating experience.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 56 of 440 3.2.2   Critical Control System Signals (continued)
: h. Total loss of Pressurizer heater control; The following table summarizes these segmentation requirements.
Function                                             Controller Assignment Each SG level                                       One controller pair per Steam Generator Rod Control                                         One controller pair Steam Dump to Atmosphere                             One controller pair per dump valve Steam Dump to Condenser                             One controller pair Pressurizer Pressure and Level, Charging,           Two Controller Pairs Letdown D. Automatic Signal Selection A major responsibility of the control system is to ensure the signals it uses for critical control functions are valid. To achieve this objective, three physically redundant inputs shall be supplied to the system for each critical control signal or two redundant inputs with a 3rd coorelated input to be used as a voter. The control system shall employ signal validation such as medium signal selection technique which automatically selects the middle input signal for control use.
This control signal transfer upon 1 input failure will occur in such a manner that plant control and signal indication shall continue uninterrupted or un-affected.
When an input failure occurs, the control system shall be required to perform an     I automatic signal selection between the remaining two valid signals. This selection may be based upon a comparison to another input that is representative to the remaining two inputs or could be based upon other techniques such as abnormal rate of change (an out of range condition), use the average of the remaining two inputs, etc. Another option would be to place the control system in manual. All other requirements given for operation with three signals apply. The Offerer shall recommend the best control technique based on operating experience.
If an auctioneered High or Low technique is used, validation of each individual input shall be performed to detect gross type failures in the critical direction such as an input failure high in an auctioneered High selection.
If an auctioneered High or Low technique is used, validation of each individual input shall be performed to detect gross type failures in the critical direction such as an input failure high in an auctioneered High selection.
If only 2 inputs exist, a validation technique using the independent voter input shall be used.I NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 57 of 440 3.2.2 Critical Control System Signals (continued)
If only 2 inputs exist, a validation technique using the independent voter input shall be used.
The Engineering Workstation and/ or Operator Console can be used to meet the following requirements except where noted, When any one of the redundant signals deviates from the other two by a predetermined amount, it shall be alarmed (plant annunciation) and identified to the operator as to which signal has failed. The control system shall also indicate which of the input signals is being used for control.The Engineering Workstation can be used to meet the following:
 
: 1. All inputs shall be internally monitored for quality. A point shall be considered POOR if it is outside a predetermined range. If a computation is-based on a POOR input, then the computed output shall also be considered POOR. If a computation is the result of multiple POOR inputs, then the computed output shall be considered BAD. A POOR quality input, substitute input, failure of a drop, failure of any communications network, a BAD Output, etc. shall never cause misoperation but shall transfer all affected loops to manual or to a "safe" position as approved by TVA. These problems shall be alarmed.2. The automatic signal selection feature shall be capable of being bypassed.This bypass function shall also provide for a manual selection of any one of the three signals for control and indication.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                             Page 57 of 440 3.2.2   Critical Control System Signals (continued)
The failed signal identification feature shall remain operational even when the automatic signal selection function is bypassed.E. Signal Validation Failure The automatic signal selection feature itself shall be designed in a fail/operative manner;, i.e., the control signal used prior to the failure of the signal selection function shall be retained during and after the failure of the selection functions.
The Engineering Workstation and/ or Operator Console can be used to meet the following requirements except where noted, When any one of the redundant signals deviates from the other two by a predetermined amount, it shall be alarmed (plant annunciation) and identified to the operator as to which signal has failed. The control system shall also indicate which of the input signals is being used for control.
In addition, no failure of this feature shall disable its bypass capability.
The Engineering Workstation can be used to meet the following:
The Engineering Workstation and/ or Operator Console can be used to meet the following requirement.
: 1. All inputs shall be internally monitored for quality. A point shall be considered POOR if it is outside a predetermined range. If a computation is
Alarms shall be provided to indicate when the automatic signal selection feature has failed.F. Non-critical Control Signals Input parameters that are classified as non-critical do not require multiple inputs for any given parameter.
                -       based on a POOR input, then the computed output shall also be considered POOR. If a computation is the result of multiple POOR inputs, then the computed output shall be considered BAD. A POOR quality input, substitute input, failure of a drop, failure of any communications network, a BAD Output, etc. shall never cause misoperation but shall transfer all affected loops to manual or to a "safe" position as approved by TVA. These problems shall be alarmed.
TVA shahl identify any exception to this statement.
: 2. The automatic signal selection feature shall be capable of being bypassed.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 58 of 440 3.2.2 Critical Control System Signals (continued)
This bypass function shall also provide for a manual selection of any one of the three signals for control and indication. The failed signal identification feature shall remain operational even when the automatic signal selection function is bypassed.
G. System Hazards Analysis The Offerer shall perform a qualitative reliability analysis of the control system.Using a Failure Analysis technique such as a Failure Modes and Effects Analysis (FMEA) or a Fault Tree Analysis (FTA), the analysis shall identify credible failures and the consequences of these failures related to the ability of the control system to perform as designed.
E. Signal Validation Failure The automatic signal selection feature itself shall be designed in a fail/operative manner;, i.e., the control signal used prior to the failure of the signal selection function shall be retained during and after the failure of the selection functions.
In those cases where a credible failure could result in degraded performance (ie., failure to provide automatic control) of the control system, the expected effects of this degraded performance on plant operations shall be identified by the Offerer and evaluated and resolved (fixed or accepted) by TVA. The results of this study shall be displayed in a table (preferred), chart, or other format as appropriate.
In addition, no failure of this feature shall disable its bypass capability. The Engineering Workstation and/ or Operator Console can be used to meet the following requirement. Alarms shall be provided to indicate when the automatic signal selection feature has failed.
Some of the most important objectives of the failure study include: 9 Identification of Single Points of Failure;w Identification of weak points and hazards in the design;N Assistance in selecting design alternatives that can provide greater system reliability; a Assurance that credible failure modes are identified and their effects on operation of the replacement system are considered; and N Documentation of the relative importance of identified failure.1. Failure Modes The failure study shall be an integral part of the design effort and shall be performed early in the Offerer's design effort. The study shall be periodically updated to reflect changes in the design of the replacement system. The failure study shall consider as a minimum the following failures: a. Single failure of each AC and/or DC power supply feeding the replacement system b. Single element failure -The failure of a single element or component of the control system. Single elements include but are not limited to control processors, memory units, data highways, I/O modules, software, and other elements that are integral to the control function.c. The following shall address the C&MS failure response to a multiple failures condition:
F. Non-critical Control Signals Input parameters that are classified as non-critical do not require multiple inputs for any given parameter. TVA shahl identify any exception to this statement.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 59 of 440 3.2.2 Critical Control System Signals (continued)
 
: d. Automatic failure -The simultaneous failure of two or more elements such that the single or multiple automatic control features are rendered inoperable but the control output is maintained at the last known good value. For failures that operator actions using diverse instrumentation and control, the output should be positioned to the safe state. For example, diverse feedwater isolation exist that could be used to close the MFW reg valves and terminate MFW so fail as is for an Automatic failure would be acceptable.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 58 of 440 3.2.2   Critical Control System Signals (continued)
Catastrophic failure -The total loss of both automatic and manual control capability such as resulting from a complete loss of power.Multiple failures of inputs to the replacement system where these failures are credible due to common cause (Loss of a common input, break of a common instrument line, loss of power that feeds multiple instruments, etc.). TVA will supply input data for common cause initiator outside the control system such as power supply feeds to inputs.2. Failure Response The system shall be designed to maintain the following minimum capabilities in the above failure modes: a. The System shall include sufficient redundancy such that a single element failure does not affect the controlled process. Upon the failure of a single element, the transfer to the alternate element/algorithm shall be completely bumpless and automatic.
G. System Hazards Analysis The Offerer shall perform a qualitative reliability analysis of the control system.
Any single element failure shall be alarmed.b. In the event of an automatic failure such as loss of a redundant pair of processors, the system shall transfer all affected control devices to hold the position of all final control devices at the position (the last good value) they occupied immediately before the failure. The operator should maintain the ability to control each final control devices if possible, without introducing single points of failure. The Offerer shall provide a detailed description of how this could be accomplished.
Using a Failure Analysis technique such as a Failure Modes and Effects Analysis (FMEA) or a Fault Tree Analysis (FTA), the analysis shall identify credible failures and the consequences of these failures related to the ability of the control system to perform as designed. In those cases where a credible failure could result in degraded performance (ie., failure to provide automatic control) of the control system, the expected effects of this degraded performance on plant operations shall be identified by the Offerer and evaluated and resolved (fixed or accepted) by TVA. The results of this study shall be displayed in a table (preferred), chart, or other format as appropriate.
Note that the handstation are to be a passive failure device (output signal does not go through the handstation).
Some of the most important objectives of the failure study include:
Sufficient alarms shall be generated to inform the operator of the above conditions.
9         Identification of Single Points of Failure; w         Identification of weak points and hazards in the design; N         Assistance in selecting design alternatives that can provide greater system reliability; a         Assurance that credible failure modes are identified and their effects on operation of the replacement system are considered; and N         Documentation of the relative importance of identified failure.
: 1. Failure Modes The failure study shall be an integral part of the design effort and shall be performed early in the Offerer's design effort. The study shall be periodically updated to reflect changes in the design of the replacement system. The failure study shall consider as a minimum the following failures:
: a. Single failure of each AC and/or DC power supply feeding the replacement system
: b. Single element failure - The failure of a single element or component of the control system. Single elements include but are not limited to control processors, memory units, data highways, I/O modules, software, and other elements that are integral to the control function.
: c. The following shall address the C&MS failure response to a multiple failures condition:
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 59 of 440 3.2.2     Critical Control System Signals (continued)
: d. Automatic failure - The simultaneous failure of two or more elements such that the single or multiple automatic control features are rendered inoperable but the control output is maintained at the last known good value. For failures that operator actions using diverse instrumentation and control, the output should be positioned to the safe state. For example, diverse feedwater isolation exist that could be used to close the MFW reg valves and terminate MFW so fail as is for an Automatic failure would be acceptable.
Catastrophic failure - The total loss of both automatic and manual control capability such as resulting from a complete loss of power.
Multiple failures of inputs to the replacement system where these failures are credible due to common cause (Loss of a common input, break of a common instrument line, loss of power that feeds multiple instruments, etc.). TVA will supply input data for common cause initiator outside the control system such as power supply feeds to inputs.
: 2. Failure Response The system shall be designed to maintain the following minimum capabilities in the above failure modes:
: a. The System shall include sufficient redundancy such that a single element failure does not affect the controlled process. Upon the failure of a single element, the transfer to the alternate element/algorithm shall be completely bumpless and automatic. Any single element failure shall be alarmed.
: b. In the event of an automatic failure such as loss of a redundant pair of processors, the system shall transfer all affected control devices to hold the position of all final control devices at the position (the last good value) they occupied immediately before the failure. The operator should maintain the ability to control each final control devices if possible, without introducing single points of failure. The Offerer shall provide a detailed description of how this could be accomplished.
Note that the handstation are to be a passive failure device (output signal does not go through the handstation). Sufficient alarms shall be generated to inform the operator of the above conditions.
: c. In the event of a catastrophic or total control system failure, the field actuated devices shall be designed such that every final control device will fail to a predictable and pre-defined position (TVA to define position) to maintain the plant within the protection capabilities of the plant safety related protection systems.
: c. In the event of a catastrophic or total control system failure, the field actuated devices shall be designed such that every final control device will fail to a predictable and pre-defined position (TVA to define position) to maintain the plant within the protection capabilities of the plant safety related protection systems.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 60 of 440 3.2.2 Critical Control System Signals (continued)
 
H. Fault Tolerance The control system shall be designed such that a single fault occurring here in the system (from input to output) will not affect plant operation.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 60 of 440 3.2.2     Critical Control System Signals (continued)
This fault tolerant, 100 percent backup requirement, is required for all critical classified control and data acquisition portions of the systemr This excludes input modules (assuming independent input modules will be provided for the redundant control input signal), workstation processors (assuming a single set of electronics per ODU), and interfaces to printers.No mechanical devices should be permitted as a mechanism to transfer information or control status between any fault tolerance coupled pair. If the Offerer is unable to comply with this, it shall be identified as an exception to the bid and the mechanical device must be automatically tested periodically.
H. Fault Tolerance The control system shall be designed such that a single fault occurring here in the system (from input to output) will not affect plant operation. This fault tolerant, 100 percent backup requirement, is required for all critical classified control and data acquisition portions of the systemr This excludes input modules (assuming independent input modules will be provided for the redundant control input signal), workstation processors (assuming a single set of electronics per ODU), and interfaces to printers.
Any control system component must be capable of being taken out of service without affecting the plant operation (hot swappable).
No mechanical devices should be permitted as a mechanism to transfer information or control status between any fault tolerance coupled pair. If the Offerer is unable to comply with this, it shall be identified as an exception to the bid and the mechanical device must be automatically tested periodically.
Communication between the primary and backup controls shall allow rapid detection of a hardware or software fault in either the primary or backup system and facilitate an automatic transfer of process control to the properly operating system, if required.
Any control system component must be capable of being taken out of service without affecting the plant operation (hot swappable). Communication between the primary and backup controls shall allow rapid detection of a hardware or software fault in either the primary or backup system and facilitate an automatic transfer of process control to the properly operating system, if required. This transfer will occur in a defined amount of milliseconds and will be oblivious to the process control. Hot swappable does not require that any power supply be shut Off.
This transfer will occur in a defined amount of milliseconds and will be oblivious to the process control. Hot swappable does not require that any power supply be shut Off.I. System Diagnostics Continuous, online self diagnostics, including 1/0 status and quality monitoring, shall be provided for the total system down to the individual controller module level. This shall include self check of the hardware, memory, and firmware/software.
I. System Diagnostics Continuous, online self diagnostics, including 1/0 status and quality monitoring, shall be provided for the total system down to the individual controller module level. This shall include self check of the hardware, memory, and firmware/software. The Offerer shall describe their self diagnostic scheme in detail. Example: Each control processor shall read the input, perform the control application, and cross check the output value being sent to the final element. If the controllers disagree, they shall have the ability of diagnosing which one is at fault. Diagnostics that depend solely on individual processor self checks are not desirable. System failures detected during this system validation process shall be annunciated in the main control room via audible alarms and information made available to allow immediate response by maintenance personnel such as details of the failure displayed on the Engineering Workstation.
The Offerer shall describe their self diagnostic scheme in detail. Example: Each control processor shall read the input, perform the control application, and cross check the output value being sent to the final element. If the controllers disagree, they shall have the ability of diagnosing which one is at fault. Diagnostics that depend solely on individual processor self checks are not desirable.
System failures detected during this system validation process shall be annunciated in the main control room via audible alarms and information made available to allow immediate response by maintenance personnel such as details of the failure displayed on the Engineering Workstation.
The distributed controllers shall include extensive hardware and software self checks, including the following:
The distributed controllers shall include extensive hardware and software self checks, including the following:
I/O Quality* Input out of range* Computational check NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 61 of 440 3.2.2 Critical Control System Signals (continued) 0 Two way Communication check v Memory parity detection E Central processing unit bus time out a Power supply threshold checks (both upper and lower detection must be identified)
I/O Quality
J. System Security The system must be designed for online maintenance and tuning capability.
* Input out of range
The removal of defective components for repair must not result in loss of automatic function or cause spurious control system outputs. The system must be protected from unauthorized modifications of system functional configuration by limited access through a password and key-lock security measures.3.3 Environmental Requirements Following requirements are based upon the control system not requiring forced cooling such as cabinet fans. The equipment will be mounted in cabinets relying on natural convection ventilation.
* Computational check
It is a reliability requirement that the control system does not require forced cooling to achieve its reliability numbers. Forced cooling will be considered and evaluated as an exception to this specification.
 
3.3.1 Control System Processing Instrumentation The control system shall be designed to operate in the following ambient environmental conditions.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                     Upgrade Specification                     Rev. 0001 Specification                                                             Page 61 of 440 3.2.2     Critical Control System Signals (continued) 0       Two way Communication check v       Memory parity detection E       Central processing unit bus time out a       Power supply threshold checks (both upper and lower detection must be identified)
These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed: Parameter Design Range Temperature (OF) 60 -104 0 F*Pressure (psig) Atmospheric Relative Humidity (%) 10 -90% (non-condensing)
J. System Security The system must be designed for online maintenance and tuning capability. The removal of defective components for repair must not result in loss of automatic function or cause spurious control system outputs. The system must be protected from unauthorized modifications of system functional configuration by limited access through a password and key-lock security measures.
Radiation Background  
3.3         Environmental Requirements Following requirements are based upon the control system not requiring forced cooling such as cabinet fans. The equipment will be mounted in cabinets relying on natural convection ventilation. It is a reliability requirement that the control system does not require forced cooling to achieve its reliability numbers. Forced cooling will be considered and evaluated as an exception to this specification.
< 10 4 Rads (40 year Total Integrated Dose)Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the auxiliary instrument room (Reference WBN Reference Dwg. 47E235-17)
3.3.1       Control System Processing Instrumentation The control system shall be designed to operate in the following ambient environmental conditions. These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 62 of 440 3.3.2 MCR Instrumentation The Hand stations, remote I/0, and Operator Console shall be designed to operate in the following ambient control room environmental condition.
Parameter                               Design Range Temperature (OF)                               60 - 1040 F*
These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed: Parameter Design Range Temperature (OF) 60 -104 0 F*Pressure (psig) Atmospheric Relative Humidity (%) 10 -90% (non-condensing)
Pressure (psig)                               Atmospheric Relative Humidity (%)                         10 - 90% (non-condensing)
Radiation Background  
Radiation                                     Background < 104 Rads (40 year Total Integrated Dose)
< 103 Rads (40 year Total Integrated Dose)Applies to the ambient environment outside the Main Control Board enclosures and envelops the temperature profile for the Main Control Room(Reference WBN Reference Dwg. 47E235-16) 3.3.3 Turbine Building Instrumentation The Hand stations, remote I/O, and Operator Console shall be designed to operate in the following ambient control room environmental condition, These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed: Parameter Design Range Temperature (OF) 40 -120 OF*Pressure (psig) Atmospheric Relative Humidity (%) 10 -90% (non-condensing)
Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the auxiliary instrument room (Reference WBN Reference Dwg. 47E235-17)
Radiation Background  
 
< 103 Rads (40 year Total Integrated Dose)Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the Turbine Bldg (Reference WBN Reference Dwg. 47E235-20 thru 22)
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 62 of 440 3.3.2       MCR Instrumentation The Hand stations, remote I/0, and Operator Console shall be designed to operate in the following ambient control room environmental condition. These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 63 of 440 3.4 Man Machine Interfaces 3.4.1 Control/Handstations A manual control interface shall be provided for devices listed in Appendix F that are controlled by the automatic control system to allow for operator control. The manual system shall be sufficiently independent of the automatic system to preclude any single failure from rendering the automatic control system inoperable.
Parameter                             Design Range Temperature (OF)                               60 - 1040 F*
The automatic system shall provide for a bumpless transfer from either manual to automatic control or automatic to manual. This means that the system shall be designed such that any portion of the system can be transferred from automatic to manual and from manual to automatic without any manual balancing and without any system disturbances (bumpless transfer).
Pressure (psig)                               Atmospheric Relative Humidity (%)                         10 - 90% (non-condensing)
The method of bumpless transfer shall be determined on a loop by loop basis.The operator interface shall be through both "hard" manual/automatic stations and through flat panel displays (described below) located on the main control board.The Stations shall allow positioning of the devices through the control system. The stations shall be passive from a failure aspect. A failure of the station shall not affect the automatic controls.
Radiation                                     Background < 103 Rads (40 year Total Integrated Dose)
The station's displays shall be capable of providing analog type Indications with up to three variables displayed such as (1) Output demand; (2)Setpoint; and/or (3) Deviation.
Applies to the ambient environment outside the Main Control Board enclosures and envelops the temperature profile for the Main Control Room(Reference WBN Reference Dwg. 47E235-16) 3.3.3       Turbine Building Instrumentation The Hand stations, remote I/O, and Operator Console shall be designed to operate in the following ambient control room environmental condition, These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:
If the indication is digital, all parameters should be configurable with respect to specific input parameters and the parameters shall be displayed in engineering units.The standard manual stations shall have individual controls (as specified in Appendix F) for the automatic/manual control mode selection, setpoint adjustment, and controller output adjustment.
Parameter                             Design Range Temperature (OF)                               40 - 120 OF*
At a minimum, the stations shall replicate the existing stations' functions.
Pressure (psig)                               Atmospheric Relative Humidity (%)                         10 - 90% (non-condensing)
The manual control for the output demand shall have two programmable speeds, a fast and a slow. The manual/automatic Handstations shall be capable of removal for maintenance without interrupting the automatic control system. The handstation should fit within the existing cutout (size is equal to or smaller).
Radiation                                     Background < 103 Rads (40 year Total Integrated Dose)
A handstation that fits within the existing cutout without Main Control Board modifications will be viewed as a positive attribute.
Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the Turbine Bldg (Reference WBN Reference Dwg. 47E235-20 thru 22)
A handstation that does not require a power source is a positive attribute.
 
See Appendix F for an example for possible implementation.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                     Rev. 0001 Specification                                                             Page 63 of 440 3.4       Man Machine Interfaces 3.4.1     Control/Handstations A manual control interface shall be provided for devices listed in Appendix F that are controlled by the automatic control system to allow for operator control. The manual system shall be sufficiently independent of the automatic system to preclude any single failure from rendering the automatic control system inoperable. The automatic system shall provide for a bumpless transfer from either manual to automatic control or automatic to manual. This means that the system shall be designed such that any portion of the system can be transferred from automatic to manual and from manual to automatic without any manual balancing and without any system disturbances (bumpless transfer). The method of bumpless transfer shall be determined on a loop by loop basis.
The conceptual design of the manual control stations shall be submitted for review and approval by TVA. This review will be to WVA Human Factor Standards and Operations Review.3.4.2 Indicators Any replacements will be TVA scope of supply.
The operator interface shall be through both "hard" manual/automatic stations and through flat panel displays (described below) located on the main control board.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 64 of 440 3.4.3 Non-Linear Indicators Any Indicator that has a non-linear scale such as a square root scale for flow shall be replaced with a linear scale with the linearization being performed within the software.Any existing computer points shall be evaluated to determine where linearization is to occur, ICS or the control system. All flow indicators shall have a low flow cutoff to prevent indicator readings below zero due to input uncertainties.
The Stations shall allow positioning of the devices through the control system. The stations shall be passive from a failure aspect. A failure of the station shall not affect the automatic controls. The station's displays shall be capable of providing analog type Indications with up to three variables displayed such as (1) Output demand; (2)
The low flow cutoff shall be disabled on gross transmitter input failures so that the transmitter failure is identifiable.
Setpoint; and/or (3) Deviation. If the indication is digital, all parameters should be configurable with respect to specific input parameters and the parameters shall be displayed in engineering units.
3.4.4 Engineering Workstation The Offerer shall provide an engineering workstation for WBN 2 to allow the user to design, configure, monitor, tune, document, and trouble shoot the process activities and the control system. The engineering console will be a permanent installation that is connected to WBN 2 only to fulfill cybersecurity and unit control requirements derived from GDC 19. The Engineering Workstation shall be an independent drop on the control network. The control system shall be capable of online tuning and troubleshooting from the Engineering workstation.
The standard manual stations shall have individual controls (as specified in Appendix F) for the automatic/manual control mode selection, setpoint adjustment, and controller output adjustment. At a minimum, the stations shall replicate the existing stations' functions. The manual control for the output demand shall have two programmable speeds, a fast and a slow. The manual/automatic Handstations shall be capable of removal for maintenance without interrupting the automatic control system. The handstation should fit within the existing cutout (size is equal to or smaller). A handstation that fits within the existing cutout without Main Control Board modifications will be viewed as a positive attribute. A handstation that does not require a power source is a positive attribute. See Appendix F for an example for possible implementation.
The workstation shall be provided with features to prohibit unauthorized access to means for changing the system configuration.
The conceptual design of the manual control stations shall be submitted for review and approval by TVA. This review will be to WVA Human Factor Standards and Operations Review.
Isolation to protect other components from workstation failures shall also be provided.The Engineering Workstations will be located in the Aux Instrument Room to provide capability of maintenance and troubleshooting.
3.4.2       Indicators Any replacements will be TVA scope of supply.
The Engineering Workstation can be a rack mounted type but must support use in a seated position (TVA to approve final layout). Assess to Engineering Workstations shall be secured such as a lockable cabinet.The hardware associated with each engineering console shall consist of the following items, as a minimum: One console with Operational Display Unit (ODU), one operator keyboard, one trackball pointing device, associated processors, memory, communication links, and ancillary hardware.
 
The Lead Electrical Engineer shall have the right to determine adequacy.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 64 of 440 3.4.3     Non-Linear Indicators Any Indicator that has a non-linear scale such as a square root scale for flow shall be replaced with a linear scale with the linearization being performed within the software.
This determination shall be made not later than the hardware freeze date.The engineering console shall be capable of modifying existing HMI displays, creating new displays either from scratch or by editing existing displays, and downloading them over the data network to the appropriate storage location.
Any existing computer points shall be evaluated to determine where linearization is to occur, ICS or the control system. All flow indicators shall have a low flow cutoff to prevent indicator readings below zero due to input uncertainties. The low flow cutoff shall be disabled on gross transmitter input failures so that the transmitter failure is identifiable.
The engineering console shall be capable of performing these functions with the plant operating and with no degradation of the on-line control and monitoring functions of the Control System. All devices and/or software utilized by the Offerer's factory personnel to assist in display building shall be provided at no cost to TVA. The graphics pages shall have the same aspect ratio and colors when viewed on either the operator's console or the engineer's console. TVA prefers that the engineer's screen and the operator's screens be as identical as possible.Upon request, at least the following listed information shall be printed on any linked printer from any Engineering Workstation:
3.4.4       Engineering Workstation The Offerer shall provide an engineering workstation for WBN 2 to allow the user to design, configure, monitor, tune, document, and trouble shoot the process activities and the control system. The engineering console will be a permanent installation that is connected to WBN 2 only to fulfill cybersecurity and unit control requirements derived from GDC 19. The Engineering Workstation shall be an independent drop on the control network. The control system shall be capable of online tuning and troubleshooting from the Engineering workstation. The workstation shall be provided with features to prohibit unauthorized access to means for changing the system configuration. Isolation to protect other components from workstation failures shall also be provided.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 66 of 440 3.4.4 Engineering Workstation (continued)
The Engineering Workstations will be located in the Aux Instrument Room to provide capability of maintenance and troubleshooting. The Engineering Workstation can be a rack mounted type but must support use in a seated position (TVA to approve final layout). Assess to Engineering Workstations shall be secured such as a lockable cabinet.
A. Current alarm review -A list identifying all points that are currently in the alarm state by complete alarm condition description.
The hardware associated with each engineering console shall consist of the following items, as a minimum: One console with Operational Display Unit (ODU), one operator keyboard, one trackball pointing device, associated processors, memory, communication links, and ancillary hardware. The Lead Electrical Engineer shall have the right to determine adequacy. This determination shall be made not later than the hardware freeze date.
B. Bad input list -A list of all inputs that are currently declared to be not "GOOD".C. Deleted input list -A list of all inputs that are currently deleted from scan, that is that have been placed into Manual control.D. Alarm check delete list -A list of all inputs and computed variables that are currently inhibited, that is, deleted from alarm limit checking including alarms that have been cut out.E. Substitute value list -A list of all inputs with substitute values inserted, that is that have been placed into Manual control with a manually entered value.3.4.5 Development System The Offerer shall provide a stand alone development system for off line controls and graphics development.
The engineering console shall be capable of modifying existing HMI displays, creating new displays either from scratch or by editing existing displays, and downloading them over the data network to the appropriate storage location. The engineering console shall be capable of performing these functions with the plant operating and with no degradation of the on-line control and monitoring functions of the Control System. All devices and/or software utilized by the Offerer's factory personnel to assist in display building shall be provided at no cost to TVA. The graphics pages shall have the same aspect ratio and colors when viewed on either the operator's console or the engineer's console. TVA prefers that the engineer's screen and the operator's screens be as identical as possible.
This system will not be connected to the plant system. The development system shall be capable of I/O simulation.
Upon request, at least the following listed information shall be printed on any linked printer from any Engineering Workstation:
3.4.6 Operator Console In addition to the manual/automatic handstations mounted on the main control boards, the control system shall include two ODU based operator's console in the MCR. Each ODU shall have a physical cursor control (e.g, trackball, mouse, etc.) capable of calling up programmed displays and providing backup control of critical functions.
 
The console shall provide the capability for displaying customized, dynamic, color graphics of the processes, data trending, event logging, alarm priority levels, and data storage and retrieval.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                     Upgrade Specification                     Rev. 0001 Specification                                                             Page 66 of 440 3.4.4     Engineering Workstation (continued)
A keyboard port shall be provided for each ODU to support maintenance activities.
A. Current alarm review - A list identifying all points that are currently in the alarm state by complete alarm condition description.
In addition, the console shall provide "soft" manual control of the process through the use of the physical cursor control. The size of the ODUs shall be defined based upon space limitation of Main Control Board (minimum size of 19 inch flat panel display required, 20 inches preferred and shall be quoted).The Operator Console shall have an independent set of Operator Console electronics and associated hardware with redundant connection to the unit network. Each Operator Console shall be capable of supporting one or two ODU monitors, an operator keyboard, and up to two printers while providing access to the entire unit database Cursor controls shall require two actions such as select and acknowledge.
B. Bad input list - A list of all inputs that are currently declared to be not "GOOD".
C. Deleted input list - A list of all inputs that are currently deleted from scan, that is that have been placed into Manual control.
D. Alarm check delete list - A list of all inputs and computed variables that are currently inhibited, that is, deleted from alarm limit checking including alarms that have been cut out.
E. Substitute value list - A list of all inputs with substitute values inserted, that is that have been placed into Manual control with a manually entered value.
3.4.5     Development System The Offerer shall provide a stand alone development system for off line controls and graphics development. This system will not be connected to the plant system. The development system shall be capable of I/O simulation.
3.4.6     Operator Console In addition to the manual/automatic handstations mounted on the main control boards, the control system shall include two ODU based operator's console in the MCR. Each ODU shall have a physical cursor control (e.g, trackball, mouse, etc.) capable of calling up programmed displays and providing backup control of critical functions. The console shall provide the capability for displaying customized, dynamic, color graphics of the processes, data trending, event logging, alarm priority levels, and data storage and retrieval. A keyboard port shall be provided for each ODU to support maintenance activities.
In addition, the console shall provide "soft" manual control of the process through the use of the physical cursor control. The size of the ODUs shall be defined based upon space limitation of Main Control Board (minimum size of 19 inch flat panel display required, 20 inches preferred and shall be quoted).
The Operator Console shall have an independent set of Operator Console electronics and associated hardware with redundant connection to the unit network. Each Operator Console shall be capable of supporting one or two ODU monitors, an operator keyboard, and up to two printers while providing access to the entire unit database Cursor controls shall require two actions such as select and acknowledge.
The Offerer shall supply the minimum expected life time for the LCDs.
The Offerer shall supply the minimum expected life time for the LCDs.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 66 of 440 3.4.6 Operator Console (continued)
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 66 of 440 3.4.6     Operator Console (continued)
As part of a option to be bidded, please provide the costs of implementing for: 1) Two 19 inch ODU's for installation in the Main Control Room with supporting graphics that would provide information associated with the primary side functions such as RCS, CVCS, SI, RHR, etc.; and 2) Two 19 inch ODU's for installation on TBD with supporting graphics that would provide information associated with the BOP functions.
As part of a option to be bidded, please provide the costs of implementing for: 1) Two 19 inch ODU's for installation in the Main Control Room with supporting graphics that would provide information associated with the primary side functions such as RCS, CVCS, SI, RHR, etc.; and 2) Two 19 inch ODU's for installation on TBD with supporting graphics that would provide information associated with the BOP functions.
ODUs shall be free of software issues such as memory leaks, processor lock up, etc.Work arounds such as periodic reboots are not allowed. ODUs shall have a displayed heartbeat (approximately a 2 to 5 second period) for detection of processor lock up.3.4.7 Graphics A. Graphic Displays Configuration The design, coordination, implementation, programming, and testing of all displays shall be the Offerer's responsibility.
ODUs shall be free of software issues such as memory leaks, processor lock up, etc.
This shall include, but not be limited to, navigation displays, process mimics/faceplates, interlock help displays, system status displays, control loop status displays, diagnostic displays, alarm summary displays, and trend displays as defined elsewhere in this document.
Work arounds such as periodic reboots are not allowed. ODUs shall have a displayed heartbeat (approximately a 2 to 5 second period) for detection of processor lock up.
TVA shall make available experienced operators to perform operational review of display elements, display organization, color coding, and navigation.
3.4.7     Graphics A. Graphic Displays Configuration The design, coordination, implementation, programming, and testing of all displays shall be the Offerer's responsibility. This shall include, but not be limited to, navigation displays, process mimics/faceplates, interlock help displays, system status displays, control loop status displays, diagnostic displays, alarm summary displays, and trend displays as defined elsewhere in this document. TVA shall make available experienced operators to perform operational review of display elements, display organization, color coding, and navigation. Such review shall be completed by the end of the project's engineering phase. WA shall also make available applicable system operating procedures (from WBN 1) for plant systems involved in this design.
Such review shall be completed by the end of the project's engineering phase. WA shall also make available applicable system operating procedures (from WBN 1) for plant systems involved in this design.B. Graphic Display Types 1. Navigation (Menu) displays -Navigation displays help the operator in locating specific graphics for control or monitoring.
B. Graphic Display Types
In addition to the main navigation displays, every graphic should contain navigation aids to assist the operator.2. Process Mimic I Faceplate Displays -Process mimic and faceplate displays are P&ID and single line schematics showing the different plant systems with associated data (status of active components and indications of flows, temperatures, pressures, levels, etc.). From the process mimic the selection of a control action calls a faceplate which graphically replicates a hand station.3. System Status Displays -The system shall be provided with ODU graphic displays to permit the monitoring of system components, peripheral devices and communication circuits.
: 1. Navigation (Menu) displays - Navigation displays help the operator in locating specific graphics for control or monitoring. In addition to the main navigation displays, every graphic should contain navigation aids to assist the operator.
Information shall be provided to the individual component level utilizing the system diagnostic capabilities.
: 2. Process Mimic I Faceplate Displays - Process mimic and faceplate displays are P&ID and single line schematics showing the different plant systems with associated data (status of active components and indications of flows, temperatures, pressures, levels, etc.). From the process mimic the selection of a control action calls a faceplate which graphically replicates a hand station.
From these displays, the engineer shall be able to restore system communications, mark Control System devices in or out of service, and generally monitor the conditions of each piece of hardware included in the system.
: 3. System Status Displays - The system shall be provided with ODU graphic displays to permit the monitoring of system components, peripheral devices and communication circuits. Information shall be provided to the individual component level utilizing the system diagnostic capabilities. From these displays, the engineer shall be able to restore system communications, mark Control System devices in or out of service, and generally monitor the conditions of each piece of hardware included in the system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 67 of 440 3.4.7 Graphics (continued)
 
: 4. Alarm Summary Displays -Alarm summary displays provide the operator with information on alarm status of process points, system failures, etc. The alarm message shall be a single line description of the alarm condition for each alarm on the ODU. The operator shall not require any index or decoding to understand the nature of the alarm nor the point in alarm. A point tag blinking as the sole indication does not constitute acceptable alarm notification.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 67 of 440 3.4.7   Graphics (continued)
: 5. Trend Displays -Data Trending -The plant operators shall be provided with several means to monitor the time varying trends of plant data. System data, whether scanned or computed, shall be available for trending on any ODU and sent to a printer for hard copy. Trend displays shall be provided such that the operator can call any of these displays and view all or part of the last one hours values with a minimum resolution of 15 seconds, The operator shall be able to pan forward and backward in time (minimum of 24 hours) and zoom to a shorter time period display or value range display.These displays shall include values versus time or other values. SPECIAL CONSIDERATION shall be given in order to provide the minimum of 24 hours of past data on all trends regardless of resolution.
: 4. Alarm Summary Displays - Alarm summary displays provide the operator with information on alarm status of process points, system failures, etc. The alarm message shall be a single line description of the alarm condition for each alarm on the ODU. The operator shall not require any index or decoding to understand the nature of the alarm nor the point in alarm. A point tag blinking as the sole indication does not constitute acceptable alarm notification.
The Operator shall have the ability to independently rescale the range of the process variables being monitored.
: 5. Trend Displays - Data Trending - The plant operators shall be provided with several means to monitor the time varying trends of plant data. System data, whether scanned or computed, shall be available for trending on any ODU and sent to a printer for hard copy. Trend displays shall be provided such that the operator can call any of these displays and view all or part of the last one hours values with a minimum resolution of 15 seconds, The operator shall be able to pan forward and backward in time (minimum of 24 hours) and zoom to a shorter time period display or value range display.
C. Color Convention All ODU based displays proposed for the Control System shall be in accordance with TVA Design Standard E18.1.24, except as noted below. The color and display conventions below are intended to ensure that the Control System displays are similar to the Integrated Computer System (ICS) displays.
These displays shall include values versus time or other values. SPECIAL CONSIDERATION shall be given in order to provide the minimum of 24 hours of past data on all trends regardless of resolution. The Operator shall have the ability to independently rescale the range of the process variables being monitored.
Color coding may be modified as a result of operator evaluation; such evaluation to be completed by the end of the project's engineering phase.1. All graphics must be presented on a gray background.
C. Color Convention All ODU based displays proposed for the Control System shall be in accordance with TVA Design Standard E18.1.24, except as noted below. The color and display conventions below are intended to ensure that the Control System displays are similar to the Integrated Computer System (ICS) displays. Color coding may be modified as a result of operator evaluation; such evaluation to be completed by the end of the project's engineering phase.
: 2. White is used for operator prompts/static text, object outlines, bar graph outlines, etc.3. Green is used to show valid data, de-energized equipment, closed valves, etc.4. Red is used to show energized equipment, open valves, upper/lower alarm points exceeded.5. Variables in alarm should change to red on a white (or light gray)background.
: 1. All graphics must be presented on a gray background.
: 2. White is used for operator prompts/static text, object outlines, bar graph outlines, etc.
: 3. Green is used to show valid data, de-energized equipment, closed valves, etc.
: 4. Red is used to show energized equipment, open valves, upper/lower alarm points exceeded.
: 5. Variables in alarm should change to red on a white (or light gray) background.
: 6. Current acknowledged alarms should be red on a black background, and unacknowledged alarms that have returned to normal should be green on a white (or light gray) background.
: 6. Current acknowledged alarms should be red on a black background, and unacknowledged alarms that have returned to normal should be green on a white (or light gray) background.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 68 of 440 3.4.7 Graphics (continued)
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 68 of 440 3.4.7     Graphics (continued)
: 7. Current unacknowledged alarms should have a blinking background.
: 7. Current unacknowledged alarms should have a blinking background.
: 8. All blink rates should be at a rate of approximately once per second.9. Blue shall be used to indicate an inoperable or out of range variable.10. Alarm message displays should be consistent with the variable display colors.11. Yellow should be used as a cautionary alarm color, or to indicate sub-component trouble.12. Fully open valves should be shown as hollow red or solid red if the size of the symbol warrants.13. Fully closed valves should be shown solid green.14. Throttled or intermediate positioned valves should be shown with one section solid white and the other hollow white.15. Dark blue should be used for selectable objects.16, White should be used for static, non- selectable objects 17. White should be used for process piping.18. Cyan is used to denote substituted data.NOTE Even though we specified black background on displays, the Offerer shall provide a color reversing scheme to allow printing screens on a white background.
: 8. All blink rates should be at a rate of approximately once per second.
3.4.8 Alarms A. Annunciation Alarms A method of inhibiting an alarm shall be provided once it has been acknowledged to meet the annunciator black board concept and to prevent the masking of new alarms that are in the same annunciator grouping.
: 9. Blue shall be used to indicate an inoperable or out of range variable.
The system shall permit the operator to inhibit alarm checking from the ODU consoles of any point in the system. The ability to prevent the operator from inhibiting alarms (via password protection, etc.) is required.
: 10. Alarm message displays should be consistent with the variable display colors.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 69 of 440 3.4.8 Alarms (continued)
: 11. Yellow should be used as a cautionary alarm color, or to indicate sub-component trouble.
The control system built-in alarm system shall provide features to mitigate andlor to avoid nuisance alarms. The Offerer shall provide, with TVA guidance, an alarm implementation scheme for TVA review and approval.
: 12. Fully open valves should be shown as hollow red or solid red if the size of the symbol warrants.
Appropriate front end alarm management design methods such as filtering and alarm categorization and grouping are to be implemented to prevent nuisance alarms.B. Alarm Monitoring Requirements The ODU alarming function shall permit the assignment of each analog and contact alarm condition to a particular priority level. This feature shall display the alarm condition such that an operator can easily identify the priority level that has been assigned.
: 13. Fully closed valves should be shown solid green.
Only critical alarms shall be assigned to the highest priority level. These critical alarms shall be alarmed on both the ODU and the existing annunciator panels. The operator shall be able to acknowledge both ODU and annunciator panel alarms from the operator work station. The Offerer shall be responsible for determining and coordinating with the Engineer all alarms and alarm priorities.
: 14. Throttled or intermediate positioned valves should be shown with one section solid white and the other hollow white.
Changes to alarms and alarm priority levels shall be made through the engineer console under password protection.
: 15. Dark blue should be used for selectable objects.
The system shall specifically provide "bad" input detection and alarming of: 1. Open thermocouple inputs.2. Shorted resistive feedback detectors (i.e. RTD, slidewire, etc.).3. Out of range input signal levels for analog inputs, both high and low.4. Blown fuses for inputs and outputs (for system powered points).3.4.9 System Printers The Offerer shall provide a quoted option for system printers as follows: A. Alarm, log, report, text printers; one per engineering console.B. Screen printers; one per control room and one per engineering console The Offerer shall quote floor stands and noise suppression housings separately.
16, White should be used for static, non- selectable objects
Each floor stand shall have provisions for storing the paper feeding to and from the printers and allow for power and signal connections.
: 17. White should be used for process piping.
Screen printers (color inkjet or color laser) shall be used for printing ODU displays.These printers shall have enough resolution to accurately depict the display as it would appear to the operator or engineer on the work station consoles using the same color palette as utilized by the screen, i.e. if the screen is black background, the print out shall be black background as well, etc..
: 18. Cyan is used to denote substituted data.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 70 of 440 3.6 Software Quality 3.6.1 Requirements The Offerer shall meet the requirements of TVA Standard Specification SS-E18.15.01.
NOTE Even though we specified black background on displays, the Offerer shall provide a color reversing scheme to allow printing screens on a white background.
The standard spec classification for this control system application is critical to Plant Operation.
3.4.8     Alarms A. Annunciation Alarms A method of inhibiting an alarm shall be provided once it has been acknowledged to meet the annunciator black board concept and to prevent the masking of new alarms that are in the same annunciator grouping. The system shall permit the operator to inhibit alarm checking from the ODU consoles of any point in the system. The ability to prevent the operator from inhibiting alarms (via password protection, etc.) is required.
The following section will list these requirements.
 
The following section will refer to two different types of software.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 69 of 440 3.4.8     Alarms (continued)
The first software type is the control system's basis software used to develop control system applications and will be referred to as Vendor software.
The control system built-in alarm system shall provide features to mitigate andlor to avoid nuisance alarms. The Offerer shall provide, with TVA guidance, an alarm implementation scheme for TVA review and approval. Appropriate front end alarm management design methods such as filtering and alarm categorization and grouping are to be implemented to prevent nuisance alarms.
The second type of software is the application program which is developed from the Vendor software for the specific control applications.
B. Alarm Monitoring Requirements The ODU alarming function shall permit the assignment of each analog and contact alarm condition to a particular priority level. This feature shall display the alarm condition such that an operator can easily identify the priority level that has been assigned. Only critical alarms shall be assigned to the highest priority level. These critical alarms shall be alarmed on both the ODU and the existing annunciator panels. The operator shall be able to acknowledge both ODU and annunciator panel alarms from the operator work station. The Offerer shall be responsible for determining and coordinating with the Engineer all alarms and alarm priorities. Changes to alarms and alarm priority levels shall be made through the engineer console under password protection.
This software will be referred to as Application software.
The system shall specifically provide "bad" input detection and alarming of:
The following requirements shall address both types of software.The objective of the requirement of this section is to determine if there is sufficient evidence that the software will reliably perform its intended functions.
: 1. Open thermocouple inputs.
The supplier shall provide the following with his bid for TVA evaluation:
: 2. Shorted resistive feedback detectors (i.e. RTD, slidewire, etc.).
: 3. Out of range input signal levels for analog inputs, both high and low.
: 4. Blown fuses for inputs and outputs (for system powered points).
3.4.9       System Printers The Offerer shall provide a quoted option for system printers as follows:
A. Alarm, log, report, text printers; one per engineering console.
B. Screen printers; one per control room and one per engineering console The Offerer shall quote floor stands and noise suppression housings separately. Each floor stand shall have provisions for storing the paper feeding to and from the printers and allow for power and signal connections.
Screen printers (color inkjet or color laser) shall be used for printing ODU displays.
These printers shall have enough resolution to accurately depict the display as it would appear to the operator or engineer on the work station consoles using the same color palette as utilized by the screen, i.e. if the screen is black background, the print out shall be black background as well, etc..
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 70 of 440 3.6       Software Quality 3.6.1     Requirements The Offerer shall meet the requirements of TVA Standard Specification SS-E18.15.01.
The standard spec classification for this control system application is critical to Plant Operation. The following section will list these requirements. The following section will refer to two different types of software. The first software type is the control system's basis software used to develop control system applications and will be referred to as Vendor software. The second type of software is the application program which is developed from the Vendor software for the specific control applications. This software will be referred to as Application software. The following requirements shall address both types of software.
The objective of the requirement of this section is to determine if there is sufficient evidence that the software will reliably perform its intended functions. The supplier shall provide the following with his bid for TVA evaluation:
A. Identify software functions required to accomplish the application.
A. Identify software functions required to accomplish the application.
B. Provide software documentation that these functions can be achieved by the proposed system or component.
B. Provide software documentation that these functions can be achieved by the proposed system or component.
C. Describe hardware or software features that could potentially interfere with the required functions, e.g. interrupts, diagnostics, manual inputs, h0h-essential applications programs, unauthorized program or data modifications, etc.Describe how to system responds and recovers to each of these events.D. Describe the software development methodology including verification.
C. Describe hardware or software features that could potentially interfere with the required functions, e.g. interrupts, diagnostics, manual inputs, h0h-essential applications programs, unauthorized program or data modifications, etc.
E. Describe the validation testing scope and results.F. Describe operating experience including the number of applications, years of service, and resolution of problems and failures.G. Describe the software error reporting process for production version software including notification of users.H. Describe supplier software maintenance, documentation, and configuration management processes.
Describe how to system responds and recovers to each of these events.
D. Describe the software development methodology including verification.
E. Describe the validation testing scope and results.
F. Describe operating experience including the number of applications, years of service, and resolution of problems and failures.
G. Describe the software error reporting process for production version software including notification of users.
H. Describe supplier software maintenance, documentation, and configuration management processes.
The Offeror's software shall comply with SS-El 8.15.01 requirements for CPO. A review of the Offeror's program shall be performed by T'VA to ensure compliance.
The Offeror's software shall comply with SS-El 8.15.01 requirements for CPO. A review of the Offeror's program shall be performed by T'VA to ensure compliance.
The Offerer shall support his review by submittal of documentation and up to three (3)days of review on-site support.
The Offerer shall support his review by submittal of documentation and up to three (3) days of review on-site support.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 71 of 440 3.6.2 Software Quality Assurance Plan (SQAP)The Offerer shall develop and submit for TVA approval their SOAP for both the Vendor and application software as required by WVA Standard Specification SS-E18.15.01.
 
Refer to IEEE Standard 730.1-1989 for guidance for SQAP development.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 71 of 440 3.6.2     Software Quality Assurance Plan (SQAP)
3.5.3 Software Requirements Specification The Offerer shall use this Engineering Specification as the Software Requirements Specification (SRS) for the Application software.3.5.4 Software Design Description The Offerer shall develop and submit for WVA approval a Software Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-E18.15,01.
The Offerer shall develop and submit for TVA approval their SOAP for both the Vendor and application software as required by WVA Standard Specification SS-E18.15.01. Refer to IEEE Standard 730.1-1989 for guidance for SQAP development.
Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by WVA.3.5.5 Verification and Validation (V&V)The surveillance activity identified below may include the need for TVA to access and review material that the Offeror considers to be proprietary or intellectual property.
3.5.3     Software Requirements Specification The Offerer shall use this Engineering Specification as the Software Requirements Specification (SRS) for the Application software.
The surveillance shall occur following appropriate commericial non-disclosure agreement(s) that islare acceptable to TVA and to the Offeror.A. Verification For the Vendor software, the Offerer shall permit WVA to conduct a surveillance activity to review its software verification process and list the internal document that implements this process for TVA's revew. For the Application software, the Offerer's and TVA's design reviews will be used to perform software verification.
3.5.4     Software Design Description The Offerer shall develop and submit for WVA approval a Software Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-E18.15,01. Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by WVA.
B. Validation For the Vendor software, the Offerer shall permit TVA to conduct a surveillance activity to review its software validation process and list the internal document that implements this process for TVA's review. For the Application software, the testing will be used to perform software validation.
3.5.5     Verification and Validation (V&V)
This testing will consist of: 1) a comprehensive Factory Acceptance Test (FAT)performed by the Offerer and witnessed by WVA; 2) Simulator Testing performed by WVA; 3) Post Modification Testing performed by TVA with support from the Offerer.C. Burn In Testing The complete system shall be powered up and operating (open loop acceptable) uninterrupted for a minimum of 2 weeks. Should be performed prior to FAT.
The surveillance activity identified below may include the need for TVA to access and review material that the Offeror considers to be proprietary or intellectual property. The surveillance shall occur following appropriate commericial non-disclosure agreement(s) that islare acceptable to TVA and to the Offeror.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 72 of 440 3.5.5 Verification and Validation (V&V) (continued)
A. Verification For the Vendor software, the Offerer shall permit WVA to conduct a surveillance activity to review its software verification process and list the internal document that implements this process for TVA's revew. For the Application software, the Offerer's and TVA's design reviews will be used to perform software verification.
D. Factory Acceptance Testing (FAT)The FAT shall be a comprehensive test that verifies all control system performance requirements, hardware and software.
B. Validation For the Vendor software, the Offerer shall permit TVA to conduct a surveillance activity to review its software validation process and list the internal document that implements this process for TVA's review. For the Application software, the testing will be used to perform software validation. This testing will consist of: 1) a comprehensive Factory Acceptance Test (FAT) performed by the Offerer and witnessed by WVA; 2) Simulator Testing performed by WVA; 3) Post Modification Testing performed by TVA with support from the Offerer.
Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by WVA) implemented.
C. Burn In Testing The complete system shall be powered up and operating (open loop acceptable) uninterrupted for a minimum of 2 weeks. Should be performed prior to FAT.
TVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT plans and procedures to implement the scoping document.
 
The FAT Plan and Procedures shall be submitted to WVA for review and approval before performance.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 72 of 440 3.5.5     Verification and Validation (V&V) (continued)
All test anomalies shall be resolved with TVA. Shipment with unresolved anomalies shall occur only with TVA's approval.
D. Factory Acceptance Testing (FAT)
The executed FAT Plan and Procedures shall be submitted to TVA for final review and approval.E. Simulator Testing The Plant Simulator will be used to perform process control system testing. In support of this testing, the Offerer shall propose in the bid a recommended method for TVA to implement the control system upgrades into the WBN Simulators such as the Offerer providing computer system that implements the control system software and interfaces with the Simulators or directly updating the Simulators with the upgraded control system software.
The FAT shall be a comprehensive test that verifies all control system performance requirements, hardware and software. Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by WVA) implemented.
This should be coordinated with Section 2.2, Simulator upgrade.F. Post Modification Testing The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support.3.5.6 V&V Report The Offerer shall submit a V&V Report that documents design reviews and references the FAT results and vendor software V&V. All software and hardware baselines (both Vendor and application software along with needed software tools)and revision levels shall be documented in the report.3.5.7 Software Configuration All software will be configured by the Offerer using a controlled development process with configuration controls that will provide a quality product.
TVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT plans and procedures to implement the scoping document. The FAT Plan and Procedures shall be submitted to WVA for review and approval before performance. All test anomalies shall be resolved with TVA. Shipment with unresolved anomalies shall occur only with TVA's approval. The executed FAT Plan and Procedures shall be submitted to TVA for final review and approval.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 73 of 440 3.5.8 Configuration Control For both Vendor and Application software, the Offerer shall submit their software configuration control process and the internal document that implements this process for IVA's review. The Offerer shall recommend the best method for TVA to maintain configuration control of both hardware and software upon delivery and acceptance of the control system.3.6.9 User Manuals The Offerer shall provide 5 sets of User manuals for hardware, software, and graphics application.
E. Simulator Testing The Plant Simulator will be used to perform process control system testing. In support of this testing, the Offerer shall propose in the bid a recommended method for TVA to implement the control system upgrades into the WBN Simulators such as the Offerer providing computer system that implements the control system software and interfaces with the Simulators or directly updating the Simulators with the upgraded control system software. This should be coordinated with Section 2.2, Simulator upgrade.
3.5.10 Training Training is addressed in the Training section of this specification.
F. Post Modification Testing The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support.
3.5.11 Security Security is addressed in the Security section of this specification.
3.5.6     V&V Report The Offerer shall submit a V&V Report that documents design reviews and references the FAT results and vendor software V&V. All software and hardware baselines (both Vendor and application software along with needed software tools) and revision levels shall be documented in the report.
3.5.12 Software Tagging Software tagging (software point identification) convention shall be developed by TVA based upon the Offerer's software configuration capabilities.
3.5.7     Software Configuration All software will be configured by the Offerer using a controlled development process with configuration controls that will provide a quality product.
3.6 Interface Requirements 3.6.1 Interface with Other Systems Any control system inputs that are received from safety systems shall be provided via isolators located in the safety system's enclosures (not in Non-Safety enclosures) and will be at a non-IE signal level required by the control system. To eliminate the potential for mid scale failures, analog inputs and outputs shall not represent bipolar voltage combinations, where the signal passes through zero. Signals with live zeros are recommended.
 
The control system will receive analog inputs from pressure, temperature, flow, and level sensors as shown in Appendix E. Signal conditioning hardware shall be included in the control system to accept a variety of input types.Digital interfaces shall be provided for monitoring the control system inputs and outputs by the plant ICS, transient monitors, etc. Signals supplied to the ICS, indicators, and recorders shall be buffered or isolated to prevent degradation of the control system by any of the following events:
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 73 of 440 3.5.8     Configuration Control For both Vendor and Application software, the Offerer shall submit their software configuration control process and the internal document that implements this process for IVA's review. The Offerer shall recommend the best method for TVA to maintain configuration control of both hardware and software upon delivery and acceptance of the control system.
NPG Site-Specific WBN Unit 2 NSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 74 of 440 3.6.1 Interface with Other Systems (continued)
3.6.9     User Manuals The Offerer shall provide 5 sets of User manuals for hardware, software, and graphics application.
A. Broadcast Storm from ICS network B. Failure of the digital interface component directly connected to the control system C. Other credible failures identified in the Hazard Analysis (section 3.2.2.G).3.6.2 IIO Capacity The control system shall be designed to adequately manage the minimum quantity of inputs and outputs listed in Appendix E. The capacity must include 15 percent spare capacity over the quantity given in Appendix E.Appendix E shall be defined further by the Offerer for Wafts Bars specific needs (ie., alarm output functions) 3.6.3 Field Terminations The Offerer's system shall have provisions for field terminations (eg,, Termination Assemblies) for all field 110 signals. These terminations shall be provided as either hardwired, screw terminal, or plug type connections (user selectable).
3.5.10     Training Training is addressed in the Training section of this specification.
Field terminal points shall be designed to accommodate up to #12 AWG wiring (specific terminal point wire sizes to be determined following contract award). All thermocouple (TC)cold junction compensation shall be provided directly at the field termination area where the TC wire terminates to a non match TC metal and the Offerer should limit the number of connections (eg., a ring lug is not required for TC's) .The existing terminations of the present system shall be utilized to prevent rewiring of devices external to the control system.3.6.4 Pneumatics Design TVA shall replace all affected 10 to 50 mA lIP and any electro-pneumatic positioners with 4 to 20 mA types. TVA shall determine the selected vendor and type.3.7 Maintenance The equipment shall use standardized, modular, plug in construction so that any component may be easily removed from the system and replaced without breaking or making soldered connections.
3.5.11     Security Security is addressed in the Security section of this specification.
The number of types, kinds, categories, etc., of components shall be kept to a minimum in order to reduce the spare parts cost. The Offerer shall provide a recommended periodic replacement frequency for all provided components.
3.5.12     Software Tagging Software tagging (software point identification) convention shall be developed by TVA based upon the Offerer's software configuration capabilities.
Any component with electrolytic capacitors shall specifically identified along with operating and shelf life cycles.
3.6         Interface Requirements 3.6.1       Interface with Other Systems Any control system inputs that are received from safety systems shall be provided via isolators located in the safety system's enclosures (not in Non-Safety enclosures) and will be at a non-IE signal level required by the control system. To eliminate the potential for mid scale failures, analog inputs and outputs shall not represent bipolar voltage combinations, where the signal passes through zero. Signals with live zeros are recommended.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 75 of 440 3.7.1 Troubleshooting Each module should contain both red and green status LEDs (these colors are preferred but not required).
The control system will receive analog inputs from pressure, temperature, flow, and level sensors as shown in Appendix E. Signal conditioning hardware shall be included in the control system to accept a variety of input types.
Green indicates when a module is functioning properly and red indicates failure. When detected the failed module identifier shall be displayed on the Engineering Workstation and Operator's Console and a cross reference to module type and location shall be provided.3.7.2 Testing, Calibration, and Verification Capability shall be provided for online tuning and testing of the channels and the devices used to derive the various channel output signals. Capability to perform online self tuning shall also be provided.The control system shall permit the administrative control (password and/or keylock)of access to all setpoint adjustments and tuning values. For configuration control purposes, it shall be possible to view the current revision level of the application software from the engineering workstation.
Digital interfaces shall be provided for monitoring the control system inputs and outputs by the plant ICS, transient monitors, etc. Signals supplied to the ICS, indicators, and recorders shall be buffered or isolated to prevent degradation of the control system by any of the following events:
3.7.3 Channel Bypass or Removal from Operation The control system shall be designed to permit any input or output to be removed from operation or bypassed for maintenance or testing during power operation.
 
The design shall provide for administrative control of the means for manually bypassing the channels.
NPG Site-Specific       WBN Unit 2 NSS and BOP Controls               Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 74 of 440 3.6.1   Interface with Other Systems (continued)
Channel bypassing shall be inhibited where bypassing would place the output of a redundant handling scheme into BAD quality (ie., one signal already in bad quality).If a channel has been bypassed or deliberately rendered inoperable, this condition shall be available within the control system.Channel bypass activities shall be performed from maintenance graphics screens.3.8 Equipment Cabinets The control system shall be housed in Seismic Category I(L) cabinets.
A. Broadcast Storm from ICS network B. Failure of the digital interface component directly connected to the control system C. Other credible failures identified in the Hazard Analysis (section 3.2.2.G).
The equipment cabinets are fully enclosed with hinged access doors in the front and rear.Offerer shall perform walkdown to determine details such as dimensions, mounting, cable entry, etc. Refer to Section 2.8.3.1 for seismic qualification requirements, Cabinet drawings and critical information such as center of gravity shall be submitted for TVA review.A control system shall not need forced ventilation to ensure reliability.
3.6.2     IIO Capacity The control system shall be designed to adequately manage the minimum quantity of inputs and outputs listed in Appendix E. The capacity must include 15 percent spare capacity over the quantity given in Appendix E.
If the control system requires a ventilation system, it shall be fully 100% redundant complete with blower, inlet fihter, and controls to enhance the reliability of the equipment.
Appendix E shall be defined further by the Offerer for Wafts Bars specific needs (ie.,
However, it is deemed as not being desirable and will be viewed as an exception to the specification.
alarm output functions) 3.6.3     Field Terminations The Offerer's system shall have provisions for field terminations (eg,, Termination Assemblies) for all field 110 signals. These terminations shall be provided as either hardwired, screw terminal, or plug type connections (user selectable). Field terminal points shall be designed to accommodate up to #12 AWG wiring (specific terminal point wire sizes to be determined following contract award). All thermocouple (TC) cold junction compensation shall be provided directly at the field termination area where the TC wire terminates to a non match TC metal and the Offerer should limit the number of connections (eg., a ring lug is not required for TC's) . The existing terminations of the present system shall be utilized to prevent rewiring of devices external to the control system.
If a ventilation system is furnished, annunciation on the loss of cooling air shall be provided.
3.6.4       Pneumatics Design TVA shall replace all affected 10 to 50 mA lIP and any electro-pneumatic positioners with 4 to 20 mA types. TVA shall determine the selected vendor and type.
Temperature sensors with associated control system alarms within each cabinet shall be provided.
3.7       Maintenance The equipment shall use standardized, modular, plug in construction so that any component may be easily removed from the system and replaced without breaking or making soldered connections. The number of types, kinds, categories, etc., of components shall be kept to a minimum in order to reduce the spare parts cost. The Offerer shall provide a recommended periodic replacement frequency for all provided components. Any component with electrolytic capacitors shall specifically identified along with operating and shelf life cycles.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 76 of 440 3.9 Accuracies Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
 
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects. The control accuracy does not include errors for the time in which the system is in a non-steady state condition.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                       Upgrade Specification                 Rev. 0001 Specification                                                             Page 75 of 440 3.7.1     Troubleshooting Each module should contain both red and green status LEDs (these colors are preferred but not required). Green indicates when a module is functioning properly and red indicates failure. When detected the failed module identifier shall be displayed on the Engineering Workstation and Operator's Console and a cross reference to module type and location shall be provided.
Refer to Section 3.2.1 .G.3 for additional loop accuracy requirements.
3.7.2     Testing, Calibration, and Verification Capability shall be provided for online tuning and testing of the channels and the devices used to derive the various channel output signals. Capability to perform online self tuning shall also be provided.
3.9.1 Control System Processing Accuracies Refer to Section 3.2.1.G.3.
The control system shall permit the administrative control (password and/or keylock) of access to all setpoint adjustments and tuning values. For configuration control purposes, it shall be possible to view the current revision level of the application software from the engineering workstation.
3.9.2 System Accuracy Requirements The overall control system's inaccuracies plus process inaccuracies shall not exceed the system accuracy requirements defined in the individual System Requirements sections.3.10 Response Time Requirements The response time requirements for the C&MS are described in the System Functional Requirement sections of this specification.
3.7.3     Channel Bypass or Removal from Operation The control system shall be designed to permit any input or output to be removed from operation or bypassed for maintenance or testing during power operation. The design shall provide for administrative control of the means for manually bypassing the channels. Channel bypassing shall be inhibited where bypassing would place the output of a redundant handling scheme into BAD quality (ie., one signal already in bad quality).
3.10.1 Anti-Aliasing Filtering The System shall provide the capability to enable anti-aliasing filtering for all input signals of the C&MS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.3.10.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Control System shall be as specified in the System Functional Requirements listed in Sections 4 through 12 below. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, and mode signals. The signals to the main control board (indication, status, and alarm/annunciators) should have a minimum update rate of 1 second unless otherwise specified.
If a channel has been bypassed or deliberately rendered inoperable, this condition shall be available within the control system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 77 of 440 3.10.3 Communication Response Time between Control Processors For future expansion, the C&MS shall have the capability to communicate between different Control Processor pairs as specified in the System Functional Requirements listed in sections 4 through 12 below.3.10.4 Manual Control Response The total delay for all manual component control signals of C&MS shall be no greater than 1 second.3.11 System Acceptance Test Requirements The purpose of the system acceptance tests is to determine, and the underlying standard for system acceptance shall be, compliance in every respect with this Requirements Specification.
Channel bypass activities shall be performed from maintenance graphics screens.
All materials furnished and all work performed under this specification shall be subject to four acceptance tests -a Factory Acceptance Test (FAT) at the Offerer's facility prior to delivery, an EMI/RFI Test (or completion of the Sequoyah test/evaluation) prior to delivery, a Site Acceptance Test (SAT) after delivery at a staging location, and a Post Modification Test (PMT) after installation of the system. The FAT will be conducted, directed, and performed by the Offerer with TVA representatives as witnesses.
3.8       Equipment Cabinets The control system shall be housed in Seismic Category I(L) cabinets. The equipment cabinets are fully enclosed with hinged access doors in the front and rear.
The SAT and PMT will be conducted, directed, and performed by TVA representatives with full cooperation and assistance of Offerer's representatives.
Offerer shall perform walkdown to determine details such as dimensions, mounting, cable entry, etc. Refer to Section 2.8.3.1 for seismic qualification requirements, Cabinet drawings and critical information such as center of gravity shall be submitted for TVA review.
All tests will be of the entire system in its final configuration including the specific equipment and software to be delivered; no substitute equipment, cables, or software will be used unless approved by the Lead Electrical Engineer.
A control system shall not need forced ventilation to ensure reliability. If the control system requires a ventilation system, it shall be fully 100% redundant complete with blower, inlet fihter, and controls to enhance the reliability of the equipment. However, it is deemed as not being desirable and will be viewed as an exception to the specification. If a ventilation system is furnished, annunciation on the loss of cooling air shall be provided. Temperature sensors with associated control system alarms within each cabinet shall be provided.
TVA-supplied field cables are understood to be replaced by factory test cables for testing purposes.
 
WVA will take measures to test the field cables in situ and confirm their continuity and attenuation.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 76 of 440 3.9       Accuracies Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects. The control accuracy does not include errors for the time in which the system is in a non-steady state condition. Refer to Section 3.2.1 .G.3 for additional loop accuracy requirements.
3.9.1     Control System Processing Accuracies Refer to Section 3.2.1.G.3.
3.9.2     System Accuracy Requirements The overall control system's inaccuracies plus process inaccuracies shall not exceed the system accuracy requirements defined in the individual System Requirements sections.
3.10       Response Time Requirements The response time requirements for the C&MS are described in the System Functional Requirement sections of this specification.
3.10.1     Anti-Aliasing Filtering The System shall provide the capability to enable anti-aliasing filtering for all input signals of the C&MS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.
3.10.2     Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Control System shall be as specified in the System Functional Requirements listed in Sections 4 through 12 below. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s),
and also applies to interlock and permissive signals calculated outside of but utilized within Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, and mode signals. The signals to the main control board (indication, status, and alarm/annunciators) should have a minimum update rate of 1 second unless otherwise specified.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 77 of 440 3.10.3     Communication Response Time between Control Processors For future expansion, the C&MS shall have the capability to communicate between different Control Processor pairs as specified in the System Functional Requirements listed in sections 4 through 12 below.
3.10.4     Manual Control Response The total delay for all manual component control signals of C&MS shall be no greater than 1 second.
3.11       System Acceptance Test Requirements The purpose of the system acceptance tests is to determine, and the underlying standard for system acceptance shall be, compliance in every respect with this Requirements Specification. All materials furnished and all work performed under this specification shall be subject to four acceptance tests - a Factory Acceptance Test (FAT) at the Offerer's facility prior to delivery, an EMI/RFI Test (or completion of the Sequoyah test/evaluation) prior to delivery, a Site Acceptance Test (SAT) after delivery at a staging location, and a Post Modification Test (PMT) after installation of the system. The FAT will be conducted, directed, and performed by the Offerer with TVA representatives as witnesses. The SAT and PMT will be conducted, directed, and performed by TVA representatives with full cooperation and assistance of Offerer's representatives. All tests will be of the entire system in its final configuration including the specific equipment and software to be delivered; no substitute equipment, cables, or software will be used unless approved by the Lead Electrical Engineer. TVA-supplied field cables are understood to be replaced by factory test cables for testing purposes. WVA will take measures to test the field cables in situ and confirm their continuity and attenuation.
If a test indicates the hardware or software does not meet the specification requirements, the Offerer shall replace, modify, or add at no cost to TVA any hardware, software or documentation and retesting necessary to correct the noted anomalies.
If a test indicates the hardware or software does not meet the specification requirements, the Offerer shall replace, modify, or add at no cost to TVA any hardware, software or documentation and retesting necessary to correct the noted anomalies.
The Offerer shall submit to TVA a recommended test procedure for the FAT, EMIIRFI, and SAT. The performance of all the procedures shall verify the ability of the System to individually and simultaneously fulfill all functions and requirements as set forth in this Specification.
The Offerer shall submit to TVA a recommended test procedure for the FAT, EMIIRFI, and SAT. The performance of all the procedures shall verify the ability of the System to individually and simultaneously fulfill all functions and requirements as set forth in this Specification. The Offerer shall make a recommendation on what the PMT scope should be.
The Offerer shall make a recommendation on what the PMT scope should be.The Engineer will only approve the test procedure if it is inclusive and tests each segment of the system and designed function both independently and collectively.
The Engineer will only approve the test procedure if it is inclusive and tests each segment of the system and designed function both independently and collectively. No formal testing will begin until the complete test procedure is agreed to. Each individual test procedure shall detail the purpose of the test, inputs, procedures, outputs to the achieved, and acceptance criteria. The test procedures shall include periods for unstructured exercising of the hardware and software by TVA's representatives.
No formal testing will begin until the complete test procedure is agreed to. Each individual test procedure shall detail the purpose of the test, inputs, procedures, outputs to the achieved, and acceptance criteria.
 
The test procedures shall include periods for unstructured exercising of the hardware and software by TVA's representatives.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 78 of 440 3.11     System Acceptance Test Requirements (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 78 of 440 3.11 System Acceptance Test Requirements (continued)
Any unsuccessful Test will be repeated at least once and, if again unsuccessful, will be repeated only at TVA's option. If,for any reason, any test is stopped, TVA will determine the restart point. However, after any unsuccessful test(s), (that is, an Authorization to Ship or System Acceptance Acknowledgment, is not issued), the Offerer shall reimburse WVA $5,000 in Liquidated Damages for each occurrence. If the Tests are not successfully completed, TVA will have the right to terminate the Contract. In such event, TVA will, unless otherwise mutually agreed to by the parties promptly return the System and all System Documentation to the Offerer at the Offerer's expense and will have the right to receive prompt reimbursement of all payments made to the Offerer. Successful completion of the Acceptance Tests shall not waive, release or otherwise relieve the Offerer of any obligation or liability arising under the Contract.
Any unsuccessful Test will be repeated at least once and, if again unsuccessful, will be repeated only at TVA's option. If, for any reason, any test is stopped, TVA will determine the restart point. However, after any unsuccessful test(s), (that is, an Authorization to Ship or System Acceptance Acknowledgment, is not issued), the Offerer shall reimburse WVA $5,000 in Liquidated Damages for each occurrence.
3.11.1     Electro Magnetic (EMI) and Radio Frequency Interference (RFI)
If the Tests are not successfully completed, TVA will have the right to terminate the Contract.
EMI and RFI tests are required in accordance with WVA Standard Specification SS El 8.14.01. However, the Offerer may substitute his standard EMI/RFI test or the Sequoyah project test report, if approved by TVA.
In such event, TVA will, unless otherwise mutually agreed to by the parties promptly return the System and all System Documentation to the Offerer at the Offerer's expense and will have the right to receive prompt reimbursement of all payments made to the Offerer. Successful completion of the Acceptance Tests shall not waive, release or otherwise relieve the Offerer of any obligation or liability arising under the Contract.3.11.1 Electro Magnetic (EMI) and Radio Frequency Interference (RFI)EMI and RFI tests are required in accordance with WVA Standard Specification SS El 8.14.01. However, the Offerer may substitute his standard EMI/RFI test or the Sequoyah project test report, if approved by TVA.3.11.2 Factory Acceptance Testing (FAT)The FAT shall be a comprehensive test that verifies all control system requirements, hardware and software.
3.11.2     Factory Acceptance Testing (FAT)
Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by TVA) implemented.
The FAT shall be a comprehensive test that verifies all control system requirements, hardware and software. Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by TVA) implemented. WVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT Plan and Procedures to implement the scoping document. The FAT Plan and Procedures shall be submitted to TVA for review and approval before performance. All test anomalies shall be resolved with TVA before control system shipment.
WVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT Plan and Procedures to implement the scoping document.
The system hardware and software configuration tested in the factory shall be the configuration installed and tested at the site. This specifically applies to all interconnect cables. The Offerer shall insure by proper and complete tagging plus proper documentation that each and every cable connected at the site is exactly the same as was tested at the factory.
The FAT Plan and Procedures shall be submitted to TVA for review and approval before performance.
In addition to the diagnostic software required by the Specification, the Offerer shall provide all testing software and calibrated test equipment required to demonstrate the acceptable operation of all hardware units and subsystems. WVA, at its option, may use TVA's own test equipment during the test. Test software descriptions and listings shall be submitted as part of the Offerer's test procedure.
All test anomalies shall be resolved with TVA before control system shipment.The system hardware and software configuration tested in the factory shall be the configuration installed and tested at the site. This specifically applies to all interconnect cables. The Offerer shall insure by proper and complete tagging plus proper documentation that each and every cable connected at the site is exactly the same as was tested at the factory.In addition to the diagnostic software required by the Specification, the Offerer shall provide all testing software and calibrated test equipment required to demonstrate the acceptable operation of all hardware units and subsystems.
 
WVA, at its option, may use TVA's own test equipment during the test. Test software descriptions and listings shall be submitted as part of the Offerer's test procedure.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 79 of 440 3.11.2   Factory Acceptance Testing (FAT) (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 79 of 440 3.11.2 Factory Acceptance Testing (FAT) (continued)
Tests shall include realistic message traffic on all communications networks and subnetworks. In addition, all digital interfaces to external environments such as plant computer interface shall be tested to withstand broadcast storm events without degradation in the control systems performance. Also, the control system shall be tested for broadcast storm events resulting from component failures on internal communication networks without degradation in the control systems performance.
Tests shall include realistic message traffic on all communications networks and subnetworks.
Power failure tests shall require the Offerer to have two breakers (in the factory) for the system.
In addition, all digital interfaces to external environments such as plant computer interface shall be tested to withstand broadcast storm events without degradation in the control systems performance.
A. The Factory Acceptance Test will not be initiated by WVA until all of the following have occurred:
Also, the control system shall be tested for broadcast storm events resulting from component failures on internal communication networks without degradation in the control systems performance.
: 1. The Offerer has successfully accomplished the Burn in Testing and fully documented the test results, and TVA has been notified in writing of the successful completion of this test.
Power failure tests shall require the Offerer to have two breakers (in the factory) for the system.A. The Factory Acceptance Test will not be initiated by WVA until all of the following have occurred: 1. The Offerer has successfully accomplished the Burn in Testing and fully documented the test results, and TVA has been notified in writing of the successful completion of this test.2. The Offerer has delivered to the Engineer, the Offerer's proposed complete final draft of the required System Documentation.
: 2. The Offerer has delivered to the Engineer, the Offerer's proposed complete final draft of the required System Documentation.
B. The Factory Acceptance Test shall cover four basic activities:
B. The Factory Acceptance Test shall cover four basic activities:
: 1. 1/0 Testing and Binary Logic Testing -Each and every Inplut and Output shall be tested for proper wiring, powering, fusing, and scaling with verification of proper operation on the operator console display. The binary control logic shall be thoroughly tested to simulate actual control loop execution to verify proper sequence of operation, correct true/false state interpretation, correct tagout response, and correct depiction of the control loop on the operator console displays.
: 1. 1/0 Testing and Binary Logic Testing - Each and every Inplut and Output shall be tested for proper wiring, powering, fusing, and scaling with verification of proper operation on the operator console display. The binary control logic shall be thoroughly tested to simulate actual control loop execution to verify proper sequence of operation, correct true/false state interpretation, correct tagout response, and correct depiction of the control loop on the operator console displays. All binary control loop testing shall be closed loop simulation via the use of switches.
All binary control loop testing shall be closed loop simulation via the use of switches.2. Engineering Workstations and Operator Consoles Graphic Functional Test -Each and every graphic display shall be reviewed to assure correct display of data, paging, adherence to the design conventions, speed of response, and other elements associated with the configured operator console.3. Modulating Control Verification  
: 2. Engineering Workstations and Operator Consoles Graphic Functional Test -
-The Offerer shall demonstrate the proper operation of all modulating control loops with complete closed loop simulation via connection to the Offerers factory test simulator after the I/O is tested. The testing shall include system power failures, communication failures, and a complete restart after simulated black plant event.4. Closed loop simulation testing -Test cases to be determined by TVA.Upon successful completion of the FAT, TVA will issue an "Authorization to Ship" allowing Offerer to deliver the System.Also see Software Validation Testing Section for details.
Each and every graphic display shall be reviewed to assure correct display of data, paging, adherence to the design conventions, speed of response, and other elements associated with the configured operator console.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 80 of 440 3.11.3 Site Acceptance Test (SAT)After delivery at the Installation Site, the SAT will be conducted by TVA representatives assisted by Offerer representatives.
: 3. Modulating Control Verification - The Offerer shall demonstrate the proper operation of all modulating control loops with complete closed loop simulation via connection to the Offerers factory test simulator after the I/O is tested. The testing shall include system power failures, communication failures, and a complete restart after simulated black plant event.
The Site Acceptance Test is intended to be a complete procedure for the Offerer's Field Service Engineer to ascertain that the system is performing as it had during the Factory Acceptance Test including correction of any punchlist items from the FAT. TVA will have the right, after notice to Offerer, to waive the SAT.3.11.4 Simulator Upgrade and Testing System See Software Validation Testing Section for details.3.11.5 Post Modification Test (PMT)The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support, After the Control System is installed at the plant (post Control System installation) the PMT will be conducted by TVA representatives assisted by Offerer representatives.
: 4. Closed loop simulation testing - Test cases to be determined by TVA.
When the PMT is successfully completed, TVA will issue to the Offerer a dated"System Acceptance Acknowledgment." The PMT and FAT shall provide I/O overlap testing for the control system.3.12 Long Term Support Because of the increased probability of equipment obsolescence when using digital hardware, the Offerer must provide a commitment that system equipment will not be obsolete within the next ten years. Since portions of the system will eventually be withdrawn from sale, a firm commitment shall be required from the manufacturer ensuring that repair capability, equivalent parts and/or the withdrawn products will remain available for a minimum of ten years from the withdrawal date. If the Offerer is unable to provide the required hardware and/or software, or their support, during this period due to obsolescence, unavailability, or the like, the Offerer shall provide a like-kind replacement available subject to the approval of TVA. In any case, any substitute or upgrade shall meet the requirements of this specification both as a component and as a system.The Offerer shall have at least 20 years experience providing control and monitoring systems to the Electrical Utility Industry.
Upon successful completion of the FAT, TVA will issue an "Authorization to Ship" allowing Offerer to deliver the System.
The Offeror shall provide evidence of systems experience in the Electric Utility Industry.
Also see Software Validation Testing Section for details.
This could take the form of reference installations that could either be visited or contacted by phone or letter, and/or by joint advertisements (with an end user).The Offerer shall state whether or not their components are RoHS compliant and identify any components that are not compliant.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 81 of 440 3.13 Spare Parts The bidder shall submit a recommended spare parts list with the formal proposal.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 80 of 440 3.11.3     Site Acceptance Test (SAT)
One spare part for each component of the control system shall be provided.
After delivery at the Installation Site, the SAT will be conducted by TVA representatives assisted by Offerer representatives. The Site Acceptance Test is intended to be a complete procedure for the Offerer's Field Service Engineer to ascertain that the system is performing as it had during the Factory Acceptance Test including correction of any punchlist items from the FAT. TVA will have the right, after notice to Offerer, to waive the SAT.
Spare parts for the simulator modification shall be procured with the control system (see the Simulator section).-J 3.14 A.B.C.D, E.F.G.H.1, Miscellaneous System Requirements All switches and fuses must be identified with unique labels.All terminals and terminal blocks shall be labeled and have screw terminal connections suitable for use with ring type lugs (see exception in section 3.6.3 for TCs).All mechanical relay contacts shall be enclosed to prevent contamination.
3.11.4     Simulator Upgrade and Testing System See Software Validation Testing Section for details.
Set screw connections of stranded wire less than #14 AWG are not acceptable anywhere in the equipment.
3.11.5     Post Modification Test (PMT)
Acceptable set screw connections are limited to ac power and system ground cables.All materials used shall have inherent flame retardant characteristics.
The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support, After the Control System is installed at the plant (post Control System installation) the PMT will be conducted by TVA representatives assisted by Offerer representatives.
Aluminum conductors may be used only with the TVA's written approval.All bidder supplied wiring and cable shall be abrasion resistant and have non-PVC insulation and flame retardant certification.
When the PMT is successfully completed, TVA will issue to the Offerer a dated "System Acceptance Acknowledgment."
Terminal lugs shall be ring tongue nylon insulated or a TVA approved equal.Separate terminal blocks shall be provided for power connectors and I/O connections.
The PMT and FAT shall provide I/O overlap testing for the control system.
3.12       Long Term Support Because of the increased probability of equipment obsolescence when using digital hardware, the Offerer must provide a commitment that system equipment will not be obsolete within the next ten years. Since portions of the system will eventually be withdrawn from sale, a firm commitment shall be required from the manufacturer ensuring that repair capability, equivalent parts and/or the withdrawn products will remain available for a minimum of ten years from the withdrawal date. If the Offerer is unable to provide the required hardware and/or software, or their support, during this period due to obsolescence, unavailability, or the like, the Offerer shall provide a like-kind replacement available subject to the approval of TVA. In any case, any substitute or upgrade shall meet the requirements of this specification both as a component and as a system.
The Offerer shall have at least 20 years experience providing control and monitoring systems to the Electrical Utility Industry. The Offeror shall provide evidence of systems experience in the Electric Utility Industry. This could take the form of reference installations that could either be visited or contacted by phone or letter, and/or by joint advertisements (with an end user).
The Offerer shall state whether or not their components are RoHS compliant and identify any components that are not compliant.
 
                                                                                                        -J NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 81 of 440 3.13       Spare Parts The bidder shall submit a recommended spare parts list with the formal proposal. One spare part for each component of the control system shall be provided. Spare parts for the simulator modification shall be procured with the control system (see the Simulator section).
3.14       Miscellaneous System Requirements A. All switches and fuses must be identified with unique labels.
B. All terminals and terminal blocks shall be labeled and have screw terminal connections suitable for use with ring type lugs (see exception in section 3.6.3 for TCs).
C. All mechanical relay contacts shall be enclosed to prevent contamination.
D,  Set screw connections of stranded wire less than #14 AWG are not acceptable anywhere in the equipment. Acceptable set screw connections are limited to ac power and system ground cables.
E. All materials used shall have inherent flame retardant characteristics.
F. Aluminum conductors may be used only with the TVA's written approval.
G. All bidder supplied wiring and cable shall be abrasion resistant and have non-PVC insulation and flame retardant certification.
H. Terminal lugs shall be ring tongue nylon insulated or a TVA approved equal.
1,  Separate terminal blocks shall be provided for power connectors and I/O connections.
J. Internal power cabling/wiring shall be separated from IO cabling/wiring.
J. Internal power cabling/wiring shall be separated from IO cabling/wiring.
K. Terminals for I/O connections shall accommodate TVA's #12 to 16 AWG conductors.
K. Terminals for I/O connections shall accommodate TVA's #12 to 16 AWG conductors.
L. Terminals for power connections shall accommodate the wire size appropriate for the appropriate load, but not less than #12 AWG.M. All internal wiring for I/O shall be twisted pair and shielded to the extent feasible.N. Equipment layout shall be such as to minimize the amount of inter-panel wiring required.3.15 References A. Standard Specification SS-E18.14.01 R3 -"Electromagnetic Interference (EMI)Testing Requirements for Electronic Devices" NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 82 of 440 3.15 References (continued)
L. Terminals for power connections shall accommodate the wire size appropriate for the appropriate load, but not less than #12 AWG.
B. Standard Specification SS-El 8.15.01 RI -"Software Requirements for Real-Time Data Acquisition and Control Computer Systems" C. Electrical Design Guide DS-E18.1.24  
M. All internal wiring for I/O shall be twisted pair and shielded to the extent feasible.
-"Human Factor Engineering Design Standard" D. WBN Design Criteria for Seismic Qualification, WB-DC-40-31.13, "Seismic Qualification of Category 1 (L) Fluid System Components and Electrical or Mechanical Equipment" The above Criteria and Standards have been considered in preparing the requirements of this specification.
N. Equipment layout shall be such as to minimize the amount of inter-panel wiring required.
4.0 STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS The following sections provide general description of WBN's SGL Control Systems.Detail information such as setpoint, scaling, tuning constants, etc. will be provide following contract award based upon proprietary conditions.
3.15       References A. Standard Specification SS-E18.14.01 R3 - "Electromagnetic Interference (EMI)
4.1 System Description The Steam Generator Level control system is composed of those controllers and associated hardware whose primary function is to regulate the flow of feedwater into the steam generator.
Testing Requirements for Electronic Devices"
The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation without operator intervention during all plant operating modes from approximately 0 to 100 percent power. The control system limits the water level shrink and swells during plant transient preventing an undesirable reactor trip actuation.
 
Indicators are provided for monitoring system operation.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 82 of 440 3.15     References (continued)
Steam Generator level fluctuations must be limited during normal plant transients within a range which will prevent spurious reactor trips.Computational equipment must be programmable using microprocessor-based digital hardware to optimize system response to changing process conditions, control element characteristics, and component failures.
B. Standard Specification SS-El 8.15.01 RI - "Software Requirements for Real-Time Data Acquisition and Control Computer Systems" C. Electrical Design Guide DS-E18.1.24 - "Human Factor Engineering Design Standard" D. WBN Design Criteria for Seismic Qualification, WB-DC-40-31.13, "Seismic Qualification of Category 1(L) Fluid System Components and Electrical or Mechanical Equipment" The above Criteria and Standards have been considered in preparing the requirements of this specification.
Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
4.0     STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS The following sections provide general description of WBN's SGL Control Systems.
A Median Signal Selector (MSS) for the steam generator level channel inputs is provided to prevent channel failures from causing disturbances in the SGL control system.
Detail information such as setpoint, scaling, tuning constants, etc. will be provide following contract award based upon proprietary conditions.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 83 of 440 4.2 SGL Control System The SGL control system includes signal processing components and controllers whose primary function is to regulate the flow of feedwater to the steam generators.
4.1       System Description The Steam Generator Level control system is composed of those controllers and associated hardware whose primary function is to regulate the flow of feedwater into the steam generator. The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation without operator intervention during all plant operating modes from approximately 0 to 100 percent power. The control system limits the water level shrink and swells during plant transient preventing an undesirable reactor trip actuation. Indicators are provided for monitoring system operation. Steam Generator level fluctuations must be limited during normal plant transients within a range which will prevent spurious reactor trips.
The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation, and to provide stable system operation by limiting the water level shrink and swell during plant transients to prevent undesirable reactor trip actuation.
Computational equipment must be programmable using microprocessor-based digital hardware to optimize system response to changing process conditions, control element characteristics, and component failures. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions. A Median Signal Selector (MSS) for the steam generator level channel inputs is provided to prevent channel failures from causing disturbances in the SGL control system.
Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
 
The flow of feedwater is regulated by throttling action of the feedwater regulating valves to maintain a constant steam generator water level and by varying speed of the main feedwater pumps to maintain a programmed differential pressure between the main feedwater header and main steam header. The feedwater regulating valve and the feed pump speed controls are complementary parts of the feedwater control system.Primary inputs for the control system are steam generator level and pressure, pressure compensated steam flow, feedwater flow and pressure, and NIS (WBN). A median value of the three steam generator level channels is selected by the median signal selector function of the feedwater control system for Steam Generator (SG)level control input and combined with steam flow/feedwater flow mismatch signal. The steam/feedwater header differential pressure setpoint is varied linearly according to total steam flow.4.2.1 Normal Feedwater Control Feedwater flow (FW) is controlled by the Main Feedwater (MFW) reg valve through a three-element control system. The inputs into the control system are steam flow, feedwater flow, and SG level (see Figure 4.1 of this section).
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 83 of 440 4.2       SGL Control System The SGL control system includes signal processing components and controllers whose primary function is to regulate the flow of feedwater to the steam generators.
Each of the four SG loops has a separate SGL control system and the SGL setpoint is determined by NIS (function of reactor power). The regulation of FW flow is aided by the use of a MFW speed control system. The feed pump control system consists of the following three interrelated parts: A. Program differential pressure (DP) setpoint calculator which sums the four steam flows, provides the lag on setpoint changes, and contains the basic scaling adjustments.
The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation, and to provide stable system operation by limiting the water level shrink and swell during plant transients to prevent undesirable reactor trip actuation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
B. The DP control which compares the steam header pressure, FW header pressure, and the calculated setpoint to determine the speed signal required (reset action is provided in this controller to reduce the steady-state operating error).C. MFP manual-auto stations (MCR mounted one per pump) which are setup as proportion only control mode and provides the operator with the flexibility of choosing various operating modes. The capability to bias the two pumps from one another shall be provided.
The flow of feedwater is regulated by throttling action of the feedwater regulating valves to maintain a constant steam generator water level and by varying speed of the main feedwater pumps to maintain a programmed differential pressure between the main feedwater header and main steam header. The feedwater regulating valve and the feed pump speed controls are complementary parts of the feedwater control system.
There is also a MFP (MCR mounted) master manual -auto station that provides simultaneous control of both MFPs.
Primary inputs for the control system are steam generator level and pressure, pressure compensated steam flow, feedwater flow and pressure, and NIS (WBN). A median value of the three steam generator level channels is selected by the median signal selector function of the feedwater control system for Steam Generator (SG) level control input and combined with steam flow/feedwater flow mismatch signal. The steam/feedwater header differential pressure setpoint is varied linearly according to total steam flow.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 84 of 440 4.2.1 Normal Feedwater Control (continued)
4.2.1     Normal Feedwater Control Feedwater flow (FW) is controlled by the Main Feedwater (MFW) reg valve through a three-element control system. The inputs into the control system are steam flow, feedwater flow, and SG level (see Figure 4.1 of this section). Each of the four SG loops has a separate SGL control system and the SGL setpoint is determined by NIS (function of reactor power). The regulation of FW flow is aided by the use of a MFW speed control system. The feed pump control system consists of the following three interrelated parts:
No I.ad CP Note1I The Stmun GeneitDr Laal Controlaflr BG2 SQ m, a nd S5Oam identical to I6 Natez, Two new input wIM be addad NoteS; Turb Impulse and NIS WBW9 Main Feedwater Control Diagram Figure 4.1 4.2.2 Proposal Request Digital Feedwater The Offerer shall propose Digital Feedwater System that controls feedwater from 2 to 100% reactor power. From 2 to approximately 20 % power, see the Lower Power FW Control section below. From approximately 20 to 100% the feedwater control will function as the existing control system with additional redundancy added to eliminate single failure point.4.2.3 Automatic Low Power FW Control System (LPCS)The Low Power Control System (LPCS) shall provide stable and robust automatic control from approximately 2% to 30% power for startup and 30% to 2% power for shutdown.
A. Program differential pressure (DP) setpoint calculator which sums the four steam flows, provides the lag on setpoint changes, and contains the basic scaling adjustments.
There may be differences between the startup and the shutdown sequences.
B. The DP control which compares the steam header pressure, FW header pressure, and the calculated setpoint to determine the speed signal required (reset action is provided in this controller to reduce the steady-state operating error).
The Offerer shall review Plant Operating procedures and interview Plant Operators to factor in the level of required Operator actions and to what level the LPCS can be automated.
C. MFP manual-auto stations (MCR mounted one per pump) which are setup as proportion only control mode and provides the operator with the flexibility of choosing various operating modes. The capability to bias the two pumps from one another shall be provided. There is also a MFP (MCR mounted) master manual - auto station that provides simultaneous control of both MFPs.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 85 of 440 4.2.3 Automatic Low Power FW Control System (LPCS) (continued)
 
At approximately 2% power, FW control transitions from a Startup Feedwater system (SFWS is Standby Feedwater for WBN) to MFW system. Note: The first MFPT is startup at 5% to 10% for WBN. The Low Power Control System shall automatically control the SG Level control transition from SFWS to MFW control using the Bypass control valves. It shall continue to control SG level up to the Bypass valve to Main Feedwater Reg valve swapover.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 84 of 440 4.2.1     Normal Feedwater Control (continued)
At the Bypass valve to Main Feedwater Reg valve swapover transition, the Load Power feedwater control system shall provide a automatic and bumpless transfer of all 4 SG level control systems from the Bypass valve to the Main Reg Control valves. The Low power control system shall minimize the SG level shrink and swell and provide stable control. The Low power control system shall be capable of adapting to the significant flow mismatch between the Bypass control valves and the Main Reg valves. The proposed Low Power control system shall use the existing control scheme using NIS for low power operation because it is field proven and we have significant operating experience.
NoI.ad   CP Note1I The Stmun GeneitDr Laal Controlaflr BG2 SQ m,a nd S5Oam identical to I6 Natez, Two new input wIM be addad NoteS; Turb Impulse PmSNt* and NIS WBW9 Main Feedwater Control Diagram Figure 4.1 4.2.2     Proposal Request Digital Feedwater The Offerer shall propose Digital Feedwater System that controls feedwater from 2 to 100% reactor power. From 2 to approximately 20 % power, see the Lower Power FW Control section below. From approximately 20 to 100% the feedwater control will function as the existing control system with additional redundancy added to eliminate single failure point.
The new auto transfer design should have significant and positive operating experience in a 4 loop Westinghouse plant. The Offerer shall submit the control system's description along with required inputs and outputs for TVA's review. The Offerer shall also submit operating experience information such as installed operating plants along with associated plant contacts.The Operator shall be able to manually control SG Level as performed with the present system if desired. The Offerer shall review the existing WBN plant startup General Operating (GO) procedures (GO-3, GO-4, and GO-6) to develop the LPCS design.ni # f P .... ' -cam L I-4f ""MV&#xa3;4',i%, I i r.".---- NEW 4 .-1...6.1 <3-" =-- ==" Figure 4.2 -Existing LPCS Design NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 86 of 440 4.2.4 Maintenance Mode (Option)The Offerer shall provide a separately quoted option, to allow for online maintenance of the MFW Reg valves. The Bypass Reg valve shall have the ability to be placed into service to control level with the MFW Reg valve dogged and in manual. In this mode, the control system shall automatically switch control from the MFW Reg, close it down a predetermined amount while allowing the Bypass Reg valve to open, passing MFW control to the Bypass Reg valve. The Bypass Reg valve would then not only have a level input, but FW and SF inputs as well, maintaining a full 3-element mode of control for that steam generator.
4.2.3     Automatic Low Power FW Control System (LPCS)
The MFW Reg valves then could be "parked" or placed into manual and be dogged (amount of closure is limited, opening capability is unrestricted) at that position while maintenance takes place. This transfer shall be a seamless transfer and have the proper gains already set up for that type of control. If both controllers are in automatic at the same time, the individual control systems shall not fight with each other to maintain control of level. The tuning constants for the bypass controls shall automatically change from startup conditions constants to present operating power level for optimum control.4.2.5 Main Feedpump (MFP) Speed Controls In addition to Steam Generator Level controls, MFP speed is varied to maintain a programmed pressure differential (dP) between the Main Steam and FW headers. The speed controller continuously compares the actual dP with a programmed dP which is a linear function of total steam flow from 20 to 100% power.4.2.6 MFPT and Standby Pump Recirculation Controls The MFPT and Standby Main Feed Pump (SBMFP) recirculation control valves (1 per pump) shall be included in the scope of automatic control system. This part of the control system does not require redundant inputs or outputs but shall have failure detection and failure mitigation protection.
The Low Power Control System (LPCS) shall provide stable and robust automatic control from approximately 2% to 30% power for startup and 30% to 2% power for shutdown. There may be differences between the startup and the shutdown sequences. The Offerer shall review Plant Operating procedures and interview Plant Operators to factor in the level of required Operator actions and to what level the LPCS can be automated.
Each loop includes a transmitter, square root converter, annunciator bistable, indicating PI controller with MCR handstation, and 4-20 MA output signal to the lIP for the control valve. MFP A and MFP B are nondivisional powered. The pump miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-70 and -84) which modulates based upon input from the pump discharge flow element downstream of the pump discharge.
 
FCV-3-70 and -84 are designed to open on a Feedwater Isolation signal. The MFP minimum recirculation flow is approximately 4000 gpm (at rated speed) at a shutoff head of 2480'. However, during preoperational testing, MFP 1A exhibited high vibrational signatures at 4000 gpm recirculation flow at rated speed. Consequently, MFP 1B was not tested at 4000 gpm recirculation flow at rated speed but was tested at the lower end of the variable speed pump curve at approximately 3300 rpm and 2650 gpm recirculation.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                           Specification Engineering                     Upgrade Specification                             Rev. 0001 Specification                                                                     Page 85 of 440 4.2.3     Automatic Low Power FW Control System (LPCS) (continued)
Byron Jackson has indicated that the low flow, low gpm recirculation is acceptable.
At approximately 2% power, FW control transitions from a Startup Feedwater system (SFWS is Standby Feedwater for WBN) to MFW system. Note: The first MFPT is startup at 5% to 10% for WBN. The Low Power Control System shall automatically control the SG Level control transition from SFWS to MFW control using the Bypass control valves. It shall continue to control SG level up to the Bypass valve to Main Feedwater Reg valve swapover. At the Bypass valve to Main Feedwater Reg valve swapover transition, the Load Power feedwater control system shall provide a automatic and bumpless transfer of all 4 SG level control systems from the Bypass valve to the Main Reg Control valves. The Low power control system shall minimize the SG level shrink and swell and provide stable control. The Low power control system shall be capable of adapting to the significant flow mismatch between the Bypass control valves and the Main Reg valves. The proposed Low Power control system shall use the existing control scheme using NIS for low power operation because it is field proven and we have significant operating experience. The new auto transfer design should have significant and positive operating experience in a 4 loop Westinghouse plant. The Offerer shall submit the control system's description along with required inputs and outputs for TVA's review. The Offerer shall also submit operating experience information such as installed operating plants along with associated plant contacts.
Additionally, this is acceptable because extended operation of the pumps under high speed and low flow Is not expected during the life of the plant.
The Operator shall be able to manually control SG Level as performed with the present system ifdesired. The Offerer shall review the existing WBN plant startup General Operating (GO) procedures (GO-3, GO-4, and GO-6) to develop the LPCS design.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 87 of 440 4.2.6 MFPT and Standby Pump Recirculation Controls (continued)
nif #
The SBMFP miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-208) which modulates based upon input from the pump discharge flow element. FCV-3-208 is designed to open on a Feedwater Isolation signal. A minimum flow of approximately 1500 gpm (vendor evaluation has determined that minimum flows as low as 1100 gpm are acceptable) will be established through the SBMFP and its related recirculation control line.4.3 Applicable Criteria & Standards The following criteria apply to this system.AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the feedwater Control System.Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical  
P       cam .... '       -     L I-4f ""MV
& Electronics Engineers (IEEE)Standards:
                                              &#xa3;4',i%,                             I i                         r.".
IEEE Std. 279-1971 (Section 4.7)WBN Design Criteria, WB-DC-40.31.13 The above Criteria and Standards have been considered in preparing the requirements of this section.4.4 WBN System Description, System Diagrams Figure 4.1, Feedwater Pump Speed Control Logic Figure 4.2, Feedwater Low Control System Figures 4.3 through 4.9, Input Signal Validiaiton 4.5 Indicators, Status Lights. and Controls The control system shall interface with the indications, status lights and controls as shown in Appendix E.4.6 Alarms and Annunciators The control system shall actuate alarms and annunciators as shown in Appendix E.
4NEW
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 88 of 440 4.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and WVA shall work together to determine how best to perform this V&V.A. During Steady State conditions, SG level shall be controlled within a maximum of +/- 5% of the programmed level.B. During Transient conditions, SG level shall be limited to +/- 10% of the programmed level for the following transients:
                                                                      ----.-               1...
: 1. Transfer to main feedwater system at 2% power.2. Turbine roll/generator synchronization between 13% to 15% reactor power.3. Bypass to main valve transfer at approximately 20% to 30% power.4. Turbine overspeed test at 30% power.5. Turbine/Generator load changes of +/- 10% between 15 and 100% power.6. Trip of one main feed pump above 85% power with a Turbine runback.7. Condensate pressure swings +/- 75 psi.C. During a Turbine Trip, the SG level fluctuations shall be limited to +/- 15% of the programmed level between 15 and 50% power. Based upon the SG Level Trip Time delay function along with the High-High SG level trip, deviations of greater than +/- 20% during this transient are permissible provided they are cleared within a timeframe ranging from 1 minute at 50% power to 3 minutes at 15% power.D. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings.
6.1       <3-" =-- =="
This performance data shall be factored into the performance limit acceptance criteria.
Figure 4.2 - Existing LPCS Design
The control system open loop response is defined as the time delay from the change of process parameters to final output device response.4.8 Specific Requirements A. The system must provide a fully automatic switch-over from the bypass valve to the main valve (and vice versa) while maintaining SG level within the performance limits specified in the previous section. Semi-automatic operation must be provided to initiate the automatic switch-over from the bypass valve to the main valve when permissive conditions are satisfied.
 
In this mode of operation, the automatic switch-over process would be inhibited until initiated by the operator at the appropriate time during the plant startup process. All other automatic features of the system must remain functional in the semi-automatic mode.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 86 of 440 4.2.4     Maintenance Mode (Option)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 89 of 440 4.8 Specific Requirements (continued)
The Offerer shall provide a separately quoted option, to allow for online maintenance of the MFW Reg valves. The Bypass Reg valve shall have the ability to be placed into service to control level with the MFW Reg valve dogged and in manual. In this mode, the control system shall automatically switch control from the MFW Reg, close it down a predetermined amount while allowing the Bypass Reg valve to open, passing MFW control to the Bypass Reg valve. The Bypass Reg valve would then not only have a level input, but FW and SF inputs as well, maintaining a full 3-element mode of control for that steam generator. The MFW Reg valves then could be "parked" or placed into manual and be dogged (amount of closure is limited, opening capability is unrestricted) at that position while maintenance takes place. This transfer shall be a seamless transfer and have the proper gains already set up for that type of control. If both controllers are in automatic at the same time, the individual control systems shall not fight with each other to maintain control of level. The tuning constants for the bypass controls shall automatically change from startup conditions constants to present operating power level for optimum control.
B. Individual auto/manual control stations must be provided for each main and bypass valve in the event that manual positioning is required.C. The transition from single-element control at low power levels to three-element full power control (and vice versa) must be fully automatic within the performance limits specified in the previous section.D. The system should provide fully automatic main feed pump speed control as a part of the integrated control system to maintain optimum controllability of feedwater flow through the control valves.E. Individual autolmanual control stations must be provided for each main feed pump to allow manual adjustment of turbine/pump speed as required by the operator and a bias adjustment between the 2 pumps. A master auto/manual control station must be provided to simultaneously control both MFPT speeds.F. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.G. The system hardware must be designed to allow local manual control of pump speed.H. Trend recording capability should be provided for any system input, output, or control parameter.
4.2.5     Main Feedpump (MFP) Speed Controls In addition to Steam Generator Level controls, MFP speed is varied to maintain a programmed pressure differential (dP) between the Main Steam and FW headers. The speed controller continuously compares the actual dP with a programmed dP which is a linear function of total steam flow from 20 to 100% power.
Selected trending shall have an archiving storage ability.4.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
4.2.6     MFPT and Standby Pump Recirculation Controls The MFPT and Standby Main Feed Pump (SBMFP) recirculation control valves (1 per pump) shall be included in the scope of automatic control system. This part of the control system does not require redundant inputs or outputs but shall have failure detection and failure mitigation protection. Each loop includes a transmitter, square root converter, annunciator bistable, indicating PI controller with MCR handstation, and 4-20 MA output signal to the lIP for the control valve. MFP A and MFP B are nondivisional powered. The pump miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-70 and -84) which modulates based upon input from the pump discharge flow element downstream of the pump discharge. FCV-3-70 and -
Rack environmental effects are not included in channel accuracy.
84 are designed to open on a Feedwater Isolation signal. The MFP minimum recirculation flow is approximately 4000 gpm (at rated speed) at a shutoff head of 2480'. However, during preoperational testing, MFP 1A exhibited high vibrational signatures at 4000 gpm recirculation flow at rated speed. Consequently, MFP 1B was not tested at 4000 gpm recirculation flow at rated speed but was tested at the lower end of the variable speed pump curve at approximately 3300 rpm and 2650 gpm recirculation. Byron Jackson has indicated that the low flow, low gpm recirculation is acceptable. Additionally, this is acceptable because extended operation of the pumps under high speed and low flow Is not expected during the life of the plant.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
 
Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.A. The accuracy of the steam generator level signals should be "within +/- 5% of full range, with a reproducibility of +/- 1% of full range, with no heat being transferred to or from the steam generators (no-load) over the pressure range of 600 to 1100 psig.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 87 of 440 4.2.6     MFPT and Standby Pump Recirculation Controls (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 90 of 440 4.9 Accuracy (continued)
The SBMFP miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-208) which modulates based upon input from the pump discharge flow element. FCV-3-208 is designed to open on a Feedwater Isolation signal. A minimum flow of approximately 1500 gpm (vendor evaluation has determined that minimum flows as low as 1100 gpm are acceptable) will be established through the SBMFP and its related recirculation control line.
B. The accuracy and reproducibility of the feedwater flow signals should be within +1% of maximum guaranteed feedwater flow at maximum guaranteed power level, over the pressure range of 600 to 1100 psig and over the feed temperature range of 300 to 500&deg;F.C. The accuracy of the steam flow signals should be within +/- 3 % of maximum guaranteed steam flow, with a reproducibility of +/- 1 % of maximum guaranteed steam flow, at maximum guaranteed power level, over the pressure range of 600 to 1100 psig.D. Digital processing effects (where applicable) such as analog-to-digital conversion should not contribute any additional inaccuracies greater than 0.035% of channel span for each input and output conversion to the uncertainties specified in the above requirements of this section.4.10 Range I Steam flow 0 to 120% of maximum calculated steamline flow 0 to 4500 KPPH Steam Pressure 0 to 1300 psig Feedwater flow 0 to 120% of maximum calculated feedwater flow 0 to 4500 KPPH Narrow Range Steam 0 to 100% SG Level Generator Water Level 0 to 233 inches (WBN)Wide Range Steam 0 to 100% WR SG Level Generator Water Level 0 to 533 inches (WBN) -cold calibration Feed Pump Discharge 200 to 1400 psig Pressure NIS 0 to 120% RTP 4.11 Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
4.3         Applicable Criteria & Standards The following criteria apply to this system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 91 of 440 4.12 Outputs The outputs are documented in Appendix E 4.13 Proposed Signal Validation Designs Figure 4.3 Steam Generator Level Validation NR L1 NR L2 NR L3 1. Individual channel failure-alarm.
AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the feedwater Control System.
: 2. Two channel failure-manual hold with operator selection back to auto.3. Three channel failure-manual hold.Figure 4.4 Feedwater Temperatures Loop 1 Temp Loop 2 Temp Loop 3 Temp Loop 4 Temp MFW Average Temp NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 92 of 440 4.13 Proposed Signal Validation Designs (continued)
Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)
Figure 4.5 Steam Generator Wide Range Levels (no validation required)WR Loop I 11 WR Loop 2 1!WR Loop 3 Ii WR Loop 4 I Figure 4.6 Feedwater Flow Validation FT1A FT1 B Fw F Lp 2 Fw Lip3 Average Averge t Fw Lp 4 Average 1.2.3.4.5.Allow deviation based on channel check criteria.Individual channel failure -alarm.Two channel failure -manual hold SG level control.Loops 2, 3, and 4 like loop I above.Voter never used as output, alarm on loss of voter.
Standards: IEEE Std. 279-1971 (Section 4.7)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 93 of 440 4.13 Proposed Signal Validation Designs (continued)
WBN Design Criteria, WB-DC-40.31.13 The above Criteria and Standards have been considered in preparing the requirements of this section.
Figure 4.7 Steam Flow Validation SFA SFB P-1-6 F Use Average voter select for deviation Voter F(x)Derive SF from E(X) SG pressure 1078 Press 900 psig 0.5 4.5 mmph Flow 1.2.3.4.5.Allow deviation based on channel check criteria.Individual channel failure -alarm.Two channel failure -manual hold SG level control.Loops 2, 3, and 4 use P-1-1 3, 24, 31, respectively.
4.4       WBN System Description, System Diagrams Figure 4.1, Feedwater Pump Speed Control Logic Figure 4.2, Feedwater Low Control System Figures 4.3 through 4.9, Input Signal Validiaiton 4.5       Indicators, Status Lights. and Controls The control system shall interface with the indications, status lights and controls as shown in Appendix E.
Voter never used as output, alarm on loss of voter.
4.6       Alarms and Annunciators The control system shall actuate alarms and annunciators as shown in Appendix E.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Engineering Upgrade Specification Specification 4.13 Proposed Signal Validation Designs (continued)
 
Figure 4.8 Steam Header Pressure P-1-33 New PT Specification Rev. 0001 Page 94 of 440 New PT 1.2.3.Individual channel failure-alarm.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 88 of 440 4.7         Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and WVA shall work together to determine how best to perform this V&V.
Two channel failure-manual hold with operator selection back to auto.Three channel failure-manual hold.Figure 4.9 Feedwater Header Pressure P-3-1 New PT New PT 1.2.3.Individual channel failure-alarm.
A. During Steady State conditions, SG level shall be controlled within a maximum of +/- 5% of the programmed level.
Two channel failure-manual hold with operator selection back to auto.Three channel failure-manual  
B. During Transient conditions, SG level shall be limited to +/- 10% of the programmed level for the following transients:
: hold, NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 95 of 440 4.13 Proposed Signal Validation Designs (continued)
: 1. Transfer to main feedwater system at 2% power.
Figure 4.10 Nuclear Instrumentation System (NIS)N41 N42 N43 N44 MSS High Medium Select 1. Individual channel failure-alarm.
: 2. Turbine roll/generator synchronization between 13% to 15% reactor power.
: 3. Bypass to main valve transfer at approximately 20% to 30% power.
: 4. Turbine overspeed test at 30% power.
: 5. Turbine/Generator load changes of +/- 10% between 15 and 100% power.
: 6. Trip of one main feed pump above 85% power with a Turbine runback.
: 7. Condensate pressure swings +/- 75 psi.
C. During a Turbine Trip, the SG level fluctuations shall be limited to +/- 15% of the programmed level between 15 and 50% power. Based upon the SG Level Trip Time delay function along with the High-High SG level trip, deviations of greater than +/- 20% during this transient are permissible provided they are cleared within a timeframe ranging from 1 minute at 50% power to 3 minutes at 15% power.
D. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.
4.8       Specific Requirements A. The system must provide a fully automatic switch-over from the bypass valve to the main valve (and vice versa) while maintaining SG level within the performance limits specified in the previous section. Semi-automatic operation must be provided to initiate the automatic switch-over from the bypass valve to the main valve when permissive conditions are satisfied. In this mode of operation, the automatic switch-over process would be inhibited until initiated by the operator at the appropriate time during the plant startup process. All other automatic features of the system must remain functional in the semi-automatic mode.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 89 of 440 4.8       Specific Requirements (continued)
B. Individual auto/manual control stations must be provided for each main and bypass valve in the event that manual positioning is required.
C. The transition from single-element control at low power levels to three-element full power control (and vice versa) must be fully automatic within the performance limits specified in the previous section.
D. The system should provide fully automatic main feed pump speed control as a part of the integrated control system to maintain optimum controllability of feedwater flow through the control valves.
E. Individual autolmanual control stations must be provided for each main feed pump to allow manual adjustment of turbine/pump speed as required by the operator and a bias adjustment between the 2 pumps. A master auto/manual control station must be provided to simultaneously control both MFPT speeds.
F. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.
G. The system hardware must be designed to allow local manual control of pump speed.
H. Trend recording capability should be provided for any system input, output, or control parameter. Selected trending shall have an archiving storage ability.
4.9       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
A. The accuracy of the steam generator level signals should be "within +/- 5% of full range, with a reproducibility of +/- 1% of full range, with no heat being transferred to or from the steam generators (no-load) over the pressure range of 600 to 1100 psig.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 90 of 440 4.9       Accuracy (continued)
B. The accuracy and reproducibility of the feedwater flow signals should be within +
1% of maximum guaranteed feedwater flow at maximum guaranteed power level, over the pressure range of 600 to 1100 psig and over the feed temperature range of 300 to 500&deg;F.
C. The accuracy of the steam flow signals should be within +/- 3 % of maximum guaranteed steam flow, with a reproducibility of +/- 1 % of maximum guaranteed steam flow, at maximum guaranteed power level, over the pressure range of 600 to 1100 psig.
D. Digital processing effects (where applicable) such as analog-to-digital conversion should not contribute any additional inaccuracies greater than 0.035% of channel span for each input and output conversion to the               I uncertainties specified in the above requirements of this section.
4.10       Range Steam flow                     0 to 120% of maximum calculated steamline flow 0 to 4500 KPPH Steam Pressure                 0 to 1300 psig Feedwater flow                 0 to 120% of maximum calculated feedwater flow 0 to 4500 KPPH Narrow Range Steam           0 to 100% SG Level Generator Water Level         0 to 233 inches (WBN)
Wide Range Steam               0 to 100% WR SG Level Generator Water Level         0 to 533 inches (WBN) - cold calibration Feed Pump Discharge           200 to 1400 psig Pressure NIS                           0 to 120% RTP 4.11       Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls         Specification Engineering                 Upgrade Specification           Rev. 0001 Specification                                                 Page 91 of 440 4.12     Outputs The outputs are documented in Appendix E 4.13     Proposed Signal Validation Designs Figure 4.3 Steam Generator Level Validation NR L1               NR L2               NR L3
: 1. Individual channel failure-alarm.
: 2. Two channel failure-manual hold with operator selection back to auto.
: 3. Three channel failure-manual hold.
Figure 4.4 Feedwater Temperatures Loop 1 Temp       Loop 2 Temp       Loop 3 Temp     Loop 4 Temp MFW Average Temp
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls       Specification Engineering                 Upgrade Specification           Rev. 0001 Specification                                                 Page 92 of 440 4.13     Proposed Signal Validation Designs (continued)
Figure 4.5 Steam Generator Wide Range Levels (no validation required) 11 1!
WR Loop I Ii WR Loop 2 I
WR Loop 3       WR Loop 4 Figure 4.6 Feedwater Flow Validation Fw F Lp 2         Fw Lip3           Fw Lp 4 FT1A            FT1 B              Average          Averge            Average t
: 1. Allow deviation based on channel check criteria.
: 2. Individual channel failure - alarm.
: 3. Two channel failure - manual hold SG level control.
: 4. Loops 2, 3, and 4 like loop I above.
: 5. Voter never used as output, alarm on loss of voter.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls         Specification Engineering                 Upgrade Specification             Rev. 0001 Specification                                                   Page 93 of 440 4.13       Proposed Signal Validation Designs (continued)
Figure 4.7 Steam Flow Validation SFA             SFB                                   P-1-6 F
Use Average                           Voter voter select                                         F(x) for deviation Derive SF from E(X)             SG pressure 1078 Press 900 psig 0.5                         4.5 mmph Flow
: 1. Allow deviation based on channel check criteria.
: 2. Individual channel failure - alarm.
: 3. Two channel failure - manual hold SG level control.
: 4. Loops 2, 3, and 4 use P-1-1 3, 24, 31, respectively.
: 5. Voter never used as output, alarm on loss of voter.
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls       Specification Engineering                 Upgrade Specification           Rev. 0001 Specification                                               Page 94 of 440 4.13     Proposed Signal Validation Designs (continued)
Figure 4.8 Steam Header Pressure P-1-33               New PT           New PT
: 1. Individual channel failure-alarm.
: 2. Two channel failure-manual hold with operator selection back to auto.
: 3. Three channel failure-manual hold.
Figure 4.9 Feedwater Header Pressure P-3-1               New PT           New PT
: 1. Individual channel failure-alarm.
: 2. Two channel failure-manual hold with operator selection back to auto.
: 3. Three channel failure-manual hold,
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 95 of 440 4.13     Proposed Signal Validation Designs (continued)
Figure 4.10 Nuclear Instrumentation System (NIS)
N41                     N42               N43                   N44 MSS High Medium Select
: 1. Individual channel failure-alarm.
: 2. Need minimum channels requirements.
: 2. Need minimum channels requirements.
: 3. Select second highest value 4.14 Time Response 4.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the SGL Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the SGL Control System.4.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the SGL Control System shall not exceed 250 milli-seconds.
: 3. Select second highest value 4.14       Time Response 4.14.1     Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the SGL Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the SGL Control System.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within SGL Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
4.14.2     Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the SGL Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within SGL Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 96 of 440 4.14.3 Manual Control Response The total delay for all manual component control signals of Feedwater Control System shall be no greater than 1 second.4.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.4.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.4.17 Programmed Functions A. Unit to convert reactor power to level setpoint Water Level Setpoint 38% /i 0% 100%Reactor Power (NIS)
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 97 of 440 4.17 Programmed Functions (continued)
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 96 of 440 4.14.3     Manual Control Response The total delay for all manual component control signals of Feedwater Control System shall be no greater than 1 second.
B. Main Feedpump Speed Setpoint 225 psi dP Setpoint 45 psi.3-0%120%Total Steam Flow (Rx Power)4.18 Setpoints Variable Setting Level deviation from programmed setpoint-alarm SG Level Program Level MFPT Speed Program+/-1 to 22% of span See section 4.17A See section 4.17B All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.4.19 Requirements for Test and Calibration The SGL Control System is not a protection system, and therefore, does not require the capability of being tested at power, except as stated below.The Median Signal Selector (MSS) provides functional separation between the reactor protection system and the feedwater control system. Therefore, the MSS must have provisions to be periodically tested at power. The testing at power will demonstrate that undetectable failures do not exist in the unit.Although the signal selector is not considered to be part of the protection system, protection system action is dependent on the MSS having high reliability.
4.15       Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
4.16       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
4.17       Programmed Functions A. Unit to convert reactor power to level setpoint Water Level Setpoint   38%/
i 0%                               100%
Reactor Power (NIS)
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 97 of 440 4.17     Programmed Functions (continued)
B. Main Feedpump Speed Setpoint 225 psi dP Setpoint 45 psi
                                                                            .3-0%                               120%
Total Steam Flow (Rx Power) 4.18       Setpoints Variable                                 Setting Level deviation from                     +/-1 to 22% of span programmed setpoint-alarm SG Level Program Level                  See section 4.17A MFPT Speed Program                      See section 4.17B All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
4.19       Requirements for Test and Calibration The SGL Control System is not a protection system, and therefore, does not require the capability of being tested at power, except as stated below.
The Median Signal Selector (MSS) provides functional separation between the reactor protection system and the feedwater control system. Therefore, the MSS must have provisions to be periodically tested at power. The testing at power will demonstrate that undetectable failures do not exist in the unit.
Although the signal selector is not considered to be part of the protection system, protection system action is dependent on the MSS having high reliability.
Reliability of the MSS must be of a level similar to that of the protection system.
Reliability of the MSS must be of a level similar to that of the protection system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 98 of 440 4.20 Requirements for Associated Equipment A. The time constant for all pressure (steam header and feedwater header) input sensors (provided by others) of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.B. The time constant for the turbine load input sensors (provided by others) of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.5.0 ROD CONTROL 6.1 System Description The rod control system is composed of those control functions whose primary function is to maintain the reactor coolant average temperature within an allowable deviation of the programmed reference temperature during steady state operation.
 
In addition, the control system causes the NSSS power to follow the turbine demand in a controlled fashion during load transients.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 98 of 440 4.20       Requirements for Associated Equipment A. The time constant for all pressure (steam header and feedwater header) input sensors (provided by others) of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.
Indicators are provided for monitoring system operation.
B. The time constant for the turbine load input sensors (provided by others) of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.
Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
5.0       ROD CONTROL 6.1       System Description The rod control system is composed of those control functions whose primary function is to maintain the reactor coolant average temperature within an allowable deviation of the programmed reference temperature during steady state operation. In addition, the control system causes the NSSS power to follow the turbine demand in a controlled fashion during load transients. Indicators are provided for monitoring system operation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
5.2 Rod Control System The control scheme used to position the Control Rods is dependent on reactor power level. Manual control of control rod position is used when the reactor thermal power is between 0% and 15%. Above 15% reactor thermal power, automatic control is used to position the Control Rods to maintain the average reactor coolant temperature (Tavg)within +1- 3.5&deg;F of the programmed average temperature (Tref) which is based upon plant load or Turbine impulse pressure. (Reference WBN N3-85-4001).
5.2       Rod Control System The control scheme used to position the Control Rods is dependent on reactor power level. Manual control of control rod position is used when the reactor thermal power is between 0% and 15%. Above 15% reactor thermal power, automatic control is used to position the Control Rods to maintain the average reactor coolant temperature (Tavg) within +1-3.5&deg;F of the programmed average temperature (Tref) which is based upon plant load or Turbine impulse pressure. (Reference WBN N3-85-4001). Various average reactor coolant temperature programs have their own particular advantages and disadvantages. The following discussion indicates the considerations behind the choice of the temperature program used for the nuclear plants.
Various average reactor coolant temperature programs have their own particular advantages and disadvantages.
The reactor control signal consists of an error signal used to direct rod speed and position to automatically control reactor power. The two channels used to generate the total error signal are the deviation of the actual auctioneered (highest) primary coolant temperature (Tavg) from the programmed average temperature (Tref) and the mismatch between turbine load and nuclear power.
The following discussion indicates the considerations behind the choice of the temperature program used for the nuclear plants.The reactor control signal consists of an error signal used to direct rod speed and position to automatically control reactor power. The two channels used to generate the total error signal are the deviation of the actual auctioneered (highest) primary coolant temperature (Tavg) from the programmed average temperature (Tref) and the mismatch between turbine load and nuclear power.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 99 of 440 5.2 Rod Control System (continued)
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 99 of 440 5.2       Rod Control System (continued)
Maintenance of a constant average reactor coolant temperature at all power levels requires a minimum size pressurizer since the reactor coolant water mass remains essentially constant.
Maintenance of a constant average reactor coolant temperature at all power levels requires a minimum size pressurizer since the reactor coolant water mass remains essentially constant. This type of program also reduces the need for control reactivity since; in this case, the moderator temperature coefficient of reactivity does not contribute to the total reactivity balance. However, large steam pressure variation would occur over the 1 to 100 percent power range, with steam pressure being a minimum at full power and a maximum at zero power. At the other extreme, an average reactor coolant temperature program could provide a constant steam pressure. This feature would permit optimum design of the secondary system, but would involve large excursions of the average coolant temperature. This, in turn would result in large control rod reactivity demands to compensate for the moderator temperature coefficient of reactivity. The scheme would also introduce a pressurizer sizing problem since the associated reactor coolant expansions and contractions must be absorbed. A compromise between the two extreme average coolant temperature programs is therefore made. Figures 5.1 and 5.1 show the design average coolant temperature program and associated secondary steam pressure as a function of power level, respectively.
This type of program also reduces the need for control reactivity since; in this case, the moderator temperature coefficient of reactivity does not contribute to the total reactivity balance. However, large steam pressure variation would occur over the 1 to 100 percent power range, with steam pressure being a minimum at full power and a maximum at zero power. At the other extreme, an average reactor coolant temperature program could provide a constant steam pressure.
620 F Tavg 557 F 0%                             % Rx Power                       100%
This feature would permit optimum design of the secondary system, but would involve large excursions of the average coolant temperature.
Fioure 5.1 L_..
This, in turn would result in large control rod reactivity demands to compensate for the moderator temperature coefficient of reactivity.
 
The scheme would also introduce a pressurizer sizing problem since the associated reactor coolant expansions and contractions must be absorbed.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                     Page 100 of 440 5.2       Rod Control System (continued) 1078 psig SG Pressure 900 psig 0%                           % Rx Power                         100%
A compromise between the two extreme average coolant temperature programs is therefore made. Figures 5.1 and 5.1 show the design average coolant temperature program and associated secondary steam pressure as a function of power level, respectively.
Fioure 6.2 The control system is designed to automatically control the reactor in the power range I between 15 and 100 percent of rated power for the following transients:
620 F Tavg 557 F 0% % Rx Power 100%Fioure 5.1 L_..
: 1. +/- 10% step change in load
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 100 of 440 5.2 Rod Control System (continued) 1078 psig SG Pressure 900 psig 0%% Rx Power 100%Fioure 6.2 The control system is designed to automatically control the reactor in the power range I between 15 and 100 percent of rated power for the following transients:
: 2. 5%/minute ramp loading and unloading
: 1. +/- 10% step change in load 2. 5%/minute ramp loading and unloading 3. 50% percent step load decrease with the aid of automatically initiated and controlled steam dump.A step load change from 90 to 100 percent power or a 5%/minute load increase to 100 percent power must be automatically controlled without tripping the plant on nuclear power overshoot.
: 3. 50% percent step load decrease with the aid of automatically initiated and controlled steam dump.
For transients, the system is capable of restoring the average temperature to within +/-3.5 F of the programmed temperature, including a +/-2 F instrument error and a +/- 1.5 F deadband, following load changes.I NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 101 of 440 5.2 Rod Control System (continued)
A step load change from 90 to 100 percent power or a 5%/minute load increase to       I 100 percent power must be automatically controlled without tripping the plant on nuclear power overshoot. For transients, the system is capable of restoring the average temperature to within +/-3.5 F of the programmed temperature, including a +/-
One average temperature measurement per reactor coolant loop is provided.
2 F instrument error and a +/- 1.5 F deadband, following load changes.
This measurement is obtained by averaging the hot leg temperature (Th) measured at the inlet of the steam generator and the cold leg temperature (Tc) measured at the discharge side of the reactor coolant pump of the associated loop. All four loop average temperatures are passed into an auctioneering function which will select the highest of the four-loop average temperature (Tavg) signals. This auctioneered Tavg signal is sent to a lead/lag unit which increases the effect of the signal. A second lag is provided to filter out signal noise.Tavg 1 + x 3 s Equation 5.1 (I + "C4S)(1 + c 5 s)The above described signal is then compared with a reference temperature (Tref)signal (The reference temperature is a function of turbine load, as described previously).
 
Because the steam pressure in the impulse chamber of the high pressure turbine is linear with respect to the turbine load, this pressure signal is used to generate the reference average coolant temperature (Tref). The reference temperature signal is passed through a lag before it is compared with the compensated Tavg signal. The resultant error signal is then: I I + ________________
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                       Upgrade Specification               Rev. 0001 Specification                                                         Page 101 of 440 5.2       Rod Control System (continued)
Tref" -Tavg 1 Equation 5.2 I + '-2 s (1 + '1 4 6)(1 + T. S)Power Mismatch Channel This channel provides fast response to a change in load (by means of the turbine load feedforward signal) as well as control stability (by means of the nuclear power feedback signal) in cases where the moderator coefficient is zero or is only slightly negativeTurbine load (Qtu) and nuclear power (Qn) provide input to this channel.Turbine load is represented by the impulse chamber pressure of the high pressure turbine, while the nuclear power signals are passed into an auctioneering unit which generates the highest of the four nuclear power signals. The deviation between Qtu and Qn feeds a rate/lag (impulse) unit, this creating the error signal: (Q-Q)(1 +tis) Equation 5.3 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 102 of 440 5.2 Rod Control System (continued)
One average temperature measurement per reactor coolant loop is provided. This measurement is obtained by averaging the hot leg temperature (Th) measured at the inlet of the steam generator and the cold leg temperature (Tc) measured at the discharge side of the reactor coolant pump of the associated loop. All four loop average temperatures are passed into an auctioneering function which will select the highest of the four-loop average temperature (Tavg) signals. This auctioneered Tavg signal is sent to a lead/lag unit which increases the effect of the signal. A second lag is provided to filter out signal noise.
Because the Tavg channel provides fine control during steady state operation, the power mismatch channel must not produce a steady-state error signal. This is accomplished by the derivative action in the numerator of the transfer function which causes the output of this unit to go to zero during steady-state operation although the nuclear power and turbine load may not match exactly. A nonlinear gain function, KI, placed at the output of the impulse unit, varies the effect of this channel with larger load changes having a correspondingly larger effect. Also, since reactivity changes at low power levels have a smaller effect on the rate of change of the nuclear power level than reactivity changes at high power levels, a variable-gain function, K2, is provided at the output of the power mismatch channel. The variable gain function imposes a high gain on the power mismatch error signal at lower power levels and a low gain at high power levels. This variable gain enables the mismatch channel to provide adequate control at low power levels as well as stable operation at high power levels.Rod Speed Control Program The total error signal (Te) sent to the rod speed program is the sum of the outputs of the two control channels described above. The dead band and lockup are provided to eliminate continuous rod stepping and bistable chattering.
Tavg         1 + x3s      Equation 5.1 (I + "C4S)(1 + c5s)
The maximum rod speed and the proportional and minimum rod speed bands are identical for rod withdrawal and rod insertion.
The above described signal is then compared with a reference temperature (Tref) signal (The reference temperature is a function of turbine load, as described previously). Because the steam pressure in the impulse chamber of the high pressure turbine is linear with respect to the turbine load, this pressure signal is used to generate the reference average coolant temperature (Tref). The reference temperature signal is passed through a lag before it is compared with the compensated Tavg signal. The resultant error signal is then:
The rod speed program produces and analog signal which is translated into actual movement by means of the rod stepping mechanism.
I               ________________
The total error signal driving the rod speed program is presented in the following equation: T=rf I Tag I+T 3 s [ ____Te =+Tref -Tavg -(Q-_Q.) t 1 S K K 2 Equation 5.4 l+ rs (I +t 4 s)(1 +Ts) ((1+'CIs)
I+
J The control rods are divided into four banks. Bank A is withdrawn first, followed in order by Banks B, C and D. Two banks operate simultaneously over certain regions to ensure adequate incremental activity worth. The control rods are driven by a sequencing variable-speed rod drive control unit. The rods in each bank are divided into two groups which are moved sequentially, one group at a time. The sequence of motion is reversible:
Tref"         - Tavg         1             Equation 5.2 I + '-2s          (1+ '146)(1 + T.S)
that is, the withdrawal sequence is the reverse of the insertion sequence.
Power Mismatch Channel This channel provides fast response to a change in load (by means of the turbine load feedforward signal) as well as control stability (by means of the nuclear power feedback signal) in cases where the moderator coefficient is zero or is only slightly negativeTurbine load (Qtu) and nuclear power (Qn) provide input to this channel.
The two groups of a given control bank never deviate from each other by more than one step. The variable speed sequential rod control makes it possible to insert small amounts of reactivity as needed to accomplish fine control of the reactor coolant average temperature within the +1- 1.5&deg;F temperature dead band.
Turbine load is represented by the impulse chamber pressure of the high pressure turbine, while the nuclear power signals are passed into an auctioneering unit which generates the highest of the four nuclear power signals. The deviation between Qtu and Qn feeds a rate/lag (impulse) unit, this creating the error signal:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 103 of 440 5.2 Rod Control System (continued)
(Q-Q)(1 +tis) Equation 5.3
Rod stop signals are provided to prevent abnormal power conditions which could result from excessive control rod withdrawal.
 
Interlocks to the Rod Control System will prevent rod withdrawal in either the manual or automatic mode of operation.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 102 of 440 5.2       Rod Control System (continued)
Rod insertion limit alarms (low and low-low) are established to ensure sufficient core reactivity shutdown margin. These limits are calculated based on the reactor power level. An increase in reactor power will cause a decrease in allowable rod insertion (i.e., rods must be withdrawn further).
Because the Tavg channel provides fine control during steady state operation, the power mismatch channel must not produce a steady-state error signal. This is accomplished by the derivative action in the numerator of the transfer function which causes the output of this unit to go to zero during steady-state operation although the nuclear power and turbine load may not match exactly. A nonlinear gain function, KI, placed at the output of the impulse unit, varies the effect of this channel with larger load changes having a correspondingly larger effect. Also, since reactivity changes at low power levels have a smaller effect on the rate of change of the nuclear power level than reactivity changes at high power levels, a variable-gain function, K2, is provided at the output of the power mismatch channel. The variable gain function imposes a high gain on the power mismatch error signal at lower power levels and a low gain at high power levels. This variable gain enables the mismatch channel to provide adequate control at low power levels as well as stable operation at high power levels.
The unit operator will initiate boration activities after verifying the rod insertion limits are violated." Abnormal reactor conditions shall inhibit rod withdrawal.
Rod Speed Control Program The total error signal (Te) sent to the rod speed program is the sum of the outputs of the two control channels described above. The dead band and lockup are provided to eliminate continuous rod stepping and bistable chattering. The maximum rod speed and the proportional and minimum rod speed bands are identical for rod withdrawal and rod insertion.
These conditions include 1) Power Range Nuclear Overpower, 2) Intermediate Range Overpower, 3) Overpower dT, 4) Overtemperature dT.* Automatic control mode shall be inhibited when turbine power is less than 15 percent.* Automatic withdrawal shall be stopped when Bank D rod withdrawal exceeds a preset limit.5.3 Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Reactor Control System: Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical  
The rod speed program produces and analog signal which is translated into actual movement by means of the rod stepping mechanism. The total error signal driving the rod speed program is presented in the following equation:
& Electronics Engineers (IEEE)Standards:
T=rf       I     Tag         I+T 3 s     [         ____
IEEE Std. 279-1971 (Section 4.7)These standards and criteria have been considered in preparing this specification.
Te =+Tref         -Tavg                   -   (Q-_Q.)     t1 S K K 2 Equation 5.4 l+ rs           (I +t 4s)(1 +Ts)             ((1+'CIs)       J The control rods are divided into four banks. Bank A is withdrawn first, followed in order by Banks B, C and D. Two banks operate simultaneously over certain regions to ensure adequate incremental activity worth. The control rods are driven by a sequencing variable-speed rod drive control unit. The rods in each bank are divided into two groups which are moved sequentially, one group at a time. The sequence of motion is reversible: that is, the withdrawal sequence is the reverse of the insertion sequence. The two groups of a given control bank never deviate from each other by more than one step. The variable speed sequential rod control makes it possible to insert small amounts of reactivity as needed to accomplish fine control of the reactor coolant average temperature within the +1-1.5&deg;F temperature dead band.
5.4 WBN System Description, System Diagrams NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 104 of 440 5.4 WBN System Description, System Diagrams (continued)
 
TIwns Tuwbim OWN. tub Ta18g, 1"g Two Iopg V-iso hop Plnal Loop1 Lop 2 Loop a LOOP 4 P&#xfd;_ P " 8"1 Ni PRI NO P12 NIS PRI Nis PRc Figure 5.3: Reactor Control Diagram NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 106 of 440 6.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                       Upgrade Specification             Rev. 0001 Specification                                                       Page 103 of 440 5.2       Rod Control System (continued)
These controls shall allow the unit operator to establish either manual or automatic control mode and manually position any Control or Shutdown Bank.Main Control Room Indication None for C&MS 5.6 Alarms and Annunciators Main Control Room Annunciation None for C&MS 5.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-9159 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.A. During Steady State conditions, the Rod Control system shall control Tavg to within +/- 1.5F of programmed temperature.
Rod stop signals are provided to prevent abnormal power conditions which could result from excessive control rod withdrawal. Interlocks to the Rod Control System will prevent rod withdrawal in either the manual or automatic mode of operation. Rod insertion limit alarms (low and low-low) are established to ensure sufficient core reactivity shutdown margin. These limits are calculated based on the reactor power level. An increase in reactor power will cause a decrease in allowable rod insertion (i.e., rods must be withdrawn further). The unit operator will initiate boration activities after verifying the rod insertion limits are violated.
                " Abnormal reactor conditions shall inhibit rod withdrawal. These conditions include 1) Power Range Nuclear Overpower, 2) Intermediate Range Overpower, 3) Overpower dT, 4) Overtemperature dT.
* Automatic control mode shall be inhibited when turbine power is less than 15 percent.
* Automatic withdrawal shall be stopped when Bank D rod withdrawal exceeds a preset limit.
5.3         Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)
(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Reactor Control System:
Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)
Standards: IEEE Std. 279-1971 (Section 4.7)
These standards and criteria have been considered in preparing this specification.
5.4         WBN System Description, System Diagrams
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls           Specification Engineering                 Upgrade Specification             Rev. 0001 Specification                                                   Page 104 of 440 5.4     WBN System Description, System Diagrams (continued)
TIwns Tuwbim OWN. tub Ta18g, 1"g     Two               Iopg V-iso hop Plnal Ni PRI NO P12  NIS PRI  Nis PRc                              LOOP4  P&#xfd;_   P   " 8"1 Loop1  Lop 2  Loop a Figure 5.3: Reactor Control Diagram
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 106 of 440 6.5       Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position. These controls shall allow the unit operator to establish either manual or automatic control mode and manually position any Control or Shutdown Bank.
Main Control Room Indication None for C&MS 5.6       Alarms and Annunciators Main Control Room Annunciation None for C&MS 5.7       Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-9159 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.
A. During Steady State conditions, the Rod Control system shall control Tavg to within +/- 1.5F of programmed temperature.
B. The Rod Control system shall restore Tavg to within +/- 3.5F of programmed temperature, including a +/- 2.0 F instrument error and a +/- 1.5F deadband for the following design transients.
B. The Rod Control system shall restore Tavg to within +/- 3.5F of programmed temperature, including a +/- 2.0 F instrument error and a +/- 1.5F deadband for the following design transients.
: 1. +/- 10% load step change 2. 5%/minute ramp loading and unloading 3. 50% step load decrease with the aid of automatically initiated and controlled steam dump.4. A step load change from 90 to 100% power or a 5%/minute ramp load increase to 100% power must be automatically controlled without tripping the plant on nuclear power overshoot.
: 1.   +/- 10% load step change
The nuclear power overshoot must be limited to less than 3% power in conjunction with all instrument uncertainties in the adverse direction.
: 2. 5%/minute ramp loading and unloading
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 106 of 440 5.7 Performance Limits (continued)
: 3. 50% step load decrease with the aid of automatically initiated and controlled steam dump.
C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings.
: 4. A step load change from 90 to 100% power or a 5%/minute ramp load increase to 100% power must be automatically controlled without tripping the plant on nuclear power overshoot. The nuclear power overshoot must be limited to less than 3% power in conjunction with all instrument uncertainties in the adverse direction.
This performance data shall be factored into the performance limit acceptance criteria.
 
The control system open loop response is defined as the time delay from the change of process parameters to final output device response.5.8 Specific Requirements A. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.B. Trend recording capability should be provided for any system input, output, or control parameter.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 106 of 440 5.7       Performance Limits (continued)
Selected trending shall have an archiving storage ability.5.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any irocess or environmental effects on field mounted hardware.
C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.
Rack environmental effects are not included in channel accuracy.
5.8       Specific Requirements A. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
B. Trend recording capability should be provided for any system input, output, or control parameter. Selected trending shall have an archiving storage ability.
Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.Accuracy Requirements for Normal and Abnormal Operating Conditions The reactor control system should have control accuracy of +/- 3.5 0 F for T(avg) -T(ref)deviation and control accuracy of +/- 5.0&deg;F for power mismatch.
5.9       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any irocess or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.
The repeatability of the reactor control system must be within +/- 0.5 0 F.Digital processing reliability requirements are defined in Section 3.2.1.G.3.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
Demanded rod speed deviation to actual &#xf7;/- 2 steps/min rod speed NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 107 of 440 5.9 Accuracy (continued)
Accuracy Requirements for Normal and Abnormal Operating Conditions The reactor control system should have control accuracy of +/- 3.5 0 F for T(avg) - T(ref) deviation and control accuracy of +/- 5.0&deg;F for power mismatch. The repeatability of the reactor control system must be within +/- 0.5 0F.
Digital processing reliability requirements are defined in Section 3.2.1.G.3.
Demanded rod speed deviation to actual &#xf7;/- 2 steps/min rod speed
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 107 of 440 5.9       Accuracy (continued)
The Tavg auctioneering function shall be capable of being tested at power operation.
The Tavg auctioneering function shall be capable of being tested at power operation.
This function provides input to the Rod Speed Control signal used in the automatic control mode. The Rod Bank Selector Switch can be placed in manual control mode during the time period needed to perform any required testing of the Tavg auctioneering function.5.10 Range Tavg 530 to 630'F Tref 530 to 6300F Turbine impulse chamber Equivalent of 0 to 120% of maximum calculated turbine pressure load Neutron flux 0 to 120% of full power Thot leg 530 to 6500F Tcold leg 510 to 630&deg;F StII Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.5.12 Outputs The outputs are documented in Appendix E 5.13 Proposed Signal Validation Designs 1. The Nuclear Instrumentation System (NIS) input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest power range value.2. The NIS input signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
This function provides input to the Rod Speed Control signal used in the automatic control mode. The Rod Bank Selector Switch can be placed in manual control mode during the time period needed to perform any required testing of the Tavg auctioneering function.
5.10       Range Tavg                         530 to 630'F Tref                         530 to 6300F Turbine impulse chamber       Equivalent of 0 to 120% of maximum calculated turbine pressure                     load Neutron flux                 0 to 120% of full power Thot leg                     530 to 6500F Tcold leg                     510 to 630&deg;F StII       Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
5.12       Outputs The outputs are documented in Appendix E 5.13       Proposed Signal Validation Designs
: 1. The Nuclear Instrumentation System (NIS) input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest power range value.
: 2. The NIS input signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
: 3. The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value.
: 3. The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 108 of 440 5.13 Proposed Signal Validation Designs (continued)
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                       Upgrade Specification             Rev. 0001 Specification I                                                       Page 108 of 440 5.13     Proposed Signal Validation Designs (continued)
: 4. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
: 4. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
NIS Ch 1 NIS Ch 2 NIS Ch 3 1_Highest NIS Channel NIS Ch 4 3m L_Figure 5.4 Tavg Lp 1 Tavg Lp 2 Tavg Lp 3 Tavg Lp 4 Highest Tavg Loop Figure 5.5..........
NIS Ch 1 Highest NIS Channel NIS Ch 2 NIS Ch 3                     1_
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 109 of 440 5.14 Time Response 5.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Reactor Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Reactor Control System.5.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Reactor Control System shall not exceed 250 milli-seconds.
NIS Ch 4                     3m L_
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Reactor Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarmlannunciators).
Figure 5.4 Tavg Lp 1 Highest Tavg Loop Tavg Lp 2 Tavg Lp 3 Tavg Lp 4 Figure 5.5
5.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-Seconds for signals involved in closed loop control in this function.5.14.4 Manual Control Response The total delay for all manual component control signals of Reactor Control System shall be no greater than 1 second.5.15 Controller Reset Windup and Recovery Characteristics Not applicable  
 
-no controller 5.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                       Upgrade Specification                 Rev. 0001 Specification                                                           Page 109 of 440 5.14       Time Response 5.14.1     Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Reactor Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Reactor Control System.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 110 of 440 5.17 Programmed Functions Programmed functions used in the programmed Tref and Turbine load channel are defined in this section. Refer to the WBN Unit 2 PLS for actual values.1. The turbine impulse chamber pressure is converted to turbine load in %.I Impulse Pressure (psig)0%Turbine Load (%)100%2. The turbine load is converted to a programmed Tref as follows: I Tref (F)A Turbine Load (%)Programmed Tref 2. The direction of the rod motion is determined separately.
5.14.2     Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Reactor Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Reactor Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarmlannunciators).
The bistable (a)determining the direction of rod motion also determines the temperature error deadband and lock-up.
5.14.3     Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-Seconds for signals involved in closed loop control in this function.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 111 of 440 5.17 Programmed Functions (continued) 5.18 Setpoints The following setpoint information is not WBN Unit 2 specific.
5.14.4     Manual Control Response The total delay for all manual component control signals of Reactor Control System shall be no greater than 1 second.
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.Variable Range of Setting Rod control temperature error deadband Lockup Tavg Deviation Alarm Tavg -Tref Deviation Alarm High Auctioneered Tavg Alarm+/- 0.5 to +/- 2 0 F+/- 0 to +/- 0.5F 0.5 to 10&deg;F 0.5 to 10 0 F 560 to 590 0 F All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.WBN Unit I (post SGR) PLS NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 112 of 440 5.18 Setpoints (continued)
5.15       Controller Reset Windup and Recovery Characteristics Not applicable - no controller 5.16       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 110 of 440 5.17       Programmed Functions Programmed functions used in the programmed Tref and Turbine load channel are defined in this section. Refer to the WBN Unit 2 PLS for actual values.
: 1. The turbine impulse chamber pressure is converted to turbine load in %. I Impulse Pressure (psig) 0%           Turbine Load (%)       100%
: 2. The turbine load is converted to a programmed Tref as follows:             I Tref (F)
A Turbine Load (%)
Programmed Tref
: 2. The direction of the rod motion is determined separately. The bistable (a) determining the direction of rod motion also determines the temperature error deadband and lock-up.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 111 of 440 5.17     Programmed Functions (continued) 5.18     Setpoints The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
Variable                               Range of Setting Rod control temperature error           +/- 0.5 to +/- 20 F deadband Lockup                                +/- 0 to +/- 0.5F Tavg Deviation Alarm                    0.5 to 10&deg;F Tavg - Tref                            0.5 to 100 F Deviation Alarm High                  560 to 5900 F Auctioneered Tavg Alarm All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
WBN Unit I (post SGR) PLS
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls                       Specification Engineering                   Upgrade Specification                       Rev. 0001 Specification I                                                             Page 112 of 440 5.18     Setpoints (continued)
: 1. Reactor Control A. Coolant average tempeialure (progrqan)
: 1. Reactor Control A. Coolant average tempeialure (progrqan)
("Y-506A, TY-O5BB, TY-5OSC, HY-505)1.2.3-4-S.6, High limit (HY-505)LOW n1it Full power temperature Hot shuldown Tomporature gain Lag time constant CTY. 505C)Selpoint tar full load T,,4 M 588.2 0 F 588.2 0 F 557F 588.2 0 F 557*F 0.3129171?%
("Y-506A, TY-O5BB, TY-5OSC, HY-505)
power 30 Selpoint for full load T., = $S8.&2GF 588.21F 5570F 686.20F 557'F 0.?9gRFi%
Selpoint tar        Selpoint for full load          full load T,,4 M588.2 0 F    T., = $S8.&2GF
power 30 secondst'B. Coolant average temperature (auctoneered)(TY-41P)1. Lead timr constant 2- Lag bmi constants C. Power mrssmatch channel 1 Impulse unit time constant (JY-412C)P. Impulse unit non-linear gain (JY-412B)error signal at breakpoint of non-linear gain Low gain (error signal ,2%)High gain (error signal >2%)40 sOcOnrds-I
: 1. High limit (HY-505)         588.20 F            588.21F
: 10. 10 seconds 40 5ep%$:.
: 2. LOW n1it                    557F                5570F 3-    Full power temperature     588.2 0F            686.20F 4-    Hot shuldown               557*F                557'F S. Tomporature gain           0.3129171?% power    0.?9gRFi% power 6,    Lag time constant          30 s*sOnds'ls      30 secondst' CTY. 505C)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 113 of 440 5.18 Setpoints (continued)
B. Coolant average temperature (auctoneered)
Power Mlsmatch Channel, Nonlinear GaIr 2,1 OSTA4&q 0.02 0.03-0.6-2.I% a4 % PUG Load TwomA Infukin Ptamyo -% Foil Lind E~[dffM PCtHANNEL_
(TY-41P)
NoDNLJPffiaM N 2.0* ID a'WMA ~SM., I bw TurtijeIrw~
: 1. Lead timr constant                               40 sOcOnrds-I 2-   Lag bmi constants                               10. 10 seconds C. Power mrssmatch channel 1     Impulse unit time constant (JY-412C)                                       40 seconds:'*
s *T~S~Climtnv
P. Impulse unit non-linear gain (JY-412B) error signal at breakpoint of non-linear gain                                 5ep%$:.
{Puvmrnt Powaf)VDniU 00.1 NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 114 of 440 5.18 Setpoints (continued)
Low gain (error signal ,2%)
*1 (Steps~ln)
High gain (error signal >2%)
Band : 2 ,,1..T _I II ea .B .n Sptj O* = 32 Stepsftmin'r Minimum Speed = 8 St9pep n 0 1.0 1.5 a.0 G"F R" Spewd PrOgram I Q4 Rod Spoed Proara, 5.19 Requirements for Test and Calibration The Reactor Control System is not a protection system and, thus, does not require the capability of being tested at power.6.20 Requirements for Associated Equipment A. The time constant for all pressure (steam header and feedwater header) input sensors of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.B. The time constant for the turbine load input sensors of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 116 of 440 5.20 Requirements for Associated Equipment (continued) 6.0 STEAM DUMP CONTROL SYSTEM REQUIREMENTS 6.1 System Description The condenser steam dump control system provides for automatic operation of the steam dump valves following large turbine load reductions and reactor trips. Provision is also made for remote manual control of steam pressure.The steam dump control system performs the following functions:
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls                               Specification Engineering                   Upgrade Specification                                 Rev. 0001 Specification                                                                       Page 113 of 440 5.18     Setpoints (continued)
: 1. Permits the nuclear plant to accept sudden large load decreases without a reactor trip.2. Removes stored energy and residual heat following a reactor trip without actuation of the SG safety valves with the plant at equilibrium no-load conditions.
Power Mlsmatch Channel, Nonlinear GaIr 2,1 OSTA4&q 0.02         0.03
: 3. Permits a controlled cooldown to cold shutdown.When the turbine-generator experiences a sudden, large electrical load reduction, the turbine control valves reduce steam flow to the turbine. The reactor control system receives a signal that the turbine demand has decreased and begins control rod insertion to reduce the reactor energy output. Because the NSSS response time is much slower than the turbine response time, a large energy mismatch occurs. This energy mismatch can quickly cause a large increase in RCS temperature and result in a reactor trip due to a parameter setpoint being exceeded.
                                                  -0.6
The steam dump system provides an artificial load for the reactor by dumping steam to the condenser (and atmosphere, in some instances).
                                                  -2.I
Dumping steam supplements the turbine load to match the reactor power level, thus avoiding excessive temperature rise in the RCS.The steam dump system has 40% steam dump capacity to the condenser (i.e., 40% of rated full load steam flow can be passed when all of the steam dump valves are discharging steam). This allows the NSSS to withstand an external load step reduction of up to 50% of plant rated electrical load (10% NSSS load step capability plus 40%steam dump) without reactor trip or safety valve actuation.
                                                              % a4 % PUG Load TwomA Infukin Ptamyo - % Foil Lind E~[dffM         PCtHANNEL_ NoDNLJPffiaM N 2.0
These valves will also open under a sudden reduction in turbine-generator load (in excess of 10%) or following a plant trip.The steam dumps are also utilized in the pressure control mode during plant startup and cooldown.
* ID a
Prior to synchronizing the generator to the grid, the reactor power may be increased up to 10% by dumping steam to the condenser.
SM.,                      Ibw
This will facilitate establishing the minimum turbine-generator load (5-10%) without placing a step-load demand on the reactor. The dump valves close to compensate for the steam that is admitted to the turbine. During plant cooldown, the condenser serves as a heat sink.
              'WMA ~
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 116 of 440 6.2 Secondary Side Pressure Control System This section defines two secondary side pressure control systems; the NSSS Condenser Steam Dump Control System and the BOP Atmospheric Dump Control System.6.2.1 Condenser Steam Dump Control System The 3 functions specified in the previous section use 2 different modes of control, one on Temperature Control (Tavg) and the other on Steam Pressure.
TurtijeIrw~
The Temperature Control (Tag) mode provides the valves with 2 different input signals, a trip open signal which will rapidly open the valves, and a modulate signal which will position the valves. The Steam Pressure mode provides one type of input signal which is a modulate signal. This modulate signal will open or close the valve in 20 seconds, whereas the trip open signal will open the valve in 3 seconds. After the valve has been trip opened, it will be modulated closed.The condenser steam dump control system will prevent the valves from either being tripped or modulated open whenever the condenser cannot accept the additional steam. The non-availability of the condenser is recognized by either high condenser back pressure or insufficient condenser cooling water (existence of an open circulating water circuit breaker, 1 out of 3 open)The condenser steam dump system functional tasks are: a. Temperature Control (T.v) -Control of reactor coolant system average temperature (Tavg)b. Pressure Control -Control of steam pressure.The temperature control mode (Tav) is commonly referred to as automatic control, with pressure control being considered as manual. A brief description of these control modes is given below. Figure 6.4 is a block diagram of the control system for the condenser steam dump valves.
                                      *T~S~Climtnv s
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 117 of 440 6.2.1 Condenser Steam Dump Control System (continued)
{Puvmrnt Powaf)
A. Temperature Control (Tsvg)The measured RCS Ta.g is used as the control parameter in this mode. Figure 6.2 illustrates a program which relates Tavg to NSSS power level. To operate at a given power level, the reactor rod control system inserts or withdraws control rods to obtain a T.agwhich corresponds to the programmed Tref. The Westinghouse NSSS employs a load-follow control system. The reactor responds to turbine-generator load changes -so the reference temperature (Trf) which corresponds to the actual load is compared to Ta 8 g The resultant temperature error is used to increase or decrease the NSSS load. Operation of the reactor rod control system is simply illustrated in Figure 6.2, and is described below. Assume that the turbine-generator is operating at 100% rated load. The turbine impulse pressure corresponds to point L. This pressure signal is converted into a Tref signal which corresponds to point H. The reactor rod control system will adjust the reactor control rods until Tavo is equal to or approximately equal to Tref. Now assume that the turbine-generator load is suddenly reduced to 50% rated load. Turbine impulse pressure changes from point L to K, which causes Trf to change from point H to G. A large difference now exists between the values of Tevq (at point D) and Tref (at point G). This difference is referred to as the error signal and is used to adjust the reactor control rod position.
VDniU 00.1
In the assumed situation, the control rods insert into the reactor core to reduce reactor power until T 3 v 9 was again equal to Tref. Functional tasks performed by the steam dump system under the temperature control mode include: 1. Load rejection  
 
-Reduction in the turbine impulse pressure signal indicates the occurrence of load loss. If the load loss is greater than 10%, steam dump valves are actuated.
NPG Site-Specific             VWBN Unit 2 NSSS and BOP Controls                 Specification Engineering                       Upgrade Specification                       Rev. 0001 Specification                                                                 Page 114 of 440 5.18     Setpoints (continued)
The number of valves which open is determined by the magnitude of load loss. As Tavg approaches Tref, the valves are modulated closed. The steam dump flow reduction is as fast as rod cluster control assemblies are capable of inserting negative reactivity.
                                              *1 (Steps~ln)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 118 of 440 6.2.1 Condenser Steam Dump Control System (continued)
Band : 2
A turbine impulse pressure signal is supplied to the steam dump control system to determine if a load loss has actually occurred.
                                    ,,1..T _                                        SptjO* = 32 Stepsftmin'r I    II    ea B.     .n Minimum Speed = 8 St9pepn I
The signal serves as input to the tcs unit. The output of this unit goes to a bistable which, associated I + tIS with logic and interlock circuits, control the air supplies to the dump valves. The bistable setting will be such that no steam dump valves are enabled for load losses less than 10%, and all valve banks are enabled for load losses greater than 10%. The signals controlling the air supplies to the steam dump valves are interlocked such that the air supplies are blocked on low reactor coolant system temperature or if the condenser is not available.
Q 0   1.0 1.5       a.0         G"F R" Spewd PrOgram 3,,.;*A 4
Assuming a load rejection has occurred and that the air supply to the dump valves has been enabled, the reactor coolant average temperature is employed to determine the position of the dump valves. The measured auctioneered reactor coolant average temperature goes to the ]+ 112s unit, the output of which is compared to the I + -CBS reference temperature determined by turbine load (impulse pressure).
Rod Spoed Proara, 5.19           Requirements for Test and Calibration The Reactor Control System is not a protection system and, thus, does not require the capability of being tested at power.
Following a sudden load decrease, Tref is decreased, thus rapidly creating an error signal. This signal goes to 2 bistable functions which, with their associated logic, determine the positions of the solenoids that bypass the dump valve positioners.
6.20           Requirements for Associated Equipment A.     The time constant for all pressure (steam header and feedwater header) input sensors of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.
Each bistable function trips open one bank of dump valves.The error signal is also used to modulate the valves open and Glosed through the valve positioners.
B. The time constant for the turbine load input sensors of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.
: 2. Plant trip -On receipt of the reactor trip signal, Ta%9 is compared to no-load Trot (point E on Figure 6.2), and the appropriate number of steam dump valves are tripped open or modulated open. The temperature error signal is used to modulate the appropriate banks of dump valves open and closed until Tavg equals Trot.Following a plant trip as determined by a turbine trip signal, the loss of load (load rejection) steam dump control is defeated and the plant trip steam dump control is employed.
 
The turbine trip signal enables air to be supplied to the 2 banks of dump valves. The measured auctioneered reactor coolant average I + t 1 2 S temperature goes to the I + x;s unit, the output of which is compared to the no I + z3 load reference temperature.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 116 of 440 5.20     Requirements for Associated Equipment (continued) 6.0       STEAM DUMP CONTROL SYSTEM REQUIREMENTS 6.1         System Description The condenser steam dump control system provides for automatic operation of the steam dump valves following large turbine load reductions and reactor trips. Provision is also made for remote manual control of steam pressure.
The error signal goes to 2 bistable functions which, with their logic, determine the positions of the solenoids that bypass the dump valve positioners.
The steam dump control system performs the following functions:
Each bistable function trips open one bank of dump valves.Through the valve positioners, the error signal is also used to modulate the valves open and closed.
: 1. Permits the nuclear plant to accept sudden large load decreases without a reactor trip.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 119 of 440 6.2.1 Condenser Steam Dump Control System (continued)
: 2. Removes stored energy and residual heat following a reactor trip without actuation of the SG safety valves with the plant at equilibrium no-load conditions.
: 3. Quick open feature -This feature exists only in the temperature control mode during either load rejection (I) or reactor trip (2). In the event of a sudden increase in RCS Tavto above controller determined set points bi-stable switches trip open the steam dump valves. On an increase in Tavg above a controller determined Hi Tag error signal, the first two banks of dump valves are automatically tripped open. On an increase in Ta. above a Hi-Hi Tg error signal, the remaining two banks of dump valves are opened.B. Pressure Control Main steam header pressure is the parameter used to modulate steam dump valves to maintain, or change, steam pressure.
: 3. Permits a controlled cooldown to cold shutdown.
The rod control system is designed to automatically control the reactor power range between 15% and 100% of rated power and to accept the following transients without reactor trip: a. Plus or minus 10% step change in load.b. 5% per minute ramp load increase or decrease.That is, the reactor power is automatically adjusted to accept these load transients without exceeding operating parameter setpoints which would trip the reactor.When load reductions which exceed the capabilities of the automatic control system described above occur, a reactor trip will occur if provisions are not made to limit the changes in the operating parameter.
When the turbine-generator experiences a sudden, large electrical load reduction, the turbine control valves reduce steam flow to the turbine. The reactor control system receives a signal that the turbine demand has decreased and begins control rod insertion to reduce the reactor energy output. Because the NSSS response time is much slower than the turbine response time, a large energy mismatch occurs. This energy mismatch can quickly cause a large increase in RCS temperature and result in a reactor trip due to a parameter setpoint being exceeded. The steam dump system provides an artificial load for the reactor by dumping steam to the condenser (and atmosphere, in some instances). Dumping steam supplements the turbine load to match the reactor power level, thus avoiding excessive temperature rise in the RCS.
This capability is provided by the steam dump system which dissipates the heat energy difference between the reactor output and that delivered to the turbine, thereby limiting heatup of the RCS.Functional tasks performed under the pressure control mode are: 1. Maintain hot standby -The steam header pressure to be maintained constant by modulating the dump valves. Steam header pressure is used in a proportional plus integral control function to supply a modulating signal to the condenser dump valves.2. Maintain stable primary plant condition  
The steam dump system has 40% steam dump capacity to the condenser (i.e., 40% of rated full load steam flow can be passed when all of the steam dump valves are discharging steam). This allows the NSSS to withstand an external load step reduction of up to 50% of plant rated electrical load (10% NSSS load step capability plus 40%
-Turbine-generator operating procedures typically require the prompt addition of 5% to 10% of rated electrical load after synchronizing the unit to the grid. Prior to synchronizing, the NSSS thermal power level is increased to a value commensurate with the minimum electrical load. The steam dump system pressure control mode is selected to maintain stable primary plant conditions when the step load change in turbine power occurs during synchronization to the grid, after which the control is switched to the temperature control mode previously described.
steam dump) without reactor trip or safety valve actuation.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 120 of 440 6.2.1 Condenser Steam Dump Control System (continued)
These valves will also open under a sudden reduction in turbine-generator load (in excess of 10%) or following a plant trip.
: 3. Plant cooldown -Manual adjustment of the pressure setpoint or valve position to lower pressures is employed for plant cooldown.
The steam dumps are also utilized in the pressure control mode during plant startup and cooldown. Prior to synchronizing the generator to the grid, the reactor power may be increased up to 10% by dumping steam to the condenser. This will facilitate establishing the minimum turbine-generator load (5-10%) without placing a step-load demand on the reactor. The dump valves close to compensate for the steam that is admitted to the turbine. During plant cooldown, the condenser serves as a heat sink.
During plant cooldown, the steam dump valves modulate to reduce secondary pressure to the manual setpoint.
 
Since the secondary side is at saturated conditions, the temperature decreases with decreasing secondary side pressure.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 116 of 440 6.2       Secondary Side Pressure Control System This section defines two secondary side pressure control systems; the NSSS Condenser Steam Dump Control System and the BOP Atmospheric Dump Control System.
As the secondary side pressure is reduced, the maximum amount of steam which can be dissipated by the steam dump valves decreases.
6.2.1     Condenser Steam Dump Control System The 3 functions specified in the previous section use 2 different modes of control, one on Temperature Control (Tavg) and the other on Steam Pressure. The Temperature Control (Tag) mode provides the valves with 2 different input signals, a trip open signal which will rapidly open the valves, and a modulate signal which will position the valves. The Steam Pressure mode provides one type of input signal which is a modulate signal. This modulate signal will open or close the valve in 20 seconds, whereas the trip open signal will open the valve in 3 seconds. After the valve has been trip opened, it will be modulated closed.
In the manual mode, the cooldown bank (the first bank of dump valves to open and the last bank to close in automatic control modes) is the only bank which can be used. This requires manually bypassing the low-low Tavg interlock.
The condenser steam dump control system will prevent the valves from either being tripped or modulated open whenever the condenser cannot accept the additional steam. The non-availability of the condenser is recognized by either high condenser back pressure or insufficient condenser cooling water (existence of an open circulating water circuit breaker, 1 out of 3 open)
This interlock prevents excessive cooldown by blocking steam dump in the automatic modes.C. Protective Interlocks Protective interlocks are provided to minimize the possibility of an inadvertent actuation of the steam dump system. The interlocks block the air supply to the steam dump valves, thereby preventing opening of the valves under the following conditions:
The condenser steam dump system functional tasks are:
: 1. RCS low-low average temperature (P-1 2) -To prevent excessive RCS cooldown.
: a. Temperature Control (T.v) - Control of reactor coolant system average temperature (Tavg)
A manual bypass of the interlock is provided for the cooldown valves to allow a planned, controlled plant cooldown.2. Condenser is unavailable (C-9) -Interlocks prevent actuation of the dump valves unless condenser pressure is lower than setpoint and at least one circulating water pump is operating.
: b. Pressure Control - Control of steam pressure.
D. Steam Dump Control Signals The steam dump valves are provided with the following control signals: 1. Open Permissive Signal Signal to solenoids in the air supply line determine whether or not air can be admitted to the valve actuator.2. Trip Open Signal An on-off signal to a solenoid (one per dump valve) bypasses the valve positioner and allows the dump valve to rapidly trip open.3. Modulation Signal NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 121 of 440 6.2.1 Condenser Steam Dump Control System (continued)
The temperature control mode (Tav) is commonly referred to as automatic control, with pressure control being considered as manual. A brief description of these control modes is given below. Figure 6.4 is a block diagram of the control system for the condenser steam dump valves.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 117 of 440 6.2.1     Condenser Steam Dump Control System (continued)
A. Temperature Control (Tsvg)
The measured RCS Ta.g is used as the control parameter in this mode. Figure 6.2 illustrates a program which relates Tavg to NSSS power level. To operate at a given power level, the reactor rod control system inserts or withdraws control rods to obtain a T.agwhich corresponds to the programmed Tref. The Westinghouse NSSS employs a load-follow control system. The reactor responds to turbine-generator load changes - so the reference temperature (Trf) which corresponds to the actual load is compared to Ta 8 g The resultant temperature error is used to increase or decrease the NSSS load. Operation of the reactor rod control system is simply illustrated in Figure 6.2, and is described below. Assume that the turbine-generator is operating at 100% rated load. The turbine impulse pressure corresponds to point L. This pressure signal is converted into a Tref signal which corresponds to point H. The reactor rod control system will adjust the reactor control rods until Tavo is equal to or approximately equal to Tref. Now assume that the turbine-generator load is suddenly reduced to 50% rated load. Turbine impulse pressure changes from point L to K, which causes Trf to change from point H to G. A large difference now exists between the values of Tevq (at point D) and Tref (at point G). This difference is referred to as the error signal and is used to adjust the reactor control rod position. In the assumed situation, the control rods insert into the reactor core to reduce reactor power until T3 v9 was again equal to Tref. Functional tasks performed by the steam dump system under the temperature control mode include:
: 1. Load rejection - Reduction in the turbine impulse pressure signal indicates the occurrence of load loss. If the load loss is greater than 10%, steam dump valves are actuated. The number of valves which open is determined by the magnitude of load loss. As Tavg approaches Tref, the valves are modulated closed. The steam dump flow reduction is as fast as rod cluster control assemblies are capable of inserting negative reactivity.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                           Page 118 of 440 6.2.1     Condenser Steam Dump Control System (continued)
A turbine impulse pressure signal is supplied to the steam dump control system to determine if a load loss has actually occurred. The signal serves as input to the tcs unit. The output of this unit goes to a bistable which, associated I + tIS with logic and interlock circuits, control the air supplies to the dump valves. The bistable setting will be such that no steam dump valves are enabled for load losses less than 10%, and all valve banks are enabled for load losses greater than 10%. The signals controlling the air supplies to the steam dump valves are interlocked such that the air supplies are blocked on low reactor coolant system temperature or if the condenser is not available. Assuming a load rejection has occurred and that the air supply to the dump valves has been enabled, the reactor coolant average temperature is employed to determine the position of the dump valves. The measured auctioneered reactor coolant average temperature goes to the ]+ 112s unit, the output of which is compared to the I + -CBS reference temperature determined by turbine load (impulse pressure).
Following a sudden load decrease, Tref is decreased, thus rapidly creating an error signal. This signal goes to 2 bistable functions which, with their associated logic, determine the positions of the solenoids that bypass the dump valve positioners. Each bistable function trips open one bank of dump valves.
The error signal is also used to modulate the valves open and Glosed through the valve positioners.
: 2. Plant trip - On receipt of the reactor trip signal, Ta%9 is compared to no-load Trot (point E on Figure 6.2), and the appropriate number of steam dump valves are tripped open or modulated open. The temperature error signal is used to modulate the appropriate banks of dump valves open and closed until Tavg equals Trot.
Following a plant trip as determined by a turbine trip signal, the loss of load (load rejection) steam dump control is defeated and the plant trip steam dump control is employed. The turbine trip signal enables air to be supplied to the 2 banks of dump valves. The measured auctioneered reactor coolant average I +t 12 S temperature goes to the II ++ x;s z3 unit, the output of which is compared to the no load reference temperature. The error signal goes to 2 bistable functions which, with their logic, determine the positions of the solenoids that bypass the dump valve positioners. Each bistable function trips open one bank of dump valves.
Through the valve positioners, the error signal is also used to modulate the valves open and closed.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                     Rev. 0001 Specification                                                             Page 119 of 440 6.2.1     Condenser Steam Dump Control System (continued)
: 3. Quick open feature - This feature exists only in the temperature control mode during either load rejection (I) or reactor trip (2). In the event of a sudden increase in RCS Tavto above controller determined set points bi-stable switches trip open the steam dump valves. On an increase in Tavg above a controller determined Hi Tag error signal, the first two banks of dump valves are automatically tripped open. On an increase in Ta. above a Hi-Hi Tg error signal, the remaining two banks of dump valves are opened.
B. Pressure Control Main steam header pressure is the parameter used to modulate steam dump valves to maintain, or change, steam pressure. The rod control system is designed to automatically control the reactor power range between 15% and 100% of rated power and to accept the following transients without reactor trip:
: a. Plus or minus 10% step change in load.
: b. 5% per minute ramp load increase or decrease.
That is, the reactor power is automatically adjusted to accept these load transients without exceeding operating parameter setpoints which would trip the reactor.
When load reductions which exceed the capabilities of the automatic control system described above occur, a reactor trip will occur if provisions are not made to limit the changes in the operating parameter. This capability is provided by the steam dump system which dissipates the heat energy difference between the reactor output and that delivered to the turbine, thereby limiting heatup of the RCS.
Functional tasks performed under the pressure control mode are:
: 1. Maintain hot standby - The steam header pressure to be maintained constant by modulating the dump valves. Steam header pressure is used in a proportional plus integral control function to supply a modulating signal to the condenser dump valves.
: 2. Maintain stable primary plant condition - Turbine-generator operating procedures typically require the prompt addition of 5% to 10% of rated electrical load after synchronizing the unit to the grid. Prior to synchronizing, the NSSS thermal power level is increased to a value commensurate with the minimum electrical load. The steam dump system pressure control mode is selected to maintain stable primary plant conditions when the step load change in turbine power occurs during synchronization to the grid, after which the control is switched to the temperature control mode previously described.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 120 of 440 6.2.1     Condenser Steam Dump Control System (continued)
: 3. Plant cooldown - Manual adjustment of the pressure setpoint or valve position to lower pressures is employed for plant cooldown. During plant cooldown, the steam dump valves modulate to reduce secondary pressure to the manual setpoint. Since the secondary side is at saturated conditions, the temperature decreases with decreasing secondary side pressure. As the secondary side pressure is reduced, the maximum amount of steam which can be dissipated by the steam dump valves decreases. In the manual mode, the cooldown bank (the first bank of dump valves to open and the last bank to close in automatic control modes) is the only bank which can be used. This requires manually bypassing the low-low Tavg interlock. This interlock prevents excessive cooldown by blocking steam dump in the automatic modes.
C. Protective Interlocks Protective interlocks are provided to minimize the possibility of an inadvertent actuation of the steam dump system. The interlocks block the air supply to the steam dump valves, thereby preventing opening of the valves under the following conditions:
: 1. RCS low-low average temperature (P-1 2) - To prevent excessive RCS cooldown. A manual bypass of the interlock is provided for the cooldown valves to allow a planned, controlled plant cooldown.
: 2. Condenser is unavailable (C-9) - Interlocks prevent actuation of the dump valves unless condenser pressure is lower than setpoint and at least one circulating water pump is operating.
D. Steam Dump Control Signals The steam dump valves are provided with the following control signals:
: 1. Open Permissive Signal Signal to solenoids in the air supply line determine whether or not air can be admitted to the valve actuator.
: 2. Trip Open Signal An on-off signal to a solenoid (one per dump valve) bypasses the valve positioner and allows the dump valve to rapidly trip open.
: 3. Modulation Signal
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 121 of 440 6.2.1   Condenser Steam Dump Control System (continued)
A modulate signal is sent to the valve positioner of all 12 dump valves. When a positioner is not bypassed (i.e., the dump valve is not tripped open or locked out of control), the dump valve position depends on the magnitude of the modulate signal. The modulate signal can be derived from the pressure controller, the load rejection controller, or the reactor trip controller.
A modulate signal is sent to the valve positioner of all 12 dump valves. When a positioner is not bypassed (i.e., the dump valve is not tripped open or locked out of control), the dump valve position depends on the magnitude of the modulate signal. The modulate signal can be derived from the pressure controller, the load rejection controller, or the reactor trip controller.
E. Handswitches
E. Handswitches
: 1. Mode Select Switch (HS-I-103D)
: 1. Mode Select Switch (HS-I-103D)
: i. Reset -Going to Reset position will reset (if loss of load bistable function has reset) an "Operate/Reset" function.
: i. Reset - Going to Reset position will reset (if loss of load bistable function has reset) an "Operate/Reset" function. The Loss-of-Load function, PS-1-72E, will pick up and enable the "Operate/Reset" function. This will seal itself in and arm the "A" & "B" solenoids. The Loss-of-Load bistable function will drop out on its reset value which will then allow the "Operate/Reset" function to be reset to disarm the "A" & "B" solenoids.
The Loss-of-Load function, PS-1-72E, will pick up and enable the "Operate/Reset" function.
ii. Tavg - This handswitch position enables the Load Rejection and Reactor trip Controllers and the Hi, Hi -Hi bistable functions. The Load Rejection controller will normally be in service waiting on the Load Rejection bistable function to pick up. Upon a reactor trip, the P-4 contacts from the "B" Train breaker positions, will provide a signal which causes the Load Rejection controller and associated bistable functions to be disabled while the Reactor Trip controller with associated bistable functions are placed in control of the dump valves.
This will seal itself in and arm the "A" & "B" solenoids.
iii. Steam Pressure - With the mode select switch in this position, the "A" &
The Loss-of-Load bistable function will drop out on its reset value which will then allow the"Operate/Reset" function to be reset to disarm the "A" & "B" solenoids.
                        "B" solenoids are energized and the steam header pressure controller is placed in control of the steam dump valves. The Load Rejection and Reactor Trip Controllers are disabled. The steam pressure controller receives a pressure signal from an auctioneered input of PT-1 -33 and 2 new pressure transmitters (See SGL controls). Comparing that signal to the control function's setpoint, an error signal is developed and sent to a common I/P converter to modulate the dump valves. Above Lo-Lo Tavg, all twelve dump valves are subject to modulation. Below Lo-Lo Tavg, only the cooldown valves should modulate if in Bypass. The Steam Dump will be held in pressure mode until the unit is at approximately15% load. Tavg mode will then be selected allowing the controllers for a RX trip or load rejection to be activated. Being in pressure mode controls steam header pressure to allow the dump valves to release enough steam to maintain No Load Tavg.
ii. Tavg -This handswitch position enables the Load Rejection and Reactor trip Controllers and the Hi, Hi -Hi bistable functions.
: 2. ON/OFF/Bypass Interlock (HS-1-103A &-103B)
The Load Rejection controller will normally be in service waiting on the Load Rejection bistable function to pick up. Upon a reactor trip, the P-4 contacts from the"B" Train breaker positions, will provide a signal which causes the Load Rejection controller and associated bistable functions to be disabled while the Reactor Trip controller with associated bistable functions are placed in control of the dump valves.iii. Steam Pressure -With the mode select switch in this position, the "A" &"B" solenoids are energized and the steam header pressure controller is placed in control of the steam dump valves. The Load Rejection and Reactor Trip Controllers are disabled.
: i. ON - There are two basic conditions for Steam Dump Operation:
The steam pressure controller receives a pressure signal from an auctioneered input of PT-1 -33 and 2 new pressure transmitters (See SGL controls).
: 1. < Lo-Lo Tavg
Comparing that signal to the control function's setpoint, an error signal is developed and sent to a common I/P converter to modulate the dump valves. Above Lo-Lo Tavg, all twelve dump valves are subject to modulation.
: 2. > Lo-Lo Tavg
Below Lo-Lo Tavg, only the cooldown valves should modulate if in Bypass. The Steam Dump will be held in pressure mode until the unit is at approximately15%
 
load. Tavg mode will then be selected allowing the controllers for a RX trip or load rejection to be activated.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls                           Specification Engineering                       Upgrade Specification                             Rev. 0001 Specification                                                                         Page 122 of 440 6.2.1     Condenser Steam Dump Control System (continued)
Being in pressure mode controls steam header pressure to allow the dump valves to release enough steam to maintain No Load Tavg.2. ON/OFF/Bypass Interlock (HS-1-103A  
When s Lo-Lo Tavg, the "ON" position prevents energizing the "A" & "B" solenoids. When > Lo-Lo Tavg, the "A" & "B" solenoids can be armed when required
&-103B)i. ON -There are two basic conditions for Steam Dump Operation:
: 3. OFF/Reset - When HS-1-103A & -103B are selected to "OFF," contacts are closed which makes up logic in series with the arming signal logic, and prevents the "A" & "B" solenoids from energizing. Under any plant condition, turning HS                 103A & -103B to off will disable the "A" or "B' solenoids, thereby disabling the steam dump system.
: 1. < Lo-Lo Tavg 2. > Lo-Lo Tavg NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 122 of 440 6.2.1 Condenser Steam Dump Control System (continued)
: 4. Bypass Interlock - The bypass position is used whenever the unit Tavg is s Lo-Lo Tavg. This position arms of the cooldown valves. This allows the cooldown valves to be modulated by being in Steam Pressure Mode.
When s Lo-Lo Tavg, the "ON" position prevents energizing the "A" & "B" solenoids.
F. Steam Dump Valve Grouping For operational purposes, the 12 dump valves are separated into four groups termed "banks." The valves are distributed in banks of three valves each, with the cooldown valves included in the first bank. The number of cooldown valves (3) was determined by the flow capability required to accomplish plant cooldown within a specified period. The controllers are adjusted such that the dump capacity is approximately linear with controller output. The dump valves are modulated one bank at a time. That is, the second bank does not begin to open until the first bank has received a signal to fully open, the third bank does not begin to open until the first and second banks have received a signal to fully open, etc. The sequence for closing the valves is the reverse of the opening sequence, i.e., the fourth bank to open is the first bank to close and the third bank starts to close after the fourth bank has received a signal to fully close, etc. The first two banks to modulate open are also the two banks that are tripped open first, and the last two banks to modulate open are the same two banks that are tripped open last. The 3 valves in the first bank to open are designated as the cooldown dump valves. The input ranges for modulating the dump valves are (Ref. 7.5.2):
When > Lo-Lo Tavg, the "A" & "B" solenoids can be armed when required 3. OFF/Reset  
Bank                             input                       Steam Dump           Westinghouse Valve Demand                 ID No.
-When HS-1-103A  
(full closed to full open)
& -103B are selected to "OFF," contacts are closed which makes up logic in series with the arming signal logic, and prevents the "A" & "B" solenoids from energizing.
First bank (cooldown             10-20 mA                     0% - 25%           PCV-507-A.B.C valves)
Under any plant condition, turning HS-1-103A & -103B to off will disable the "A" or "B' solenoids, thereby disabling the steam dump system.4. Bypass Interlock  
Second bank                     20 - 30 mA                   25% - 50%           TCV-500-A.B.C Third bank                       30 - 40 mA                   50% - 75%           TCV-500-D.E.F Fourth bank                     40 - 50 mA                   75%- 100%           TCV-500-G.H,J Ref. 7.5.2 Westinghouse Precautions, Limitations, and Setpoints (PLS) for Nuclear Steam Supply Systems (NSSS).
-The bypass position is used whenever the unit Tavg is s Lo-Lo Tavg. This position arms of the cooldown valves. This allows the cooldown valves to be modulated by being in Steam Pressure Mode.F. Steam Dump Valve Grouping For operational purposes, the 12 dump valves are separated into four groups termed "banks." The valves are distributed in banks of three valves each, with the cooldown valves included in the first bank. The number of cooldown valves (3) was determined by the flow capability required to accomplish plant cooldown within a specified period. The controllers are adjusted such that the dump capacity is approximately linear with controller output. The dump valves are modulated one bank at a time. That is, the second bank does not begin to open until the first bank has received a signal to fully open, the third bank does not begin to open until the first and second banks have received a signal to fully open, etc. The sequence for closing the valves is the reverse of the opening sequence, i.e., the fourth bank to open is the first bank to close and the third bank starts to close after the fourth bank has received a signal to fully close, etc. The first two banks to modulate open are also the two banks that are tripped open first, and the last two banks to modulate open are the same two banks that are tripped open last. The 3 valves in the first bank to open are designated as the cooldown dump valves. The input ranges for modulating the dump valves are (Ref. 7.5.2): Bank input Steam Dump Westinghouse Valve Demand ID No.(full closed to full open)First bank (cooldown 10-20 mA 0% -25% PCV-507-A.B.C valves)Second bank 20 -30 mA 25% -50% TCV-500-A.B.C Third bank 30 -40 mA 50% -75% TCV-500-D.E.F Fourth bank 40 -50 mA 75%- 100% TCV-500-G.H,J Ref. 7.5.2 Westinghouse Precautions, Limitations, and Setpoints (PLS) for Nuclear Steam Supply Systems (NSSS).
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 123 of 440 6.2.2 Atmospheric Dump Control System (SG PORVs)The controls for the Atmosphere Dump Valves are within the scope of the specification.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification             Rev. 0001 Specification                                                       Page 123 of 440 6.2.2     Atmospheric Dump Control System (SG PORVs)
Each SG has an associated Atmosphere Dump Valve that has single element (Stm Pressure)
The controls for the Atmosphere Dump Valves are within the scope of the specification. Each SG has an associated Atmosphere Dump Valve that has single element (Stm Pressure) Proportional plus Integral control to maintain SG pressure at a defined setpoint. The Atmosphere Dump Valves are normally closed and start opening when the SG pressure increases above setpoint. Each Atmosphere Dump Valve has a handstation on the MCB. The Steam Pressure input signal shall have redundancy and signal validation performed such as Median Signal Selection. This control system can be disabled by a Safety Related signal that vents the air off the control valves allowing them to fail closed.
Proportional plus Integral control to maintain SG pressure at a defined setpoint.
6.3       Applicable Criteria & Standards The steam dump is not essential to the safe operation of the plant; therefore, it is not designed to a safety classification. The steam dump is not required for cooling of the reactor during emergencies, as this function can be performed by the main steam safety and atmospheric relief valves.
The Atmosphere Dump Valves are normally closed and start opening when the SG pressure increases above setpoint.
The following criteria apply to this system.
Each Atmosphere Dump Valve has a handstation on the MCB. The Steam Pressure input signal shall have redundancy and signal validation performed such as Median Signal Selection.
AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (1012/67) are met by the Steam Dump Control System:
This control system can be disabled by a Safety Related signal that vents the air off the control valves allowing them to fail closed.6.3 Applicable Criteria & Standards The steam dump is not essential to the safe operation of the plant; therefore, it is not designed to a safety classification.
Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)
The steam dump is not required for cooling of the reactor during emergencies, as this function can be performed by the main steam safety and atmospheric relief valves.The following criteria apply to this system.AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (1012/67) are met by the Steam Dump Control System: Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical  
Standards: IEEE Std. 279-1971 (Section 4.7)
& Electronics Engineers (IEEE)Standards:
The above Criteria and Standards have been considered in preparing the requirements of this section.
IEEE Std. 279-1971 (Section 4.7)The above Criteria and Standards have been considered in preparing the requirements of this section.6.4 WBN System Diagrams Refer to the following functional Diagrams: Figure 6.1 "Steam Dump Control PID" Figure 6.2 "Condenser Steam Dump Control Parameters" Figure 6.3 "Steam Dump Valve Solenoid Valve Arrangement" Figure 6.4 "Steam Dump Control System Block Diagram".
6.4       WBN System Diagrams Refer to the following functional Diagrams:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 124 of 440 6.4 WBN System Diagrams (continued)
Figure 6.1 "Steam Dump Control PID" Figure 6.2 "Condenser Steam Dump Control Parameters" Figure 6.3 "Steam Dump Valve Solenoid Valve Arrangement" Figure 6.4 "Steam Dump Control System Block Diagram".
Figure 6.1 NPG Site-Specific I WBN Unit 2 NSSS and BOP Controls Specification Engineering I Upgrade Specification Rev. 0001 Specification j Page 125 of 440 6.4 WBN System Diagrams (continued)
 
La~1~~Li 0~IL'I-LU C)z LU La)LU NSSS POWER (Z RATED)Li, In Lfl U)CA ca-cc 0 50 TURBINE -GEN LOAD al (TEMPERATURE ERROR)WHEN AT IS GREATER THAN A PRE-DETERMINED VALUE.A SIGNAL IS GENERATED TO OPEN THE DUMP VALVES.p CONDENSER STEAM DUMP CONTROL PARAMETERS Figure 6.2 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 126 of 440 6.4 WBN System Diagrams (continued) a a a 0 C o,..-a..--.3-~* I- a a b C. n-4 IS n a a I!!0 C[Sn..'a o ~,- .~j a ,- ~.a. a..0-s MI C* a-. 'a a* a* ala o =a e TI I., I..11 SI-.2i a .=j M w.SM a Is-.4 a-C C C I-Figure 6.3 -Steam Dump Block Diagram NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 127 of 440 6.4 WBN System Diagrams (continued)
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls Specification Engineering             Upgrade Specification     Rev. 0001 Specification                                     Page 124 of 440 6.4     WBN System Diagrams (continued)
.4 C 1-z 0 U 0~H-all'~~1 a*Th-fl.1-; .-1 LiL 4.3-.LJ Mill-*jL~'', ., ,..-1-A1 SUL cc CL NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 128 of 440 6.4 WBN System Diagrams (continued)
Figure 6.1
Figure 6.4 -Steam Dump Detail Diagram 6.5 Indicators, Status Lights, and Controls The control system will provide a signal for MCB indication of the magnitude of the signal used to modulate the dump valves.Main Control Room Controls Steam Dump Control Mode 3 Position Switch A three position switch on the MCB will input into the control system for the selection of the mode of steam dump control.The switch positions are: RESET (Momentary and spring return to Tavg)TAVG STEAM PRESS Steam Dump Control Interlock 3 Position Switch A three position switch on the MCB will input into the control system for the manual bypass of the low temperature interlock.
 
The bypass must be momentary contact only.The required positions are: OFF (Reset Tavg Bypass)ON BYPASS INTERLOCK (Momentary and spring return to ON)Manual control of the steam header pressure controller setpoint is provided on the MCB.The control system will provide digital outputs for MCB status indication of permissive and interlock circuits C-7 and C-9 on the MCB.The control system will provide digital outputs for MCB status indication of the bypass of the low-low T(avg) interlock (P-12).
NPG Site-Specific I       WBN Unit 2 NSSS and BOP Controls         Specification Engineering         I           Upgrade Specification             Rev. 0001 Specification j                                                   Page 125 of 440 6.4       WBN System Diagrams (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 129 of 440 6.5 Indicators, Status Lights, and Controls (continued)
La~
Interlocks and Permissives nC% L, ian Ci= n--n I Q +_M Y., M. LU P-12 a) Blocks steam dump b) Allows manual bypass of steam dump block for the cooldown valves only c) Defeats the manual bypass of steam dump block.Makes steam dump valves available for either tripping or modulation Blocks steam dump to condenser 2/4 low-low Tavg below setpoint Protection (redundant circuitry)
1~~
C-7 C-9 3/4 low-low Tavg Protection above setpoint (redundant circuitry) 1/1 time derive- Control (not five (absolute redundant value) of turbine circuitry)
Li 0~
Impulse chamber pressure (decrease only) above setpoint Any condenser Control (not pressure above redundant setpoint or all circuitry circulation water pump breakers open i. HI and HI-HI bistable outputs are provided for both the plant trip and loss of load control channels.
IL' I-LU C) z LU La)
Each of the HI and Hi-HI bistables enables one half of the condenser dump valves to trip fully open in three seconds when the setpoint of that particular bistable is reached.Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications.
LU NSSS POWER (Z RATED)
See I/O listing.6.6 Alarms and Annunciators Main Control Room Annunciation The following conditions shall be identified to the unit operator through the annunciation system: C-7 Loss of Load Interlock C-9 Condenser Interlock Computer Monitoring The plant process computer shall be used to monitor steam dump control information.
Li, In Lfl U)
CA ca-cc 0           50 TURBINE - GEN LOAD al   (TEMPERATURE ERROR)
WHEN AT IS GREATER THAN A PRE-DETERMINED VALUE.
A SIGNAL IS GENERATED TO OPEN THE DUMP VALVES.
CONDENSER   STEAM DUMP CONTROL PARAMETERS p
Figure 6.2
 
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification             Rev. 0001 Specification                                                     Page 126 of 440 6.4       WBN System Diagrams (continued) a b a                       C.
                                                  -4 IS n                  0        o
                                                                                          'a
                                                                                          ~
a                        n a a                           ,-   .~j 0
a                     I!!                     C[
: a. a.
                                                                                  .0-s a
                                                                                          ~.
C MI C
* a o,..                                                      -.   'a a
I.,                  -  a..-                                           Sn..
* a
                          -. 3
* ala
                          - ~                                                        o =
* I- a a     e I..                                                                           TI 11 a
SI-
                                                                                                  .2i
                                                                                              =j   M a
                                          -C
: w.                       C C
SM a       I-Is-
                                .4 Figure 6.3 - Steam Dump Block Diagram
 
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls           Specification Engineering             Upgrade Specification               Rev. 0001 Specification                                                 Page 127 of 440 6.4       WBN System Diagrams (continued)
                                                    *Th-fl
                                                    .1-; .- 1 LiL     4
                                                        .3-.
            .4 C
1-z 0
U 0~
LJ H-all
                      '~~1 a
Mill-
                    *jL~
A1 SUL cc CL 1-
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 128 of 440 6.4       WBN System Diagrams (continued)
Figure 6.4 - Steam Dump Detail Diagram 6.5     Indicators, Status Lights, and Controls The control system will provide a signal for MCB indication of the magnitude of the signal used to modulate the dump valves.
Main Control Room Controls Steam Dump Control Mode 3 Position Switch A three position switch on the MCB will input into the control system for the selection of the mode of steam dump control.
The switch positions are:           RESET (Momentary and spring return to Tavg)
TAVG STEAM PRESS Steam Dump Control Interlock 3 Position Switch A three position switch on the MCB will input into the control system for the manual bypass of the low temperature interlock. The bypass must be momentary contact only.
The required positions are:         OFF (Reset Tavg Bypass)
ON BYPASS INTERLOCK (Momentary and spring return to ON)
Manual control of the steam header pressure controller setpoint is provided on the MCB.
The control system will provide digital outputs for MCB status indication of permissive and interlock circuits C-7 and C-9 on the MCB.
The control system will provide digital outputs for MCB status indication of the bypass of the low-low T(avg) interlock (P-12).
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                     Specification Engineering                     Upgrade Specification                       Rev. 0001 Specification                                                                 Page 129 of 440 6.5       Indicators, Status Lights, and Controls (continued)
Interlocks and Permissives nC% L, ian           Ci
                                  =M n--n                 I Y.,               Q M. +_ LU P-12                   a) Blocks steam dump   2/4 low-low Tavg    Protection below setpoint      (redundant circuitry) b) Allows manual bypass of steam dump block for the cooldown valves only c) Defeats the manual   3/4 low-low Tavg    Protection bypass of steam         above setpoint      (redundant dump block.                                 circuitry)
C-7                    Makes steam dump valves 1/1 time derive-    Control (not available for either   five (absolute      redundant tripping or modulation value) of turbine    circuitry)
Impulse chamber pressure (decrease only) above setpoint C-9                    Blocks steam dump to   Any condenser       Control (not condenser              pressure above      redundant setpoint or all      circuitry circulation water pump breakers open
: i. HI and HI-HI bistable outputs are provided for both the plant trip and loss of load control channels. Each of the HI and Hi-HI bistables enables one half of the condenser dump valves to trip fully open in three seconds when the setpoint of that particular bistable is reached.
Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.
6.6        Alarms and Annunciators Main Control Room Annunciation The following conditions shall be identified to the unit operator through the annunciation system:
C-7 Loss of Load Interlock C-9 Condenser Interlock Computer Monitoring The plant process computer shall be used to monitor steam dump control information.
The plant computer shall be used to generate critical alarm conditions.
The plant computer shall be used to generate critical alarm conditions.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 130 of 440 6.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-91 59 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.A. For a 50% load reduction, the Load Rejection Controller in conjunction with the Rod Control System must: 1) Prevent a Reactor trip and 2) Prevent actuation of the SG Safety Valves.B. For a Plant or Turbine Trip from 100% power, the Plant Trip Controller in conjunction with the Rod Control System must; 1) Prevent actuation of the SG Safety Valves and to minimize secondary and primary transients and 2) Result in a RCS Overcooling transient where Tavg drops below XXXF or Loss of Shutdown Margin.C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings.
 
This performance data shall be factored into the performance limit acceptance criteria.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 130 of 440 6.7         Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-91 59 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.
The control system open loop response is defined as the time delay from the change of process parameters to final output device response.6.8 Specific Requirements Design Failure Modes Inadvertent opening of the dump valves can result in a plant trip or an uncontrolled cooldown.
A. For a 50% load reduction, the Load Rejection Controller in conjunction with the Rod Control System must: 1) Prevent a Reactor trip and 2) Prevent actuation of the SG Safety Valves.
Therefore, the steam dump valves are high quality valves structurally arranged for energize-to-open operation and fail closed on loss of air pressure or loss of signal. In addition, redundant solenoid valves are provided to vent the actuating air when a block signal is transmitted to the valve from the protection system.Control System Segmentation The steam dump control system shall be segmented from the Steam Generator Level control system and the Rod Control System so that a failure/software problem in a single processor pair will not result in an overcooling transient as analyzed in the WBN Chapter 15 Safety Analysis such as SGL control valves failing open, Rods inserting, and Condenser Dump valves failing open concurrently.
B. For a Plant or Turbine Trip from 100% power, the Plant Trip Controller in conjunction with the Rod Control System must; 1) Prevent actuation of the SG Safety Valves and to minimize secondary and primary transients and 2) Result in a RCS Overcooling transient where Tavg drops below XXXF or Loss of Shutdown Margin.
In addition, the steam dump control system shall be segmented from the Atmospheric Dump control system so that a failure/software problem in a single processor pair will not: 1) prevent at least one of the systems from operating thus protecting the SG Safety valves from opening; and 2) cause spurious opening of both Condenser Dump and Atmospheric Dump valves failing open concurrently.
C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.
SNPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 131 of 440 6.9 Accuracy Overall channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
6.8         Specific Requirements Design Failure Modes Inadvertent opening of the dump valves can result in a plant trip or an uncontrolled cooldown. Therefore, the steam dump valves are high quality valves structurally arranged for energize-to-open operation and fail closed on loss of air pressure or loss of signal. In addition, redundant solenoid valves are provided to vent the actuating air when a block signal is transmitted to the valve from the protection system.
Rack environmental effects are not included in channel accuracy.
Control System Segmentation The steam dump control system shall be segmented from the Steam Generator Level control system and the Rod Control System so that a failure/software problem in a single processor pair will not result in an overcooling transient as analyzed in the WBN Chapter 15 Safety Analysis such as SGL control valves failing open, Rods inserting, and Condenser Dump valves failing open concurrently. In addition, the steam dump control system shall be segmented from the Atmospheric Dump control system so that a failure/software problem in a single processor pair will not: 1) prevent at least one of the systems from operating thus protecting the SG Safety valves from opening; and 2) cause spurious opening of both Condenser Dump and Atmospheric Dump valves failing open concurrently.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.The control accuracy does not include errors for the time in which the system is in a non-steady state condition.
 
Trip accuracy includes comparator accuracy, channel accuracy for each input and rack environmental effects. Trip accuracy is the tolerance within which a comparator is guaranteed to trip and includes all instrument errors but no process effects such as flow streaming.
Engineering                    Upgrade Specification                  Rev. 0001 SNPG Site-Specific         WBN Unit 2 NSSS and SOP Controls               Specification Specification                                                           Page 131 of 440 6.9         Accuracy Overall channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.
The control accuracy does not include errors for the time in which the system is in a non-steady state condition. Trip accuracy includes comparator accuracy, channel accuracy for each input and rack environmental effects. Trip accuracy is the tolerance within which a comparator is guaranteed to trip and includes all instrument errors but no process effects such as flow streaming.
Accuracy Requirement for Normal and Abnormal Operating Conditions
Accuracy Requirement for Normal and Abnormal Operating Conditions
: i. Control accuracy of +/- 13.7% of total dump capacity on the basis of Tavg -Tref deviation (load rejection) and control accuracy of 7.7% of total dump capacity on the basis of Tavg-552&deg;F deviation (reactor trip).2. Control accuracy of +/- 25 psi on the steam header pressure.3. Trip accuracy of +/- 4.3 0 F on the basis of Tavg -Tref deviation (load rejection) and trip accuracy of +/-2.6 0 F on the basis of Tavg -Tno load deviation (reactor trip) for steam dump valves tripping open, 4. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above requirements of this section.6.10 Range Tavg 530 to 630&deg;F Tref 530 to 630&deg;F (Note that Tref is based upon Turbine Impulse pressure 0 -100% = 557 0 F- 588.2&deg;F)Turbine impulse chamber Equivalent of 0 to 120% of maximum calculated turbine pressure load Steam Header Pressure 0 to 1300 psig NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 132 of 440 6.11 Inputs Reference drawings: Westinghouse Process Control Block Diagrams 108D408-series Westinghouse Functional Diagram 5655D87-10 WBN 47W61 0-1 -series WBN 47W61 1-1 -series Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.6.12 Outputs The outputs are documented in Appendix E Additional information for these inputs are documented in Appendix E 6.13 Input Signal Validation The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
: i. Control accuracy of +/- 13.7% of total dump capacity on the basis of Tavg - Tref deviation (load rejection) and control accuracy of 7.7% of total dump capacity on the basis of Tavg-552&deg;F deviation (reactor trip).
This is also used in Rod Control, See Section 5.13 for details Tavg Lp 1 Tavg Lp 2 Tavg Lp 3 Tavg Lp 4 Highest Tavg Loop-4 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 133 of 440 6.13 Input Signal Validation (continued)
: 2. Control accuracy of +/- 25 psi on the steam header pressure.
The Turbine Impulse Pressure input which is also used to generate the Tref signal shall consist of 3 input signals transmitter will be added to provide redundancy.
: 3. Trip accuracy of +/- 4.3 0 F on the basis of Tavg - Tref deviation (load rejection) and trip accuracy of +/-2.60 F on the basis of Tavg - Tno load deviation (reactor trip) for steam dump valves tripping open,
The average of two Turbine Impulse Pressure signals shall be used with input signal validation to prevent an input failure from resulting in a plant transient.
: 4. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above requirements of this section.
To accomplish this, a third diverse signal that is representative to Turbine Impulse Pressure will be determined to function as a voter if the two Turbine Impulse Pressure signals deviate by a TBD amount. This is also used in the SGL Control System, See Section 4.13 for details For steam header pressure, provide median signal select as follows: P-1-33 New PT IF New PT I MSS I 1, Individual channel failure-alarm.
6.10     Range Tavg                           530 to 630&deg;F Tref                           530 to 630&deg;F (Note that Tref is based upon Turbine Impulse pressure 0 - 100% = 5570F- 588.2&deg;F)
: 2. Two channel failure-manual hold with operator selection back to auto.3. Three channel failure-manual hold.6.14 Time Response 6.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Steam Dump Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Steam Dump Control System.I NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 134 of 440 6.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Steam Dump Control System shall not exceed 250 milli-seconds.
Turbine impulse chamber       Equivalent of 0 to 120% of maximum calculated turbine pressure                       load Steam Header Pressure         0 to 1300 psig
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Steam Dump Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
 
6.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.6.14.4 Manual Control Response The total delay for all manual component control signals of Steam Dump Control System shall be no greater than 1 second.6.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.6.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 132 of 440 6.11     Inputs Reference drawings:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 135 of 440 6.17 Programmed Functions The Plant Trip and Load Rejection Programmed setpoint functions:
Westinghouse Process Control Block Diagrams 108D408-series Westinghouse Functional Diagram 5655D87-10 WBN 47W61 0-1 -series WBN 47W61 1-1 -series Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
LOAD HEJECTION COnRQLOLLER l0O% Stem Dump CadtI-I~ -*,0 ---------0-L-L 5 103 15.6Lna Spahi (Tim T.*i 'F PLANT TRIP CONTROLLER I r i U i C I IIWSterUw1vC4D.a$..r~" ,~;2 I b J ThmporUt S&ip&lh ,'w T l adx '.r 6.18 Setpoints The following setpoint information is not WBN Unit 2 specific.
6.12     Outputs The outputs are documented in Appendix E Additional information for these inputs are documented in Appendix E 6.13     Input Signal Validation The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection. This is also used in Rod Control, See Section 5.13 for details Tavg Lp 1 Highest Tavg Loop Tavg Lp 2 Tavg Lp 3     -4 Tavg Lp 4
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.Variable Range of Setting NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 136 of 440 6.18 Setpoints (continued)
 
Load Rejection Control Channel Temperature Error Bistables (High and High-High) 2 to 40&deg;F Loss of Load Bistables 5 to 50%Plant Trip Control Channel Temperature Error Bistables (High and High-High) 2 to 40 0 F All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpolnt can be obtained within +/- 10% of the setpoint value.WBN UI (Post SGR) PLS 2. Steam Dumn Control A. Proportional gain in periett uf total dump capacity por 0 F Loss of.Ioad-cotg.allpr  
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 133 of 440 6.13     Input Signal Validation (continued)
,3;MIF Plant trp controller (TC-5.OD) 3.aIOS&deg;,,PF NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 137 of 440 6.18 Setpoints (continued)
The Turbine Impulse Pressure input which is also used to generate the Tref signal shall consist of 3 input signals transmitter will be added to provide redundancy. The average of two Turbine Impulse Pressure signals shall be used with input signal validation to prevent an input failure from resulting in a plant transient. To accomplish this, a third diverse signal that is representative to Turbine Impulse Pressure will be determined to function as a voter ifthe two Turbine Impulse Pressure signals deviate by a TBD amount. This is also used in the SGL Control System, See Section 4.13 for details For steam header pressure, provide median signal select as follows:
B_ Lead tirns ccritant (TY-500)C, Lag tirne constant frY-see)T1 2 11 9seconds:P T13 5 3seconds"r D. Lleadwnd, steam dump controller tor loss of load (TC-500A)E- Deadband steam durrmp cotroller for plant trip (TO -500D)F. Hi-I (T_.,-T,)
P-1-33             New PT               New PT I       MSS IF          I 1, Individual channel failure-alarm.
valve trip open fTB-500B)G. Hi-2 valve trip open (TB-0oC)H. W-1 -T..i) valv, trip open (T.-SOCE)1. HI-2 (- .J- v,,) alve trip open (rB5SO5F).j. Header pressure controller (PC-507)sex pressure (start opening)proportional band (based on total condenser dump capacity)reset lime constant K. Steam generateo iele valve contiollers (PC-516, PC-526, PC-536. PC-546)proportioral band (valve lull Arokpk)reset time constant sOl pressure (start oponing)15.6'F"'11. 3T ')1092 psigl'>100 psi-: 180 seconds':'
: 2. Two channel failure-manual hold with operator selection back to auto.
65 psi"'TI, 120 seorids"'1125 pslg NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 138 of 440 6.19 Requirements for Test and Calibration With the exception of the Low-Low Tavg interlock, the steam dump control system is not a protection system, and thus, does not require the capability of being tested at power. The Tavg interlock is part of the protection system and must be capable of being tested at power.6.20 Requirements for Associated Equipment Steam Dump Valves All steam dump valves should fall closed in the event of a loss of control system power.Condenser Steam Dump Requirements and Arrangement The steam dump system uses modulating air-operated valves which fail closed in the event of loss of electrical power or air supply.Condenser Steam Dump Valve Design Requirements All 12 steam dump valves are capable of: 1. Flow per valve at a valve inlet pressure of 900 psig and a valve outlet pressure of 250 psig -532,170 lb/hr.2. Maximum flow per valve at a valve inlet pressure of 1185 psig and a valve outlet pressure of 250 psig -970,000 lb/hr.3. Valve Trip Open Time -Going from full closed to full open, within 3 seconds after receiving a trip open signal, over the steam pressure range from 1185 psig to 785 psig.4. Valve Trip Close Time -Going from full open to full closed, within 5 seconds after receiving a trip closed signal, over the steam pressure range from 100 psia to the main steam system design pressure.5. Valve Stroke Time -Being modulated, with a maximum full stroke time of 20 seconds, over the steam pressure range from 100 psia to the main steam system design pressure.6. Valve Backpressure  
: 3. Three channel failure-manual hold.
-For steam dump flow varying between zero and full flow, valve backpressure will vary between 2 in. Hga and 250 psig.
6.14     Time Response 6.14.1     Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals   I of the Steam Dump Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s),
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 139 of 440 7.0 PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQUIREMENTS 7.1 System Description The pressurizer (PZR) pressure and water level control systems are composed of those controllers and associated hardware whose function is to maintain a programmed pressure and water level in the pressurizer during steady state operation.
and also applies to interlock and permissive signals calculated outside of but utilized within the Steam Dump Control System.
The system also maintains the pressure and water level in the pressurizer within operating bounds during normal plant transients.
 
Pressurizer pressure is controlled by use of the pressurizer spray valves, relief valves, proportional heaters and backup heaters. Pressurizer water level is controlled by means of the reactor coolant charging and letdown flows. Indicators are provided for monitoring system operation.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 134 of 440 6.14.2   Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Steam Dump Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Steam Dump Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
6.14.3     Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.
7.2 Pressurizer Control System 7.2.1 Level Control The water inventory in the RCS is maintained by the Chemical and Volume Control System. During normal plant operation, the pressurizer level is controlled by the charging flow which is controlled by the pressurizer level controller.
6.14.4     Manual Control Response The total delay for all manual component control signals of Steam Dump Control System shall be no greater than 1 second.
The pressurizer water level is programmed as a function of the Tavg. The pressurizer water level decreases as the load is reduced from full load. The decrease is the result of coolant contraction following a programmed coolant temperature reduction as the reactor power decreases.
6.15       Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
The programmed level is designed to match as nearly as possible the level changes resulting from the coolant temperature changes. To permit manual control of the pressurizer level during startup and shutdown operations, the charging flow can be manually regulated from the MCR.A functional block diagram of the PLCS is shown in Figure 7.1, with the system setpoints listed on Table 7.1.* IGNAB CHARGING TvS 7: .1 3 ) FLOW u ,CONTROL BACKUP NEATR CONTROL Figure 7.1 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 140 of 440 7.2.1 Level Control (continued)
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
The input to the level controller is obtained by comparing the measured level to a programmed reference level signal which varies as a function of Tavg. The resulting error signal generates a signal that actuates the backup heaters on high pressurizer water level and feeds a PID controller which, in turns, controls the charging flow. This controller prevents the charging flow from reacting to small, temporary perturbations while eliminating any steady-state level error. The controller transfer function is as follows: K 2 2 I+ 1 +T4S T23S The output of this controller is the charging flow demand signal.Instrumentation Details a. Any one of the three level transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder.
6.16       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
This same recorder is used to display a programmed PZR reference liquid level signal. The program level is a function of an auctioneered T-avg. The charging and letdown flows are to be manipulated to maintain proper PZR level.b. The Pressurizer Level Control is divided up into two groupings, Charging Flow control and Letdown Isolation control. These two groupings are defined as follows: I. The first grouping provides a signal to the level controller for regulating charging flow. This signal is also compared to the programmed reference level and actuates a high level alarm if the actual level exceeds the reference level. If the actual level is lower than the reference level, a low alarm is actuated.2. The second grouping provides a signal which will actuate an alarm when the level decreases to a fixed level setpoint.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
The same signal will trip the PZR heaters "off' and close the letdown line isolation valves.c. A four position selector switch on the MCB will provide four combinations of level input signals for Charging flow control and Letdown control. Boolean logic within the control system will be used to implement the control selection.
 
: 1. The AUTO position places the input selection in automatic.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls                         Specification Engineering                           Upgrade Specification                       Rev. 0001 Specification                                                                       Page 135 of 440 6.17       Programmed Functions The Plant Trip and Load Rejection Programmed setpoint functions:
The Median Select function selects for control purposes the middle value of the 3 input signals.
LOAD HEJECTION COnRQLOLLER l0O% Stem Dump     CadtI-I~       -
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 141 of 440 7.2.1 Level Control (continued)
                ,0   ---------
: 2. The LT-68-339/LT-68-320 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-320 as the input control signal to Letdown Isolation controls.3. The LT 68-339/LT 68-335 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.4. The LT 68-3351LT 68-320 position places LT-68-320 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.A fourth independent PZR level transmitter and control loop is calibrated for low temperature conditions.
0                                     -L-L 5               103                 15.6 Twu*lmue Lna Spahi (Tim         T.*i 'F PLANT TRIP CONTROLLER I               IIWSterUw1vC4D.a$..r~"               ,~;2 r
It provides level indication during startup, shutdown, and refueling operations.
iU i
A PRIM ParU PpiMz ,LIA-4 1.94-L3 L?44J.U--S..... ....~j 1 2 2 A Gonai 133 339 320 AM lonkrm l 320 33 5 A'..&#xb6; MCI?*46339E Vbt.Conitral Diagram Figure 7.2a INPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 142 of 440 7.2.1 Level Control (continued)
C I                                                           J I
Figure 7.2b Charging Flow Control NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 143 of 440 7.2.1 Level Control (continued)
b ThmporUt r*lraS&ip&lh   T
The following setpoint information is not WBN Unit 2 specific.
                                                                ,'w   l adx '.r 6.18     Setpoints The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.Pressurizor Level Control A. Level program as funclion of T, 1 (TC-4128)1 For full load T., = 588.2 (high limit)2. For full load T., -586.2 (high limil)3. For T., = -557F (low limit)62% of level span"; (')59.6% of level span'4 1 (*)25% of level span'4r (V)(Program is linear frawm 5571F to full load T 0.)The actual level cart be +6.6% of level span at 62% level. A positive uncertainty is not necessary for safety analysis and, therefore, a negative pomcont of level span is not provided.B. Low-Low level heater cutout (letdown Ono isolation)(LB-4590 and LB-460D)17 percent of level spin The PD Charging pump has been disabled so item C is no longer valid and has been deleted.D. Row controller (FC-121)I. Proportional gain 2. Reset time constant 3. Low Limit (HY-121)1 % value demand?% charging flow 30 seconds 55 gaVmmn Table 7.1 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 144 of 440 7.2.2 Pressure Control During normal operation, RCS pressure is maintained by the pressurizer heater controller at or near 2235 psig, while the steady state PZR liquid level is controlled by the CVCS charging flow. When the reactor power level is less than 15 percent, the reactor is controlled manually.
Variable Range of Setting
At power above 15 percent, the RCS controls will automatically maintain, by control rod movement, an average coolant temperature at a value which is a function of the power/load relationships.
 
RCS temperature can also be controlled by manually moving the control rods or adjusting the chemical shim. One hundred percent power Tavg is 586.2 0 F (WBN Unit I value). In hot standby, two RCS loops provide sufficient heat removal capability for removing core decay heat even in the event of a rod bank withdrawal accident; however, a single RCS loop provides sufficient heat removal if a bank withdrawal accident cannot be prevented, i. e., by opening the Reactor Trip breakers.Design Basis of the Pressurizer Pressure Control System The Pressurizer Pressure Control System (PPCS) maintains pressure at the set value by 4 means: 1. Spray Valves 2. Relief Valves 3. Proportional Heaters 4. Back-up Heaters Together, the heaters, spray valves and relief valves maintain the pressure at the setpoint value and present reactor trip as a result of pressure variations caused by design transients.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls             Specification Engineering                         Upgrade Specification             Rev. 0001 Specification                                                         Page 136 of 440 6.18     Setpoints (continued)
Load Rejection Control Channel Temperature Error Bistables (High and High-High)                     2 to 40&deg;F Loss of Load Bistables                   5 to 50%
Plant Trip Control Channel Temperature Error Bistables (High and High-High)                     2 to 400 F All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpolnt can be obtained within +/- 10% of the setpoint value.
WBN UI (Post SGR) PLS
: 2. Steam Dumn Control A. Proportional gain in periett uf total dump capacity por 0F Loss of.Ioad-cotg.allpr (T'.*-OA)        ,3;MIF Plant trp controller (TC-5.OD)         3.aIOS&deg;,,PF
 
NPG Site-Specific       WBN Unit 2 NSSS and SOP Controls                     Specification Engineering                       Upgrade Specification                     Rev. 0001 Specification                                                               Page 137 of 440 6.18     Setpoints (continued)
B_   Lead tirns ccritant (TY-500)                                         11 9seconds:P T1 2 C,   Lag tirne constant frY-see)                                 T13   5 3seconds"r D. Lleadwnd, steam dump controller tor loss of load (TC-500A)
E-   Deadband steam durrmp cotroller for plant trip (TO -500D)
F. Hi-I (T_.,-T,) valve trip open fTB-500B)
G. Hi-2 (r*;-T.,)    valve trip open (TB-0oC)
H. W-1       -T..i)   valv, trip open (T.-SOCE)                                       15.6'F"'
: 1. HI-2 (-       .J-     v,,)
alve trip open (rB5SO5F)                                       11. 3T ')
                    .j. Header pressure controller (PC-507) sex pressure (start opening)                     1092 psigl'>
proportional band (based on total condenser dump capacity)                         100 psi-:
reset lime constant                             180 seconds':'
K. Steam generateo iele valve contiollers (PC-516, PC-526, PC-536. PC-546) proportioral band (valve lull Arokpk)             65 psi"'
reset time constant                         TI,    120 seorids"'
sOl pressure (start oponing)                       1125 pslg
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls              Specification Engineering                    Upgrade Specification                  Rev. 0001 Specification                                                        Page 138 of 440 6.19    Requirements for Test and Calibration With the exception of the Low-Low Tavg interlock, the steam dump control system is not a protection system, and thus, does not require the capability of being tested at power. The Tavg interlock is part of the protection system and must be capable of being tested at power.
6.20      Requirements for Associated Equipment Steam Dump Valves All steam dump valves should fall closed in the event of a loss of control system power.
Condenser Steam Dump Requirements and Arrangement The steam dump system uses modulating air-operated valves which fail closed in the event of loss of electrical power or air supply.
Condenser Steam Dump Valve Design Requirements All 12 steam dump valves are capable of:
: 1. Flow per valve at a valve inlet pressure of 900 psig and a valve outlet pressure of 250 psig - 532,170 lb/hr.
: 2. Maximum flow per valve at a valve inlet pressure of 1185 psig and a valve outlet pressure of 250 psig - 970,000 lb/hr.
: 3. Valve Trip Open Time - Going from full closed to full open, within 3 seconds after receiving a trip open signal, over the steam pressure range from 1185 psig to 785 psig.
: 4. Valve Trip Close Time - Going from full open to full closed, within 5 seconds after receiving a trip closed signal, over the steam pressure range from 100 psia to the main steam system design pressure.
: 5. Valve Stroke Time - Being modulated, with a maximum full stroke time of 20 seconds, over the steam pressure range from 100 psia to the main steam system design pressure.
: 6. Valve Backpressure - For steam dump flow varying between zero and full flow, valve backpressure will vary between 2 in. Hga and 250 psig.
 
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                           Page 139 of 440 7.0       PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQUIREMENTS 7.1         System Description The pressurizer (PZR) pressure and water level control systems are composed of those controllers and associated hardware whose function is to maintain a programmed pressure and water level in the pressurizer during steady state operation.
The system also maintains the pressure and water level in the pressurizer within operating bounds during normal plant transients. Pressurizer pressure is controlled by use of the pressurizer spray valves, relief valves, proportional heaters and backup heaters. Pressurizer water level is controlled by means of the reactor coolant charging and letdown flows. Indicators are provided for monitoring system operation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.
7.2         Pressurizer Control System 7.2.1     Level Control The water inventory in the RCS is maintained by the Chemical and Volume Control System. During normal plant operation, the pressurizer level is controlled by the charging flow which is controlled by the pressurizer level controller. The pressurizer water level is programmed as a function of the Tavg. The pressurizer water level decreases as the load is reduced from full load. The decrease is the result of coolant contraction following a programmed coolant temperature reduction as the reactor power decreases. The programmed level is designed to match as nearly as possible the level changes resulting from the coolant temperature changes. To permit manual control of the pressurizer level during startup and shutdown operations, the charging flow can be manually regulated from the MCR.
A functional block diagram of the PLCS is shown in Figure 7.1, with the system setpoints listed on Table 7.1.
* IGNAB CHARGING TvS                                       . 7: 3 1 )       FLOW u             ,CONTROL NEATR CONTROL BACKUP Figure 7.1
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 140 of 440 7.2.1     Level Control (continued)
The input to the level controller is obtained by comparing the measured level to a programmed reference level signal which varies as a function of Tavg. The resulting error signal generates a signal that actuates the backup heaters on high pressurizer water level and feeds a PID controller which, in turns, controls the charging flow. This controller prevents the charging flow from reacting to small, temporary perturbations while eliminating any steady-state level error. The controller transfer function is as follows:
K 22 I+     1 +T4S T23S The output of this controller is the charging flow demand signal.
Instrumentation Details
: a. Any one of the three level transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder. This same recorder is used to display a programmed PZR reference liquid level signal. The program level is a function of an auctioneered T-avg. The charging and letdown flows are to be manipulated to maintain proper PZR level.
: b. The Pressurizer Level Control is divided up into two groupings, Charging Flow control and Letdown Isolation control. These two groupings are defined as follows:
I. The first grouping provides a signal to the level controller for regulating charging flow. This signal is also compared to the programmed reference level and actuates a high level alarm if the actual level exceeds the reference level. If the actual level is lower than the reference level, a low alarm is actuated.
: 2. The second grouping provides a signal which will actuate an alarm when the level decreases to a fixed level setpoint. The same signal will trip the PZR heaters "off' and close the letdown line isolation valves.
: c. A four position selector switch on the MCB will provide four combinations of level input signals for Charging flow control and Letdown control. Boolean logic within the control system will be used to implement the control selection.
: 1. The AUTO position places the input selection in automatic. The Median Select function selects for control purposes the middle value of the 3 input signals.
 
NPG Site-Specific                 WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                               Upgrade Specification                 Rev. 0001 Specification                                                                     Page 141 of 440 7.2.1     Level Control (continued)
: 2. The LT-68-339/LT-68-320 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-320 as the input control signal to Letdown Isolation controls.
: 3. The LT 68-339/LT 68-335 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.
: 4.     The LT 68-3351LT 68-320 position places LT-68-320 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.
A fourth independent PZR level transmitter and control loop is calibrated for low temperature conditions. It provides level indication during startup, shutdown, and refueling operations.
A                             PRIM ParU   PpiMz
                              ,LIA-4                       1.94-L3 L?44J.U
                                                                                      -- S
                  ~j 1
Gonai 133 2
339 2
320 A
AM                                 .....
lonkrm320
                                    &#xb6; l         33   5   A'..
MCI
                      ?*46339E Vbt.
Conitral Diagram Figure 7.2a
 
INPG Site-Specific     WBN Unit 2 NSSS and BOP Controls Specification Engineering               Upgrade Specification     Rev. 0001 Specification                                         Page 142 of 440 7.2.1   Level Control (continued)
Figure 7.2b Charging Flow Control
 
NPG Site-Specific               WBN Unit 2 NSSS and BOP Controls                             Specification Engineering                               Upgrade Specification                             Rev. 0001 Specification                                                                               Page 143 of 440 7.2.1     Level Control (continued)
The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
Pressurizor Level Control A. Level program as funclion of T, 1 (TC-4128) 1       For full load T., = 588.2                         62% of level (high limit)                                       span"; (')
: 2.     For full load T., - 586.2                         59.6% of level (high limil)                                       span'41 (*)
: 3.     For T., =-557F                                     25% of level (low limit)                                       span'4r(V)
(Program is linear frawm5571F to full load T0 .)
The actual level cart be +6.6% of level span at 62% level. A positive uncertainty is not necessary for safety analysis and, therefore, a negative pomcont of level span is not provided.
B.     Low-Low level heater cutout (letdown Ono isolation)
(LB-4590 and LB-460D)                                     17 percent of level spin The PD Charging pump has been disabled so item C is no longer valid and has been deleted.
D.     Row controller (FC-121)
I.     Proportional gain                                 1% value demand?
                                                                                % charging flow
: 2.       Reset time constant                               30 seconds
: 3.     Low Limit (HY-121)                                 55 gaVmmn Table 7.1
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 144 of 440 7.2.2     Pressure Control During normal operation, RCS pressure is maintained by the pressurizer heater controller at or near 2235 psig, while the steady state PZR liquid level is controlled by the CVCS charging flow. When the reactor power level is less than 15 percent, the reactor is controlled manually. At power above 15 percent, the RCS controls will automatically maintain, by control rod movement, an average coolant temperature at a value which is a function of the power/load relationships. RCS temperature can also be controlled by manually moving the control rods or adjusting the chemical shim. One hundred percent power Tavg is 586.2 0 F (WBN Unit I value). In hot standby, two RCS loops provide sufficient heat removal capability for removing core decay heat even in the event of a rod bank withdrawal accident; however, a single RCS loop provides sufficient heat removal if a bank withdrawal accident cannot be prevented, i. e., by opening the Reactor Trip breakers.
Design Basis of the Pressurizer Pressure Control System The Pressurizer Pressure Control System (PPCS) maintains pressure at the set value by 4 means:
: 1. Spray Valves
: 2. Relief Valves
: 3. Proportional Heaters
: 4. Back-up Heaters Together, the heaters, spray valves and relief valves maintain the pressure at the setpoint value and present reactor trip as a result of pressure variations caused by design transients.
Description of the Pressurizer Pressure Control System Figure 7.3 is a functional block diagram of the PPCS. The PPCS setpoints are listed in Table 7.2. The pressurizer pressure signal feeds a PID controller of the following type:
Description of the Pressurizer Pressure Control System Figure 7.3 is a functional block diagram of the PPCS. The PPCS setpoints are listed in Table 7.2. The pressurizer pressure signal feeds a PID controller of the following type:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 145 of 440 7.2.2 Pressure Control (continued)
 
IUUENCC-K 2 1 SPRA1 CONTROL PuO~h? MCAL MEATE t CONTROL HEATER COlTIOL POWER RELIEF VALVE III CONTIOL PMWL[ E LIEF VALV[ 1 2 COINTROL Figure 7.3 1+ + T22s"1 2 1 s Before being used for: 1. Control of the proportional heaters;2. Control of the back-up heaters;3. Control of the spray valves; and 4. Control of one of the two relief valves (the second relief valve is controlled from an uncompensated pressure signal)During steady state operation, the PPCS normally controls only the proportional heaters to compensate for minor pressure fluctuations.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                         Upgrade Specification               Rev. 0001 Specification                                                           Page 145 of 440 7.2.2 Pressure Control (continued)
The proportional heaters will continuously operate at a low level to compensate for the continuous spray rate (approximately 1 gpm) and pressurizer heat losses.If the compensated error signal (P -Pr) indicates a pressure higher than a predetermined setpoint, proportional spray is initiated and will increase with the pressure until the maximum spray rate is reached. The deadband between the initiation of the proportional spray and turn-off of the proportional heaters prevents frequent operation of the proportional spray valves during minor system pressure variations.
IUUENCC PIESSU*E -
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 146 of 440 7.2.2 Pressure Control (continued)
SPRA1CONTROL PuO~h? MCAL MEATE t CONTROL HEATER COlTIOL POWER RELIEF VALVE CONTIOL III PMWL[ELIEF VALV[
Two power-operated, normally closed, relief valves (PORVs) begin their operation at a predetermined fixed setpoint of 2335 psig to maintain system pressure below the high pressure trip setpoint.
1 2 COINTROL Figure 7.3 K21    +
The operation of these valves also limits the undesirable opening of the spring-loaded safety valves, which have a higher setpoint then the relief valves. If the error signal (P -P~r ) indicates a pressure lower than a predetermined setpoint, all pressurizer heaters (backup and proportional) are turned on. The setpoint is chosen low enough to prevent continuous switching of the backup heaters during small pressure variations.
1
Pressurlzer Error (PSIG)Figure 7.4 Instrumentation Details Four transmitters provide signals for individual MCR indicators and for actuation of both low and high pressure reactor trips. These signals are isolated prior and are used for non safety related pressure control. Two of these pressure channels from the same train along with the average of the other two channels in the other train will be auctioneered using Medium Signal Selection (MSS) to provide an output to one PORV.This same signal validation scheme will be used for the other train (See Figure EEE).One of the output signals is used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters. The other output is used to actuate the other PORV.
                                    + T22s "12 1s Before being used for:
SNPG Site-Specific WON Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification IRev. 0001 Specification Page 147 of 440 7.2.2 Pressure Control (continued)
: 1. Control of the proportional heaters;
The inputs should be chosen so that it is not possible for failure of a same pressure channel to could cause actuation of both PORVs or to actuate and interlock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients.
: 2. Control of the back-up heaters;
Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters.For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure.
: 3. Control of the spray valves; and
If the controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.The upper portion of the controller's output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened. A further increase in pressure will actuate a high pressure reactor trip. A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure.
: 4. Control of one of the two relief valves (the second relief valve is controlled from an uncompensated pressure signal)
A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line. This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters.
During steady state operation, the PPCS normally controls only the proportional heaters to compensate for minor pressure fluctuations. The proportional heaters will continuously operate at a low level to compensate for the continuous spray rate (approximately 1 gpm) and pressurizer heat losses.
This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable and Ref. 7.5.9 is met.a. Any one of the four pressure transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder.b. The Pressurizer Pressure Control is divided up into two groupings, Normal Pressure control and Abnormal High control. The groupings are divided on a trained channel basis. If Train A (Protection I or Ill) inputs are used for normal pressure control then Train B (Protection II or IV) inputs are used for Abnormal High control. These two groupings are defined as follows: 1. The first grouping provides output signals used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters.Normal pressure control is performed by modulating and turning on heater when pressure goes below defined pressure setpoints and modulating open the spray valves when pressure increases above defined setpoints.
If the compensated error signal (P - Pr) indicates a pressure higher than a predetermined setpoint, proportional spray is initiated and will increase with the pressure until the maximum spray rate is reached. The deadband between the initiation of the proportional spray and turn-off of the proportional heaters prevents frequent operation of the proportional spray valves during minor system pressure variations.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 148 of 440 7.2.2 Pressure Control (continued)
 
: 2. The other output is used to actuate the other PORV. The inputs to the channel selector switch should be chosen so that it is not possible for the same pressure channel to be used to actuate both PORVs or for one pressure channel to actuate and interlock the same valve.c. A four position selector switch (XS-68-340D) on the MCB will provide four combinations of level input signals for pressure control. Boolean logic within the control system will be used to implement the control selection.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 146 of 440 7.2.2 Pressure Control (continued)
The switching function will be divided up into two separate processor groups so that a single failure of a processor group will not prevent functioning of any pressure control function when demanded or result in the spurious operation of a controlled device such as a PORV.i. The AUTO position places the input selection in automatic.
Two power-operated, normally closed, relief valves (PORVs) begin their operation at a predetermined fixed setpoint of 2335 psig to maintain system pressure below the high pressure trip setpoint. The operation of these valves also limits the undesirable opening of the spring-loaded safety valves, which have a higher setpoint then the relief valves. If the error signal (P - P~r ) indicates a pressure lower than a predetermined setpoint, all pressurizer heaters (backup and proportional) are turned on. The setpoint is chosen low enough to prevent continuous switching of the backup heaters during small pressure variations.
When in AUTO, PT-68-323 or PT-68-340 will be selected as input to the Normal pressure control functions (Heaters, and Spray valves) and also provide control of PORV PCV-68-334 along with an interlock for the other PORV PCV-68-340A.
Pressurlzer Prm*ue Error (PSIG)
The other two transmitters, PT-68-322 or PT-68-334, will be selected as input and provide control of PORV PCV-68-340A along with an interlock for the other PORV PCV-68-334.
Figure 7.4 Instrumentation Details Four transmitters provide signals for individual MCR indicators and for actuation of both low and high pressure reactor trips. These signals are isolated prior and are used for non safety related pressure control. Two of these pressure channels from the same train along with the average of the other two channels in the other train will be auctioneered using Medium Signal Selection (MSS) to provide an output to one PORV.
Each pair of transmitters will be compared to the average of the other pair using a Median Select function.
This same signal validation scheme will be used for the other train (See Figure EEE).
See the Pressurizer Pressure Signal Validation Scheme (Figure 7.12).2. The PT 68-340/PT 68-322 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-322 as the input control signal to PORV control.3. The PT 68-340/PT 68-334 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.4. The PT 68-323/PT 68-334 position places PT-68-323 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.d. One pressure channel selector switch is provided in the MCR to select two of the four isolated outputs of these pressure channels.The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients.
One of the output signals is used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters. The other output is used to actuate the other PORV.
Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters. For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure.
 
If the controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.
Engineering SNPG Site-Specific       WON Unit Upgrade 2 NSSS Specification and BOP Controls         IRev. 0001 Specification Specification                                                          Page 147 of 440 7.2.2 Pressure Control (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 149 of 440 7.2.2 Pressure Control (continued)
The inputs should be chosen so that it is not possible for failure of a same pressure channel to could cause actuation of both PORVs or to actuate and interlock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.
The upper portion of the controllers output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened, A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure.
The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients. Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters.
A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line.This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters.
For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure. Ifthe controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.
This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable.f..a-W.6t Ctfl 34L 3 i AkM 8,0 Mn &M MA Aft Boom Loo nes~o d St~I~b -1 Channl Sedm swfthd Pressurizer Pressure Conftrol Diagram Figure 7.5 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 150 of 440 7.2.2 Pressure Control (continued)
The upper portion of the controller's output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened. A further increase in pressure will actuate a high pressure reactor trip. A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure. A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line. This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters. This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable and Ref. 7.5.9 is met.
The following setpoint information is not WBN Unit 2 specific.
: a. Any one of the four pressure transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder.
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.D. Power relief valve (PCV-455A) operated on compensated pressure signal from PB-4SSE E. Backup heaters turned on, on cornpon-sated pressure signal (PC-455G)F. Power relief valve (PCV-456) operaled on actual pressure (PB-456E)G. Power refief valve interlock (PCV-456)(PB-457E)H. Power relief valve interlock (PCV-455A)(PS-45,B)100 (Lockup a 20 psi)-25 pSiE')(Lockup = 8 psi)2335 psig 1 4)(Lockup = 20 psi)2335 psigZ (Lockup -. 20 psi)2335 psig"'a (Lockup = 70 psi)Table 7.2 7.2.3 Overpressure Protection System Overpressurization Events All potential overpressurization events should be considered when establishing the worst-case event. Some events may be prevented by protective interlocks or by locking out power. These events should be identified on an individual basis. If the events are excluded from the analyses, the controls to prevent these events should be in the plant Tech Specs. The system must meet the requirements of RG 1.26,"Quality Group Classifications and Standards for Water-, Steam-, and Radioactive-Waste-Containing Components of Nuclear Power Plants", and Section II of the ASME Code.
: b. The Pressurizer Pressure Control is divided up into two groupings, Normal Pressure control and Abnormal High control. The groupings are divided on a trained channel basis. IfTrain A (Protection I or Ill) inputs are used for normal pressure control then Train B (Protection II or IV)inputs are used for Abnormal High control. These two groupings are defined as follows:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 151 of 440 7.2.3 Overpressure Protection System (continued)
: 1. The first grouping provides output signals used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters.
Design Basis of the COMS Plant Startup and Shutdown The Cold Overpressurization Mitigation System (COMS) shall be designed and installed which will prevent exceeding the applicable Tech Spec and 10CFR50 Appendix G limits for the RCS while operating at low temperatures.
Normal pressure control is performed by modulating and turning on heater when pressure goes below defined pressure setpoints and modulating open the spray valves when pressure increases above defined setpoints.
The system shall be capable of relieving pressure during all anticipated overpressurization events at a rate sufficient to satisfy the Tech Spec limits, particularly while the RCS is water-solid.
 
The system shall have the ability to be manually armed by the operator.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 148 of 440 7.2.2 Pressure Control (continued)
The arming setpoint shall be defined in the Tech Spec, and the instruments for overprotection shall be under periodic surveillance.
: 2. The other output is used to actuate the other PORV. The inputs to the channel selector switch should be chosen so that it is not possible for the same pressure channel to be used to actuate both PORVs or for one pressure channel to actuate and interlock the same valve.
Description of the COMS Plant startup encompasses operations which bring the reactor plant from cold shutdown to no-load power operating temperature and pressure.
: c. A four position selector switch (XS-68-340D) on the MCB will provide four combinations of level input signals for pressure control. Boolean logic within the control system will be used to implement the control selection. The switching function will be divided up into two separate processor groups so that a single failure of a processor group will not prevent functioning of any pressure control function when demanded or result in the spurious operation of a controlled device such as a PORV.
To initiate heat-up, the PZR heaters are energized to begin forming a steam bubble in the PZR. PZR heatup continues until approximately 430*F resulting in an RCS pressure of approximately 330 psig. The PZR level control is then placed in Auto and the RCPs are started. Nil ductility temperature limitations of the reactor vessel, impose an upper limit of approximately 450 psig. The RCPs are started one at a time allowing approximately five minutes between each pump startup. RHR system cooling is isolated and the RCS temperature increases to 180 0 F. After ensuring that SG blowdown is in service, that one CCP is operable, and that the CRDM cooling fans are on, RCS temperature is taken to 350'F. At this point, letdown flow is maintained at less than or equal to 120 gpm. When the temperature of each cold leg is greater than 350 0 F, the COMS is blocked. The system is then taken to hot standby conditions of 557 0 F and 2235 psig. As RCS temperature increases, the PZR heaters are manually controlled to maintain adequate suction pressure for the RCPs. When the normal operating pressure of 2235 psig Is reached, PZR heater and spray controls are transferred from manual to automatic control, The SI initiation signal is automatically unblocked at 1970 psig.Instrumentation Details The PORVs receive pressure control signals from instrumentation loops connected to the pressurizer.
: i. The AUTO position places the input selection in automatic. When in AUTO, PT-68-323 or PT-68-340 will be selected as input to the Normal pressure control functions (Heaters, and Spray valves) and also provide control of PORV PCV-68-334 along with an interlock for the other PORV PCV-68-340A. The other two transmitters, PT-68-322 or PT-68-334, will be selected as input and provide control of PORV PCV-68-340A along with an interlock for the other PORV PCV-68-334. Each pair of transmitters will be compared to the average of the other pair using a Median Select function. See the Pressurizer Pressure Signal Validation Scheme (Figure 7.12).
Wide range-temperature signals from the hot legs and cold legs of loops 1 and 2 are provided for PCV-68-340A.
: 2. The PT 68-340/PT 68-322 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-322 as the input control signal to PORV control.
Wide range temperature indication from the hot legs and cold legs of loops 3 and 4 are provided for PCV-68-334.
: 3. The PT 68-340/PT 68-334 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.
Wide range pressure and temperature signals operate the valves from the COMs instrumentation (See section 3.3.2.3).
: 4. The PT 68-323/PT 68-334 position places PT-68-323 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.
These valves have position indication in the MCR. In addition, an acoustic monitoring system is provided to indicate when a valve is not fully closed.An alarm in the MCR indicates when either valve is not fully closed. See Table 2 for alve power supply.
: d. One pressure channel selector switch is provided in the MCR to select two of the four isolated outputs of these pressure channels.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 152 of 440 7.2.3 Overpressure Protection System (continued)
The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients. Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters. For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure. If the controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.
The following setpoint information is not WBN Unit 2 specific.
 
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.RCS Cold Overoressure Mitigation System A. Cold Overpressure Mitigation System Setpoint Program 1UNIT!1 RCS 70 I00 150 200 250 275 30O 350 450 rREAKPO1NTS, PSIG ,PORV POV-455A PonV PCV-456 (TVA Valve PCV-68-340A) (TVA Valve PCV-68-334)(TY-413N) (TY-413P)433 436 464 488 578 641 671 690 2335 460 481 515 571 696 745 745 745 2335' Resistance Temperature Detector (RTD)NOTE: The PORV setpoints In this table were developed using a methodology without consideration of instrumentation uncertainties (Reference CN-SCS-04-21, Rev. 1). TVA scaling documents which use this data to develop plant selpoinls are I -T-6B-1 B and I -T-68-438.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                     Specification Engineering                         Upgrade Specification                   Rev. 0001 Specification                                                               Page 149 of 440 7.2.2 Pressure Control (continued)
B. Interlocks PORV PCV-455A Overpressure Interlock (PB-403D)PORV PCV-456 Overpressure Interlock (PB-405D)0 psig to open, 1 -20 psig to close 0 psig to open, 1 -20 psig to close C. Alarms PORV PCV-455A PORV-PCV-456 PORV PCV-455A PORV PCV-456 Overpressure Alarm (PB-403E)Overpressure Alarm (PB-405E)Temperature Alarm (TB-413J)Temperature Alarm (TB.413K)-20 psig-20 psig 350 3 F 350 0 F NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 153 of 440 7.2.3 Overpressure Protection System (continued)
The upper portion of the controllers output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened, A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure. A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line.
Table 7.3 NormallPower Operations Design Basis of the at Power Overpressure Protection System Normal reactor operation includes both power generating and hot shutdown operating phases. Power generation includes steady-state operation, ramp changes not exceeding the rate of five percent of full power per minute, and step changes of ten percent of full power (not exceeding full power). During power operation of the reactor, the relief valves shall be designed with sufficient capacity to preclude actuation of safety valves, during normal operational transients, when assuming the following conditions at the plant (SD Ref. 7.5.57): 1. Reactor is operating at licensed core thermal power level.2. RCS and core parameters are at values within normal operating range that produce the highest anticipated pressure.3. All components, instruments, and controls function normally.Overpressure protection systems which take credit for an active component(s) to mitigate the consequences of an overpressurization event should include additional analyses considering inadvertent system initiation/actuation or provide justification to show that existing analyses bound such an event.Description of the at Power Overpressure Protection System The PZR heaters are controlled by a PID controller which receives input signals from PZR level, PZR pressure instruments, and the MCR. The control heater and each of the three backup heaters have their own control loops. Two backup heater groups will be provided with on-off control via selector switch. The control is provided from outside the MCR and duplicates MCR functions.
This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters. This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable.
The backup heaters are turned on when the PZR pressure controller signal demands approximately 100% proportional heater power. In addition, there are interlocks that block the automatic turn-on of the heaters by the pressure control system when a low water level exists to prevent heater burnout. The heater groups are connected to separate buses, such that each can be connected to separate diesels in the event of loss of offsite power. All heaters are automatically deenergized by an SI signal or a blackout (6.9kV shutdown board loss of voltage).
f..a-W.6t Ctfl 34L 3   i     AkM 8,0   Mn &M   MA   Aft
After SI reset and PZR level recovery, one backup heater group would operate automatically.
                                                                  -1 Boom Loo d Stnes~o
The other two backup heater banks and the control bank would not come on automatically but are manually activated.
                                                              ~I~b                   Channl Sedm swfthd Pressurizer Pressure Conftrol Diagram Figure 7.5
In the event of a loss of offsite power and an SI signal, two backup heater groups rated at 485 kw each can be manually activated by the handswitches in the MCR, 90 seconds after emergency power becomes available.
 
Emergency power is available to heaters required for maintaining natural circulation in a hot standby condition.
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                         Upgrade Specification                 Rev. 0001 Specification                                                               Page 150 of 440 7.2.2 Pressure Control (continued)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 154 of 440 7.3 Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Pressurizer Level and Pressure Control Systems: Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical  
The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
& Electronics Engineers (IEEE)Standards:
D. Power relief valve (PCV-455A) operated on   100 pso* "*
IEEE Std. 279-1971 (Section 4.7)The above Criteria and Standards have been considered in preparing the requirements of this section.
compensated pressure signal from PB-4SSE   (Lockup    a 20 psi)
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 155 of 440 7.4 WBN System Description, System Diagrams Figure 7.6 -Existing Pressurizer Level Control LEnM~T VLUi:UN NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 156 of 440 7.4 WBN System Description, System Diagrams (continued)
E. Backup heaters turned on, on cornpon-sated pressure signal (PC-455G)                                   -25 pSiE')
Paa ; a 2 A.......................  
(Lockup = 8 psi)
...........
F. Power relief valve (PCV-456) operaled on actual pressure (PB-456E)                                   2335 psig1 4 )
NO2 2223 A a Lqw ~ ~ nl wo .0 AOt is 222 )3N 22 AMs thre Seecof Sic Pressurizer Pressure Control Diagram Figure 7.7 -Proposed PZR Level Control System NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 157 of 440 7.4 WBN System Description, System Diagrams (continued)
(Lockup = 20 psi)
Pressurizer Level Program Figure 7.8 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 158 of 440 7.4 WBN System Description, System Diagrams (continued)
G. Power refief valve interlock (PCV-456)
Figure 7.8 -Existing Pressurizer Pressure Control NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 159 of 440 7.4 WBN System Description, System Diagrams (continued)
(PB-457E)                                   2335 psigZ (Lockup -. 20 psi)
Sa 7- t2 2 3 ~bow. ~ ~ ~ eo Ssw unt0. -f X541340 Preissuler Pressur Control Diagram Figure 7.9 -Proposed Pressurizer Pressure Control NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 160 of 440 7.4 WBN System Description, System Diagrams (continued)
H. Power relief valve interlock (PCV-455A)
PORV Figure 7.10 -COMS Logic NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 161 of 440 7.4 WBN System Description, System Diagrams (continued) 7.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of both pressurizer pressure and level controls.
(PS-45,B)                                   2335 psig"'a (Lockup = 70 psi)
These controls shall allow the unit operator to establish either manual or automatic control mode. These control system will normally be operated in the automatic mode with both the pressurizer pressure and level selection switches in the automatic position.
Table 7.2 7.2.3       Overpressure Protection System Overpressurization Events All potential overpressurization events should be considered when establishing the worst-case event. Some events may be prevented by protective interlocks or by locking out power. These events should be identified on an individual basis. If the events are excluded from the analyses, the controls to prevent these events should be in the plant Tech Specs. The system must meet the requirements of RG 1.26, "Quality Group Classifications and Standards for Water-, Steam-, and Radioactive-Waste-Containing Components of Nuclear Power Plants", and Section II of the ASME Code.
In the auto position, MSS input validation signal will be used for control. The operator may also use the selector switches to use specific input transmitters for control if desired for abnormal situations such as maintenance or equipment failures.
 
The following logic must be implemented for the selector switch logic.Pressurizer Pressure Channel Selector Switch XS-68-340D Position 1 2 3 Auto Normal PT-68-340 PT-68-340 PT-68-323 MSS Input Control I I Ill from I & III Backup P1-68-322 PT-68-334 PT-68-334 MSS Input Control IV II II from 11 & IV Normal Control consists of the following functions:
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 151 of 440 7.2.3     Overpressure Protection System (continued)
: 1. Pressure Control via: a. Modulated Variable Heater Control b. Turn on Backup Heaters on Low Pressure c. Spray Valve programmed controls (PCV-68-340B and -340D)d. Open PORV PCV-68-340A on High Pressure (SP + 100 psig)2. Alarms: a. High Pressure +75 psig b. Low Pressure -25 psig Backup Control consists of the following functions:
Design Basis of the COMS Plant Startup and Shutdown The Cold Overpressurization Mitigation System (COMS) shall be designed and installed which will prevent exceeding the applicable Tech Spec and 10CFR50 Appendix G limits for the RCS while operating at low temperatures. The system shall be capable of relieving pressure during all anticipated overpressurization events at a rate sufficient to satisfy the Tech Spec limits, particularly while the RCS is water-solid.
: 1. Open PORV PCV-68-334 on High Pressure (2335 psig)2. Alarms:
The system shall have the ability to be manually armed by the operator. The arming setpoint shall be defined in the Tech Spec, and the instruments for overprotection shall be under periodic surveillance.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 162 of 440 7.5 Indicators, Status Lights. and Controls (continued)
Description of the COMS Plant startup encompasses operations which bring the reactor plant from cold shutdown to no-load power operating temperature and pressure. To initiate heat-up, the PZR heaters are energized to begin forming a steam bubble in the PZR. PZR heatup continues until approximately 430*F resulting in an RCS pressure of approximately 330 psig. The PZR level control is then placed in Auto and the RCPs are started. Nil ductility temperature limitations of the reactor vessel, impose an upper limit of approximately 450 psig. The RCPs are started one at a time allowing approximately five minutes between each pump startup. RHR system cooling is isolated and the RCS temperature increases to 180 0 F. After ensuring that SG blowdown is in service, that one CCP is operable, and that the CRDM cooling fans are on, RCS temperature is taken to 350'F. At this point, letdown flow is maintained at less than or equal to 120 gpm. When the temperature of each cold leg is greater than 350 0 F, the COMS is blocked. The system is then taken to hot standby conditions of 557 0 F and 2235 psig. As RCS temperature increases, the PZR heaters are manually controlled to maintain adequate suction pressure for the RCPs. When the normal operating pressure of 2235 psig Is reached, PZR heater and spray controls are transferred from manual to automatic control, The SI initiation signal is automatically unblocked at 1970 psig.
: a. 2310 psig High Pressure Pressurizer Level Channel Selector Switch XS-68-339E Position 1 2 3 Auto Normal LT-68-339 LT-68-339 LT-68-320 MSS Input Control I I III from I & III Backup LT-68-320 LT-68-335 LT-68-335 MSS Input Control Ill II II from II & Ill Normal Control consists of the following functions:
Instrumentation Details The PORVs receive pressure control signals from instrumentation loops connected to the pressurizer. Wide range-temperature signals from the hot legs and cold legs of loops 1 and 2 are provided for PCV-68-340A. Wide range temperature indication from the hot legs and cold legs of loops 3 and 4 are provided for PCV-68-334. Wide range pressure and temperature signals operate the valves from the COMs instrumentation (See section 3.3.2.3). These valves have position indication in the MCR. In addition, an acoustic monitoring system is provided to indicate when a valve is not fully closed.
: 1. Level Control via charging flow demand (FCV-62-93 position control and PD Pump Speed control)2. Isolation of Letdown (LCV-62-70)
An alarm in the MCR indicates when either valve is not fully closed. See Table 2 for alve power supply.
: 3. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)4. Alarms: a. 17% Low Level b. +5% High Level Deviation c. -5% Low Level Deviation Backup Control consists of the following functions:
 
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls                           Specification Engineering                       Upgrade Specification                             Rev. 0001 Specification                                                                         Page 152 of 440 7.2.3   Overpressure Protection System (continued)
The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
RCS Cold Overoressure Mitigation System A. Cold Overpressure Mitigation System Setpoint Program 1UNIT!1 RCS                               rREAKPO1NTS, PSIG
                                                ,PORV POV-455A               PonV PCV-456 (TVA Valve PCV-68-340A)       (TVA Valve PCV-68-334)
(TY-413N)                     (TY-413P) 70                          433                         460 I00                          436                         481 150                          464                         515 200                          488                         571 250                          578                         696 275                          641                         745 30O                          671                         745 350                          690                         745 450                          2335                         2335
                        ' Resistance Temperature Detector (RTD)
NOTE:   The PORV setpoints In this table were developed using a methodology without consideration of instrumentation uncertainties (Reference CN-SCS-04-21, Rev. 1). TVA scaling documents which use this data to develop plant selpoinls are I -T-6B-1 B and I -T-68-438.
B. Interlocks PORV PCV-455A Overpressure Interlock (PB-403D)                 0 psig to open, 1 - 20 psig to close PORV PCV-456       Overpressure Interlock (PB-405D)             0 psig to open, 1 - 20 psig to close C. Alarms PORV PCV-455A Overpressure Alarm (PB-403E)                      -20 psig PORV-PCV-456       Overpressure Alarm (PB-405E)                 -20 psig PORV PCV-455A Temperature Alarm (TB-413J)                       3503 F PORV PCV-456      Temperature Alarm (TB.413K)                 3500 F
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 153 of 440 7.2.3     Overpressure Protection System (continued)
Table 7.3 NormallPower Operations Design Basis of the at Power Overpressure Protection System Normal reactor operation includes both power generating and hot shutdown operating phases. Power generation includes steady-state operation, ramp changes not exceeding the rate of five percent of full power per minute, and step changes of ten percent of full power (not exceeding full power). During power operation of the reactor, the relief valves shall be designed with sufficient capacity to preclude actuation of safety valves, during normal operational transients, when assuming the following conditions at the plant (SD Ref. 7.5.57):
: 1. Reactor is operating at licensed core thermal power level.
: 2. RCS and core parameters are at values within normal operating range that produce the highest anticipated pressure.
: 3. All components, instruments, and controls function normally.
Overpressure protection systems which take credit for an active component(s) to mitigate the consequences of an overpressurization event should include additional analyses considering inadvertent system initiation/actuation or provide justification to show that existing analyses bound such an event.
Description of the at Power Overpressure Protection System The PZR heaters are controlled by a PID controller which receives input signals from PZR level, PZR pressure instruments, and the MCR. The control heater and each of the three backup heaters have their own control loops. Two backup heater groups will be provided with on-off control via selector switch. The control is provided from outside the MCR and duplicates MCR functions. The backup heaters are turned on when the PZR pressure controller signal demands approximately 100% proportional heater power. In addition, there are interlocks that block the automatic turn-on of the heaters by the pressure control system when a low water level exists to prevent heater burnout. The heater groups are connected to separate buses, such that each can be connected to separate diesels in the event of loss of offsite power. All heaters are automatically deenergized by an SI signal or a blackout (6.9kV shutdown board loss of voltage). After SI reset and PZR level recovery, one backup heater group would operate automatically. The other two backup heater banks and the control bank would not come on automatically but are manually activated. In the event of a loss of offsite power and an SI signal, two backup heater groups rated at 485 kw each can be manually activated by the handswitches in the MCR, 90 seconds after emergency power becomes available. Emergency power is available to heaters required for maintaining natural circulation in a hot standby condition.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification             Rev. 0001 Specification                                                     Page 154 of 440 7.3         Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)
(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Pressurizer Level and Pressure Control Systems:
Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)
Standards: IEEE Std. 279-1971 (Section 4.7)
The above Criteria and Standards have been considered in preparing the requirements of this section.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls         Specification Engineering             Upgrade Specification             Rev. 0001 Specification                                             Page 155 of 440 7.4   WBN System Description, System Diagrams Figure 7.6 - Existing Pressurizer Level Control LEnM~T         VLUi:UN
 
NPG Site-Specific   VWBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 156 of 440 7.4       WBN System Description, System Diagrams (continued)
Paa   ;   a 2       A
                                                      .......................               NO2 2223 A a Lqw~
                                                              .0   AOt ~      wonlis  222   )3N   22   AMs Seecof thre Sic Pressurizer Pressure Control Diagram Figure 7.7 - Proposed PZR Level Control System
 
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls       Specification Engineering             Upgrade Specification           Rev. 0001 Specification                                             Page 157 of 440 7.4       WBN System Description, System Diagrams (continued)
Pressurizer Level Program Figure 7.8
 
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls           Specification Engineering               Upgrade Specification             Rev. 0001 Specification                                               Page 158 of 440 7.4       WBN System Description, System Diagrams (continued)
Figure 7.8 - Existing Pressurizer Pressure Control
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls           Specification Engineering                   Upgrade Specification             Rev. 0001 Specification                                                   Page 159 of 440 7.4     WBN System Description, System Diagrams (continued)
Sa 7-                       t2 2     3 ~
                                                          ~   -f ~     ~
bow.
X541340 unt0. eo Ssw Preissuler Pressur Control Diagram Figure 7.9 - Proposed Pressurizer Pressure Control
 
NPG Site-Specific   WBN Unit 2 NSSS and SOP Controls       Specification Engineering             Upgrade Specification             Rev. 0001 Specification                                             Page 160 of 440 7.4       WBN System Description, System Diagrams (continued)
PORV Figure 7.10 - COMS Logic
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                           Page 161 of 440 7.4       WBN System Description, System Diagrams (continued) 7.5       Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of both pressurizer pressure and level controls. These controls shall allow the unit operator to establish either manual or automatic control mode. These control system will normally be operated in the automatic mode with both the pressurizer pressure and level selection switches in the automatic position. In the auto position, MSS input validation signal will be used for control. The operator may also use the selector switches to use specific input transmitters for control if desired for abnormal situations such as maintenance or equipment failures. The following logic must be implemented for the selector switch logic.
Pressurizer Pressure Channel Selector Switch XS-68-340D Position               1           2               3             Auto Normal           PT-68-340     PT-68-340     PT-68-323       MSS Input Control               I             I             Ill         from I & III Backup           P1-68-322     PT-68-334     PT-68-334       MSS Input Control               IV             II             II         from 11& IV Normal Control consists of the following functions:
: 1. Pressure Control via:
: a. Modulated Variable Heater Control
: b. Turn on Backup Heaters on Low Pressure
: c. Spray Valve programmed controls (PCV-68-340B and -340D)
: d. Open PORV PCV-68-340A on High Pressure (SP + 100 psig)
: 2. Alarms:
: a. High Pressure +75 psig
: b. Low Pressure -25 psig Backup Control consists of the following functions:
: 1. Open PORV PCV-68-334 on High Pressure (2335 psig)
: 2. Alarms:
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 162 of 440 7.5       Indicators, Status Lights. and Controls (continued)
: a. 2310 psig High Pressure Pressurizer Level Channel Selector Switch XS-68-339E Position                 1           2               3             Auto Normal             LT-68-339   LT-68-339       LT-68-320       MSS Input Control                   I           I             III         from I & III Backup             LT-68-320   LT-68-335     LT-68-335       MSS Input Control                 Ill         II             II       from II & Ill Normal Control consists of the following functions:
: 1. Level Control via charging flow demand (FCV-62-93 position control and PD Pump Speed control)
: 2. Isolation of Letdown (LCV-62-70)
: 3. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)
: 4. Alarms:
: a. 17% Low Level
: b.   +5% High Level Deviation
: c.     -5% Low Level Deviation Backup Control consists of the following functions:
: 5. Isolation of Letdown (LCV-62-69)
: 5. Isolation of Letdown (LCV-62-69)
: 6. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)7. Alarms: a. 17% Low Level b. 70% High Level Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications.
: 6. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)
See I/O listing.
: 7. Alarms:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 163 of 440 7.6 Alarms and Annunciators The control system should monitor and actuate an alarm and annunciator for the following conditions:
: a. 17% Low Level
7.6.1 Pressure A. High pressure B. Low pressure C. High pressure deviation (PID compensated pressure minus reference setpoint pressure).
: b. 70% High Level Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.
High controller output.D. Low pressure deviation (PID compensated pressure minus reference setpoint pressure).
 
Low Controller output.E. Actuation of the Relief Valve Interlock for any Relief Valve.The high pressure alarm should be actuated by the same signal used to actuate two relief valves (see the section 7.8.2, requirement a). The low pressure deviation alarm should be actuated by the signal used to turn the back-up heaters on. A separate bistable signal should be provided to actuate the high pressure deviation alarm.7.6.2 Water Level A. High water level B. Low water level (derived from water level channels used for heater interlock and for letdown isolation)
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 163 of 440 7.6     Alarms and Annunciators The control system should monitor and actuate an alarm and annunciator for the following conditions:
C. High water level deviation (measured water level minus programmed water level).D. Low water level deviation (measured water level minus programmed water level).E. Actuation of the low level signal to close either letdown isolation valve.The low water level alarm should be actuated by the same signals used for heater interlock on low water level. The high water level deviation alarm should be actuated by the same signal used to turn backup heaters on. Separate bistable signals should be provided to actuate the remaining water level alarms.7.6.3 Placing the charging pumps control selector switch in the local operating position, 7.6.4 Cold Overpressurization Mitigation System (COMS)
7.6.1     Pressure A. High pressure B. Low pressure C. High pressure deviation (PID compensated pressure minus reference setpoint pressure). High controller output.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 164 of 440 7.6.4 Cold Overpressurization Mitigation System (COMS) (continued)
D. Low pressure deviation (PID compensated pressure minus reference setpoint pressure). Low Controller output.
A. When the signal Is present demanding the arming of the cold overpressure mitigation system.B. When the signal is present to open either of the two relief valves used in the system.Difference between RCS pressure and its programmed value exceeding a setpoint.7.7 Performance Limits TBD 7.8 Failure Mode and Special Requirements 7.8.1 Failure Modes The inputs should be chosen so that it is not possible for failure of the same pressure channel to could cause actuation of both PORVs or to actuate and interock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.The pressurizer pressure and water level control system should be designed such that, in case of loss of power to any channel, the affected pressurizer power operated relief valves will not open, the spray valves will not operate, the heaters will not operate from low pressure deviation or high water level deviation and the letdown line isolation valve closure and heater actuation block on low water level will not be actuated.7.8.2 Pressure Interlocks A. A high pressure signal should open one power operated relief valve and a high compensated pressure deviation signal should open the remaining power operated relief valve.B. Each power operated relief valve should be interlocked with a pressure interlock. (The interlock and actuate signals for any power operated relief valve must not come from the same channel).C. A low compensated pressure deviation signal should turn on the backup heaters.7.8.3 Water Level Interlocks A. A high water level deviation signal should turn on the backup heaters.
E. Actuation of the Relief Valve Interlock for any Relief Valve.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 165 of 440 7.8.3 Water Level Interlocks (continued)
The high pressure alarm should be actuated by the same signal used to actuate two relief valves (see the section 7.8.2, requirement a). The low pressure deviation alarm should be actuated by the signal used to turn the back-up heaters on. A separate bistable signal should be provided to actuate the high pressure deviation alarm.
B. An auxiliary pressure and level interlock will turn on Group A-A and B-B heaters if the local control stations are on local and auto.C. A fixed low level signal should turn off Group C heaters and the variable heaters. This low level signal is generated in two channels either of which is capable of performing this function.
7.6.2     Water Level A. High water level B. Low water level (derived from water level channels used for heater interlock and for letdown isolation)
This low level signal will also turn off the Group A-A and B-B heaters when they are in auto control. However, this function may be bypassed from the remote control station. Precaution should be taken to avoid manual heater operation which could cause heater damage, if the water level uncovers the heaters.A signal indicating that all letdown orifice isolation valves are closed should be interlocked with the switch outputs used to control the letdown line isolation valves such that the letdown line isolation valves can be neither opened nor closed through use of the switch unless all letdown orifice isolation valves are fully closed.1. Orifice isolation valves FCV-62-73, -74, and-72 are energized to open.2- Interlocks:
C. High water level deviation (measured water level minus programmed water level).
: a. To Open -pressurizer level > 17 percent and FCV-62-69 and -70 open, charging pump running, Phase A reset.b. Close automatically  
D. Low water level deviation (measured water level minus programmed water level).
-pressurizer level < 17 percent, either FCV-62-69 or -70 going closed, containment Phase A isolation signal, loss of charging pump, loss of electrical power, and loss of air.7.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
E. Actuation of the low level signal to close either letdown isolation valve.
Rack environmental effects are not included in channel accuracy.
The low water level alarm should be actuated by the same signals used for heater interlock on low water level. The high water level deviation alarm should be actuated by the same signal used to turn backup heaters on. Separate bistable signals should be provided to actuate the remaining water level alarms.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
7.6.3     Placing the charging pumps control selector switch in the local operating position, 7.6.4     Cold Overpressurization Mitigation System (COMS)
Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.Accuracy Requirements for Normal and Abnormal Operating Conditions A. The accuracy and reproducibility of the pressure narrow range signals should be within +/- 10 psi.-.--.-.d NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 166 of 440 7.9 Accuracy (continued)
 
B. The accuracy and reproducibility of the pressurizer water level UP signal should be within _ 1.5% of span.C. The channel accuracy of the reactor coolant system wide range temperature signals should be within +/-1.2% of range.D. The channel (trip) accuracy of the reactor coolant system wide range pressure signals should be within +/- 2.0% of range.E. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.035% of both input and output channel span to the uncertainties specified in the above requirements of this section.7.10 Range Pressurizer Pressure 1700 to 2500 psig Pressurizer Level 0 to 100% level Reactor coolant system 0 to 700MF wide range Temperature Reactor coolant system 0 to 3000 psig wide range Pressure Auctioneered Tavg for Pzr TBD Level Setpoint program 7.11 Inputs Reference drawings: Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W610-68-series WBN 47W610-62-series WBN 47W611-68-series Automatic control inputs The inputs are documented in Appendix E NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 167 of 440 7.11 Inputs (continued)
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 164 of 440 7.6.4     Cold Overpressurization Mitigation System (COMS) (continued)
AutolManual Hand stations The auto/manual handstations are show in Appendix F.7.12 Outputs The outputs are documented in Appendix E Reference drawings: Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W61 0-68-sedes WBN 47W610-62-series WBN 47W611-68-series 7.13 Proposed Signal Validation Designs A. Each Pressurizer Pressure channel shall consist of 2 input signals from like power train with a third input from the average of the redundant channel in the other power. These input signals shall use Medium Signal Select (MSS) input validation to select the Automatic control signal (see Figure 7.11). If one of the 2 train input signals is determined to be bad, the other Train input signal shall be used for control.
A. When the signal Is present demanding the arming of the cold overpressure mitigation system.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 168 of 440 7.13 Proposed Signal Validation Designs (continued)
B. When the signal is present to open either of the two relief valves used in the system.
PRZR PRZR PRZR PRZR Presure Pressure III Pressurizer Pressure Signal Validation Scheme Figure 7.11 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 169 of 440 7.13 Proposed Signal Validation Designs (continued)
Difference between RCS pressure and its programmed value exceeding a setpoint.
B. The Pressurizer level control signal shall consist of 3 input signals using MSS input validation to select the Automatic control signal. If one input signal is determined to be bad, the average of the remaining two signals shall be used for control.Pzr Level I Pzr Level 2 Pzr Level 3 1. Individual channel failure-alarm.
7.7       Performance Limits TBD 7.8       Failure Mode and Special Requirements 7.8.1 Failure Modes The inputs should be chosen so that it is not possible for failure of the same pressure channel to could cause actuation of both PORVs or to actuate and interock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.
: 2. Two channel failure-manual hold with operator selection back to auto.3. Three channel failure-manual hold.Figure 7.12 7.14 Time Response 7.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Pressurizer Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Pressurizer Control System.I NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 170 of 440 7.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Pressurizer Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Pressurizer Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
The pressurizer pressure and water level control system should be designed such that, in case of loss of power to any channel, the affected pressurizer power operated relief valves will not open, the spray valves will not operate, the heaters will not operate from low pressure deviation or high water level deviation and the letdown line isolation valve closure and heater actuation block on low water level will not be actuated.
7.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.7.14.4 Manual Control Response The total delay for all manual component control signals of Pressurizer Control System shall be no greater than 1 second.7.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.7.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.7.17 Programmed Functions Pressurizer Pressure Functions NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 171 of 440 7.17 Programmed Functions (continued)
7.8.2 Pressure Interlocks A. A high pressure signal should open one power operated relief valve and a high compensated pressure deviation signal should open the remaining power operated relief valve.
Pressurizer Variable Heaters Input-Output Characteristic 10 Heater Demand (%)0'0 Compensated Pressure Figure 7.13 Pressurizer Spray Valve Characteristic A Spray 10 Demand (%)0 //D 00C Compensated Pressure Figure 7.14 Pressurizer Water Level Programmed Functions Pressurizer Water Level Program Water Level Demand (% of Span)H G F E Auctioneered Figure 7.15 Settings (Per Plant SSD for TC-68-2): E = 557 F F = 59.6% Level G = 25% Level H = 586.2 F NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 172 of 440 7.17 Programmed Functions (continued)
B. Each power operated relief valve should be interlocked with a pressure interlock. (The interlock and actuate signals for any power operated relief valve must not come from the same channel).
Cold Overpressurization Mitigation System Reactor coolant system pressure setpoint program z Y lide Range RCS X Pressure (psig) * ---- ---------V-------------
C. A low compensated pressure deviation signal should turn on the backup heaters.
Il U-------------
7.8.3 Water Level Interlocks A. A high water level deviation signal should turn on the backup heaters.
III TI -----I I *, 541J I J K L M N 0PO Wide Range RCS Temperature (rF)Figure 7.16 7.18 Set Points Setpoints Ranae of Settina Variable Fixed High Pressure Alarm, Open Power Operated Relief Valves Low Pressure Deviation Alarm, Turn Backup Heaters On (Low Controller Output)High Pressure Deviation Alarm (High Controller Output)Fixed High Water Level Alarm Fixed Low Water Level Alarm, Turn All Heaters Off, Isolate Letdown High Water Level Deviation Alarm Low Water Level Deviation Alarm Open Power Operated Relief Valve (compensated pressure deviation) 2250 to 2500 psig-200 to 0 psi 0 to 200 psi 40 to 100% span 0 to 50% span 0 to 20% span-20% to 0% span 0 to 200 psi NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 173 of 440 7.18 Setpoints (continued)
 
A B C D E F G H Pressure Reference Setpoint Cold Overpressure Mitigation System Low auctioneered RCS temperature RCS pressure setpoint difference and PORV actuation-100 to 100 psi-1 to -10%/psi 0 to 100 psi 1 to 10%/psi 540 to 560 0 F 0.25 to 5%/&deg;F 0 to 50% of water level span 20 to 70% of water level span 1800 to 2400 psig 0 to 700F-100 to 100 psi 700F 1OO&deg;F 150&deg;F 200TF 250&deg;F 275&deg;F 300&deg;F 350 0 F 450 0 F 373 psig 376 psig 395 psig 420 psig 490 psig 540 psig 570 psig 570 psig 2335 psig J K L M N 0 P Q R S T U V W x Y z NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 174 of 440 7.19 Requirements for Test and Calibration The Pressurizer Pressure and Heater Level Control System is not a protection system and, therefore, does not require the capability of being tested at power. Surveillance testing will be performed for COMS prior to plant heatup and cooldown above and below 350F (Mode 4).7.20 Applicable Criteria & Standards The following criteria apply to this system.7.20.1 AEC General Design Criteria (GDC) (2/20/71):
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                       Upgrade Specification                   Rev. 0001 Specification                                                             Page 165 of 440 7.8.3     Water Level Interlocks (continued)
GDC 13, 19, 24 7.20.2 Institute of Electrical  
B. An auxiliary pressure and level interlock will turn on Group A-A and B-B heaters ifthe local control stations are on local and auto.
& Electronics Engineers (IEEE) Standards:
C. A fixed low level signal should turn off Group C heaters and the variable heaters. This low level signal is generated in two channels either of which is capable of performing this function. This low level signal will also turn off the Group A-A and B-B heaters when they are in auto control. However, this function may be bypassed from the remote control station. Precaution should be taken to avoid manual heater operation which could cause heater damage, if the water level uncovers the heaters.
IEEE Std. 279-1971 (Section 4.7)The above Criteria and Standards have been considered in preparing the requirements of this section 8.0 BA BLENDER CONTROLS INTRODUCTION 8.1 Overview A Boric Acid Blend Control System shall be provided for WBN Unit 2. The Control System shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
A signal indicating that all letdown orifice isolation valves are closed should be interlocked with the switch outputs used to control the letdown line isolation valves such that the letdown line isolation valves can be neither opened nor closed through use of the switch unless all letdown orifice isolation valves are fully closed.
8.2 Boric Acid Blender Control System Upgrade The scope of this upgrade consists of replacement of the existing NSSS Boric Acid Blender control system located in the NSSS control rack groupings.
: 1. Orifice isolation valves FCV-62-73, -74, and-72 are energized to open.
The existing controls are presently located in Rack 15 in the AIR with control stations located in the MCR. Remote I/O modules mounted in a 19 inch nest will be placed in the existing Foxboro cabinets (will use the baseplate for Racks 14/15/16).
2-     Interlocks:
The associated Analog Outputs are not deemed Critical signals and do not require redundant output modules I with passive switching for the final device. The control system outputs that presently feed through their individual handstations will be changed to eliminate the Handstation I (HS) as a single point of failure. Remote 1/0 will be located in MCR. Any analog output devices will be changed out from 10 to 50 mA to 4 to 20 mA loops. Any 10 to 50 mA I/P converters will be changed out to a 4 to 20 mA type (to be supplied by TVA).The following system graphics, at a minimum, shall be supplied.
: a. To Open - pressurizer level > 17 percent and FCV-62-69 and -
The Offerer shall list and describe the number and type of graphics that are proposed.
70 open, charging pump running, Phase A reset.
Offerer should provide cost of additional screens.System Mimics An additional mimic will be developed for Boric Acid Blender Controls.
: b. Close automatically - pressurizer level < 17 percent, either FCV-62-69 or -70 going closed, containment Phase A isolation signal, loss of charging pump, loss of electrical power, and loss of air.
This mimic will consist of a Boric Acid Blender overview with Boric Flow, Primary Water Flow, Deviation Alarms, the Batch counters and Flow controllers for each flow loop, Mode selection with Status indication, and trending information 8.2.1 Critical Control System Signals Non-critical Control Signals One process input for each boric acid and primary water flow control loop will be provided.
7.9       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.
Gross failure detection shall be implemented and shall transfer the control system to manual upon detection of an input failure.System Hazards Analysis The Offerer shall include the Boric Acid control system into the Hazards Analysis even though the inputs and outputs are single points of failure.Some of the most important objectives of the failure study include: 0 The potential for over or under shooting boration and dilution.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 176 of 440 8.2.2 System Description and Operation The makeup control portion of the Chemical Volume and Control System (CVCS)provides boric acid solution and distillate to the RCS. It consists of equipment and a group of instruments arranged to provide a manually preselected makeup composition to the charging pump suction or the VCT. Makeup control functions are those of maintaining desired operating fluid inventory in the VCT and adjusting RCS boron concentration for reactivity control.The boric acid batching tank is used to prepare fresh boric acid solution.
Accuracy Requirements for Normal and Abnormal Operating Conditions A. The accuracy and reproducibility of the pressure narrow range signals should be within +/- 10 psi.
The BATs store this solution.
                                                                                                        -.--.-. d
Initial filling and makeup quantities of the required percent boric acid solution are prepared in the batching tank by dissolving boric acid crystals in hot water.The batch of boric acid is transferred to the BATs by the boric acid transfer pumps.There are 2 two-speed boric acid transfer pumps per unit. One pump is normally run on slow speed to provide BAT recirculation.
 
The recirculation flow is either at a fixed rate or at a rate set by the operator.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 166 of 440 7.9       Accuracy (continued)
The second pump of each pair can be aligned to the third BAT and is considered to be a standby pump, with service being transferred as operation requires.A primary water pump, taking suction from the Primary Water Storage Tank (PWST), provides flow to the boric acid blender where mixing with boric acid occurs. The mixture is then directed to the suction of the charging pumps or is sprayed into the Volume Control Tank (VCT).8.2.3 Modes of Operation Reactor makeup control system can be set for the following modes of operation:
B. The accuracy and reproducibility of the pressurizer water level UP signal should be within _ 1.5% of span.
automatic makeup, dilution, alternate dilution, boration, and manual. These modes provide flow control signals to the boric acid and primary water makeup valves. The interface with the C&MS consists of input signals for boric acid and primary water flow rates (4-20 ma) and output control signals to the associated control valves (FCV-62-140 and -143). The C&MS shall interface with remote A/M controllers (FCV-62-139 and -142) located on the MCB. The PID control function for each controller is a software feature. Refer to Appendix E for listing of interfaces.
C. The channel accuracy of the reactor coolant system wide range temperature signals should be within +/-1.2% of range.
The C&MS shall compare the regulated flow rate for the boric acid and primary water to the selected control setpoint.
D. The channel (trip) accuracy of the reactor coolant system wide range pressure signals should be within +/- 2.0% of range.
Upon detection of a high or low deviation, the C&MS initiates an alarm (bistable) which actuates a MCR annunciation.
E. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.035% of both input and output channel span to the uncertainties specified in the above requirements of this section.
7.10       Range Pressurizer Pressure         1700 to 2500 psig Pressurizer Level           0 to 100% level Reactor coolant system       0 to 700MF wide range Temperature Reactor coolant system       0 to 3000 psig wide range Pressure Auctioneered Tavg for Pzr TBD Level Setpoint program 7.11       Inputs Reference drawings:
Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W610-68-series WBN 47W610-62-series WBN 47W611-68-series Automatic control inputs The inputs are documented in Appendix E
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 167 of 440 7.11     Inputs (continued)
AutolManual Hand stations The auto/manual handstations are show in Appendix F.
7.12       Outputs The outputs are documented in Appendix E Reference drawings:
Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W61 0-68-sedes WBN 47W610-62-series WBN 47W611-68-series 7.13     Proposed Signal Validation Designs A. Each Pressurizer Pressure channel shall consist of 2 input signals from like power train with a third input from the average of the redundant channel in the other power. These input signals shall use Medium Signal Select (MSS) input validation to select the Automatic control signal (see Figure 7.11). If one of the 2 train input signals is determined to be bad, the other Train input signal shall be used for control.
 
NPG Site-Specific   WBN Unit 2 NSSS and BOP Controls             Specification Engineering             Upgrade Specification                 Rev. 0001 Specification                                                   Page 168 of 440 7.13     Proposed Signal Validation Designs (continued)
PRZR     PRZR                                   PRZR   PRZR Presure Pressure III Pressurizer Pressure Signal Validation Scheme Figure 7.11
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 169 of 440 7.13     Proposed Signal Validation Designs (continued)
B. The Pressurizer level control signal shall consist of 3 input signals using MSS input validation to select the Automatic control signal. If one input signal is determined to be bad, the average of the remaining two signals shall be used for control.
Pzr Level I         Pzr Level 2         Pzr Level 3
: 1. Individual channel failure-alarm.
: 2. Two channel failure-manual hold with operator selection back to auto.
: 3. Three channel failure-manual hold.
Figure 7.12 7.14     Time Response 7.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all         I input signals of the Pressurizer Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Pressurizer Control System.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 170 of 440 7.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Pressurizer Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Pressurizer Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
7.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.
7.14.4 Manual Control Response The total delay for all manual component control signals of Pressurizer Control System shall be no greater than 1 second.
7.15       Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
7.16       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
7.17       Programmed Functions Pressurizer Pressure Functions
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls           Specification Engineering                     Upgrade Specification             Rev. 0001 Specification                                                     Page 171 of 440 7.17     Programmed Functions (continued)
Pressurizer Variable Heaters Input-Output Characteristic 10 Heater Demand (%)
0' 0   A Compensated Pressure Figure 7.13 Pressurizer Spray Valve Characteristic Spray             10 Demand (%)
0 //D 00C Compensated Pressure Figure 7.14 Pressurizer Water Level Programmed Functions Pressurizer Water Level Program Water Level         H Demand
(% of Span)
F G
E   Auctioneered Figure 7.15 Settings (Per Plant SSD for TC-68-2):
E = 557 F F = 59.6% Level G = 25% Level H = 586.2 F
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 172 of 440 7.17     Programmed Functions (continued)
Cold Overpressurization Mitigation System Reactor coolant system pressure setpoint program z
Y lide Range RCS         X Pressure (psig)       *   - - --- --------
V-------------               Il U-------------             III TI I I *,   541J I   J K L M N 0PO Wide Range RCS Temperature (rF)
Figure 7.16 7.18     Setpoints Set Points                                                 Ranae of Settina Variable Fixed High Pressure Alarm, Open                           2250 to 2500 psig Power Operated Relief Valves Low Pressure Deviation Alarm, Turn                         -200 to 0 psi Backup Heaters On (Low Controller Output)
High Pressure Deviation Alarm                             0 to 200 psi (High Controller Output)
Fixed High Water Level Alarm                               40 to 100% span Fixed Low Water Level Alarm, Turn                         0 to 50% span All Heaters Off, Isolate Letdown High Water Level Deviation Alarm                           0 to 20% span Low Water Level Deviation Alarm                           -20% to 0% span Open Power Operated Relief Valve (compensated pressure deviation)                           0 to 200 psi
 
NPG Site-Specific      VWBN Unit 2 NSSS and BOP Controls       Specification Engineering               Upgrade Specification           Rev. 0001 Specification                                               Page 173 of 440 7.18     Setpoints (continued)
A                                           -100 to 100 psi B                                         -1 to -10%/psi C                                         0 to 100 psi D                                         1 to 10%/psi E                                          540 to 5600 F F                                         0.25 to 5%/&deg;F G                                          0 to 50% of water level span H                                          20 to 70% of water level span Pressure Reference Setpoint                        1800 to 2400 psig Cold Overpressure Mitigation System Low auctioneered RCS temperature                  0 to 700F RCS pressure setpoint difference and PORV actuation                                -100 to 100 psi 700F J
1OO&deg;F K                                          150&deg;F L                                          200TF M                                          250&deg;F N                                          275&deg;F 0                                          300&deg;F P                                          3500 F Q                                          4500 F R                                          373 psig S                                          376 psig T                                          395 psig U                                          420 psig V                                          490 psig W                                          540 psig x                                          570 psig Y                                          570 psig z                                          2335 psig
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 174 of 440 7.19     Requirements for Test and Calibration The Pressurizer Pressure and Heater Level Control System is not a protection system and, therefore, does not require the capability of being tested at power. Surveillance testing will be performed for COMS prior to plant heatup and cooldown above and below 350F (Mode 4).
7.20     Applicable Criteria & Standards The following criteria apply to this system.
7.20.1 AEC General Design Criteria (GDC) (2/20/71): GDC 13, 19, 24 7.20.2 Institute of Electrical & Electronics Engineers (IEEE) Standards:
IEEE Std. 279-1971 (Section 4.7)
The above Criteria and Standards have been considered in preparing the requirements of this section
 
8.0   BA BLENDER CONTROLS INTRODUCTION 8.1       Overview A Boric Acid Blend Control System shall be provided for WBN Unit 2. The Control System shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.
8.2   Boric Acid Blender Control System Upgrade The scope of this upgrade consists of replacement of the existing NSSS Boric Acid Blender control system located in the NSSS control rack groupings. The existing controls are presently located in Rack 15 in the AIR with control stations located in the MCR. Remote I/O modules mounted in a 19 inch nest will be placed in the existing Foxboro cabinets (will use the baseplate for Racks 14/15/16). The associated Analog Outputs are not deemed Critical signals and do not require redundant output modules       I with passive switching for the final device. The control system outputs that presently feed through their individual handstations will be changed to eliminate the Handstation   I (HS) as a single point of failure. Remote 1/0 will be located in MCR. Any analog output devices will be changed out from 10 to 50 mA to 4 to 20 mA loops. Any 10 to 50 mA I/P converters will be changed out to a 4 to 20 mA type (to be supplied by TVA).
The following system graphics, at a minimum, shall be supplied. The Offerer shall list and describe the number and type of graphics that are proposed. Offerer should provide cost of additional screens.
System Mimics An additional mimic will be developed for Boric Acid Blender Controls. This mimic will consist of a Boric Acid Blender overview with Boric Flow, Primary Water Flow, Deviation Alarms, the Batch counters and Flow controllers for each flow loop, Mode selection with Status indication, and trending information 8.2.1     Critical Control System Signals Non-critical Control Signals One process input for each boric acid and primary water flow control loop will be provided. Gross failure detection shall be implemented and shall transfer the control system to manual upon detection of an input failure.
System Hazards Analysis The Offerer shall include the Boric Acid control system into the Hazards Analysis even though the inputs and outputs are single points of failure.
Some of the most important objectives of the failure study include:
0       The potential for over or under shooting boration and dilution.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 176 of 440 8.2.2       System Description and Operation The makeup control portion of the Chemical Volume and Control System (CVCS) provides boric acid solution and distillate to the RCS. It consists of equipment and a group of instruments arranged to provide a manually preselected makeup composition to the charging pump suction or the VCT. Makeup control functions are those of maintaining desired operating fluid inventory in the VCT and adjusting RCS boron concentration for reactivity control.
The boric acid batching tank is used to prepare fresh boric acid solution. The BATs store this solution. Initial filling and makeup quantities of the required percent boric acid solution are prepared in the batching tank by dissolving boric acid crystals in hot water.
The batch of boric acid is transferred to the BATs by the boric acid transfer pumps.
There are 2 two-speed boric acid transfer pumps per unit. One pump is normally run on slow speed to provide BAT recirculation. The recirculation flow is either at a fixed rate or at a rate set by the operator. The second pump of each pair can be aligned to the third BAT and is considered to be a standby pump, with service being transferred as operation requires.
A primary water pump, taking suction from the Primary Water Storage Tank (PWST),
provides flow to the boric acid blender where mixing with boric acid occurs. The mixture is then directed to the suction of the charging pumps or is sprayed into the Volume Control Tank (VCT).
8.2.3       Modes of Operation Reactor makeup control system can be set for the following modes of operation:
automatic makeup, dilution, alternate dilution, boration, and manual. These modes provide flow control signals to the boric acid and primary water makeup valves. The interface with the C&MS consists of input signals for boric acid and primary water flow rates (4-20 ma) and output control signals to the associated control valves (FCV             140 and -143). The C&MS shall interface with remote A/M controllers (FCV-62-139 and -142) located on the MCB. The PID control function for each controller is a software feature. Refer to Appendix E for listing of interfaces.
The C&MS shall compare the regulated flow rate for the boric acid and primary water to the selected control setpoint. Upon detection of a high or low deviation, the C&MS initiates an alarm (bistable) which actuates a MCR annunciation.
The C&MS shall develop control logic based upon discrete inputs for the Boric acid blender selector switch. Specifically, the C&MS shall receive discrete inputs when the selector switch is placed in "Auto Makeup" mode and "Dilute or Alternate Dilute" modes. When the selector switch is in either mode the primary water controller uses a fixed setpoint value.
The C&MS shall develop control logic based upon discrete inputs for the Boric acid blender selector switch. Specifically, the C&MS shall receive discrete inputs when the selector switch is placed in "Auto Makeup" mode and "Dilute or Alternate Dilute" modes. When the selector switch is in either mode the primary water controller uses a fixed setpoint value.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 177 of 440 8.2.3 Modes of Operation (continued)
 
: 1. "Automatic" makeup mode provides blended boric acid solution, preset to match the RCS boron concentration.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 177 of 440 8.2.3     Modes of Operation (continued)
Automatic makeup compensates for minor RCS leakage without causing significant changes in the coolant boron concentration.
: 1. "Automatic" makeup mode provides blended boric acid solution, preset to match the RCS boron concentration. Automatic makeup compensates for minor RCS leakage without causing significant changes in the coolant boron concentration. It operates on demand signals from the VCT level controller.
It operates on demand signals from the VCT level controller.
Below approximately 155 ppm boron, manual control of makeup may be required. Under normal plant operating condition, the makeup mode selector switch is set to "automatic" makeup position. This position establishes positions for the makeup stop valves for automatic makeup. The boric acid flow controller and primary water flow controller are set by the operator to blend to the same concentration as contained in the RCS. The mode selector switch must be in the correct position and the controller energized by prior manipulation of the "start' switch. A preset VCT low level signal initiates automatic makeup by opening the makeup stop valve FCV-62-144 to the charging pump suction, and positioning the boric acid flow control valve FCV-62-140 and primary water flow control valve FCV-62-143. Since a primary water pump runs continuously, automatic starting of this pump is not required.
Below approximately 155 ppm boron, manual control of makeup may be required.
The flow controllers then blend the makeup stream according to the preset concentration. Makeup addition to the charging pump suction causes VCT level to rise. At a preset high level point, the boric acid transfer pump transfers back to low speed, the primary water valve FCV-62-143 closes and the boric acid flow control valve FCV-62-140 closes, and the makeup stop valve FCV-62-144 closes. This operation may be terminated manually at any time by actuating the makeup controller to stop. The quantities of boric acid and primary water injected are totalized by batch counters and the flow rates are monitored by the plant computer system which provides recorded data capability. Deviation alarms for both boric acid and primary water are provided.
Under normal plant operating condition, the makeup mode selector switch is set to "automatic" makeup position.
If automatic makeup fails or is not aligned for operation and VCT level continues to decrease, a low-level alarm is actuated. Manual action may correct the situation or, if the level continues to decrease, a Io-io level signal opens valves LCV-62-135 and 136 in the RWST supply line to the charging pumps, and closes valves LCV-62-132 and 133 in the VCT outlet line.
This position establishes positions for the makeup stop valves for automatic makeup. The boric acid flow controller and primary water flow controller are set by the operator to blend to the same concentration as contained in the RCS. The mode selector switch must be in the correct position and the controller energized by prior manipulation of the "start' switch. A preset VCT low level signal initiates automatic makeup by opening the makeup stop valve FCV-62-144 to the charging pump suction, and positioning the boric acid flow control valve FCV-62-140 and primary water flow control valve FCV-62-143.
: 2. The "dilute" mode of operation permits the addition of a preselected quantity of primary water at a preselected flow rate to the RCS. The operator sets the mode selector switch to dilute, the primary water makeup batch integrator to the desired quantity and initiates system start. This opens the reactor makeup water flow control valve (FCV-62-143), and opens the makeup stop valve FCV-62-128 to the VCT inlet. The makeup water is injected through the VCT spray nozzle and through the tank to the charging pump suction. Excessive rise of the VCT water level is prevented by automatic actuation by the tank level controller of a three-way diversion valve 1-LCV-062-0118-A, which routes letdown flow to the HUTs. When the preset quantity of water has been added, the batch integrator causes makeup to stop and the primary water control valve (FCV-62-143) and makeup stop valve FCV-62-128 to close. This operation may be terminated manually at any time.
Since a primary water pump runs continuously, automatic starting of this pump is not required.The flow controllers then blend the makeup stream according to the preset concentration.
 
Makeup addition to the charging pump suction causes VCT level to rise. At a preset high level point, the boric acid transfer pump transfers back to low speed, the primary water valve FCV-62-143 closes and the boric acid flow control valve FCV-62-140 closes, and the makeup stop valve FCV-62-144 closes. This operation may be terminated manually at any time by actuating the makeup controller to stop. The quantities of boric acid and primary water injected are totalized by batch counters and the flow rates are monitored by the plant computer system which provides recorded data capability.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                   Rev. 0001 Specification                                                         Page 178 of 440 8.2.3   Modes of Operation (continued)
Deviation alarms for both boric acid and primary water are provided.If automatic makeup fails or is not aligned for operation and VCT level continues to decrease, a low-level alarm is actuated.
: 3. The "alternate dilute" mode of operation is similar to the dilute mode except a portion of the dilution water flows directly to the charging pump suction and a portion flows into the VCT via the spray nozzle. This decreases the delay in diluting the RCS caused by directing dilution water to only the VCT. The operator sets the mode selector to "alternate dilute," the primary water flow controller setpoint to the desired flow rate, the makeup water batch integrator to the desired quantity and actuates the makeup start. The start signal causes the makeup control action to open the makeup stop valve FCV-62-128 to the VCT, the makeup stop valve FCV-62-144 to the charging pump suction header, and the primary water control valve FCV-62-143. Primary water is simultaneously added to the VCT and the charging pump suction header. This mode is used for load follow and permits the dilution water to follow the initial xenon transient and simultaneously dilute the VCT. High VCT level is prevented by automatic actuation of the VCT level controller, which diverts letdown flow to the HUTs. When the preset quantity of primary water has been added, the batch integrator causes the primary water control valve FCV-62-143 and makeup stop valves to close. This operation may be terminated manually at any time.
Manual action may correct the situation or, if the level continues to decrease, a Io-io level signal opens valves LCV-62-135 and 136 in the RWST supply line to the charging pumps, and closes valves LCV-62-132 and 133 in the VCT outlet line.2. The "dilute" mode of operation permits the addition of a preselected quantity of primary water at a preselected flow rate to the RCS. The operator sets the mode selector switch to dilute, the primary water makeup batch integrator to the desired quantity and initiates system start. This opens the reactor makeup water flow control valve (FCV-62-143), and opens the makeup stop valve FCV-62-128 to the VCT inlet. The makeup water is injected through the VCT spray nozzle and through the tank to the charging pump suction. Excessive rise of the VCT water level is prevented by automatic actuation by the tank level controller of a three-way diversion valve 1 -LCV-062-0118-A, which routes letdown flow to the HUTs. When the preset quantity of water has been added, the batch integrator causes makeup to stop and the primary water control valve (FCV-62-143) and makeup stop valve FCV-62-128 to close. This operation may be terminated manually at any time.
: 4. The "borate" mode of operation permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate," the concentrated boric acid flow controller setpoint to the desired flow rate, the boric acid batch integrator to the desired quantity, and actuates the makeup start. This opens the makeup stop valve FCV-62-144 to the charging pump suction, positions the boric acid flow control valve FCV-62-140, and transfers the selected boric acid transfer pump to high speed, which delivers boric acid solution to the charging pumps suction header. The total quantity added in most cases is so small that it has only a minor effect on the VCT level. When the preset quantity of boric acid solution is added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and the boric acid control valve FCV-62-140 and the makeup stop valve FCV-62-144 to close. This operation may be terminated manually at any time.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 178 of 440 8.2.3 Modes of Operation (continued)
: 5. The "manual" mode of operation permits the addition of a preselected quantity and blend of boric acid solution to the VCT, RWST, HUTs, or to some other location via a temporary connection. While in the manual mode of operation, automatic makeup to the RCS is precluded. The discharge flow path to places other than the VCT must be prepared by opening a manual valve (62-929).
: 3. The "alternate dilute" mode of operation is similar to the dilute mode except a portion of the dilution water flows directly to the charging pump suction and a portion flows into the VCT via the spray nozzle. This decreases the delay in diluting the RCS caused by directing dilution water to only the VCT. The operator sets the mode selector to "alternate dilute," the primary water flow controller setpoint to the desired flow rate, the makeup water batch integrator to the desired quantity and actuates the makeup start. The start signal causes the makeup control action to open the makeup stop valve FCV-62-128 to the VCT, the makeup stop valve FCV-62-144 to the charging pump suction header, and the primary water control valve FCV-62-143.
The operator sets the mode selector switch to "manual," the boric acid and primary water flow controllers to the desired flow rates, the boric acid and primary water batch integrators to the desired quantities, and actuates the makeup start switch. The start switch actuates the boric acid flow control valve FCV-62-140 and the primary water flow control valve FCV-62-143 and transfers the preselected boric acid transfer pump to high speed.
Primary water is simultaneously added to the VCT and the charging pump suction header. This mode is used for load follow and permits the dilution water to follow the initial xenon transient and simultaneously dilute the VCT. High VCT level is prevented by automatic actuation of the VCT level controller, which diverts letdown flow to the HUTs. When the preset quantity of primary water has been added, the batch integrator causes the primary water control valve FCV-62-143 and makeup stop valves to close. This operation may be terminated manually at any time.4. The "borate" mode of operation permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate," the concentrated boric acid flow controller setpoint to the desired flow rate, the boric acid batch integrator to the desired quantity, and actuates the makeup start. This opens the makeup stop valve FCV-62-144 to the charging pump suction, positions the boric acid flow control valve FCV-62-140, and transfers the selected boric acid transfer pump to high speed, which delivers boric acid solution to the charging pumps suction header. The total quantity added in most cases is so small that it has only a minor effect on the VCT level. When the preset quantity of boric acid solution is added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and the boric acid control valve FCV-62-140 and the makeup stop valve FCV-62-144 to close. This operation may be terminated manually at any time.5. The "manual" mode of operation permits the addition of a preselected quantity and blend of boric acid solution to the VCT, RWST, HUTs, or to some other location via a temporary connection.
 
While in the manual mode of operation, automatic makeup to the RCS is precluded.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                           Page 179 of 440 8.2.3   Modes of Operation (continued)
The discharge flow path to places other than the VCT must be prepared by opening a manual valve (62-929).The operator sets the mode selector switch to "manual," the boric acid and primary water flow controllers to the desired flow rates, the boric acid and primary water batch integrators to the desired quantities, and actuates the makeup start switch. The start switch actuates the boric acid flow control valve FCV-62-140 and the primary water flow control valve FCV-62-143 and transfers the preselected boric acid transfer pump to high speed.
When the preset quantities of boric acid and primary water have been added, the batch integrators cause makeup to stop. This operation may be stopped manually any time. If either batch integrator is satisfied before the other has recorded its required total, the valve associated with the integrator which has been satisfied will terminate its flow. The flow controlled by the other integrator will continue until that integrator is satisfied. In the manual mode, the boric acid flow is terminated first to prevent piping systems from remaining filled with boric acid solution.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 179 of 440 8.2.3 Modes of Operation (continued)
Deviation alarms sound for both boric acid and primary water ifflow rates deviate from setpoints.
When the preset quantities of boric acid and primary water have been added, the batch integrators cause makeup to stop. This operation may be stopped manually any time. If either batch integrator is satisfied before the other has recorded its required total, the valve associated with the integrator which has been satisfied will terminate its flow. The flow controlled by the other integrator will continue until that integrator is satisfied.
8.2.4     Associated Equipment and Instrumentation Boric Acid Transfer Pumps There are four boric acid transfer pumps located in the auxiliary building. Two pumps are usually used. Normally one pump is aligned with one BAT and runs continuously at low speed to provide recirculation for the boric acid system and BAT. The second pump of each pair is aligned to the third BAT and is considered a standby pump. The standby pumps also intermittently circulate fluid through the third tank to maintain thermal equilibrium in this part of the system. These pumps transfer boric acid for normal or emergency boration to the CCP suction.
In the manual mode, the boric acid flow is terminated first to prevent piping systems from remaining filled with boric acid solution.Deviation alarms sound for both boric acid and primary water if flow rates deviate from setpoints.
The design capacity of each pump is equal to the normal letdown flow, with the capacity of both pumps being equivalent to the normal design capacity of one CCP.
8.2.4 Associated Equipment and Instrumentation Boric Acid Transfer Pumps There are four boric acid transfer pumps located in the auxiliary building.
The design discharge pressure is sufficient to overcome any pressures which may exist in the charging pump suction manifold.
Two pumps are usually used. Normally one pump is aligned with one BAT and runs continuously at low speed to provide recirculation for the boric acid system and BAT. The second pump of each pair is aligned to the third BAT and is considered a standby pump. The standby pumps also intermittently circulate fluid through the third tank to maintain thermal equilibrium in this part of the system. These pumps transfer boric acid for normal or emergency boration to the CCP suction.The design capacity of each pump is equal to the normal letdown flow, with the capacity of both pumps being equivalent to the normal design capacity of one CCP.The design discharge pressure is sufficient to overcome any pressures which may exist in the charging pump suction manifold.Boric Acid Blender There is one blender located in the auxiliary building.
Boric Acid Blender There is one blender located in the auxiliary building. The blenders ensure thorough mixing of the boric acid and primary water for reactor coolant makeup. The blender decreases the pipe length required to homogenize the mixture for taking a representative local sample. The flow rate normally varies Boric Acid Flow Control Valve, I -FCV-62-140 (1 -FCV.I OA)
The blenders ensure thorough mixing of the boric acid and primary water for reactor coolant makeup. The blender decreases the pipe length required to homogenize the mixture for taking a representative local sample. The flow rate normally varies Boric Acid Flow Control Valve, I -FCV-62-140 (1 -FCV.I OA)These air-operated normally open globe valves are used to supply boric acid to the boric acid blender at a preset flowrate.Primary Makeup Water Control Valve, 1-FCV-62-143 (1-FCV-111A)
These air-operated normally open globe valves are used to supply boric acid to the boric acid blender at a preset flowrate.
Primary Makeup Water Control Valve, 1-FCV-62-143 (1-FCV-111A)
These air-operated normally closed globe valves are used to supply primary makeup water to the boric acid blender at a preset flowrate.
These air-operated normally closed globe valves are used to supply primary makeup water to the boric acid blender at a preset flowrate.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 180 of 440 8.2.4 Associated Equipment and Instrumentation (continued)
 
Primary Water to Boric Acid Blender, 1 -FIT-62-142 (1&2-FIT-1 11)These instruments are part of the makeup control system and in connection with FT-62-139 provide a manually preselected makeup composition to the charging pump suction header or the VCT. During automatic makeup distillate is provided such that the dilute boric acid solution blended matches RCS boron concentration.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 180 of 440 8.2.4     Associated Equipment and Instrumentation (continued)
A preset low level signal from the VCT initiates makeup until a preset high level is reached. The quantity of primary water injected is totalized by the batch counters and flow rates are recorded.During "dilute", a preselected quantity of primary makeup water at a preselected flow rate is added to the RCS. The operator sets the mode selector switch to "dilute", the primary makeup water flow controller setpoint to the desired flowrate, the primary batch integrator to the desired quantity and actuates the makeup start. The start signal opens the makeup stop valve (FCV-62-128) to the VCT inlet. When the preselected quantity of primary water is added, the batch integrator causes the primary water valve to close. The "alternate dilute" mode is similar to the "dilute" mode except a portion of the primary makeup water flow directly to the charging pump suction and a portion flows into the VCT.Boric Acid Flow to Boric Acid Blender, 1-FT-62-139 (1&2-FT-110)
Primary Water to Boric Acid Blender, 1 -FIT-62-142 (1&2-FIT-1 11)
These instrumerts are part of the reactor makeup control system and, in conjunction with FIT-62-142, provide a manually preselected makeup composition to the charging pump suction or the VCT. During automatic makeup concentrated boric acid is provided such that the dilute boric acid solution blended matches the RCS BORON CONCENTRATION.
These instruments are part of the makeup control system and in connection with FT-62-139 provide a manually preselected makeup composition to the charging pump suction header or the VCT. During automatic makeup distillate is provided such that the dilute boric acid solution blended matches RCS boron concentration. A preset low level signal from the VCT initiates makeup until a preset high level is reached. The quantity of primary water injected is totalized by the batch counters and flow rates are recorded.
A preset low VCT level signal causes the transfer of a boric acid transfer pump to high speed, opens the primary water makeup valve (FCV-62-143), the boric acid flow control valve (FCV-62-140) and makeup stop valve FCV-62-144.
During "dilute", a preselected quantity of primary makeup water at a preselected flow rate is added to the RCS. The operator sets the mode selector switch to "dilute", the primary makeup water flow controller setpoint to the desired flowrate, the primary batch integrator to the desired quantity and actuates the makeup start. The start signal opens the makeup stop valve (FCV-62-128) to the VCT inlet. When the preselected quantity of primary water is added, the batch integrator causes the primary water valve to close. The "alternate dilute" mode is similar to the "dilute" mode except a portion of the primary makeup water flow directly to the charging pump suction and a portion flows into the VCT.
At a preset high VCT level, the boric acid transfer pump transfers back to low speed and FCV-62-143, FCV-62-140, and the makeup stop valve (FCV-62-144) close.The quantity of boric acid injected is totalized by batch counter and flow rates are monitored by a plant computer system which provides recorded data capability.
Boric Acid Flow to Boric Acid Blender, 1-FT-62-139 (1&2-FT-110)
The "borate" mode permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate", the concentrated boric acid flow controller setpoint to the desired flow rate, the concentrated boric acid batch integrator to the desired quantity, and actuates the makeup start. Actuating the start opens the makeup stop valve (FCV-62-144) to the charging pump suction and boric acid control valve (FCV-62-140), and transfers the boric acid transfer pump to high speed. The boric acid is added to the charging pump suction header. When the preset quantity of concentrated boric acid solution has been added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and FCV-62-140 and 144 to dose.
These instrumerts are part of the reactor makeup control system and, in conjunction with FIT-62-142, provide a manually preselected makeup composition to the charging pump suction or the VCT. During automatic makeup concentrated boric acid is provided such that the dilute boric acid solution blended matches the RCS BORON CONCENTRATION. A preset low VCT level signal causes the transfer of a boric acid transfer pump to high speed, opens the primary water makeup valve (FCV-62-143),
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 181 of 440 8.2.5 Makeup System Operating Precautions
the boric acid flow control valve (FCV-62-140) and makeup stop valve FCV-62-144. At a preset high VCT level, the boric acid transfer pump transfers back to low speed and FCV-62-143, FCV-62-140, and the makeup stop valve (FCV-62-144) close.
The quantity of boric acid injected is totalized by batch counter and flow rates are monitored by a plant computer system which provides recorded data capability.
The "borate" mode permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate", the concentrated boric acid flow controller setpoint to the desired flow rate, the concentrated boric acid batch integrator to the desired quantity, and actuates the makeup start. Actuating the start opens the makeup stop valve (FCV-62-144) to the charging pump suction and boric acid control valve (FCV             140), and transfers the boric acid transfer pump to high speed. The boric acid is added to the charging pump suction header. When the preset quantity of concentrated boric acid solution has been added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and FCV-62-140 and 144 to dose.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 181 of 440 8.2.5     Makeup System Operating Precautions
: 1. Except during boration or dilution operations, the makeup system should be operated in the automatic mode with the boron concentration setting adjusted to match RCS concentration.
: 1. Except during boration or dilution operations, the makeup system should be operated in the automatic mode with the boron concentration setting adjusted to match RCS concentration.
: 2. Changes in reactor coolant chemistry should be anticipated whenever the boron concentration is altered. During long term dilution, the reactor coolant should periodically be checked to ensure compliance with the chemistry specifications.
: 2. Changes in reactor coolant chemistry should be anticipated whenever the boron concentration is altered. During long term dilution, the reactor coolant should periodically be checked to ensure compliance with the chemistry specifications.
: 3. RCS dilution may be performed only when the reactor is substantially subcritical or with the control rods above their insertion limit.4. The effects of boration or dilution while the reactor is subcritical must be monitored by observing the source range count rate. If the count rate increases at an unexpected rate, the operation must be stopped.5. The effects of boration and dilution at power must be monitored by observing the resulting control rod bank movement and changes in coolant average temperature.
: 3. RCS dilution may be performed only when the reactor is substantially subcritical or with the control rods above their insertion limit.
: 4. The effects of boration or dilution while the reactor is subcritical must be monitored by observing the source range count rate. Ifthe count rate increases at an unexpected rate, the operation must be stopped.
: 5. The effects of boration and dilution at power must be monitored by observing the resulting control rod bank movement and changes in coolant average temperature.
The operation must be stopped if the control bank movement is in the wrong direction.
The operation must be stopped if the control bank movement is in the wrong direction.
: 6. When operating at a reduced load, it is preferable to adjust boron concentration so that the control rods are maintained in a position that facilitates responses to load increases within the restraints of constant axial offset control.7. PZR boron concentration should not be less than the concentration in the RCS loops by more than 50 ppm. PZR spray should be operated to equalize the concentrations.
: 6. When operating at a reduced load, it is preferable to adjust boron concentration so that the control rods are maintained in a position that facilitates responses to load increases within the restraints of constant axial offset control.
Operation of the heaters will cause automatic operation of the sprays.8. Operation of the reactor makeup system should be avoided in the dilute mode and the alternate dilute mode with a primary water flow controller setting of 5-10% due to the potential for controller oscillations.
: 7. PZR boron concentration should not be less than the concentration in the RCS loops by more than 50 ppm. PZR spray should be operated to equalize the concentrations. Operation of the heaters will cause automatic operation of the sprays.
8.2.6 Malfunction of Reactor Makeup Control Indication of possible reactor makeup malfunctions include: 1. Status lights on the control board indicating CVCS operating conditions.
: 8. Operation of the reactor makeup system should be avoided in the dilute mode and the alternate dilute mode with a primary water flow controller setting of 5-10% due to the potential for controller oscillations.
8.2.6     Malfunction of Reactor Makeup Control Indication of possible reactor makeup malfunctions include:
: 1. Status lights on the control board indicating CVCS operating conditions.
: 2. CVCS deviation in boric acid and/or primary water flow from programmed valves.
: 2. CVCS deviation in boric acid and/or primary water flow from programmed valves.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 182 of 440 8.2.6 Malfunction of Reactor Makeup Control (continued)
 
: 3. VCT level deviation from programmed level. Dilution during refueling is prevented by administrative controls.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                   Rev. 0001 Specification                                                         Page 182 of 440 8.2.6   Malfunction of Reactor Makeup Control (continued)
Dudng an inadvertent RCS dilution during shutdown, the operator should close FCV-62-143 and stop the primary water pump, if necessary.
: 3. VCT level deviation from programmed level. Dilution during refueling is prevented by administrative controls. Dudng an inadvertent RCS dilution during shutdown, the operator should close FCV-62-143 and stop the primary water pump, if necessary. Boration should be initiated until the required shutdown reactivity is established. During an inadvertent RCS dilution during startup, the operator should initiate boration, close FCV                       143, and stop the primary water pumps, if necessary. Lf the reactor has not reached criticality, the control rods are inserted and the RCS is borated. If the reactor has reached criticality, the control rods are inserted to prevent power escalation. During an inadvertent RCS dilution during power operation, a deviation alarm will close FCV-62-128 and 144. The operator should close FCV-62-143 and stop the primary water pumps, if necessary.
Boration should be initiated until the required shutdown reactivity is established.
The control rods should be inserted and the RCS should be borated, if necessary. During an inadvertent RCS boration, the operator should verify that 62-929, FCV-62-138, LCV-62-135, and 136 are closed, that LCV                       132 and 133 are open, and that the blender is not in the boration mode.
During an inadvertent RCS dilution during startup, the operator should initiate boration, close FCV-62-143, and stop the primary water pumps, if necessary.
The operator should dilute the RCS, as needed. The blender is reset to a new RCS boron concentration. If automatic makeup cannot be achieved then makeup will be performed manually. See Ref. 7.4.28 for additional requirements during dilution events.
Lf the reactor has not reached criticality, the control rods are inserted and the RCS is borated. If the reactor has reached criticality, the control rods are inserted to prevent power escalation.
: 4. PZR level and pressure deviations.
During an inadvertent RCS dilution during power operation, a deviation alarm will close FCV-62-128 and 144. The operator should close FCV-62-143 and stop the primary water pumps, if necessary.
8.2.7   Boric Acid Flow Control Loop Boric Acid Flow Functions
The control rods should be inserted and the RCS should be borated, if necessary.
: 1. Analog input for transmitter FT-62-139 (FT-1 10) is self powered, range is 0 - 40 gpm, 4-20 output and signal termination is in R15.
During an inadvertent RCS boration, the operator should verify that 62-929, FCV-62-138, LCV-62-135, and 136 are closed, that LCV-62-132 and 133 are open, and that the blender is not in the boration mode.The operator should dilute the RCS, as needed. The blender is reset to a new RCS boron concentration.
: 2. Outputs to a Flow Indicator and Flow Recorder (M-6)
If automatic makeup cannot be achieved then makeup will be performed manually.
: 3. Batch Counter (M-6) with Manual Setpoint adjustment and Indication
See Ref. 7.4.28 for additional requirements during dilution events.4. PZR level and pressure deviations.
: 4. Contact closure when Boration Mode demand has been met will be relocated to MCR FBM.
8.2.7 Boric Acid Flow Control Loop Boric Acid Flow Functions 1. Analog input for transmitter FT-62-139 (FT-1 10) is self powered, range is 0 -40 gpm, 4-20 output and signal termination is in R15.2. Outputs to a Flow Indicator and Flow Recorder (M-6)3. Batch Counter (M-6) with Manual Setpoint adjustment and Indication
: 5. Pulse output from the Batch Counter function to the ICS
: 4. Contact closure when Boration Mode demand has been met will be relocated to MCR FBM.5. Pulse output from the Batch Counter function to the ICS 6. High and low setpoint deviation values and output alarms.7. Refer to App E for listing of Input and output parameters..
: 6. High and low setpoint deviation values and output alarms.
8.2.8 Primary Water Flow Control Loop Primary Water Flow NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 183 of 440 8.2.8 Primary Water Flow Control Loop (continued)
: 7. Refer to App E for listing of Input and output parameters..
: 1. Analog input for transmitter FIT-62-142 (FT-111) is self powered, range is 0 -200 gpm, 4-20 output, and signal termination is in 2-R-15.2. Outputs to a Flow Indicator and Flow Recorder (2-M-6)3. Batch Counter (2-M-6) with Manual Setpoint adjustment and indication
8.2.8   Primary Water Flow Control Loop Primary Water Flow
: 4. Contact closure when Dilute or Alternate Dilute Mode demand has been met will be relocated to MCR FBM.8. Pulse output from the Batch Counter function to the ICS.5. High and low setpoint deviation values and alarms.6. Other inputs to this controller is Auto Makeup status, Dilute or Alternate Dilute status, Fixed setpoint for Auto Makeup mode.7. See App E for listing of input and output parameters.
 
8.2.9 Boric Acid Flow Control System Improvements
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 183 of 440 8.2.8   Primary Water Flow Control Loop (continued)
: 1. Present Control Scheme -The present system when operated in automatic overshoots the demand Boration/Primary Water change. This is due to the response time delays of the control valves. The valves are demanded to close once the targeted addition has been meet but the only initiates the valves to close. The valves take 2-4 seconds (WBN is required to perform a field measurement of the valves' response times and provide this information to the Offerer) to close once the closure signal is actuated.2. Proposed Control Scheme -The Offerer shall provide a design that has the valves close at the time that the demand has been met (+/- 0.25 gallons).
: 1. Analog input for transmitter FIT-62-142 (FT-111) is self powered, range is 0 -
This can be performed using the measured flowrates of the loops and a variable gain function where the valve's position/flow is reduced as the demand setpoint is approached, factored in valve response times and valve flow characteristics at low flow conditions when the flow measurement are not accurate, and any other suggested techniques that the Offerer may suggest.The system shall also respond to control system component malfunctions such as sluggish or sticky valves using demand versus flowrate deviation to stop the boration or dilution if a problem is detected.3. MCR Handstation is obsolete and requires replacement.
200 gpm, 4-20 output, and signal termination is in 2-R-15.
8.3 Indicators, Status Lights. and Controls The control system should interface with the following signals: A. Provide Main Control Board Indicators NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 184 of 440 8.3 Indicators, Status Ughts. and Controls (continued) 1 Boric Acid Flow Signal (4 to 20 MA)1. Boric Acid Flow Signal (4 to 20 MA)2. Primary Water Flow Signal (4 to 20 MA)3. Controller Output signal to boric acid flow control valve (4 to 20 MA).4. Controller Output signal to boric acid control valve (4 to 20 MA)5. Controller ANM Station (2) on MCB.8.4 Alarms and Annunciators The following should actuate an alarm and annunciator:
: 2. Outputs to a Flow Indicator and Flow Recorder (2-M-6)
B. High or low deviation between Boric Acid flow and setpoint;C. High or low deviation between Primary flow and setpoint;8.5 Performance Limits VerifiGations and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and TVA shall work together to determine how best to perform this V&V.A. The Boric Acid and Primary Batch Control systems shall be provide the demanded value within a maximum of +/- 1/4 gallons.B. In order to characterize the variable gain function, as found data for loop response times and valve characterization for the existing control system shall be taken by TVA. This performance data shall be factored into the performance limit acceptance criteria.
: 3. Batch Counter (2-M-6) with Manual Setpoint adjustment and indication
The control system open loop response is defined as the time delay from the change of process parameters to final output device response.
: 4. Contact closure when Dilute or Alternate Dilute Mode demand has been met will be relocated to MCR FBM.
This data shall be collected during an outage.
: 8. Pulse output from the Batch Counter function to the ICS.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 185 of 440 8.6 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
: 5. High and low setpoint deviation values and alarms.
Rack environmental effects are not included in channel accuracy.
: 6. Other inputs to this controller is Auto Makeup status, Dilute or Alternate Dilute status, Fixed setpoint for Auto Makeup mode.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
: 7. See App E for listing of input and output parameters.
Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.D. The accuracy of the control systems should be good enough to meet the performance limit of section 4.31.8.7 Range 8.8 Inputs Additional information for these inputs are documented in Appendix E Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.8.9 Outputs The outputs are documented in Appendix E 8.10 Time Response 8.10.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.
8.2.9     Boric Acid Flow Control System Improvements
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 186 of 440 8.10.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the BA Blender Control System shall not exceed 1000 milli-seconds.
: 1. Present Control Scheme - The present system when operated in automatic overshoots the demand Boration/Primary Water change. This is due to the response time delays of the control valves. The valves are demanded to close once the targeted addition has been meet but the only initiates the valves to close. The valves take 2-4 seconds (WBN is required to perform a field measurement of the valves' response times and provide this information to the Offerer) to close once the closure signal is actuated.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
: 2. Proposed Control Scheme - The Offerer shall provide a design that has the valves close at the time that the demand has been met (+/- 0.25 gallons). This can be performed using the measured flowrates of the loops and a variable gain function where the valve's position/flow is reduced as the demand setpoint is approached, factored in valve response times and valve flow characteristics at low flow conditions when the flow measurement are not accurate, and any other suggested techniques that the Offerer may suggest.
8.10.3 Manual Control Response The total delay for all manual component control signals of BA Blender Control System shaBl be no greater than 1 second.8.10.4 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units, The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.8.11 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.8.12 Setpoints The following information is based upon SON. WBN's values may be different.
The system shall also respond to control system component malfunctions such as sluggish or sticky valves using demand versus flowrate deviation to stop the boration or dilution if a problem is detected.
Variable Setting High Boric Acid Flow Deviation 0 to 5 gpm Low Boric Acid Flow Deviation 0 to 5 gpm High Primary Water Flow Deviation 0 to 10 gpm Low Primary Water Flow Deviation 0 to 10 gpm NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 187 of 440 8.12 Setpoints (continued)
: 3. MCR Handstation is obsolete and requires replacement.
All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.8.13 Requirements for Test and Calibration The BA Blender Control System is not a protection system, and therefore, does not require the capability of being tested at power.9.0 CVCS CONTROL SYSTEM REQUIREMENTS 9.1 System Description The chemical and volume control system is a major auxiliary system that functions to control Reactor Coolant System (RCS) inventory, to maintain RCS chemistry, to provide the reactor coolant pumps with seal water, and to control the soluble poison concentration of the RCS. In addition, the CVCS supplies borated coolant to the RCS in the event of an accident.Major system interfaces include the pressurizer level control system, which varies charging flow based upon pressurizer level; the reactor makeup system that allows boric acid, demineralized water, and corrosion inhibiting chemicals to be added; and the emergency core cooling systems, which provide the high pressure injection portion of the system with borated water.A. Purposes.1. Maintains programmed pressurizer level.2. Controls reactor coolant chemistry and activity.3. Adjusts and controls reactor coolant boron concentration.
8.3       Indicators, Status Lights. and Controls The control system should interface with the following signals:
: 4. Provides reactor coolant makeup.5. Supplies seal water to the reactor coolant pumps.6. Portions used for emergency core cooling and emergency boration.7. Used to fill and hydrostatically test the reactor coolant system.B. Subsystems
A. Provide Main Control Board Indicators
 
NPG Site-Specific         WBN Unit 2 NSSS and SOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 184 of 440 8.3       Indicators, Status Ughts. and Controls (continued) 1     Boric Acid Flow Signal (4 to 20 MA)
: 1. Boric Acid Flow Signal (4 to 20 MA)
: 2. Primary Water Flow Signal (4 to 20 MA)
: 3. Controller Output signal to boric acid flow control valve (4 to 20 MA).
: 4. Controller Output signal to boric acid control valve (4 to 20 MA)
: 5. Controller ANM Station (2) on MCB.
8.4       Alarms and Annunciators The following should actuate an alarm and annunciator:
B. High or low deviation between Boric Acid flow and setpoint; C. High or low deviation between Primary flow and setpoint; 8.5       Performance Limits VerifiGations and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and TVA shall work together to determine how best to perform this V&V.
A. The Boric Acid and Primary Batch Control systems shall be provide the demanded value within a maximum of +/- 1/4 gallons.
B. In order to characterize the variable gain function, as found data for loop response times and valve characterization for the existing control system shall be taken by TVA. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response. This data shall be collected during an outage.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 185 of 440 8.6       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
D. The accuracy of the control systems should be good enough to meet the performance limit of section 4.31.
8.7       Range 8.8       Inputs Additional information for these inputs are documented in Appendix E Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
8.9       Outputs The outputs are documented in Appendix E 8.10     Time Response 8.10.1     Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 186 of 440 8.10.2   Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the BA Blender Control System shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
8.10.3     Manual Control Response The total delay for all manual component control signals of BA Blender Control System shaBl be no greater than 1 second.
8.10.4   Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units, The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
8.11       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
8.12       Setpoints The following information is based upon SON. WBN's values may be different.
Variable                                                     Setting High Boric Acid Flow Deviation                               0 to 5 gpm Low Boric Acid Flow Deviation                               0 to 5 gpm High Primary Water Flow Deviation                           0 to 10 gpm Low Primary Water Flow Deviation                             0 to 10 gpm
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 187 of 440 8.12     Setpoints (continued)
All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
8.13       Requirements for Test and Calibration The BA Blender Control System is not a protection system, and therefore, does not require the capability of being tested at power.
9.0       CVCS CONTROL SYSTEM REQUIREMENTS 9.1       System Description The chemical and volume control system is a major auxiliary system that functions to control Reactor Coolant System (RCS) inventory, to maintain RCS chemistry, to provide the reactor coolant pumps with seal water, and to control the soluble poison concentration of the RCS. In addition, the CVCS supplies borated coolant to the RCS in the event of an accident.
Major system interfaces include the pressurizer level control system, which varies charging flow based upon pressurizer level; the reactor makeup system that allows boric acid, demineralized water, and corrosion inhibiting chemicals to be added; and the emergency core cooling systems, which provide the high pressure injection portion of the system with borated water.
A. Purposes.
: 1. Maintains programmed pressurizer level.
: 2.     Controls reactor coolant chemistry and activity.
: 3.     Adjusts and controls reactor coolant boron concentration.
: 4.     Provides reactor coolant makeup.
: 5.     Supplies seal water to the reactor coolant pumps.
: 6.     Portions used for emergency core cooling and emergency boration.
: 7.     Used to fill and hydrostatically test the reactor coolant system.
B. Subsystems
: 1. Charging, letdown, and seal water system subsystems
: 1. Charging, letdown, and seal water system subsystems
: 2. Chemical control, purification, and makeup system 9.2 CVCS Control Systems The chemical and volume controls perform the following functions:
: 2.     Chemical control, purification, and makeup system 9.2       CVCS Control Systems The chemical and volume controls perform the following functions:
9.2.1 Pressure Control Systems NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 188 of 440 9.2.1 Pressure Control Systems (continued)
9.2.1     Pressure Control Systems
Excess letdown HX outlet pressure, PT-62-57 This instrument provides MCR indication of the pressure of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56).
 
The indicated pressure is used in setting the control valve such that the pressure does not exceed the allowable backpressure on the Reactor Coolant Pump (RCP) No. 1 seals.Letdown HX Pressure Control, PC-62-81 This instrument controls pressure downstream of the letdown orifices to prevent flashing.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering               Upgrade Specification                 Rev. 0001 Specification                                                     Page 188 of 440 9.2.1                   Pressure Control Systems (continued)
Normally the low-pressure letdown valve (PCV-62-81) is controlled to maintain the pressure at its setpoint.
Excess letdown HX outlet pressure, PT-62-57 This instrument provides MCR indication of the pressure of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56). The indicated pressure is used in setting the control valve such that the pressure does not exceed the allowable backpressure on the Reactor Coolant Pump (RCP) No. 1 seals.
The air-operated modulating valve can be manually controlled from an auto-manual controller in the MCR. A secondary function is to maintain the RO system pressure while solid. This loop also provides MCR Indication along with an Annunciation and Computer monitoring.
Letdown HX Pressure Control, PC-62-81 This instrument controls pressure downstream of the letdown orifices to prevent flashing. Normally the low-pressure letdown valve (PCV-62-81) is controlled to maintain the pressure at its setpoint. The air-operated modulating valve can be manually controlled from an auto-manual controller in the MCR. A secondary function is to maintain the RO system pressure while solid. This loop also provides MCR Indication along with an Annunciation and Computer monitoring.
RCP No. 1 Seal DP, PdT-62-8, 21. 34, and 47 These instruments indicate the dP across RCPs No. 1 seals both in the MCR and locally. The dP is employed during a startup to ensure separation of the seal faces. The low-alarm indicates insufficient dP for correct lubrication and cooling of the No. 1 seal.VCT Pressure, PT-62-122 VCT Pressure MCR indication, annunciation, and a computer alarm are provided: High pressure alarm at 65 PSIG.Low pressure alarm at 13 PSIG.Regenerative Hx Pressure, PT-62-92A This loop provides MCR and local indication along with Computer monitoring.
RCP No. 1 Seal DP, PdT-62-8, 21. 34, and 47 These instruments indicate the dP across RCPs No. 1 seals both in the MCR and locally. The dP is employed during a startup to ensure separation of the seal faces. The low-alarm indicates insufficient dP for correct lubrication and cooling of the No. 1 seal.
9.2.2 Temperature Control Systems RCP Low Bearinq Temperature, TE-62-3, 16, 29, and 42 These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.
VCT Pressure, PT-62-122 VCT Pressure MCR indication, annunciation, and a computer alarm are provided:
Letdown Line Relief Valve Discharge Temperature.
High pressure alarm at 65 PSIG.
TE-62-75 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 189 of 440 9.2.2 Temperature Control Systems (continued)
Low pressure alarm at 13 PSIG.
The RTD temperature measurement indicates high temperature in the discharge line of relief valve 62-662 which is located in the letdown line downstream of the letdown orifices.
Regenerative Hx Pressure, PT-62-92A This loop provides MCR and local indication along with Computer monitoring.
The alarm annunciates when the relief valve is either leaking or open.Letdown Temperature Control, TE-62-78 This instrument indicates and controls the temperature of the letdown flow exiting the letdown heat exchanger (HX). The temperature sensor (TE-62-78) provides input to the controller in the CCS water. The exit temperature is controlled by regulating the CCS water flow through the letdown HX. The control system is set to maintain the letdown temperature downstream of the letdown HX at its setpoint temperature.
9.2.2 Temperature Control Systems RCP Low Bearinq Temperature, TE-62-3, 16, 29, and 42 These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.
Temperature control valve TCV-70-192 on CCS outlet, controls temperature at approximately 110 F. TE-62-78 inputs to HIC-62-78 which controls TCV-70-192 to maintain letdown temp. These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.
Letdown Line Relief Valve Discharge Temperature. TE-62-75
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                     Page 189 of 440 9.2.2     Temperature Control Systems (continued)
The RTD temperature measurement indicates high temperature in the discharge line of relief valve 62-662 which is located in the letdown line downstream of the letdown orifices. The alarm annunciates when the relief valve is either leaking or open.
Letdown Temperature Control, TE-62-78 This instrument indicates and controls the temperature of the letdown flow exiting the letdown heat exchanger (HX). The temperature sensor (TE                     78) provides input to the controller in the CCS water. The exit temperature is controlled by regulating the CCS water flow through the letdown HX. The control system is set to maintain the letdown temperature downstream of the letdown HX at its setpoint temperature. Temperature control valve TCV-70-192 on CCS outlet, controls temperature at approximately 110 F. TE                     78 inputs to HIC-62-78 which controls TCV-70-192 to maintain letdown temp. These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.
Excess Letdown Temperature, TE-62-58 This RTD temperature measurement provides MCR Indication along with an Annunciation and Computer monitoring of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56).
Excess Letdown Temperature, TE-62-58 This RTD temperature measurement provides MCR Indication along with an Annunciation and Computer monitoring of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56).
Regenerative Hx TemD. TE-62-87 This RTD temperature measurement provides MCR Indication along with Computer monitoring of Makeup flow leaving the Regenerative Hx.Regenerative Hx Letdown Temp, TE-62-71 This RTD temperature measurement provides MCR Indication along with a Annunciation and Computer monitoring of the letdown flow downstream of the Regenerative HX.RCPs No. 1 Seal Outlet Temperature, TE-62-4. -17, -30. -43 These temperature indicators monitor each RCP's No. 1 seal water leakage temperature.
Regenerative Hx TemD. TE-62-87 This RTD temperature measurement provides MCR Indication along with Computer monitoring of Makeup flow leaving the Regenerative Hx.
These RTD measurements provide MCR Indication along with a Annunciation and Computer monitoring.
Regenerative Hx Letdown Temp, TE-62-71 This RTD temperature measurement provides MCR Indication along with a Annunciation and Computer monitoring of the letdown flow downstream of the Regenerative HX.
VCT Outlet Temperature.
RCPs No. 1 Seal Outlet Temperature, TE-62-4. -17, -30. -43 These temperature indicators monitor each RCP's No. 1 seal water leakage temperature. These RTD measurements provide MCR Indication along with a Annunciation and Computer monitoring.
TE-62-131 VCT Outlet Temperature MCR indication, annunciation, and a computer alarm are provided 9.2.3 Level Control Systems NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 190 of 440 9.2.3 Level Control Systems (continued)
VCT Outlet Temperature. TE-62-131 VCT Outlet Temperature MCR indication, annunciation, and a computer alarm are provided 9.2.3 Level Control Systems
VCT Level Control (LT-62-130A and -129A)This system consists of two level control channels which govern VCT water inventory.
 
During operation above normal level, one channel provides an analog signal to a proportional controller which modulates the three-way valve downstream of the reactor coolant filter to maintain the VCT level within a normal operating band. The level controller maintains the three-way valve (LCV-62-1  
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 190 of 440 9.2.3     Level Control Systems (continued)
: 18) such that a portion of the letdown flow goes to the Holdup Tank (HUT) and a portion to the VCT. The controller would operate in this fashion during a dilution operation when reactor makeup is being fed to the VCT from the reactor makeup control system.If the modulating function of the channel fails and the VCT level continues to rise, then the backup level channel will cause the three-way valve to be switched to the fully divert position.Three-way level control valve LCV-62-118 diverts to holdup tanks on high VCT level.* 63 percent starts diverting to holdup tanks.* 93 percent fully diverting to holdup tanks.* Action reverses as level returns to normal in VCT.During normal power operation, a low VCT level initiates auto makeup which injects a pre-selected blend of boron and water into the charging pump suction header. When the VCT level is restored to normal, auto makeup stops.if the automatic makeup fails and the level continues to decrease a Io-lo level signal from both channels opens the stop valves (LCV-62-135 and LCV-62-136) in the RWST supply line and then closes the stop valves (LCV-62-132 and LCV-62-133) in the VCT outlet line." Normally from VCT through valves LCV-62-132 and -133. Valves close on low-low VCT tank level of 7 percent, [both signals require FCV-62-135 or 136 full open to close the VCT outlets]," Refueling water storage tank through LCV-62-135 and -136.Valves open on HS in A-P Auto, Selector Switch in Normal, and low-low VCT tank level of 7 percent.BAT Level, 2-LT-62-238 and O-LT-62-242 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 191 of 440 9.2.3 Level Control Systems (continued)
VCT Level Control (LT-62-130A and -129A)
This system consists of two level control channels which govern VCT water inventory.
During operation above normal level, one channel provides an analog signal to a proportional controller which modulates the three-way valve downstream of the reactor coolant filter to maintain the VCT level within a normal operating band. The level controller maintains the three-way valve (LCV-62-1 18) such that a portion of the letdown flow goes to the Holdup Tank (HUT) and a portion to the VCT. The controller would operate in this fashion during a dilution operation when reactor makeup is being fed to the VCT from the reactor makeup control system.
If the modulating function of the channel fails and the VCT level continues to rise, then the backup level channel will cause the three-way valve to be switched to the fully divert position.
Three-way level control valve LCV-62-118 diverts to holdup tanks on high VCT level.
* 63 percent starts diverting to holdup tanks.
* 93 percent fully diverting to holdup tanks.
* Action reverses as level returns to normal in VCT.
During normal power operation, a low VCT level initiates auto makeup which injects a pre-selected blend of boron and water into the charging pump suction header. When the VCT level is restored to normal, auto makeup stops.
ifthe automatic makeup fails and the level continues to decrease a Io-lo level signal from both channels opens the stop valves (LCV-62-135 and LCV-62-136) in the RWST supply line and then closes the stop valves (LCV-62-132 and LCV-62-133) in the VCT outlet line.
                          "   Normally from VCT through valves LCV-62-132 and -133. Valves close on low-low VCT tank level of 7 percent, [both signals require FCV-62-135 or 136 full open to close the VCT outlets],
                          "   Refueling water storage tank through LCV-62-135 and -136.
Valves open on HS in A-P Auto, Selector Switch in Normal, and low-low VCT tank level of 7 percent.
BAT Level, 2-LT-62-238 and O-LT-62-242
 
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                   Rev. 0001 Specification                                                       Page 191 of 440 9.2.3   Level Control Systems (continued)
These systems indicate BAT's level. BA Tank A is for Unit 1 and is not in the scope of this upgrade. BA Tank C is common to Unit 1 and 2 and BA Tank B is for Unit 2. These level loops provide MCR indication along with alarms. The low alarm is set to indicate the minimum level in the tank to ensure sufficient boric acid is available to provide suction head to the boric acid transfer pumps.
These systems indicate BAT's level. BA Tank A is for Unit 1 and is not in the scope of this upgrade. BA Tank C is common to Unit 1 and 2 and BA Tank B is for Unit 2. These level loops provide MCR indication along with alarms. The low alarm is set to indicate the minimum level in the tank to ensure sufficient boric acid is available to provide suction head to the boric acid transfer pumps.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 192 of 440 9.2.3 Level Control Systems (continued) 9.2.4 Flow Control Systems RCP No. 1 Seal Leakoff Flow Control, FT-62-10, 11, 23, 24, 36, 37, 49 and 50 These flow recording systems monitor and alarm each RCP No. 1 seal leak off flow. They are employed during startup and normal operation to monitor No 1 seal performance.
 
These provide MCR Indication (2 pen recorder)along with a Annunciation and Computer monitoring.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls               Specification Engineering                 Upgrade Specification                 Rev. 0001 Specification                                                       Page 192 of 440 9.2.3   Level Control Systems (continued) 9.2.4   Flow Control Systems RCP No. 1 Seal Leakoff Flow Control, FT-62-10, 11, 23, 24, 36, 37, 49 and 50 These flow recording systems monitor and alarm each RCP No. 1 seal leak off flow. They are employed during startup and normal operation to monitor No 1 seal performance. These provide MCR Indication (2 pen recorder) along with a Annunciation and Computer monitoring. The two pen recorders are paired RCP 1 with RCP 2 and RCP 3 with RCP. The annunciators are also grouped.
The two pen recorders are paired RCP 1 with RCP 2 and RCP 3 with RCP. The annunciators are also grouped.RCP Seal Flow, FT-62-1, 14, 27, and 40 The RCP Seal Flow loops provide MCR and Local Indication of RCP Seal along with a Annunciation and Computer monitoring.
RCP Seal Flow, FT-62-1, 14, 27, and 40 The RCP Seal Flow loops provide MCR and Local Indication of RCP Seal along with a Annunciation and Computer monitoring. The square root indication scaling shall be replaced with a linear scale with the square root conversion performed in software.
The square root indication scaling shall be replaced with a linear scale with the square root conversion performed in software.Letdown Flow, FT-62-82 This flow loop provides MCR Indication along with a Annunciation and Computer monitoring.
Letdown Flow, FT-62-82 This flow loop provides MCR Indication along with a Annunciation and Computer monitoring. The high flow alarm FA-62-82 at 130 gpm or pressure high at 440 psig.
The high flow alarm FA-62-82 at 130 gpm or pressure high at 440 psig.Presently, the loss of power results in loss of components for both the normal and excess letdown systems. This complicates recovery due to not having any letdown path. The Offerer shall provide a proposed design to separate normal letdown from excess letdown to ensure that at least one letdown path with any failure including a complete loss of power to a rack or loss of redundant processors.
Presently, the loss of power results in loss of components for both the normal and excess letdown systems. This complicates recovery due to not having any letdown path. The Offerer shall provide a proposed design to separate normal letdown from excess letdown to ensure that at least one letdown path with any failure including a complete loss of power to a rack or loss of redundant processors.
Charging Flow Control, FT-62-93A This instrument regulates charging flow when the Centrifugal charging pumps (CCPs) are in operation.
Charging Flow Control, FT-62-93A This instrument regulates charging flow when the Centrifugal charging pumps (CCPs) are in operation. The CCPs are constant speed pumps and flow is controlled by modulating FCV-62-93A. The closed loop flow control receives a flow control setpoint from the pressurizer level control system.
The CCPs are constant speed pumps and flow is controlled by modulating FCV-62-93A.
The control signal demand shall have a low limit stop to prevent charging flow less than 55 gpm. The low limit ensures adequate RCP seal and Regen. Hx flow. Manual control is available from the MCR. The FT-62-93A loop provides the following; 0     MCR Indication;
The closed loop flow control receives a flow control setpoint from the pressurizer level control system.The control signal demand shall have a low limit stop to prevent charging flow less than 55 gpm. The low limit ensures adequate RCP seal and Regen. Hx flow. Manual control is available from the MCR. The FT-62-93A loop provides the following; 0 MCR Indication;
* Local Indication;
* Local Indication; NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 193 of 440 9.2.4 Flow Control Systems (continued)
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 193 of 440 9.2.4   Flow Control Systems (continued)
* Annunciation;
* Annunciation;
* Computer point.* Excess Letdown Flow Control, FCV-62-56 This control valve reduces RCS pressure downstream of the excess letdown HX to a low pressure, consistent with No. 1 seal backpressure requirements.
* Computer point.
A pressure indicator (PI-62-57) is employed to adjust the setting of this valve. The air-operated fail-closed valve is manually controlled from the MCR. Valve position is also indicated in the MCR.9.3 Applicable Criteria & Standards The following criteria apply to this system.Institute of Electrical  
* Excess Letdown Flow Control, FCV-62-56 This control valve reduces RCS pressure downstream of the excess letdown HX to a low pressure, consistent with No. 1 seal backpressure requirements. A pressure indicator (PI-62-57) is employed to adjust the setting of this valve. The air-operated fail-closed valve is manually controlled from the MCR. Valve position is also indicated in the MCR.
& Electronics Engineers (IEEE)Standards:
9.3       Applicable Criteria & Standards The following criteria apply to this system.
IEEE Std. 279-1971 (Section 4.7)The above Criteria and Standards have been considered in preparing the requirements of this section.9.4 WBN System Diagrams None 9.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position.
Institute of Electrical & Electronics Engineers (IEEE)
These controls shall allow the unit operator to establish either manual or automatic control mode or manually position control component.
Standards: IEEE Std. 279-1971 (Section 4.7)
Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications.
The above Criteria and Standards have been considered in preparing the requirements of this section.
See I/O listing.Alarms and Annunciators Main Control Room Annunciation 9.6 See I/0 listing NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 194 of 440 9.6 Alarms and Annunciators (continued)
9.4       WBN System Diagrams None 9.5       Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position. These controls shall allow the unit operator to establish either manual or automatic control mode or manually position control component.
Computer Monitoring The plant process computer shall be used to monitor rod position information.
Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.
The plant computer shall be used to generate alarm conditions.
9.6      Alarms and Annunciators Main Control Room Annunciation See I/0 listing
The following information shall be supplied to the computer systems. See I/O listing 9.7 Performance Limits TBD 9.8 Specific Requirements None 9.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
 
Rack environmental effects are not included in channel accuracy.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 194 of 440 9.6       Alarms and Annunciators (continued)
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
Computer Monitoring The plant process computer shall be used to monitor rod position information. The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 9.7       Performance Limits TBD 9.8       Specific Requirements None 9.9       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.
Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above accuracy requirements.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
9.10 Range TBD 9.11 Inputs Reference drawings: Westinghouse Process Control Block Diagrams 108D408-7, 8, 9,10, 18, 23, 24, 31, and 32.WBN 47W610-62-series NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 195 of 440 9.11 Inputs (continued)
Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above accuracy requirements.
Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.9.12 Outputs The outputs are documented in Appendix E 9.13 Proposed Signal Validation Designs Input Signal Validation None 9.14 Time Response 9.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of CVCS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within CVCS.9.14.2 Control Processors Response Time The control system shall not be susceptible to hardware or software controller windup.After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.9.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
9.10       Range TBD 9.11       Inputs Reference drawings:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 196 of 440 9.14.4 Manual Control Response The total delay for all manual component control signals of CVCS shall be no greater than 1000 milli-seconds.
Westinghouse Process Control Block Diagrams 108D408-7, 8, 9,10, 18, 23, 24, 31, and 32.
9.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.9.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal ohward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.9.17 Programmed Functions None 9.18 Setpoints All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.The following setpoint information is not WBN Unit 2 specific.
WBN 47W610-62-series
WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.WBN Unit I (post SGR) PLS NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 197 of 440 9.18 Setpoints (continued)
 
CHEMICAL AND VOLUME CONTROL SYSTEM PRESSURES INSTRUMENT 1-PT-1 15 1-_PT-1 31 1 -PIS- 140 1-PIS-141 1-PT-150 1-PT-151 1 -PT-1 52 1-PT-153 1-PT-192 DESCRIPTION Volume Conirol Tank Pressure Low Pressure Letdown Pressure Seal Injection Filter Differential Pressure Reactor Coolant Pump #1 Seal Differential Pres-sure Holdup Tank Nitrogen Header Pressure Volume Control Tank Hydrogen Supply Pres-sure Volume Control Tank Nitrogen Supply Pres-sure Volume Control Tank Backpressure Rogulalor VCT to Gas Analyzer Backpressure Regulator Boric Acid 2vaporator to Gas Analyzer Back-pressure Regulator SETPOINT FUNCTION HI alarm Lo alarm SETPOINT Hi alarm Controls Valve 1-PCV-131 Hi alarm Lo alarm Hi alarm Recirculation pump Interlock Maintains H. over-pressure in VOT Maintains N. over-pressure in VCT Prossure Regulator Pressure Regulator Pressure Regulator 65 psig 13 psig 440 psig 200 psig 19 psid 218 psld Valve 1-8155 Valve 1-8156 Valve 1-8157 Valve 1-8175 Valve I-8504 9.5 pslig-I psig decreasing 15-30 psig 15-30 psig 18-30 psig 5 psig 5 psig NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 198 of 440 9.18 Setpoints (continued)
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 195 of 440 9.11     Inputs (continued)
CHEMICAL AND VOLUME CONTROL SYS;TEM TEMPERATURES INSTRUMENT NUMBER DESCRIPTION SETPOINT FUNCTION SEIPQJIN TIS-100 1-TIT-103 T1T-107 1-TE-1 16 1-TE-122 1 -TE-1 25 1-TE-127 Boric Acid Baichirig Tank Temperature Boric Acid Tank Temperature Volume Control Tank Outlet Temperature Excess Letdown Heat Exchanger Outlet Temperature Letdown Orifice Relief Valve Discharge Line Temperature Regenerative Heat Exchanger Outlet Temperature (Tube Side)Letdown Diversion Valve Inlet Temperature Letdown Heat Exchanger Outlet Temperature (Tube Side)Reactor Coolant Pump Radial Bearing Temperature Hi alarm Heater off Heater on Lo alarm Hi alarm Heater off Heater on Lo alarm Hi alarm Hi alarm 175&deg;F I 70*F 160*F 155 0 F 175"F 170&deg;F 160 0 F 155 0 F 123.5F 200WF Hi alarm Hi alarm A2tient+200 F 397OF I -TIS-129 1 -TE-130 1 -TE- 166 1-TE-168 1-TE-170 1 -TE-1 7?Hi alarm and diver-sion ot letdown stream to VCT Hi alarm CCW outlet valve controls about Hi alarm 137.50F: 132"F 1279F 170 t p NPG Site-Specific WBN Unit 2 NSSS and BOP Controls I Specification Engineering Upgrade Specification I Rev. 0001 Specification Page 199 of 440 9.18 Setpoints (continued)
Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.
CHEMICAL AND VOLUME CONTROL SYSTEM TEMPERATURES (cont)INSTRUMENT NUMBER I-TE-167 1-TE-169 1-TE-171 1-TE-173 I-TIT-223 TIT-227 DESCRIPTION Reactor Coolant Pump #1 Seal Leakoff Temporature Boric Acid Tank Tempera-ture SETPOINT FUNCTION SETPOINT Hi alarm 179oF Hi alarm Heater off Heater on Lo alarm 175'F 170OF 160'F j55ep NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 200 of 440 9.18 Setpoints (continued)
9.12       Outputs The outputs are documented in Appendix E 9.13       Proposed Signal Validation Designs Input Signal Validation None 9.14       Time Response 9.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of CVCS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within CVCS.
CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS INSTRUMENT LIS-I01 DESCRIPTI ON Boric Acid Batching Tank Level Boric Acid Tank Leovel LB-1 12A Volume Control LB-1 12B Tank&sect;EEQIT~g[EUNCTION SETPOINV Lo alarm Hi alarm Lo alarm 2" 1-LT-102 LT-106 1-LT-1 12 133.5* (9,150 gallons)-13" (890 gallons)-LB-112C LB-i 1?D LB-1 12E LC-1 12C Hi level alarm 1 -LCV-1 12 8/C open 1-LCV-112 DIE close I-LCV-1 2 B/C close 1-LCV-112 D/E open RMCS makeup stop RMCS makeup slart and makeup blocked alarm Lo alarm I -LCV- 112A position to VCT 1-LCV- 1 12A diversion to holdup tank 65" increasing 95 increasing 5" decreasing 29" increasing 14" decreasing 9" decreasing 44" 65'126 above orifice outlet 12* below orifice outlet 1-LS-178A 1-LS 179A 1 -LS-1B0A 1 -LS-181A 1-LS-178B 1 -LS- 1798 1-LS-180B I -LS-1 81B Reactor Coolant pump Soal Standpipe Levol (High)Reactor Coolant Pump Seal Standpipe Level (Low)Hi alarm Lo alarm Water level referenced to lower level lap on tank, unless otherwise noted.
9.14.2 Control Processors Response Time The control system shall not be susceptible to hardware or software controller windup.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 201 of 440 9.18 Setpoints (continued)
After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS (cont.)INSTRUMENT DESCRIPTION SETPOINT FUNCTION __SEQINT.1 -LT-1B5 LB-1 85A Volume LB-1 85 Control Tank Lo level Alarm 1-LCV-112 B/C open 1-L.CV-I 12 D/E close 1-LCV- 112 B6C close 1-LCV- 112 D/E open Hi alarm Diversion to holdup tank 9' decreasing 94 increasing LB-185C LB-185D 5* decreasing 65" increasing 65" increasing 300" above tank bottom 36" above tlik bottom 145' (TVA-supplied) 17" LIS-190 Holdup Tank Level Monitor Tank Level Hi alarm Lo alarm Hi alarm Lo alarm LT-204 LC-224 PD Pump Head Tank Level Lo alarm Preset by Manufacturer NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 202 of 440 9.18 Setpoints (continued)
9.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
CHEMICAL AND VOLUME CONTROL SYSTEM FLOWS INSTRUMENT NUMBER I-FT-1 10 1-FT-111 1-FT-121 1-FT-132 1-FIT-154 1-FIT-155 1-FIT-156 1-rrr-157 1-FIT-1 58 1-FIT-159 I-FIT-160 1-FIT-161 1-FIS-1 62 1-FIS-163 1 -FIS-164 I-FIS-165 1-FIT-142 1 -FIT-1 43 1 -FIT-1 44 1-FIT-1 45 SC-459 DESCRIPMTION Boric Acid Flow to Blender Primary Water Flow to Blender Centrifugal Charging Pump Discharge Flow Letdown Row Reactor Coolant Pump#1 Seal Leakoff Flow (low rango)Reactor Coolant Pump#1 Seal I.eakoff Flow (hi range)Roactor Coolant Pump#1 Seal Bypass Flow Reactor Coolant Pump Seal Injection Flow PD Pump Speed Control SErPOINT FUNCTION Flow deviation alarm HI alarm Lo alarm Flow deviation alarm Hi alarm La alarm Hi alarm Lo alarrwLo limit Controls valve I-FCV-121 SEETPOINT_
 
+0.2 gpm-0.2 gprn+7.0 gpm-7.0 gpm 150 gpm 56 gpm (see pres-surizer&-
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 196 of 440 9.14.4 Manual Control Response The total delay for all manual component control signals of CVCS shall be no greater than 1000 milli-seconds.
level control system)130 gpm 0.9 gpm HI alarm Lo alarm Hi alarm 4.8 gpm Lo alarm Lo alarm 1.2 gpm 6.5 gpm 55 gpm Lo flow stop K Water level referenced to lower level tap on tank, unless otherwise noted.-Minimum charging flow to be established for normal chg.RCS pressure operation by limiting value FCV-1 21 position.9.19 Requirements for Test and Calibration CVCS is not a protection system and, thus, does not require the capability of being tested at power.
9.15       Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 203 of 440 10.0 MISC NSSS CONTROL SYSTEMS The following functions in the NSSS Control Racks that are classified per this specification as miscellaneous functions.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
See Appendix E for I/O details.The following functions are miscellaneous functions that provide mainly indications and alarms.Functions per Rack Control Rack R14 RCS LP 1 Spray Temp RWST Level CLA Accum Tk I Level CLA Accum Tk 2 Level CLA Accum Tk 1 Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Flow Control Rack R15 RV Flange Leakoff Temp RCS WR Pressure Loop 4 III (sh 36)Control Rack RI6 PRT Level PRT Pressure RCS Narrow Range Level RCS Wide Range Level RCS PRZR Relief Discharge Temp RHR Hx B Outlet Temp RWST Level Control Rack R17 RCS LP 2 Spray Temp CLA Accum Tk 1 Level CLA Accum Tk 2 Level CLA Accum Tk I Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Pressure Control Rack R18 RWST Level Control Rack R19 PRT Temp NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 204 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)
9.16       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
PRZR Surge Line Temp RCS PRZR Relief Discharge Temp RHR Hx A Outlet Temp RHR Inj or Recirc Flow after a LOCA Control Rack R20 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Liquid Temp SIS PMP B-B Flow RWST Level RCS WR Pressure Loop 4 11 (sh 36)Control Rack R21 RHR PMP B-B Disch Pressure SIS Flow to RCS 1 &4 CL Power PRZR Relief Discharge Temp SS CCP Inj Tk Outlet Flow Steam Press for Atmosphere Relief Valve control PCV-526 (sh 35)Steam Press for Atmosphere Relief Valve control PCV-536 (sh 35)Control Rack R22 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Vapor Temp RWST Level SIS PMP B-B Pressure Control Rack R23 RHR PMP A-A Discharge Pressure SIS Flow to RCS 2&3 CL Power RHR PMP A-A Discharge Temp RCS PRZR Relief Discharge Temp Control Rack R24 Steam Press for Atmosphere Relief Valve control PCV-51 6 (sh 35)Steam Press for Atmosphere Relief Valve control PCV-546 (sh 35)
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal ohward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 205 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)
9.17       Programmed Functions None 9.18       Setpoints All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
Control Rack R26 RCS Flow Loop 1 (sh 2)RCS Flow Loop 2 (sh 2)RCS Flow Loop 3 (sh 2)RCS Flow Loop 4 (sh 2)RCS Flow Loop 1 (sh 4)RCS Flow Loop 2 (sh 4)RCS Flow Loop 3 (sh 4)RCS Flow Loop 4 (sh 4)Tavg Loop 1 (sh 7)OPDT SP Loop 1 (sh 7)OTDT SP Loop 1 (sh 7)DT Loop 1 (sh 7)Tavg Loop 3 (sh 9)OPDT SP Loop 3 (sh 9)OTDT SP Loop 3 (sh 9)DT Loop 3 (sh 9)Pzr Level i (sh 11)Pzr Level III (sh 11)Pzr Pressure I (sh 12)Pzr Pressure III (sh 44)SG Feedwater Flow Loop 1 (sh 13) 1 SG Compensated Steam Flow Loop i (sh 13) 1 SG Feedwater Flow Loop 3 (sh 14) 11 SG Compensated Steam Flow Loop 3 (sh 14) 11 SG Feedwater Flow Loop 2 (sh 45) I SG Compensated Steam Flow Loop 2 (sh 45) I SG Feedwater Flow Loop 4 (sh 46) I SG Compensated Steam Flow Loop 4 (sh 46) I SG Level Loop 3 (sh 49) 111 SG Level Loop 4 (sh 49) 111 Turbine Impulse Pressure PT-1-72 Indication and computer (sh 18) 1 SG Level Loop I (sh 19)111 SG Level Loop 2 (sh 19) 111 SG Level Loop 2 (sh 21) 111 SG Level Loop 3 (sh 21) 111 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 206 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)
The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.
Lower Containment Pressure I (sh 22)Lower Containment Pressure II (sh 22)WR SG Level Loop 1 (sh 34) 111 WR SG Level Loop 2 (sh 34) IV Containment Sump Level III (sh 40)RCS WR Pressure I (sh 42)RCS WR Pressure II (sh 42)Containment Spray Pump I Discharge Header Flow Ill (sh 51)Control Rack R27 RCS Flow Loop 1 (sh 3)RCS Flow Loop 2 (sh 3)RCS Flow Loop 3 (sh 3)RCS Flow Loop 4 (sh 3)Tavg Loop 2 (sh 8)OPDT SP Loop 2 (sh 8)OTDT SP Loop 2 (sh 8)DT Loop 2 (sh 8)Tavg Loop 4 (sh 10)OPDT SP Loop 4 (sh 10)OTDT SP Loop 4 (sh 10)DT Loop 4 (sh 10)Pzr Level II (sh 11)Pzr Pressure II (sh 12)Pzr Pressure IV (sh 44)SG Feedwater Flow Loop I (sh 15).11 SG Compensated Steam Flow Loop 1 (sh 15) 11 SG Feedwater Flow Loop 2 (sh 16) 11 SG Compensated Steam Flow Loop 2 (sh 16) 11 SG Feedwater Flow Loop 3 (sh 47) 11 SG Compensated Steam Flow Loop 3 (sh 47) 11 SG Feedwater Flow Loop 4 (sh 48) 11 SG Compensated Steam Flow Loop 4 (sh 48) 11 SG Level Loop I (sh 17) 11 SG Level Loop 2 (sh 17) 11 SG Level Loop 3 (sh 17) 11 SG Level Loop 4 (sh 17) 11 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 207 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)
WBN Unit I (post SGR) PLS
Turbine Impulse Pressure PT-1-73 Indication and computer (sh 18) 11 SO Level Loop 1 (sh 20) IV SO Level Loop 2 (sh 20) IV SG Level Loop 1 (sh 21) IV SO Level Loop 4 (sh 21) IV SO Level Loop 3 (sh 50) IV SO Level Loop 4 (sh 50) IV Lower Containment Pressure IV (sh 22)Lower Containment Pressure III (sh 22)WR SG Level Loop 3 (sh 34) IV (sh 22)WR SG Level Loop 4 (sh 34) 111 (sh 22)Containment Spray Pump 2 Discharge Header Flow IV (sh 51)RWST Level Computer point Ii (sh 52)Containment Sump Level computer point II (sh 52)Containment Sump Level computer point and MCR indictor IV (sh 52)Time Response i. Anti-Aliasing The system shall have the capability to implement anti-aliasing for all input signals. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.2. Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds.
 
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls         Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                     Page 197 of 440 9.18     Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYSTEM PRESSURES INSTRUMENT DESCRIPTION              SETPOINT FUNCTION      SETPOINT 1-PT-1 15       Volume Conirol Tank            HI alarm              65 psig Pressure                      Lo alarm              13 psig 1-_PT-1 31     Low Pressure Letdown          Hi alarm              440 psig Pressure                      Controls Valve        200 psig 1-PCV-131 1 -PIS- 140     Seal Injection Filter          Hi alarm              19 psid 1-PIS-141       Differential Pressure 1-PT-150       Reactor Coolant Pump #1        Lo alarm              218 psld 1-PT-151       Seal Differential Pres-1-PT-1 52       sure 1-PT-153 1-PT-192       Holdup Tank Nitrogen           Hi alarm              9.5 pslig-Header Pressure                Recirculation pump    I psig Interlock              decreasing Valve          Volume Control Tank           Maintains H. over-    15-30 psig 1-8155          Hydrogen Supply Pres-         pressure in VOT sure Valve          Volume Control Tank           Maintains N. over-    15-30 psig 1-8156          Nitrogen Supply Pres-         pressure in VCT sure Valve          Volume Control Tank           Prossure Regulator    18-30 psig 1-8157          Backpressure Rogulalor Valve          VCT to Gas Analyzer           Pressure Regulator    5 psig 1-8175          Backpressure Regulator Valve            Boric Acid 2vaporator         Pressure Regulator    5 psig I-8504          to Gas Analyzer Back-pressure Regulator
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls         Specification Engineering                Upgrade Specification              Rev. 0001 Specification                                                  Page 198 of 440 9.18      Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYS;TEM TEMPERATURES INSTRUMENT NUMBER              DESCRIPTION          SETPOINT FUNCTION    SEIPQJIN TIS-100          Boric Acid Baichirig        Hi alarm            175&deg;F Tank Temperature            Heater off          I 70*F Heater on            160*F Lo alarm            1550 F 1-TIT-103        Boric Acid Tank              Hi alarm            175"F T1T-107        Temperature                  Heater off          170&deg;F Heater on            160 0 F Lo alarm            1550 F 1-TE-1 16        Volume Control Tank          Hi alarm            123.5F Outlet Temperature 1-TE-122        Excess Letdown Heat          Hi alarm            200WF Exchanger Outlet Temperature 1-TE-1 25        Letdown Orifice Relief      Hi alarm            A2tient Valve Discharge Line                              +200 F Temperature 1-TE-127        Regenerative Heat            Hi alarm            397OF Exchanger Outlet Temperature (Tube Side)
I -TIS-129      Letdown Diversion Valve      Hi alarm and diver-  137.50F:
Inlet Temperature            sion ot letdown stream to VCT 1-TE-130        Letdown Heat Exchanger      Hi alarm CCW outlet  132"F Outlet Temperature          valve controls about 1279F (Tube Side) 1-TE- 166        Reactor Coolant Pump        Hi alarm            170 tp 1-TE-168        Radial Bearing 1-TE-170        Temperature 1-TE-1 7?
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls        ISpecification Engineering                Upgrade Specification              IRev. 0001 Specification                                                  Page 199 of 440 9.18      Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYSTEM TEMPERATURES (cont)
INSTRUMENT NUMBER            DESCRIPTION        SETPOINT FUNCTION    SETPOINT I-TE-167        Reactor Coolant Pump #1  Hi alarm             179oF 1-TE-169        Seal Leakoff Temporature 1-TE-171 1-TE-173 I-TIT-223      Boric Acid Tank Tempera-  Hi alarm             175'F TIT-227        ture                      Heater off            170OF Heater on            160'F Lo alarm              j55ep
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls                  Specification Engineering                      Upgrade Specification                    Rev. 0001 Specification                                                            Page 200 of 440 9.18      Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS INSTRUMENT DESCRIPTI ON            &sect;EEQIT~g[EUNCTION              SETPOINV LIS-I01          Boric Acid Batching            Lo alarm                2" Tank Level 1-LT-102          Boric Acid Tank Leovel        Hi alarm                133.5* (9,150 gallons)-
LT-106                                        Lo alarm                13" (890 gallons)-
1-LT-1 12        LB-1 12A Volume Control        Hi level alarm           65" increasing LB-1 12B Tank                  1-LCV-1 12 8/C open    95increasing 1-LCV-112 DIE close 5" decreasing I-LCV-1 2 B/C close 1-LCV-112 D/E open LB-112C                        RMCS makeup stop        29" increasing LB-i 1?D                        RMCS makeup slart and makeup blocked alarm                    14" decreasing LB-1 12E                      Lo alarm                9" decreasing LC-1 12C                      I -LCV- 112A position to VCT                  44" 1-LCV- 1 12A diversion to holdup tank          65' 1-LS-178A          Reactor Coolant pump          Hi alarm                126 above 1-LS 179A        Soal Standpipe Levol                                    orifice outlet 1-LS-1B0A          (High) 1-LS-181A 1-LS-178B          Reactor Coolant Pump          Lo alarm               12* below 1-LS- 1798        Seal Standpipe Level                                  orifice outlet 1-LS-180B          (Low)
I -LS-1 81B Water level referenced to lower level lap on tank, unless otherwise noted.
 
NPG Site-Specific      WBN Unit 2 NSSS and BOP Controls            Specification Engineering                 Upgrade Specification               Rev. 0001 Specification                                                   Page 201 of 440 9.18     Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS (cont.)
INSTRUMENT DESCRIPTION        SETPOINT FUNCTION __SEQINT.
1-LT-1B5      LB-1 85A Volume         Lo level Alarm          9' decreasing LB-1 85 Control          1-LCV-112 B/C open      94 increasing Tank                1-L.CV-I 12 D/E close 1-LCV- 112 B6C close 1-LCV- 112 D/E open      5* decreasing LB-185C                  Hi alarm                65" increasing LB-185D                  Diversion to holdup tank            65" increasing LIS-190        Holdup Tank Level        Hi alarm                300" above tank bottom Lo alarm                36" above tlik bottom LT-204        Monitor Tank Level      Hi alarm                 145' (TVA-supplied)
Lo alarm                17" LC-224        PD Pump Head Tank Level Lo alarm                  Preset by Manufacturer
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls                      Specification Engineering                      Upgrade Specification                      Rev. 0001 Specification                                                                Page 202 of 440 9.18    Setpoints (continued)
CHEMICAL AND VOLUME CONTROL SYSTEM FLOWS INSTRUMENT NUMBER                  DESCRIPMTION            SErPOINT FUNCTION              SEETPOINT_
I-FT-1 10            Boric Acid Flow to          Flow deviation alarm Blender                      HI alarm                     +0.2 gpm Lo alarm                     -0.2 gprn 1-FT-111              Primary Water Flow to       Flow deviation alarm Blender                      Hi alarm                    +7.0 gpm La alarm                    -7.0 gpm 1-FT-121              Centrifugal Charging        Hi alarm                      150 gpm Pump Discharge Flow          Lo alarrwLo limit            56 gpm Controls valve                (see pres-I-FCV-121                    surizer&- level control system) 1-FT-132              Letdown Row                  HI alarm                      130 gpm 1-FIT-154            Reactor Coolant Pump        Lo alarm                      0.9 gpm 1-FIT-155            #1 Seal Leakoff Flow 1-FIT-156            (low rango) 1-rrr-157 1-FIT-1 58            Reactor Coolant Pump         Hi alarm                     4.8 gpm 1-FIT-159            #1 Seal I.eakoff Flow I-FIT-160            (hi range) 1-FIT-161 1-FIS-1 62            Roactor Coolant Pump        Lo alarm                      1.2 gpm 1-FIS-163            #1 Seal Bypass Flow 1 -FIS-164 I-FIS-165 Reactor Coolant Pump 1-FIT-142                                          Lo alarm                     6.5 gpm 1 -FIT-1 43          Seal Injection Flow 1-FIT-1 44 1-FIT-1 45 SC-459                PD Pump Speed Control        Lo flow stop                  55 gpm K      Water level referenced to lower level tap on tank, unless otherwise noted.
                  -       Minimum charging flow to be established for normal chg.RCS pressure operation by limiting value FCV-1 21 position.
9.19    Requirements for Test and Calibration CVCS is not a protection system and, thus, does not require the capability of being tested at power.
 
NPG Site-Specific      WBN Unit 2 NSSS and BOP Controls            Specification Engineering                  Upgrade Specification                Rev. 0001 Specification    I                                                Page 203 of 440 10.0      MISC NSSS CONTROL SYSTEMS The following functions in the NSSS Control Racks that are classified per this specification as miscellaneous functions. See Appendix E for I/O details.
The following functions are miscellaneous functions that provide mainly indications and alarms.
Functions per Rack Control Rack R14 RCS LP 1 Spray Temp RWST Level CLA Accum Tk I Level CLA Accum Tk 2 Level CLA Accum Tk 1 Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Flow Control Rack R15 RV Flange Leakoff Temp RCS WR Pressure Loop 4 III (sh 36)
Control Rack RI6 PRT Level PRT Pressure RCS Narrow Range Level RCS Wide Range Level RCS PRZR Relief Discharge Temp RHR Hx B Outlet Temp RWST Level Control Rack R17 RCS LP 2 Spray Temp CLA Accum Tk 1 Level CLA Accum Tk 2 Level CLA Accum Tk I Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Pressure Control Rack R18 RWST Level Control Rack R19 PRT Temp
 
NPG Site-Specific      WBN Unit 2 NSSS and BOP Controls          Specification Engineering                  Upgrade Specification              Rev. 0001 Specification                                                    Page 204 of 440 10.0    MISC NSSS CONTROL SYSTEMS (continued)
PRZR Surge Line Temp RCS PRZR Relief Discharge Temp RHR Hx A Outlet Temp RHR Inj or Recirc Flow after a LOCA Control Rack R20 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Liquid Temp SIS PMP B-B Flow RWST Level RCS WR Pressure Loop 4 11(sh 36)
Control Rack R21 RHR PMP B-B Disch Pressure SIS Flow to RCS 1&4 CL Power PRZR Relief Discharge Temp SS CCP Inj Tk Outlet Flow Steam Press for Atmosphere Relief Valve control PCV-526 (sh 35)
Steam Press for Atmosphere Relief Valve control PCV-536 (sh 35)
Control Rack R22 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Vapor Temp RWST Level SIS PMP B-B Pressure Control Rack R23 RHR PMP A-A Discharge Pressure SIS Flow to RCS 2&3 CL Power RHR PMP A-A Discharge Temp RCS PRZR Relief Discharge Temp Control Rack R24 Steam Press for Atmosphere Relief Valve control PCV-51 6 (sh 35)
Steam Press for Atmosphere Relief Valve control PCV-546 (sh 35)
 
NPG Site-Specific          WBN Unit 2 NSSS and BOP Controls     Specification Engineering                     Upgrade Specification           Rev. 0001 Specification                                                   Page 205 of 440 10.0     MISC NSSS CONTROL SYSTEMS (continued)
Control Rack R26 RCS  Flow  Loop    1  (sh 2)
RCS Flow  Loop  2  (sh 2)
RCS  Flow  Loop  3  (sh 2)
RCS  Flow Loop    4  (sh 2)
RCS Flow Loop 1      (sh 4)
RCS  Flow Loop 2      (sh 4)
RCS Flow Loop 3      (sh 4)
RCS Flow Loop 4      (sh 4)
Tavg Loop 1 (sh 7)
OPDT SP Loop 1 (sh 7)
OTDT SP Loop 1 (sh 7)
DT Loop 1 (sh 7)
Tavg Loop 3 (sh 9)
OPDT SP Loop 3 (sh 9)
OTDT SP Loop 3 (sh 9)
DT Loop 3 (sh 9)
Pzr Level i (sh 11)
Pzr Level III (sh 11)
Pzr Pressure I (sh 12)
Pzr Pressure III (sh 44)
SG  Feedwater Flow Loop 1 (sh 13) 1 SG  Compensated Steam Flow Loop i      (sh 13) 1 SG  Feedwater Flow Loop 3 (sh 14) 11 SG  Compensated Steam Flow Loop 3      (sh 14) 11 SG  Feedwater Flow Loop 2 (sh 45) I SG  Compensated Steam Flow Loop 2      (sh 45) I SG  Feedwater Flow Loop 4 (sh 46) I SG  Compensated Steam Flow Loop 4      (sh 46) I SG Level Loop 3 (sh 49)111 SG Level Loop 4 (sh 49)111 Turbine Impulse Pressure PT-1-72 Indication and computer (sh 18) 1 SG  Level Loop   I  (sh 19)111 SG  Level Loop   2  (sh 19) 111 SG  Level Loop   2  (sh 21) 111 SG  Level Loop   3  (sh 21) 111
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls    Specification Engineering                  Upgrade Specification        Rev. 0001 Specification                                              Page 206 of 440 10.0      MISC NSSS CONTROL SYSTEMS (continued)
Lower Containment Pressure I (sh 22)
Lower Containment Pressure II (sh 22)
WR SG Level Loop 1 (sh 34) 111 WR SG Level Loop 2 (sh 34) IV Containment Sump Level III (sh 40)
RCS WR Pressure I (sh 42)
RCS WR Pressure II (sh 42)
Containment Spray Pump I Discharge Header Flow Ill (sh 51)
Control Rack R27 RCS  Flow Loop 1 (sh 3)
RCS  Flow Loop 2 (sh 3)
RCS  Flow Loop 3 (sh 3)
RCS  Flow Loop 4 (sh 3)
Tavg Loop 2 (sh 8)
OPDT SP Loop 2 (sh 8)
OTDT SP Loop 2 (sh 8)
DT Loop 2 (sh 8)
Tavg Loop 4 (sh 10)
OPDT SP Loop 4 (sh 10)
OTDT SP Loop 4 (sh 10)
DT Loop 4 (sh 10)
Pzr Level II (sh 11)
Pzr Pressure II (sh 12)
Pzr Pressure IV (sh 44)
SG   Feedwater Flow Loop I (sh 15).11 SG  Compensated Steam Flow Loop 1 (sh 15) 11 SG  Feedwater Flow Loop 2 (sh 16) 11 SG  Compensated Steam Flow Loop 2 (sh 16) 11 SG   Feedwater Flow Loop 3 (sh 47) 11 SG   Compensated Steam Flow Loop 3 (sh 47) 11 SG  Feedwater Flow Loop 4 (sh 48) 11 SG  Compensated Steam Flow Loop 4 (sh 48) 11 SG  Level Loop I (sh 17) 11 SG  Level Loop (sh 17) 11 SG  Level Loop 3 (sh 17) 11 SG  Level Loop 4 (sh 17) 11
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls              Specification Engineering                    Upgrade Specification                Rev. 0001 Specification                                                          Page 207 of 440 10.0      MISC NSSS CONTROL SYSTEMS (continued)
Turbine Impulse Pressure PT-1-73 Indication and computer (sh 18) 11 SO  Level  Loop 1 (sh 20) IV SO  Level  Loop 2 (sh 20) IV SG  Level  Loop 1 (sh 21) IV SO  Level  Loop 4 (sh 21) IV SO  Level  Loop 3 (sh 50) IV SO  Level Loop 4 (sh 50) IV Lower Containment Pressure IV (sh 22)
Lower Containment Pressure III (sh 22)
WR SG Level Loop 3 (sh 34) IV (sh 22)
WR SG Level Loop 4 (sh 34)111 (sh 22)
Containment Spray Pump 2 Discharge Header Flow IV (sh 51)
RWST Level Computer point Ii (sh 52)
Containment Sump Level computer point II (sh 52)
Containment Sump Level computer point and MCR indictor IV (sh 52)
Time Response
: i. Anti-Aliasing The system shall have the capability to implement anti-aliasing for all input signals. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.
: 2. Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
: 3. Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals Involved in closed loop control.
: 3. Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals Involved in closed loop control.
NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 208 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)
 
NPG Site-Specific         WBN Unit 2 NSSS and SOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                           Page 208 of 440 10.0       MISC NSSS CONTROL SYSTEMS (continued)
: 4. Manual Control Response The total delay for all manual component control signals of these loops shall be no greater than 1000 milli-seconds.
: 4. Manual Control Response The total delay for all manual component control signals of these loops shall be no greater than 1000 milli-seconds.
Controller Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1 % (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and ratellag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.Applicable Criteria & Standards The following criteria apply to this system.institute of Electrical  
Controller Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and ratellag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
& Electronics Engineers (IEEE)Standards:
Applicable Criteria & Standards The following criteria apply to this system.
IEEE Std. 279-1971 (Section 4,7)The above Criteria and Standards have been considered in preparing the requirements of this section.System Diagrams None Accuracy See Section 3.9 11.0 SOP CONTROL AND INDICATION SYSTEM REQUIREMENTS 11.1 System Description NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 209 of 440 11.1 System Description (continued)
institute of Electrical & Electronics Engineers (IEEE)
The Offerer will supply the necessary equipment in accordance with these general specifications to perform the SOP control and indication functions as described in the following detailed specifications and Appendix E -the SOP I/O List. In the specification that follows, this will be referred to as the "System" or the "BOP Control and Indication System." This equipment will replace an existing SOP instrumentation system, which is located in or whose I/O will be routed to 10 instrument racks in the Auxiliary Instrument Room (AIR), which receive inputs from various transmitters located locally throughout the plant, and which provides outputs to the ICS, to local control devices, and operator readout devices in the Main Control Room (MCR).11.1.1 Redundancy The SOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required.11.1.2 Field Loads The BOP control system shall be capable of supplying the field loads (eg., transmitters) with a maximum of 48 VOC.11.2 System Functional Details The BOP control and indication system have been grouped into several generic categories.
Standards: IEEE Std. 279-1971 (Section 4,7)
Specific loop details may be found the BOP I/O listing.11.2.1 Integrated Control System (ICS) Data Point Loops and Test Loops A large number of the SOP Loops only provide data for input for the ICS through a resistor in the current loop with the power supply and transmitter or for pressure testing. This resistor driven communication scheme with ICS will be retained.
The above Criteria and Standards have been considered in preparing the requirements of this section.
The System will only provide power to the field sensor.There will be no output for these loops. Refer to Appendix E for the sensor input signal, power supply requirement, and input signal location.11.2.2 Main Control Room Display and Recording Loops A number of the SOP Loops serve only to provide readout data for the operator in the Main Control Room. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices. The required signals and locations are tabulated in Appendix E.
System Diagrams None Accuracy See Section 3.9 11.0       SOP CONTROL AND INDICATION SYSTEM REQUIREMENTS 11.1     System Description
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 210 of 440 11.2.3 Display and Contact Output Loops A number of the BOP Loops provide readout data for the operator in the Main Control Room and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights, or possibly contacts alone. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints.
 
The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.11.2.4 Display and Contact Output Loops with field located MVII A number of the BOP Loops have a locally mounted MV/I converter which has its own power supply, takes an input from a thermocouple, and delivers a 4 to 20 mA signal back to the signal processing equipment.
NPG Site-Specific       WBN Unit 2 NSSS and SOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 209 of 440 11.1     System Description (continued)
The signal processing equipment provided by the Offerer will provide readout data for the operator in the Main Control Room and provide contact outputs for input to externally developed logic or annunciation and status lights. The System will interrogate the input current signal, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints.
The Offerer will supply the necessary equipment in accordance with these general specifications to perform the SOP control and indication functions as described in the following detailed specifications and Appendix E - the SOP I/O List. In the specification that follows, this will be referred to as the "System" or the "BOP Control and Indication System." This equipment will replace an existing SOP instrumentation system, which is located in or whose I/O will be routed to 10 instrument racks in the Auxiliary Instrument Room (AIR), which receive inputs from various transmitters located locally throughout the plant, and which provides outputs to the ICS, to local control devices, and operator readout devices in the Main Control Room (MCR).
The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.11.2.5 Reactor Building Floor and Equipment Drain Sump Level Loops The Offerer will supply signal-processing equipment as tabulated in Appendix E to process signals from four ultrasonic Reactor Building Sump level sensors and transmitters.
11.1.1 Redundancy The SOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required.
The sensors and transmitters are locally mounted and have their own power supplies.
11.1.2 Field Loads The BOP control system shall be capable of supplying the field loads (eg.,
The outputs will be indication and switch outputs for annunciation and externally developed pump logic.The System will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact outputs that will change status at predetermined setpoints.
transmitters) with a maximum of 48 VOC.
11.2.6 Containment Moisture Loops The Offerer will provide signal processing equipment for 2 moisture sensing loops. The system will be required to interrogate a 4 to 20 mA input signal representing 40 to 140 degrees F dewpoint temperature.
11.2     System Functional Details The BOP control and indication system have been grouped into several generic categories. Specific loop details may be found the BOP I/O listing.
The System will monitor rate of change of the input and provide a contact output at a predetermined dewpoint temperature rate of change. See Appendix E for input output details.
11.2.1 Integrated Control System (ICS) Data Point Loops and Test Loops A large number of the SOP Loops only provide data for input for the ICS through a resistor in the current loop with the power supply and transmitter or for pressure testing. This resistor driven communication scheme with ICS will be retained. The System will only provide power to the field sensor.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification PPage 211 of 440 11.2.7 Main Feed Pump Suction Pressure Instrumentation and Alarm Sensors 2-PT-5-31 and 2-PT-2-129 provide pressure monitoring for 2 BOP points and are combined arithmetically to provide an alarm of low net positive suction pressure for the main feed pumps. Each of the 2 loops have an indicator on the on the Main Control Boards. Details on the input points and output points for the 2 loops are tabulated in Appendix E. In addition, a switch contact output denoted as 2-PS-2-129A will be required to drive an annunciator window based on the arithmetic difference between these 2 loop values. Scaling will be provided later.11.2.8 Annulus Vacuum Control and Indication Loops Normal annulus vacuum control is maintained by 2 separate differential pressure measurement and control loops. Each loop measures differential pressure between the Annulus and Auxiliary Building exhaust stack. Only 1 of the 2 control loops is active at any one time. The controlling loop is switched out and the standby loop is switched in at a predetermined setpoint.
There will be no output for these loops. Refer to Appendix E for the sensor input signal, power supply requirement, and input signal location.
The inputs and outputs are tabulated in Appendix E. The control function is simple setpoint control. For information, the configurations of the existing loops are shown in figures 11.2.8-1 and 11.2.8-2.
11.2.2 Main Control Room Display and Recording Loops A number of the SOP Loops serve only to provide readout data for the operator in the Main Control Room. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices. The required signals and locations are tabulated in Appendix E.
NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 212 of 440 11.2.8 Annulus Vacuum Control and Indication Loops (continued)
 
K --.........
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 210 of 440 11.2.3 Display and Contact Output Loops A number of the BOP Loops provide readout data for the operator in the Main Control Room and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights, or possibly contacts alone. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.
.... .........-,-(&#xfd; )--- -- -......VR i~ ..........Figure 11.2.8.-1 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 213 of 440 11.2.8 Annulus Vacuum Control and Indication Loops (continued).. ..............  
11.2.4 Display and Contact Output Loops with field located MVII A number of the BOP Loops have a locally mounted MV/I converter which has its own power supply, takes an input from a thermocouple, and delivers a 4 to 20 mA signal back to the signal processing equipment. The signal processing equipment provided by the Offerer will provide readout data for the operator in the Main Control Room and provide contact outputs for input to externally developed logic or annunciation and status lights. The System will interrogate the input current signal, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.
.............
11.2.5 Reactor Building Floor and Equipment Drain Sump Level Loops The Offerer will supply signal-processing equipment as tabulated in Appendix E to process signals from four ultrasonic Reactor Building Sump level sensors and transmitters. The sensors and transmitters are locally mounted and have their own power supplies. The outputs will be indication and switch outputs for annunciation and externally developed pump logic.
............
The System will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact outputs that will change status at predetermined setpoints.
.1 f- (1 a (S~am tt~). .............
11.2.6 Containment Moisture Loops The Offerer will provide signal processing equipment for 2 moisture sensing loops. The system will be required to interrogate a 4 to 20 mA input signal representing 40 to 140 degrees F dewpoint temperature. The System will monitor rate of change of the input and provide a contact output at a predetermined dewpoint temperature rate of change. See Appendix E for input output details.
4P................
 
--"6- b ....... .. .Figure 11.2.8.-2 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 214 of 440 11.2.9 Hotwell Pump Discharge Bypass Flow Control This flow control loop is a function critical to plant availability as it is a fail open valve that can bypass sufficient flow to the condenser to starve the Main Feed Pump suction stream. It normally only modulates to control bypass flow to the condenser during short cycle operation.
NPG Site-Specific     WBN Unit 2 NSSS and BOP Controls             Specification Engineering                 Upgrade Specification                 Rev. 0001 Specification                                                     PPage 211 of 440 11.2.7 Main Feed Pump Suction Pressure Instrumentation and Alarm Sensors 2-PT-5-31 and 2-PT-2-129 provide pressure monitoring for 2 BOP points and are combined arithmetically to provide an alarm of low net positive suction pressure for the main feed pumps. Each of the 2 loops have an indicator on the on the Main Control Boards. Details on the input points and output points for the 2 loops are tabulated in Appendix E. In addition, a switch contact output denoted as 2-PS-2-129A will be required to drive an annunciator window based on the arithmetic difference between these 2 loop values. Scaling will be provided later.
During normal operation, the valve is held closed by the high flow signal through the control system. The control function is simple setpoint control. The current plant design relies on a single flow transmitter input. The control scheme will be expanded to a three input system through Field Bus Modules located locally in the Turbine Building.
11.2.8 Annulus Vacuum Control and Indication Loops Normal annulus vacuum control is maintained by 2 separate differential pressure measurement and control loops. Each loop measures differential pressure between the Annulus and Auxiliary Building exhaust stack. Only 1 of the 2 control loops is active at any one time. The controlling loop is switched out and the standby loop is switched in at a predetermined setpoint. The inputs and outputs are tabulated in Appendix E. The control function is simple setpoint control. For information, the configurations of the existing loops are shown in figures 11.2.8-1 and 11.2.8-2.
See Appendix E for I/O details on the 2 new flow transmitters.
 
Appendix E identifies the I/O requirements for the single transmitter input. There is a switch output for this loop but it is located locally in the turbine building and will be picked up in the current loop with the transmitter, and thus, will not require a System output. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide an output current loop to drive the valve I/P transducer.
NPG Site-Specific   WBN Unit 2 NSSS and SOP Controls             Specification Engineering             Upgrade Specification                   Rev. 0001 Specification                                                   Page 212 of 440 11.2.8   Annulus Vacuum Control and Indication Loops (continued)
11.3 Applicable Criteria & Standards The following criteria apply to this system.Institute of Electrical
K     --
& Electronics Engineers (IEEE)Standards:
VR
IEEE Std. 279-1971 (Section 4.7)The above Criteria and Standards have been considered in preparing the requirements of this section.11.4 WBN System Diagrams None 11.5 Indicators, Status Lights. and Controls Main Control Room Controls See I/O Listing Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications.
(&#xfd;)----- ......
See I/O listing.
i~ ..........
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 215 of 440 11.6 Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions.
Figure 11.2.8.-1
The following information shall be supplied to the computer systems. See I/O listing 11.7 Performance Limits Critical Control System See Section 11.2.11.8 Specific Requirements None 11.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
 
Rack environmental effects are not included in channel accuracy.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls                   Specification Engineering                             Upgrade Specification               Rev. 0001 Specification                                                               I Page 213 of 440 11.2.8     Annulus Vacuum Control and Indication Loops (continued) 1 f-                                (1 tt~).
The control accuraey is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
(S~am                .............
Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.
a 4P b  --"6-Figure 11.2.8.-2
11.10 Range TBD -See I/O Listing 11.11 Inputs Additional information for these inputs are documented in Appendix E NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 216 of 440 11.11 Inputs (continued)
 
The BOP inputs to the System are specified in Appendix E and are primarily transmitters.
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls                Specification Engineering                      Upgrade Specification                  Rev. 0001 Specification                                                            Page 214 of 440 11.2.9 Hotwell Pump Discharge Bypass Flow Control This flow control loop is a function critical to plant availability as it is a fail open valve that can bypass sufficient flow to the condenser to starve the Main Feed Pump suction stream. It normally only modulates to control bypass flow to the condenser during short cycle operation. During normal operation, the valve is held closed by the high flow signal through the control system. The control function is simple setpoint control. The current plant design relies on a single flow transmitter input. The control scheme will be expanded to a three input system through Field Bus Modules located locally in the Turbine Building. See Appendix E for I/O details on the 2 new flow transmitters. Appendix E identifies the I/O requirements for the single transmitter input. There is a switch output for this loop but it is located locally in the turbine building and will be picked up in the current loop with the transmitter, and thus, will not require a System output. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide an output current loop to drive the valve I/P transducer.
The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 MA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions that follow.11.12 Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions.
11.3      Applicable Criteria & Standards The following criteria apply to this system.
11.13 Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 11.2. 9.11.14 Time Response 11.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.11.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds.
Institute of Electrical & Electronics Engineers (IEEE)
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
Standards: IEEE Std. 279-1971 (Section 4.7)
The above Criteria and Standards have been considered in preparing the requirements of this section.
11.4      WBN System Diagrams None 11.5      Indicators, Status Lights. and Controls Main Control Room Controls See I/O Listing Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls            Specification Engineering                    Upgrade Specification                Rev. 0001 Specification                                                        Page 215 of 440 11.6      Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 11.7      Performance Limits Critical Control System See Section 11.2.
11.8      Specific Requirements None 11.9      Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuraey is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.
11.10      Range TBD - See I/O Listing 11.11      Inputs Additional information for these inputs are documented in Appendix E
 
NPG Site-Specific          WBN Unit 2 NSSS and BOP Controls              Specification Engineering                    Upgrade Specification                Rev. 0001 Specification                                                          Page 216 of 440 11.11     Inputs (continued)
The BOP inputs to the System are specified in Appendix E and are primarily transmitters. The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 MA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions that follow.
11.12      Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions.
11.13      Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 11.2. 9.
11.14      Time Response 11.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.
11.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
11.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
11.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 217 of 440 11.14.4 Manual Control Response The total delay for all manual component control signals shall be no greater than 1000 milli-seconds.
 
11.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.11.16 Noise Levels The root mean square noise should be limited to 1,2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.11.17 Programmed Functions None 11.18 Setpoints TBD -See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.11.19 Requirements for Test and Calibration The BOP Control and Indication System is not a protection system and, thus, does not require the capability of being tested at power.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 217 of 440 11.14.4   Manual Control Response The total delay for all manual component control signals shall be no greater than 1000 milli-seconds.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 218 of 440 12.0 TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS 12.1 System Description The Offerer will supply the necessary equipment in accordance with these general specifications.
11.15     Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
The System will include 2 new instrument racks for local mounting in the Turbine Building for use in signal processing and control of local turbine building processes and devices. These racks and equipment will be suitable for use in an industrial type environment (not a controlled instrument room or control room type environment) and will include the necessary equipment to implement the Input/Output features specified in Appendix E and in the detailed loop descriptions provided in this section. Connection of the input sensor signals, the output to the controlled devices, and connection of the new racks with the System Control Processors in the Auxiliary Instrument Room will be done by TVA. On the Appendix E I/O list, these racks will be designated TB-N (north) and TB-S (south).12.1.1 Redundancy The TBBOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required except for those input and output points identified as critical in Appendix E.12.1.2 Field Loads The TBBOP control system shall be capable of supplying the field loads (eg., transmitters) with a maximum of 95 VDC.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 219 of 440 12.2 Instrument Rack Specifications 12.2.1 General Rack Requirements Two free standing instrument racks (TB-S and TB-N) shall be furnished of standard dimensions for mounting 19 inch rack style equipment.
11.16     Noise Levels The root mean square noise should be limited to 1,2% of output span in all channels.
The rack will be large enough to house typical rack style signal processing equipment including space for terminal blocks suitable for landing typical field cables.The rack shall be large enough to house the specified required I/O devices included in this Specification plus room for future expansion of other equipment.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
Approximate dimensions will be 30 inches deep by 90 inches tall, but any standard cabinet of similar dimensions will be suitable.
11.17     Programmed Functions None 11.18     Setpoints TBD - See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
The racks will include both front and rear doors. Terminal blocks shall be provided in each compartment for field termination of 120V AC power supply cables and input and output cables. Wiring from terminal blocks to function modules and power supply modules shall be provided as part of the System.Separate terminal blocks shall be provided for 120V AC power supply wiring and instrument wiring. Two rows of full height terminal blocks shall be provided for future expansion.
11.19     Requirements for Test and Calibration The BOP Control and Indication System is not a protection system and, thus, does not require the capability of being tested at power.
All terminals shall be readily accessible when the back door of each rack is opened.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 220 of 440 12.2.2 Internal wiring requirements Contractor shall give prime consideration to the prevention of fire when designing or selecting components and/or materials.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 218 of 440 12.0     TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS 12.1     System Description The Offerer will supply the necessary equipment in accordance with these general specifications. The System will include 2 new instrument racks for local mounting in the Turbine Building for use in signal processing and control of local turbine building processes and devices. These racks and equipment will be suitable for use in an industrial type environment (not a controlled instrument room or control room type environment) and will include the necessary equipment to implement the Input/Output features specified in Appendix E and in the detailed loop descriptions provided in this section. Connection of the input sensor signals, the output to the controlled devices, and connection of the new racks with the System Control Processors in the Auxiliary Instrument Room will be done by TVA. On the Appendix E I/O list, these racks will be designated TB-N (north) and TB-S (south).
Material shall not be used which would support combustion or cause the propagation of a fire.Non-metallic components such as terminal blocks, wire and cable insulation, circuit boards, wire troughs, resistors, capacitors, cable ties, and switches shall be manufactured from materials which do not burn or are flame retardant as defined in IEEE Std 384-81 and are self-extinguishing as defined by IEEE Std 420-73. Polyvinyl chloride (PVC) shall not be used for wire insulation and cable jackets. For 120V AC power circuits where maximum current does not exceed 5 amperes, minimum wire size shall be 14 AWG. Instrument wiring and power wiring shall be separately bundled and be adequately supported to prevent sagging and breakage in transit and while in service. Bending radius of wires shall be in accordance with ICEA requirements for the specified wires. Each wire shall be cut so that wire manufacturer permanent marking is visible at its terminal block end. All wires shall be terminated by crimped, insulated ring-tongue type terminals.
12.1.1 Redundancy The TBBOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required except for those input and output points identified as critical in Appendix E.
Alternate termination mechanisms may be used with the approval of WVA.Each wire shall be provided with suitable wire markers near its terminals for wire number identification.
12.1.2 Field Loads The TBBOP control system shall be capable of supplying the field loads (eg.,
All terminal blocks shall be rated not less than 600V with barriers.
transmitters) with a maximum of 95 VDC.
Each terminal block shall be provided with a wire marking strip and terminal block cover secured onto the terminal block by nonferrous material.
 
Termination of each field wire shall be made at separate terminal screw. The terminal screws shall be not less than No. 10.Wiring shall be arranged to enable function modules and power supply modules to be removed and/or serviced without unduly disturbing the wiring.No wire shall be routed across the modules in a manner which will impede or obstruct terminals.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 219 of 440 12.2     Instrument Rack Specifications 12.2.1 General Rack Requirements Two free standing instrument racks (TB-S and TB-N) shall be furnished of standard dimensions for mounting 19 inch rack style equipment. The rack will be large enough to house typical rack style signal processing equipment including space for terminal blocks suitable for landing typical field cables.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 221 of 440 12.2.3 Detailed Rack Physical Requirements Each compartment shall have two vent openings, one at the bottom and the second at the top, for effective natural convection of heat produced by equipment.
The rack shall be large enough to house the specified required I/O devices included in this Specification plus room for future expansion of other equipment. Approximate dimensions will be 30 inches deep by 90 inches tall, but any standard cabinet of similar dimensions will be suitable. The racks will include both front and rear doors. Terminal blocks shall be provided in each compartment for field termination of 120V AC power supply cables and input and output cables. Wiring from terminal blocks to function modules and power supply modules shall be provided as part of the System.
All vent openings shall be covered by EMI screen or honeycomb to prevent the entrance or exit of RFI. Door and front openings of the compartments shall be designed so that each 19-inch cabinet can be removed straight out without twisting and turning. The rack configuration shall allow for both top and bottom cable entry. The exact configuration of the cable access openings and conduit bulkhead fittings will be supplied upon submittal of the rack drawings.
Separate terminal blocks shall be provided for 120V AC power supply wiring and instrument wiring. Two rows of full height terminal blocks shall be provided for future expansion. All terminals shall be readily accessible when the back door of each rack is opened.
Each compartment door shall be made of one steel plate with edges turned back and rounded for rigidity.
 
Door shall be flushed, equipped with concealed hinges, latches and 3-point lock. The lock shall be CCL Security Products 15766, 3 point Tee handle with chrome finish, or equal. All hinged doors shall have a flexible conductor bonded to the cabinet and door to ensure good electrical conductivity.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 220 of 440 12.2.2 Internal wiring requirements Contractor shall give prime consideration to the prevention of fire when designing or selecting components and/or materials. Material shall not be used which would support combustion or cause the propagation of a fire.
Gaskets for doors and removable plates shall be provided.
Non-metallic components such as terminal blocks, wire and cable insulation, circuit boards, wire troughs, resistors, capacitors, cable ties, and switches shall be manufactured from materials which do not burn or are flame retardant as defined in IEEE Std 384-81 and are self-extinguishing as defined by IEEE Std 420-73. Polyvinyl chloride (PVC) shall not be used for wire insulation and cable jackets. For 120V AC power circuits where maximum current does not exceed 5 amperes, minimum wire size shall be 14 AWG. Instrument wiring and power wiring shall be separately bundled and be adequately supported to prevent sagging and breakage in transit and while in service. Bending radius of wires shall be in accordance with ICEA requirements for the specified wires. Each wire shall be cut so that wire manufacturer permanent marking is visible at its terminal block end. All wires shall be terminated by crimped, insulated ring-tongue type terminals.
The gaskets shall be electrically conductive EMI type. Sheet steel used in the panel construction shall not be less than No. 11 gauge (0.12 inch) in thickness with sufficient structural reinforcement to assure a plane surface, to limit vibration and to provide rigidity.
Alternate termination mechanisms may be used with the approval of WVA.
The panel base shall be designed for flat surface mounting.Minimum height of the bottom of the lowest compartment to the floor shall be six (6) inches. The panel shall be provided with removable lifting eyes for lifting of the panel complete with all six fully functional 19-inch cabinets.Contractor shall submit outline dimensional drawings and structural detail drawings of the panel.12.2.4 Finishing, Painting and Shipping Requirements After fabrication, all manufacturer waste shall be removed from the equipment.
Each wire shall be provided with suitable wire markers near its terminals for wire number identification. All terminal blocks shall be rated not less than 600V with barriers. Each terminal block shall be provided with a wire marking strip and terminal block cover secured onto the terminal block by nonferrous material. Termination of each field wire shall be made at separate terminal screw. The terminal screws shall be not less than No. 10.
All external and internal cast iron carbon steel and low alloy steel surfaces shall, as a minimum, be protected by application of one coat of primer and two coats of finish paint. All surfaces to be coated shall be prepared for priming by blast cleaning in accordance with the applicable Steel Structures Painting Council Specification.
Wiring shall be arranged to enable function modules and power supply modules to be removed and/or serviced without unduly disturbing the wiring.
Primer shall be applied within eight (8) hours after blast cleaning and before rusting occurs.Application of primer shall be in accordance with Federal Specification T"-P-664. After air dried, a first and second coat of alkyd enamel shall be applied per Federal Specification TT-E-508.
No wire shall be routed across the modules in a manner which will impede or obstruct terminals.
The enamel shall be in accordance with Federal Standard No. 595a, Color No. 34410, light green. All grease, chalk, crayon, paint marks and other deleterious materials shall be removed from interior and exterior surfaces.
 
At time of shipment equipment shall be clean inside and outside. All electrical and electronic equipment and parts including 19-inch cabinets shall be wrapped and sealed in plastic for weather protection during shipment and while in storage. Desiccant shall be used to prevent moisture build-up in sealed packages.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 221 of 440 12.2.3 Detailed Rack Physical Requirements Each compartment shall have two vent openings, one at the bottom and the second at the top, for effective natural convection of heat produced by equipment. All vent openings shall be covered by EMI screen or honeycomb to prevent the entrance or exit of RFI. Door and front openings of the compartments shall be designed so that each 19-inch cabinet can be removed straight out without twisting and turning. The rack configuration shall allow for both top and bottom cable entry. The exact configuration of the cable access openings and conduit bulkhead fittings will be supplied upon submittal of the rack drawings. Each compartment door shall be made of one steel plate with edges turned back and rounded for rigidity. Door shall be flushed, equipped with concealed hinges, latches and 3-point lock. The lock shall be CCL Security Products 15766, 3 point Tee handle with chrome finish, or equal. All hinged doors shall have a flexible conductor bonded to the cabinet and door to ensure good electrical conductivity. Gaskets for doors and removable plates shall be provided. The gaskets shall be electrically conductive EMI type. Sheet steel used in the panel construction shall not be less than No. 11 gauge (0.12 inch) in thickness with sufficient structural reinforcement to assure a plane surface, to limit vibration and to provide rigidity. The panel base shall be designed for flat surface mounting.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 222 of 440 12.3 Detailed Functional Descriptions 12.3.1 Temperature Control Functions Many of the control functions in the Turbine Building Racks are temperature control functions where the sensed variable is temperature and the control function is valve modulation to control a valve position to a selected temperature setpoint.
Minimum height of the bottom of the lowest compartment to the floor shall be six (6) inches. The panel shall be provided with removable lifting eyes for lifting of the panel complete with all six fully functional 19-inch cabinets.
The System input will be a thermocouple or RTD and the output will be a 4 to 20 mA control signal. In all cases, a local control station or a MCR control station will be required that will emulate a Handstation as outlined in Appendix F. The 1/O list reflects the 14 point I/O list that will provide the Handstation function in addition to the normal input and output. Refer to Appendix F for a list of the required control stations and design description.
Contractor shall submit outline dimensional drawings and structural detail drawings of the panel.
None of these functions are considered critical for the purposes of this specification.
12.2.4 Finishing, Painting and Shipping Requirements After fabrication, all manufacturer waste shall be removed from the equipment. All external and internal cast iron carbon steel and low alloy steel surfaces shall, as a minimum, be protected by application of one coat of primer and two coats of finish paint. All surfaces to be coated shall be prepared for priming by blast cleaning in accordance with the applicable Steel Structures Painting Council Specification. Primer shall be applied within eight (8) hours after blast cleaning and before rusting occurs.
The System will provide power to the field sensor, will interrogate the field sensor output, and will provide contact output, indication, and control to drive the valve I/P transducer.
Application of primer shall be in accordance with Federal Specification T"-P-664. After air dried, a first and second coat of alkyd enamel shall be applied per Federal Specification TT-E-508. The enamel shall be in accordance with Federal Standard No. 595a, Color No. 34410, light green. All grease, chalk, crayon, paint marks and other deleterious materials shall be removed from interior and exterior surfaces. At time of shipment equipment shall be clean inside and outside. All electrical and electronic equipment and parts including 19-inch cabinets shall be wrapped and sealed in plastic for weather protection during shipment and while in storage. Desiccant shall be used to prevent moisture build-up in sealed packages.
The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.12.3.2 Heater Drain Tank Level Controls The System will provide level measurement and level control functions for both the #3 Heater Drain Tank and the #7 Heater Drain Tank. The control scheme for both tanks will be the same and the following is a description of the control system for one of the tanks. In both cases the System will be required to receive 3 level measurement inputs and provide control signals to 2 control valves. These are considered critical functions for the purposes of this specification.
 
One of the 2 valves provides tank level control through a normal setpoint control scheme with proportional band and reset by modulating a control valve in the Heater Drain Tank Pump Discharge Header which feeds the Condensate stream. The second valve stays closed until a high level is reached indicating failure of the primary control system. Upon reaching a predetermined high setpoint, the second valve starts opening and dumping a portion of the Pump Suction Header to the Condenser.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 222 of 440 12.3       Detailed Functional Descriptions 12.3.1     Temperature Control Functions Many of the control functions in the Turbine Building Racks are temperature control functions where the sensed variable is temperature and the control function is valve modulation to control a valve position to a selected temperature setpoint. The System input will be a thermocouple or RTD and the output will be a 4 to 20 mA control signal. In all cases, a local control station or a MCR control station will be required that will emulate a Handstation as outlined in Appendix F. The 1/O list reflects the 14 point I/O list that will provide the Handstation function in addition to the normal input and output. Refer to Appendix F for a list of the required control stations and design description. None of these functions are considered critical for the purposes of this specification. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide contact output, indication, and control to drive the valve I/P transducer. The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.
The control scheme for the second valve is proportional band control only. There are also various contact outputs for annunciation and logic. Local Handstations as detailed in Appendix F will be required for all control functions.
12.3.2     Heater Drain Tank Level Controls The System will provide level measurement and level control functions for both the #3 Heater Drain Tank and the #7 Heater Drain Tank. The control scheme for both tanks will be the same and the following is a description of the control system for one of the tanks. In both cases the System will be required to receive 3 level measurement inputs and provide control signals to 2 control valves. These are considered critical functions for the purposes of this specification. One of the 2 valves provides tank level control through a normal setpoint control scheme with proportional band and reset by modulating a control valve in the Heater Drain Tank Pump Discharge Header which feeds the Condensate stream. The second valve stays closed until a high level is reached indicating failure of the primary control system. Upon reaching a predetermined high setpoint, the second valve starts opening and dumping a portion of the Pump Suction Header to the Condenser. The control scheme for the second valve is proportional band control only. There are also various contact outputs for annunciation and logic. Local Handstations as detailed in Appendix F will be required for all control functions. The required inputs and outputs are listed in Appendix E and the Handstations will be listed in Appendix F. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact output, indication, and control to drive the valve I /P transducers. The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.
The required inputs and outputs are listed in Appendix E and the Handstations will be listed in Appendix F. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact output, indication, and control to drive the valve I /P transducers.
12.4       Indicators, Status Lights. and Controls Main Control Room Controls None Main Control Room Indication None
The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.12.4 Indicators, Status Lights. and Controls Main Control Room Controls None Main Control Room Indication None NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 223 of 440 12.5 Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions.
 
The following information shall be supplied to the computer systems. See I/O listing 12.6 Performance Limits See section 12.3 12.7 Specific Requirements None 12.8 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 223 of 440 12.5       Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 12.6       Performance Limits See section 12.3 12.7       Specific Requirements None 12.8       Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.
Rack environmental effects are not included in channel accuracy.
Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.
The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction.
Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.
Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.
12.9       Range TBD - See i/O Listing
12.9 Range TBD -See i/O Listing NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 224 of 440 12.10 Inputs The TBBOP inputs to the System are specified in Appendix E and are primarily transmitters.
 
The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 mA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions in Section 12.3.12.11 Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions that follow.12.12 Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 12.3.2.12.13 Time Response 12.13.1lAnti=Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.12.13.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                         Page 224 of 440 12.10     Inputs The TBBOP inputs to the System are specified in Appendix E and are primarily transmitters. The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 mA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions in Section 12.3.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
12.11     Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions that follow.
12.12     Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 12.3.2.
12.13     Time Response 12.13.1lAnti=Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.
12.13.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
12.13.3Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
12.13.3Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 225 of 440 12.13.4Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.
 
12.14 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.12.15 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag.and filter time constants set to 0.0 and module gains set to 1.12.16 Programmed Functions None 12.17 Setpoints TBD -See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.12.18 Requirements for Test and Calibration The TBBOP Control System is not a protection system and, thus, does not require the capability of being tested at power.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 225 of 440 12.13.4Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 226 of 440 13.0 SHIPMENT AND STORAGE 13.1 Marking and Identification Cartons, shipping crates, or skid mounted equipment prepared for shipment shall be marked as required by the applicable carrier's rules, regulations, statutes, and the purchase order. Any individually packaged items shall be marked with the name of the vendor, the model, component, or part number, and the purchaser's contract and requisition numbers. Shipping containers shall be marked with the item description, quantities and weight, purchase order number, name and address of the supplier, name and address of the consignee, and the TVA contract number.The Offerer shall submit to TVA at the time of shipment a detailed list of all items shipped, their quantities, and their crate location.
12.14     Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.
This list shall be used by the engineer to ensure receipt at the plant site. Failure to provide a complete and adequate shipping list will delay the payment for the items until such time as a determination of adequate receipt can be made. The additional time required for verification as a result of the vendor's failure to provide the required documentation shall not entitle the vendor to any late charges, fees, or interest payments.13.2 Preparation For Shipment The Offerer shall prepare all materials in such a manner as to facilitate handling and to protect them from damage in transit. The Offerer shall also be responsible for and make good any arnd all damage due to improper preparation for loading and shipment.Boxes and crates shall have a packing list enclosed showing parts contained therein.Before shipment all finished surfaces shall be coated or otherwise protected with an approved non-lead rust preventative.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
All components and associated spare parts shall be assembled into the largest pieces which can be shipped to the jobsite without incurring additional shipping charges.Exceptions can be made with prior approval of the Engineer.13.3 Shipping Notice Shipping notices are required for any delivery.
12.15     Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The shipping notices must arrive 10 days ahead of the estimated shipment arrival. These notices must be sent to the persons listed in the Commercial Terms section entitled Shipping Information and Marking. FAX transmittals 10 days ahead of estimated shipment arrival are acceptable, so long as a copy is sent following the FAX.Advance notification for all shipments shall be made to the applicable site.13.4 Storage Requirements All boxes and packages shall be labeled and shall state the environment recommended for their storage, e.g., outside, under roof, minimum and maximum temperature, and humidity control.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 227 of 440 13.5 Spare Parts Spare parts shall be packaged separate from the remainder of the equipment.
and filter time constants set to 0.0 and module gains set to 1.
The shipping contents shall, in addition to labeling required in Section 13.1, be clearly labeled as containing spare parts.13.6 Shipment The Offerer shall be fully responsible for damage from handling and environmental conditions during loading and shipment.
12.16     Programmed Functions None 12.17     Setpoints TBD - See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.
Each assembly or component of the equipment shall be braced, crated, packed, or otherwise protected so that no damage will occur in transit, handling, or storage.Provisions shall be made for lifting and skidding.
12.18     Requirements for Test and Calibration The TBBOP Control System is not a protection system and, thus, does not require the capability of being tested at power.
All lifting points shall be clearly marked. All accessories, monitoring devices, and packing lists shall be packed and shipped with the equipment.
 
Shipments shall be made by Air Ride (Air Suspension) exclusively.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 226 of 440 13.0     SHIPMENT AND STORAGE 13.1       Marking and Identification Cartons, shipping crates, or skid mounted equipment prepared for shipment shall be marked as required by the applicable carrier's rules, regulations, statutes, and the purchase order. Any individually packaged items shall be marked with the name of the vendor, the model, component, or part number, and the purchaser's contract and requisition numbers. Shipping containers shall be marked with the item description, quantities and weight, purchase order number, name and address of the supplier, name and address of the consignee, and the TVA contract number.
Truck shipments will be accepted weekdays only between the hours of 7:00 a.m. and 1:00 p.m.(Eastern Time) Monday through Friday. After-hour deliveries not provided for by contract may be refused until the next regular workday.14.0 DEFINITIONS The following are definitions of terms that may be used throughout this specification.
The Offerer shall submit to TVA at the time of shipment a detailed list of all items shipped, their quantities, and their crate location. This list shall be used by the engineer to ensure receipt at the plant site. Failure to provide a complete and adequate shipping list will delay the payment for the items until such time as a determination of adequate receipt can be made. The additional time required for verification as a result of the vendor's failure to provide the required documentation shall not entitle the vendor to any late charges, fees, or interest payments.
Analog Signal -A continuously variable signal which varies across a range of voltage or current.Architecture (System) -The combination and relationship of hardware, configuration, and communications of any system. The functions and capabilities contained in systems and how they operate with each other.Bus -A control network topology in which nodes share one single linear medium.Messages propagate the length of the medium and are received by all nodes simultaneously, except for distance considerations.
13.2       Preparation For Shipment The Offerer shall prepare all materials in such a manner as to facilitate handling and to protect them from damage in transit. The Offerer shall also be responsible for and make good any arnd all damage due to improper preparation for loading and shipment.
Common Mode Failure Source -An element of the control system which, when it fails, influences more than one piece of process equipment and inhibits operation of more than one out of a group of redundant process parts.Computer -A logic processing device which performs many calculations sequentially, at high speed.
Boxes and crates shall have a packing list enclosed showing parts contained therein.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 228 of 440 14.0 DEFINITIONS (continued)
Before shipment all finished surfaces shall be coated or otherwise protected with an approved non-lead rust preventative.
Communications Network (Also called a Data Highway) -The mechanism of transmitting data and commands between independently functioning microprocessors (nodes). A high speed, integrated, communications path capable of detecting the failure of nodes or the loss of signal integrity and able to recover from these losses. It should be fully redundant so that no single fault will cause the loss of communication of all plant signals. The media for the network may be twisted wire, coax, triax, twinax, or fiber optic cable.Configuration  
All components and associated spare parts shall be assembled into the largest pieces which can be shipped to the jobsite without incurring additional shipping charges.
-The ability of plant personnel to change the engineering and operational contents of a DCS without the requirement of a programmer.
Exceptions can be made with prior approval of the Engineer.
An example of a configuration change would be the use of a ODU screen display with fill-in blanks to change a high alarm limit from 1020 degrees to 1025 degrees.Offerer, Vendor, Contractor, Supplier -Provider of the materials or services and any subcontracted supplier under this contract.Cycle time -The time span in which the inputs programs (algorithms) and outputs in system is updated.Data Base -The collection of stored data regarding the process variable programs and processing procedures.
13.3       Shipping Notice Shipping notices are required for any delivery. The shipping notices must arrive 10 days ahead of the estimated shipment arrival. These notices must be sent to the persons listed in the Commercial Terms section entitled Shipping Information and Marking. FAX transmittals 10 days ahead of estimated shipment arrival are acceptable, so long as a copy is sent following the FAX.
Datalink -The use of a communications path to send more than one signal. Datalinks commonly use an RS 232-C serial cable which passes messages slowly according to a standard originally designed to allow computers to send print messages to printers.Drop -An intelligent device performing specific functions that communicate through the node or the communications network and or subnetworks.
Advance notification for all shipments shall be made to the applicable site.
Typical functions are data acquisition, monitoring, calculation, logging, controlling, printing, interfacing, etc.A drop performs tasks without central supervision.
13.4       Storage Requirements All boxes and packages shall be labeled and shall state the environment recommended for their storage, e.g., outside, under roof, minimum and maximum temperature, and humidity control.
Detailed Functional Specifications  
 
-The detailed requirements and descriptions of the operation of the system as well as procedures and agreements as to development of the system provided by the Offerer.Distributed Processing  
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 227 of 440 13.5       Spare Parts Spare parts shall be packaged separate from the remainder of the equipment. The shipping contents shall, in addition to labeling required in Section 13.1, be clearly labeled as containing spare parts.
-Organizational mode of operation in which multiple processors are working concurrently or non-concurrently, each with their own memory and are connected by a network.Engineer -The term "Engineer" or "Technical Engineer" is the Site Lead Electrical Engineer or their designee who is the point of contact for all technical issues. Further definition may be supplied in the special conditions section of the contract.Failure -Whenever the external behavior of a system (to the process) does not conform to the expected system's specified performance.
13.6       Shipment The Offerer shall be fully responsible for damage from handling and environmental conditions during loading and shipment. Each assembly or component of the equipment shall be braced, crated, packed, or otherwise protected so that no damage will occur in transit, handling, or storage.
Fault -Any abnormal event within the system, or malfunction in hardware or software.
Provisions shall be made for lifting and skidding. All lifting points shall be clearly marked. All accessories, monitoring devices, and packing lists shall be packed and shipped with the equipment.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 229 of 440 14.0 DEFINITIONS (continued)
Shipments shall be made by Air Ride (Air Suspension) exclusively. Truck shipments will be accepted weekdays only between the hours of 7:00 a.m. and 1:00 p.m.
Fault Tolerance  
(Eastern Time) Monday through Friday. After-hour deliveries not provided for by contract may be refused until the next regular workday.
-The quality of a system to assure functional integrity in the event of a component (hardware or software) fault. The ability to prevent failure of the system upon a fault in the system.Functional Area -A functional area is a location, such as the control room, where all actions and annunciation need to be coordinated on all ODU screens and similar displays.
14.0     DEFINITIONS The following are definitions of terms that may be used throughout this specification.
A functional area would not be affected by actions in another functional area.Functional Distribution  
Analog Signal - A continuously variable signal which varies across a range of voltage or current.
-The ability to place control functions, such as the control of each SG Level, in a separate microprocessor or group of microprocessors operating as a single entity called a node. With this approach, each mill operates autonomously such that a failure of one of the nodes should not affect the ability of the other mills (nodes) to continue operations.
Architecture (System) - The combination and relationship of hardware, configuration, and communications of any system. The functions and capabilities contained in systems and how they operate with each other.
Functional Capacity -The number of I/O points on a card that may be used by the Control System. The maximum limit under is contract is 16 points/card regardless of the capability of the card.Global Time -The time elapsed between the moment an external event triggers a system reaction and the moment the system actuates a processed response.Hard Control -Hard control is the use of dedicated switches, indicators, and control stations for each device.Hardware Cutoff -The date when TVA's ability to change I/O, node, or other hardware requirements without effecting delivery or price ends.Hard Wire -Connecting and running dedicated wires between pieces of equipment, usually to communicate information or control commands.
Bus - A control network topology in which nodes share one single linear medium.
One wire communicates one (and only one) piece of information or command.Input/Output (110) Points -The hard wired signals into or out of any C&MS.Main Frame -A large computer that can handle multiple tasks concurrently Mean Time to Detection (MTTD) -The elapsed time (in hours) between the occurrence of a fault until it is detected by the service personnel.
Messages propagate the length of the medium and are received by all nodes simultaneously, except for distance considerations.
The MIUI'D depends on the technique used by the control system for fault detection, and the training of personnel's skills.Mean Time to Repair (MTTR) -The elapsed time (in hours) to repair a component or a system after a fault has been detected, Medium Access Control -The method of determining which node has access to the network or sub-network.
Common Mode Failure Source - An element of the control system which, when it fails, influences more than one piece of process equipment and inhibits operation of more than one out of a group of redundant process parts.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 230 of 440 14.0 DEFINITIONS (continued)
Computer - A logic processing device which performs many calculations sequentially, at high speed.
Microcomputer  
 
-A computer whose packaging of electronic cards and speed is on a small scale, such as an IBM microcomputer used for classroom training.Monitoring  
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 228 of 440 14.0     DEFINITIONS (continued)
-A means of providing automatic performance supervision and alarming of the status of a plant process through which changes can be made to the status of the process through control equipment or operator action.Multiprocessing  
Communications Network (Also called a Data Highway) - The mechanism of transmitting data and commands between independently functioning microprocessors (nodes). A high speed, integrated, communications path capable of detecting the failure of nodes or the loss of signal integrity and able to recover from these losses. It should be fully redundant so that no single fault will cause the loss of communication of all plant signals. The media for the network may be twisted wire, coax, triax, twinax, or fiber optic cable.
-A computer organization mode of operation on a local basis in which multiple processors are working concurrently for high availability and/or high computing power.Network Coupler- A device connecting two independent communications networks.Node -A microprocessor or group of microprocessors that operate synchronously and can communicate data and/or commands over a communications network. A node performs tasks without central supervision.
Configuration - The ability of plant personnel to change the engineering and operational contents of a DCS without the requirement of a programmer. An example of a configuration change would be the use of a ODU screen display with fill-in blanks to change a high alarm limit from 1020 degrees to 1025 degrees.
Object Code -The instructions comprising a computer program expressed in machine language, being the binary representations which actually cause the computer machinery to execute operations, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.Operator -TVA's plant personnel responsible for operating the unit and normally assigned to the control room.Owner -Tennessee Valley Authority Plant Engineer -A technically competent plant person on TVA's staff assigned to the plant.Point -A value or input in the system. Also a variable, point ID or tag name.Ring -A topology in which the nodes are linked through point-to-point communication in a closed loop.RISC -Reduced Instruction Set Computing:
Offerer, Vendor, Contractor, Supplier - Provider of the materials or services and any subcontracted supplier under this contract.
internal computing architecture where processor instructions are pared down so that most can be performed in a single processor cycle, theoretically improving computing efficiency.
Cycle time - The time span in which the inputs programs (algorithms) and outputs in system is updated.
RoHS -See web link http://www.rohs.gov.uk  
Data Base - The collection of stored data regarding the process variable programs and processing procedures.
-Restriction of Hazardous Substances.
Datalink - The use of a communications path to send more than one signal. Datalinks commonly use an RS 232-C serial cable which passes messages slowly according to a standard originally designed to allow computers to send print messages to printers.
Scan Time -The interval between successive readings of a field input, including processing and reporting.
Drop - An intelligent device performing specific functions that communicate through the node or the communications network and or subnetworks. Typical functions are data acquisition, monitoring, calculation, logging, controlling, printing, interfacing, etc.
Serial Interface  
A drop performs tasks without central supervision.
-Usually, as pertains to computers or terminals, the mechanical and electrical components that allow data to be sent sequentially-by-bit over a transmission medium; in contrast to parallel interface.
Detailed Functional Specifications - The detailed requirements and descriptions of the operation of the system as well as procedures and agreements as to development of the system provided by the Offerer.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 231 of 440 14.0 DEFINITIONS (continued)
Distributed Processing - Organizational mode of operation in which multiple processors are working concurrently or non-concurrently, each with their own memory and are connected by a network.
Soft Control -The use of ODU screens and keyboards for the direct operator interface to the process equipment (through to the final control actuators).
Engineer - The term "Engineer" or "Technical Engineer" is the Site Lead Electrical Engineer or their designee who is the point of contact for all technical issues. Further definition may be supplied in the special conditions section of the contract.
Each ODU location can perform any one of the many control functions (i.e., stations, switches, indicators, etc.) that are presently located on the existing control panel.Software -The computer programs which are a part of the System, are provided by the CONTRACTOR to "VA in accordance with the terms of the Contract Documents.
Failure - Whenever the external behavior of a system (to the process) does not conform to the expected system's specified performance.
Software Cutoff -The date all program and configuration requirements become final and cannot be changed without effecting delivery or price.Soft Wire -The use of a network to send and receive commands and information.
Fault - Any abnormal event within the system, or malfunction in hardware or software.
No dedicated wires or connections to hardware exist.Source Code -The instructions comprising a computer program expressed in the system programming language, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.Starian -A local area network design and specification within the IEEE 802.3 standards subcommittee, characterized by I-Mbit/s baseband data transmission over two-pair wiring.Star A topology in which the nodes are linked through a common point; either active or passive, such that loss of this central point causes loss of that network.Sub-network  
 
-Serial network connecting nodes or communicating modules.Switched Line -Communications link for which the physical path, established by dialing, may vary with each use.Synchronous Transmission  
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                         Page 229 of 440 14.0     DEFINITIONS (continued)
-Data communications where characters or bits are sent at a fixed rate with the transmitting and receiving devices synchronized.
Fault Tolerance - The quality of a system to assure functional integrity in the event of a component (hardware or software) fault. The ability to prevent failure of the system upon a fault in the system.
System -The DCS and the equipment and software covered by the Contract Documents.
Functional Area - A functional area is a location, such as the control room, where all actions and annunciation need to be coordinated on all ODU screens and similar displays. A functional area would not be affected by actions in another functional area.
System Documentation  
Functional Distribution - The ability to place control functions, such as the control of each SG Level, in a separate microprocessor or group of microprocessors operating as a single entity called a node. With this approach, each mill operates autonomously such that a failure of one of the nodes should not affect the ability of the other mills (nodes) to continue operations.
-All printout specifications, file specifications, data base dictionary in file sequence, flow charts, ODU screen formats, report formats, and all documents which collectively contain a complete description and definition of all operating conditions of, and all maintenance requirements and procedures for all parts of the System, and all user guides describing the operation and management of the System.Systems Network Architecture  
Functional Capacity - The number of I/O points on a card that may be used by the Control System. The maximum limit under is contract is 16 points/card regardless of the capability of the card.
-The layered logical structure, formats, protocols, and procedures that govern information transmission.
Global Time - The time elapsed between the moment an external event triggers a system reaction and the moment the system actuates a processed response.
Tree -A topology derived from the bus by branching the bus through active or passive splitters.
Hard Control - Hard control is the use of dedicated switches, indicators, and control stations for each device.
NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 232 of 440 14.0 DEFINITIONS (continued)
Hardware Cutoff - The date when TVA's ability to change I/O, node, or other hardware requirements without effecting delivery or price ends.
Terminal -A point in a network at which data can either enter or leave; usually equipped with keyboard, often with a display, capable of sending and receiving data over a communications link.Token Ring -A local network access mechanism and topology in which a supervisory frame or token is passed from station to station in sequential order; stations wishing to gain access to the network must wait for the token to arrive before transmitting data; in a token ring, the next logical station receiving the token is also the next physical station on the ring.TVA Representative  
Hard Wire - Connecting and running dedicated wires between pieces of equipment, usually to communicate information or control commands. One wire communicates one (and only one) piece of information or command.
-A TVA Engineer or their designee who is the point of contact for coordinating Owner-witnessed events or materials inspection visits.15.0 AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS 15.1 System Description A separate, stand alone control system shall be provided to replace existing analog modules and hand control stations locating in existing panels in the Auxilliary Control Room (ACR). This equipment is intended to provide an alternate location to control certain loops if the Main Control Room (MCR) is uninhabitable.
Input/Output (110) Points - The hard wired signals into or out of any C&MS.
Accordingly, this system shall operate independently of the rest of the system described in the rest of this document, and shall not require the availability of any equipment outside the ACR to operate. It is desired that the engineering workstation located in the Aux Instrument Room not be required for loading the configuration when both controller processors power up; offerer shall state if this is required.None of this equipment is safety related, but there are train associations as shown in the I/O list (Appendix G). A pair of control processors and associated I/O shall be provided for each train. Train A and B hardware will be physically separated.
Main Frame - A large computer that can handle multiple tasks concurrently Mean Time to Detection (MTTD) - The elapsed time (in hours) between the occurrence of a fault until it is detected by the service personnel. The MIUI'D depends on the technique used by the control system for fault detection, and the training of personnel's skills.
15.1.1 Redundancy The ACR control system shall have redundant control processors and power supplies.Redundant input and output modules are not required.15.2 System Functional Details The ACR loops have been grouped into several generic categories.
Mean Time to Repair (MTTR) - The elapsed time (in hours) to repair a component or a system after a fault has been detected, Medium Access Control - The method of determining which node has access to the network or sub-network.
Specific loop details may be found in the I/O listing (Appendix G), which references these sections.15.2.1 Indicator Loops A number of the ACR Loops serve only to provide readout data for the operator on panel 2-L-1 0. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices-The required signals and locations are tabulated in Appendix G0 NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 233 of 440 15.2.2 Display and Contact Output Loops A number of the ACR Loops provide readout data for the operator on panel 2-L-10 and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights. The System will provide power to the field sensor if required, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints.
 
The required signals, contact outputs, and locations are tabulated in Appendix G.15.2.3 Alternate Controller Loops Some of the ACR loops provide an alternate control loop for loops in the MCRIAIR.For each loop, a switch is located in the ACR on panel 2-L-1-A or 2-L-11B to allow the operator to select either the MCR as the control location or the ACR as the control location.
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification               Rev. 0001 Specification                                                       Page 230 of 440 14.0     DEFINITIONS (continued)
The switch simply selects which output goes to the control valve. Where a transmitter is included in the loop, standard PID control is required with a single input from a transmitter and a single output to a valve. Other loops are hand loading stations only. Hand control stations shall be provided as shown in the I/O list, to replace existing controllers.
Microcomputer - A computer whose packaging of electronic cards and speed is on a small scale, such as an IBM microcomputer used for classroom training.
The required signals and locations are tabulated in Appendix G.15.3 Time Response 16.3.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.15.3.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 500 milli-seconds.
Monitoring - A means of providing automatic performance supervision and alarming of the status of a plant process through which changes can be made to the status of the process through control equipment or operator action.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
Multiprocessing - A computer organization mode of operation on a local basis in which multiple processors are working concurrently for high availability and/or high computing power.
16.3.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for control signals involved in closed loop control.
Network Coupler- A device connecting two independent communications networks.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 234 of 440 15.3.4 Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.
Node - A microprocessor or group of microprocessors that operate synchronously and can communicate data and/or commands over a communications network. A node performs tasks without central supervision.
15.4 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.15.5 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
Object Code - The instructions comprising a computer program expressed in machine language, being the binary representations which actually cause the computer machinery to execute operations, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering I Upgrade Specification Rev. 0001 Specification I Page 235 of 440 Appendix A (Page I of 2)Format Requirements 1.0  
Operator - TVA's plant personnel responsible for operating the unit and normally assigned to the control room.
Owner - Tennessee Valley Authority Plant Engineer - A technically competent plant person on TVA's staff assigned to the plant.
Point - A value or input in the system. Also a variable, point ID or tag name.
Ring - A topology in which the nodes are linked through point-to-point communication in a closed loop.
RISC - Reduced Instruction Set Computing: internal computing architecture where processor instructions are pared down so that most can be performed in a single processor cycle, theoretically improving computing efficiency.
RoHS - See web link http://www.rohs.gov.uk - Restriction of Hazardous Substances.
Scan Time - The interval between successive readings of a field input, including processing and reporting.
Serial Interface - Usually, as pertains to computers or terminals, the mechanical and electrical components that allow data to be sent sequentially-by-bit over a transmission medium; in contrast to parallel interface.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 231 of 440 14.0     DEFINITIONS (continued)
Soft Control - The use of ODU screens and keyboards for the direct operator interface to the process equipment (through to the final control actuators). Each ODU location can perform any one of the many control functions (i.e., stations, switches, indicators, etc.) that are presently located on the existing control panel.
Software - The computer programs which are a part of the System, are provided by the CONTRACTOR to "VA in accordance with the terms of the Contract Documents.
Software Cutoff - The date all program and configuration requirements become final and cannot be changed without effecting delivery or price.
Soft Wire - The use of a network to send and receive commands and information. No dedicated wires or connections to hardware exist.
Source Code - The instructions comprising a computer program expressed in the system programming language, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.
Starian - A local area network design and specification within the IEEE 802.3 standards subcommittee, characterized by I-Mbit/s baseband data transmission over two-pair wiring.
Star A topology in which the nodes are linked through a common point; either active or passive, such that loss of this central point causes loss of that network.
Sub-network - Serial network connecting nodes or communicating modules.
Switched Line - Communications link for which the physical path, established by dialing, may vary with each use.
Synchronous Transmission - Data communications where characters or bits are sent at a fixed rate with the transmitting and receiving devices synchronized.
System - The DCS and the equipment and software covered by the Contract Documents.
System Documentation - All printout specifications, file specifications, data base dictionary in file sequence, flow charts, ODU screen formats, report formats, and all documents which collectively contain a complete description and definition of all operating conditions of, and all maintenance requirements and procedures for all parts of the System, and all user guides describing the operation and management of the System.
Systems Network Architecture - The layered logical structure, formats, protocols, and procedures that govern information transmission.
Tree - A topology derived from the bus by branching the bus through active or passive splitters.
 
NPG Site-Specific       WBN Unit 2 NSSS and SOP Controls               Specification Engineering                   Upgrade Specification                   Rev. 0001 Specification                                                         Page 232 of 440 14.0     DEFINITIONS (continued)
Terminal - A point in a network at which data can either enter or leave; usually equipped with keyboard, often with a display, capable of sending and receiving data over a communications link.
Token Ring - A local network access mechanism and topology in which a supervisory frame or token is passed from station to station in sequential order; stations wishing to gain access to the network must wait for the token to arrive before transmitting data; in a token ring, the next logical station receiving the token is also the next physical station on the ring.
TVA Representative - A TVA Engineer or their designee who is the point of contact for coordinating Owner-witnessed events or materials inspection visits.
15.0     AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS 15.1       System Description A separate, stand alone control system shall be provided to replace existing analog modules and hand control stations locating in existing panels in the Auxilliary Control Room (ACR). This equipment is intended to provide an alternate location to control certain loops if the Main Control Room (MCR) is uninhabitable. Accordingly, this system shall operate independently of the rest of the system described in the rest of this document, and shall not require the availability of any equipment outside the ACR to operate. It is desired that the engineering workstation located in the Aux Instrument Room not be required for loading the configuration when both controller processors power up; offerer shall state ifthis is required.
None of this equipment is safety related, but there are train associations as shown in the I/O list (Appendix G). A pair of control processors and associated I/O shall be provided for each train. Train A and B hardware will be physically separated.
15.1.1   Redundancy The ACR control system shall have redundant control processors and power supplies.
Redundant input and output modules are not required.
15.2       System Functional Details The ACR loops have been grouped into several generic categories. Specific loop details may be found in the I/O listing (Appendix G), which references these sections.
15.2.1   Indicator Loops A number of the ACR Loops serve only to provide readout data for the operator on panel 2-L-1 0. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices-The required signals and locations are tabulated in Appendix G0
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                       Upgrade Specification                 Rev. 0001 Specification                                                           Page 233 of 440 15.2.2     Display and Contact Output Loops A number of the ACR Loops provide readout data for the operator on panel 2-L-10 and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights. The System will provide power to the field sensor if required, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix G.
15.2.3     Alternate Controller Loops Some of the ACR loops provide an alternate control loop for loops in the MCRIAIR.
For each loop, a switch is located in the ACR on panel 2-L-1-A or 2-L-11B to allow the operator to select either the MCR as the control location or the ACR as the control location. The switch simply selects which output goes to the control valve. Where a transmitter is included in the loop, standard PID control is required with a single input from a transmitter and a single output to a valve. Other loops are hand loading stations only. Hand control stations shall be provided as shown in the I/O list, to replace existing controllers. The required signals and locations are tabulated in Appendix G.
15.3       Time Response 16.3.1     Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.
This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.
15.3.2     Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 500 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
16.3.3     Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for control signals involved in closed loop control.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls             Specification Engineering                     Upgrade Specification               Rev. 0001 Specification                                                       Page 234 of 440 15.3.4   Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.
15.4       Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.
During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.
15.5       Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.
The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.
 
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering       I             Upgrade Specification                   Rev. 0001 Specification     I                                                   Page 235 of 440 Appendix A (Page I of 2)
Format Requirements 1.0      


==SUMMARY==
==SUMMARY==
IOVERVIEW Provide a general overview of the proposed system, and clearly list any alternative proposals or options as "ALTERNATE PROPOSAL #1", "OPTION #1", etc., and describe the difference from the base proposal and the advantages/disadvantages of each alternative/option.
IOVERVIEW Provide a general overview of the proposed system, and clearly list any alternative proposals or options as "ALTERNATE PROPOSAL #1", "OPTION #1", etc., and describe the difference from the base proposal and the advantages/disadvantages of each alternative/option.
2.0 PROJECT ORGANIZATION Submit the proposed project structure and identify key personnel by name and include qualifications (i.e., resume). Identify points of contact for technical, project management, and any other pertinent areas. Clearly indicate any requirements for support from outside the described structure.
2.0       PROJECT ORGANIZATION Submit the proposed project structure and identify key personnel by name and include qualifications (i.e., resume). Identify points of contact for technical, project management, and any other pertinent areas. Clearly indicate any requirements for support from outside the described structure.
3.0 SYSTEM DESIGN Provide the following:
3.0       SYSTEM DESIGN Provide the following:
A technical description of the proposed hardware system, its configuration, functional capabilities, physical mounting requirements, power supply requirements, its expansion capability, etc.A technical description of the proposed software system, its configuration, functional capabilities, logic for operation, proposed graphics, and its expansion capabilities.
A technical description of the proposed hardware system, its configuration, functional capabilities, physical mounting requirements, power supply requirements, its expansion capability, etc.
An overview of the techniques which will be used to ensure high availability and reliability.
A technical description of the proposed software system, its configuration, functional capabilities, logic for operation, proposed graphics, and its expansion capabilities.
A listing of deliverables, including all hardware, software, training, and documentation included in the Offerer's base proposal and any alternative proposals.
An overview of the techniques which will be used to ensure high availability and reliability. A listing of deliverables, including all hardware, software, training, and documentation included in the Offerer's base proposal and any alternative proposals.
A recommended spare parts list.A list of recommended maintenance tools, including any specialty tools.4.0 MILESTONE SCHEDULE Develop and show a design schedule with the following milestone dates:* Conceptual Design Complete* Required Plant Data Document Submittal* Approved SQAP Submittal* Approved System Design Description Submittal* Approved Logic Drawing Submittal NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 236 of 440 Appendix A (Page 2 of 2)Format Requirements 4.0 MILESTONE SCHEDULE (continued)
A recommended spare parts list.
* Approved Wiring and Physical Drawing Submittal* Approved Power Requirements Submittal* Approved Component Accuracy and Seismic* Qualification Data Submittal* Approved EMI/RFI Test Plan Submittal* Approved EMIIRFI Test Report Submittal* Approved Drawing Submittal  
A list of recommended maintenance tools, including any specialty tools.
-All Drawings" Design Complete -Hardware and Software* Approved FAT Test Plan Submittal* FAT* Approved FAT Documentation Submittal* Approved Bill of Material Submittal* Approved Software Configuration Control Documentation
4.0       MILESTONE SCHEDULE Develop and show a design schedule with the following milestone dates:
* Submittal* System Storage Requirements Submittal" Approved Operators Guide Submittal" System Delivery 5.0 SYSTEM COMPONENT INFORMATION Provide information, such as product specification sheets for all proposed components.
* Conceptual Design Complete
6.0 INDUSTRY REFERENCES Provide industry references for similar applications, nuclear or non-nuclear, and nuclear industry references.
* Required Plant Data Document Submittal
Include a description of the projects the hardware/software supplied, and a contact at the customer facility.
* Approved SQAP Submittal
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 237 of 440 Appendix B (Page I of 1)Software Quality Spec Sheet (from Standard Specification SS-E18.15.01)
* Approved System Design Description Submittal
Requirements for Systems Critical to Plant Operations (CPO)Requirements Normally Applied Requirements for this Requisition 5.1.1 Software QA Plans 5.1.2 Requirement Specification 5.1.3 Software Design Description 5.1.4 Coding Standards and Conventions 5.1.5 Software Verification and Validation Plan (SWP) (Not Required -See Section 5.1.6 of SS E18.15.01) 5.1.6 SWP for Systems other than SRPS (Validation is required but does not have to be performed by independent personnel) 5.1.7 Installation, Checkout, and Final Acceptance 5.1.8 User Manual 5.1.9 Source Code Listing 5.1.10 Software Training 5.1.11 Problem/Error Handling 5.1.12 Document Control and Media Control 5.1.13 Procurement of Software from Sub-tier Suppliers (Section 5.2 of SS E18.16.01 is not applicable, Section 5.3 is not applicable except for 5.3.1 which applies)5.1.14 Configuration Control 5.1.15 Software Security Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec Section 3.5 of this Spec NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 238 of 440 Appendix C (Page 1 of 2)Functional Library The following is a listing of the minimum library function blocks: Required Functions:
* Approved Logic Drawing Submittal
Function Generator Manual Set Constant Lead/Lag OR (2 Input)High/Low Limiter Square Root Velocity/Rate Limiter Analog Transfer High Select Low Select High/Low Compare 4 Input Summer Multiply Divide PID Indicator Station (for soft control)M/A Station (Basic for soft control)M/A Station (Cascade for soft control)Analog Input Analog Output Test Quality NOT Set Reset Flip Flop Timer Median Signal Select (3 Input)Additional Desired Functions:
 
Regression Digital Controller Smith Predictor Sequence Generator Moving Average Trigonometric Qualified OR (i.e., 3 out of 4)Blink Up/Down Counter Other types of Flip Flops (D, JK, etc.)Neural Networks RTD Input AND (2 Input)AND (4 Input)OR (4-Input)Digital Input Digital Output Manual Set Switch Time Delay (analog)Digital Transfer Thermocouple Temperature Input Digital Sum With Gain (4 Inputs)2 Input Summer Elapsed Timer Exclusive OR PID Error Input Pulse Input/Totalization Transfer Function Ramp Function Bias Function Ratio Function Exponential Power Logarithm (Natural and Common)Averaging Function Rate/Lag Integration Polynomial Interpolation Matrix Addition Matrix Multiplication Pulse Positioner Pulse Rate Pulse Input/Period Pulse Input/Frequency Adaptive tuning function NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 239 of 440 Appendix C (Page 2 of 2)Functional Library Specific Minimum Set of Algorithms Lag Filter (i + -C S)Lead/Lag ( + , s)(I + E s)Lead with Two Lags 1+tS ( + -sXi + s)Derivative-rS ( + -S)PID Function Output =+ +Input T S NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 240 of 440 Appendix D (Page 1 of 7)WBN Simulator Requirements The following Appendix is being added to better define the WBN Simulator upgrade modification requirements.
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls             Specification Engineering                   Upgrade Specification                 Rev. 0001 Specification                                                       Page 236 of 440 Appendix A (Page 2 of 2)
Format Requirements 4.0       MILESTONE SCHEDULE (continued)
* Approved Wiring and Physical Drawing Submittal
* Approved Power Requirements Submittal
* Approved Component Accuracy and Seismic
* Qualification Data Submittal
* Approved EMI/RFI Test Plan Submittal
* Approved EMIIRFI Test Report Submittal
* Approved Drawing Submittal - All Drawings
          "     Design Complete - Hardware and Software
* Approved FAT Test Plan Submittal
* FAT
* Approved FAT Documentation Submittal
* Approved Bill of Material Submittal
* Approved Software Configuration Control Documentation
* Submittal
* System Storage Requirements Submittal
          "     Approved Operators Guide Submittal
          "     System Delivery 5.0       SYSTEM COMPONENT INFORMATION Provide information, such as product specification sheets for all proposed components.
6.0       INDUSTRY REFERENCES Provide industry references for similar applications, nuclear or non-nuclear, and nuclear industry references. Include a description of the projects the hardware/software supplied, and a contact at the customer facility.
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls         Specification Engineering                   Upgrade Specification             Rev. 0001 Specification                                                   Page 237 of 440 Appendix B (Page I of 1)
Software Quality Spec Sheet (from Standard Specification SS-E18.15.01)
Requirements for Systems Critical to Plant Operations (CPO)
Requirements Normally Applied               Requirements for this Requisition 5.1.1   Software QA Plans                                     Section 3.5 of this Spec 5.1.2   Requirement Specification                             Section 3.5 of this Spec 5.1.3     Software Design Description                           Section 3.5 of this Spec 5.1.4   Coding Standards and Conventions                       Section 3.5 of this Spec 5.1.5   Software Verification and Validation Plan             Section 3.5 of this Spec (SWP) (Not Required - See Section 5.1.6 of SS E18.15.01) 5.1.6   SWP for Systems other than SRPS (Validation           Section 3.5 of this Spec is required but does not have to be performed by independent personnel) 5.1.7   Installation, Checkout, and Final Acceptance           Section  3.5 of this Spec 5.1.8   User Manual                                           Section  3.5 of this Spec 5.1.9   Source Code Listing                                   Section  3.5 of this Spec 5.1.10   Software Training                                     Section  3.5 of this Spec 5.1.11   Problem/Error Handling                                 Section  3.5 of this Spec 5.1.12   Document Control and Media Control                     Section  3.5 of this Spec 5.1.13   Procurement of Software from Sub-tier                 Section  3.5 of this Spec Suppliers (Section 5.2 of SS E18.16.01 is not applicable, Section 5.3 is not applicable except for 5.3.1 which applies) 5.1.14   Configuration Control                                   Section 3.5 of this Spec 5.1.15  Software Security                                      Section 3.5 of this Spec
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 238 of 440 Appendix C (Page 1 of 2)
Functional Library The following is a listing of the minimum library function blocks:
Required Functions:
Function Generator                           RTD Input Manual Set Constant                         AND (2 Input)
Lead/Lag                                     AND (4 Input)
OR (2 Input)                                 OR (4-Input)
High/Low Limiter                             Digital Input Square Root                                 Digital Output Velocity/Rate Limiter                       Manual Set Switch Analog Transfer                             Time Delay (analog)
High Select                                 Digital Transfer Low Select                                   Thermocouple Temperature Input High/Low Compare                             Digital Sum With Gain (4 Inputs) 4 Input Summer                              2 Input Summer Multiply                                     Elapsed Timer Divide                                       Exclusive OR PID                                          PID Error Input Indicator Station (for soft control)         Pulse Input/Totalization M/A Station (Basic for soft control)         Transfer Function M/A Station (Cascade for soft control)       Ramp Function Analog Input                                 Bias Function Analog Output                               Ratio Function Test Quality                                 Exponential NOT                                         Power Set Reset Flip Flop                         Logarithm (Natural and Common)
Timer                                       Averaging Function Median Signal Select (3 Input)               Rate/Lag Additional Desired Functions:
Regression                                   Integration Digital Controller                           Polynomial Smith Predictor                             Interpolation Sequence Generator                           Matrix Addition Moving Average                               Matrix Multiplication Trigonometric                               Pulse Positioner Qualified OR (i.e., 3 out of 4)             Pulse Rate Blink                                       Pulse Input/Period Up/Down Counter                             Pulse Input/Frequency Other types of Flip Flops (D, JK, etc.)     Adaptive tuning function Neural Networks
 
NPG Site-Specific       WBN Unit 2 NSSS and BOP Controls       Specification Engineering               Upgrade Specification             Rev. 0001 Specification                                               Page 239 of 440 Appendix C (Page 2 of 2)
Functional Library Specific Minimum Set of Algorithms Lag Filter (i + -CS)
Lead/Lag
( + , s)
(I+ Es)
Lead with Two Lags 1+tS
( + - sXi + s)
Derivative
          -rS
( + - S)
PID Function Output =+       +
Input     TS
 
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                   Rev. 0001 Specification                                                           Page 240 of 440 Appendix D (Page 1 of 7)
WBN Simulator Requirements The following Appendix is being added to better define the WBN Simulator upgrade modification requirements.
Simulator Requirements for Process Panel and BOP panel replacements.
Simulator Requirements for Process Panel and BOP panel replacements.
1.0      Introduction The Watts Bar simulator is certified per the requirements of ANSI 3.5 as required by 10CFR55. This certification requires that operators receive training and testing on a simulator that looks and behaves in the same manner as the actual plant in both normal, abnormal, and accident conditions. Concerning the installation of the plant instrument panels, it is our goal to ensure that the quality of simulator fidelity remains at least as good as if not better than the present simulation.
There are two broad areas of simulation that must be considered. The first is the man/machine interface (panel hardware requirements or operator controls and displays) on the main trainer. The second is modeling the algorithms (software modeling and control requirements) that describe the internal operation of the new instrument panels. These two functional areas are divided to explain more fully the requirements for each.
7.0      Panel Hardware Requirements The simulator panels shall have the same look and "feel" as the plant. The requirements are:
A. The Offerer shall provide necessary simulator switches, controls, and panels to replicate those to be installed in Main Control Room and/or Auxiliary Control Room on existing simulator panels.
B. The Offerer shall supply two spares of each type of simulator hardware; i.e. ODU, keyboard, indicators, switches, control stations, etc. for new or custom equipment.
Spares for standard equipment such as VX-252 meters need not be included.
C. These controls shall be of the type that will interface with the present simulator i/O equipment. Simulator analog outputs are 0-10VDC @lma, analog inputs are 0-10V, and relay or lamp outputs are 20VDC@500ma. Digital inputs are simple dry contact closure (current sinking, 3.35VDC open circuit voltage, 1.25VDC threshold voltage).
NPG Site-Specific          WBN Unit 2 NSSS and BOP Controls                Specification Engineering                      Upgrade Specification                  Rev. 0001 Specification                                                            Page 241 of 440 Appendix D (Page 2 of 7)
WBN Simulator Requirements 7.0      Panel Hardware Requirements (continued)
D. MCR Controllers can be simulated or stimulated. In the simulated case, the panel device is simply a false front with appropriate dials, indicators, and switches that drive the software emulation of the controller function. In the simulated case, the Offerer would disclose full descriptions of the algorithms used, including limits, controller characteristics, rates, gains, etc. to ensure full fidelity. In the stimulated case, the actual controller would be mounted to the simulator panel with appropriate IO to make it fully functional. The controller would be the identical model to that installed in the plant, with the exception that qualification for seismic events and radiation exposure is not required The controller will then be set to identical tuning factors as the plant. In either case, each would have to meet the requirements listed in the software modeling and control requirements for initialization, snapshots, backtracks, etc. Either method would be satisfactory and the best way to simulate the proposed system is at Offerer discretion.
8.0      Software Modeling and Control Requirements Software shall be provided for two simulation systems: the simulation system with the panels attaehed and the develoirment systemr without panels attached. The functions of the proposed process cabinets and BOP racks shall be fully replicated in the WBN simulator to ensure fidelity. All simulator commands, such as fast time, real time, slow time, reset, freeze run, snapshot, etc. are to be accepted from the existing simulator computer. The Offerer shall specify in detail how the proposed equipment will respond to these commands, especially with regard to the Snap and Backtrack functions and the format and methodology of saving and resetting to a given state. The Reset feature must be able to reset to a saved condition with complete initialization for the saved condition. No effects from a previous simulator run must be carried over to the new reset condition. The requirements are:
A. The simulator must be able to freeze the process. This includes being able to freeze the time sensitive devices such that timing functions and integration do not continue.
Placing the simulator into run from freeze shall continue the process in the same manner as ifthe freeze had not occurred.
B. The software must be able to snapshot and reset to at least 1000 different initial conditions (ICs 0-999) When resetting to an IC after making a snapshot, the simulator must be able to resume simulation regardless of the condition of timing functions, such as controller integration values, signal conditioning values (lags, rates, etc). That is, the process shall be continuous with data prior to the snapshot. Snapshots shall be taken upon demand from the simulator before any calculations begin in order to ensure consistency of data between the simulator models and the digital feedwater software.


==1.0 Introduction==
NPG Site-Specific         WBN Unit 2 NSSS and BOP Controls               Specification Engineering                     Upgrade Specification                 Rev. 0001 Specification                                                         Page 242 of 440 Appendix D (Page 3 of 7)
The Watts Bar simulator is certified per the requirements of ANSI 3.5 as required by 10CFR55. This certification requires that operators receive training and testing on a simulator that looks and behaves in the same manner as the actual plant in both normal, abnormal, and accident conditions.
WBN Simulator Requirements 8.0       Software Modeling and Control Requirements (continued)
Concerning the installation of the plant instrument panels, it is our goal to ensure that the quality of simulator fidelity remains at least as good as if not better than the present simulation.
There are two broad areas of simulation that must be considered.
The first is the man/machine interface (panel hardware requirements or operator controls and displays) on the main trainer. The second is modeling the algorithms (software modeling and control requirements) that describe the internal operation of the new instrument panels. These two functional areas are divided to explain more fully the requirements for each.7.0 Panel Hardware Requirements The simulator panels shall have the same look and "feel" as the plant. The requirements are: A. The Offerer shall provide necessary simulator switches, controls, and panels to replicate those to be installed in Main Control Room and/or Auxiliary Control Room on existing simulator panels.B. The Offerer shall supply two spares of each type of simulator hardware; i.e. ODU, keyboard, indicators, switches, control stations, etc. for new or custom equipment.
Spares for standard equipment such as VX-252 meters need not be included.C. These controls shall be of the type that will interface with the present simulator i/O equipment.
Simulator analog outputs are 0-10VDC @lma, analog inputs are 0-10V, and relay or lamp outputs are 20VDC@500ma.
Digital inputs are simple dry contact closure (current sinking, 3.35VDC open circuit voltage, 1.25VDC threshold voltage).
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 241 of 440 Appendix D (Page 2 of 7)WBN Simulator Requirements 7.0 Panel Hardware Requirements (continued)
D. MCR Controllers can be simulated or stimulated.
In the simulated case, the panel device is simply a false front with appropriate dials, indicators, and switches that drive the software emulation of the controller function.
In the simulated case, the Offerer would disclose full descriptions of the algorithms used, including limits, controller characteristics, rates, gains, etc. to ensure full fidelity.
In the stimulated case, the actual controller would be mounted to the simulator panel with appropriate IO to make it fully functional.
The controller would be the identical model to that installed in the plant, with the exception that qualification for seismic events and radiation exposure is not required The controller will then be set to identical tuning factors as the plant. In either case, each would have to meet the requirements listed in the software modeling and control requirements for initialization, snapshots, backtracks, etc. Either method would be satisfactory and the best way to simulate the proposed system is at Offerer discretion.
8.0 Software Modeling and Control Requirements Software shall be provided for two simulation systems: the simulation system with the panels attaehed and the develoirment systemr without panels attached.
The functions of the proposed process cabinets and BOP racks shall be fully replicated in the WBN simulator to ensure fidelity.
All simulator commands, such as fast time, real time, slow time, reset, freeze run, snapshot, etc. are to be accepted from the existing simulator computer.
The Offerer shall specify in detail how the proposed equipment will respond to these commands, especially with regard to the Snap and Backtrack functions and the format and methodology of saving and resetting to a given state. The Reset feature must be able to reset to a saved condition with complete initialization for the saved condition.
No effects from a previous simulator run must be carried over to the new reset condition.
The requirements are: A. The simulator must be able to freeze the process. This includes being able to freeze the time sensitive devices such that timing functions and integration do not continue.Placing the simulator into run from freeze shall continue the process in the same manner as if the freeze had not occurred.B. The software must be able to snapshot and reset to at least 1000 different initial conditions (ICs 0-999) When resetting to an IC after making a snapshot, the simulator must be able to resume simulation regardless of the condition of timing functions, such as controller integration values, signal conditioning values (lags, rates, etc). That is, the process shall be continuous with data prior to the snapshot.
Snapshots shall be taken upon demand from the simulator before any calculations begin in order to ensure consistency of data between the simulator models and the digital feedwater software.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 242 of 440 Appendix D (Page 3 of 7)WBN Simulator Requirements 8.0 Software Modeling and Control Requirements (continued)
C. The simulator must be able to provide at least 60 backtrack records in a cyclical type file such that the simulator may be reset to a previous point with a backtrack interval of 15 seconds to 5 minutes, with a nominal value of 1 minute. This enables instructors to backtrack the simulator to anywhere in the last hour of operation using a backtrack recording rate of 1 minute. Backtrack records shall be taken upon demand from the simulator before any calculations begin. The process of making the backtrack record shall not cause a visible pause in the execution of the simulation.
C. The simulator must be able to provide at least 60 backtrack records in a cyclical type file such that the simulator may be reset to a previous point with a backtrack interval of 15 seconds to 5 minutes, with a nominal value of 1 minute. This enables instructors to backtrack the simulator to anywhere in the last hour of operation using a backtrack recording rate of 1 minute. Backtrack records shall be taken upon demand from the simulator before any calculations begin. The process of making the backtrack record shall not cause a visible pause in the execution of the simulation.
D. The simulation must be able to run in real time, fast time, and slow time. This may require changing the iteration rate rather than program time constants if necessary to maintain source code equivalence with the plant implementation of functional calculations and algorithms.
D. The simulation must be able to run in real time, fast time, and slow time. This may require changing the iteration rate rather than program time constants if necessary to maintain source code equivalence with the plant implementation of functional calculations and algorithms. Specifically, the normal real time execution of the simulator consists of 12 frames per second. A slow time factor of up to 24 may be applied, in which case the simulator executes the appropriate number of frames per second. Due to limitations of the simulator's core/RCS model, a fast time factor of no more than 2 is possible, in which case 24 frames per second would be executed.
Specifically, the normal real time execution of the simulator consists of 12 frames per second. A slow time factor of up to 24 may be applied, in which case the simulator executes the appropriate number of frames per second. Due to limitations of the simulator's core/RCS model, a fast time factor of no more than 2 is possible, in which case 24 frames per second would be executed.Synchronization of the simulation software and digital feedwater system execution rates shall ensure that both systems maintain the same time rate.E. The simulator must fully simulate the failure conditions expected in the plant-both single and multiple failures.
Synchronization of the simulation software and digital feedwater system execution rates shall ensure that both systems maintain the same time rate.
This includes but is not limited to loss of power, CPU lockups, analog output failures, analog input failures, etc. The Offerer shall provide malfunction hooks as necessary in his software to perform these functions.
E. The simulator must fully simulate the failure conditions expected in the plant-both single and multiple failures. This includes but is not limited to loss of power, CPU lockups, analog output failures, analog input failures, etc. The Offerer shall provide malfunction hooks as necessary in his software to perform these functions.
F. Upon removal of a malfunction to a failed simulated component, the simulator must be able to replicate the same response as would occur in the plant, such as changing outputs, alarms, etc. As an example, on a loss of power, a lead-lag module may have a step change in its output when power is restored and could impact a control system it is connected to in a negative way. The simulator must respond similarly.
F. Upon removal of a malfunction to a failed simulated component, the simulator must be able to replicate the same response as would occur in the plant, such as changing outputs, alarms, etc. As an example, on a loss of power, a lead-lag module may have a step change in its output when power is restored and could impact a control system it is connected to in a negative way. The simulator must respond similarly.
G. The simulated process cabinets must have the same gains, time constants, logic, and failure modes as the system in the plant. A user interface must exist to modify parameters that can be field tuned in plant equipment.
G. The simulated process cabinets must have the same gains, time constants, logic, and failure modes as the system in the plant. A user interface must exist to modify parameters that can be field tuned in plant equipment.
H. There must be capability to modify or upgrade the software based upon changes in plant design, setpoints, time constants and other functions as necessary.
H. There must be capability to modify or upgrade the software based upon changes in plant design, setpoints, time constants and other functions as necessary. There must be a method available to add malfunctions or remote functions to the code necessary to support future training needs, such as unforeseen problems that will require simulator training in the future.
There must be a method available to add malfunctions or remote functions to the code necessary to support future training needs, such as unforeseen problems that will require simulator training in the future.1. The digital feedwater system shall accept a command from the simulator to erase all trend information.
: 1. The digital feedwater system shall accept a command from the simulator to erase all trend information. This would typically be used during license exams where the recall of trends from previous scenarios has the potential to compromise the exam. After receipt of this command, no past history of parameter trends shall be available from the panel mounted GUI displays.
This would typically be used during license exams where the recall of trends from previous scenarios has the potential to compromise the exam. After receipt of this command, no past history of parameter trends shall be available from the panel mounted GUI displays.
 
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 243 of 440 Appendix D (Page 4 of 7)WBN Simulator Requirements 8.0 Software Modeling and Control Requirements (continued)
NPG Site-Specific           WBN Unit 2 NSSS and BOP Controls                 Specification Engineering                       Upgrade Specification                 Rev. 0001 Specification                                                             Page 243 of 440 Appendix D (Page 4 of 7)
J. The incorporation of changes to the plant digital feedwater software into the simulator environment shall not invalidate existing simulator initial conditions.
WBN Simulator Requirements 8.0       Software Modeling and Control Requirements (continued)
WVA recognizes that addition of new components to the plant software may result in those components not being initialized in the proper state for each simulator initial condition.
J. The incorporation of changes to the plant digital feedwater software into the simulator environment shall not invalidate existing simulator initial conditions. WVA recognizes that addition of new components to the plant software may result in those components not being initialized in the proper state for each simulator initial condition. This requirement means that the state of all existing components shall be preserved in order to minimize the initial condition stabilization required after incorporation of plant software changes on the simulator.
This requirement means that the state of all existing components shall be preserved in order to minimize the initial condition stabilization required after incorporation of plant software changes on the simulator.
K. The software for the simulator development computer shall be able to run properly without the panel hardware attached in order to allow software testing and development when the simulator panels are not available. Initial conditions shall be portable between the simulation and development environments.
K. The software for the simulator development computer shall be able to run properly without the panel hardware attached in order to allow software testing and development when the simulator panels are not available.
L. TVA engineers must have the capability to monitor and change internal variables that are important to the operation of the digital feedwater system for debugging and troubleshooting purposes.
Initial conditions shall be portable between the simulation and development environments.
M. If the plant digital feedwater systern, is to be interfaced directly to the plant Integrated Computer System (ICS), the simulator digital feedwater system software must provide the same computer points for transmission to the simulator ICS.
L. TVA engineers must have the capability to monitor and change internal variables that are important to the operation of the digital feedwater system for debugging and troubleshooting purposes.M. If the plant digital feedwater systern, is to be interfaced directly to the plant Integrated Computer System (ICS), the simulator digital feedwater system software must provide the same computer points for transmission to the simulator ICS.9.0 Implementation Requirements These modeling requirements can be implemented in two general ways. They may be fully simulated by the Offerer in the present WBN simulator computer, or they may be simulated using a stand alone computer running the same software as the plant. TVA engineers will assist the Offerer, if necessary, in the modification of existing simulator software to provide inputs that are not currently available or to rescale outputs as needed. Regardless of which option is chosen, the interfacing software which executes in the existing simulation and development computers shall be compatible with the Wafts Bar OpenSim simulation environment and shall be developed under Microsoft Visual Studio version 6.0. All source code and Developer Studio files necessary to build the interfacing task shall be supplied to TVA. Certain include files and libraries necessary to compile and link the interfacing program will be provided by TVA. The Offerer shall not modify these files in any way. The list of variables to be transferred shall be defined by a text file (or group of files) editable with any standard text editor. Modification of the file(s) and restarting the software shall be sufficient to redefine the list of variables to be transferred.
9.0       Implementation Requirements These modeling requirements can be implemented in two general ways. They may be fully simulated by the Offerer in the present WBN simulator computer, or they may be simulated using a stand alone computer running the same software as the plant. TVA engineers will assist the Offerer, if necessary, in the modification of existing simulator software to provide inputs that are not currently available or to rescale outputs as needed. Regardless of which option is chosen, the interfacing software which executes in the existing simulation and development computers shall be compatible with the Wafts Bar OpenSim simulation environment and shall be developed under Microsoft Visual Studio version 6.0. All source code and Developer Studio files necessary to build the interfacing task shall be supplied to TVA. Certain include files and libraries necessary to compile and link the interfacing program will be provided by TVA. The Offerer shall not modify these files in any way. The list of variables to be transferred shall be defined by a text file (or group of files) editable with any standard text editor. Modification of the file(s) and restarting the software shall be sufficient to redefine the list of variables to be transferred.
The general requirements for each simulation option are described below:
The general requirements for each simulation option are described below:
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 244 of 440 Appendix D (Page 5 of 7)WBN Simulator Requirements 9.0 Implementation Requirements (continued)
 
A. Simulation in the present simulator computer.Under this option, all software necessary to run the digital feedwater system would execute in the existing simulator and development computers.
NPG Site-Specific            WBN Unit 2 NSSS and BOP Controls              Specification Engineering                      Upgrade Specification                  Rev. 0001 Specification                                                            Page 244 of 440 Appendix D (Page 5 of 7)
An interfacing task would execute under the OpenSim executive and transfer necessary inputs, outputs and state variables to and from the digital feedwater software which executes outside the OpenSim executive.
WBN Simulator Requirements 9.0      Implementation Requirements (continued)
If this option is chosen, the execution of the digital feedwater software shall not cause the rest of the simulation software to fail to execute on a real time basis.B. Simulation of the new system on a standalone computer.Under this option, the present simulator
A. Simulation in the present simulator computer.
Under this option, all software necessary to run the digital feedwater system would execute in the existing simulator and development computers. An interfacing task would execute under the OpenSim executive and transfer necessary inputs, outputs and state variables to and from the digital feedwater software which executes outside the OpenSim executive. If this option is chosen, the execution of the digital feedwater software shall not cause the rest of the simulation software to fail to execute on a real time basis.
B. Simulation of the new system on a standalone computer.
Under this option, the present simulator software models would supply input information to another computer(s) supplied by the Offerer and the simulator computer would accept output data from this computer. An interfacing task, similar in function and identical in requirements to that described under option (a) would communicate with the standalone computer. This computer would utilize the identical software source code as the plant processors for the functional calculations and algorithms such that fidelity is assured. Simulator-specific control routines external to these routines may be used. All timing relationships must be maintained for independent processes as in the plant processors regardless of series/parallel execution differences. Simulator communication to and from the new standalone computer(s) (eg, TCP/IP with Ethernet connections) must be compatible with existing simulator hardware and software.
Documentation for hardware and software requirements and protocols for interfacing with the existing simulation computer must be provided in detail.
The Offerer shall provide two simulated computer systems with supporting hardware: one to be used on the main simulator trainer and the other for simulation engineering development.
10.0      Documentation Requirements Manufacturer and vendor documentation for supplied hardware including configuration drawings of vendor packaging of equipment shall be supplied. Documentation of the hardware and software system, including content description and procedures for modifying and rebuilding the software system, shall be provided.
The Offerer shall provide, at a minimum, the following hardware documentation in the form of two printed and two electronic copies:
List of all parts required for installation into the simulator panels List of all required cables for connection to the computer room List of any required computer room interfacing equipment
 
INPG Site-Specific          WBN Unit 2 NSSS and BOP Controls                Specification Engineering                        Upgrade Specification                Rev. 0001 Specification                                                            Page 245 of 440 Appendix D (Page 6 of 7)
WBN Simulator Requirements 10.0      Documentation Requirements (continued)
Interconnection diagrams detailing the proper connection of all panel instruments to the computer room equipment The Offerer shall provide, at a minimum, the following software documentation in the form of two printed and two electronic copies:
Description of the interfacing program which runs under the SimPort environment, including the structure of the message buffers used to transfer information to and from the digital feedwater system Description of the format of the text file(s) used to specify the variables transferred to and from the digital feedwater system Procedures for updating the simulator digital feedwater system for changes made in the plant Description of the organization and layout of initial condition and backtrack snapshots 11.0      Schedule All plant simulator hardware, software, and documentation shall be delivered as specified in the Commercial portion of
Specific component model numbers are only preferences and alternative components may be provided for TVA's review and approval.
Specific component model numbers are only preferences and alternative components may be provided for TVA's review and approval.
NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 396 of 440 Appendix F (
 
NPG Site-Specific                  WBN Unit 2 NSSS and BOP Controls  Specification Engineering                      Upgrade Specification        Rev. 0001 Specification                                                    Page 396 of 440 Appendix F (Page 2 of 5)
Handstation Options Indications Deviation Indicator - The Deviation Indicator displays the deviation between the between two parameter associated with the control function. The input type for this indicator shall be 4 to 20 ma.
lnll.a  I p I IBil i i i i i i iI l Setpoint Indicator - The Setpoint Indicator displays the setpoint associated with the controller function (if applicable). The input type for this indicator shall be 4 to 20 ma.
F''..      I                      j Output Indicator - The Output Indicator displays the associated control function's output to the final control device. The input type for this indicator shall be 4 to 20 ma.
Pushbuttons Setpoint Pushbutton - This is a latching pushbutton that must be depressed (contact closure occurs) to enable (toggles control function between enable and disable) the Increase and Decrease pushbuttons in order to manually change the setpoint associated with the control function. The backlit color of the pushbutton shall be "None or Off" for Not Depressed and Red for Depressed indicating that Setpoint change is enabled.
 
NPG Site-Specific        WBN Unit 2 NSSS and BOP Controls              Specification Engineering                    Upgrade Specification                Rev. 0001 Specification                                                        Page 397 of 440 Appendix F (Page 3 of 5)
Handstation Options Ramp Pushbutton - This is a latching pushbutton that must be depressed (contact closure occurs) to enable and place (toggles control system between enable and disable) the Increase and Decrease pushbuttons in the Ramp Mode. When in the Ramp mode, the Increase and Decrease pushbuttons can be used to quickly ramp
August 22, 2011 U.S. Nuclear Regulatory Commission Document Control Desk 11555 Rockville Pike Rockville, MD 20852 Letter No.: ELS-BM-TVA-U2CC-2011-0002 Application for Withholding Proprietary Information from Public Disclosure
August 22, 2011 U.S. Nuclear Regulatory Commission Document Control Desk 11555 Rockville Pike Rockville, MD 20852 Letter No.: ELS-BM-TVA-U2CC-2011-0002 Application for Withholding Proprietary Information from Public Disclosure


==Subject:==
==Subject:==
Material Requisition 25402-01 1-MRA-JD01-00001, Revision 0, NSSS and BOP Controls Upgrade (Proprietary)
Material Requisition 25402-01 1-MRA-JD01-00001, Revision 0, NSSS and BOP Controls Upgrade (Proprietary)
Attention:
Attention: Document Control Desk Bechtel Power Corporation, pursuant to the attached affidavit, hereby requests withholding of the proprietary information marked as such in the above-referenced document. The affidavit, which accompanies this letter, sets forth the basis on which Bechtel Power Corporation may request the subject information to be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of 10 CFR Section 2.390 of the Commission's regulations ("Section 2.390").
Document Control Desk Bechtel Power Corporation, pursuant to the attached affidavit, hereby requests withholding of the proprietary information marked as such in the above-referenced document.
Please also find attached a version of the above-referenced document that we have marked in accordance with the applicable requirements of Section 2.390. The first page of the document has been so marked and each successive page thereafter that contains information that we are seeking to withhold from public disclosure has also been marked accordingly. In addition, we have bracketed such information on each of the foregoing, subject pages.
The affidavit, which accompanies this letter, sets forth the basis on which Bechtel Power Corporation may request the subject information to be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of 10 CFR Section 2.390 of the Commission's regulations  
Correspondence with respect to the proprietary aspects of the application for withholding or the Bechtel affidavit should reference this letter, and should be addressed to Robert Exton, Nuclear Procurement Operations Manger, Bechtel Power Corporation, 5275 Westview Drive Frederick, Maryland, 21703-8306.
("Section 2.390").Please also find attached a version of the above-referenced document that we have marked in accordance with the applicable requirements of Section 2.390. The first page of the document has been so marked and each successive page thereafter that contains information that we are seeking to withhold from public disclosure has also been marked accordingly.
Very truly yours, Robert Exton Nuclear Procurement Operations Manager Enclosures BECHTEL POWER CORPORATION                                     5275 Westview Drive               tel (301) 2.28-6000 Frederick, MD 21703-8306 USA
In addition, we have bracketed such information on each of the foregoing, subject pages.Correspondence with respect to the proprietary aspects of the application for withholding or the Bechtel affidavit should reference this letter, and should be addressed to Robert Exton, Nuclear Procurement Operations Manger, Bechtel Power Corporation, 5275 Westview Drive Frederick, Maryland, 21703-8306.
Very truly yours, Robert Exton Nuclear Procurement Operations Manager Enclosures BECHTEL POWER CORPORATION 5275 Westview Drive Frederick, MD 21703-8306 USA tel (301) 2.28-6000  


==Reference:==
==Reference:==
 
Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002 AFFIDAVIT Before me, the undersigned authority, personally appeared Robert Exton, who, being by me duly sworn according to law, deposes and says that he is authorized to execute this Affidavit on behalf of Bechtel Power Corporation, and that the averments of fact set forth in this Affidavit are true and correct to the best of his knowledge, information, and belief:
Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002 AFFIDAVIT Before me, the undersigned authority, personally appeared Robert Exton, who, being by me duly sworn according to law, deposes and says that he is authorized to execute this Affidavit on behalf of Bechtel Power Corporation, and that the averments of fact set forth in this Affidavit are true and correct to the best of his knowledge, information, and belief: Robert Exton Nuclear Procurement Operations Manager Swo n to and subscribed before me Th~iday of August 2011 Notary Public VICKIE W. CRESAP NOTA RlV PUBLIC FREDEi'RICK COUINTV /MV COIMMISSiON I'pPIRI,:S......  
Robert Exton Nuclear Procurement Operations Manager Swo n to and subscribed before me Th~iday of August 2011 Notary Public VICKIE W. CRESAP NOTA RlV PUBLIC FREDEi'RICK COUINTV           /
.  
MV COIMMISSiON I'pPIRI,:S...... .


==Reference:==
==Reference:==
Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002
Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002
: 1) I am Robert Exton, and as such, with respect to the Watts Bar 2 Nuclear Plant ject, I have been delegated the function of reviewing proprietary information sought to be withheld from public disclosure in connection with procurement materials to be included nuclear power plant licensing and rule making proceedings for this project, and am authorized to apply for its withholding on behalf of Bechtel Power Corporation.
: 1)   I am Robert Exton, and as such, with respect to the Watts Bar 2 Nuclear Plant ject, I have been delegated the function of reviewing proprietary information sought to be withheld from public disclosure in connection with procurement materials to be included nuclear power plant licensing and rule making proceedings for this project, and am authorized to apply for its withholding on behalf of Bechtel Power Corporation.
: 2) I am making this Affidavit in conformance with the provisions of 10 CFR Section 2.390 of the Commission's regulations and in conjunction with the Bechtel Application for Withholding Proprietary Information from Public Disclosure accompanying this Affidavit.
: 2)   I am making this Affidavit in conformance with the provisions of 10 CFR Section 2.390 of the Commission's regulations and in conjunction with the Bechtel Application for Withholding Proprietary Information from Public Disclosure accompanying this Affidavit.
: 3) I have personal knowledge of the criteria and procedures utilized by Bechtel Power Corporation in designating information as a trade secret, privileged or as confidential commercial or financial information.
: 3)   I have personal knowledge of the criteria and procedures utilized by Bechtel Power Corporation in designating information as a trade secret, privileged or as confidential commercial or financial information.
: 4) Pursuant to the provisions of paragraph (b)(4) of Section 2.390 of the Commission's regulations, the following is furnished for consideration by the Commission in determining whether the information sought to be withheld from public disclosure should be withheld.(i) The information sought to be withheld from public disclosure is owned by Bechtel and has been held in confidence by Bechtel Power Corporation, subject to the confidential use thereof by Tennessee Valley Authority.(ii) The information sought to be withheld from public disclosure includes vendor sourcing and pricing information of a type customarily held in confidence by Bechtel Power Corporation and its customers and not normally disclosed to the public.(iii) Its use by a competing company would reduce the ability of Bechtel Power Corporation and its customers to ensure a fair and competitive bidding process for future work.}}
: 4)   Pursuant to the provisions of paragraph (b)(4) of Section 2.390 of the Commission's regulations, the following is furnished for consideration by the Commission in determining whether the information sought to be withheld from public disclosure should be withheld.
(i)     The information sought to be withheld from public disclosure is owned by Bechtel and has been held in confidence by Bechtel Power Corporation, subject to the confidential use thereof by Tennessee Valley Authority.
(ii)   The information sought to be withheld from public disclosure includes vendor sourcing and pricing information of a type customarily held in confidence by Bechtel Power Corporation and its customers and not normally disclosed to the public.
(iii)   Its use by a competing company would reduce the ability of Bechtel Power Corporation and its customers to ensure a fair and competitive bidding process for future work.}}

Latest revision as of 16:41, 10 March 2020

Attachment 14, Document 25402-011-MRA-JD01-00001, Rev, 0, NSSS and BOP Controls Upgrade, and Attachment 15, Application for Withholding Proprietary Information from Public Disclosure
ML11257A052
Person / Time
Site: Watts Bar Tennessee Valley Authority icon.png
Issue date: 10/27/2008
From:
Bechtel Power Corp
To:
Office of Nuclear Reactor Regulation
References
ELS-BM-TVA-U2CC-2011-0002 25402-011-MRA-JD01-00001, Rev 0
Download: ML11257A052 (467)


Text

Attachment 14 Bechtel Power Corporation Document 25402-011 -MRA-JDOI -00001, "NSSS and BOP Controls Upgrade," Revision 0 (Non-Proprietary)

WBN UNIT 2 Construction Completion Project PURCHASE ORDER NO.

69247 JOB NUMBER 25402-011 MATERIAL REQUISITION REQUISITION NO.

25402-01 1-MRA-JDOI-00001 (Long Form)

REVISION 000 Material: NSSS and SOP Controls Upgrade EDCR 62378, 62671 Quality Related Cost Code: 000CXARMUL1TBI0 Required Delivery Date: Per original order (if necessary) (if necessary)

SUPPLIER QUALITY SURVEILLANCE REQUIREMENTS Audit of Supplier Required (to be coordinated with Supplier Quality Department) (Nuclear only - leave blank for Fossil or check "No")

0 None 3. Full Scope [] Yes x I Final Only 4 Resident 2 Limited Scope 71X INo OechWl Confldenfah 0 Bechtel Power Corporatlon 2005. Contalns confidential andfor proprietary Information to Bechtel end Its offiliated companies which shal hot be used. disclosed, or reproduced In any format by any non-Bechtel party without Bechters pitor w~itten permlsslon. All rights reserved.

ThI, document Is prepared hcluaboLveIy for "VA Inconneoton wllh WattS Bar Unit 2 Construetion Completion Projuot and is not to be relied upon by othear or used Inconneotlon with any other project 000 Issued for quote for Contract fu

- - - Supplement H**6/ #0 Rev. Date Reason for Revision By Check EGS PSQS PQAM PEMIEM Page I

-r Requisition Number: 25402-011-MRA-JDOI-00001 Revision: 000 TABLE OF CONTENTS Section 1.0 General Requirements Section 2.0 Specific Requirements Section 3.0 Quality Requirements Section 4.0 Inspection and Testing Section 5.0 Special Requirements APPENDICES Appendix A- Supplier Deviation Disposition Request ATTACHMENTS - Request for Approval, Noncompeted Contracts or Supplements - Section QR-1.6-3 of PNQAM Project Nuclear Quality Assurance Manual, Rev. 2 - Quality Surveillance Plan - TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification", Revision 1

  • Beentel Pomwr Corporation 2008. Contains ronfldentlal andlor proprietary informalon to Bechtel and its affiliated companies which shall not be used, discosed. or reproduced in any format by any non-Beitel party without Bechtel's pror written permission. All rights reserved.

This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by odhers or used in connection with any other projed,

Requisition Number: 25402-011-MRA-JD01 -00001 Revision. 000 Section 1.0 General Requirements Number Quantity Description Unit Extension Price 1.01 1 lot Controls and Monitoring equipment for the Auxiliary Control Room as defined by attached WBN Unit 2 NSSS and BOP Controls Upgrade Specification, Revision 1, Section 15 (CAT ID CND285Y)

Section 2.0 Specific Requirements 2.1 System Requirements This material requisition adds additional equipment to an existing order placed with Invensys Process Systems (Foxboro). Refer to the attached specification for technical requirements.

2.2 Additional Requirements ( t n t4 t Supplier shall provide all documents as specified in the specification, section 2.8.3.

2.3 Seismic Requirements Refer to specification section 2.8.3.1 for seismic requirements.

Section 3.0 Quality Requirements 3.1 Supplier QA 3.1.1 Items are Quality Related. Supplier shall comply with requirements per Attachment 2, section QR-1 .6-3, Quality Assurance Program for Seismic Il/I Items of PNQAM, Project Nuclear Quality Assurance Manual.

3.1.2 If not on the ASL or ESL, supplier shall submit evidence (e.g., QA Plan) that defines how Sec. 3.1.1 will be implemented.

3.1.3 Supplier is required to generate a Supplier Deviation Disposition Request (SDDR) for any deviation to procurement document requirements. The completed SDDR shall be forwarded to the Contractor for review and processing. The supplier is also required to describe in the SODR the recommended disposition based on appropriate analysis.

3.1.4 Supplier shall supply a Certificate of Conformance stating that all requirements given in the procurement documents have been met.

Section 4.0 Inspection and Testing 4.1 Receiving Inspection C Bechtel Power Corporation 20%8 Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechters pnor written permission. All rights reserved This document is prepared exclusively for TVA in connection wth Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.

Requisition Number: 25402-011-MRA-JDOI-00001 Revision: 000 4.1.1 Items procured shall be examined, upon receipt at the plant site, for identification, quantity, damage, and presence of appropriate documentation. Items meeting any of the following conditions shall be treated as nonconforming:

a. Items having physical defects.
b. Errors in quality verification documentation, which indicate that the material does not conform to the technical or quality requirements of the procurement documents.
c. Documentation required to be at the plant site missing at the time of receipt of the item.

4.2 Testing Requirements 4.2.1 System shall undergo testing in accordance with the specification, section 3. 11.

4.2.2 Test procedures and results shall be submitted for all tests per specification section 2.8.3.

Section 5.0 Special Requirements 5.1 Delivery and Storage 5.1.1 Materials shall at all times be kept clean and protected from the weather or other contaminants and shall be free from excessive scale and rust.

5.1.2 Supplier shall prepare all material and articles for shipment in such a manner as to facilitate handling and to protect them from damage in transit, and shall be responsible for and make good any and all damage due to improper preparation or loading for shipment.

5.1.3 All loose min scale, rust, oil, grease, chalk, crayon, paint marks and other deleterious material shall be removed from the surfaces. At the time of shipment the system shall be clean.

5.1.4 Supplier shall mark each piece, bundle or container in each shipment with the Bechtel contract number and other items of identification and shall furnish copies of shipping bills or memoranda for each shipment giving the contract number, description, number of pieces, total weight and, if shipped by railroad freight, the car initials and number.

5.1.5 Supplier shall be responsible for the preparation of all equipment to facilitate handling and to protect it from damage in transit and storage.

5.1.6 All finished surfaces shall be protected to preclude damage due to moisture or foreign material. All tapped openings shall be plugged or otherwise adequately protected. Flanged openings shall be protected using solid materials such as wood or metal bolted in place.

C Bechtel Power Corporation 2008. Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used, disclosed. or reproduced in any format by any non-Bechtel party without Bechtel's prior wrtten permission. Al rights reserved This document is prepared exclusively tor TVA in connection with Wats Bar Unit 2 construcilon Completion Project and is not to be relied upon by others or used in connecton with any other project.

Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Appendix A Supplier Deviation Disposition Request C Bechtel Power CorporAon 2008. Contains confidential and/or proprietary information to Bechtel and risafSiated companies which shall not be used, disclosed, or reproduced in any frmatoby any non-Bechtel partyvAtuout Becnters pnorwntten permission. Allrights reserved.

This document is prepared excusively for IVA in connection with Wadis Bar Unit 2 Cnenttction Completion Project and is not to be retied upon by others or used in connection with any other project.

EXHIBIT A SUPPLIER DEVIATION DISPOSITION REQUEST NOTES:

1. COMPLETE INSTRUCTIONS ON BACK OF THIS SHEET 8. Attuh additional Infomatsion whenever n4eeaga
2. 1iami 1-13 below to be completed by supplier 6. Bech-l must be notfimd within l days after detection of deviaton
3.
  • hnems, echtel emneoe only 7. A copy of the completed SOOD form s hall be included by the SupplieW in the
4. Nonapplicabte Items to be marked 'WA" Quality verification data package for each item to which this SODN applies.

FOR SUPPUER USE PROJEcTFOR BECHTEL USE SUPPLIEAmaiDnRO. DATE sUSM-rrTED JOSBE CHELS NO. OATE RMECEneD

1. Supplier Narme AdaI city £ sate Zip
2. Supplada Order No. 3. supp*a*' Pat No. 4 Suppiers Pat* Name a. Deviaes Detected 6. AH un s&0D1e iNumboro &Dolin) 0e112
7. Be~ch P.O. £ Rue. NMo 8. Beclhtl Pan No. a. Bchel Pant Name 10. BechtelsONotImod 11. Behtl Brig, Notilad D IrdAxamd Dub Ie~~
12. Deviation De1licliplion (Anwr.h ýZ Ih*M.s iphtotoghlk oskefth. ftS.anecessay and Wdonly lpntnity, andl mdal numberp as alp tilale) 113.Suyipawu Proposed Okpepealon. UwAa'e Repair fj Modifyr So~te Raapshwmetn 14Vest upact 15. Schedue Ikepct 6.IPropoaed Diapoeo end Tactnkal (pls Coseiflhedaue if applicbin) Juetiscalm:

Allach extra sheets, satkihn ae., a- neceassay.

117.Associsald Stpplier Dwuvuent Changele) 11$.6upleli' Auftiteed Representa*$, --

Nara 'I sinture Title *

  • I,.- Oftc.

-20. Dapoueon l Stalefni Includng Juel#ca.lo lAmh e as sals, a , aas peaury),

alea t heatc.

Ooaabuciacos Actina Requited YE I 'NO~

'21. RacJal)VipoatoApprevttgiabnev Dat. 22L Suppflau Date REG:

'2& Becbtal Supplier Quality Repurmnuuteve Date PERtEW I INSTRUCTIONS FOR COMPLETING SDDR FORM This form is to be used by a supplier to:

Electronic documents, once printed, are uncontrolled and may become outdated.

Refer to the electronic documents in TVA Business Support Ubrary (BSL) for curent revision.

Bechtel Confidentlal S Bechtel CorporaUon 2000. 2001, 2004, 2006. All rights reserved.

25402-30P-GQOG-00012-000 PAGE 1 of2

a) Notify Bechtel when manufactured product or service does root meet established contract requirements and to document the supplier's proposed disposition, with their technical (and where appropriate, Cost/Schedule) justification.

b) Notify Bechtel when the supplier wants to propose changes to the contract documents unanticipated at time of award.

c) Record Bechtel's disposition of the SDDR.

A deviation is any departure from the requirements of the procuring documents, which the supplier has Incorporated or proposes to incorporate in the completed item or service provided, Deviation disposition can be classified as Use-As-la, Repair or Modify requirement.

Repair is defined as the process of restoring a nonconforming characteristic to a condition such that the capability of an item to function reliably and safely is unimpaired, even though the item may not conform to the original requirement. Repair includes alteratloos to the properties of the material through heat-treating, welding, metal disposition, chemical processing, etc. The SDDR form is not to be used for cases where Bechtel has previously provided authorization to proceed using an accepted repair procedure covering a specific type of repair, however, records must be maintained for each specific repair.

Bechtel's engineering action and disposition statement does not relieve the Supplier from responsibility for the accuracy, adequacy, or suitability of the item or service being provided as defined in the procuring documents, nor does it constitute waiver of the right to renegotiate the terms of the procuring documents.

Block No. Entry Information 1 Supplier's name and address - city and state and zip. List same information for lower-tier Suppliers ifapplicable.

2. Suppliers order number If one has been assigned.
3. Suppliers Part No.(s) as applicable from Ite drawing, catalog, Internal specification, etc.
4. Suppliers Part Name.
5. Date deviation detected and method used to dated deviation (NDE, dimensional check, visual, etc.)-
6. List all previous SDDRs (and their dates) that have been submitted for similar deviations requested on this Purchase Order or Subcontract.
7. Bechtel Purchase Order Number and Revision Number.
8. Bechtel Material Requisition (item, part, tag or code) numbers),
9. Bechtel Part Name, if one has been assigned.
10. Date and method (TWX, letter, etc,) used Io notify the Bechtel Supplier Quality Representative (SQR) whenever Bechtel Quality Surveillance is applicable.
11. Date and method (TWX, letter, etc.) used to notify Bechtel Engineering.
12. Describe the deviating characteristics and define the extent of the out-of-specification condition for each identified piece affected. Include quantities and Serial, lot, batch, heat or other numbers as appropriate, Identify the location of the deviating characteristic by print coordinates or specific location, as applicable. Attach reproducible-ulity extra sheets. sketches, photographs, etc., as necessary.

When propoeing a change in either supplier or B*echl documenl&; desc-libl the cting.: id:-thiy d6,uJraemants cmrplftely in*clu-dg title or subject, date and revision; and where appropriate, attach a copy of areas in question.

13. State proposed disposition.
14. Enter cost impact that would result from proposed changes and which will be reflected in appropriate Procurement Documents.
15. Enter delivery schedule Impact that would result from proposed changes.
16. Describe the proposed disposition and provide technical (and where appropriate Cost/Schedule) justificatioin for Bechtel's evaluation. Attach reproducible-quality copies whenever required. If the deviation is correctable by repair, submit a detail repair procedure or reference the procedure previously submitted and assigned Level I by Bechtel for use in similar situations. Provide Bechtel control number, supplier control number and procedure tie. For documents, provide suggested corrective wording, procedure, documents, etc. Provide a copy of each SDDR attachment to the Bechtel SOR at the supplier's location, if applicable.
17. Identify the nature of the changes that may be needed on associated supplier documents (drawings, apace., procedures, installation Instruction, etc.).
18. Enter the name (typed or printed), and title of the supplier representative authorizing the disposition request and appropriate signature and date signed.

"19- Check all applicable boxes to define the action required by Bechtel Project Engineering. Note: Price adjustment requires Procurement Document (Purchase Order or Subcontract) Change.

"20. Provide appropriate detailed Justification for the Bechtel action(s) indicated in block 19. When changes to drawings, specifications, requilitions, or other Bechtel documents are involved, each document should be identified and the associated change briefly described. If other suppliers are aftfcted, indicate who they are and the document that initiated resolution of that involvement, 'Other' follow-up action (e.g., the need for additional Bechtel calculations, additional drawings or sketches, inspection by a Project Engineering representative, etc.)

should also be identified here. IfConstruction action is required, so indicate.

21 . RE - Signature of the Responsible Engineer and the date signed.

CheckerNerifier- Signature of the checker (Ifrequired) and the date signed, EGS - Signature of the responsible Engineering Discipline Group Supervisor accepting the Engineering action and the date signed.

PE - Signature of the Bechtel Project Engineer (or designee) and the date signed.

- Other position and signature(s) if required by project and date signed.

22. Signature of the supplier's inspector or other representative authorzed to verify that the accepted disposition was correctly accomplished and the date signed.

"23. Signature of the Bechtel SQR (when an SQR Is assigned to the order) and date. This signature Indicates that the accepted disposition was correctly implemented and verified (on a random sample basis if the SDDR applies to several parts).

Electronic documents, once printed, are uncontrolled and may become outdated.

Refer to the electronic documents in TVA Business Support Library (BSL) for current revision.

Bechtel Confidential C Bechtel Corporation 2000, 2001, 2004, 2008. All rights reserved.

25402-3DP-GOBG4=1 2-000 PAGE 2 of2

Requisition Number: 25402-011 -MRA-JD01 -00001 Revision: 000 Attachment 1 Request for Approval, Noncompeted Contracts or Supplements

  • Bechtel Power Corporation 2008. Contains confidentis andior proprietary infonmation to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.

This document is prepared exclusively folr TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to te relied upon by others or used in connection with any other project.

Request For Approval Noncompeted Contracts or Supplements (Not required ifcumulative amount, including any supplement, is less than $25K)

[ Sole Source Procurement Date: September 19, 2008

[ Contract Supplement (*) Amount:

5 Emergency Procurement Contract No.:

Supplier Foxboro/Invensys Requesting Org.: Design Engineering Description of Purchase:

This procurement will provide non-safety related controls and monitoring instrumentation equipment for Nuclear Steam Supply Systems and Balance of Plant Systems on Watts Bar Nuclear Plant Unit 2.

The controls and monitoring instrumentation equipment shall consist of electronic distributed digital equipment to be configured as defined by the Specification. The System will power instrumentation sensors, monitor process variables, provide switching outputs, provide analog control outputs, and provide process variable status for use by the operators as defined in the Specification.

Justificaton for Not Comretina Recuirement This procurement is required to purchase non-safety related controls and monitoring instrumentation equipment for WBN Unit 2 as described above. Components from the original Unit 2 controls and monitoring instrumentation systems have been used as replacement components to support Unit I operation or have been in lay-up for approximately 30 years, and therefore, Unit 2 does not have complete and functional hardware for the subject controls and monitoring instrumentation.

Non-competed procurement is required for consistency and operability of equipment across the TVA Nuclear Fleet. Foxboro IA Systems have been selected as the non-safety related equipment of choice for Brown's Ferry Units 1, 2, and 3 (already installed), NSSS Controls for Sequoyah I and 2, and Watts Bar Unit 1 (contract awarded and procurement and installation approved as either future projects or projects underway.) Operating experience with this equipment at BFN has been excellent.

This procurement will provide Foxboro IA for controls and monitoring instrumentation for WBN Unit 2.

The purchased control systems will be functionally and physically equivalent to the systems being used at BFN and being planned for SQN1, SQN2, and WBNI.

Foxboro IA has a proven record of service in controls and monitoring instrumentation applications.

The Foxboro IA equipment was selected among multiple bidders fot SQN1, SQN2, WBN1, and BFN based on competitive bidding. Use of Foxboro IA for WBN2 will have the added benefits of providing maximum Fleet flexibility in sharing trained Engineering, Operations, and Maintenance resources and material. Material sharing will have an added benefit of inventory reduction Fleet wide. In addition, in March 2007, WBN2 Design Scoping and Estimating Project requested estimates from Both Westinghouse and Foxboro/Invensys for NSSS/BOP digital control systems. Invensys was selected based on price and technical considerations.

The estimated pricing of this procurement is consistent with pricing of similar control systems for other TVA Nuclear applications.

© Bechtel Power Corporation 2008, Contains confidential and/or proprietary information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.

This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project,

Request For Approval Noncompeted Contracts or Supplements (Not required ifcumulative amount, including any supplement, is less than $25K)

  • Additional Information Needed for Contract Supplement:

Original Contract Award Date: 3131/08 Current Contract Amount: 1 Revised Contract Amount:

Current Expiration Date: n/a Revised Expiration Date: n/a Was original contract competed? Yes E No 21 Business Unit Approval* Procurement Associate/Contract Manager

($25K to $100K)

Department Manager, Procurement SVP, Procurement

($25K to $IOOK) (If Greater than $1100K)

Business Unit Executive Committee Member (If Greater than $10OK)

  • Department Manager or higher depending upon BU policy.

0 Bechtel Power Corporation 2008, Contains confidential and/or proprietary Information to Bechtel and its affiliated companies which shall not be used. disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.

This document is prepared exclusively for TVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project,

Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Attachment 2 Section QR- 1.6-3 of PNQAM Project Nuclear Quality Assurance Manual Rev. 2 a Bechtel Power Corpration 2008, Contains confidential and/or proprietary Inrfonaelon to Bechtel and its affiliated companies wich shall rot be used, disclosed, or reproduced inany format by any non-Bechtel party without Bechtel's prior written permission. All rights reserved.

This document is prepared exclusively for WA inconnection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection wilh any other project.

Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3 Quality Assurance Program for Seismic Il/I Items 1.0 PURPOSE This policy provides guidelines for applying the Project Quality Assurance Program to the Seismic Il/I items in a nuclear power plant.

NOTE: Refer to Attachment B for Watts Bar Seismic requirements.

2.0 SCOPE Seismic II! items are those portions of structures, systems, and components whose continued function is not required but whose failure caused by a safe shutdown earthquake (SSE) could reduce the functioning of a Seismic Category Istructure, system, or component to an unacceptable safety level or could result in an incapacitating injury to occupants of the control room.

This policy applies to project QA program formulated to satisfy NRC Regulatory Guide 1.29, "Seismic Design Classification" Regulatory Positon C.4 for items identified in C.2.

3.0 GENERAL The Seismic Il/I QA Program utilize portions of the Project Nuclear QA Program to the extent necessary to satisfy the NRC Regulatory Guide requirements identified above.

4,Q REQUIREMENTG 4.1 The projects Seismic 11/I QA Program shall be under the management control of the POAM.

4.2 The project team, under the direction of the Project Manager, is responsible for the implementation of the Seismic 111 QA Program.

4.3 Structures, systems, and components to which the Seismic I1/I QA Program applies shall be identified by Bechtel Engineering, TVA or the TVA's agent(s), depending upon project requirements.

4.4 Construction is responsible for obtaining an engineering review and evaluation of field-routed items that have the potential for creating a Seismic Il/I condition.

4.5 Inaddition to the requirements Identified inAttachment A, specific TVA requirements shall also apply to the Seismic II/I Items QA Program.

5.0 PROGRAM APPLICABILITY Attachment A identifies the scope (policy number and degree of applicability) of the PNQAM applicable to the Seismic 111 QA Program to address the pertinent QA requirements of Appendix B to 10 CFR Part 50.

6.0 A'TACHMENT Attachment A Quality Assurance Program for Seismic I/I1 Items Bechtel OR-1.6-3 Rev. 0 Page I of 1

Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL QR-1.6-3 Quality Assurance Program for Seismic Il/I Items Attachmt A REQUIREMENTS PNQAM POLICY Regulatory Guide 1.29, "Seismic Design Classification," NSR-1.6-3 C.4. 'The pertinent quality assurance requirements of The Quality Assurance Program shall be under the management of Quality Appendix B to 10 CFR Part 50 should be applied to all activities affecting the safety-related functions of those portions of structures, systems, and components covered under Regulatory Positions 2 and 3.

Design Control and Procurement Document Control WBN-3.1 WBN-3.3 WBN-3.5 WBN-6.2 WBN-3.2 WBN-3.4 WBN-4.1 These policies are applicable to the extent necessary to accomplish the following:

1. Identification of items covered by the Seismic li1t Quality Assurance Program.
2. Identification of potential Seismic II/I items for engineering review and evaluation.
3. Incorporation of design bases and regulatory requirements in design documents.
4. Control of design document changes equivalent to those applied to original documents.
5. Incorporating or referencing applicable technical and quality assurance requirements in procurement documents.
6. Controlled release and distribution of design and procurement documents to ensure that activities are performed to current and authorized documents.

Bechtel QR-1.6-3 Attachment A Rev. 0 Page I of 4

Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Instructions, Procedures, and Drawings WBN-5.1 This policy is applicable to the extent necessary to accomplish the following:

1. Instructions and procedures pertaining to this program shall be identified.
2. New instructions and procedures may be prepared for QA activities unique to this program, as necessary.

Control of Purchased Material, Equipment and Services WBN-7.1 WBN-7.4 WBN-7.2 WBN-7.5 WBN-7.3 WBN-7.6 These policies are applicable to the extent necessary to accomplish the following requirements for pro-identified Seismic III items:

1. iiReceipt inspection.
2. .Surveillance of work performed by field subcontractor/contractors.

Control of Special Processes WBN-9.1 This policy is applicable to the extent necessary to accomplish the following:

Inspection of welding and NDE Bechtel QR-1.6-3 Attachment A Rev. 0 Page 2 of 4

Watts Bar Unit 2 Constmrction Completion Project PROJECT NUCLEAR QUALITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Inspection WBN-1O.1 This policy is applicable to the extent necessary to accomplish the following:

1, The site inspection program shall assure conformance to engineering requirements that are important to structural integrity.

2. Inspections shall be performed by personnel independent from the individuals performing the activity.
3. Inspection records shall provide evidence of inspections performed.

Nonconforming Items Control and Corrective Action WBN-7.4 WBN-15.1 WBN-16.1 These policies are applicable to the extent necessary to accomplish the following:

1. dNonconforming items are to be controfled by segregation, tagging, or other
suitable means to prevent inadvertent use.
2. INonconformances are to be documented and dispositioned by authorized personnel.
3. Actions taken to correct the nonconformance are to be documented.

Quality Assurance Records WBN-1 7.1 WBN-17.2 WBN-17.3 These policies are applicable to the extent necessary to accomplish the following The quality assurance records associated with the Seismic 11/1 QA Program shall be identified and retained.

Bechtel QR-1.6-3 Attachment A Rev. 0 Page 3 of 4

Watts Bar Unit 2 Construction Completion Project PROJECT NUCLEAR QUAJLITY ASSURANCE MANUAL Attachment A REQUIREMENTS PNQAM POLICY Audits WBN-18.1 This policy is applicable to the extent necessary to accomplish the following:

1. Audits performed by Quality Services shall include activities pertaining to the Seismic II/I Program.
2. Audit results shall be documented and reported to cognizant levels of

'management NOTE: Supplier audits are not required as part of the audit program.

Bechtel QR-1.6-3 Attachment A Rev. 0 Page 4 of 4

Requisition Number: 25402-011-MRA-JD01-00001 Revision: 000 Attachment 3 Quality Surveillance Plan 0 Bechtel Power Corporation 2008. Contains convIldential andfor propretary information to Bechtel and its affiliated companies which shaD not be used, disclosed, or reproduced in any format by any non-Bechtel party without Bechtel's pnor written permission. All rights reserved.

This document is prepared eXClUSively for TVA in connection with Watts Bar Unit 2 Constmruton Completion Project and is not to be relied upon by others or used in connection withlany other proiect.

I

Watts Bar Unit 2 Construction Compleoion Project QUALITY SURVEILLANCE PLAN COMMODITY- SURVEILLANCE PLAN PAGE PROJECT Non Sfety-Quetlty Related Watts Bar Unft 2 CC Project I &C Equipment I.P. EDCR 62378152671 1 of 2 NO, ACTIVITY H W IP FREQUENCYINOTES

1. INITIAL VISIT- AN IN)TIAL VISIT IS NOT REQUIRED Address PO-applicable attributes required by S-221 IV Initial Visit form Section VI and stress the following:
  • P.O. requirements, data steets and specilicatlona.
  • Document submittal requirements, engineering review requirements, and engineering review levels.
  • Review and establish hold points.

" Verify fabricatlon and shipping schedule(s).

2. FUNCTIONAL TESTING X rhe supplier Isto provide Bechtel Project Engineering no-lees-than 10 days System BumIn performance Iendurance tdftii indre wntral adwlvned notia regardlin the Burn-in and system. Note: Ouration Is two weeks uninterrupted without fauits, Phase 2 FAT performance tesi schedules.

Open and closed loop FAT- entire control system as prescribed by Bechtel ProJect Engineering shall be for Phase 2 testing within the MPG Slta-Specific Engineering responsible to further manage this HOLD Spaclflctiork 'WBN Unit 2 NSSS and SOP Conirols Upgrade point. Bechtel Project Engineering end TVA Specificatlort' Revision 1. representation Is required by PO unlaess waived by the TVA Lead Electrical Engineer.

REV IDATE DESCRIPTION PREPARED BY ENGR. Approved 0 Initial lastsu R.Webbe, PURCHASE COMMODITY ASSIGNMENT K.S. Leve UP-GRADE NSSS and BOP CONTROLS 21402-0l1-YZA-9247-10001 WBNP UNIT 2

Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN COMMODITY- SURVEILLANCE PLAN PAGE PROJECT Non Safety.QualIly IRelsad Watts Bar Unit 2 CC Project I& C Equipment I.P. EDCR 52378 / 52671 2 OF 2 NO, ACTIVITY H W IP FREQUENCY I NOTES

3. FINAL INSPECTION I RELEASE FOR SHIPMENT x (Peoned by SOR)

Verify with Projeol that required submittals have been received and ac~epted. All documents to be In accordance with SVeadly completion of englneering-dlreeted punch-tsl Items that contract (DSR) submittal requirements.

may have resulted from pearormmnoe i funotworal acceptance testing.

Burnin and Final Factory Acceptance Test Reports submitted and accepted (must document the resolution of any test No release far shipment will be granted until deflcienclas or open items from a punch-list (See above), all test results have been submitted and Review quality verlitcation dowmmentaffon as required by PO approved.

or PO-referenced requirements.

Conirm overall dimensions and the conltpuution of cabinets, panels., and nests.

  • Vedfy that all dir, metal chips, wire cllpplngs...have been removed form wire ways, instruments, electrical devices, Aft Assemblies, Cabling ard Equipment.

panels, cabinets, and nsts.

  • Perform visual examinations for workmanhlip. masking.

tagging, and traceability to qualty verificalion documents

  • Examinations should ensure against visible damage, contamination, ordeterioration. Veriy pre-shlpment requirements for cleaing, sealing, preservation, and packaging are met, SOR to prepare and Issue a Release Authorization Form (PS-231)

Transmit completed PS0-231 to tte responsible PSQR vis e-mail on the day of release.

Provide copy of PS-231 to Supplier for Inclusion with shipment(s).

REV DATE DESCRIPTION PREPARED BY EiNGR. Approved uSaInitial Issue a2P I

/PURCHASE COMMODITY NMENd %5.

UP-GRADE OF N$S$ and BOP CONTROLS 26402-011-YZA49247-10001 WBNP UNIT 2 2

Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN SUPPLIER SOURCE SURVEILLANCE Quality Surveillance Quality Surveillance is defined as the selective review, observation and evaluation of seller's activities to determine seller compliance with contractual quality requirements, Witness Points Witness polnts are defined as critical steps inmanufacturing and testing, whereby SELLER shall advise the-BUYER'S Supplier Quality Representative (hereafter referred to as the SQR) ten (10) working days in advance of the operation so that it may be witnessed by the SR. The SELLER may proceed with work past the witness point only ifthe SR cannot attend. Inthe event a witness point Isdeferred by the SCR, the next same operation will be witnessed, Hold Points Hold points are defined as critical steps inmanufacturing and tesUng whereby SELLER Isobligated to advise the S8R ten (10) working days inadvance of the operation so that itcan be witnessed by the SR.

The SELLER cannot proceed with work past the hold point without witness by the SQR. except by prior Written agreement from the Project Engineer with the concurrence of the Project Quality Assurance Engineer.

Initial Visit Prior to the start of manufacturing, the assigned Supplier Quality Representative may conduct an initial visit to review with responsible SELLER management the quality requirements of the AGREEMENT, I. PRODUCTS on this order shall be subject to surveillance by SQR, or by OWNER, who shall be granted free access to any and all parts of SELLER'S plant(s) or SELLER'S suppliers plant(s) engaged Inthe manufacture or process of the PRODUCTS.

2. The 8QR shall be allowed access to SELLER'8 supplier quality process control and quality verification records Inorder to review process and quality verification documents. Review of these documents will Include verification of compliance with the specifications and applicable codes or standard requirements.
3. It isessential that SELLER understand that ItIsSELLER'S responsibility to properly manufacture and to thoroughly Inspect the PRODUCTS prior to presentation to BUYER for surveillance. All PRODUCTS are subject to release by the SCR. Release may be established as a witnbss or hold point dependent on the critical nature or production schedule of the item(s). SELLER may be required to furnish the manufacturer's written certification that PRODUCTS furnished conform to the requirements of this AGREEMENT.
4. The contact for Quality Surveillance is as follows:

Tennessee Valley Authority Watts Bar Unit 2 CCP Spring City, Tn. USA Project Supplier Quality Supervisor David J. Carraghan" 423-366-7902 dlcarraahenftvapov

Watts Bar Unit 2 Construction Completion Project QUALITY SURVEILLANCE PLAN

5. it is understood that the PURCHASE ORDER prices include these surveillance requirements. No request for extra cost on account of surveillance requirements will be entertained.
6. Source Surveillance Plan descriptions:

H Hold Point W = Witness Point IP In Process SPECIFIC QUALITY SURVEILLANCE The PRODUCTS covered by the PURCHASE ORDER will be subject to the level or Quality Surveillance activity as defined Inthe attached Surveillance Plan, or other technical requirements.

Witness and Hold Points are as defined in the Surveillance Plan and/or Technical Speclfical:Ions...

Requisition Number: 25402-011 -MRA-JD01 -00001 Revision: 000 Attachment 4 TVA specification, "WBN Unit 2 NSSS and BOP Controls Upgrade Specification",

Revision I a Bechtel Power Corporation 2008. Contains coanlidential anrd/or proprietary information to Bechtel and its affiliated companies which shan not be used, disclosed, or reproduced in any format by any non-Bechtel party vAthout Bechtel's prior written permission. All rights reserved.

This document is prepared exclusively for WVA in connection with Watts Bar Unit 2 Construction Completion Project and is not to be relied upon by others or used in connection with any other project.

q U TITLE Specification WBN Unit 2 NSSS and BOP Controls Rev. 0001 Upgrade Specification Page 1 of440 NPG Site-Specific Engineering Specification Effective Date s o/7-/ y L __________________________________________________

Prepared by: Henry Webber ((

Reviewed by: '

Dan Faulkner Date Approved by: 4Ck.:: a,1dB, Steve Hilmes .. ate i

NPG Site-Specific W1N Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 2 of 440 Revision Log Revision or Affected Change Effective Page Number Date Numbers Description of RevisionlChange 0 Initial issue 1 Various Revised per Foxboro comments and to incorporate Auxilliary Control Room scope. All changes have revision bars on the right side.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 3 of 440 Table of Contents

1.0 INTRODUCTION

.................................................................................................................... 10 1 .1 O ve rv ie w ....... ........................................................................................................................ 10 1.2 Equipment, Material, And Services To Be Supplied By The Offerer ................................... 11 1.3 Equipment, Material, and Services To Be Supplied By Others ........................................... 13 1.4 Project Review Meetings ................................................................................................... 14 1.5 Target Project Schedule .............................................. 14 2.0 INSTRUCTIONS FOR PROPOSAL .................................................................................. 14 2.1 Bases for Technical Evaluation .......................................................................................... 15 2.2 WBN Simulator Upgrade ................................................................................................... 15 2.3 Multi-Unit Proposal .................................................. 16 2.4 Architectural Engineering (AE) Services ............................................................................ 16 2.5 Hardware Requirements ................................................................................................... 16 2.6 Software Requirements ..................................................................................................... 19

_.7 _Digita Interface Requirem ents .. __....., ....... . .......................... 2.......

3 2.8 Deliverables ........................................................................................................................... 23 2 .9 S c h e d u le ................................................................................................................................ 36 3.0 GENERAL CONTROL SYSTEM REQUIREMENTS ........................................................... 38 3.1 Overview ................................................................................................................................ 38 3.2 Hardware Requirements ................................................................................................... 39 3.3 Environmental Requirements ............................................................................................. 61 3.4 M an Machine Interfaces ................................................................................................... 63 3.5 Software Q uality ..................................................................................................................... 70 3.6 Interface Requirem ents ........................................................................................................ 73 3.7 Maintenance .......................................................................................................................... 74 3.8 Equipment Cabinets ............................................................................................................... 75 3.9 Accuracies .............................................................................................................................. 76 3.10 Response Tim e Requirements .......................................................................................... 76 3.11 System Acceptance Test Requirem ents ............................................................................ 77 3.12 Long Term Support ................................................................................................................. 80 3.13 Spare Parts ............................................................................................................................ 81 3.14 Miscellaneous System Requirements ............................................................................... 81 3.15 References ............................................................................................................................. 81

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 4 of 440 Table of Contents (continued) 4.0 STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS ........................... 82 4.1 System Description ................................................................................................................. 82 4.2 SGL Control System ...................................... . ............................................... 83 4.3 Applicable Criteria & Standards ........................................................................................ 87 4.4 WBN System Description, System Diagrams .................................................................... 87 4.5 Indicators, Status Lights. and Controls .............................................................................. 87 4.6 Alarms and Annunciators ................................................................................................... 87 4.7 Performance Lim its ................................................................................................................ 88 4.8 Specific Requirem ents ...................................................................................................... 88 4.9 Accuracy ................................................................................................................................. 89 4 .10 R a n g e .......................................................................................................... .......................... g0 4 .1 1 Inpu ts ..................................................................................................................................... 90 4.12 Outputs................................................................................................................................. 91 4.13 Proposed Signal Validation Designs ................................................................................. 91 4.14 Time Response ................................................................................................................. 95 4.15 Controller Reset W indup and Recovery Characteristics .................................................... 96 4.16 Noise Levels .......................................................................................................................... 96 4.17 Programmed Functions ..................................................................................................... 96 4.18 Setpoints ................................................................................................................................ 97 4.19 Requirements for Test and Calibration .............................................................................. 97 4.20 Requirements for Associated Equipment .......................................................................... 98 5.0 ROD CO NTROL ..................................................................................................................... 98 5.1 System Description ................................................................................................................. 98 5.2 Rod Control System................................................................................................................ 98 5.3 Applicable Criteria & Standards ............................................................................................ 103 5.4 WBN System Description, System Diagrams ........................................................................ 103 5.5 Indicators, Status Lights. and Controls ................................................................................. 105 5.6 Alarms and Annunciators ..................................................................................................... 105 5.7 Perform ance Lim its ............................................................................................................... 105 5.8 Specific Requirem ents ......................................................................................................... 106 5 .9 Ac cu ra cy .............................................................................................................................. 10 6 5 .10 R a n g e ................................................................................................................................... 10 7 5 .1 1 Inp u ts ................................................................................................................................... 10 7

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 5 of 440 Table of Contents (continued) 5.12 Outputs ................................................................................................................................. 107 5.13 Proposed Signal Validation Designs ..................................................................................... 107 5.14 Tim e Response .................................................................................................................... 109 5.15 Controller Reset W indup and Recovery Characteristics ........................................................ 109 5.16 Noise Levels ......................................................................................................................... 109 5.17 Programmed Functions ........................................................................................................ 110 5.18 Setpoints .............................................................................................................................. 111 5.19 Requirem ents for Test and Calibration ................................................................................. 114 5.20 Requirem ents for Associated Equipm ent .............................................................................. 114 6.0 STEAM DUMP CONTROL SYSTEM REQUIREMENTS ................................................. 115 6.1 System Description .............................................................................................................. 115 6.2 Secondary Side Pressure Control System ............................................................................ 116 6.3 Applicable Criteria & Standards ............................................................................................ 123 6.4 W BN System Diagrams ........................................................................................................ 123 6.5 Indicators, Status Lights, and Controls ................................................................................. 128 6.6 Alarm s and Annunciators ...................................................................................................... 129 6.7 Perform ance Lim its ............................................................................................................... 130 6.8 Specific Requirem ents ......................................................................................................... 130 6.9 Accuracy ............................................................................................................................... 131 6 .10 R a ng e ................................................................................................................................... 13 1 6 .1 1 In p u ts ........................................... ....................................................................................... 1 32 6 .12 O utp u ts ................................................................................................................................. 13 2 6.13 Input Signal Validation .......................................................................................................... 132 6.14 Time Response ................................................................................................................... 133 6.15 Controller Reset W indup and Recovery Characteristics ....................................................... 134 6.16 Noise Levels ......................................................................................................................... 134 6.17 Program med Functions ........................................................................................................ 135 6.18 Setpoints .............................................................................................................................. 135 6.19 Requirements for Test and Calibration ................................................................................. 138 6.20 Requirements for Associated Equipment .............................................................................. 138 7.0 PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQ UIREMENTS ................................................................................................................. 139 7.1 System Description ............................................................................................................... 139

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 6 of 440 Table of Contents (continued) 7.2 Pressurizer Control System .................................................................................................. 139 7.3 Applicable Criteria & Standards ........................................................................................... 154 7.4 W BN System Description, System Diagrams ........................................................................ 155 7.5 Indicators, Status Lights. and Controls ................................................................................. 161 7.6 Alarms and Annunciators ...................................................................................................... 163 7.7 Performance Limits ............................................................................................................... 164 7.8 Failure Mode and Special Requirements .............................................................................. 164 7 .9 A c c u ra cy ............................................................................................................................... 16 5 7 .10 R a ng e ................................................................................................................................... 16 6 7 .1 1 In p uts ................................................................................................................................... 16 6 7 .12 O utp uts ................................................................................................................................. 16 7 7.13 Proposed Signal Validation Designs ..................................................................................... 167 7.14 Time Response ................................................................................................................... 169 7.15 Controller Reset W indup and Recovery Characteristics........................................................ 170 7.16 Noise Levels .......................................................................................................................... 170 7.17 Programmed Functions ........................................................................................................ 170 7 .18 S etpo ints .............................................................................................................................. 17 2 7.19 Requirements for Test and Calibration ................................................................................. 174 7.20 Applicable Criteria & Standards ............................................................................................ 174 8.0 BA BLENDER CONTROLS INTRODUCTION ..................................................................... 175 8 .1 O ve rv ie w ................................. ............................................................................................. 175 8.2 Boric Acid Blender Control System Upgrade ........................................................................ 175 8.3 Indicators, Status Lights. and Controls ................................................................................. 183 8.4 Alarms and Annunciators ...................................................................................................... 184 8.5 Performance Limits ............................................................................................................... 184 8 .6 A ccu ra cy ............................................................................................................................... 18 5 8 .7 R a n g e ................................................................................................................................... 18 5 8 .8 Inp uts ................................................................................. ................................................. 18 5 8 .9 O u tputs ................................................................................................................................. 18 5 8.10 Time Response .................................................................................................................... 185 8.11 Noise Levels ......................................................................................................................... 186 8.12 Setpoints ................................................................... ......... ................... 186 8.13 Requirements for Test and Calibration ................................................................................. 187

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 7 of 440 Table of Contents (continued) 9.0 CVCS CONTRO L SYSTEM REQUIREMENTS .................................................................... 187 9.1 System Description ............................................................................................................... 187 9.2 CVCS Control System s ........................................................................................................ 187 9.3 Applicable Criteria & Standards ............................................................................................ 193 9.4 W BN System Diagrams ........................................................................................................ 193 9.5 Indicators, Status Lights. and Controls ................................................................................. 193 9.6 Alarms and Annunciators ..................................................................................................... 193 9.7 Perform ance Limits ............................................................................................................... 194 9.8 Specific Requirements .......................................................................................................... 194 9.9 Accuracy ............................................................................................................................... 194 9 .10 R a n g e ................................................................................................................................... 19 4 9.11 Inputs ................................................................................................................................... 194 9.12 Outputs ................................................................................................................................. 195 9.13 Proposed Signal Validation Designs ..................................................................................... 195 9.14 Tim e Response .................................................................................................................... 195 9.15 Controller Reset W indup and Recovery Characteristics ........................................................ 196 9.16 Noise Levels ......................................................................................................................... 196 9.17 Program med Functions ........................................................................................................ 196 9.18 Setpoints .............................................................................................................................. 196 9.19 Requirements for Test and Calibration ................................................................................. 202 10.0 MISC NSSS CONTRO L SYSTEMS ..................................................................................... 203 11.0 BOP CONTROL AND INDICATION SYSTEM REQUIREMENTS ........................................ 208 11.1 System Description ............................................................................................................... 208 11.2 System Functional Details .................................................................................................... 209 11.3 Applicable Criteria & Standards............................................................................................ 214 11.4 W BN System Diagram s ...................................................................................................... 214 11.5 Indicators, Status Lights. and Controls ................................................................................. 214 11.6 Alarms and Annunciators ...................................................................................................... 215 11.7 Performance Lim its ............................................................................................................... 215 11.8 Specific Requirements .......................................................................................................... 215 11.9 Accuracy ............................................................................................................................... 215 1 1.10 R a n g e ............................ ...................................................................................................... 2 15 1 1 .1 1 Inp u ts ........ ........................................................................................................................... 2 15

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 8 of 440 Table of Contents (continued) 1 1 .12 O u tputs ................................................................................................................................. 2 16 11.13 Proposed Signal Validation Designs ..................................................................................... 216 11.14 Time Response ................................................................................................................... 216 11.15 Controller Reset Windup and Recovery Characteristics ........................................................ 217 11.16 Noise Levels ......................................................................................................................... 217 11.17 Program med Functions ........................................................................................................ 217 1 1.18 S e tpo ints ......................................... .................................................................................... 2 17 11.19 Requirem ents for Test and Calibration ................................................................... ............. 217 12.0 TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS ................................................................................................................. 218 12.1 System Description ............................................................................................... ............ 218 12.2 Instrument Rack Specifications ............................................................................................ 219 12.3 Detailed Functional Descriptions .......................................................................................... 222 12.4 Indicators, Status Lights. and Controls ................................................................................. 222 12.5 Alarms and Annurtidators...................................................................................................... 223 12.6 Perform ance Lim its ............................................................................................................... 223 12.7 Specific Requirements .......................................................................................................... 223 12.8 Accuracy ............................................................................................................................... 223 12 .9 R a n g e ............................................ ...................................................................................... 223 12 .10 Inp uts ................................................................................................................................... 2 24 12 .1 1 Outp uts ................................................................................................................................. 2 24 12.12 Proposed Signal Validation Designs ..................................................................................... 224 12.13 Time Response .................................................................................................................... 224 12.14 Controller Reset W indup and Recovery Characteristics ........................................................ 225 12.15 Noise Levels ......................................................................................................................... 225 12.16 Program med Functions ........................................................................................................ 225 12.17 Setpoints .............................................................................................................................. 225 12.18 Requirements for Test and Calibration ................................................................................. 225 13.0 SHIPM ENT AND STORAGE ................................................................................................ 226 13.1 Marking and Identification ..................................................................................................... 226 13.2 Preparation For Shipment .................................................................................................... 226 13.3 Shipping Notice .................................................................................................................... 226 13.4 Storage Requirements .......................................................................................................... 226

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 9 of 440 Table of Contents (continued) 13.5 Spare Parts .......................................................................................................................... 227 13.6 Shipment .............................................................................................................................. 227 14.0 DEFINITIO NS ....................................................................................................................... 227 15.0 AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS ...................................... 232 15.1 System Description ............................................................................................................... 232 15.2 System Functional Details .................................................................................................... 232 15.3 Time Response .................................................................................................................... 233 15.4 Controller Reset W indup and Recovery Characteristics ........................................................ 234 15.5 Noise Levels ......................................................................................................................... 234

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 10 of 440

1.0 INTRODUCTION

1.1 Overview A completely engineered Control and Monitoring System (C&MS) shall be provided for Watts Bar Unit 2. The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.

The C&MS shall be a distributed digital microprocessor based control and monitoring system, designed and implemented specifically for power plant applications in terms of materials of construction, industry accepted design conventions, and application software.

The C&MS architecture shall be functionally composed of a number of building blocks which can be expanded or modified during or after installation. The basic components are the control micro-processor pairs and associated input/output hardware, operator interface, and the communications network. This specification details the minimum requirements of the C&MS. The required quantities of I/O, peripherals, and equipment summarized in this specification are an estimate for the basis of bidding. The Offerer shall have ownership of the system databases and shall complete all fields.

The C&MS upgrade shall replace the NSSS supplied Control Racks, the TVA supplied Balance of Plant (BOP) racks located in the Auxiliary Instrument Room (AIR), and a portion of the TVA supplied Balance of Plant (TBBOP) instrumentation located in the Turbine Building. The TVA supplied BOP racks are originally supplied by GEMAC and Robertshaw.

Also the Offerer shall furnish field racks to interface with process equipment in other remote locations.

NSSS Control Racks Upgrade The scope of this upgrade consists of replacement of the existing 4 NSSS control rack groupings (grouped by their associated power feeds). The originally supplied cabinets, 19 inch mounting supports and field terminations will remain. Each grouping will be replaced with a set of redundant control processors and associated 1/O modules. The redundant processors and I/O modules will be supplied by two diverse 120 VAC control power sources.

The C&MS shall have redundant internal DC auctionneered power supply modules associated with each of the customer supplied 120 VAC power sources. Critical Analog Output signals will have redundant output modules. All analog output devices will be changed out by the customer from 10 to 50 mA to 4 to 20 mA loops (including indicators, I/P converters, etc.) All transmitters that input to the NSSS control racks that have 10 to 50 mA outputs will be maintained using a voltage input module or replaced with 4 to 20 mA transmitters (not to be supplied by Offerer). The individual transmitter loop power supplies along with the indicating fuse panel will be replaced with isolated power being feed from the C&MS. Critical analog computer points will remain as a voltage input signal to the Integrated Computer System (ICS). A digital link to the ICS will be added to provide digitally these values plus others those where their analog points are deleted. All communications will be redundant. The Digital Contact Outputs must be rated for the existing interfacing circuit. The use of interposing relays to provide adequate contact ratings for the existing output circuits will be considered if required.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification 1Page 11 of 440 1.1 Overview (continued)

Non-Safety BOP GEMAC and Robertehaw Racks Upgrade This upgrade will be similar to the NSSS Rack upgrade except there will be a minimum of 2 groupings based upon independent divisional power feeds. The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. The majority of these Racks contain Indication and Alarm functions. The C&MS shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.

Non-Safety Turbine Building BOP (TBBOP) Up-grade This upgrade will replace BOP instrumentation located in the Turbine Building. The Offerer will provide cabinets to be located in the Turbine Building. The customer furnished 120 VAC supply power and offerer supplied DC auctioneered power supplies shall be as specified in the previous NSSS Control Racks Upgrade section. This instrumentation contains both Critical control functions and Indication and alarm functions. This portion of the system shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification. The TBBOP graphical displays will be displayed on the MCR monitors. It was assumed that 2 racks (designated as TB-N and TB-S in the I/O List) would be adequate space for the required I/O.

Generic Information Both the NSSS and BOP upgrades consist of the control system equipment located in the Auxiliary Instrument Room (AIR), the Main Control Room (MCR), and the Turbine Building (TB).

1.1.1 Existing NSSS and BOP Racks Upgrade The existing controls will be removed from the existing NSSS and BOP racks (TVA scope).

The Offerer shall supply control processors and 1/0 terminations to be terminated within the existing NSSS and BOP cabinets in a distributive manner and then tied together where necessary via a communications network. The new TBBOP racks will also be connected to this network.

1.2 Equipment, Material, And Services To Be Supplied By The Offerer Equipment, material and services supplied by the Offerer shall include, as a summary, the following equipment and services. The actual requirements are described throughout the specification, attached databases and appendices. NOTE: Should the database, descriptions, and/or appendices be in conflict, the Offerer shall promptly seek clarification from TVA. TVA retains the sole right for the determination of the issue and/or requirement.

A. The Offerer shall provide a control system, complete with all necessary hardware, software, termination units, and supporting power supplies.

B. The Offerer shall provide complete details of any exceptions taken, in part or in whole, in their proposal,

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 12 of 440 1.2 Equipment, Material, And Services To Be Supplied By The Offerer (continued)

C. The Offerer shall provide engineering work stations, data storage and retrieval drops, printers, and interface hardware and software as described herein, or as may be reasonably required to meet the intent of this specification.

D. The Offerer shall provide project management, project engineering, system engineering, software engineering, design, programming, graphics configuration and implementation effort to support the project, E. The Offerer shall supply complete logic diagrams and supporting descriptions detailing the system's control actions using symbology consistent with SAMA/ISA standards for continuous (analog) and discrete (Boolean) logic. This method is understood to be to the satisfaction of the Lead Electrical Engineer (LEE).

F. The Offerer shall provide, in their proposal, a list of spare parts and recommended quantities to be maintained in the TVA storeroom. The spare parts list shall contain the Offerer's part number, the OEM name and OEM part number, and the proposed unit pricing for each part listed. Inclusion of the OEM information is MANDATORY.

G. The Offerer shall provide any special tools, test equipment and software required for the installation, and continued operation and maintenance of the purchased equipment not commonly available in a power plant. The special tools, test equipment or software shall be supplied as part of the base price for this project, and will be permanently retained for TVA's use at WBN 2.

H. Cables shall be provided as shown in the table below.

Cable type Provided by Field Termination Assembly to existing field TVA wiring terminal strip Fieldbus Module to Field Termination Offeror Assembly Control processors to 110 baseplate (within Offeror panels, copper)

Control processors to 110 baseplate (panel to TVA panel, fiber optic)

Control processors to network switch (fiber Offeror optic)

Operator workstation PC in Aux Instrument TVA Room to display in Main Control Room Operator workstation PC in Aux Instrument TVA I Room to ICS system _

The Offerer shall supply an engineering work station for Unit 2 to provide a means of changing the system configuration, modifying system programs, creating and modifying graphics and performing diagnostic tests. The Unit 2 engineering work stations shall be independent and separate from the Unit 1 work station being added for the Steam Generator Level upgrade.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 13 of 440 1.2 Equipment, Material, And Services To Be Supplied By The Offerer (continued)

J. The Offerer shall supply 2 (touch screen will not be utilized) displays. The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.

K. The Offerer shall provide an option to shall supply 4 (touch screen will not be utilized) displays. The displays shall be a minimum of 19 inches in size (20 inches preferred and shall be quoted) and shall be capable of providing input to control functions.

L, The Offerer shall supply 2 new free standing instrument racks complete with necessary I/O for the Turbine Building BOP equipment.

M. The Offerer shall perform an open and closed loop factory test on the entire control system. This shall be accomplished in two phases. Phase One is totally the Offerer's responsibility to provide a completely engineered, configured and tested system.

Phase One shall include verification and validation of all system 110 by the Offeror and shall ensure that the application software and operator interface configurations are complete, accurate, and ready for inspection by TVA during Phase Two. Phase Two shall be conducted by the Offerer per the factory acceptance test (Section 2.8.3M) and will be witnessed by the Engineer. This shall include checking 100 percent of the 110, all single point failures, control loop functionality, or other tests as required by the Engineer to ensure compliance with the specification. No equipment shall be released for shipment without satisfactory completion of the Phase Two test, unless specifically waived, in writing, by the LEE. A closed loop model shall be used for closed loop testing and does not require a high level of plant response fidelity, but it should be capable of exercising all control loops as an integrated system (with both primary and secondary side responses). It shall able to test associated functions such as input validation algorithms to ensure a correct control system response (ie., PID input to output relationship, etc.). The use of engineered lag/delays to simulate plant response feedback delays is acceptable (first principal modeling is not required).

N. The Offerer shall provide services of a qualified field representative(s) for system start-up and tuning. These services shall include all power-up checks according to the Offerer's recommended practices and shall be scheduled at the Engineer's convenience.

The Offerer shall provide a man hour rate for these services along with per diem costs.

0. The Offerer shall provide training as outlined in Section 2.8.4 1.3 Equipment, Material, and Services To Be Supplied By Others The following items are not included under the scope of this specification, and have been, or will be performed by Others:

A. TVA will furnish the Offerer, without charge, necessary copies of the contract and specifications as may be reasonably required for performance of the work.

B. TVA will provide the Offerer with any technical data on file which TVA considers essential for completion of the work required.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 14 of 440 1.3 Equipment, Material, and Services To Be Supplied By Others (continued)

C. Receiving, storage, and field installation of the control system.

D. All field wiring external to the control system with the control system boundary ending at the existing rack terminal block. (Note: Pre-fabricated cables, such as FBM to processor cable, specified in this specification are to be supplied by the Offerer, but will be installed by TVA if routed outside of the cabinet or console.)

1.4 Project Review Meetings The Offerer shall include in his base offer attendance at monthly project review meetings.

These meetings will commence with the kick-off meeting and occur on a scheduled monthly basis up to one month after return of the unit to electrical generation. Meeting agendas will include schedule, technical and commercial issues to ensure continued progress of the project, specific accomplishments of the past month and action/objectives to be completed in the coming month. These meetings are site specific and may not be held at the same time or place.

The Offerer shall be responsible for generation and transmission to the Engineer (within 1 week of meetings) of formal meeting minutes for the Engineer's review, and will contain a proposed agenda and topics list for the next meeting. Following receipt and review of the Offerer minutes, an official meeting minutes will be generated by the Engineer and distributed to all participants. This process is implemented to ensure that TVA's and the Offerer's perspectives on all issues are thoroughly understood.

The time and place of all meetings will be established by WVA at a TVA facility unless the Engineer determines that the meeting objectives would be better accomplished at another location.

1.5 Target Project Schedule The Offerer shall prepare (and maintain for the life of the project) a working project schedule. The project schedule milestones, events and dates are to be the basis of working project schedule. The Offerer's project schedule shall be submitted for approval to the Engineer. The key areas for scheduling are receipt of information required for determination of contract compliance, support of balance of plant design, and pre-outage receipt of materials.

Refer to the contract milestone schedule for required dates.

2.0 INSTRUCTIONS FOR PROPOSAL The functional requirements, description of operation and control requirements included herein establish the criteria for the control system. However, it is not intended to limit the operation, functions, and safeguards to those either mentioned or implied. The Offerer shall make any additional suggestions or recommendations that will improve the proposed operational procedures or method of control. All the system engineering and hardware needed to constitute a fully integrated, complete and operable start-up; shut-down and on-line control system shall be supplied by the Offerer whether or not specifically detailed herein.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 15 of 440 2.1 Bases for Technical Evaluation Proposals submitted for consideration will be evaluated based on the criteria listed below but not necessarily in the order listed.

A. Previous Experience The Offerer's previous experience with similar applications, experience with the nuclear industry, TVA nuclear specific experience, and industry wide similar applications will be considered. Offerer must have previous demonstrated experience in the specific area of digital SGL control systems (see Section 4.0 of this specification).

B. Expansion Capability/Flexibility The ability of the Offerer's proposed system to be expanded, utilizing built in spare capacity, and ease of integration with the plant's Reactor Protection Systems, Plant Annunciator Systems, and the plant process computer "Integrated Computer System" (ICS) will be considered.

C. Ease of Maintenance/Modification The ability of the Offerer's proposed system to perform on-line maintenance and modification while the system is operating, self-diagnostic capability, reuse of existing cabling, and ease of engineering modifications will be considered.

D. Operator Interface The Man-Machine Interface of the Offerer's proposed system, including such aspects as availability of data, simplicity of control, similarity to plant process computer displays, and flexibility of configuration will be considered.

E. Redundancy/Fail-Safe The ability of the Offerer's proposed system to tolerate failures, including multiple failures, without compromising normal operation will be considered.

F. Product Support The expected product lifetime of the Offerer's proposed system and previous experience with the Offerer as relates to product support will be considered.

G. Schedule The ability of the Offerer to meet the required schedule will be considered.

2.2 WBN Simulator Upgrade

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 16 of 440 2.2 WBN Simulator Upgrade (continued)

The Offerer shall also provide a proposal for any hardware/software required to modify the WBN Main Control Room Simulator to reflect the changes that will result from the proposed Control system upgrade. The preferred implementation method is to use "faceplate" type instruments to be driven by the simulator computer, but a full Control System with interface box can be proposed. Any hardware/software proposed for the MCR simulator shall incorporate the ability to allow the simulator operation to be "frozen" and initialized to a predetermined state. See Appendix D for WBN detailed requirements. Differences resulting from the partial WBN Unit 1 SGL upgrade must be integrated with the Unit 2 changes. The scope included within the current WBN I project shall not be duplicated within this proposal.

2.3 Multi-Unit Proposal To be determined later.

2.4 Architectural Engineering (AE) Services Omitted 2.6 Hardware Requirements The hardware requirements associated with the proposed system are as follows:

A. The proposed system shall be a microprocessor based distributed system.

B. The proposed system shall have a Mean Time Between Failure (MTBF) of greater than 40 years. A failure for this case is considered the loss of system ability to automatically control. The Offerer shall provide MTBF data for the proposed system and the rationale behind it.

C. The proposed system shall have a Mean Time To Repair (MTTR) of less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

The Offerer shall provide MTTR data for the proposed system and the rationale behind it.

D. The proposed system shall be capable of being powered from two 120V AC 60 Hz (non-synchronized) voltage sources.

E. The proposed system shall provide power for 4 to 20 ma inputs/outputs and specified digital outputs.

F. All system inputs, including power inputs, shall be filtered to remove high frequency EMI/RFI, and process noise (see required testing in section 3.11.1).

G. The operator handstations for the proposed system shall be labeled "NM" for Auto/Manual. Other proposed labeling schemes shall be noted in the Offerer's bid proposal for evaluation.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 17 of 440 2.5 Hardware Requirements (continued)

H. All rack mounted hardware, unless otherwise noted, is to be located in existing Auxiliary Instrument Room (AIR) cabinets/Racks and the MCR or in new racks supplied under this proposal for the TBBOP. Each Offerer shall assume that all components are front mounted into the racks. Unless otherwise noted, all indicators and handstations will be located in the MCR. The TBBOP rack mounted hardware will be located in the Turbine Building in new cabinets and will have or supply local handstations and indications as defined in the 110 listing and will be mounted in specific locations TBD by TVA.

For the Engineering Workstations and operator display units (ODUs), removable storage devices, mouse/trackballs, and keyboards shall be provided for maintenance and operations use.

J. The hardware supplied for mounting in the existing panels shall be configured in such a way as to simplify installation. For example, component racks should be supplied with all hardware necessary to allow for direct bolt-in installation without panel modifications. TVA will provide plans for clear mounting space in existing cabinets and to be verified by the Offerer prior to final hardware design drawings and documents are issued (prior to 100% Design Review).

K. An Engineering Workstation system interface and printer interface shall be provided for remote installation. The Offerer shall specify the maximum distance this Engineering Workstation and Operator Console may be located from the control system. Security shall be provided to prevent unauthorized modification of system programming or operational parameters.

L. The proposed system configuration shall be tested and demonstrated to be resistant to EMI/RFI induced malfunctions as specified in TVA Standard Spec SS-El 8.14.01.

However, the Offerer may substitute his standard EMI/RFI test if approved by WVA.

Previously approved reports were only conditionally approved by Brown Ferry Nuclear and are not directly applicable to the WBN C&MS application. The SQN/WBN upgrade approval may be used to fulfill this requirement when completed.

M. The proposed system shall be capable of interfacing with the plant Integrated Computer System (ICS).

1. The proposed system hardware interface to the ICS shall be twisted pair or fiber optic Ethernet conforming to IEEE Standard 802.3
2. The proposed system hardware interface protocol to the ICS shall be TCP/IP using OPC format. See Figure 4 of the proposed control system and ICS interface.
3. The proposed system shall transmit analog data with the following information:

Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 18 of 440 2.5 Hardware Requirements (continued)

4. The proposed system shall transmit digital data with the following information:

Point Identifier Point Value Point Quality (e.g. bad, off scan, out of range, alarm, etc.)

or Packed digitals with 1 bit per point. Packing is acceptable only if point quality is also transmitted.

5. The proposed system shall associate a time stamp with each data point corresponding to the time the data was acquired and transmit this time stamp with the point value. If all values in a transmission are acquired within the update rate (as specified in the Functional Requirements in Sections 4 through 12 below) then a single time stamp may be associated with the data block rather than individual points.
6. The proposed system shall be capable of transmitting updates of all data points (including existing and spare capacity) at a rate that meets the Functional Requirements of Sections 4 through 12 below. Faster update rates are desirable for selected points. The system must provide the capability to slow down or throttle the data transfer to the minimum rate if necessary.
7. The proposed system shall be capable of accepting a time synchronization signal (either over the Ethernet or an IRIG-B signal) from the ICS and setting its timebase to this value. However, the system must not be dependent upon this signal for time stamping of data or other time related operations.
8. The proposed system shall be capable of notifying the ICS of internal self-test results/values.
9. A failure in the ICS shall not affect the control system. Example: ICS failure results in repeated requests for information shall not affect the response time of the control system and shall be proven by test. Testing shall be based upon type of communication buffering device (e.g. firewall), ICS broadcast capability, communication and protocol being used. Any required configuration limits (e.g.,

amount of allowable requests within a specific time and/or authorized IP requests) for the buffering device shall be documented and placed under configuration control.

N. The proposed system shall have redundant error checking computation processors or modules.

0. The proposed system shall have installed spare CPU, memory, communications, and other system capacities reserved to support future expansion. See Section 3.2.1 H for the specific requirements. The Offerer shall specify the spare capacity of the proposed system. Additional spare capacity shall be offered as an option. Offerer shall identify where spare capability requirements cannot be met without the addition of additional cabinets.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 19 of 440 2.5 Hardware Requirements (continued)

P. The proposed system shall have self-diagnostics and identify any hardware watchdog timers to detect any inadvertent software loops/failures. The Offerer shall specify the level of coverage in percent of the system self-diagnostics.

Q. All proposed system components such as power supplies, processor/computational modules, I/O modules, etc., shall be removable one at a time for maintenance with the system energized without loss of system functionality or component damage.

R. For control functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.

S. For indication and alarm functions, the proposed system input sampling through output processing (output is updated) time shall be at the rate specified in the system functional requirements (Sections 4 through 12 below). This parameter shall be verified as acceptable by testing.

T. The proposed system trending and history sampling shall be at the rate specified in the system functional requirements.

U. The proposed system Operational Display Unit (ODU) screens shall be updated every 1 second as constrained by NUREG-0700 guideline to reduce eye fatigue from video flicker. MCR handstation controllers shall be updated at the rate specified in the functional requirements.

V. All panel wiring and cable supplied by the Offerer should be certified to have PVC free insulating material and jacket. If used, Offerer must identify the amount of PVC for TVA's evaluation.

W. All Offerer installed panel wiring shall be installed in accordance with accepted industry standards and practices, with all external interface wiring utilizing ring tongue lugs. The Offerer shall describe the proposed wiring standards or procedures to be utilized. Particular attention shall be directed at termination and bend radii.

2.6 Software Requirements The Offerer shall meet the requirements of TVA Standard Specification SS E18.15.01 as defined in this specification. The standard spec classification is for Critical to Plant Operations. See Appendix B for details.

Additional generic software requirements associated with the proposed system are as follows:

A. Process variable signal validation for all inputs shall be performed. For critical inputs, any input signal greater than nominal +/-5% out of range (an input deviation from the Medium Signal Select/Averaged output) shall be considered automatically invalid.

The out of range limit selection shall allow for deviation during transient conditions.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 20 of 440 2.6 Software Requirements (continued)

B. If an input signal is invalid (exceeds deviation) for more than a short period of time (approximately five seconds, exact time to be determined later), it shall be "locked out", alarmed (output contact) and system alarm, and require manual re-initialization prior to use.

C. All process variable signal inputs shall be linearized and converted into proper engineering units. All scaling input to be provided by TVA must have second party review by TVA and incorporated by Offerer. Offerer shall also perform and document second party review of this scaling once it is implemented.

D. Only one redundant input shall be manually bypassed at a given time. The User shall have the capability of setting the input value for the bypassed input.

E. An alarm shall be generated upon loss of:

1. Any input signal as a result of an input validation scheme.
2. This alarm shall be capable of being individually manually bypassed for maintenance purposes.
3. A trouble alarm shall be generated upon loss or degradation of any process variable input, control variable output, or system diagnostic failure.
4. A trouble alarm shall be generated upon loss of power to any system component, or the failure of any system power supply.
5. Non-catastrophic system faults shall generate an alarm and be specifically identified upon request.

F. On-line real time diagnostics shall be performed to verify the proper operation of I/O, CPU, Memory, overall system operability, process variable inputs, and control variable outputs.

G. All ODU graphic displays shall conform to the conventions as given in Section 3.4.7 of this spec to assure similarity to the existing Integrated Computer System (ICS) displays.

H. All ODUs shall provide for verification of on-line control system changes via the feature. For example, to bypass a transmitter for maintenance, it would be necessary to select an area label "Bypass LT-3-56", and also an area labeled "Confirm Bypass LT-3-56".

1. Software configuration management shall be implemented, documented, and maintained for all development and control software. The software development system shall be self documenting and should have a revision history function that documents the specific changes that were implemented. Configurable parameters are covered by the management system.

J. The following system graphics, at a minimum, shall be supplied. The Offerer shall list and describe the number and type of graphics that are proposed. Offerer should provide cost of additional screens.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001

, Specification I Page 21 of 440 2.6 Software Requirements (continued)

I System Mimics A minimum of 60 mimics will be developed for all the major NSSS control systems and selected BOP systems. The major NSSS control systems are discussed in more detail in the following sections.

As an example, the mimics for the SGL controls will consist of:

a. MFPT overview with speed, discharge pressure, SG dP, and flow. This mimic is to be the default mimic for one of the ODUs so that it is continuously displayed during normal operation. The Operator can manually change to another display if desired.
b. Main Feedwater control system overview
c. Subsystems within the control system such as each SG Loop
d. Each Input Validation scheme where specified
e. Each Controller and Setpoint Station
2. System and Process Alarms A screen or screens displaying at a minimum system and process alarms, along with time and date of initiation, and acknowledged status shall be provided. It shall be possible to acknowledge alarms from this graphic. A minimum of 3 levels of Alarm priorization shall be provided. TVA and the Offerer shall work together to implement a design that minimizes the possibility of nusiance alarms.
3. Trends Provide graphics capable of bar graphs and trends for the C&MS. Trending parameters and scaling shall be selectable by the Operator and shall open will a predefined amount of data history displayed.
4. Maintenance Bypass A graphic shall be provided to allow bypass of process variable inputs and the associated alarms as required for maintenance. Indication of bypass permissive (without affecting system operation) shall be provided.
5. Loop Tuning Parameters A graphic shall be provided to display and allow online adjustment of tunable values. This screen(s) shall allow for tuning of all tuneable values. Tuning values that are updated on-line shall be bumpless and take effect without system reboot or process step change/upset.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 22 of 440 2.6 Software Requirements (continued)

6. Interlock and Permissive Status A graphic depicting the status of all Interlocks and Permissives defined in this spec.
7. Additional Maintenance Graphs Allow for 5 additional mimics to support maintenance functions.
8. Reports A graphic allowing the generation of reports for Operations, Maintenance, and Engineering shall be provided. The number, contents, and format of these reports will be defined by TVA after award of Contract. To allow for equitable evaluation of proposals, each Offerer should allow for a total of nine reports, with approximately twenty to thirty parameters per report, with the report output being directable either to a printer, to a file on both hard drive, a removable storage drive, and to ICS.
a. Layouts All graphics that are developed shall be arranged in a logical progression.

K. The proposed system shall have a minimum of four distinct environments or levels of access. The current environment shall be readily identifiable by the user. These environments are:

1. Display Only This shall be the default boot-up environment. No password or security measures are applicable to this environment. The minimum available displays shall include the System Mimic, Process Overview, System and Process Alarms, Trends, Loop Tuning Parameters, Interlocks and Permissives Status screens. No system parameters shall be alterable from these screens in this environment. It shall be possible to enter all other environments from this level, with an appropriate password.
2. Operations The Operations environment shall consist of the same displays as the Display Only environment except for deletion of the Loop Tuning Parameters display and the addition of the Reports display, Changes of setpoints, input parameter bypasses, and alarm acknowledgments shall be operational from this environment. Loop tuning parameters and control system configuration parameters shall not be alterable from this environment.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 23 of 440 2.6 Software Requirements (continued)

3. Maintenance The maintenance environment shall consist of the same displays as the Display Only environment. Loop tuning parameters shall be alterable from this environment, and input parameter bypasses shall be operational.
4. Outage/Design The Outage Environment shall consist of the same displays as the Display Only environment. All parameters shall be alterable and all features operational.

2.7 Digital Interface Requirements All digital communications interfaces must be fully documented, both hardware and software, to allow TVA to develop interface software to interrogate, program, and exchange data with the subject C&MS. Proper security (i.e., firewalls, etc.) shall be included.

2.8 Deliverables 2.8.1 Hardware A. Control System Hardware The Offerer shall supply all control system hardware required to meet the specifications of this document. The system supplied is not required to be in strict compliance with ANSI/IEEE Standard 379,"Single Failure Criteria", but should be configured and designed in such a manner that the failure of a single device or component, excluding a catastrophic failure of the entire cabinet, will not affect the operation of the system. All system components shall be capable of being removed one at a time with the system powered and operational without affecting system operation (to be tested during FAT).

B. Indications TVA shall supply all indicators and recorders for compatability with 4 to 20 ma outputs.

C. Valve Positioners (I/P Converters)

TVA shall supply all I/P converters and electro pneumatic positioners for compatability with 4 to 20 ma outputs.

D. Critical Outputs Critical outputs such as an output for a critical control valve (i1P converter) shall have redundancy. TVA will identify all known critical output control functions. The Offerer shall provide input to TVA for inclusion of other critical outputs based on the results of the System Hazards Analysis (see section 3.2.2.G).

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 24 of 440 2.8.1 Hardware (continued)

E. Main Feedwater Pump Control Interface The Offerer shall supply a 10 to 50 ma output converter using a passive device (i.e.,

diodes) to provide for control system output redundancy. For example, the MFPT speed control outputs, the redundant 4 to 20 mA outputs shall be converted to a 10 to 50 mA prior to input to a passive switching device.

F. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied hardware.

2.8.2 Software A. Development Software The Offerer shall supply to TVA any software used in the programming/ configuration of the system and the building of graphic displays. This software may include such items as compilers, linkers, CAD programs, etc. The Offerer shall identify the operating system needed for this software.

B. Control Software The Offerer shall develop and supply software for the proposed system, including system graphics, operational and maintenance displays, and user defined trends, to provide an accurate and reliable control system that has successfully passed the Factory Acceptance Test (FAT). The features and requirements as defined by this document shall be incorporated into the control system software.

C. Configuration Control Software The Offerer shall develop and supply software to assist in the establishment and maintenance of system software configuration control. This software shall provide documentation (printed output and/or files) of system configuration to allow comparison to the baseline configuration as established by the FAT. Successful completion of the FAT with no open test anomalies shall establish the C&MS software baseline (rev 0).

D. Maintenance and Configuration Devices The Offerer shall supply any devices or components that are required for the normal maintenance of the supplied software.

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 25 of 440 2.8.3 Documentation TVA intends to obtain a complete system including all documentation so that future changes can be incorporated with confidence and error free maintenance (cannot cause process upset or control systems problems) can be accomplished on the system. The Offerer shall provide detailed documentation of any and all functions that are unique to this system. The Offerers standard documentation may be used for standard functions provided it is complete and usable.

The Offerer shall provide completely filled out (including reference and cross-referencing) logic and functional SAMA diagrams, loop schematic drawings (items internal to the Control System such as relays, isolators, etc. are to be shown to the field terminal blocks), cabinet drawings, recommended spare parts list, bill of material, data base documents, detailed functional specifications, operating and maintenance instruction books. The use of non-standard SAMA symbology and structure must be approved by the WVA.

Documentation should be divided into operator manuals, engineering and maintenance manuals and system overview manuals. The engineering and maintenance manuals shall include all system data and database information including updates until final acceptance.

The Operator Manuals shall contain operating procedures and instructions for the proper operation of the operator's console and the Control System equipment.

All documentation customized to this contract such as engineering drawings, engineering lists, tabulations, procedures, data bases, etc. shall be supplied to TVA in Windows XP compatible format of either the most recent version of AutoCAD, Word, Excel, Access or FoxPro. This documentation may be supplied to TVA on CD ROM or DVDs. Each disk submitted shall be clearly labeled as to the contents including TVA plant name, contract number, software format, contents description. TVA will determine the acceptability of any proposed alternative. All electronic media shall be certified as virus free before shipping to TVA.

A. Required Plant Data The Offerer shall submit a document delineating the specific plant data required to implement the proposed system. This shall include transmitter ranges, failure modes, etc. The Offerer is requested to quote as an option the cost of providing personnel on site to retrieve this data. Some plant specific details may be proprietary information that will not be released before contract approval. Post award release will have to be negotiated based upon all applicable legal requirements.

B. Software Quality Assurance Plan (SQAP)

The Offerer shall develop and submit for TVA approval an SQAP as required by WVA Standard Specification SS-EI8.15.01.

C. Software Requirements Specification The Offerer shall use this document as the Software Requirements Specification.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 26 of 440 2.8.3 Documentation (continued)

D. System Design Description and Logic Drawings The Offerer shall develop and submit for TVA approval a System Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-EI8.15.01. Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by TVA.

Logic diagrams shall be submitted for approval using SAMM/ISA-like, Boolean, ladder, or other logic document forms readily understandable by a controls engineer without specific training on the Offeror's system. Once approved, these drawings will be subsequently "interpreted" by the Offerer and programmed using techniques specific to the Offeror's platform. The Offerer would then produce a set of configuration documents reflecting that effort which TVA would also have to review for adequacy.

The Offerer submitting a proposal is required to submit examples of the documentation to be submitted and subsequently electronically converted to machine code. The Engineer shall be the sole judge of the intuitive requirement of the submitted example. As an example, SAMA and Boolean forms are highly preferred, although SAMA, Boolean, and ladder variants may be acceptable if sufficiently obvious to the Engineer.

E. Component Physical Drawings The Offerer shall supply detailed physical outline drawings of all supplied hardware, such as instrument racks, operators displays, weights, outline dimensions, mounting and termination details, etc.

F. Wiring Connection Drawings The Offerer shall supply wiring connections drawings clearly showing all required external connections points, their size, their function/marking, and specifying the size and type of cable required. All terminations shall be clearly labeled as documented on these drawings. All terminations shall be properly sized to interface to existing plant wiring.

G. System Power and Heat Load Requirements The Offerer shall submit to WVA a document specifying the power requirements of the proposed system, including power consumption, in rush current, voltage limits, and noise limits. System/cabinet heat load and cooling limit requirement shall also be provided.

H. Component Accuracy and Drift Data The Offerer shall supply accuracy and drift data for all components supplied. This shall include as a minimum the inaccuracies due to temperature, power supply, time dependent drift, and repeatability.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 27 of 440 2.8.3 Documentation (continued)

1. Seismic Qualification Information See Appendix H for seismic response curves to be used in conjunction with these requirements,
1. Control Cabinet Where existing cabinets are not used, the Offerer shall supply a cabinet to house control system hardware, power supplies, and 110 hardware. The cabinet shall be similar to existing Foxboro control cabinets. Offerer shall perform walkdown to scope out size, placement, and mounting.

Cabinet and processor loading should allow future expansion capability within the existing cabinets. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials. The Offerer shall demonstrate cabinet seismic structural integrity in accordance with WVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment."

The Offerer shall verify sufficient clearance is available to transport control cabinets through existing entry ways.

2. Control Racks Remote I/O hardware must be installed in existing process control system instrument racks with a minimum impact on field terminations and cabinet structural configuration.

Offerer shall evaluate the rack structure (including on-site visits) and provide all necessary mounting hardware. If an enclosure is supplied, the Offerer shall demonstrate seismic structural integrity in accordance with TVA Design Criteria No. WB-DC-40-31.13, Rev. 4, "Seismic Qualification of Category I(L) Fluid System Components and Electrical or Mechanical Equipment."

3. Handstations/Operator Console The MCR handstations must be installed within the existing main control board cutouts with a minimum impact on the control boards. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13, "Seismic Qualification of Category 1(L) Fluid System Components and Electrical or Mechanical Equipment". TVA shall select handstations.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 28 of 440 2.8.3 Documentation (continued)

4. MCR Remote I/O Remote IO in the Main Control Room shall be mounted in a location in existing MCR panels. The Offerer shall supply the equipment qualified for the as installed configuration in compliance with WBN Design Criteria, WB-DC-40-31.13, "Seismic Qualification of Category 1 (L) Fluid System Components and Electrical or Mechanical Equipment".
5. Engineering Workstations One Engineering Workstation will be installed in the Unit 2 Auxiliary Instrument Room located in a locking cabinet. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow TVA to seismically qualify the installation of all components for Seismic Class I(L).
6. Operator Control Station Two Operator Control Displays (minimum of 19 inch preferred is 20 inch LCD displays) will be located in the Main Control Room. The Offerer shall provide component information such as size, weight, center of gravity, materials of construction, and mounting materials and methods to allow WVA to seismically qualify the installation of all components for Seismic Class I(L).

J. EMI/RFI Test Plan If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Plan in accordance with TVA SS-E1B.14.01 shall be submitted for approval by TVA. TVA shall witness testing. If testing is to be performed on the SQN I project this requirement shall be considered to be fulfilled by that project.

Special Testing Requirements

1. Testing shall be performed with rack enclosures and wiring configuration similar to the actual plant installation.
2. The EMI/RFI tests shall be perform with the rack doors open and closed.

K. EMI/RFI Test Report If project-specific EMIIRFI testing is to be performed, an EMI/RFI Test Report in accordance with WVA SS-E18.14.01 shall be submitted for approval by WVA. If testing is to be performed on the SQN 1 project, this requirement shall be considered to be fulfilled by that project.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 29 of 440 2.8.3 Documentation (continued)

L. Burn In Testing The completed system (includes the control system and all supporting peripherals such as displays, hand/auto stations, etc.) or any component shall receive a two week burn in testing. During the two weeks, the system shall be continuously monitored for abnormal operation. The system or any subcomponent shall not reboot, fail, or lose power during this period. If the system reboots or fails, the two week clock for this test shall be reset following corrections for the reboot.

M. Factory Acceptance Test (FAT) Plan and Procedures The Offerer shall prepare a comprehensive FAT plan and procedures to be submitted for approval by IVA. This plan shall test and verify system configuration and all system functions as defined in this specification. The FAT will validate all application requirements of this specification. Both Open loop and closed loop testing will be performed. The Offerer should provide a description of their closed loop simulation capabilities for evaluation. These simulation capabilities can be bid as an option or included in the bid. WVA shall witness testing. Upon successful completion of FAT, the C&MS design will be documented as the baseline design and no changes (hardware or software) shall be made outside of TVA's DCN process.

N. Factory Acceptance Test (FAT) Report Before Site delivery, a FAT final report (executed FAT Plan/Procedures) shall be submitted for approval by WVA to document performance of the FAT test, and document the resolution of any test anomalies or open items.

0. Bill of Material The Offerer shall submit a (by both technical and commercial interfaces) Bill of Material for approval for all supplied components with a description, part number and quantity supplied for each item.

P. Software Configuration Control Information Software configuration control information shall be supplied for the final system software configuration to provide traceability to the software baseline tested and approved by the FAT.

Q. System Storage Requirements Offeror approved storage requirements for all system components shall be provided, including shelf life specifications and any routine maintenance required while in storage, such as battery replacement.

R. Operators Guide A complete and comprehensive Operator's Guide(s) shall be submitted for approval by TVA for all system developmental and simulation software. This is anticipated to be a combination of standard documentation and training documentation.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 30 of 440 2.8.3 Documentation (continued)

S. Vendor Manuals Five copies of a complete and comprehensive set of Vendor Manuals for all supplied equipment shall be submitted for approval by TVA. The Offerer shall identify any periodic maintenance required to achieve the submitted reliability numbers and any recommended maintenance for improved performance. Components with Electrolytic capacitors shall be identified along with a recommended replacement frequency and shelf life.

T. Other Documentation All documentation submitted to WVA shall be upgraded to the as built condition by the Offerer within 90 days after System Acceptance. Drawings shall be submitted electronically to TVA in AutoCad format, Release 14 or later.

The required documentation shall include but is not limited to the following.

1. Organizational Chart - This chart shall show the Offerer's key technical and administrative personnel relative to this contract.
2. Input/Output List(s) - The I/O list(s) shall show all signals entering and leaving the cabinets. The list shall include unique alphanumeric identifiers for all new cables, TVA cable or wire identifiers for reused signals, IO point descriptions in English, and the I/O signal level. The data is anticipated to be a Microsoft Access file.
3. Bill of Materials - The bill of materials shall itemize all equipment provided. This bill shall include unique identification of each component (part number), range, accuracy, description of purpose or application, and manufacturer if other than the Offerer. This documentation shall be maintained as a xbase file for the life of the project.
4. Mechanical Drawings - These drawings should show all outline dimensions, sections, details, and all external connections of all equipment showing type, location, size, and mounting details. Further, these drawings must show general equipment arrangement including plans, elevations, sections, and details of all the control system components in their recommended orientations and locations.
5. Wiring and Schematic Diagrams - Wiring, schematic, and cable termination diagrams shall consist of the following:
a. Wiring Diagrams - A complete set of wiring diagrams that clearly show the wiring, including cable connections between the Input/Output termination cabinet(s), internal or external prefabricated cables, jumpers, and other wiring.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 31 of 440 2.8.3 Documentation (continued)

b. Terminal Block Drawings - A detailed terminal board or terminal block arrangement diagram clearly showing the field termination. The I/O termination drawings shall show actual physical locations and point assignments (Offerer's wiring). All I/O point names and Offerer wiring shall appear on these drawings. Complete cross reference information shall be provided on each drawing for each I/O point.
6. System Functional Drawings - System functional diagrams and digital logic diagrams shall be functionally oriented rather than hardware or system programming oriented. In a clear and concise manner, these functional diagrams shall show the functional operation of the controls and associated devices. These diagrams shall be prepared using the latest issue of the standard ISA $5.1 instrumentation and control symbols or equivalent. The logic diagrams shall denote all interlocking that is provided.
7. Configuration Drawings - Configuration diagrams shall detail the control processors configurations or programs. Unlike the functional and logic diagrams, these drawings shall be hardware oriented. The partitioning of functions between control processors shall be clearly shown. These diagrams shall be annotated to clearly show the control functions and interlocks. The Offerer may use his standard symbology for this submittal. A key diagram shall be provided for all of the Offerer symbols.
8. Configuration Download - Two complete sets of downloadable system configuration shall be provided on magnetic media, CDROM, or DVDs. This media shall provide the ability to completely configure the control system and all auxiliaries. The media size and type shall be compatible with the control system capabilities.

The system shall provide ability to verify error free download configurations, such as checksum, etc.

9. Control System Functional Description - The Offerer shall submit ten copies of the complete functional description (Functional Drawings and Software Design Descriptions) of the supplied contror system and all its auxiliaries. This document shall provide complete descriptions of the control system for operation and maintenance personnel. It shall provide technical explanations of overall system and individual loop functions and configurations. The objectives of overall control system and each loop shall be stated. The methods of selecting control modes shall be described. In addition, all control functions including interlocks, permissives functions, tracking of output signals, lockout and bypass features, deadbands, etc., shall be described.
10. Service Manuals - The Offerer shall provide two copies of manufacturer service (shop) manuals for each type of equipment provided. These manuals shall provide detailed diagnostic, repair, and service instructions with detailed explanations of system design concepts for all field-repairable modules.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 32 of 440 2.8.3 Documentation (continued)

11. Power load Data - Power load Data for the system, each cabinet, and for individual components shall be supplied. This data is to includes full load current, voltage rating, power consumption, in rush current magnitude and duration, and the characteristic curves of any protective devices in the equipment.
12. Heat load Data - The Offerer shall provide the heat load in Btu/hr for system cabinets and work stations that are located in a controlled environment.
13. Project Document List - The project document list (PDL) shall be a data base of all Offerer drawings and other documentation submitted or planned to be submitted during the life of the project. The data base shall be updated and issued, as both a paper report and electronic file, with each drawing or document transmittal. The data base shall be maintained for the life of the project. Included in the data base shall be the transmittal of I/O lists, manuals, cable lists, and other documentation which normally is not considered a drawing. The PDL shall serve as the inventory of engineering and design deliverables. The format of the data base and reports shall be mutually agreed to during the kickoff meeting(s). The fields in the data base shall include, but are not limited to, the following: Drawing or document number; revision number; description; submittal date; approval status of drawing or document.
14. PVC Certificate of Conformance - a certificate of conformance for PVC free material and a listing of all external wiringlcabling and components containing PVC with estimated PVC mass shall be provided.

2.8.4 Training System training on the Control system operations and functions are required. This article is intended to identify the minimum training needed to support system design, installation, start-up, and maintenance.

Training shall be conducted by experienced professional training personnel, supported by modern training aids and shall use the actual system hardware as much as possible.

Participants shall receive individual copies of the technical manuals and pertinent documentation which describe actual TVA system hardware and software. The cost of all courses described in this section shall be separately priced, on a per-student basis.

The following training shall be included in the Offerer's bid. The training shall be applicable for the following disciplines.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 33 of 440 2.8.4 Training (continued)

A. Engineering The Offerer shall provide training for a class of 12 engineering personnel to allow these individuals to train other engineering personnel sufficient to adequately install, test, startup, operate, maintain, and modify the proposed system.

Training shall instruct engineers on system architecture, electronic modules, interfacing problems, electromagnetic noise, cabling requirements, control and graphic system configuration, as well as installation and maintenance considerations. Also training shall instruct the engineers on how to use the operating software, utilities, and special high level software packages for operation, configuration, tuning, and diagnostics. This training shall be conducted at the plant site.

B. Maintenance The Offerer shall supply training for a class of 12 maintenance personnel sufficient to allow these individuals to train other maintenance personnel to adequately maintain and troubleshoot the system. Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.

Training shall instruct technicians on how to do routine maintenance and troubleshooting of the control system and its components. This training shall include additional maintenance and repair instructions for any component not common in the power industry. To facilitate diagnosing system irregularities, this training shall be system oriented to brief technicians on how controls and instruments relate to other system components. This training shall provide an overview of the controls and graphics configuration as implemented by this project. The duration of this training should not be less than 2 weeks.

The course shall familiarize TVA personnel with a full-scale preventive maintenance program for the system. Hardware training shall include a section on the use of all processors, peripheral, and other diagnostic software.

Instrument technician training shall be conducted at the plant site. The training classes shall include a "hands on" laboratory. The equipment for this training should not use any of the components to be installed in the generating units. The training hardware shall be shipped to the site in advance of the class sessions. In advance of the class session, the Offerer shall set up and check out all hardware supplied for training.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 34 of 440 2.8.4 Training (continued)

C. Operations The Offerer shall supply training for a class of 12 operations personnel sufficient to allow these individuals to train other operations personnel to adequately operate and manipulate the system and write operating procedures. Additionally, the Offerer shall supply assistance in preparing a course outline and provide documentation as required.

Training shall be split into two phases. The first shall instruct operators in the operation of the operator interface devices, describe overall system operation, and the recommended operation procedures. The second phase shall be customized to the control system design and implementation with focus on soft controls, failure mode, alarms, etc. At the conclusion of this training the operator shall have an understanding of the operation of the Control System hardware, the controls configuration, and the operator graphics configuration as implemented. The operator training classes shall be conducted at the plant site.

D. Instructors The principal instructor in each course provided by the Offerer shall have had previous formal classroom instructor experience. The software instructor shall have a complete and thorough technical knowledge of the hardware and software to be supplied under this contract. He shall be experienced in the skills involved in development, updating and operation of the software. The hardware instructor shall have a complete and thorough knowledge of test and laboratory equipment, diagnostic software, handbooks, guides and the use of tools and other aids in maintenance troubleshooting and taking proper corrective actions for the system.

E. Course Outlines A course outline for each course to be presented shall be forwarded to the Engineer with the proposal. This outline shall contain a short review of the subject of the course and how the course fits into the overall training program. The outline shall be in sufficient detail to allow the Engineer to evaluate the material in relation to the needs of the personnel attending the course. The Engineer may then make recommendations for additions and/or deletions to the subject matter as dictated by these and other considerations.

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 35 of 440 2.8.4 Training (continued)

F. Course Content Lesson plans and training manuals for Offerer supplied custom courses shall be prepared by the Offerer and submitted to the Engineer for review at least two months prior to the start of classroom instruction. The Engineer considers it desirable that the manuals used for training have been specifically designed to be used as training aids.

The exclusive use of computer reference manuals and maintenance manuals for this purpose is unacceptable. Upon completion of each course, the student will retain the training manuals.

The Offerer shall provide all special tools, equipment, training aids and any other materials required to assure that a meaningful course is taught. The number of special tools and other training equipment shall be adequate for the number of students attending the course. TVA will provide classroom space for any on-site training. For all off-site training the classroom space shall be provided by the Offerer.

2.8.5 Installation and Startup Support The Offerer shall supply Engineering field support at the WBN plant site to support the installation and startup of the proposed system. TVA has overall responsibility for the installation of the new C&MS and cabinets. WBN will provide the craft workers needed for this installation. The Offerer can provide as a quoted option of this spec, an itemized detail listing of job functions and associated costs for the use of their people to perform the installation. This will include any support required for the Site Acceptance Test, Post Modification Test and plant startup to be run by TVA after system installation and a minimum of fifteen non-consecutive days of support by one individual.

In the base offering, provide a field service engineer to assist with the initial installation up to and including system start-up. This shall include all pre-power up checks according to Offerers recommended practices. Once tuning begins, the Service Engineer shall remain on-site until tuning is complete assuming the unit is available. The Offerer shall break out the cost of the field service and list it as labor and travel/per diem categories. Overtime calculations shall not be applied to the travel and per diem costs. The customary outage schedule calls for six 10-hour days. The field service engineer's schedule shall correspond to the availability of the generating unit for tuning. This could mean day, evening, night, or weekend shifts for which there shall be no overtime differential.

A. Expected Duties The Offerer's Field Service Engineer will be asked to perform, but not be limited to, the following for each control system.

1. Oversee the installation of the Control System.
2. Support placing system into initial operation.
3. Support testing the system for proper operation verifying power, grounding, communications, module status, power supplies, etc.
4. Support placing all loops in manual operation.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 36 of 440 2.8.5 Installation and Startup Support (continued)

5. Support tuning for the all control functions in the C&MS, both for low power and full power plant operation.
6. Support troubleshooting of the C&MS,
7. Support development of configuration changes in conjunction with the Offeror project team, the Engineer, and Operations representatives as necessary for successful unit operation.
8. Support development of proper documentation of system changes and upgrades.
9. Support the running of system diagnostics.
10. Review system functionality. If applicable, Offerer input pertaining to potential improvement areas.
11. Provide milestone schedule.
12. Support verification of correct system wiring.
13. Support final tuning all control loops and the revision all I/O and data bases as required by actual field conditions.
14. Support the final system level pre-operational testing.
15. Participate in System Acceptance Testing and Post Modification Testing.
16. Place into proper operation all peripheral devices such as printers, loggers (includes updates post startup), LAN interfaces, and the like.
17. Support installation and the proper and acceptable operation of the Simulator component.

B. Field Service Engineer Selection/Retention The Offerer's Field Service Engineers' names and resumes shall be submitted to TVA for selection and approval. After obtaining TVA's approval, the Offerer may not replace the service personnel without TVA's written consent. TVA reserves the right to reject any Offerer personnel if, in TVA's opinion, said person fails to provide the degree of expertise, responsibility, or adherence to TVA policies and practices. In such case, TVA will notify the Offerer that a replacement is required. A replacement person will be promptly provided. TVA reserves the right to back charge the contract for any financial impact brought about by the failure of the Offerer to provide adequate field services.

2.9 Schedule Refer to the contract milestone schedule. The Offeror shall maintain and update status of the project's working schedule.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 37 of 440 2.9 Schedule (continued)

Table Table I -- Milestone Events ID Vendor Contract Supplement Award 1 A&E Starts work on DCN Package 2 Engineering Training 3 Foxboro submittal of Required Data Reques t 4 TVA supply of Requested data 5 SOAP Submittal; Preliminary SDD Submittal; Preliminary Component Physical Dwgs submittal; Preliminary Wiring Connection and Hardware Configuration Drawings; System Power Req and heat load data; Accuracy and Drift data; 6 10% Design Review, Maintenance Training 7 EMI/RFI Test Plan submittal; Seismic Qual info submittal;, Preliminary System Hazards Analysis Submittal: FAT plan (TVA FAT Scoping document); 8 Final Component Physical Dwgs submittal; Final SDD Submittal; Preliminary Winng Connection and Hardware Configuration Drawings 9 8imulation MWdification Plan 10 Software Configuration control info submittal; System Hazards Analysis Submitlal; Build of Material submittal; 11 50% Design Review; 12 Preliminary Simulator Modification Information Submittal-, Draft FAT procedure submittal; EM[/RFI Test Report Submittal 13

"[VAN FAT Approval; PMT Scoping Document; Preliminary Operator Guide subm itta; Vendor Manual Submittale; Storage Requirement submittal; 14 100% Design Review; 15 FAT Performed IS FAT Final Report; Approved Operator Guide submittal; Approved Vendor Manuals; DCN Issued; Mods Starts Work Packages 17 System Delivery; Simulator Upgrade Delivery; Site Acceptance Testing 18 Simulator Testing Performed 19 Operator Training; 20 Plant Installation 21 Post Mod/Startup Testing 22

NPG Site-Specific i WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 38 of 440 3.0 GENERAL CONTROL SYSTEM REQUIREMENTS 3.1 Overview 3.1.1 Foxboro, GEMAC, and Robertshaw Control Racks Upgrade, and Turbine Building BOP Expansion Racks This upgrade replaces most of the existing NSSS control system equipment, BOP GEMAC and Robertshaw equipment located in the Auxiliary Instrument Room (AIR) and the Main Control Room (MCR). Also, the C&MS shall supply new racks and hardware for interface with process equipment located in the Turbine Building (TBBOP).

3.1.2 Existing Specific Groupings NSSS Groupings Group 1 will consist of Racks 14, 15, and 16 with the main AC source supplied from Vital Inverter I Group 2 will consist of Racks 17, 18, and 19 with the main AC source supplied from Vital Inverter II Group 3 Will consist of Racks 20 and 21 with the main AC source supplied from Vital Inverter Ill Group 4 will consist of Racks 22, 23, 24, and 25 with the main AC source supplied from Vital Inverter IV Racks 26 and 27 - ICS Interface Racks GEMAC and Robertshaw Racks 2-R-121 GEMAC Rack powered from Vital Inverter II 2-R-122 GEMAC Rack powered from Vital Inverter II 2-R-123 through 2-R-126 is a four bay GEMAC rack with all field cables terminated in 2-R-126 and powered from Vital Inverter I 2-R-130 GEMAC Rack powered from Vital Inverter II 2-R-137 Robertshaw Rack powered from Vital Inverter I 2-R-141 Robertshaw Rack powered from powered from Vital Inverter I 2-R-1 42 Robertshaw Rack powered from Vital Inverter I Power feeds for the new TBBOP Racks will be established later as design requirements dictate.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 39 of 440 3.2 Hardware Requirements 3.2.1 Hardware Requirements for the Control System A. System Safety Classification This C&MS is classified as Quality Related (OR), IEEE Class Non-1 E, Seismic Category 1L(B) (position retention) with the exception of equipment located in the Turbine Building. The Turbine Building equipment is classified as Non-quality related (NOR), non-seismic.

B. Control System Architecture The proposed system shall have the capability for distributed architecture comprised of a family of independent functional processors. Redundant control processor pairs will be located in individual racks to meet all the performance requirements of this specification which includes areas such as response time requirements, failure modes requirements, control system segmentation requirements, etc. The Offerer shall determine the number and location for the purpose providing a bid and shall submit this detail as part of the bid proposal.

The functional processors shall have a configurable module/block based program to execute specific dedicated tasks. Systems that require a centralized computer for normal operation are not acceptable (i.e., a personal computer or mainframe computer). The controlling application shall be running in the local control processors. Network switches shall not be used to process critical control system I/O.

The control system architecture shall be fault tolerant consisting of a minimum of two redundant channels consisting of microprocessor based controllers and multiple I/O interface modules with remote mount capability. The control system shall be linked together by a network of redundant digital communication paths to form a completely integrated, distributed process control system. The system will interface with equipment located on the main control board, process control racks, plant Annunciator Systems, the plant's Integrated Computer System (ICS), the operator's ODU based console displays, and an engineering workstation.

In order to perform its control function, the system shall also be responsible for receiving, conditioning, and automatically selecting valid process measurement signals and providing the necessary interlocks and alarms.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 40 of 440 3.2.1 Hardware Requirements for the Control System (continued)

C. Micro-processor Controller The controller modules shall contain the process system's control strategies and support needs (e.g., alarms) which will be defined as the controller's configuration. This configuration shall be composed of standard library functions connected together to provide the defined control strategies. Both the standard library functions and the specific user configuration shall be stored in nonvolatile memory. The software of the library functions shall be validated by the Offerer through design review, testing, and actual operation experience and shall be in compliance with Reference 3.15B. Appendix C is a listing of the required minimum library functions. In addition, the modules shall provide user programmable capabilities to allow the development of sophisticated, customized control strategies. All components shall be hot swappable and capable of online reconfiguration without interrupting the operating control system. Hot swappable means to change out the controller without affecting the automatic control functions.

D. Redundancy The control system shall be organized using a redundancy design which is electrically isolated from each other such that a failure of one component will not result in the loss of control capability of C&MS. A hardware failure (ie., electrical short) or software problem in any module will not affect proper operation of the redundant channel. The system shall allow for the replacement of faulty modules online. Upon the subsequent power up of the replaced module, it shall be capable of detecting the redundant controller already having control, being reconfigured either automatically or manually and shall assume the role of backup controller.

1. Controllers The C&MS shall be designed with a minimum of a primary and backup digital controls consisting of redundant, distributed microprocessor based systems operating in parallel such that a failure of the primary controller will result in the automatic transfer of control to its corresponding backup controller. Uninterrupted automatic control capability for plant operation is mandatory; therefore, the automatic transfer of control between a failed and the good backup controller shall be fault tolerant and unrecognizable to the controlled devices. See Section 3.2.2H for definition. If the Offerer's definition is different, they shall define their definition of Fault Tolerant. For a redundant control system, only one controller will be allowed control at any given time. Triple redundant systems are also acceptable and shall be fault tolerant with 100% coverage. The loss of any controller shall be alarmed.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 41 of 440 3.2.1 Hardware Requirements for the Control System (continued)

2. Inputs Where specified, redundant input signals shall interface with the control system using independent input module/cards (such as separate input card for each redundant input) so that a loss of an input module would result in the loss of only one input signal. Redundant input modules can also be used to meet this requirement. Since the input module/card will contain multiple inputs, the complete loss of a single module/card shall not affect the controlled process. These requirements shall be analyzed in the FMEA and tested in the FAT. TVA has initially identified the inputs requiring redundancy in the specific control system sections. The hazards analysis (system FMEA) and system functional requirements (Sections 4 through 12 below) shalt identify any additional inputs that are critical.
3. Outputs All critical control system outputs shall have redundant output module/cards so that the loss of a single output module/card would not result in the loss of automatic control and would not create a process upset transient. The redundant pair will connect to a single signal cable going to the final control device. These requirements shall be tested in the FAT. Upon loss of both redundant processors, the output shall maintain the last good value to prevent a plant transient (see Section 3.2.2G.2.b). Note: For the MFPT interface (10 to 50 ma outputs), the final output selector shall be a passive diode based circuit design.
4. Control Network Internal communications between the redundant control system and also between the system and certain peripherals (operator's LCDs, engineering workstation, and ICS) shall occur over redundant digital control networks.

Isolation between the networks shall prevent failure in one side from affecting the alternate side. The loss of either network side shall be alarmed. The control network should be capable of transmitting process signals to be used for process control and to support generation of validation signals to eliminate single input signal failure from causing process perturbations. The control network shall be robust enough to carry worst case data transmission, in the presence of a single failure up to and including the loss of one of the two redundant sides of the network.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 42 of 440 3.2.1 Hardware Requirements for the Control System (continued)

5. ICS Interface For communications interfacing to ICS, TVA defined interfaces shall be utilized. The interface should provide buffered digital to digital communication with the plant computer. The C&MS shall provide digital interface with TVA ICS for all process inputs and output values, intermediate calculated values, and the status of logic parameters.

E. Physical Layout of Control System The proposed locations of the racks being added is depicted in Figure 1 and 2.

The Offerer shall be responsible for performing a walkdown of the AIR and MCR, obtaining measurements, and proposing a design that will fit within the defined areas. Future addition of expansion cabinets shall be considered.

The MCR Remote I/O proposed location is to be mounted in a panel in the Main Horseshoe or external panel such as 2-M-1 1 (see Figure 2). WVA shall perform walkdown to determine final location.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 43 of 440 3.2.1 Hardware Requirements for the Control System (continued)

New Cabinet Figure I - WBN U2 AIR, Control Bldg, Elevation 708'

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 44 of 440 3.2.1 Hardware Requirements for the Control System (continued)

ý.3 7zA Figure 2 - WBN U2 MCR, Control Bldg, Elevation 755'

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 45 of 440 3.2.1 Hardware Requirements for the Control System (continued)

FOXBORO WORKSTATION Figure 4 - Proposed ICS Interface Diagram

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 40 of 440 3.2.1 Hardware Requirements for the Control System (continued)

F. Process Signals Complete physical redundancy of the instrument loops shall be provided for those signals deemed critical for control of the plant (those signals whose failure would adversely affect plant operation such plant trip or runback). These critical signals are to be determined by the Offerer as specified in Section 3.2.2 by the Single Point Failure/Hazards analysis. Non-critical signals would include those used for alarms, indication only, and interlocks whose failure would pose no threat to plant availability. Redundancy of the critical loops shall be designed with physical and electrical isolation such that a single failure in any portion of the string (A/D, signal conditioning, computation, output, etc.) shall not cause a loss of control for the final output devices. Indicators, recorders, etc., that monitor the controlled parameter shall always monitor the signal sent to the controlled device. Analytical redundancy may be used in addition to the above requirement and for fault detection, but shall not be substituted for physical redundancy for critical control purposes. Any additional inputs required to meet these redundancy requirements shall be identified by the Offerer.

G. Input/Output System Input/output (I/O) modules shall be provided which shall convert signals to/from field devices to digital communications compatible with the distributed control processors. These modules shall be capable of being distributed throughout the plant as required by geographical location. All modules communicating back to the control processors will provide fault tolerant communications in either a centralized or geographically distributed system.

1. Isolation All inputs and outputs shall be isolated to 600 Vac and 250 Vdc between any I/O point and ground or between any pair of I/O points. Isolation shall comply with WBN Design Criteria, WBN-DC-30-4 Rev. 21, "Separation/Isolation."

All inputs and outputs shall be current limited to prevent damage to the I/O system due to inadvertent dead shorts in the field wiring. A dead short in the wiring of any field device shall not affect the proper operation of any other input and/or output.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification 1Page 47 of 440 3.2.1 Hardware Requirements for the Control System (continued)

2. Field Power Supplies - Channel and Module Isolation Input loop power supplies shall be dedicated at a module/input card level so that grounding problems (ie., multiple grounds) will only affect one input module/card. These power supplies shall be capable of supplying the voltage required for the existing field devices as specified in Appendix E.

These higher voltage power supplies may be external to the input card but should be designed to minimize the effects of multiple grounds (ground loops). These power supplies shall be supplied by the Offerer.

3. Accuracy The total loop accuracy (input to output) of the Control System signal processing shall be less than +/- 0.5% of calibrated span. This accuracy shall include as a minimum the reference accuracy, 18 months of time related drift, temperature effects over the stated operating range, software induced errors, etc. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion shall not contribute any additional inaccuracies greater than +/- 0.036% of channel span to the uncertainties specified in the system requirements sections. See ISA Standard 67.04 for methods on combining individual uncertainties.
4. Input Filtering and Noise Sources All inputs susceptible to EMII/RFI noise shall have hardware filtering. All inputs shall have the capability of software filtering of process noise to prevent control system upsets. The system must comply with the response time requirements in sections 4.14 through 12 with filtering in place.

All DC and AC contact outputs shall be rated to interrupt the maximum design load current at the maximum design voltage (TVA to define max voltages and currents) and shall have noise suppression to prevent EMI/RF1 noise generation. Interposing relays can be used to meet this requirement but must be approved by TVA on a case by case basis.

DC Contacts with inductive loads shall be evaluated with respect to contact ratings, reduced reliability, and noise generation. Arc suppression shall be supplied based upon the results of these evaluations. Arc suppression is TVA scope.

5. Input and Output Types The system must accept all the process signals listed below without additional devices converting them to milli-amps or voltage signals.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 48 of 440 3.2.1 Hardware Requirements for the Control System (continued)

Inputs Outputs 4 to 20 mA 4 to 20 mA Pulse (0 to 48 VDC, nominal 36 VDC 100 to Dry Contact 20,000 counts/hr)

Thermocouple/milli-volt (Types B,E,J,K,R,S,T,N,W Digital Output 0 to 132 VAC output and other mV signals) (Bistable) 0 to 132 VDO RTD inputs (Foxboro Types NR-226 and NR-266 0 to 10 VDC IEC platinum: nickel; and 2, 3, and 4 wire types) 10 to 50 mA with a 200 input ohm resistor Pulse Dry Contact Special 10 to 50 ma redundant design 0 to 10 VDC NA Digital Input 0 to 120 VAC NA Smart transmitters with HART communication NA protocol(The Offerer should list supported protocols)

6. I/O Density TVA is concerned about the number of points that must be forced when a single I/O card is replaced. No more than 8 points per card are allowed (4 max is preferred) to be utilized in the delivered system. Because a particular Offeror may incorporate more than 8 points in their card design, WVA will permit a larger point count card to be used, but will not permit greater than 8 points per card to be assigned. Please note that in calculating the number of spare I/O points provided, the points in excess of 8 per card will NOT be counted. In any case, each of the points on a card will be individually addressable and useable to the fullest extent.

Subsystems I/O not fully addressable and/or incapable of being individually monitored are specifically forbidden. Exceptions to this policy may be granted where the 110 count exceeding 8 points is all associated with a single function, such as the manuallautomatlc controller or is involved with redundant signals.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 49 of 440 3.2.1 Hardware Requirements for the Control System (continued)

7. Forced Inputs/Outputs or Bypass The system shall allow any input or output to be individually removed from actual scan, that is, placed In manual control, in which the point shall freeze to last value. At the users option, the point can be subsequently forced such that any digital point can be set to "on" or 'off" and any analog point can be set to any value within its defined range. This function shall be restricted to authorized users by password protection. Any point that is bypassed (frozen or forced) shall be indicated to the operator via an alarm point and engineering stations with distinctive and consistent color and/or text change to the extent that it is intuitively obvious that the indicated value is not based on live data. The operator and engineering consoles shall include the capability to list all points not in scan, which points are forced, and what values are in use by the system.

H. Installed Spare Capacity The system shall have spare capacity for future modifications. Three types of "spare capacity" are of concern: 1) the spare capacity that uses the processor memory and speed; 2) the spare 1(0 capacity and Terminating Assemblies (TA) that is immediately available for use; and 3) the spare capacity that could be used if additional I/O cards and termination space were purchased and installed.

The Offerer is responsible for ensuring that all power supplies, distributions, air conditioners, termination areas, and the like are of sufficient capacity and capability to support any given cabinet when fully populated. "Fully populated" shall refer to the cabinet in which all three types of capacity are entirely utilized.

1. Spare Processor capability - On a controller pair basis, the spare computational or control capacity at time of shipment should be at least 40 percent as determined by the most limiting factor, such as free memory, spare blocks, cycle time, or any other meaningful measure. In situations where control integrity requires additional loading, this requirement may be waived by the engineer on a Case-by-Case basis.
2. Immediately Available 110 points (wired spares, including TAs) - Only points "left over" on 110 modules after assigning the points in Appendix E or G shall be provided as wired spares.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 50 of 440 3.2.1 Hardware Requirements for the Control System (continued)

3. Future 1/O Expansion capability for the new AIR and TBBOP cabinets (added hardware) Expansion capability for a minimum of 40 % spare I/O module slots and associated field termination assembly space shall be provided. To clarify, TVA would reasonably have to procure cards, termination strips, and interconnecting cables, but would not be limited by the lack of space into which they could be mounted. Expansion by hardware population of the spare slot capacity (beyond the installed spare capacity) shall not be limited by the termination space available, air conditioning capacity, power distribution capacity, and the like, of the base system provided.
1. Start Up Spare Parts TVA intends to procure an initial stock of spare parts to be located separately in each plant's storeroom. Any TVA stocked item can be used to replace components which fail prior to release of the system for operation, or during the warranty period. A replacement part shall be replaced at no cost to WVA promptly. After reaching agreement on an appropriate maintenance agreement, the Offerer shall be responsible for ensuring the availability at the plant site, within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, of any part not stocked by WVA that fails prior to release of the system for operation, The release of the supplied system for operation shall occur at such time as the installed system is commissioned, the plant started, and TVA has verified that all contractual obligations have been met.

J. Power Supply Design

1. AC Power Distribution
a. Power distribution for the control system shall be designed such that the loss of a single ac power source will not result in the loss or degradation of system operation. A minimum of two diverse primary power sources shall be provided to critical components (such as each redundant pair of processors, I/O modules, etc.) and Operator Interfaces (such as Handstations and ODUs) of the control system.

Alarms shall be provided to identify the loss or degradation of any ac source.

b. The control system shall be designed for continuous operation when supplied with 120 VAC +/- 10 percent and 60 Hz +/-5 percent, single phase, with a harmonic content not to exceed 5 percent total and with a 10 percent peak maximum deviation from the sine wave. The control system shall be designed not to consume more than the available analyzed supply capability of plant's AC inverters. This is TVA scope of work and shall use the plant's Loading calculations along with the Offerer's power consumption specifications as the basis for meeting this requirement. This requirement must be further developed based upon actual selection of the AC power sources.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 51 of 440 3.2.1 Hardware Requirements for the Control System (continued)

c. All AC loads shall be evaluated by the Offerer to ensure proper ride through capability (no effect on system or output loads) for a complete loss of one AC source.
d. Diverse AC power sources shall be provided to the redundant processor pair of the control system such that the loss of power from any one source will not affect proper operation of the system. All AC/DC loads from the system power bus to external loads shall be fused and coordinated with upstream and downstream fuses/breakers.

Any fuse assembly shall be an indicating type, capable of actuating an alarm for remote annunciation of a blown fuse. The power distribution system shall be designed in such a manner that fuse and breaker sizing is coordinated to ensure clearing of load side faults.

2. DC Power Distribution
a. The DC distribution system shall employ redundant DC power supplies (a minimum of two per processor pair) associated with each of the two diverse AC power supply sources. Auctioneering of the supplies' outputs should be performed at the lowest level practicable (individual card, module, nest, etc.). Fault protection and detection shall be provided for the auctioneered DC power supplies. The failure of any power supply shall be alarmed. Power supply status shall be indicated on the power supply itself. The System design shall employ sufficient means to replace failed power supplies, while online, without affecting control system's operation and shall be easily accessible.
b. If the loss of the power supply to any control system inputs, control board indicators, or manual/automatic stations results in a plant trip, runback, or entry into a Tech Spec Limiting Condition for Operation, the power supplies shall be redundant.
c. Auctioneering shall be performed utilizing a sharing process and the Offerer must be demonstrate that the redundant supply is capable of carrying the system load if the first supply fails.
d. A power supply failure in the high direction shall not result in the complete loss of power.
3. Loss and Restoration of Power The control system shall be designed to meet the following requirements on the loss and restoration of power:
a. Upon the loss of one DC redundant power supply, the control system shall be capable of recognizing the failure, transferring power to prevent control system upset, and alarming both the loss of power and the corrective action taken by the control system.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 52 of 440 3.2.1 Hardware Requirements for the Control System (continued)

b. Upon the loss of all AC and/or all DC power, the output signals shall fail to zero; position actuated equipment shall be designed by others to fail to their defined design basis failure state.
c. Upon the loss of all power, the control system shall be designed so that all indicators and recorders associated with that system are readily detectable as in the failed state (ie., fail downscale).
d. Upon the restoration of power (AC, DC, or both), indication shall be provided to the main control room to indicate the restoration of power.
e. Upon the restoration of power, the actuated equipment positions shall be predictable and repeatable. Where identified in the system functional requirements, power-up initialization control shall be executed to bring plant systems to a known state.
f. On restoration of power, the system shall be capable of restoring normal operation without requiring a manual download of program from a central computer system (i.e. program must be stored within the CPU).
g. The Offerer shall be provided the momentary loss of AC power ride through time.
4. Field Supplied Loads For field supplied loads such as transmitters, the power supply arrangement shall meet the following requirements:
a. Each load shall be individually isolated such as transformer isolation so that multiple grounds on fields will not affect the control system.
b. Uses differential input design to reduce the potential for noise.
c. Shall be capable of supplying voltages required for each field load.

K. Grounding Requirements Each Rack enclosure shall have an electrical safety ground bus and an isolated instrument ground bus. A compression fitting suitable for connection to a 4/0 AWG main plant grounding cable shall be provided in the appropriate enclosures. The Offerer shall provide all engineering and materials required to ensure the adequacy of their cabinet ground system as it pertains to the installed system.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 53 of 440 3.2.1 Hardware Requirements for the Control System (continued)

All cables that are ground system related shall be clearly marked and shall be green or green with trace color. For bare copper cables, a color sleeve shall be attached at each point of connection. Color coding for separate ground systems shall be consistent and unique L. Internal Rack Cabling Requirements All cabling provided by the Offerer shall use documented cable and wiring good practices for internal panel wiring. These good wiring practices should encompass such issues as proper wire sizing associated with current loading; EMI/RFI protection by the use of shielding and proper termination, use of twisted pair wiring, enclosure protection, separation of noise generation circuit (relays),

etc.; and proper termination as specified in this specification.

1. System Cabling Interconnecting Control System rack cables, network cables, and the like shall be supplied by the Offerer.

Prefabricated cables with multi-conductor cable connectors shall be supplied to connect the control logic cabinets with each peripheral or field termination cabinet. The field end of any cable used shall be capable of being cut and re-terminated during installation or pulled through existing plant conduit.

Where prefabricated cables are furnished by the Offerer, the cables shall be terminated with the use of Cannon plugs, or approved equal. The connectors (plug and receptacle) shall have rugged metal shells or be manufactured of high-strength insulating material. When separate, the live part shall be a female contact so that shorting of pins is not possible.

Adequate cable strain-relief clamps shall be provided. There shall be no exposed live parts on the rear of the plug. An environmental seal is preferred. The plug and receptacle design shall be such that electrical contact cannot be established until the plug and receptacle are correctly aligned.

2. Cabinet Wiring All wiring shall be securely installed and neatly bundled with flame resistant, nonmetallic tie bands. All electrical connections shall be readily accessible.

It shall be possible to inspect, remove, and add connections to any device without removal of the device, mounting steel, piping, wire-ways, or tubing.

Where wiring must cross sharp metal edges, adequate protection shall be provided, preferably by Autolyze or by approved grommets. In addition, each device shall be removable without disturbing other devices, mounting steel, etc.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 54 of 440 3.2.1 Hardware Requirements for the Control System (continued)

All terminal points shall be clearly and permanently labeled and conveniently located. All terminal points shall be clearly labeled in accordance with the Offerer's wiring drawings, which shall contain physical location by cabinet, rack, terminal block, and terminal.

Offerer factory wiring shall all be terminated on the same side of the terminal block or column of terminal blocks. All electrical connections between cabinets shall be by Offerer supplied prefabricated cables. Prefab cable plugs shall be keyed.

The Offerer shall segregate by voltage level all terminal blocks for internal wiring and field cable connections. The Offerer shall make provisions for terminating and grounding individual shield and overall cable shield wires for all analog inputs. Provisions for powering of interposing relay coils shall be the responsibility of the Offerer.

High density I/O termination panels or blocks are not acceptable. The intent is to provide ease of installation and maintenance of the system.

3. Fiber Optic Media All fiber optic cable used in Class I structures shall meet the requirements of UL 910 and iF_2 383. This cable should also meet the requirements for multimode, tight buffered fiber optic cable suitable for broadband transmission of video, audio, and data signals and be suitable for indoor or underground conduit installation in wet or dry locations.In addition, plastic fiber optic cable is not acceptable. Metallic or conductive coverings, strength members or fibers shall not be used.

M. Fusing TVA shall ensure all fusing shall be coordinated with upstream and downstream protective devices. The Offerer shall provide a fuse list with manufacture and part number. Output fuse protection shall be replaceable without affecting other control outputs mounted on the same circuit card. i.e., fuses should be replaceable without unplugging cards from the system.

3.2.2 Critical Control System Signals A. Critical Control System Signal Definition The definition of whether a control system is critical or non-critical is provided in the system functional requirements defined in Sections 4 through 12.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 55 of 440 3.2.2 Critical Control System Signals (continued)

B. Protection/Control System Interaction The control system's signals shall use input signal validation such as median signal selection in order to meet the "Single Random Failure" requirements of IEEE 279 1971, Section 4.7.3. These requirements are defined in Sections 4 through 12 below.

C, Control System Segmentation The following control systems segmentation shall be maintained by implementing in different control processing pairs with no dependencies between the different control processing pairs. The following provides initial guidance/requirements for functional groupings assignments for the different control processor pairs. (Meeting this criteria may require reassignment of field cables to different racks)

1. SG Level Control shall be divided up by loops, one control processor pair per loop.
2. Condenser Dumps and Atmospheric Dumps valve controls shall be separated.
3. Pressurizer Pressure channels for each PORV shall be separated.
4. Pressurizer Pressure channels for each Spray Valve shall be separated
5. A control processor pair failure (all outputs failing open, closed, or as is) shall not cause the following:
a. More than One SG Level control valve failing open;
b. Greater than a 10% increase in steam flow (Condenser and/or Atmospheric Steam Dump valves failing open);
c. Both Pressurizer PORVs failing open or closed (Block valve controls outside of the C&MS are diverse from PORV controls);
d. Both Pressurizer Spray Valve failing open or closed (Spray isolation valve controls outside of the C&MS are diverse from the spray valve controls);
e. Total loss of both letdown paths;-
f. Loss of CVCS flow to the Reactor Coolant Pump seals;
g. Total loss of CVCS makeup capability for Pressurizer Level control and Boron and Dilution control;

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 56 of 440 3.2.2 Critical Control System Signals (continued)

h. Total loss of Pressurizer heater control; The following table summarizes these segmentation requirements.

Function Controller Assignment Each SG level One controller pair per Steam Generator Rod Control One controller pair Steam Dump to Atmosphere One controller pair per dump valve Steam Dump to Condenser One controller pair Pressurizer Pressure and Level, Charging, Two Controller Pairs Letdown D. Automatic Signal Selection A major responsibility of the control system is to ensure the signals it uses for critical control functions are valid. To achieve this objective, three physically redundant inputs shall be supplied to the system for each critical control signal or two redundant inputs with a 3rd coorelated input to be used as a voter. The control system shall employ signal validation such as medium signal selection technique which automatically selects the middle input signal for control use.

This control signal transfer upon 1 input failure will occur in such a manner that plant control and signal indication shall continue uninterrupted or un-affected.

When an input failure occurs, the control system shall be required to perform an I automatic signal selection between the remaining two valid signals. This selection may be based upon a comparison to another input that is representative to the remaining two inputs or could be based upon other techniques such as abnormal rate of change (an out of range condition), use the average of the remaining two inputs, etc. Another option would be to place the control system in manual. All other requirements given for operation with three signals apply. The Offerer shall recommend the best control technique based on operating experience.

If an auctioneered High or Low technique is used, validation of each individual input shall be performed to detect gross type failures in the critical direction such as an input failure high in an auctioneered High selection.

If only 2 inputs exist, a validation technique using the independent voter input shall be used.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 57 of 440 3.2.2 Critical Control System Signals (continued)

The Engineering Workstation and/ or Operator Console can be used to meet the following requirements except where noted, When any one of the redundant signals deviates from the other two by a predetermined amount, it shall be alarmed (plant annunciation) and identified to the operator as to which signal has failed. The control system shall also indicate which of the input signals is being used for control.

The Engineering Workstation can be used to meet the following:

1. All inputs shall be internally monitored for quality. A point shall be considered POOR if it is outside a predetermined range. If a computation is

- based on a POOR input, then the computed output shall also be considered POOR. If a computation is the result of multiple POOR inputs, then the computed output shall be considered BAD. A POOR quality input, substitute input, failure of a drop, failure of any communications network, a BAD Output, etc. shall never cause misoperation but shall transfer all affected loops to manual or to a "safe" position as approved by TVA. These problems shall be alarmed.

2. The automatic signal selection feature shall be capable of being bypassed.

This bypass function shall also provide for a manual selection of any one of the three signals for control and indication. The failed signal identification feature shall remain operational even when the automatic signal selection function is bypassed.

E. Signal Validation Failure The automatic signal selection feature itself shall be designed in a fail/operative manner;, i.e., the control signal used prior to the failure of the signal selection function shall be retained during and after the failure of the selection functions.

In addition, no failure of this feature shall disable its bypass capability. The Engineering Workstation and/ or Operator Console can be used to meet the following requirement. Alarms shall be provided to indicate when the automatic signal selection feature has failed.

F. Non-critical Control Signals Input parameters that are classified as non-critical do not require multiple inputs for any given parameter. TVA shahl identify any exception to this statement.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 58 of 440 3.2.2 Critical Control System Signals (continued)

G. System Hazards Analysis The Offerer shall perform a qualitative reliability analysis of the control system.

Using a Failure Analysis technique such as a Failure Modes and Effects Analysis (FMEA) or a Fault Tree Analysis (FTA), the analysis shall identify credible failures and the consequences of these failures related to the ability of the control system to perform as designed. In those cases where a credible failure could result in degraded performance (ie., failure to provide automatic control) of the control system, the expected effects of this degraded performance on plant operations shall be identified by the Offerer and evaluated and resolved (fixed or accepted) by TVA. The results of this study shall be displayed in a table (preferred), chart, or other format as appropriate.

Some of the most important objectives of the failure study include:

9 Identification of Single Points of Failure; w Identification of weak points and hazards in the design; N Assistance in selecting design alternatives that can provide greater system reliability; a Assurance that credible failure modes are identified and their effects on operation of the replacement system are considered; and N Documentation of the relative importance of identified failure.

1. Failure Modes The failure study shall be an integral part of the design effort and shall be performed early in the Offerer's design effort. The study shall be periodically updated to reflect changes in the design of the replacement system. The failure study shall consider as a minimum the following failures:
a. Single failure of each AC and/or DC power supply feeding the replacement system
b. Single element failure - The failure of a single element or component of the control system. Single elements include but are not limited to control processors, memory units, data highways, I/O modules, software, and other elements that are integral to the control function.
c. The following shall address the C&MS failure response to a multiple failures condition:

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 59 of 440 3.2.2 Critical Control System Signals (continued)

d. Automatic failure - The simultaneous failure of two or more elements such that the single or multiple automatic control features are rendered inoperable but the control output is maintained at the last known good value. For failures that operator actions using diverse instrumentation and control, the output should be positioned to the safe state. For example, diverse feedwater isolation exist that could be used to close the MFW reg valves and terminate MFW so fail as is for an Automatic failure would be acceptable.

Catastrophic failure - The total loss of both automatic and manual control capability such as resulting from a complete loss of power.

Multiple failures of inputs to the replacement system where these failures are credible due to common cause (Loss of a common input, break of a common instrument line, loss of power that feeds multiple instruments, etc.). TVA will supply input data for common cause initiator outside the control system such as power supply feeds to inputs.

2. Failure Response The system shall be designed to maintain the following minimum capabilities in the above failure modes:
a. The System shall include sufficient redundancy such that a single element failure does not affect the controlled process. Upon the failure of a single element, the transfer to the alternate element/algorithm shall be completely bumpless and automatic. Any single element failure shall be alarmed.
b. In the event of an automatic failure such as loss of a redundant pair of processors, the system shall transfer all affected control devices to hold the position of all final control devices at the position (the last good value) they occupied immediately before the failure. The operator should maintain the ability to control each final control devices if possible, without introducing single points of failure. The Offerer shall provide a detailed description of how this could be accomplished.

Note that the handstation are to be a passive failure device (output signal does not go through the handstation). Sufficient alarms shall be generated to inform the operator of the above conditions.

c. In the event of a catastrophic or total control system failure, the field actuated devices shall be designed such that every final control device will fail to a predictable and pre-defined position (TVA to define position) to maintain the plant within the protection capabilities of the plant safety related protection systems.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 60 of 440 3.2.2 Critical Control System Signals (continued)

H. Fault Tolerance The control system shall be designed such that a single fault occurring here in the system (from input to output) will not affect plant operation. This fault tolerant, 100 percent backup requirement, is required for all critical classified control and data acquisition portions of the systemr This excludes input modules (assuming independent input modules will be provided for the redundant control input signal), workstation processors (assuming a single set of electronics per ODU), and interfaces to printers.

No mechanical devices should be permitted as a mechanism to transfer information or control status between any fault tolerance coupled pair. If the Offerer is unable to comply with this, it shall be identified as an exception to the bid and the mechanical device must be automatically tested periodically.

Any control system component must be capable of being taken out of service without affecting the plant operation (hot swappable). Communication between the primary and backup controls shall allow rapid detection of a hardware or software fault in either the primary or backup system and facilitate an automatic transfer of process control to the properly operating system, if required. This transfer will occur in a defined amount of milliseconds and will be oblivious to the process control. Hot swappable does not require that any power supply be shut Off.

I. System Diagnostics Continuous, online self diagnostics, including 1/0 status and quality monitoring, shall be provided for the total system down to the individual controller module level. This shall include self check of the hardware, memory, and firmware/software. The Offerer shall describe their self diagnostic scheme in detail. Example: Each control processor shall read the input, perform the control application, and cross check the output value being sent to the final element. If the controllers disagree, they shall have the ability of diagnosing which one is at fault. Diagnostics that depend solely on individual processor self checks are not desirable. System failures detected during this system validation process shall be annunciated in the main control room via audible alarms and information made available to allow immediate response by maintenance personnel such as details of the failure displayed on the Engineering Workstation.

The distributed controllers shall include extensive hardware and software self checks, including the following:

I/O Quality

  • Input out of range
  • Computational check

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 61 of 440 3.2.2 Critical Control System Signals (continued) 0 Two way Communication check v Memory parity detection E Central processing unit bus time out a Power supply threshold checks (both upper and lower detection must be identified)

J. System Security The system must be designed for online maintenance and tuning capability. The removal of defective components for repair must not result in loss of automatic function or cause spurious control system outputs. The system must be protected from unauthorized modifications of system functional configuration by limited access through a password and key-lock security measures.

3.3 Environmental Requirements Following requirements are based upon the control system not requiring forced cooling such as cabinet fans. The equipment will be mounted in cabinets relying on natural convection ventilation. It is a reliability requirement that the control system does not require forced cooling to achieve its reliability numbers. Forced cooling will be considered and evaluated as an exception to this specification.

3.3.1 Control System Processing Instrumentation The control system shall be designed to operate in the following ambient environmental conditions. These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:

Parameter Design Range Temperature (OF) 60 - 1040 F*

Pressure (psig) Atmospheric Relative Humidity (%) 10 - 90% (non-condensing)

Radiation Background < 104 Rads (40 year Total Integrated Dose)

Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the auxiliary instrument room (Reference WBN Reference Dwg. 47E235-17)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 62 of 440 3.3.2 MCR Instrumentation The Hand stations, remote I/0, and Operator Console shall be designed to operate in the following ambient control room environmental condition. These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:

Parameter Design Range Temperature (OF) 60 - 1040 F*

Pressure (psig) Atmospheric Relative Humidity (%) 10 - 90% (non-condensing)

Radiation Background < 103 Rads (40 year Total Integrated Dose)

Applies to the ambient environment outside the Main Control Board enclosures and envelops the temperature profile for the Main Control Room(Reference WBN Reference Dwg. 47E235-16) 3.3.3 Turbine Building Instrumentation The Hand stations, remote I/O, and Operator Console shall be designed to operate in the following ambient control room environmental condition, These are general requirements; therefore, when applicable plant specific requirements are available or are more stringent, they should be followed:

Parameter Design Range Temperature (OF) 40 - 120 OF*

Pressure (psig) Atmospheric Relative Humidity (%) 10 - 90% (non-condensing)

Radiation Background < 103 Rads (40 year Total Integrated Dose)

Applies to the ambient environment outside the system cabinets and envelops the temperature profile for the Turbine Bldg (Reference WBN Reference Dwg. 47E235-20 thru 22)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 63 of 440 3.4 Man Machine Interfaces 3.4.1 Control/Handstations A manual control interface shall be provided for devices listed in Appendix F that are controlled by the automatic control system to allow for operator control. The manual system shall be sufficiently independent of the automatic system to preclude any single failure from rendering the automatic control system inoperable. The automatic system shall provide for a bumpless transfer from either manual to automatic control or automatic to manual. This means that the system shall be designed such that any portion of the system can be transferred from automatic to manual and from manual to automatic without any manual balancing and without any system disturbances (bumpless transfer). The method of bumpless transfer shall be determined on a loop by loop basis.

The operator interface shall be through both "hard" manual/automatic stations and through flat panel displays (described below) located on the main control board.

The Stations shall allow positioning of the devices through the control system. The stations shall be passive from a failure aspect. A failure of the station shall not affect the automatic controls. The station's displays shall be capable of providing analog type Indications with up to three variables displayed such as (1) Output demand; (2)

Setpoint; and/or (3) Deviation. If the indication is digital, all parameters should be configurable with respect to specific input parameters and the parameters shall be displayed in engineering units.

The standard manual stations shall have individual controls (as specified in Appendix F) for the automatic/manual control mode selection, setpoint adjustment, and controller output adjustment. At a minimum, the stations shall replicate the existing stations' functions. The manual control for the output demand shall have two programmable speeds, a fast and a slow. The manual/automatic Handstations shall be capable of removal for maintenance without interrupting the automatic control system. The handstation should fit within the existing cutout (size is equal to or smaller). A handstation that fits within the existing cutout without Main Control Board modifications will be viewed as a positive attribute. A handstation that does not require a power source is a positive attribute. See Appendix F for an example for possible implementation.

The conceptual design of the manual control stations shall be submitted for review and approval by TVA. This review will be to WVA Human Factor Standards and Operations Review.

3.4.2 Indicators Any replacements will be TVA scope of supply.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 64 of 440 3.4.3 Non-Linear Indicators Any Indicator that has a non-linear scale such as a square root scale for flow shall be replaced with a linear scale with the linearization being performed within the software.

Any existing computer points shall be evaluated to determine where linearization is to occur, ICS or the control system. All flow indicators shall have a low flow cutoff to prevent indicator readings below zero due to input uncertainties. The low flow cutoff shall be disabled on gross transmitter input failures so that the transmitter failure is identifiable.

3.4.4 Engineering Workstation The Offerer shall provide an engineering workstation for WBN 2 to allow the user to design, configure, monitor, tune, document, and trouble shoot the process activities and the control system. The engineering console will be a permanent installation that is connected to WBN 2 only to fulfill cybersecurity and unit control requirements derived from GDC 19. The Engineering Workstation shall be an independent drop on the control network. The control system shall be capable of online tuning and troubleshooting from the Engineering workstation. The workstation shall be provided with features to prohibit unauthorized access to means for changing the system configuration. Isolation to protect other components from workstation failures shall also be provided.

The Engineering Workstations will be located in the Aux Instrument Room to provide capability of maintenance and troubleshooting. The Engineering Workstation can be a rack mounted type but must support use in a seated position (TVA to approve final layout). Assess to Engineering Workstations shall be secured such as a lockable cabinet.

The hardware associated with each engineering console shall consist of the following items, as a minimum: One console with Operational Display Unit (ODU), one operator keyboard, one trackball pointing device, associated processors, memory, communication links, and ancillary hardware. The Lead Electrical Engineer shall have the right to determine adequacy. This determination shall be made not later than the hardware freeze date.

The engineering console shall be capable of modifying existing HMI displays, creating new displays either from scratch or by editing existing displays, and downloading them over the data network to the appropriate storage location. The engineering console shall be capable of performing these functions with the plant operating and with no degradation of the on-line control and monitoring functions of the Control System. All devices and/or software utilized by the Offerer's factory personnel to assist in display building shall be provided at no cost to TVA. The graphics pages shall have the same aspect ratio and colors when viewed on either the operator's console or the engineer's console. TVA prefers that the engineer's screen and the operator's screens be as identical as possible.

Upon request, at least the following listed information shall be printed on any linked printer from any Engineering Workstation:

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 66 of 440 3.4.4 Engineering Workstation (continued)

A. Current alarm review - A list identifying all points that are currently in the alarm state by complete alarm condition description.

B. Bad input list - A list of all inputs that are currently declared to be not "GOOD".

C. Deleted input list - A list of all inputs that are currently deleted from scan, that is that have been placed into Manual control.

D. Alarm check delete list - A list of all inputs and computed variables that are currently inhibited, that is, deleted from alarm limit checking including alarms that have been cut out.

E. Substitute value list - A list of all inputs with substitute values inserted, that is that have been placed into Manual control with a manually entered value.

3.4.5 Development System The Offerer shall provide a stand alone development system for off line controls and graphics development. This system will not be connected to the plant system. The development system shall be capable of I/O simulation.

3.4.6 Operator Console In addition to the manual/automatic handstations mounted on the main control boards, the control system shall include two ODU based operator's console in the MCR. Each ODU shall have a physical cursor control (e.g, trackball, mouse, etc.) capable of calling up programmed displays and providing backup control of critical functions. The console shall provide the capability for displaying customized, dynamic, color graphics of the processes, data trending, event logging, alarm priority levels, and data storage and retrieval. A keyboard port shall be provided for each ODU to support maintenance activities.

In addition, the console shall provide "soft" manual control of the process through the use of the physical cursor control. The size of the ODUs shall be defined based upon space limitation of Main Control Board (minimum size of 19 inch flat panel display required, 20 inches preferred and shall be quoted).

The Operator Console shall have an independent set of Operator Console electronics and associated hardware with redundant connection to the unit network. Each Operator Console shall be capable of supporting one or two ODU monitors, an operator keyboard, and up to two printers while providing access to the entire unit database Cursor controls shall require two actions such as select and acknowledge.

The Offerer shall supply the minimum expected life time for the LCDs.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 66 of 440 3.4.6 Operator Console (continued)

As part of a option to be bidded, please provide the costs of implementing for: 1) Two 19 inch ODU's for installation in the Main Control Room with supporting graphics that would provide information associated with the primary side functions such as RCS, CVCS, SI, RHR, etc.; and 2) Two 19 inch ODU's for installation on TBD with supporting graphics that would provide information associated with the BOP functions.

ODUs shall be free of software issues such as memory leaks, processor lock up, etc.

Work arounds such as periodic reboots are not allowed. ODUs shall have a displayed heartbeat (approximately a 2 to 5 second period) for detection of processor lock up.

3.4.7 Graphics A. Graphic Displays Configuration The design, coordination, implementation, programming, and testing of all displays shall be the Offerer's responsibility. This shall include, but not be limited to, navigation displays, process mimics/faceplates, interlock help displays, system status displays, control loop status displays, diagnostic displays, alarm summary displays, and trend displays as defined elsewhere in this document. TVA shall make available experienced operators to perform operational review of display elements, display organization, color coding, and navigation. Such review shall be completed by the end of the project's engineering phase. WA shall also make available applicable system operating procedures (from WBN 1) for plant systems involved in this design.

B. Graphic Display Types

1. Navigation (Menu) displays - Navigation displays help the operator in locating specific graphics for control or monitoring. In addition to the main navigation displays, every graphic should contain navigation aids to assist the operator.
2. Process Mimic I Faceplate Displays - Process mimic and faceplate displays are P&ID and single line schematics showing the different plant systems with associated data (status of active components and indications of flows, temperatures, pressures, levels, etc.). From the process mimic the selection of a control action calls a faceplate which graphically replicates a hand station.
3. System Status Displays - The system shall be provided with ODU graphic displays to permit the monitoring of system components, peripheral devices and communication circuits. Information shall be provided to the individual component level utilizing the system diagnostic capabilities. From these displays, the engineer shall be able to restore system communications, mark Control System devices in or out of service, and generally monitor the conditions of each piece of hardware included in the system.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 67 of 440 3.4.7 Graphics (continued)

4. Alarm Summary Displays - Alarm summary displays provide the operator with information on alarm status of process points, system failures, etc. The alarm message shall be a single line description of the alarm condition for each alarm on the ODU. The operator shall not require any index or decoding to understand the nature of the alarm nor the point in alarm. A point tag blinking as the sole indication does not constitute acceptable alarm notification.
5. Trend Displays - Data Trending - The plant operators shall be provided with several means to monitor the time varying trends of plant data. System data, whether scanned or computed, shall be available for trending on any ODU and sent to a printer for hard copy. Trend displays shall be provided such that the operator can call any of these displays and view all or part of the last one hours values with a minimum resolution of 15 seconds, The operator shall be able to pan forward and backward in time (minimum of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />) and zoom to a shorter time period display or value range display.

These displays shall include values versus time or other values. SPECIAL CONSIDERATION shall be given in order to provide the minimum of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of past data on all trends regardless of resolution. The Operator shall have the ability to independently rescale the range of the process variables being monitored.

C. Color Convention All ODU based displays proposed for the Control System shall be in accordance with TVA Design Standard E18.1.24, except as noted below. The color and display conventions below are intended to ensure that the Control System displays are similar to the Integrated Computer System (ICS) displays. Color coding may be modified as a result of operator evaluation; such evaluation to be completed by the end of the project's engineering phase.

1. All graphics must be presented on a gray background.
2. White is used for operator prompts/static text, object outlines, bar graph outlines, etc.
3. Green is used to show valid data, de-energized equipment, closed valves, etc.
4. Red is used to show energized equipment, open valves, upper/lower alarm points exceeded.
5. Variables in alarm should change to red on a white (or light gray) background.
6. Current acknowledged alarms should be red on a black background, and unacknowledged alarms that have returned to normal should be green on a white (or light gray) background.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 68 of 440 3.4.7 Graphics (continued)

7. Current unacknowledged alarms should have a blinking background.
8. All blink rates should be at a rate of approximately once per second.
9. Blue shall be used to indicate an inoperable or out of range variable.
10. Alarm message displays should be consistent with the variable display colors.
11. Yellow should be used as a cautionary alarm color, or to indicate sub-component trouble.
12. Fully open valves should be shown as hollow red or solid red if the size of the symbol warrants.
13. Fully closed valves should be shown solid green.
14. Throttled or intermediate positioned valves should be shown with one section solid white and the other hollow white.
15. Dark blue should be used for selectable objects.

16, White should be used for static, non- selectable objects

17. White should be used for process piping.
18. Cyan is used to denote substituted data.

NOTE Even though we specified black background on displays, the Offerer shall provide a color reversing scheme to allow printing screens on a white background.

3.4.8 Alarms A. Annunciation Alarms A method of inhibiting an alarm shall be provided once it has been acknowledged to meet the annunciator black board concept and to prevent the masking of new alarms that are in the same annunciator grouping. The system shall permit the operator to inhibit alarm checking from the ODU consoles of any point in the system. The ability to prevent the operator from inhibiting alarms (via password protection, etc.) is required.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 69 of 440 3.4.8 Alarms (continued)

The control system built-in alarm system shall provide features to mitigate andlor to avoid nuisance alarms. The Offerer shall provide, with TVA guidance, an alarm implementation scheme for TVA review and approval. Appropriate front end alarm management design methods such as filtering and alarm categorization and grouping are to be implemented to prevent nuisance alarms.

B. Alarm Monitoring Requirements The ODU alarming function shall permit the assignment of each analog and contact alarm condition to a particular priority level. This feature shall display the alarm condition such that an operator can easily identify the priority level that has been assigned. Only critical alarms shall be assigned to the highest priority level. These critical alarms shall be alarmed on both the ODU and the existing annunciator panels. The operator shall be able to acknowledge both ODU and annunciator panel alarms from the operator work station. The Offerer shall be responsible for determining and coordinating with the Engineer all alarms and alarm priorities. Changes to alarms and alarm priority levels shall be made through the engineer console under password protection.

The system shall specifically provide "bad" input detection and alarming of:

1. Open thermocouple inputs.
2. Shorted resistive feedback detectors (i.e. RTD, slidewire, etc.).
3. Out of range input signal levels for analog inputs, both high and low.
4. Blown fuses for inputs and outputs (for system powered points).

3.4.9 System Printers The Offerer shall provide a quoted option for system printers as follows:

A. Alarm, log, report, text printers; one per engineering console.

B. Screen printers; one per control room and one per engineering console The Offerer shall quote floor stands and noise suppression housings separately. Each floor stand shall have provisions for storing the paper feeding to and from the printers and allow for power and signal connections.

Screen printers (color inkjet or color laser) shall be used for printing ODU displays.

These printers shall have enough resolution to accurately depict the display as it would appear to the operator or engineer on the work station consoles using the same color palette as utilized by the screen, i.e. if the screen is black background, the print out shall be black background as well, etc..

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 70 of 440 3.6 Software Quality 3.6.1 Requirements The Offerer shall meet the requirements of TVA Standard Specification SS-E18.15.01.

The standard spec classification for this control system application is critical to Plant Operation. The following section will list these requirements. The following section will refer to two different types of software. The first software type is the control system's basis software used to develop control system applications and will be referred to as Vendor software. The second type of software is the application program which is developed from the Vendor software for the specific control applications. This software will be referred to as Application software. The following requirements shall address both types of software.

The objective of the requirement of this section is to determine if there is sufficient evidence that the software will reliably perform its intended functions. The supplier shall provide the following with his bid for TVA evaluation:

A. Identify software functions required to accomplish the application.

B. Provide software documentation that these functions can be achieved by the proposed system or component.

C. Describe hardware or software features that could potentially interfere with the required functions, e.g. interrupts, diagnostics, manual inputs, h0h-essential applications programs, unauthorized program or data modifications, etc.

Describe how to system responds and recovers to each of these events.

D. Describe the software development methodology including verification.

E. Describe the validation testing scope and results.

F. Describe operating experience including the number of applications, years of service, and resolution of problems and failures.

G. Describe the software error reporting process for production version software including notification of users.

H. Describe supplier software maintenance, documentation, and configuration management processes.

The Offeror's software shall comply with SS-El 8.15.01 requirements for CPO. A review of the Offeror's program shall be performed by T'VA to ensure compliance.

The Offerer shall support his review by submittal of documentation and up to three (3) days of review on-site support.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 71 of 440 3.6.2 Software Quality Assurance Plan (SQAP)

The Offerer shall develop and submit for TVA approval their SOAP for both the Vendor and application software as required by WVA Standard Specification SS-E18.15.01. Refer to IEEE Standard 730.1-1989 for guidance for SQAP development.

3.5.3 Software Requirements Specification The Offerer shall use this Engineering Specification as the Software Requirements Specification (SRS) for the Application software.

3.5.4 Software Design Description The Offerer shall develop and submit for WVA approval a Software Design Description, which may consist of text, tables, drawings, etc., as required by TVA Standard Specification SS-E18.15,01. Graphical configuration drawings can be used to meet this requirement but must be submitted and approved by WVA.

3.5.5 Verification and Validation (V&V)

The surveillance activity identified below may include the need for TVA to access and review material that the Offeror considers to be proprietary or intellectual property. The surveillance shall occur following appropriate commericial non-disclosure agreement(s) that islare acceptable to TVA and to the Offeror.

A. Verification For the Vendor software, the Offerer shall permit WVA to conduct a surveillance activity to review its software verification process and list the internal document that implements this process for TVA's revew. For the Application software, the Offerer's and TVA's design reviews will be used to perform software verification.

B. Validation For the Vendor software, the Offerer shall permit TVA to conduct a surveillance activity to review its software validation process and list the internal document that implements this process for TVA's review. For the Application software, the testing will be used to perform software validation. This testing will consist of: 1) a comprehensive Factory Acceptance Test (FAT) performed by the Offerer and witnessed by WVA; 2) Simulator Testing performed by WVA; 3) Post Modification Testing performed by TVA with support from the Offerer.

C. Burn In Testing The complete system shall be powered up and operating (open loop acceptable) uninterrupted for a minimum of 2 weeks. Should be performed prior to FAT.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 72 of 440 3.5.5 Verification and Validation (V&V) (continued)

D. Factory Acceptance Testing (FAT)

The FAT shall be a comprehensive test that verifies all control system performance requirements, hardware and software. Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by WVA) implemented.

TVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT plans and procedures to implement the scoping document. The FAT Plan and Procedures shall be submitted to WVA for review and approval before performance. All test anomalies shall be resolved with TVA. Shipment with unresolved anomalies shall occur only with TVA's approval. The executed FAT Plan and Procedures shall be submitted to TVA for final review and approval.

E. Simulator Testing The Plant Simulator will be used to perform process control system testing. In support of this testing, the Offerer shall propose in the bid a recommended method for TVA to implement the control system upgrades into the WBN Simulators such as the Offerer providing computer system that implements the control system software and interfaces with the Simulators or directly updating the Simulators with the upgraded control system software. This should be coordinated with Section 2.2, Simulator upgrade.

F. Post Modification Testing The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support.

3.5.6 V&V Report The Offerer shall submit a V&V Report that documents design reviews and references the FAT results and vendor software V&V. All software and hardware baselines (both Vendor and application software along with needed software tools) and revision levels shall be documented in the report.

3.5.7 Software Configuration All software will be configured by the Offerer using a controlled development process with configuration controls that will provide a quality product.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 73 of 440 3.5.8 Configuration Control For both Vendor and Application software, the Offerer shall submit their software configuration control process and the internal document that implements this process for IVA's review. The Offerer shall recommend the best method for TVA to maintain configuration control of both hardware and software upon delivery and acceptance of the control system.

3.6.9 User Manuals The Offerer shall provide 5 sets of User manuals for hardware, software, and graphics application.

3.5.10 Training Training is addressed in the Training section of this specification.

3.5.11 Security Security is addressed in the Security section of this specification.

3.5.12 Software Tagging Software tagging (software point identification) convention shall be developed by TVA based upon the Offerer's software configuration capabilities.

3.6 Interface Requirements 3.6.1 Interface with Other Systems Any control system inputs that are received from safety systems shall be provided via isolators located in the safety system's enclosures (not in Non-Safety enclosures) and will be at a non-IE signal level required by the control system. To eliminate the potential for mid scale failures, analog inputs and outputs shall not represent bipolar voltage combinations, where the signal passes through zero. Signals with live zeros are recommended.

The control system will receive analog inputs from pressure, temperature, flow, and level sensors as shown in Appendix E. Signal conditioning hardware shall be included in the control system to accept a variety of input types.

Digital interfaces shall be provided for monitoring the control system inputs and outputs by the plant ICS, transient monitors, etc. Signals supplied to the ICS, indicators, and recorders shall be buffered or isolated to prevent degradation of the control system by any of the following events:

NPG Site-Specific WBN Unit 2 NSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 74 of 440 3.6.1 Interface with Other Systems (continued)

A. Broadcast Storm from ICS network B. Failure of the digital interface component directly connected to the control system C. Other credible failures identified in the Hazard Analysis (section 3.2.2.G).

3.6.2 IIO Capacity The control system shall be designed to adequately manage the minimum quantity of inputs and outputs listed in Appendix E. The capacity must include 15 percent spare capacity over the quantity given in Appendix E.

Appendix E shall be defined further by the Offerer for Wafts Bars specific needs (ie.,

alarm output functions) 3.6.3 Field Terminations The Offerer's system shall have provisions for field terminations (eg,, Termination Assemblies) for all field 110 signals. These terminations shall be provided as either hardwired, screw terminal, or plug type connections (user selectable). Field terminal points shall be designed to accommodate up to #12 AWG wiring (specific terminal point wire sizes to be determined following contract award). All thermocouple (TC) cold junction compensation shall be provided directly at the field termination area where the TC wire terminates to a non match TC metal and the Offerer should limit the number of connections (eg., a ring lug is not required for TC's) . The existing terminations of the present system shall be utilized to prevent rewiring of devices external to the control system.

3.6.4 Pneumatics Design TVA shall replace all affected 10 to 50 mA lIP and any electro-pneumatic positioners with 4 to 20 mA types. TVA shall determine the selected vendor and type.

3.7 Maintenance The equipment shall use standardized, modular, plug in construction so that any component may be easily removed from the system and replaced without breaking or making soldered connections. The number of types, kinds, categories, etc., of components shall be kept to a minimum in order to reduce the spare parts cost. The Offerer shall provide a recommended periodic replacement frequency for all provided components. Any component with electrolytic capacitors shall specifically identified along with operating and shelf life cycles.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 75 of 440 3.7.1 Troubleshooting Each module should contain both red and green status LEDs (these colors are preferred but not required). Green indicates when a module is functioning properly and red indicates failure. When detected the failed module identifier shall be displayed on the Engineering Workstation and Operator's Console and a cross reference to module type and location shall be provided.

3.7.2 Testing, Calibration, and Verification Capability shall be provided for online tuning and testing of the channels and the devices used to derive the various channel output signals. Capability to perform online self tuning shall also be provided.

The control system shall permit the administrative control (password and/or keylock) of access to all setpoint adjustments and tuning values. For configuration control purposes, it shall be possible to view the current revision level of the application software from the engineering workstation.

3.7.3 Channel Bypass or Removal from Operation The control system shall be designed to permit any input or output to be removed from operation or bypassed for maintenance or testing during power operation. The design shall provide for administrative control of the means for manually bypassing the channels. Channel bypassing shall be inhibited where bypassing would place the output of a redundant handling scheme into BAD quality (ie., one signal already in bad quality).

If a channel has been bypassed or deliberately rendered inoperable, this condition shall be available within the control system.

Channel bypass activities shall be performed from maintenance graphics screens.

3.8 Equipment Cabinets The control system shall be housed in Seismic Category I(L) cabinets. The equipment cabinets are fully enclosed with hinged access doors in the front and rear.

Offerer shall perform walkdown to determine details such as dimensions, mounting, cable entry, etc. Refer to Section 2.8.3.1 for seismic qualification requirements, Cabinet drawings and critical information such as center of gravity shall be submitted for TVA review.

A control system shall not need forced ventilation to ensure reliability. If the control system requires a ventilation system, it shall be fully 100% redundant complete with blower, inlet fihter, and controls to enhance the reliability of the equipment. However, it is deemed as not being desirable and will be viewed as an exception to the specification. If a ventilation system is furnished, annunciation on the loss of cooling air shall be provided. Temperature sensors with associated control system alarms within each cabinet shall be provided.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 76 of 440 3.9 Accuracies Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects. The control accuracy does not include errors for the time in which the system is in a non-steady state condition. Refer to Section 3.2.1 .G.3 for additional loop accuracy requirements.

3.9.1 Control System Processing Accuracies Refer to Section 3.2.1.G.3.

3.9.2 System Accuracy Requirements The overall control system's inaccuracies plus process inaccuracies shall not exceed the system accuracy requirements defined in the individual System Requirements sections.

3.10 Response Time Requirements The response time requirements for the C&MS are described in the System Functional Requirement sections of this specification.

3.10.1 Anti-Aliasing Filtering The System shall provide the capability to enable anti-aliasing filtering for all input signals of the C&MS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.

3.10.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Control System shall be as specified in the System Functional Requirements listed in Sections 4 through 12 below. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s),

and also applies to interlock and permissive signals calculated outside of but utilized within Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, and mode signals. The signals to the main control board (indication, status, and alarm/annunciators) should have a minimum update rate of 1 second unless otherwise specified.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 77 of 440 3.10.3 Communication Response Time between Control Processors For future expansion, the C&MS shall have the capability to communicate between different Control Processor pairs as specified in the System Functional Requirements listed in sections 4 through 12 below.

3.10.4 Manual Control Response The total delay for all manual component control signals of C&MS shall be no greater than 1 second.

3.11 System Acceptance Test Requirements The purpose of the system acceptance tests is to determine, and the underlying standard for system acceptance shall be, compliance in every respect with this Requirements Specification. All materials furnished and all work performed under this specification shall be subject to four acceptance tests - a Factory Acceptance Test (FAT) at the Offerer's facility prior to delivery, an EMI/RFI Test (or completion of the Sequoyah test/evaluation) prior to delivery, a Site Acceptance Test (SAT) after delivery at a staging location, and a Post Modification Test (PMT) after installation of the system. The FAT will be conducted, directed, and performed by the Offerer with TVA representatives as witnesses. The SAT and PMT will be conducted, directed, and performed by TVA representatives with full cooperation and assistance of Offerer's representatives. All tests will be of the entire system in its final configuration including the specific equipment and software to be delivered; no substitute equipment, cables, or software will be used unless approved by the Lead Electrical Engineer. TVA-supplied field cables are understood to be replaced by factory test cables for testing purposes. WVA will take measures to test the field cables in situ and confirm their continuity and attenuation.

If a test indicates the hardware or software does not meet the specification requirements, the Offerer shall replace, modify, or add at no cost to TVA any hardware, software or documentation and retesting necessary to correct the noted anomalies.

The Offerer shall submit to TVA a recommended test procedure for the FAT, EMIIRFI, and SAT. The performance of all the procedures shall verify the ability of the System to individually and simultaneously fulfill all functions and requirements as set forth in this Specification. The Offerer shall make a recommendation on what the PMT scope should be.

The Engineer will only approve the test procedure if it is inclusive and tests each segment of the system and designed function both independently and collectively. No formal testing will begin until the complete test procedure is agreed to. Each individual test procedure shall detail the purpose of the test, inputs, procedures, outputs to the achieved, and acceptance criteria. The test procedures shall include periods for unstructured exercising of the hardware and software by TVA's representatives.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 78 of 440 3.11 System Acceptance Test Requirements (continued)

Any unsuccessful Test will be repeated at least once and, if again unsuccessful, will be repeated only at TVA's option. If,for any reason, any test is stopped, TVA will determine the restart point. However, after any unsuccessful test(s), (that is, an Authorization to Ship or System Acceptance Acknowledgment, is not issued), the Offerer shall reimburse WVA $5,000 in Liquidated Damages for each occurrence. If the Tests are not successfully completed, TVA will have the right to terminate the Contract. In such event, TVA will, unless otherwise mutually agreed to by the parties promptly return the System and all System Documentation to the Offerer at the Offerer's expense and will have the right to receive prompt reimbursement of all payments made to the Offerer. Successful completion of the Acceptance Tests shall not waive, release or otherwise relieve the Offerer of any obligation or liability arising under the Contract.

3.11.1 Electro Magnetic (EMI) and Radio Frequency Interference (RFI)

EMI and RFI tests are required in accordance with WVA Standard Specification SS El 8.14.01. However, the Offerer may substitute his standard EMI/RFI test or the Sequoyah project test report, if approved by TVA.

3.11.2 Factory Acceptance Testing (FAT)

The FAT shall be a comprehensive test that verifies all control system requirements, hardware and software. Testing shall include both open and closed loop testing. This testing shall be performed with all plant specific configuration parameters (provided or approved by TVA) implemented. WVA shall prepare a FAT scoping document and the Offerer shall prepare a FAT Plan and Procedures to implement the scoping document. The FAT Plan and Procedures shall be submitted to TVA for review and approval before performance. All test anomalies shall be resolved with TVA before control system shipment.

The system hardware and software configuration tested in the factory shall be the configuration installed and tested at the site. This specifically applies to all interconnect cables. The Offerer shall insure by proper and complete tagging plus proper documentation that each and every cable connected at the site is exactly the same as was tested at the factory.

In addition to the diagnostic software required by the Specification, the Offerer shall provide all testing software and calibrated test equipment required to demonstrate the acceptable operation of all hardware units and subsystems. WVA, at its option, may use TVA's own test equipment during the test. Test software descriptions and listings shall be submitted as part of the Offerer's test procedure.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 79 of 440 3.11.2 Factory Acceptance Testing (FAT) (continued)

Tests shall include realistic message traffic on all communications networks and subnetworks. In addition, all digital interfaces to external environments such as plant computer interface shall be tested to withstand broadcast storm events without degradation in the control systems performance. Also, the control system shall be tested for broadcast storm events resulting from component failures on internal communication networks without degradation in the control systems performance.

Power failure tests shall require the Offerer to have two breakers (in the factory) for the system.

A. The Factory Acceptance Test will not be initiated by WVA until all of the following have occurred:

1. The Offerer has successfully accomplished the Burn in Testing and fully documented the test results, and TVA has been notified in writing of the successful completion of this test.
2. The Offerer has delivered to the Engineer, the Offerer's proposed complete final draft of the required System Documentation.

B. The Factory Acceptance Test shall cover four basic activities:

1. 1/0 Testing and Binary Logic Testing - Each and every Inplut and Output shall be tested for proper wiring, powering, fusing, and scaling with verification of proper operation on the operator console display. The binary control logic shall be thoroughly tested to simulate actual control loop execution to verify proper sequence of operation, correct true/false state interpretation, correct tagout response, and correct depiction of the control loop on the operator console displays. All binary control loop testing shall be closed loop simulation via the use of switches.
2. Engineering Workstations and Operator Consoles Graphic Functional Test -

Each and every graphic display shall be reviewed to assure correct display of data, paging, adherence to the design conventions, speed of response, and other elements associated with the configured operator console.

3. Modulating Control Verification - The Offerer shall demonstrate the proper operation of all modulating control loops with complete closed loop simulation via connection to the Offerers factory test simulator after the I/O is tested. The testing shall include system power failures, communication failures, and a complete restart after simulated black plant event.
4. Closed loop simulation testing - Test cases to be determined by TVA.

Upon successful completion of the FAT, TVA will issue an "Authorization to Ship" allowing Offerer to deliver the System.

Also see Software Validation Testing Section for details.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 80 of 440 3.11.3 Site Acceptance Test (SAT)

After delivery at the Installation Site, the SAT will be conducted by TVA representatives assisted by Offerer representatives. The Site Acceptance Test is intended to be a complete procedure for the Offerer's Field Service Engineer to ascertain that the system is performing as it had during the Factory Acceptance Test including correction of any punchlist items from the FAT. TVA will have the right, after notice to Offerer, to waive the SAT.

3.11.4 Simulator Upgrade and Testing System See Software Validation Testing Section for details.

3.11.5 Post Modification Test (PMT)

The Offerer shall propose technical support for startup testing and associated costs for this service. See section on Startup support. Support personnel shall be from the Offerer's design and development project team. Individuals with specialized startup support expertise can be used to augment startup support, After the Control System is installed at the plant (post Control System installation) the PMT will be conducted by TVA representatives assisted by Offerer representatives.

When the PMT is successfully completed, TVA will issue to the Offerer a dated "System Acceptance Acknowledgment."

The PMT and FAT shall provide I/O overlap testing for the control system.

3.12 Long Term Support Because of the increased probability of equipment obsolescence when using digital hardware, the Offerer must provide a commitment that system equipment will not be obsolete within the next ten years. Since portions of the system will eventually be withdrawn from sale, a firm commitment shall be required from the manufacturer ensuring that repair capability, equivalent parts and/or the withdrawn products will remain available for a minimum of ten years from the withdrawal date. If the Offerer is unable to provide the required hardware and/or software, or their support, during this period due to obsolescence, unavailability, or the like, the Offerer shall provide a like-kind replacement available subject to the approval of TVA. In any case, any substitute or upgrade shall meet the requirements of this specification both as a component and as a system.

The Offerer shall have at least 20 years experience providing control and monitoring systems to the Electrical Utility Industry. The Offeror shall provide evidence of systems experience in the Electric Utility Industry. This could take the form of reference installations that could either be visited or contacted by phone or letter, and/or by joint advertisements (with an end user).

The Offerer shall state whether or not their components are RoHS compliant and identify any components that are not compliant.

-J NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 81 of 440 3.13 Spare Parts The bidder shall submit a recommended spare parts list with the formal proposal. One spare part for each component of the control system shall be provided. Spare parts for the simulator modification shall be procured with the control system (see the Simulator section).

3.14 Miscellaneous System Requirements A. All switches and fuses must be identified with unique labels.

B. All terminals and terminal blocks shall be labeled and have screw terminal connections suitable for use with ring type lugs (see exception in section 3.6.3 for TCs).

C. All mechanical relay contacts shall be enclosed to prevent contamination.

D, Set screw connections of stranded wire less than #14 AWG are not acceptable anywhere in the equipment. Acceptable set screw connections are limited to ac power and system ground cables.

E. All materials used shall have inherent flame retardant characteristics.

F. Aluminum conductors may be used only with the TVA's written approval.

G. All bidder supplied wiring and cable shall be abrasion resistant and have non-PVC insulation and flame retardant certification.

H. Terminal lugs shall be ring tongue nylon insulated or a TVA approved equal.

1, Separate terminal blocks shall be provided for power connectors and I/O connections.

J. Internal power cabling/wiring shall be separated from IO cabling/wiring.

K. Terminals for I/O connections shall accommodate TVA's #12 to 16 AWG conductors.

L. Terminals for power connections shall accommodate the wire size appropriate for the appropriate load, but not less than #12 AWG.

M. All internal wiring for I/O shall be twisted pair and shielded to the extent feasible.

N. Equipment layout shall be such as to minimize the amount of inter-panel wiring required.

3.15 References A. Standard Specification SS-E18.14.01 R3 - "Electromagnetic Interference (EMI)

Testing Requirements for Electronic Devices"

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 82 of 440 3.15 References (continued)

B. Standard Specification SS-El 8.15.01 RI - "Software Requirements for Real-Time Data Acquisition and Control Computer Systems" C. Electrical Design Guide DS-E18.1.24 - "Human Factor Engineering Design Standard" D. WBN Design Criteria for Seismic Qualification, WB-DC-40-31.13, "Seismic Qualification of Category 1(L) Fluid System Components and Electrical or Mechanical Equipment" The above Criteria and Standards have been considered in preparing the requirements of this specification.

4.0 STEAM GENERATOR LEVEL CONTROL SYSTEM REQUIREMENTS The following sections provide general description of WBN's SGL Control Systems.

Detail information such as setpoint, scaling, tuning constants, etc. will be provide following contract award based upon proprietary conditions.

4.1 System Description The Steam Generator Level control system is composed of those controllers and associated hardware whose primary function is to regulate the flow of feedwater into the steam generator. The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation without operator intervention during all plant operating modes from approximately 0 to 100 percent power. The control system limits the water level shrink and swells during plant transient preventing an undesirable reactor trip actuation. Indicators are provided for monitoring system operation. Steam Generator level fluctuations must be limited during normal plant transients within a range which will prevent spurious reactor trips.

Computational equipment must be programmable using microprocessor-based digital hardware to optimize system response to changing process conditions, control element characteristics, and component failures. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions. A Median Signal Selector (MSS) for the steam generator level channel inputs is provided to prevent channel failures from causing disturbances in the SGL control system.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 83 of 440 4.2 SGL Control System The SGL control system includes signal processing components and controllers whose primary function is to regulate the flow of feedwater to the steam generators.

The system serves to maintain a programmed water level in the shell side of the steam generator during steady state operation, and to provide stable system operation by limiting the water level shrink and swell during plant transients to prevent undesirable reactor trip actuation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.

The flow of feedwater is regulated by throttling action of the feedwater regulating valves to maintain a constant steam generator water level and by varying speed of the main feedwater pumps to maintain a programmed differential pressure between the main feedwater header and main steam header. The feedwater regulating valve and the feed pump speed controls are complementary parts of the feedwater control system.

Primary inputs for the control system are steam generator level and pressure, pressure compensated steam flow, feedwater flow and pressure, and NIS (WBN). A median value of the three steam generator level channels is selected by the median signal selector function of the feedwater control system for Steam Generator (SG) level control input and combined with steam flow/feedwater flow mismatch signal. The steam/feedwater header differential pressure setpoint is varied linearly according to total steam flow.

4.2.1 Normal Feedwater Control Feedwater flow (FW) is controlled by the Main Feedwater (MFW) reg valve through a three-element control system. The inputs into the control system are steam flow, feedwater flow, and SG level (see Figure 4.1 of this section). Each of the four SG loops has a separate SGL control system and the SGL setpoint is determined by NIS (function of reactor power). The regulation of FW flow is aided by the use of a MFW speed control system. The feed pump control system consists of the following three interrelated parts:

A. Program differential pressure (DP) setpoint calculator which sums the four steam flows, provides the lag on setpoint changes, and contains the basic scaling adjustments.

B. The DP control which compares the steam header pressure, FW header pressure, and the calculated setpoint to determine the speed signal required (reset action is provided in this controller to reduce the steady-state operating error).

C. MFP manual-auto stations (MCR mounted one per pump) which are setup as proportion only control mode and provides the operator with the flexibility of choosing various operating modes. The capability to bias the two pumps from one another shall be provided. There is also a MFP (MCR mounted) master manual - auto station that provides simultaneous control of both MFPs.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 84 of 440 4.2.1 Normal Feedwater Control (continued)

NoI.ad CP Note1I The Stmun GeneitDr Laal Controlaflr BG2 SQ m,a nd S5Oam identical to I6 Natez, Two new input wIM be addad NoteS; Turb Impulse PmSNt* and NIS WBW9 Main Feedwater Control Diagram Figure 4.1 4.2.2 Proposal Request Digital Feedwater The Offerer shall propose Digital Feedwater System that controls feedwater from 2 to 100% reactor power. From 2 to approximately 20 % power, see the Lower Power FW Control section below. From approximately 20 to 100% the feedwater control will function as the existing control system with additional redundancy added to eliminate single failure point.

4.2.3 Automatic Low Power FW Control System (LPCS)

The Low Power Control System (LPCS) shall provide stable and robust automatic control from approximately 2% to 30% power for startup and 30% to 2% power for shutdown. There may be differences between the startup and the shutdown sequences. The Offerer shall review Plant Operating procedures and interview Plant Operators to factor in the level of required Operator actions and to what level the LPCS can be automated.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 85 of 440 4.2.3 Automatic Low Power FW Control System (LPCS) (continued)

At approximately 2% power, FW control transitions from a Startup Feedwater system (SFWS is Standby Feedwater for WBN) to MFW system. Note: The first MFPT is startup at 5% to 10% for WBN. The Low Power Control System shall automatically control the SG Level control transition from SFWS to MFW control using the Bypass control valves. It shall continue to control SG level up to the Bypass valve to Main Feedwater Reg valve swapover. At the Bypass valve to Main Feedwater Reg valve swapover transition, the Load Power feedwater control system shall provide a automatic and bumpless transfer of all 4 SG level control systems from the Bypass valve to the Main Reg Control valves. The Low power control system shall minimize the SG level shrink and swell and provide stable control. The Low power control system shall be capable of adapting to the significant flow mismatch between the Bypass control valves and the Main Reg valves. The proposed Low Power control system shall use the existing control scheme using NIS for low power operation because it is field proven and we have significant operating experience. The new auto transfer design should have significant and positive operating experience in a 4 loop Westinghouse plant. The Offerer shall submit the control system's description along with required inputs and outputs for TVA's review. The Offerer shall also submit operating experience information such as installed operating plants along with associated plant contacts.

The Operator shall be able to manually control SG Level as performed with the present system ifdesired. The Offerer shall review the existing WBN plant startup General Operating (GO) procedures (GO-3, GO-4, and GO-6) to develop the LPCS design.

nif #

P cam .... ' - L I-4f ""MV

£4',i%, I i r.".

4NEW


.- 1...

6.1 <3-" =-- =="

Figure 4.2 - Existing LPCS Design

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 86 of 440 4.2.4 Maintenance Mode (Option)

The Offerer shall provide a separately quoted option, to allow for online maintenance of the MFW Reg valves. The Bypass Reg valve shall have the ability to be placed into service to control level with the MFW Reg valve dogged and in manual. In this mode, the control system shall automatically switch control from the MFW Reg, close it down a predetermined amount while allowing the Bypass Reg valve to open, passing MFW control to the Bypass Reg valve. The Bypass Reg valve would then not only have a level input, but FW and SF inputs as well, maintaining a full 3-element mode of control for that steam generator. The MFW Reg valves then could be "parked" or placed into manual and be dogged (amount of closure is limited, opening capability is unrestricted) at that position while maintenance takes place. This transfer shall be a seamless transfer and have the proper gains already set up for that type of control. If both controllers are in automatic at the same time, the individual control systems shall not fight with each other to maintain control of level. The tuning constants for the bypass controls shall automatically change from startup conditions constants to present operating power level for optimum control.

4.2.5 Main Feedpump (MFP) Speed Controls In addition to Steam Generator Level controls, MFP speed is varied to maintain a programmed pressure differential (dP) between the Main Steam and FW headers. The speed controller continuously compares the actual dP with a programmed dP which is a linear function of total steam flow from 20 to 100% power.

4.2.6 MFPT and Standby Pump Recirculation Controls The MFPT and Standby Main Feed Pump (SBMFP) recirculation control valves (1 per pump) shall be included in the scope of automatic control system. This part of the control system does not require redundant inputs or outputs but shall have failure detection and failure mitigation protection. Each loop includes a transmitter, square root converter, annunciator bistable, indicating PI controller with MCR handstation, and 4-20 MA output signal to the lIP for the control valve. MFP A and MFP B are nondivisional powered. The pump miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-70 and -84) which modulates based upon input from the pump discharge flow element downstream of the pump discharge. FCV-3-70 and -

84 are designed to open on a Feedwater Isolation signal. The MFP minimum recirculation flow is approximately 4000 gpm (at rated speed) at a shutoff head of 2480'. However, during preoperational testing, MFP 1A exhibited high vibrational signatures at 4000 gpm recirculation flow at rated speed. Consequently, MFP 1B was not tested at 4000 gpm recirculation flow at rated speed but was tested at the lower end of the variable speed pump curve at approximately 3300 rpm and 2650 gpm recirculation. Byron Jackson has indicated that the low flow, low gpm recirculation is acceptable. Additionally, this is acceptable because extended operation of the pumps under high speed and low flow Is not expected during the life of the plant.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 87 of 440 4.2.6 MFPT and Standby Pump Recirculation Controls (continued)

The SBMFP miniflow to the condenser is controlled by an air-operated, fail open valve (FCV-3-208) which modulates based upon input from the pump discharge flow element. FCV-3-208 is designed to open on a Feedwater Isolation signal. A minimum flow of approximately 1500 gpm (vendor evaluation has determined that minimum flows as low as 1100 gpm are acceptable) will be established through the SBMFP and its related recirculation control line.

4.3 Applicable Criteria & Standards The following criteria apply to this system.

AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the feedwater Control System.

Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

WBN Design Criteria, WB-DC-40.31.13 The above Criteria and Standards have been considered in preparing the requirements of this section.

4.4 WBN System Description, System Diagrams Figure 4.1, Feedwater Pump Speed Control Logic Figure 4.2, Feedwater Low Control System Figures 4.3 through 4.9, Input Signal Validiaiton 4.5 Indicators, Status Lights. and Controls The control system shall interface with the indications, status lights and controls as shown in Appendix E.

4.6 Alarms and Annunciators The control system shall actuate alarms and annunciators as shown in Appendix E.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 88 of 440 4.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and WVA shall work together to determine how best to perform this V&V.

A. During Steady State conditions, SG level shall be controlled within a maximum of +/- 5% of the programmed level.

B. During Transient conditions, SG level shall be limited to +/- 10% of the programmed level for the following transients:

1. Transfer to main feedwater system at 2% power.
2. Turbine roll/generator synchronization between 13% to 15% reactor power.
3. Bypass to main valve transfer at approximately 20% to 30% power.
4. Turbine overspeed test at 30% power.
5. Turbine/Generator load changes of +/- 10% between 15 and 100% power.
6. Trip of one main feed pump above 85% power with a Turbine runback.
7. Condensate pressure swings +/- 75 psi.

C. During a Turbine Trip, the SG level fluctuations shall be limited to +/- 15% of the programmed level between 15 and 50% power. Based upon the SG Level Trip Time delay function along with the High-High SG level trip, deviations of greater than +/- 20% during this transient are permissible provided they are cleared within a timeframe ranging from 1 minute at 50% power to 3 minutes at 15% power.

D. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.

4.8 Specific Requirements A. The system must provide a fully automatic switch-over from the bypass valve to the main valve (and vice versa) while maintaining SG level within the performance limits specified in the previous section. Semi-automatic operation must be provided to initiate the automatic switch-over from the bypass valve to the main valve when permissive conditions are satisfied. In this mode of operation, the automatic switch-over process would be inhibited until initiated by the operator at the appropriate time during the plant startup process. All other automatic features of the system must remain functional in the semi-automatic mode.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 89 of 440 4.8 Specific Requirements (continued)

B. Individual auto/manual control stations must be provided for each main and bypass valve in the event that manual positioning is required.

C. The transition from single-element control at low power levels to three-element full power control (and vice versa) must be fully automatic within the performance limits specified in the previous section.

D. The system should provide fully automatic main feed pump speed control as a part of the integrated control system to maintain optimum controllability of feedwater flow through the control valves.

E. Individual autolmanual control stations must be provided for each main feed pump to allow manual adjustment of turbine/pump speed as required by the operator and a bias adjustment between the 2 pumps. A master auto/manual control station must be provided to simultaneously control both MFPT speeds.

F. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.

G. The system hardware must be designed to allow local manual control of pump speed.

H. Trend recording capability should be provided for any system input, output, or control parameter. Selected trending shall have an archiving storage ability.

4.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

A. The accuracy of the steam generator level signals should be "within +/- 5% of full range, with a reproducibility of +/- 1% of full range, with no heat being transferred to or from the steam generators (no-load) over the pressure range of 600 to 1100 psig.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 90 of 440 4.9 Accuracy (continued)

B. The accuracy and reproducibility of the feedwater flow signals should be within +

1% of maximum guaranteed feedwater flow at maximum guaranteed power level, over the pressure range of 600 to 1100 psig and over the feed temperature range of 300 to 500°F.

C. The accuracy of the steam flow signals should be within +/- 3 % of maximum guaranteed steam flow, with a reproducibility of +/- 1 % of maximum guaranteed steam flow, at maximum guaranteed power level, over the pressure range of 600 to 1100 psig.

D. Digital processing effects (where applicable) such as analog-to-digital conversion should not contribute any additional inaccuracies greater than 0.035% of channel span for each input and output conversion to the I uncertainties specified in the above requirements of this section.

4.10 Range Steam flow 0 to 120% of maximum calculated steamline flow 0 to 4500 KPPH Steam Pressure 0 to 1300 psig Feedwater flow 0 to 120% of maximum calculated feedwater flow 0 to 4500 KPPH Narrow Range Steam 0 to 100% SG Level Generator Water Level 0 to 233 inches (WBN)

Wide Range Steam 0 to 100% WR SG Level Generator Water Level 0 to 533 inches (WBN) - cold calibration Feed Pump Discharge 200 to 1400 psig Pressure NIS 0 to 120% RTP 4.11 Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 91 of 440 4.12 Outputs The outputs are documented in Appendix E 4.13 Proposed Signal Validation Designs Figure 4.3 Steam Generator Level Validation NR L1 NR L2 NR L3

1. Individual channel failure-alarm.
2. Two channel failure-manual hold with operator selection back to auto.
3. Three channel failure-manual hold.

Figure 4.4 Feedwater Temperatures Loop 1 Temp Loop 2 Temp Loop 3 Temp Loop 4 Temp MFW Average Temp

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 92 of 440 4.13 Proposed Signal Validation Designs (continued)

Figure 4.5 Steam Generator Wide Range Levels (no validation required) 11 1!

WR Loop I Ii WR Loop 2 I

WR Loop 3 WR Loop 4 Figure 4.6 Feedwater Flow Validation Fw F Lp 2 Fw Lip3 Fw Lp 4 FT1A FT1 B Average Averge Average t

1. Allow deviation based on channel check criteria.
2. Individual channel failure - alarm.
3. Two channel failure - manual hold SG level control.
4. Loops 2, 3, and 4 like loop I above.
5. Voter never used as output, alarm on loss of voter.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 93 of 440 4.13 Proposed Signal Validation Designs (continued)

Figure 4.7 Steam Flow Validation SFA SFB P-1-6 F

Use Average Voter voter select F(x) for deviation Derive SF from E(X) SG pressure 1078 Press 900 psig 0.5 4.5 mmph Flow

1. Allow deviation based on channel check criteria.
2. Individual channel failure - alarm.
3. Two channel failure - manual hold SG level control.
4. Loops 2, 3, and 4 use P-1-1 3, 24, 31, respectively.
5. Voter never used as output, alarm on loss of voter.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 94 of 440 4.13 Proposed Signal Validation Designs (continued)

Figure 4.8 Steam Header Pressure P-1-33 New PT New PT

1. Individual channel failure-alarm.
2. Two channel failure-manual hold with operator selection back to auto.
3. Three channel failure-manual hold.

Figure 4.9 Feedwater Header Pressure P-3-1 New PT New PT

1. Individual channel failure-alarm.
2. Two channel failure-manual hold with operator selection back to auto.
3. Three channel failure-manual hold,

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 95 of 440 4.13 Proposed Signal Validation Designs (continued)

Figure 4.10 Nuclear Instrumentation System (NIS)

N41 N42 N43 N44 MSS High Medium Select

1. Individual channel failure-alarm.
2. Need minimum channels requirements.
3. Select second highest value 4.14 Time Response 4.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the SGL Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the SGL Control System.

4.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the SGL Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within SGL Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 96 of 440 4.14.3 Manual Control Response The total delay for all manual component control signals of Feedwater Control System shall be no greater than 1 second.

4.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

4.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

4.17 Programmed Functions A. Unit to convert reactor power to level setpoint Water Level Setpoint 38%/

i 0% 100%

Reactor Power (NIS)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 97 of 440 4.17 Programmed Functions (continued)

B. Main Feedpump Speed Setpoint 225 psi dP Setpoint 45 psi

.3-0% 120%

Total Steam Flow (Rx Power) 4.18 Setpoints Variable Setting Level deviation from +/-1 to 22% of span programmed setpoint-alarm SG Level Program Level See section 4.17A MFPT Speed Program See section 4.17B All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

4.19 Requirements for Test and Calibration The SGL Control System is not a protection system, and therefore, does not require the capability of being tested at power, except as stated below.

The Median Signal Selector (MSS) provides functional separation between the reactor protection system and the feedwater control system. Therefore, the MSS must have provisions to be periodically tested at power. The testing at power will demonstrate that undetectable failures do not exist in the unit.

Although the signal selector is not considered to be part of the protection system, protection system action is dependent on the MSS having high reliability.

Reliability of the MSS must be of a level similar to that of the protection system.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 98 of 440 4.20 Requirements for Associated Equipment A. The time constant for all pressure (steam header and feedwater header) input sensors (provided by others) of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.

B. The time constant for the turbine load input sensors (provided by others) of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.

5.0 ROD CONTROL 6.1 System Description The rod control system is composed of those control functions whose primary function is to maintain the reactor coolant average temperature within an allowable deviation of the programmed reference temperature during steady state operation. In addition, the control system causes the NSSS power to follow the turbine demand in a controlled fashion during load transients. Indicators are provided for monitoring system operation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.

5.2 Rod Control System The control scheme used to position the Control Rods is dependent on reactor power level. Manual control of control rod position is used when the reactor thermal power is between 0% and 15%. Above 15% reactor thermal power, automatic control is used to position the Control Rods to maintain the average reactor coolant temperature (Tavg) within +1-3.5°F of the programmed average temperature (Tref) which is based upon plant load or Turbine impulse pressure. (Reference WBN N3-85-4001). Various average reactor coolant temperature programs have their own particular advantages and disadvantages. The following discussion indicates the considerations behind the choice of the temperature program used for the nuclear plants.

The reactor control signal consists of an error signal used to direct rod speed and position to automatically control reactor power. The two channels used to generate the total error signal are the deviation of the actual auctioneered (highest) primary coolant temperature (Tavg) from the programmed average temperature (Tref) and the mismatch between turbine load and nuclear power.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 99 of 440 5.2 Rod Control System (continued)

Maintenance of a constant average reactor coolant temperature at all power levels requires a minimum size pressurizer since the reactor coolant water mass remains essentially constant. This type of program also reduces the need for control reactivity since; in this case, the moderator temperature coefficient of reactivity does not contribute to the total reactivity balance. However, large steam pressure variation would occur over the 1 to 100 percent power range, with steam pressure being a minimum at full power and a maximum at zero power. At the other extreme, an average reactor coolant temperature program could provide a constant steam pressure. This feature would permit optimum design of the secondary system, but would involve large excursions of the average coolant temperature. This, in turn would result in large control rod reactivity demands to compensate for the moderator temperature coefficient of reactivity. The scheme would also introduce a pressurizer sizing problem since the associated reactor coolant expansions and contractions must be absorbed. A compromise between the two extreme average coolant temperature programs is therefore made. Figures 5.1 and 5.1 show the design average coolant temperature program and associated secondary steam pressure as a function of power level, respectively.

620 F Tavg 557 F 0%  % Rx Power 100%

Fioure 5.1 L_..

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 100 of 440 5.2 Rod Control System (continued) 1078 psig SG Pressure 900 psig 0%  % Rx Power 100%

Fioure 6.2 The control system is designed to automatically control the reactor in the power range I between 15 and 100 percent of rated power for the following transients:

1. +/- 10% step change in load
2. 5%/minute ramp loading and unloading
3. 50% percent step load decrease with the aid of automatically initiated and controlled steam dump.

A step load change from 90 to 100 percent power or a 5%/minute load increase to I 100 percent power must be automatically controlled without tripping the plant on nuclear power overshoot. For transients, the system is capable of restoring the average temperature to within +/-3.5 F of the programmed temperature, including a +/-

2 F instrument error and a +/- 1.5 F deadband, following load changes.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 101 of 440 5.2 Rod Control System (continued)

One average temperature measurement per reactor coolant loop is provided. This measurement is obtained by averaging the hot leg temperature (Th) measured at the inlet of the steam generator and the cold leg temperature (Tc) measured at the discharge side of the reactor coolant pump of the associated loop. All four loop average temperatures are passed into an auctioneering function which will select the highest of the four-loop average temperature (Tavg) signals. This auctioneered Tavg signal is sent to a lead/lag unit which increases the effect of the signal. A second lag is provided to filter out signal noise.

Tavg 1 + x3s Equation 5.1 (I + "C4S)(1 + c5s)

The above described signal is then compared with a reference temperature (Tref) signal (The reference temperature is a function of turbine load, as described previously). Because the steam pressure in the impulse chamber of the high pressure turbine is linear with respect to the turbine load, this pressure signal is used to generate the reference average coolant temperature (Tref). The reference temperature signal is passed through a lag before it is compared with the compensated Tavg signal. The resultant error signal is then:

I ________________

I+

Tref" - Tavg 1 Equation 5.2 I + '-2s (1+ '146)(1 + T.S)

Power Mismatch Channel This channel provides fast response to a change in load (by means of the turbine load feedforward signal) as well as control stability (by means of the nuclear power feedback signal) in cases where the moderator coefficient is zero or is only slightly negativeTurbine load (Qtu) and nuclear power (Qn) provide input to this channel.

Turbine load is represented by the impulse chamber pressure of the high pressure turbine, while the nuclear power signals are passed into an auctioneering unit which generates the highest of the four nuclear power signals. The deviation between Qtu and Qn feeds a rate/lag (impulse) unit, this creating the error signal:

(Q-Q)(1 +tis) Equation 5.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 102 of 440 5.2 Rod Control System (continued)

Because the Tavg channel provides fine control during steady state operation, the power mismatch channel must not produce a steady-state error signal. This is accomplished by the derivative action in the numerator of the transfer function which causes the output of this unit to go to zero during steady-state operation although the nuclear power and turbine load may not match exactly. A nonlinear gain function, KI, placed at the output of the impulse unit, varies the effect of this channel with larger load changes having a correspondingly larger effect. Also, since reactivity changes at low power levels have a smaller effect on the rate of change of the nuclear power level than reactivity changes at high power levels, a variable-gain function, K2, is provided at the output of the power mismatch channel. The variable gain function imposes a high gain on the power mismatch error signal at lower power levels and a low gain at high power levels. This variable gain enables the mismatch channel to provide adequate control at low power levels as well as stable operation at high power levels.

Rod Speed Control Program The total error signal (Te) sent to the rod speed program is the sum of the outputs of the two control channels described above. The dead band and lockup are provided to eliminate continuous rod stepping and bistable chattering. The maximum rod speed and the proportional and minimum rod speed bands are identical for rod withdrawal and rod insertion.

The rod speed program produces and analog signal which is translated into actual movement by means of the rod stepping mechanism. The total error signal driving the rod speed program is presented in the following equation:

T=rf I Tag I+T 3 s [ ____

Te =+Tref -Tavg - (Q-_Q.) t1 S K K 2 Equation 5.4 l+ rs (I +t 4s)(1 +Ts) ((1+'CIs) J The control rods are divided into four banks. Bank A is withdrawn first, followed in order by Banks B, C and D. Two banks operate simultaneously over certain regions to ensure adequate incremental activity worth. The control rods are driven by a sequencing variable-speed rod drive control unit. The rods in each bank are divided into two groups which are moved sequentially, one group at a time. The sequence of motion is reversible: that is, the withdrawal sequence is the reverse of the insertion sequence. The two groups of a given control bank never deviate from each other by more than one step. The variable speed sequential rod control makes it possible to insert small amounts of reactivity as needed to accomplish fine control of the reactor coolant average temperature within the +1-1.5°F temperature dead band.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 103 of 440 5.2 Rod Control System (continued)

Rod stop signals are provided to prevent abnormal power conditions which could result from excessive control rod withdrawal. Interlocks to the Rod Control System will prevent rod withdrawal in either the manual or automatic mode of operation. Rod insertion limit alarms (low and low-low) are established to ensure sufficient core reactivity shutdown margin. These limits are calculated based on the reactor power level. An increase in reactor power will cause a decrease in allowable rod insertion (i.e., rods must be withdrawn further). The unit operator will initiate boration activities after verifying the rod insertion limits are violated.

" Abnormal reactor conditions shall inhibit rod withdrawal. These conditions include 1) Power Range Nuclear Overpower, 2) Intermediate Range Overpower, 3) Overpower dT, 4) Overtemperature dT.

  • Automatic control mode shall be inhibited when turbine power is less than 15 percent.
  • Automatic withdrawal shall be stopped when Bank D rod withdrawal exceeds a preset limit.

5.3 Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)

(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Reactor Control System:

Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

These standards and criteria have been considered in preparing this specification.

5.4 WBN System Description, System Diagrams

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 104 of 440 5.4 WBN System Description, System Diagrams (continued)

TIwns Tuwbim OWN. tub Ta18g, 1"g Two Iopg V-iso hop Plnal Ni PRI NO P12 NIS PRI Nis PRc LOOP4 Pý_ P " 8"1 Loop1 Lop 2 Loop a Figure 5.3: Reactor Control Diagram

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 106 of 440 6.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position. These controls shall allow the unit operator to establish either manual or automatic control mode and manually position any Control or Shutdown Bank.

Main Control Room Indication None for C&MS 5.6 Alarms and Annunciators Main Control Room Annunciation None for C&MS 5.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-9159 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.

A. During Steady State conditions, the Rod Control system shall control Tavg to within +/- 1.5F of programmed temperature.

B. The Rod Control system shall restore Tavg to within +/- 3.5F of programmed temperature, including a +/- 2.0 F instrument error and a +/- 1.5F deadband for the following design transients.

1. +/- 10% load step change
2. 5%/minute ramp loading and unloading
3. 50% step load decrease with the aid of automatically initiated and controlled steam dump.
4. A step load change from 90 to 100% power or a 5%/minute ramp load increase to 100% power must be automatically controlled without tripping the plant on nuclear power overshoot. The nuclear power overshoot must be limited to less than 3% power in conjunction with all instrument uncertainties in the adverse direction.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 106 of 440 5.7 Performance Limits (continued)

C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.

5.8 Specific Requirements A. The system hardware must be designed with sufficient redundancy such that a single failure of any critical system component or power supply will not result in the loss of automatic functions or a spurious control output. In the event of a complete automatic system failure due to multiple processor failures, etc., the system shall be designed to fail to manual control and hold all final control devices at the position they held immediately before the failure.

B. Trend recording capability should be provided for any system input, output, or control parameter. Selected trending shall have an archiving storage ability.

5.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any irocess or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

Accuracy Requirements for Normal and Abnormal Operating Conditions The reactor control system should have control accuracy of +/- 3.5 0 F for T(avg) - T(ref) deviation and control accuracy of +/- 5.0°F for power mismatch. The repeatability of the reactor control system must be within +/- 0.5 0F.

Digital processing reliability requirements are defined in Section 3.2.1.G.3.

Demanded rod speed deviation to actual ÷/- 2 steps/min rod speed

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 107 of 440 5.9 Accuracy (continued)

The Tavg auctioneering function shall be capable of being tested at power operation.

This function provides input to the Rod Speed Control signal used in the automatic control mode. The Rod Bank Selector Switch can be placed in manual control mode during the time period needed to perform any required testing of the Tavg auctioneering function.

5.10 Range Tavg 530 to 630'F Tref 530 to 6300F Turbine impulse chamber Equivalent of 0 to 120% of maximum calculated turbine pressure load Neutron flux 0 to 120% of full power Thot leg 530 to 6500F Tcold leg 510 to 630°F StII Inputs Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.

5.12 Outputs The outputs are documented in Appendix E 5.13 Proposed Signal Validation Designs

1. The Nuclear Instrumentation System (NIS) input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest power range value.
2. The NIS input signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.
3. The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 108 of 440 5.13 Proposed Signal Validation Designs (continued)

4. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection.

NIS Ch 1 Highest NIS Channel NIS Ch 2 NIS Ch 3 1_

NIS Ch 4 3m L_

Figure 5.4 Tavg Lp 1 Highest Tavg Loop Tavg Lp 2 Tavg Lp 3 Tavg Lp 4 Figure 5.5

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 109 of 440 5.14 Time Response 5.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Reactor Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Reactor Control System.

5.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Reactor Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Reactor Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarmlannunciators).

5.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-Seconds for signals involved in closed loop control in this function.

5.14.4 Manual Control Response The total delay for all manual component control signals of Reactor Control System shall be no greater than 1 second.

5.15 Controller Reset Windup and Recovery Characteristics Not applicable - no controller 5.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 110 of 440 5.17 Programmed Functions Programmed functions used in the programmed Tref and Turbine load channel are defined in this section. Refer to the WBN Unit 2 PLS for actual values.

1. The turbine impulse chamber pressure is converted to turbine load in %. I Impulse Pressure (psig) 0% Turbine Load (%) 100%
2. The turbine load is converted to a programmed Tref as follows: I Tref (F)

A Turbine Load (%)

Programmed Tref

2. The direction of the rod motion is determined separately. The bistable (a) determining the direction of rod motion also determines the temperature error deadband and lock-up.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 111 of 440 5.17 Programmed Functions (continued) 5.18 Setpoints The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

Variable Range of Setting Rod control temperature error +/- 0.5 to +/- 20 F deadband Lockup +/- 0 to +/- 0.5F Tavg Deviation Alarm 0.5 to 10°F Tavg - Tref 0.5 to 100 F Deviation Alarm High 560 to 5900 F Auctioneered Tavg Alarm All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

WBN Unit I (post SGR) PLS

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 112 of 440 5.18 Setpoints (continued)

1. Reactor Control A. Coolant average tempeialure (progrqan)

("Y-506A, TY-O5BB, TY-5OSC, HY-505)

Selpoint tar Selpoint for full load full load T,,4 M588.2 0 F T., = $S8.&2GF

1. High limit (HY-505) 588.20 F 588.21F
2. LOW n1it 557F 5570F 3- Full power temperature 588.2 0F 686.20F 4- Hot shuldown 557*F 557'F S. Tomporature gain 0.3129171?% power 0.?9gRFi% power 6, Lag time constant 30 s*sOnds'ls 30 secondst' CTY. 505C)

B. Coolant average temperature (auctoneered)

(TY-41P)

1. Lead timr constant 40 sOcOnrds-I 2- Lag bmi constants 10. 10 seconds C. Power mrssmatch channel 1 Impulse unit time constant (JY-412C) 40 seconds:'*

P. Impulse unit non-linear gain (JY-412B) error signal at breakpoint of non-linear gain 5ep%$:.

Low gain (error signal ,2%)

High gain (error signal >2%)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 113 of 440 5.18 Setpoints (continued)

Power Mlsmatch Channel, Nonlinear GaIr 2,1 OSTA4&q 0.02 0.03

-0.6

-2.I

% a4 % PUG Load TwomA Infukin Ptamyo - % Foil Lind E~[dffM PCtHANNEL_ NoDNLJPffiaM N 2.0

  • ID a

SM., Ibw

'WMA ~

TurtijeIrw~

  • T~S~Climtnv s

{Puvmrnt Powaf)

VDniU 00.1

NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 114 of 440 5.18 Setpoints (continued)

  • 1 (Steps~ln)

Band : 2

,,1..T _ SptjO* = 32 Stepsftmin'r I II ea B. .n Minimum Speed = 8 St9pepn I

Q 0 1.0 1.5 a.0 G"F R" Spewd PrOgram 3,,.;*A 4

Rod Spoed Proara, 5.19 Requirements for Test and Calibration The Reactor Control System is not a protection system and, thus, does not require the capability of being tested at power.

6.20 Requirements for Associated Equipment A. The time constant for all pressure (steam header and feedwater header) input sensors of the Feedwater Control System shall not exceed 0.7 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.

B. The time constant for the turbine load input sensors of the Feedwater Control System shall not exceed 0.1 seconds. Inputs required to meet redundancy requirements shall be supplied by the Offerer.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 116 of 440 5.20 Requirements for Associated Equipment (continued) 6.0 STEAM DUMP CONTROL SYSTEM REQUIREMENTS 6.1 System Description The condenser steam dump control system provides for automatic operation of the steam dump valves following large turbine load reductions and reactor trips. Provision is also made for remote manual control of steam pressure.

The steam dump control system performs the following functions:

1. Permits the nuclear plant to accept sudden large load decreases without a reactor trip.
2. Removes stored energy and residual heat following a reactor trip without actuation of the SG safety valves with the plant at equilibrium no-load conditions.
3. Permits a controlled cooldown to cold shutdown.

When the turbine-generator experiences a sudden, large electrical load reduction, the turbine control valves reduce steam flow to the turbine. The reactor control system receives a signal that the turbine demand has decreased and begins control rod insertion to reduce the reactor energy output. Because the NSSS response time is much slower than the turbine response time, a large energy mismatch occurs. This energy mismatch can quickly cause a large increase in RCS temperature and result in a reactor trip due to a parameter setpoint being exceeded. The steam dump system provides an artificial load for the reactor by dumping steam to the condenser (and atmosphere, in some instances). Dumping steam supplements the turbine load to match the reactor power level, thus avoiding excessive temperature rise in the RCS.

The steam dump system has 40% steam dump capacity to the condenser (i.e., 40% of rated full load steam flow can be passed when all of the steam dump valves are discharging steam). This allows the NSSS to withstand an external load step reduction of up to 50% of plant rated electrical load (10% NSSS load step capability plus 40%

steam dump) without reactor trip or safety valve actuation.

These valves will also open under a sudden reduction in turbine-generator load (in excess of 10%) or following a plant trip.

The steam dumps are also utilized in the pressure control mode during plant startup and cooldown. Prior to synchronizing the generator to the grid, the reactor power may be increased up to 10% by dumping steam to the condenser. This will facilitate establishing the minimum turbine-generator load (5-10%) without placing a step-load demand on the reactor. The dump valves close to compensate for the steam that is admitted to the turbine. During plant cooldown, the condenser serves as a heat sink.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 116 of 440 6.2 Secondary Side Pressure Control System This section defines two secondary side pressure control systems; the NSSS Condenser Steam Dump Control System and the BOP Atmospheric Dump Control System.

6.2.1 Condenser Steam Dump Control System The 3 functions specified in the previous section use 2 different modes of control, one on Temperature Control (Tavg) and the other on Steam Pressure. The Temperature Control (Tag) mode provides the valves with 2 different input signals, a trip open signal which will rapidly open the valves, and a modulate signal which will position the valves. The Steam Pressure mode provides one type of input signal which is a modulate signal. This modulate signal will open or close the valve in 20 seconds, whereas the trip open signal will open the valve in 3 seconds. After the valve has been trip opened, it will be modulated closed.

The condenser steam dump control system will prevent the valves from either being tripped or modulated open whenever the condenser cannot accept the additional steam. The non-availability of the condenser is recognized by either high condenser back pressure or insufficient condenser cooling water (existence of an open circulating water circuit breaker, 1 out of 3 open)

The condenser steam dump system functional tasks are:

a. Temperature Control (T.v) - Control of reactor coolant system average temperature (Tavg)
b. Pressure Control - Control of steam pressure.

The temperature control mode (Tav) is commonly referred to as automatic control, with pressure control being considered as manual. A brief description of these control modes is given below. Figure 6.4 is a block diagram of the control system for the condenser steam dump valves.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 117 of 440 6.2.1 Condenser Steam Dump Control System (continued)

A. Temperature Control (Tsvg)

The measured RCS Ta.g is used as the control parameter in this mode. Figure 6.2 illustrates a program which relates Tavg to NSSS power level. To operate at a given power level, the reactor rod control system inserts or withdraws control rods to obtain a T.agwhich corresponds to the programmed Tref. The Westinghouse NSSS employs a load-follow control system. The reactor responds to turbine-generator load changes - so the reference temperature (Trf) which corresponds to the actual load is compared to Ta 8 g The resultant temperature error is used to increase or decrease the NSSS load. Operation of the reactor rod control system is simply illustrated in Figure 6.2, and is described below. Assume that the turbine-generator is operating at 100% rated load. The turbine impulse pressure corresponds to point L. This pressure signal is converted into a Tref signal which corresponds to point H. The reactor rod control system will adjust the reactor control rods until Tavo is equal to or approximately equal to Tref. Now assume that the turbine-generator load is suddenly reduced to 50% rated load. Turbine impulse pressure changes from point L to K, which causes Trf to change from point H to G. A large difference now exists between the values of Tevq (at point D) and Tref (at point G). This difference is referred to as the error signal and is used to adjust the reactor control rod position. In the assumed situation, the control rods insert into the reactor core to reduce reactor power until T3 v9 was again equal to Tref. Functional tasks performed by the steam dump system under the temperature control mode include:

1. Load rejection - Reduction in the turbine impulse pressure signal indicates the occurrence of load loss. If the load loss is greater than 10%, steam dump valves are actuated. The number of valves which open is determined by the magnitude of load loss. As Tavg approaches Tref, the valves are modulated closed. The steam dump flow reduction is as fast as rod cluster control assemblies are capable of inserting negative reactivity.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 118 of 440 6.2.1 Condenser Steam Dump Control System (continued)

A turbine impulse pressure signal is supplied to the steam dump control system to determine if a load loss has actually occurred. The signal serves as input to the tcs unit. The output of this unit goes to a bistable which, associated I + tIS with logic and interlock circuits, control the air supplies to the dump valves. The bistable setting will be such that no steam dump valves are enabled for load losses less than 10%, and all valve banks are enabled for load losses greater than 10%. The signals controlling the air supplies to the steam dump valves are interlocked such that the air supplies are blocked on low reactor coolant system temperature or if the condenser is not available. Assuming a load rejection has occurred and that the air supply to the dump valves has been enabled, the reactor coolant average temperature is employed to determine the position of the dump valves. The measured auctioneered reactor coolant average temperature goes to the ]+ 112s unit, the output of which is compared to the I + -CBS reference temperature determined by turbine load (impulse pressure).

Following a sudden load decrease, Tref is decreased, thus rapidly creating an error signal. This signal goes to 2 bistable functions which, with their associated logic, determine the positions of the solenoids that bypass the dump valve positioners. Each bistable function trips open one bank of dump valves.

The error signal is also used to modulate the valves open and Glosed through the valve positioners.

2. Plant trip - On receipt of the reactor trip signal, Ta%9 is compared to no-load Trot (point E on Figure 6.2), and the appropriate number of steam dump valves are tripped open or modulated open. The temperature error signal is used to modulate the appropriate banks of dump valves open and closed until Tavg equals Trot.

Following a plant trip as determined by a turbine trip signal, the loss of load (load rejection) steam dump control is defeated and the plant trip steam dump control is employed. The turbine trip signal enables air to be supplied to the 2 banks of dump valves. The measured auctioneered reactor coolant average I +t 12 S temperature goes to the II ++ x;s z3 unit, the output of which is compared to the no load reference temperature. The error signal goes to 2 bistable functions which, with their logic, determine the positions of the solenoids that bypass the dump valve positioners. Each bistable function trips open one bank of dump valves.

Through the valve positioners, the error signal is also used to modulate the valves open and closed.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 119 of 440 6.2.1 Condenser Steam Dump Control System (continued)

3. Quick open feature - This feature exists only in the temperature control mode during either load rejection (I) or reactor trip (2). In the event of a sudden increase in RCS Tavto above controller determined set points bi-stable switches trip open the steam dump valves. On an increase in Tavg above a controller determined Hi Tag error signal, the first two banks of dump valves are automatically tripped open. On an increase in Ta. above a Hi-Hi Tg error signal, the remaining two banks of dump valves are opened.

B. Pressure Control Main steam header pressure is the parameter used to modulate steam dump valves to maintain, or change, steam pressure. The rod control system is designed to automatically control the reactor power range between 15% and 100% of rated power and to accept the following transients without reactor trip:

a. Plus or minus 10% step change in load.
b. 5% per minute ramp load increase or decrease.

That is, the reactor power is automatically adjusted to accept these load transients without exceeding operating parameter setpoints which would trip the reactor.

When load reductions which exceed the capabilities of the automatic control system described above occur, a reactor trip will occur if provisions are not made to limit the changes in the operating parameter. This capability is provided by the steam dump system which dissipates the heat energy difference between the reactor output and that delivered to the turbine, thereby limiting heatup of the RCS.

Functional tasks performed under the pressure control mode are:

1. Maintain hot standby - The steam header pressure to be maintained constant by modulating the dump valves. Steam header pressure is used in a proportional plus integral control function to supply a modulating signal to the condenser dump valves.
2. Maintain stable primary plant condition - Turbine-generator operating procedures typically require the prompt addition of 5% to 10% of rated electrical load after synchronizing the unit to the grid. Prior to synchronizing, the NSSS thermal power level is increased to a value commensurate with the minimum electrical load. The steam dump system pressure control mode is selected to maintain stable primary plant conditions when the step load change in turbine power occurs during synchronization to the grid, after which the control is switched to the temperature control mode previously described.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 120 of 440 6.2.1 Condenser Steam Dump Control System (continued)

3. Plant cooldown - Manual adjustment of the pressure setpoint or valve position to lower pressures is employed for plant cooldown. During plant cooldown, the steam dump valves modulate to reduce secondary pressure to the manual setpoint. Since the secondary side is at saturated conditions, the temperature decreases with decreasing secondary side pressure. As the secondary side pressure is reduced, the maximum amount of steam which can be dissipated by the steam dump valves decreases. In the manual mode, the cooldown bank (the first bank of dump valves to open and the last bank to close in automatic control modes) is the only bank which can be used. This requires manually bypassing the low-low Tavg interlock. This interlock prevents excessive cooldown by blocking steam dump in the automatic modes.

C. Protective Interlocks Protective interlocks are provided to minimize the possibility of an inadvertent actuation of the steam dump system. The interlocks block the air supply to the steam dump valves, thereby preventing opening of the valves under the following conditions:

1. RCS low-low average temperature (P-1 2) - To prevent excessive RCS cooldown. A manual bypass of the interlock is provided for the cooldown valves to allow a planned, controlled plant cooldown.
2. Condenser is unavailable (C-9) - Interlocks prevent actuation of the dump valves unless condenser pressure is lower than setpoint and at least one circulating water pump is operating.

D. Steam Dump Control Signals The steam dump valves are provided with the following control signals:

1. Open Permissive Signal Signal to solenoids in the air supply line determine whether or not air can be admitted to the valve actuator.
2. Trip Open Signal An on-off signal to a solenoid (one per dump valve) bypasses the valve positioner and allows the dump valve to rapidly trip open.
3. Modulation Signal

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 121 of 440 6.2.1 Condenser Steam Dump Control System (continued)

A modulate signal is sent to the valve positioner of all 12 dump valves. When a positioner is not bypassed (i.e., the dump valve is not tripped open or locked out of control), the dump valve position depends on the magnitude of the modulate signal. The modulate signal can be derived from the pressure controller, the load rejection controller, or the reactor trip controller.

E. Handswitches

1. Mode Select Switch (HS-I-103D)
i. Reset - Going to Reset position will reset (if loss of load bistable function has reset) an "Operate/Reset" function. The Loss-of-Load function, PS-1-72E, will pick up and enable the "Operate/Reset" function. This will seal itself in and arm the "A" & "B" solenoids. The Loss-of-Load bistable function will drop out on its reset value which will then allow the "Operate/Reset" function to be reset to disarm the "A" & "B" solenoids.

ii. Tavg - This handswitch position enables the Load Rejection and Reactor trip Controllers and the Hi, Hi -Hi bistable functions. The Load Rejection controller will normally be in service waiting on the Load Rejection bistable function to pick up. Upon a reactor trip, the P-4 contacts from the "B" Train breaker positions, will provide a signal which causes the Load Rejection controller and associated bistable functions to be disabled while the Reactor Trip controller with associated bistable functions are placed in control of the dump valves.

iii. Steam Pressure - With the mode select switch in this position, the "A" &

"B" solenoids are energized and the steam header pressure controller is placed in control of the steam dump valves. The Load Rejection and Reactor Trip Controllers are disabled. The steam pressure controller receives a pressure signal from an auctioneered input of PT-1 -33 and 2 new pressure transmitters (See SGL controls). Comparing that signal to the control function's setpoint, an error signal is developed and sent to a common I/P converter to modulate the dump valves. Above Lo-Lo Tavg, all twelve dump valves are subject to modulation. Below Lo-Lo Tavg, only the cooldown valves should modulate if in Bypass. The Steam Dump will be held in pressure mode until the unit is at approximately15% load. Tavg mode will then be selected allowing the controllers for a RX trip or load rejection to be activated. Being in pressure mode controls steam header pressure to allow the dump valves to release enough steam to maintain No Load Tavg.

2. ON/OFF/Bypass Interlock (HS-1-103A &-103B)
i. ON - There are two basic conditions for Steam Dump Operation:
1. < Lo-Lo Tavg
2. > Lo-Lo Tavg

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 122 of 440 6.2.1 Condenser Steam Dump Control System (continued)

When s Lo-Lo Tavg, the "ON" position prevents energizing the "A" & "B" solenoids. When > Lo-Lo Tavg, the "A" & "B" solenoids can be armed when required

3. OFF/Reset - When HS-1-103A & -103B are selected to "OFF," contacts are closed which makes up logic in series with the arming signal logic, and prevents the "A" & "B" solenoids from energizing. Under any plant condition, turning HS 103A & -103B to off will disable the "A" or "B' solenoids, thereby disabling the steam dump system.
4. Bypass Interlock - The bypass position is used whenever the unit Tavg is s Lo-Lo Tavg. This position arms of the cooldown valves. This allows the cooldown valves to be modulated by being in Steam Pressure Mode.

F. Steam Dump Valve Grouping For operational purposes, the 12 dump valves are separated into four groups termed "banks." The valves are distributed in banks of three valves each, with the cooldown valves included in the first bank. The number of cooldown valves (3) was determined by the flow capability required to accomplish plant cooldown within a specified period. The controllers are adjusted such that the dump capacity is approximately linear with controller output. The dump valves are modulated one bank at a time. That is, the second bank does not begin to open until the first bank has received a signal to fully open, the third bank does not begin to open until the first and second banks have received a signal to fully open, etc. The sequence for closing the valves is the reverse of the opening sequence, i.e., the fourth bank to open is the first bank to close and the third bank starts to close after the fourth bank has received a signal to fully close, etc. The first two banks to modulate open are also the two banks that are tripped open first, and the last two banks to modulate open are the same two banks that are tripped open last. The 3 valves in the first bank to open are designated as the cooldown dump valves. The input ranges for modulating the dump valves are (Ref. 7.5.2):

Bank input Steam Dump Westinghouse Valve Demand ID No.

(full closed to full open)

First bank (cooldown 10-20 mA 0% - 25% PCV-507-A.B.C valves)

Second bank 20 - 30 mA 25% - 50% TCV-500-A.B.C Third bank 30 - 40 mA 50% - 75% TCV-500-D.E.F Fourth bank 40 - 50 mA 75%- 100% TCV-500-G.H,J Ref. 7.5.2 Westinghouse Precautions, Limitations, and Setpoints (PLS) for Nuclear Steam Supply Systems (NSSS).

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 123 of 440 6.2.2 Atmospheric Dump Control System (SG PORVs)

The controls for the Atmosphere Dump Valves are within the scope of the specification. Each SG has an associated Atmosphere Dump Valve that has single element (Stm Pressure) Proportional plus Integral control to maintain SG pressure at a defined setpoint. The Atmosphere Dump Valves are normally closed and start opening when the SG pressure increases above setpoint. Each Atmosphere Dump Valve has a handstation on the MCB. The Steam Pressure input signal shall have redundancy and signal validation performed such as Median Signal Selection. This control system can be disabled by a Safety Related signal that vents the air off the control valves allowing them to fail closed.

6.3 Applicable Criteria & Standards The steam dump is not essential to the safe operation of the plant; therefore, it is not designed to a safety classification. The steam dump is not required for cooling of the reactor during emergencies, as this function can be performed by the main steam safety and atmospheric relief valves.

The following criteria apply to this system.

AEC General Design Criteria (GDC) (7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (1012/67) are met by the Steam Dump Control System:

Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

The above Criteria and Standards have been considered in preparing the requirements of this section.

6.4 WBN System Diagrams Refer to the following functional Diagrams:

Figure 6.1 "Steam Dump Control PID" Figure 6.2 "Condenser Steam Dump Control Parameters" Figure 6.3 "Steam Dump Valve Solenoid Valve Arrangement" Figure 6.4 "Steam Dump Control System Block Diagram".

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 124 of 440 6.4 WBN System Diagrams (continued)

Figure 6.1

NPG Site-Specific I WBN Unit 2 NSSS and BOP Controls Specification Engineering I Upgrade Specification Rev. 0001 Specification j Page 125 of 440 6.4 WBN System Diagrams (continued)

La~

1~~

Li 0~

IL' I-LU C) z LU La)

LU NSSS POWER (Z RATED)

Li, In Lfl U)

CA ca-cc 0 50 TURBINE - GEN LOAD al (TEMPERATURE ERROR)

WHEN AT IS GREATER THAN A PRE-DETERMINED VALUE.

A SIGNAL IS GENERATED TO OPEN THE DUMP VALVES.

CONDENSER STEAM DUMP CONTROL PARAMETERS p

Figure 6.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 126 of 440 6.4 WBN System Diagrams (continued) a b a C.

-4 IS n 0 o

'a

~

a n a a ,- .~j 0

a I!! C[

a. a.

.0-s a

~.

C MI C

  • a o,.. -. 'a a

I., - a..- Sn..

  • a

-. 3

  • ala

- ~ o =

  • I- a a e I.. TI 11 a

SI-

.2i

=j M a

-C

w. C C

SM a I-Is-

.4 Figure 6.3 - Steam Dump Block Diagram

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 127 of 440 6.4 WBN System Diagrams (continued)

  • Th-fl

.1-; .- 1 LiL 4

.3-.

.4 C

1-z 0

U 0~

LJ H-all

'~~1 a

Mill-

  • jL~

A1 SUL cc CL 1-

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 128 of 440 6.4 WBN System Diagrams (continued)

Figure 6.4 - Steam Dump Detail Diagram 6.5 Indicators, Status Lights, and Controls The control system will provide a signal for MCB indication of the magnitude of the signal used to modulate the dump valves.

Main Control Room Controls Steam Dump Control Mode 3 Position Switch A three position switch on the MCB will input into the control system for the selection of the mode of steam dump control.

The switch positions are: RESET (Momentary and spring return to Tavg)

TAVG STEAM PRESS Steam Dump Control Interlock 3 Position Switch A three position switch on the MCB will input into the control system for the manual bypass of the low temperature interlock. The bypass must be momentary contact only.

The required positions are: OFF (Reset Tavg Bypass)

ON BYPASS INTERLOCK (Momentary and spring return to ON)

Manual control of the steam header pressure controller setpoint is provided on the MCB.

The control system will provide digital outputs for MCB status indication of permissive and interlock circuits C-7 and C-9 on the MCB.

The control system will provide digital outputs for MCB status indication of the bypass of the low-low T(avg) interlock (P-12).

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 129 of 440 6.5 Indicators, Status Lights, and Controls (continued)

Interlocks and Permissives nC% L, ian Ci

=M n--n I Y., Q M. +_ LU P-12 a) Blocks steam dump 2/4 low-low Tavg Protection below setpoint (redundant circuitry) b) Allows manual bypass of steam dump block for the cooldown valves only c) Defeats the manual 3/4 low-low Tavg Protection bypass of steam above setpoint (redundant dump block. circuitry)

C-7 Makes steam dump valves 1/1 time derive- Control (not available for either five (absolute redundant tripping or modulation value) of turbine circuitry)

Impulse chamber pressure (decrease only) above setpoint C-9 Blocks steam dump to Any condenser Control (not condenser pressure above redundant setpoint or all circuitry circulation water pump breakers open

i. HI and HI-HI bistable outputs are provided for both the plant trip and loss of load control channels. Each of the HI and Hi-HI bistables enables one half of the condenser dump valves to trip fully open in three seconds when the setpoint of that particular bistable is reached.

Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.

6.6 Alarms and Annunciators Main Control Room Annunciation The following conditions shall be identified to the unit operator through the annunciation system:

C-7 Loss of Load Interlock C-9 Condenser Interlock Computer Monitoring The plant process computer shall be used to monitor steam dump control information.

The plant computer shall be used to generate critical alarm conditions.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 130 of 440 6.7 Performance Limits Verifications and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing (See WCAP-91 59 for Plant Setpoint Study). The Offerer and TVA shall work together to determine how best to perform this V&V. Automatic control below 15% power is not required.

A. For a 50% load reduction, the Load Rejection Controller in conjunction with the Rod Control System must: 1) Prevent a Reactor trip and 2) Prevent actuation of the SG Safety Valves.

B. For a Plant or Turbine Trip from 100% power, the Plant Trip Controller in conjunction with the Rod Control System must; 1) Prevent actuation of the SG Safety Valves and to minimize secondary and primary transients and 2) Result in a RCS Overcooling transient where Tavg drops below XXXF or Loss of Shutdown Margin.

C. If required, WBN Unit 1 "as found data" for open loop response times (step and ramp inputs) for the existing control system shall be taken by TVA along with control system field tuned settings. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response.

6.8 Specific Requirements Design Failure Modes Inadvertent opening of the dump valves can result in a plant trip or an uncontrolled cooldown. Therefore, the steam dump valves are high quality valves structurally arranged for energize-to-open operation and fail closed on loss of air pressure or loss of signal. In addition, redundant solenoid valves are provided to vent the actuating air when a block signal is transmitted to the valve from the protection system.

Control System Segmentation The steam dump control system shall be segmented from the Steam Generator Level control system and the Rod Control System so that a failure/software problem in a single processor pair will not result in an overcooling transient as analyzed in the WBN Chapter 15 Safety Analysis such as SGL control valves failing open, Rods inserting, and Condenser Dump valves failing open concurrently. In addition, the steam dump control system shall be segmented from the Atmospheric Dump control system so that a failure/software problem in a single processor pair will not: 1) prevent at least one of the systems from operating thus protecting the SG Safety valves from opening; and 2) cause spurious opening of both Condenser Dump and Atmospheric Dump valves failing open concurrently.

Engineering Upgrade Specification Rev. 0001 SNPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Specification Page 131 of 440 6.9 Accuracy Overall channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.

The control accuracy does not include errors for the time in which the system is in a non-steady state condition. Trip accuracy includes comparator accuracy, channel accuracy for each input and rack environmental effects. Trip accuracy is the tolerance within which a comparator is guaranteed to trip and includes all instrument errors but no process effects such as flow streaming.

Accuracy Requirement for Normal and Abnormal Operating Conditions

i. Control accuracy of +/- 13.7% of total dump capacity on the basis of Tavg - Tref deviation (load rejection) and control accuracy of 7.7% of total dump capacity on the basis of Tavg-552°F deviation (reactor trip).
2. Control accuracy of +/- 25 psi on the steam header pressure.
3. Trip accuracy of +/- 4.3 0 F on the basis of Tavg - Tref deviation (load rejection) and trip accuracy of +/-2.60 F on the basis of Tavg - Tno load deviation (reactor trip) for steam dump valves tripping open,
4. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above requirements of this section.

6.10 Range Tavg 530 to 630°F Tref 530 to 630°F (Note that Tref is based upon Turbine Impulse pressure 0 - 100% = 5570F- 588.2°F)

Turbine impulse chamber Equivalent of 0 to 120% of maximum calculated turbine pressure load Steam Header Pressure 0 to 1300 psig

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 132 of 440 6.11 Inputs Reference drawings:

Westinghouse Process Control Block Diagrams 108D408-series Westinghouse Functional Diagram 5655D87-10 WBN 47W61 0-1 -series WBN 47W61 1-1 -series Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.

6.12 Outputs The outputs are documented in Appendix E Additional information for these inputs are documented in Appendix E 6.13 Input Signal Validation The Loop Tavg input signals shall be provided with high select auctioneering signal validation to conservatively control using the highest Loop Tavg value. The Loop Tavg signals shall be provided with input signal validation to prevent an input failure high from resulting in a plant transient such as rate of change detection. This is also used in Rod Control, See Section 5.13 for details Tavg Lp 1 Highest Tavg Loop Tavg Lp 2 Tavg Lp 3 -4 Tavg Lp 4

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 133 of 440 6.13 Input Signal Validation (continued)

The Turbine Impulse Pressure input which is also used to generate the Tref signal shall consist of 3 input signals transmitter will be added to provide redundancy. The average of two Turbine Impulse Pressure signals shall be used with input signal validation to prevent an input failure from resulting in a plant transient. To accomplish this, a third diverse signal that is representative to Turbine Impulse Pressure will be determined to function as a voter ifthe two Turbine Impulse Pressure signals deviate by a TBD amount. This is also used in the SGL Control System, See Section 4.13 for details For steam header pressure, provide median signal select as follows:

P-1-33 New PT New PT I MSS IF I 1, Individual channel failure-alarm.

2. Two channel failure-manual hold with operator selection back to auto.
3. Three channel failure-manual hold.

6.14 Time Response 6.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals I of the Steam Dump Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s),

and also applies to interlock and permissive signals calculated outside of but utilized within the Steam Dump Control System.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 134 of 440 6.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Steam Dump Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Steam Dump Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

6.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.

6.14.4 Manual Control Response The total delay for all manual component control signals of Steam Dump Control System shall be no greater than 1 second.

6.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

6.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 135 of 440 6.17 Programmed Functions The Plant Trip and Load Rejection Programmed setpoint functions:

LOAD HEJECTION COnRQLOLLER l0O% Stem Dump CadtI-I~ -

,0 ---------

0 -L-L 5 103 15.6 Twu*lmue Lna Spahi (Tim T.*i 'F PLANT TRIP CONTROLLER I IIWSterUw1vC4D.a$..r~" ,~;2 r

iU i

C I J I

b ThmporUt r*lraS&ip&lh T

,'w l adx '.r 6.18 Setpoints The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

Variable Range of Setting

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 136 of 440 6.18 Setpoints (continued)

Load Rejection Control Channel Temperature Error Bistables (High and High-High) 2 to 40°F Loss of Load Bistables 5 to 50%

Plant Trip Control Channel Temperature Error Bistables (High and High-High) 2 to 400 F All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpolnt can be obtained within +/- 10% of the setpoint value.

WBN UI (Post SGR) PLS

2. Steam Dumn Control A. Proportional gain in periett uf total dump capacity por 0F Loss of.Ioad-cotg.allpr (T'.*-OA) ,3;MIF Plant trp controller (TC-5.OD) 3.aIOS°,,PF

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 137 of 440 6.18 Setpoints (continued)

B_ Lead tirns ccritant (TY-500) 11 9seconds:P T1 2 C, Lag tirne constant frY-see) T13 5 3seconds"r D. Lleadwnd, steam dump controller tor loss of load (TC-500A)

E- Deadband steam durrmp cotroller for plant trip (TO -500D)

F. Hi-I (T_.,-T,) valve trip open fTB-500B)

G. Hi-2 (r*;-T.,) valve trip open (TB-0oC)

H. W-1 -T..i) valv, trip open (T.-SOCE) 15.6'F"'

1. HI-2 (- .J- v,,)

alve trip open (rB5SO5F) 11. 3T ')

.j. Header pressure controller (PC-507) sex pressure (start opening) 1092 psigl'>

proportional band (based on total condenser dump capacity) 100 psi-:

reset lime constant 180 seconds':'

K. Steam generateo iele valve contiollers (PC-516, PC-526, PC-536. PC-546) proportioral band (valve lull Arokpk) 65 psi"'

reset time constant TI, 120 seorids"'

sOl pressure (start oponing) 1125 pslg

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 138 of 440 6.19 Requirements for Test and Calibration With the exception of the Low-Low Tavg interlock, the steam dump control system is not a protection system, and thus, does not require the capability of being tested at power. The Tavg interlock is part of the protection system and must be capable of being tested at power.

6.20 Requirements for Associated Equipment Steam Dump Valves All steam dump valves should fall closed in the event of a loss of control system power.

Condenser Steam Dump Requirements and Arrangement The steam dump system uses modulating air-operated valves which fail closed in the event of loss of electrical power or air supply.

Condenser Steam Dump Valve Design Requirements All 12 steam dump valves are capable of:

1. Flow per valve at a valve inlet pressure of 900 psig and a valve outlet pressure of 250 psig - 532,170 lb/hr.
2. Maximum flow per valve at a valve inlet pressure of 1185 psig and a valve outlet pressure of 250 psig - 970,000 lb/hr.
3. Valve Trip Open Time - Going from full closed to full open, within 3 seconds after receiving a trip open signal, over the steam pressure range from 1185 psig to 785 psig.
4. Valve Trip Close Time - Going from full open to full closed, within 5 seconds after receiving a trip closed signal, over the steam pressure range from 100 psia to the main steam system design pressure.
5. Valve Stroke Time - Being modulated, with a maximum full stroke time of 20 seconds, over the steam pressure range from 100 psia to the main steam system design pressure.
6. Valve Backpressure - For steam dump flow varying between zero and full flow, valve backpressure will vary between 2 in. Hga and 250 psig.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 139 of 440 7.0 PRESSURIZER PRESSURE AND WATER LEVEL CONTROL SYSTEM REQUIREMENTS 7.1 System Description The pressurizer (PZR) pressure and water level control systems are composed of those controllers and associated hardware whose function is to maintain a programmed pressure and water level in the pressurizer during steady state operation.

The system also maintains the pressure and water level in the pressurizer within operating bounds during normal plant transients. Pressurizer pressure is controlled by use of the pressurizer spray valves, relief valves, proportional heaters and backup heaters. Pressurizer water level is controlled by means of the reactor coolant charging and letdown flows. Indicators are provided for monitoring system operation. Alarms and annunciators are provided to alert the plant operator of control system malfunctions or abnormal operating conditions.

7.2 Pressurizer Control System 7.2.1 Level Control The water inventory in the RCS is maintained by the Chemical and Volume Control System. During normal plant operation, the pressurizer level is controlled by the charging flow which is controlled by the pressurizer level controller. The pressurizer water level is programmed as a function of the Tavg. The pressurizer water level decreases as the load is reduced from full load. The decrease is the result of coolant contraction following a programmed coolant temperature reduction as the reactor power decreases. The programmed level is designed to match as nearly as possible the level changes resulting from the coolant temperature changes. To permit manual control of the pressurizer level during startup and shutdown operations, the charging flow can be manually regulated from the MCR.

A functional block diagram of the PLCS is shown in Figure 7.1, with the system setpoints listed on Table 7.1.

  • IGNAB CHARGING TvS . 7: 3 1 ) FLOW u ,CONTROL NEATR CONTROL BACKUP Figure 7.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 140 of 440 7.2.1 Level Control (continued)

The input to the level controller is obtained by comparing the measured level to a programmed reference level signal which varies as a function of Tavg. The resulting error signal generates a signal that actuates the backup heaters on high pressurizer water level and feeds a PID controller which, in turns, controls the charging flow. This controller prevents the charging flow from reacting to small, temporary perturbations while eliminating any steady-state level error. The controller transfer function is as follows:

K 22 I+ 1 +T4S T23S The output of this controller is the charging flow demand signal.

Instrumentation Details

a. Any one of the three level transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder. This same recorder is used to display a programmed PZR reference liquid level signal. The program level is a function of an auctioneered T-avg. The charging and letdown flows are to be manipulated to maintain proper PZR level.
b. The Pressurizer Level Control is divided up into two groupings, Charging Flow control and Letdown Isolation control. These two groupings are defined as follows:

I. The first grouping provides a signal to the level controller for regulating charging flow. This signal is also compared to the programmed reference level and actuates a high level alarm if the actual level exceeds the reference level. If the actual level is lower than the reference level, a low alarm is actuated.

2. The second grouping provides a signal which will actuate an alarm when the level decreases to a fixed level setpoint. The same signal will trip the PZR heaters "off' and close the letdown line isolation valves.
c. A four position selector switch on the MCB will provide four combinations of level input signals for Charging flow control and Letdown control. Boolean logic within the control system will be used to implement the control selection.
1. The AUTO position places the input selection in automatic. The Median Select function selects for control purposes the middle value of the 3 input signals.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 141 of 440 7.2.1 Level Control (continued)

2. The LT-68-339/LT-68-320 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-320 as the input control signal to Letdown Isolation controls.
3. The LT 68-339/LT 68-335 position places LT-68-339 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.
4. The LT 68-3351LT 68-320 position places LT-68-320 as the input control signal to Charging Flow controls and LT-68-335 as the input control signal to Letdown Isolation controls.

A fourth independent PZR level transmitter and control loop is calibrated for low temperature conditions. It provides level indication during startup, shutdown, and refueling operations.

A PRIM ParU PpiMz

,LIA-4 1.94-L3 L?44J.U

-- S

~j 1

Gonai 133 2

339 2

320 A

AM .....

lonkrm320

¶ l 33 5 A'..

MCI

?*46339E Vbt.

Conitral Diagram Figure 7.2a

INPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 142 of 440 7.2.1 Level Control (continued)

Figure 7.2b Charging Flow Control

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 143 of 440 7.2.1 Level Control (continued)

The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

Pressurizor Level Control A. Level program as funclion of T, 1 (TC-4128) 1 For full load T., = 588.2 62% of level (high limit) span"; (')

2. For full load T., - 586.2 59.6% of level (high limil) span'41 (*)
3. For T., =-557F 25% of level (low limit) span'4r(V)

(Program is linear frawm5571F to full load T0 .)

The actual level cart be +6.6% of level span at 62% level. A positive uncertainty is not necessary for safety analysis and, therefore, a negative pomcont of level span is not provided.

B. Low-Low level heater cutout (letdown Ono isolation)

(LB-4590 and LB-460D) 17 percent of level spin The PD Charging pump has been disabled so item C is no longer valid and has been deleted.

D. Row controller (FC-121)

I. Proportional gain 1% value demand?

% charging flow

2. Reset time constant 30 seconds
3. Low Limit (HY-121) 55 gaVmmn Table 7.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 144 of 440 7.2.2 Pressure Control During normal operation, RCS pressure is maintained by the pressurizer heater controller at or near 2235 psig, while the steady state PZR liquid level is controlled by the CVCS charging flow. When the reactor power level is less than 15 percent, the reactor is controlled manually. At power above 15 percent, the RCS controls will automatically maintain, by control rod movement, an average coolant temperature at a value which is a function of the power/load relationships. RCS temperature can also be controlled by manually moving the control rods or adjusting the chemical shim. One hundred percent power Tavg is 586.2 0 F (WBN Unit I value). In hot standby, two RCS loops provide sufficient heat removal capability for removing core decay heat even in the event of a rod bank withdrawal accident; however, a single RCS loop provides sufficient heat removal if a bank withdrawal accident cannot be prevented, i. e., by opening the Reactor Trip breakers.

Design Basis of the Pressurizer Pressure Control System The Pressurizer Pressure Control System (PPCS) maintains pressure at the set value by 4 means:

1. Spray Valves
2. Relief Valves
3. Proportional Heaters
4. Back-up Heaters Together, the heaters, spray valves and relief valves maintain the pressure at the setpoint value and present reactor trip as a result of pressure variations caused by design transients.

Description of the Pressurizer Pressure Control System Figure 7.3 is a functional block diagram of the PPCS. The PPCS setpoints are listed in Table 7.2. The pressurizer pressure signal feeds a PID controller of the following type:

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 145 of 440 7.2.2 Pressure Control (continued)

IUUENCC PIESSU*E -

SPRA1CONTROL PuO~h? MCAL MEATE t CONTROL HEATER COlTIOL POWER RELIEF VALVE CONTIOL III PMWL[ELIEF VALV[

1 2 COINTROL Figure 7.3 K21 +

1

+ T22s "12 1s Before being used for:

1. Control of the proportional heaters;
2. Control of the back-up heaters;
3. Control of the spray valves; and
4. Control of one of the two relief valves (the second relief valve is controlled from an uncompensated pressure signal)

During steady state operation, the PPCS normally controls only the proportional heaters to compensate for minor pressure fluctuations. The proportional heaters will continuously operate at a low level to compensate for the continuous spray rate (approximately 1 gpm) and pressurizer heat losses.

If the compensated error signal (P - Pr) indicates a pressure higher than a predetermined setpoint, proportional spray is initiated and will increase with the pressure until the maximum spray rate is reached. The deadband between the initiation of the proportional spray and turn-off of the proportional heaters prevents frequent operation of the proportional spray valves during minor system pressure variations.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 146 of 440 7.2.2 Pressure Control (continued)

Two power-operated, normally closed, relief valves (PORVs) begin their operation at a predetermined fixed setpoint of 2335 psig to maintain system pressure below the high pressure trip setpoint. The operation of these valves also limits the undesirable opening of the spring-loaded safety valves, which have a higher setpoint then the relief valves. If the error signal (P - P~r ) indicates a pressure lower than a predetermined setpoint, all pressurizer heaters (backup and proportional) are turned on. The setpoint is chosen low enough to prevent continuous switching of the backup heaters during small pressure variations.

Pressurlzer Prm*ue Error (PSIG)

Figure 7.4 Instrumentation Details Four transmitters provide signals for individual MCR indicators and for actuation of both low and high pressure reactor trips. These signals are isolated prior and are used for non safety related pressure control. Two of these pressure channels from the same train along with the average of the other two channels in the other train will be auctioneered using Medium Signal Selection (MSS) to provide an output to one PORV.

This same signal validation scheme will be used for the other train (See Figure EEE).

One of the output signals is used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters. The other output is used to actuate the other PORV.

Engineering SNPG Site-Specific WON Unit Upgrade 2 NSSS Specification and BOP Controls IRev. 0001 Specification Specification Page 147 of 440 7.2.2 Pressure Control (continued)

The inputs should be chosen so that it is not possible for failure of a same pressure channel to could cause actuation of both PORVs or to actuate and interlock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.

The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients. Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters.

For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure. Ifthe controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.

The upper portion of the controller's output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened. A further increase in pressure will actuate a high pressure reactor trip. A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure. A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line. This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters. This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable and Ref. 7.5.9 is met.

a. Any one of the four pressure transmitter signals along with the transmitter signal being used for automatic control may be selected by the operator for display on a MCR recorder.
b. The Pressurizer Pressure Control is divided up into two groupings, Normal Pressure control and Abnormal High control. The groupings are divided on a trained channel basis. IfTrain A (Protection I or Ill) inputs are used for normal pressure control then Train B (Protection II or IV)inputs are used for Abnormal High control. These two groupings are defined as follows:
1. The first grouping provides output signals used for control, actuating one of the PZR PORVs and controlling the spray valves and heaters.

Normal pressure control is performed by modulating and turning on heater when pressure goes below defined pressure setpoints and modulating open the spray valves when pressure increases above defined setpoints.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 148 of 440 7.2.2 Pressure Control (continued)

2. The other output is used to actuate the other PORV. The inputs to the channel selector switch should be chosen so that it is not possible for the same pressure channel to be used to actuate both PORVs or for one pressure channel to actuate and interlock the same valve.
c. A four position selector switch (XS-68-340D) on the MCB will provide four combinations of level input signals for pressure control. Boolean logic within the control system will be used to implement the control selection. The switching function will be divided up into two separate processor groups so that a single failure of a processor group will not prevent functioning of any pressure control function when demanded or result in the spurious operation of a controlled device such as a PORV.
i. The AUTO position places the input selection in automatic. When in AUTO, PT-68-323 or PT-68-340 will be selected as input to the Normal pressure control functions (Heaters, and Spray valves) and also provide control of PORV PCV-68-334 along with an interlock for the other PORV PCV-68-340A. The other two transmitters, PT-68-322 or PT-68-334, will be selected as input and provide control of PORV PCV-68-340A along with an interlock for the other PORV PCV-68-334. Each pair of transmitters will be compared to the average of the other pair using a Median Select function. See the Pressurizer Pressure Signal Validation Scheme (Figure 7.12).
2. The PT 68-340/PT 68-322 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-322 as the input control signal to PORV control.
3. The PT 68-340/PT 68-334 position places PT-68-340 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.
4. The PT 68-323/PT 68-334 position places PT-68-323 as the input control signal to Normal pressure controls and PT-68-334 as the input control signal to PORV control.
d. One pressure channel selector switch is provided in the MCR to select two of the four isolated outputs of these pressure channels.

The PZR pressure control system will maintain or restore the PZR pressure to the design pressure following normal operational transients. Pressure is controlled by a three mode controller whose output is a function of pressure error and time duration of the error. The lower portion of the controller's output range operates the PZR heaters. For normal operation, a small group of heaters is controlled by variable power to maintain the PZR operating pressure. If the controller output signal falls toward the bottom of the variable heater control range all the heaters are turned on.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 149 of 440 7.2.2 Pressure Control (continued)

The upper portion of the controllers output range operates the PZR spray valves and one PORV. The spray valves are proportionally controlled in a range above the upper end of the variable heaters with spray flow increasing as the controller signal rises. If the controller signal rises significantly above the proportional range of the spray valves, a PORV (interlocked with a separate transmitter to prevent spurious operation) is opened, A separate transmitter (interlocked also with a separate transmitter so as to prevent spurious operation) provides PORV operation for a second valve upon high PZR pressure. A signal interlock is required to open (or keep open) the PORV. The four PZR pressure transmitters are connected to three PZR vessel nozzles with channels (PT-68-322 and-323) sharing a sense line.

This sharing of a sense line is acceptable since a failure of the sense line would cause the initiation of a reactor trip signal due to low pressure exhibited at the two transmitters. This reactor trip signal initiation causes the reactor unit to achieve its safe state, thus the protective function remains operable.

f..a-W.6t Ctfl 34L 3 i AkM 8,0 Mn &M MA Aft

-1 Boom Loo d Stnes~o

~I~b Channl Sedm swfthd Pressurizer Pressure Conftrol Diagram Figure 7.5

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 150 of 440 7.2.2 Pressure Control (continued)

The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

D. Power relief valve (PCV-455A) operated on 100 pso* "*

compensated pressure signal from PB-4SSE (Lockup a 20 psi)

E. Backup heaters turned on, on cornpon-sated pressure signal (PC-455G) -25 pSiE')

(Lockup = 8 psi)

F. Power relief valve (PCV-456) operaled on actual pressure (PB-456E) 2335 psig1 4 )

(Lockup = 20 psi)

G. Power refief valve interlock (PCV-456)

(PB-457E) 2335 psigZ (Lockup -. 20 psi)

H. Power relief valve interlock (PCV-455A)

(PS-45,B) 2335 psig"'a (Lockup = 70 psi)

Table 7.2 7.2.3 Overpressure Protection System Overpressurization Events All potential overpressurization events should be considered when establishing the worst-case event. Some events may be prevented by protective interlocks or by locking out power. These events should be identified on an individual basis. If the events are excluded from the analyses, the controls to prevent these events should be in the plant Tech Specs. The system must meet the requirements of RG 1.26, "Quality Group Classifications and Standards for Water-, Steam-, and Radioactive-Waste-Containing Components of Nuclear Power Plants", and Section II of the ASME Code.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 151 of 440 7.2.3 Overpressure Protection System (continued)

Design Basis of the COMS Plant Startup and Shutdown The Cold Overpressurization Mitigation System (COMS) shall be designed and installed which will prevent exceeding the applicable Tech Spec and 10CFR50 Appendix G limits for the RCS while operating at low temperatures. The system shall be capable of relieving pressure during all anticipated overpressurization events at a rate sufficient to satisfy the Tech Spec limits, particularly while the RCS is water-solid.

The system shall have the ability to be manually armed by the operator. The arming setpoint shall be defined in the Tech Spec, and the instruments for overprotection shall be under periodic surveillance.

Description of the COMS Plant startup encompasses operations which bring the reactor plant from cold shutdown to no-load power operating temperature and pressure. To initiate heat-up, the PZR heaters are energized to begin forming a steam bubble in the PZR. PZR heatup continues until approximately 430*F resulting in an RCS pressure of approximately 330 psig. The PZR level control is then placed in Auto and the RCPs are started. Nil ductility temperature limitations of the reactor vessel, impose an upper limit of approximately 450 psig. The RCPs are started one at a time allowing approximately five minutes between each pump startup. RHR system cooling is isolated and the RCS temperature increases to 180 0 F. After ensuring that SG blowdown is in service, that one CCP is operable, and that the CRDM cooling fans are on, RCS temperature is taken to 350'F. At this point, letdown flow is maintained at less than or equal to 120 gpm. When the temperature of each cold leg is greater than 350 0 F, the COMS is blocked. The system is then taken to hot standby conditions of 557 0 F and 2235 psig. As RCS temperature increases, the PZR heaters are manually controlled to maintain adequate suction pressure for the RCPs. When the normal operating pressure of 2235 psig Is reached, PZR heater and spray controls are transferred from manual to automatic control, The SI initiation signal is automatically unblocked at 1970 psig.

Instrumentation Details The PORVs receive pressure control signals from instrumentation loops connected to the pressurizer. Wide range-temperature signals from the hot legs and cold legs of loops 1 and 2 are provided for PCV-68-340A. Wide range temperature indication from the hot legs and cold legs of loops 3 and 4 are provided for PCV-68-334. Wide range pressure and temperature signals operate the valves from the COMs instrumentation (See section 3.3.2.3). These valves have position indication in the MCR. In addition, an acoustic monitoring system is provided to indicate when a valve is not fully closed.

An alarm in the MCR indicates when either valve is not fully closed. See Table 2 for alve power supply.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 152 of 440 7.2.3 Overpressure Protection System (continued)

The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

RCS Cold Overoressure Mitigation System A. Cold Overpressure Mitigation System Setpoint Program 1UNIT!1 RCS rREAKPO1NTS, PSIG

,PORV POV-455A PonV PCV-456 (TVA Valve PCV-68-340A) (TVA Valve PCV-68-334)

(TY-413N) (TY-413P) 70 433 460 I00 436 481 150 464 515 200 488 571 250 578 696 275 641 745 30O 671 745 350 690 745 450 2335 2335

' Resistance Temperature Detector (RTD)

NOTE: The PORV setpoints In this table were developed using a methodology without consideration of instrumentation uncertainties (Reference CN-SCS-04-21, Rev. 1). TVA scaling documents which use this data to develop plant selpoinls are I -T-6B-1 B and I -T-68-438.

B. Interlocks PORV PCV-455A Overpressure Interlock (PB-403D) 0 psig to open, 1 - 20 psig to close PORV PCV-456 Overpressure Interlock (PB-405D) 0 psig to open, 1 - 20 psig to close C. Alarms PORV PCV-455A Overpressure Alarm (PB-403E) -20 psig PORV-PCV-456 Overpressure Alarm (PB-405E) -20 psig PORV PCV-455A Temperature Alarm (TB-413J) 3503 F PORV PCV-456 Temperature Alarm (TB.413K) 3500 F

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 153 of 440 7.2.3 Overpressure Protection System (continued)

Table 7.3 NormallPower Operations Design Basis of the at Power Overpressure Protection System Normal reactor operation includes both power generating and hot shutdown operating phases. Power generation includes steady-state operation, ramp changes not exceeding the rate of five percent of full power per minute, and step changes of ten percent of full power (not exceeding full power). During power operation of the reactor, the relief valves shall be designed with sufficient capacity to preclude actuation of safety valves, during normal operational transients, when assuming the following conditions at the plant (SD Ref. 7.5.57):

1. Reactor is operating at licensed core thermal power level.
2. RCS and core parameters are at values within normal operating range that produce the highest anticipated pressure.
3. All components, instruments, and controls function normally.

Overpressure protection systems which take credit for an active component(s) to mitigate the consequences of an overpressurization event should include additional analyses considering inadvertent system initiation/actuation or provide justification to show that existing analyses bound such an event.

Description of the at Power Overpressure Protection System The PZR heaters are controlled by a PID controller which receives input signals from PZR level, PZR pressure instruments, and the MCR. The control heater and each of the three backup heaters have their own control loops. Two backup heater groups will be provided with on-off control via selector switch. The control is provided from outside the MCR and duplicates MCR functions. The backup heaters are turned on when the PZR pressure controller signal demands approximately 100% proportional heater power. In addition, there are interlocks that block the automatic turn-on of the heaters by the pressure control system when a low water level exists to prevent heater burnout. The heater groups are connected to separate buses, such that each can be connected to separate diesels in the event of loss of offsite power. All heaters are automatically deenergized by an SI signal or a blackout (6.9kV shutdown board loss of voltage). After SI reset and PZR level recovery, one backup heater group would operate automatically. The other two backup heater banks and the control bank would not come on automatically but are manually activated. In the event of a loss of offsite power and an SI signal, two backup heater groups rated at 485 kw each can be manually activated by the handswitches in the MCR, 90 seconds after emergency power becomes available. Emergency power is available to heaters required for maintaining natural circulation in a hot standby condition.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 154 of 440 7.3 Applicable Criteria & Standards The following design criteria contained in the AEC General Design Criteria (GDC)

(7/10/67) document or as revised in the Atomic Industrial forum Comments of the forum Committee on Reactor Safety (10/2/67) are met by the Pressurizer Level and Pressure Control Systems:

Criterion 11: Control Room Criterion 12: Instrumentation and Control Systems Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

The above Criteria and Standards have been considered in preparing the requirements of this section.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 155 of 440 7.4 WBN System Description, System Diagrams Figure 7.6 - Existing Pressurizer Level Control LEnM~T VLUi:UN

NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 156 of 440 7.4 WBN System Description, System Diagrams (continued)

Paa  ; a 2 A

....................... NO2 2223 A a Lqw~

.0 AOt ~ wonlis 222 )3N 22 AMs Seecof thre Sic Pressurizer Pressure Control Diagram Figure 7.7 - Proposed PZR Level Control System

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 157 of 440 7.4 WBN System Description, System Diagrams (continued)

Pressurizer Level Program Figure 7.8

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 158 of 440 7.4 WBN System Description, System Diagrams (continued)

Figure 7.8 - Existing Pressurizer Pressure Control

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 159 of 440 7.4 WBN System Description, System Diagrams (continued)

Sa 7- t2 2 3 ~

~ -f ~ ~

bow.

X541340 unt0. eo Ssw Preissuler Pressur Control Diagram Figure 7.9 - Proposed Pressurizer Pressure Control

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 160 of 440 7.4 WBN System Description, System Diagrams (continued)

PORV Figure 7.10 - COMS Logic

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 161 of 440 7.4 WBN System Description, System Diagrams (continued) 7.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of both pressurizer pressure and level controls. These controls shall allow the unit operator to establish either manual or automatic control mode. These control system will normally be operated in the automatic mode with both the pressurizer pressure and level selection switches in the automatic position. In the auto position, MSS input validation signal will be used for control. The operator may also use the selector switches to use specific input transmitters for control if desired for abnormal situations such as maintenance or equipment failures. The following logic must be implemented for the selector switch logic.

Pressurizer Pressure Channel Selector Switch XS-68-340D Position 1 2 3 Auto Normal PT-68-340 PT-68-340 PT-68-323 MSS Input Control I I Ill from I & III Backup P1-68-322 PT-68-334 PT-68-334 MSS Input Control IV II II from 11& IV Normal Control consists of the following functions:

1. Pressure Control via:
a. Modulated Variable Heater Control
b. Turn on Backup Heaters on Low Pressure
c. Spray Valve programmed controls (PCV-68-340B and -340D)
d. Open PORV PCV-68-340A on High Pressure (SP + 100 psig)
2. Alarms:
a. High Pressure +75 psig
b. Low Pressure -25 psig Backup Control consists of the following functions:
1. Open PORV PCV-68-334 on High Pressure (2335 psig)
2. Alarms:

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 162 of 440 7.5 Indicators, Status Lights. and Controls (continued)

a. 2310 psig High Pressure Pressurizer Level Channel Selector Switch XS-68-339E Position 1 2 3 Auto Normal LT-68-339 LT-68-339 LT-68-320 MSS Input Control I I III from I & III Backup LT-68-320 LT-68-335 LT-68-335 MSS Input Control Ill II II from II & Ill Normal Control consists of the following functions:
1. Level Control via charging flow demand (FCV-62-93 position control and PD Pump Speed control)
2. Isolation of Letdown (LCV-62-70)
3. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)
4. Alarms:
a. 17% Low Level
b. +5% High Level Deviation
c. -5% Low Level Deviation Backup Control consists of the following functions:
5. Isolation of Letdown (LCV-62-69)
6. Turns off Heaters and Close all Orifice Isolation valves (LCV-62-72, -73, and -74)
7. Alarms:
a. 17% Low Level
b. 70% High Level Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 163 of 440 7.6 Alarms and Annunciators The control system should monitor and actuate an alarm and annunciator for the following conditions:

7.6.1 Pressure A. High pressure B. Low pressure C. High pressure deviation (PID compensated pressure minus reference setpoint pressure). High controller output.

D. Low pressure deviation (PID compensated pressure minus reference setpoint pressure). Low Controller output.

E. Actuation of the Relief Valve Interlock for any Relief Valve.

The high pressure alarm should be actuated by the same signal used to actuate two relief valves (see the section 7.8.2, requirement a). The low pressure deviation alarm should be actuated by the signal used to turn the back-up heaters on. A separate bistable signal should be provided to actuate the high pressure deviation alarm.

7.6.2 Water Level A. High water level B. Low water level (derived from water level channels used for heater interlock and for letdown isolation)

C. High water level deviation (measured water level minus programmed water level).

D. Low water level deviation (measured water level minus programmed water level).

E. Actuation of the low level signal to close either letdown isolation valve.

The low water level alarm should be actuated by the same signals used for heater interlock on low water level. The high water level deviation alarm should be actuated by the same signal used to turn backup heaters on. Separate bistable signals should be provided to actuate the remaining water level alarms.

7.6.3 Placing the charging pumps control selector switch in the local operating position, 7.6.4 Cold Overpressurization Mitigation System (COMS)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 164 of 440 7.6.4 Cold Overpressurization Mitigation System (COMS) (continued)

A. When the signal Is present demanding the arming of the cold overpressure mitigation system.

B. When the signal is present to open either of the two relief valves used in the system.

Difference between RCS pressure and its programmed value exceeding a setpoint.

7.7 Performance Limits TBD 7.8 Failure Mode and Special Requirements 7.8.1 Failure Modes The inputs should be chosen so that it is not possible for failure of the same pressure channel to could cause actuation of both PORVs or to actuate and interock the same valve. This same requirement is applicable for the redundant control processor pairs, each PORV control will be implemented in separate redundant control processor pairs.

The pressurizer pressure and water level control system should be designed such that, in case of loss of power to any channel, the affected pressurizer power operated relief valves will not open, the spray valves will not operate, the heaters will not operate from low pressure deviation or high water level deviation and the letdown line isolation valve closure and heater actuation block on low water level will not be actuated.

7.8.2 Pressure Interlocks A. A high pressure signal should open one power operated relief valve and a high compensated pressure deviation signal should open the remaining power operated relief valve.

B. Each power operated relief valve should be interlocked with a pressure interlock. (The interlock and actuate signals for any power operated relief valve must not come from the same channel).

C. A low compensated pressure deviation signal should turn on the backup heaters.

7.8.3 Water Level Interlocks A. A high water level deviation signal should turn on the backup heaters.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 165 of 440 7.8.3 Water Level Interlocks (continued)

B. An auxiliary pressure and level interlock will turn on Group A-A and B-B heaters ifthe local control stations are on local and auto.

C. A fixed low level signal should turn off Group C heaters and the variable heaters. This low level signal is generated in two channels either of which is capable of performing this function. This low level signal will also turn off the Group A-A and B-B heaters when they are in auto control. However, this function may be bypassed from the remote control station. Precaution should be taken to avoid manual heater operation which could cause heater damage, if the water level uncovers the heaters.

A signal indicating that all letdown orifice isolation valves are closed should be interlocked with the switch outputs used to control the letdown line isolation valves such that the letdown line isolation valves can be neither opened nor closed through use of the switch unless all letdown orifice isolation valves are fully closed.

1. Orifice isolation valves FCV-62-73, -74, and-72 are energized to open.

2- Interlocks:

a. To Open - pressurizer level > 17 percent and FCV-62-69 and -

70 open, charging pump running, Phase A reset.

b. Close automatically - pressurizer level < 17 percent, either FCV-62-69 or -70 going closed, containment Phase A isolation signal, loss of charging pump, loss of electrical power, and loss of air.

7.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

Accuracy Requirements for Normal and Abnormal Operating Conditions A. The accuracy and reproducibility of the pressure narrow range signals should be within +/- 10 psi.

-.--.-. d

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 166 of 440 7.9 Accuracy (continued)

B. The accuracy and reproducibility of the pressurizer water level UP signal should be within _ 1.5% of span.

C. The channel accuracy of the reactor coolant system wide range temperature signals should be within +/-1.2% of range.

D. The channel (trip) accuracy of the reactor coolant system wide range pressure signals should be within +/- 2.0% of range.

E. Digital processing effects (where applicable) such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.035% of both input and output channel span to the uncertainties specified in the above requirements of this section.

7.10 Range Pressurizer Pressure 1700 to 2500 psig Pressurizer Level 0 to 100% level Reactor coolant system 0 to 700MF wide range Temperature Reactor coolant system 0 to 3000 psig wide range Pressure Auctioneered Tavg for Pzr TBD Level Setpoint program 7.11 Inputs Reference drawings:

Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W610-68-series WBN 47W610-62-series WBN 47W611-68-series Automatic control inputs The inputs are documented in Appendix E

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 167 of 440 7.11 Inputs (continued)

AutolManual Hand stations The auto/manual handstations are show in Appendix F.

7.12 Outputs The outputs are documented in Appendix E Reference drawings:

Westinghouse Process Control Block Diagrams 108D408-26, -27, -36, -5, -6 Westinghouse Functional Diagrams 5655D87- 11, -12 WBN 47W61 0-68-sedes WBN 47W610-62-series WBN 47W611-68-series 7.13 Proposed Signal Validation Designs A. Each Pressurizer Pressure channel shall consist of 2 input signals from like power train with a third input from the average of the redundant channel in the other power. These input signals shall use Medium Signal Select (MSS) input validation to select the Automatic control signal (see Figure 7.11). If one of the 2 train input signals is determined to be bad, the other Train input signal shall be used for control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 168 of 440 7.13 Proposed Signal Validation Designs (continued)

PRZR PRZR PRZR PRZR Presure Pressure III Pressurizer Pressure Signal Validation Scheme Figure 7.11

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 169 of 440 7.13 Proposed Signal Validation Designs (continued)

B. The Pressurizer level control signal shall consist of 3 input signals using MSS input validation to select the Automatic control signal. If one input signal is determined to be bad, the average of the remaining two signals shall be used for control.

Pzr Level I Pzr Level 2 Pzr Level 3

1. Individual channel failure-alarm.
2. Two channel failure-manual hold with operator selection back to auto.
3. Three channel failure-manual hold.

Figure 7.12 7.14 Time Response 7.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all I input signals of the Pressurizer Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Pressurizer Control System.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 170 of 440 7.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the Pressurizer Control System shall not exceed 250 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within Pressurizer Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

7.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for signals involved in closed loop control for this function.

7.14.4 Manual Control Response The total delay for all manual component control signals of Pressurizer Control System shall be no greater than 1 second.

7.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

7.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

7.17 Programmed Functions Pressurizer Pressure Functions

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 171 of 440 7.17 Programmed Functions (continued)

Pressurizer Variable Heaters Input-Output Characteristic 10 Heater Demand (%)

0' 0 A Compensated Pressure Figure 7.13 Pressurizer Spray Valve Characteristic Spray 10 Demand (%)

0 //D 00C Compensated Pressure Figure 7.14 Pressurizer Water Level Programmed Functions Pressurizer Water Level Program Water Level H Demand

(% of Span)

F G

E Auctioneered Figure 7.15 Settings (Per Plant SSD for TC-68-2):

E = 557 F F = 59.6% Level G = 25% Level H = 586.2 F

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 172 of 440 7.17 Programmed Functions (continued)

Cold Overpressurization Mitigation System Reactor coolant system pressure setpoint program z

Y lide Range RCS X Pressure (psig) * - - --- --------

V------------- Il U------------- III TI I I *, 541J I J K L M N 0PO Wide Range RCS Temperature (rF)

Figure 7.16 7.18 Setpoints Set Points Ranae of Settina Variable Fixed High Pressure Alarm, Open 2250 to 2500 psig Power Operated Relief Valves Low Pressure Deviation Alarm, Turn -200 to 0 psi Backup Heaters On (Low Controller Output)

High Pressure Deviation Alarm 0 to 200 psi (High Controller Output)

Fixed High Water Level Alarm 40 to 100% span Fixed Low Water Level Alarm, Turn 0 to 50% span All Heaters Off, Isolate Letdown High Water Level Deviation Alarm 0 to 20% span Low Water Level Deviation Alarm -20% to 0% span Open Power Operated Relief Valve (compensated pressure deviation) 0 to 200 psi

NPG Site-Specific VWBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 173 of 440 7.18 Setpoints (continued)

A -100 to 100 psi B -1 to -10%/psi C 0 to 100 psi D 1 to 10%/psi E 540 to 5600 F F 0.25 to 5%/°F G 0 to 50% of water level span H 20 to 70% of water level span Pressure Reference Setpoint 1800 to 2400 psig Cold Overpressure Mitigation System Low auctioneered RCS temperature 0 to 700F RCS pressure setpoint difference and PORV actuation -100 to 100 psi 700F J

1OO°F K 150°F L 200TF M 250°F N 275°F 0 300°F P 3500 F Q 4500 F R 373 psig S 376 psig T 395 psig U 420 psig V 490 psig W 540 psig x 570 psig Y 570 psig z 2335 psig

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 174 of 440 7.19 Requirements for Test and Calibration The Pressurizer Pressure and Heater Level Control System is not a protection system and, therefore, does not require the capability of being tested at power. Surveillance testing will be performed for COMS prior to plant heatup and cooldown above and below 350F (Mode 4).

7.20 Applicable Criteria & Standards The following criteria apply to this system.

7.20.1 AEC General Design Criteria (GDC) (2/20/71): GDC 13, 19, 24 7.20.2 Institute of Electrical & Electronics Engineers (IEEE) Standards:

IEEE Std. 279-1971 (Section 4.7)

The above Criteria and Standards have been considered in preparing the requirements of this section

8.0 BA BLENDER CONTROLS INTRODUCTION 8.1 Overview A Boric Acid Blend Control System shall be provided for WBN Unit 2. The Control System shall be complete with all necessary hardware and software, system logic, system graphics, and power supplies meeting the functional requirements of this specification.

8.2 Boric Acid Blender Control System Upgrade The scope of this upgrade consists of replacement of the existing NSSS Boric Acid Blender control system located in the NSSS control rack groupings. The existing controls are presently located in Rack 15 in the AIR with control stations located in the MCR. Remote I/O modules mounted in a 19 inch nest will be placed in the existing Foxboro cabinets (will use the baseplate for Racks 14/15/16). The associated Analog Outputs are not deemed Critical signals and do not require redundant output modules I with passive switching for the final device. The control system outputs that presently feed through their individual handstations will be changed to eliminate the Handstation I (HS) as a single point of failure. Remote 1/0 will be located in MCR. Any analog output devices will be changed out from 10 to 50 mA to 4 to 20 mA loops. Any 10 to 50 mA I/P converters will be changed out to a 4 to 20 mA type (to be supplied by TVA).

The following system graphics, at a minimum, shall be supplied. The Offerer shall list and describe the number and type of graphics that are proposed. Offerer should provide cost of additional screens.

System Mimics An additional mimic will be developed for Boric Acid Blender Controls. This mimic will consist of a Boric Acid Blender overview with Boric Flow, Primary Water Flow, Deviation Alarms, the Batch counters and Flow controllers for each flow loop, Mode selection with Status indication, and trending information 8.2.1 Critical Control System Signals Non-critical Control Signals One process input for each boric acid and primary water flow control loop will be provided. Gross failure detection shall be implemented and shall transfer the control system to manual upon detection of an input failure.

System Hazards Analysis The Offerer shall include the Boric Acid control system into the Hazards Analysis even though the inputs and outputs are single points of failure.

Some of the most important objectives of the failure study include:

0 The potential for over or under shooting boration and dilution.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 176 of 440 8.2.2 System Description and Operation The makeup control portion of the Chemical Volume and Control System (CVCS) provides boric acid solution and distillate to the RCS. It consists of equipment and a group of instruments arranged to provide a manually preselected makeup composition to the charging pump suction or the VCT. Makeup control functions are those of maintaining desired operating fluid inventory in the VCT and adjusting RCS boron concentration for reactivity control.

The boric acid batching tank is used to prepare fresh boric acid solution. The BATs store this solution. Initial filling and makeup quantities of the required percent boric acid solution are prepared in the batching tank by dissolving boric acid crystals in hot water.

The batch of boric acid is transferred to the BATs by the boric acid transfer pumps.

There are 2 two-speed boric acid transfer pumps per unit. One pump is normally run on slow speed to provide BAT recirculation. The recirculation flow is either at a fixed rate or at a rate set by the operator. The second pump of each pair can be aligned to the third BAT and is considered to be a standby pump, with service being transferred as operation requires.

A primary water pump, taking suction from the Primary Water Storage Tank (PWST),

provides flow to the boric acid blender where mixing with boric acid occurs. The mixture is then directed to the suction of the charging pumps or is sprayed into the Volume Control Tank (VCT).

8.2.3 Modes of Operation Reactor makeup control system can be set for the following modes of operation:

automatic makeup, dilution, alternate dilution, boration, and manual. These modes provide flow control signals to the boric acid and primary water makeup valves. The interface with the C&MS consists of input signals for boric acid and primary water flow rates (4-20 ma) and output control signals to the associated control valves (FCV 140 and -143). The C&MS shall interface with remote A/M controllers (FCV-62-139 and -142) located on the MCB. The PID control function for each controller is a software feature. Refer to Appendix E for listing of interfaces.

The C&MS shall compare the regulated flow rate for the boric acid and primary water to the selected control setpoint. Upon detection of a high or low deviation, the C&MS initiates an alarm (bistable) which actuates a MCR annunciation.

The C&MS shall develop control logic based upon discrete inputs for the Boric acid blender selector switch. Specifically, the C&MS shall receive discrete inputs when the selector switch is placed in "Auto Makeup" mode and "Dilute or Alternate Dilute" modes. When the selector switch is in either mode the primary water controller uses a fixed setpoint value.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 177 of 440 8.2.3 Modes of Operation (continued)

1. "Automatic" makeup mode provides blended boric acid solution, preset to match the RCS boron concentration. Automatic makeup compensates for minor RCS leakage without causing significant changes in the coolant boron concentration. It operates on demand signals from the VCT level controller.

Below approximately 155 ppm boron, manual control of makeup may be required. Under normal plant operating condition, the makeup mode selector switch is set to "automatic" makeup position. This position establishes positions for the makeup stop valves for automatic makeup. The boric acid flow controller and primary water flow controller are set by the operator to blend to the same concentration as contained in the RCS. The mode selector switch must be in the correct position and the controller energized by prior manipulation of the "start' switch. A preset VCT low level signal initiates automatic makeup by opening the makeup stop valve FCV-62-144 to the charging pump suction, and positioning the boric acid flow control valve FCV-62-140 and primary water flow control valve FCV-62-143. Since a primary water pump runs continuously, automatic starting of this pump is not required.

The flow controllers then blend the makeup stream according to the preset concentration. Makeup addition to the charging pump suction causes VCT level to rise. At a preset high level point, the boric acid transfer pump transfers back to low speed, the primary water valve FCV-62-143 closes and the boric acid flow control valve FCV-62-140 closes, and the makeup stop valve FCV-62-144 closes. This operation may be terminated manually at any time by actuating the makeup controller to stop. The quantities of boric acid and primary water injected are totalized by batch counters and the flow rates are monitored by the plant computer system which provides recorded data capability. Deviation alarms for both boric acid and primary water are provided.

If automatic makeup fails or is not aligned for operation and VCT level continues to decrease, a low-level alarm is actuated. Manual action may correct the situation or, if the level continues to decrease, a Io-io level signal opens valves LCV-62-135 and 136 in the RWST supply line to the charging pumps, and closes valves LCV-62-132 and 133 in the VCT outlet line.

2. The "dilute" mode of operation permits the addition of a preselected quantity of primary water at a preselected flow rate to the RCS. The operator sets the mode selector switch to dilute, the primary water makeup batch integrator to the desired quantity and initiates system start. This opens the reactor makeup water flow control valve (FCV-62-143), and opens the makeup stop valve FCV-62-128 to the VCT inlet. The makeup water is injected through the VCT spray nozzle and through the tank to the charging pump suction. Excessive rise of the VCT water level is prevented by automatic actuation by the tank level controller of a three-way diversion valve 1-LCV-062-0118-A, which routes letdown flow to the HUTs. When the preset quantity of water has been added, the batch integrator causes makeup to stop and the primary water control valve (FCV-62-143) and makeup stop valve FCV-62-128 to close. This operation may be terminated manually at any time.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 178 of 440 8.2.3 Modes of Operation (continued)

3. The "alternate dilute" mode of operation is similar to the dilute mode except a portion of the dilution water flows directly to the charging pump suction and a portion flows into the VCT via the spray nozzle. This decreases the delay in diluting the RCS caused by directing dilution water to only the VCT. The operator sets the mode selector to "alternate dilute," the primary water flow controller setpoint to the desired flow rate, the makeup water batch integrator to the desired quantity and actuates the makeup start. The start signal causes the makeup control action to open the makeup stop valve FCV-62-128 to the VCT, the makeup stop valve FCV-62-144 to the charging pump suction header, and the primary water control valve FCV-62-143. Primary water is simultaneously added to the VCT and the charging pump suction header. This mode is used for load follow and permits the dilution water to follow the initial xenon transient and simultaneously dilute the VCT. High VCT level is prevented by automatic actuation of the VCT level controller, which diverts letdown flow to the HUTs. When the preset quantity of primary water has been added, the batch integrator causes the primary water control valve FCV-62-143 and makeup stop valves to close. This operation may be terminated manually at any time.
4. The "borate" mode of operation permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate," the concentrated boric acid flow controller setpoint to the desired flow rate, the boric acid batch integrator to the desired quantity, and actuates the makeup start. This opens the makeup stop valve FCV-62-144 to the charging pump suction, positions the boric acid flow control valve FCV-62-140, and transfers the selected boric acid transfer pump to high speed, which delivers boric acid solution to the charging pumps suction header. The total quantity added in most cases is so small that it has only a minor effect on the VCT level. When the preset quantity of boric acid solution is added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and the boric acid control valve FCV-62-140 and the makeup stop valve FCV-62-144 to close. This operation may be terminated manually at any time.
5. The "manual" mode of operation permits the addition of a preselected quantity and blend of boric acid solution to the VCT, RWST, HUTs, or to some other location via a temporary connection. While in the manual mode of operation, automatic makeup to the RCS is precluded. The discharge flow path to places other than the VCT must be prepared by opening a manual valve (62-929).

The operator sets the mode selector switch to "manual," the boric acid and primary water flow controllers to the desired flow rates, the boric acid and primary water batch integrators to the desired quantities, and actuates the makeup start switch. The start switch actuates the boric acid flow control valve FCV-62-140 and the primary water flow control valve FCV-62-143 and transfers the preselected boric acid transfer pump to high speed.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 179 of 440 8.2.3 Modes of Operation (continued)

When the preset quantities of boric acid and primary water have been added, the batch integrators cause makeup to stop. This operation may be stopped manually any time. If either batch integrator is satisfied before the other has recorded its required total, the valve associated with the integrator which has been satisfied will terminate its flow. The flow controlled by the other integrator will continue until that integrator is satisfied. In the manual mode, the boric acid flow is terminated first to prevent piping systems from remaining filled with boric acid solution.

Deviation alarms sound for both boric acid and primary water ifflow rates deviate from setpoints.

8.2.4 Associated Equipment and Instrumentation Boric Acid Transfer Pumps There are four boric acid transfer pumps located in the auxiliary building. Two pumps are usually used. Normally one pump is aligned with one BAT and runs continuously at low speed to provide recirculation for the boric acid system and BAT. The second pump of each pair is aligned to the third BAT and is considered a standby pump. The standby pumps also intermittently circulate fluid through the third tank to maintain thermal equilibrium in this part of the system. These pumps transfer boric acid for normal or emergency boration to the CCP suction.

The design capacity of each pump is equal to the normal letdown flow, with the capacity of both pumps being equivalent to the normal design capacity of one CCP.

The design discharge pressure is sufficient to overcome any pressures which may exist in the charging pump suction manifold.

Boric Acid Blender There is one blender located in the auxiliary building. The blenders ensure thorough mixing of the boric acid and primary water for reactor coolant makeup. The blender decreases the pipe length required to homogenize the mixture for taking a representative local sample. The flow rate normally varies Boric Acid Flow Control Valve, I -FCV-62-140 (1 -FCV.I OA)

These air-operated normally open globe valves are used to supply boric acid to the boric acid blender at a preset flowrate.

Primary Makeup Water Control Valve, 1-FCV-62-143 (1-FCV-111A)

These air-operated normally closed globe valves are used to supply primary makeup water to the boric acid blender at a preset flowrate.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 180 of 440 8.2.4 Associated Equipment and Instrumentation (continued)

Primary Water to Boric Acid Blender, 1 -FIT-62-142 (1&2-FIT-1 11)

These instruments are part of the makeup control system and in connection with FT-62-139 provide a manually preselected makeup composition to the charging pump suction header or the VCT. During automatic makeup distillate is provided such that the dilute boric acid solution blended matches RCS boron concentration. A preset low level signal from the VCT initiates makeup until a preset high level is reached. The quantity of primary water injected is totalized by the batch counters and flow rates are recorded.

During "dilute", a preselected quantity of primary makeup water at a preselected flow rate is added to the RCS. The operator sets the mode selector switch to "dilute", the primary makeup water flow controller setpoint to the desired flowrate, the primary batch integrator to the desired quantity and actuates the makeup start. The start signal opens the makeup stop valve (FCV-62-128) to the VCT inlet. When the preselected quantity of primary water is added, the batch integrator causes the primary water valve to close. The "alternate dilute" mode is similar to the "dilute" mode except a portion of the primary makeup water flow directly to the charging pump suction and a portion flows into the VCT.

Boric Acid Flow to Boric Acid Blender, 1-FT-62-139 (1&2-FT-110)

These instrumerts are part of the reactor makeup control system and, in conjunction with FIT-62-142, provide a manually preselected makeup composition to the charging pump suction or the VCT. During automatic makeup concentrated boric acid is provided such that the dilute boric acid solution blended matches the RCS BORON CONCENTRATION. A preset low VCT level signal causes the transfer of a boric acid transfer pump to high speed, opens the primary water makeup valve (FCV-62-143),

the boric acid flow control valve (FCV-62-140) and makeup stop valve FCV-62-144. At a preset high VCT level, the boric acid transfer pump transfers back to low speed and FCV-62-143, FCV-62-140, and the makeup stop valve (FCV-62-144) close.

The quantity of boric acid injected is totalized by batch counter and flow rates are monitored by a plant computer system which provides recorded data capability.

The "borate" mode permits the addition of a preselected quantity of concentrated boric acid solution at a preselected flow rate to the RCS. The operator sets the mode selector switch to "borate", the concentrated boric acid flow controller setpoint to the desired flow rate, the concentrated boric acid batch integrator to the desired quantity, and actuates the makeup start. Actuating the start opens the makeup stop valve (FCV-62-144) to the charging pump suction and boric acid control valve (FCV 140), and transfers the boric acid transfer pump to high speed. The boric acid is added to the charging pump suction header. When the preset quantity of concentrated boric acid solution has been added, the batch integrator causes the boric acid transfer pump to transfer back to low speed and FCV-62-140 and 144 to dose.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 181 of 440 8.2.5 Makeup System Operating Precautions

1. Except during boration or dilution operations, the makeup system should be operated in the automatic mode with the boron concentration setting adjusted to match RCS concentration.
2. Changes in reactor coolant chemistry should be anticipated whenever the boron concentration is altered. During long term dilution, the reactor coolant should periodically be checked to ensure compliance with the chemistry specifications.
3. RCS dilution may be performed only when the reactor is substantially subcritical or with the control rods above their insertion limit.
4. The effects of boration or dilution while the reactor is subcritical must be monitored by observing the source range count rate. Ifthe count rate increases at an unexpected rate, the operation must be stopped.
5. The effects of boration and dilution at power must be monitored by observing the resulting control rod bank movement and changes in coolant average temperature.

The operation must be stopped if the control bank movement is in the wrong direction.

6. When operating at a reduced load, it is preferable to adjust boron concentration so that the control rods are maintained in a position that facilitates responses to load increases within the restraints of constant axial offset control.
7. PZR boron concentration should not be less than the concentration in the RCS loops by more than 50 ppm. PZR spray should be operated to equalize the concentrations. Operation of the heaters will cause automatic operation of the sprays.
8. Operation of the reactor makeup system should be avoided in the dilute mode and the alternate dilute mode with a primary water flow controller setting of 5-10% due to the potential for controller oscillations.

8.2.6 Malfunction of Reactor Makeup Control Indication of possible reactor makeup malfunctions include:

1. Status lights on the control board indicating CVCS operating conditions.
2. CVCS deviation in boric acid and/or primary water flow from programmed valves.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 182 of 440 8.2.6 Malfunction of Reactor Makeup Control (continued)

3. VCT level deviation from programmed level. Dilution during refueling is prevented by administrative controls. Dudng an inadvertent RCS dilution during shutdown, the operator should close FCV-62-143 and stop the primary water pump, if necessary. Boration should be initiated until the required shutdown reactivity is established. During an inadvertent RCS dilution during startup, the operator should initiate boration, close FCV 143, and stop the primary water pumps, if necessary. Lf the reactor has not reached criticality, the control rods are inserted and the RCS is borated. If the reactor has reached criticality, the control rods are inserted to prevent power escalation. During an inadvertent RCS dilution during power operation, a deviation alarm will close FCV-62-128 and 144. The operator should close FCV-62-143 and stop the primary water pumps, if necessary.

The control rods should be inserted and the RCS should be borated, if necessary. During an inadvertent RCS boration, the operator should verify that 62-929, FCV-62-138, LCV-62-135, and 136 are closed, that LCV 132 and 133 are open, and that the blender is not in the boration mode.

The operator should dilute the RCS, as needed. The blender is reset to a new RCS boron concentration. If automatic makeup cannot be achieved then makeup will be performed manually. See Ref. 7.4.28 for additional requirements during dilution events.

4. PZR level and pressure deviations.

8.2.7 Boric Acid Flow Control Loop Boric Acid Flow Functions

1. Analog input for transmitter FT-62-139 (FT-1 10) is self powered, range is 0 - 40 gpm, 4-20 output and signal termination is in R15.
2. Outputs to a Flow Indicator and Flow Recorder (M-6)
3. Batch Counter (M-6) with Manual Setpoint adjustment and Indication
4. Contact closure when Boration Mode demand has been met will be relocated to MCR FBM.
5. Pulse output from the Batch Counter function to the ICS
6. High and low setpoint deviation values and output alarms.
7. Refer to App E for listing of Input and output parameters..

8.2.8 Primary Water Flow Control Loop Primary Water Flow

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 183 of 440 8.2.8 Primary Water Flow Control Loop (continued)

1. Analog input for transmitter FIT-62-142 (FT-111) is self powered, range is 0 -

200 gpm, 4-20 output, and signal termination is in 2-R-15.

2. Outputs to a Flow Indicator and Flow Recorder (2-M-6)
3. Batch Counter (2-M-6) with Manual Setpoint adjustment and indication
4. Contact closure when Dilute or Alternate Dilute Mode demand has been met will be relocated to MCR FBM.
8. Pulse output from the Batch Counter function to the ICS.
5. High and low setpoint deviation values and alarms.
6. Other inputs to this controller is Auto Makeup status, Dilute or Alternate Dilute status, Fixed setpoint for Auto Makeup mode.
7. See App E for listing of input and output parameters.

8.2.9 Boric Acid Flow Control System Improvements

1. Present Control Scheme - The present system when operated in automatic overshoots the demand Boration/Primary Water change. This is due to the response time delays of the control valves. The valves are demanded to close once the targeted addition has been meet but the only initiates the valves to close. The valves take 2-4 seconds (WBN is required to perform a field measurement of the valves' response times and provide this information to the Offerer) to close once the closure signal is actuated.
2. Proposed Control Scheme - The Offerer shall provide a design that has the valves close at the time that the demand has been met (+/- 0.25 gallons). This can be performed using the measured flowrates of the loops and a variable gain function where the valve's position/flow is reduced as the demand setpoint is approached, factored in valve response times and valve flow characteristics at low flow conditions when the flow measurement are not accurate, and any other suggested techniques that the Offerer may suggest.

The system shall also respond to control system component malfunctions such as sluggish or sticky valves using demand versus flowrate deviation to stop the boration or dilution if a problem is detected.

3. MCR Handstation is obsolete and requires replacement.

8.3 Indicators, Status Lights. and Controls The control system should interface with the following signals:

A. Provide Main Control Board Indicators

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 184 of 440 8.3 Indicators, Status Ughts. and Controls (continued) 1 Boric Acid Flow Signal (4 to 20 MA)

1. Boric Acid Flow Signal (4 to 20 MA)
2. Primary Water Flow Signal (4 to 20 MA)
3. Controller Output signal to boric acid flow control valve (4 to 20 MA).
4. Controller Output signal to boric acid control valve (4 to 20 MA)
5. Controller ANM Station (2) on MCB.

8.4 Alarms and Annunciators The following should actuate an alarm and annunciator:

B. High or low deviation between Boric Acid flow and setpoint; C. High or low deviation between Primary flow and setpoint; 8.5 Performance Limits VerifiGations and Validations (V&V) of the following performance limits shall be a combination of the simulation analysis and testing. The Offerer and TVA shall work together to determine how best to perform this V&V.

A. The Boric Acid and Primary Batch Control systems shall be provide the demanded value within a maximum of +/- 1/4 gallons.

B. In order to characterize the variable gain function, as found data for loop response times and valve characterization for the existing control system shall be taken by TVA. This performance data shall be factored into the performance limit acceptance criteria. The control system open loop response is defined as the time delay from the change of process parameters to final output device response. This data shall be collected during an outage.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 185 of 440 8.6 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the rack environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non-linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

D. The accuracy of the control systems should be good enough to meet the performance limit of section 4.31.

8.7 Range 8.8 Inputs Additional information for these inputs are documented in Appendix E Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.

8.9 Outputs The outputs are documented in Appendix E 8.10 Time Response 8.10.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of the Control System. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 186 of 440 8.10.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals of the BA Blender Control System shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the Control System. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

8.10.3 Manual Control Response The total delay for all manual component control signals of BA Blender Control System shaBl be no greater than 1 second.

8.10.4 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units, The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

8.11 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

8.12 Setpoints The following information is based upon SON. WBN's values may be different.

Variable Setting High Boric Acid Flow Deviation 0 to 5 gpm Low Boric Acid Flow Deviation 0 to 5 gpm High Primary Water Flow Deviation 0 to 10 gpm Low Primary Water Flow Deviation 0 to 10 gpm

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 187 of 440 8.12 Setpoints (continued)

All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

8.13 Requirements for Test and Calibration The BA Blender Control System is not a protection system, and therefore, does not require the capability of being tested at power.

9.0 CVCS CONTROL SYSTEM REQUIREMENTS 9.1 System Description The chemical and volume control system is a major auxiliary system that functions to control Reactor Coolant System (RCS) inventory, to maintain RCS chemistry, to provide the reactor coolant pumps with seal water, and to control the soluble poison concentration of the RCS. In addition, the CVCS supplies borated coolant to the RCS in the event of an accident.

Major system interfaces include the pressurizer level control system, which varies charging flow based upon pressurizer level; the reactor makeup system that allows boric acid, demineralized water, and corrosion inhibiting chemicals to be added; and the emergency core cooling systems, which provide the high pressure injection portion of the system with borated water.

A. Purposes.

1. Maintains programmed pressurizer level.
2. Controls reactor coolant chemistry and activity.
3. Adjusts and controls reactor coolant boron concentration.
4. Provides reactor coolant makeup.
5. Supplies seal water to the reactor coolant pumps.
6. Portions used for emergency core cooling and emergency boration.
7. Used to fill and hydrostatically test the reactor coolant system.

B. Subsystems

1. Charging, letdown, and seal water system subsystems
2. Chemical control, purification, and makeup system 9.2 CVCS Control Systems The chemical and volume controls perform the following functions:

9.2.1 Pressure Control Systems

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 188 of 440 9.2.1 Pressure Control Systems (continued)

Excess letdown HX outlet pressure, PT-62-57 This instrument provides MCR indication of the pressure of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56). The indicated pressure is used in setting the control valve such that the pressure does not exceed the allowable backpressure on the Reactor Coolant Pump (RCP) No. 1 seals.

Letdown HX Pressure Control, PC-62-81 This instrument controls pressure downstream of the letdown orifices to prevent flashing. Normally the low-pressure letdown valve (PCV-62-81) is controlled to maintain the pressure at its setpoint. The air-operated modulating valve can be manually controlled from an auto-manual controller in the MCR. A secondary function is to maintain the RO system pressure while solid. This loop also provides MCR Indication along with an Annunciation and Computer monitoring.

RCP No. 1 Seal DP, PdT-62-8, 21. 34, and 47 These instruments indicate the dP across RCPs No. 1 seals both in the MCR and locally. The dP is employed during a startup to ensure separation of the seal faces. The low-alarm indicates insufficient dP for correct lubrication and cooling of the No. 1 seal.

VCT Pressure, PT-62-122 VCT Pressure MCR indication, annunciation, and a computer alarm are provided:

High pressure alarm at 65 PSIG.

Low pressure alarm at 13 PSIG.

Regenerative Hx Pressure, PT-62-92A This loop provides MCR and local indication along with Computer monitoring.

9.2.2 Temperature Control Systems RCP Low Bearinq Temperature, TE-62-3, 16, 29, and 42 These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.

Letdown Line Relief Valve Discharge Temperature. TE-62-75

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 189 of 440 9.2.2 Temperature Control Systems (continued)

The RTD temperature measurement indicates high temperature in the discharge line of relief valve 62-662 which is located in the letdown line downstream of the letdown orifices. The alarm annunciates when the relief valve is either leaking or open.

Letdown Temperature Control, TE-62-78 This instrument indicates and controls the temperature of the letdown flow exiting the letdown heat exchanger (HX). The temperature sensor (TE 78) provides input to the controller in the CCS water. The exit temperature is controlled by regulating the CCS water flow through the letdown HX. The control system is set to maintain the letdown temperature downstream of the letdown HX at its setpoint temperature. Temperature control valve TCV-70-192 on CCS outlet, controls temperature at approximately 110 F. TE 78 inputs to HIC-62-78 which controls TCV-70-192 to maintain letdown temp. These RTD temperature measurements provide MCR Indication along with a Annunciation and Computer monitoring.

Excess Letdown Temperature, TE-62-58 This RTD temperature measurement provides MCR Indication along with an Annunciation and Computer monitoring of the excess letdown flow downstream of the excess letdown HX and excess letdown control valve (FCV-62-56).

Regenerative Hx TemD. TE-62-87 This RTD temperature measurement provides MCR Indication along with Computer monitoring of Makeup flow leaving the Regenerative Hx.

Regenerative Hx Letdown Temp, TE-62-71 This RTD temperature measurement provides MCR Indication along with a Annunciation and Computer monitoring of the letdown flow downstream of the Regenerative HX.

RCPs No. 1 Seal Outlet Temperature, TE-62-4. -17, -30. -43 These temperature indicators monitor each RCP's No. 1 seal water leakage temperature. These RTD measurements provide MCR Indication along with a Annunciation and Computer monitoring.

VCT Outlet Temperature. TE-62-131 VCT Outlet Temperature MCR indication, annunciation, and a computer alarm are provided 9.2.3 Level Control Systems

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 190 of 440 9.2.3 Level Control Systems (continued)

VCT Level Control (LT-62-130A and -129A)

This system consists of two level control channels which govern VCT water inventory.

During operation above normal level, one channel provides an analog signal to a proportional controller which modulates the three-way valve downstream of the reactor coolant filter to maintain the VCT level within a normal operating band. The level controller maintains the three-way valve (LCV-62-1 18) such that a portion of the letdown flow goes to the Holdup Tank (HUT) and a portion to the VCT. The controller would operate in this fashion during a dilution operation when reactor makeup is being fed to the VCT from the reactor makeup control system.

If the modulating function of the channel fails and the VCT level continues to rise, then the backup level channel will cause the three-way valve to be switched to the fully divert position.

Three-way level control valve LCV-62-118 diverts to holdup tanks on high VCT level.

  • 63 percent starts diverting to holdup tanks.
  • 93 percent fully diverting to holdup tanks.
  • Action reverses as level returns to normal in VCT.

During normal power operation, a low VCT level initiates auto makeup which injects a pre-selected blend of boron and water into the charging pump suction header. When the VCT level is restored to normal, auto makeup stops.

ifthe automatic makeup fails and the level continues to decrease a Io-lo level signal from both channels opens the stop valves (LCV-62-135 and LCV-62-136) in the RWST supply line and then closes the stop valves (LCV-62-132 and LCV-62-133) in the VCT outlet line.

" Normally from VCT through valves LCV-62-132 and -133. Valves close on low-low VCT tank level of 7 percent, [both signals require FCV-62-135 or 136 full open to close the VCT outlets],

" Refueling water storage tank through LCV-62-135 and -136.

Valves open on HS in A-P Auto, Selector Switch in Normal, and low-low VCT tank level of 7 percent.

BAT Level, 2-LT-62-238 and O-LT-62-242

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 191 of 440 9.2.3 Level Control Systems (continued)

These systems indicate BAT's level. BA Tank A is for Unit 1 and is not in the scope of this upgrade. BA Tank C is common to Unit 1 and 2 and BA Tank B is for Unit 2. These level loops provide MCR indication along with alarms. The low alarm is set to indicate the minimum level in the tank to ensure sufficient boric acid is available to provide suction head to the boric acid transfer pumps.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 192 of 440 9.2.3 Level Control Systems (continued) 9.2.4 Flow Control Systems RCP No. 1 Seal Leakoff Flow Control, FT-62-10, 11, 23, 24, 36, 37, 49 and 50 These flow recording systems monitor and alarm each RCP No. 1 seal leak off flow. They are employed during startup and normal operation to monitor No 1 seal performance. These provide MCR Indication (2 pen recorder) along with a Annunciation and Computer monitoring. The two pen recorders are paired RCP 1 with RCP 2 and RCP 3 with RCP. The annunciators are also grouped.

RCP Seal Flow, FT-62-1, 14, 27, and 40 The RCP Seal Flow loops provide MCR and Local Indication of RCP Seal along with a Annunciation and Computer monitoring. The square root indication scaling shall be replaced with a linear scale with the square root conversion performed in software.

Letdown Flow, FT-62-82 This flow loop provides MCR Indication along with a Annunciation and Computer monitoring. The high flow alarm FA-62-82 at 130 gpm or pressure high at 440 psig.

Presently, the loss of power results in loss of components for both the normal and excess letdown systems. This complicates recovery due to not having any letdown path. The Offerer shall provide a proposed design to separate normal letdown from excess letdown to ensure that at least one letdown path with any failure including a complete loss of power to a rack or loss of redundant processors.

Charging Flow Control, FT-62-93A This instrument regulates charging flow when the Centrifugal charging pumps (CCPs) are in operation. The CCPs are constant speed pumps and flow is controlled by modulating FCV-62-93A. The closed loop flow control receives a flow control setpoint from the pressurizer level control system.

The control signal demand shall have a low limit stop to prevent charging flow less than 55 gpm. The low limit ensures adequate RCP seal and Regen. Hx flow. Manual control is available from the MCR. The FT-62-93A loop provides the following; 0 MCR Indication;

  • Local Indication;

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 193 of 440 9.2.4 Flow Control Systems (continued)

  • Annunciation;
  • Computer point.
  • Excess Letdown Flow Control, FCV-62-56 This control valve reduces RCS pressure downstream of the excess letdown HX to a low pressure, consistent with No. 1 seal backpressure requirements. A pressure indicator (PI-62-57) is employed to adjust the setting of this valve. The air-operated fail-closed valve is manually controlled from the MCR. Valve position is also indicated in the MCR.

9.3 Applicable Criteria & Standards The following criteria apply to this system.

Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

The above Criteria and Standards have been considered in preparing the requirements of this section.

9.4 WBN System Diagrams None 9.5 Indicators, Status Lights. and Controls Main Control Room Controls Controls shall be located in the Main Control Room to provide the unit operator full control of rod position. These controls shall allow the unit operator to establish either manual or automatic control mode or manually position control component.

Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.

9.6 Alarms and Annunciators Main Control Room Annunciation See I/0 listing

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 194 of 440 9.6 Alarms and Annunciators (continued)

Computer Monitoring The plant process computer shall be used to monitor rod position information. The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 9.7 Performance Limits TBD 9.8 Specific Requirements None 9.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.03% of channel span to the uncertainties specified in the above accuracy requirements.

9.10 Range TBD 9.11 Inputs Reference drawings:

Westinghouse Process Control Block Diagrams 108D408-7, 8, 9,10, 18, 23, 24, 31, and 32.

WBN 47W610-62-series

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 195 of 440 9.11 Inputs (continued)

Automatic control inputs The inputs are documented in Appendix E Auto/Manual Hand stations The auto/manual handstations are show in Appendix F.

9.12 Outputs The outputs are documented in Appendix E 9.13 Proposed Signal Validation Designs Input Signal Validation None 9.14 Time Response 9.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals of CVCS. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within CVCS.

9.14.2 Control Processors Response Time The control system shall not be susceptible to hardware or software controller windup.

After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

9.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 196 of 440 9.14.4 Manual Control Response The total delay for all manual component control signals of CVCS shall be no greater than 1000 milli-seconds.

9.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The I second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

9.16 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal ohward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

9.17 Programmed Functions None 9.18 Setpoints All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

The following setpoint information is not WBN Unit 2 specific. WBN Unit 2 values must be obtained from the WBN Unit 2 PLS document.

WBN Unit I (post SGR) PLS

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 197 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYSTEM PRESSURES INSTRUMENT DESCRIPTION SETPOINT FUNCTION SETPOINT 1-PT-1 15 Volume Conirol Tank HI alarm 65 psig Pressure Lo alarm 13 psig 1-_PT-1 31 Low Pressure Letdown Hi alarm 440 psig Pressure Controls Valve 200 psig 1-PCV-131 1 -PIS- 140 Seal Injection Filter Hi alarm 19 psid 1-PIS-141 Differential Pressure 1-PT-150 Reactor Coolant Pump #1 Lo alarm 218 psld 1-PT-151 Seal Differential Pres-1-PT-1 52 sure 1-PT-153 1-PT-192 Holdup Tank Nitrogen Hi alarm 9.5 pslig-Header Pressure Recirculation pump I psig Interlock decreasing Valve Volume Control Tank Maintains H. over- 15-30 psig 1-8155 Hydrogen Supply Pres- pressure in VOT sure Valve Volume Control Tank Maintains N. over- 15-30 psig 1-8156 Nitrogen Supply Pres- pressure in VCT sure Valve Volume Control Tank Prossure Regulator 18-30 psig 1-8157 Backpressure Rogulalor Valve VCT to Gas Analyzer Pressure Regulator 5 psig 1-8175 Backpressure Regulator Valve Boric Acid 2vaporator Pressure Regulator 5 psig I-8504 to Gas Analyzer Back-pressure Regulator

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 198 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYS;TEM TEMPERATURES INSTRUMENT NUMBER DESCRIPTION SETPOINT FUNCTION SEIPQJIN TIS-100 Boric Acid Baichirig Hi alarm 175°F Tank Temperature Heater off I 70*F Heater on 160*F Lo alarm 1550 F 1-TIT-103 Boric Acid Tank Hi alarm 175"F T1T-107 Temperature Heater off 170°F Heater on 160 0 F Lo alarm 1550 F 1-TE-1 16 Volume Control Tank Hi alarm 123.5F Outlet Temperature 1-TE-122 Excess Letdown Heat Hi alarm 200WF Exchanger Outlet Temperature 1-TE-1 25 Letdown Orifice Relief Hi alarm A2tient Valve Discharge Line +200 F Temperature 1-TE-127 Regenerative Heat Hi alarm 397OF Exchanger Outlet Temperature (Tube Side)

I -TIS-129 Letdown Diversion Valve Hi alarm and diver- 137.50F:

Inlet Temperature sion ot letdown stream to VCT 1-TE-130 Letdown Heat Exchanger Hi alarm CCW outlet 132"F Outlet Temperature valve controls about 1279F (Tube Side) 1-TE- 166 Reactor Coolant Pump Hi alarm 170 tp 1-TE-168 Radial Bearing 1-TE-170 Temperature 1-TE-1 7?

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls ISpecification Engineering Upgrade Specification IRev. 0001 Specification Page 199 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYSTEM TEMPERATURES (cont)

INSTRUMENT NUMBER DESCRIPTION SETPOINT FUNCTION SETPOINT I-TE-167 Reactor Coolant Pump #1 Hi alarm 179oF 1-TE-169 Seal Leakoff Temporature 1-TE-171 1-TE-173 I-TIT-223 Boric Acid Tank Tempera- Hi alarm 175'F TIT-227 ture Heater off 170OF Heater on 160'F Lo alarm j55ep

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 200 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS INSTRUMENT DESCRIPTI ON §EEQIT~g[EUNCTION SETPOINV LIS-I01 Boric Acid Batching Lo alarm 2" Tank Level 1-LT-102 Boric Acid Tank Leovel Hi alarm 133.5* (9,150 gallons)-

LT-106 Lo alarm 13" (890 gallons)-

1-LT-1 12 LB-1 12A Volume Control Hi level alarm 65" increasing LB-1 12B Tank 1-LCV-1 12 8/C open 95increasing 1-LCV-112 DIE close 5" decreasing I-LCV-1 2 B/C close 1-LCV-112 D/E open LB-112C RMCS makeup stop 29" increasing LB-i 1?D RMCS makeup slart and makeup blocked alarm 14" decreasing LB-1 12E Lo alarm 9" decreasing LC-1 12C I -LCV- 112A position to VCT 44" 1-LCV- 1 12A diversion to holdup tank 65' 1-LS-178A Reactor Coolant pump Hi alarm 126 above 1-LS 179A Soal Standpipe Levol orifice outlet 1-LS-1B0A (High) 1-LS-181A 1-LS-178B Reactor Coolant Pump Lo alarm 12* below 1-LS- 1798 Seal Standpipe Level orifice outlet 1-LS-180B (Low)

I -LS-1 81B Water level referenced to lower level lap on tank, unless otherwise noted.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 201 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYSTEM LEVELS (cont.)

INSTRUMENT DESCRIPTION SETPOINT FUNCTION __SEQINT.

1-LT-1B5 LB-1 85A Volume Lo level Alarm 9' decreasing LB-1 85 Control 1-LCV-112 B/C open 94 increasing Tank 1-L.CV-I 12 D/E close 1-LCV- 112 B6C close 1-LCV- 112 D/E open 5* decreasing LB-185C Hi alarm 65" increasing LB-185D Diversion to holdup tank 65" increasing LIS-190 Holdup Tank Level Hi alarm 300" above tank bottom Lo alarm 36" above tlik bottom LT-204 Monitor Tank Level Hi alarm 145' (TVA-supplied)

Lo alarm 17" LC-224 PD Pump Head Tank Level Lo alarm Preset by Manufacturer

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 202 of 440 9.18 Setpoints (continued)

CHEMICAL AND VOLUME CONTROL SYSTEM FLOWS INSTRUMENT NUMBER DESCRIPMTION SErPOINT FUNCTION SEETPOINT_

I-FT-1 10 Boric Acid Flow to Flow deviation alarm Blender HI alarm +0.2 gpm Lo alarm -0.2 gprn 1-FT-111 Primary Water Flow to Flow deviation alarm Blender Hi alarm +7.0 gpm La alarm -7.0 gpm 1-FT-121 Centrifugal Charging Hi alarm 150 gpm Pump Discharge Flow Lo alarrwLo limit 56 gpm Controls valve (see pres-I-FCV-121 surizer&- level control system) 1-FT-132 Letdown Row HI alarm 130 gpm 1-FIT-154 Reactor Coolant Pump Lo alarm 0.9 gpm 1-FIT-155 #1 Seal Leakoff Flow 1-FIT-156 (low rango) 1-rrr-157 1-FIT-1 58 Reactor Coolant Pump Hi alarm 4.8 gpm 1-FIT-159 #1 Seal I.eakoff Flow I-FIT-160 (hi range) 1-FIT-161 1-FIS-1 62 Roactor Coolant Pump Lo alarm 1.2 gpm 1-FIS-163 #1 Seal Bypass Flow 1 -FIS-164 I-FIS-165 Reactor Coolant Pump 1-FIT-142 Lo alarm 6.5 gpm 1 -FIT-1 43 Seal Injection Flow 1-FIT-1 44 1-FIT-1 45 SC-459 PD Pump Speed Control Lo flow stop 55 gpm K Water level referenced to lower level tap on tank, unless otherwise noted.

- Minimum charging flow to be established for normal chg.RCS pressure operation by limiting value FCV-1 21 position.

9.19 Requirements for Test and Calibration CVCS is not a protection system and, thus, does not require the capability of being tested at power.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 203 of 440 10.0 MISC NSSS CONTROL SYSTEMS The following functions in the NSSS Control Racks that are classified per this specification as miscellaneous functions. See Appendix E for I/O details.

The following functions are miscellaneous functions that provide mainly indications and alarms.

Functions per Rack Control Rack R14 RCS LP 1 Spray Temp RWST Level CLA Accum Tk I Level CLA Accum Tk 2 Level CLA Accum Tk 1 Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Flow Control Rack R15 RV Flange Leakoff Temp RCS WR Pressure Loop 4 III (sh 36)

Control Rack RI6 PRT Level PRT Pressure RCS Narrow Range Level RCS Wide Range Level RCS PRZR Relief Discharge Temp RHR Hx B Outlet Temp RWST Level Control Rack R17 RCS LP 2 Spray Temp CLA Accum Tk 1 Level CLA Accum Tk 2 Level CLA Accum Tk I Pressure CLA Accum Tk 2 Pressure SIS PMP A-A Pressure Control Rack R18 RWST Level Control Rack R19 PRT Temp

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 204 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)

PRZR Surge Line Temp RCS PRZR Relief Discharge Temp RHR Hx A Outlet Temp RHR Inj or Recirc Flow after a LOCA Control Rack R20 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Liquid Temp SIS PMP B-B Flow RWST Level RCS WR Pressure Loop 4 11(sh 36)

Control Rack R21 RHR PMP B-B Disch Pressure SIS Flow to RCS 1&4 CL Power PRZR Relief Discharge Temp SS CCP Inj Tk Outlet Flow Steam Press for Atmosphere Relief Valve control PCV-526 (sh 35)

Steam Press for Atmosphere Relief Valve control PCV-536 (sh 35)

Control Rack R22 CLA Accum Tk 3 Level CLA Accum Tk 4 Level CLA Accum Tk 3 Pressure CLA Accum Tk 4 Pressure PRZR Vapor Temp RWST Level SIS PMP B-B Pressure Control Rack R23 RHR PMP A-A Discharge Pressure SIS Flow to RCS 2&3 CL Power RHR PMP A-A Discharge Temp RCS PRZR Relief Discharge Temp Control Rack R24 Steam Press for Atmosphere Relief Valve control PCV-51 6 (sh 35)

Steam Press for Atmosphere Relief Valve control PCV-546 (sh 35)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 205 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)

Control Rack R26 RCS Flow Loop 1 (sh 2)

RCS Flow Loop 2 (sh 2)

RCS Flow Loop 3 (sh 2)

RCS Flow Loop 4 (sh 2)

RCS Flow Loop 1 (sh 4)

RCS Flow Loop 2 (sh 4)

RCS Flow Loop 3 (sh 4)

RCS Flow Loop 4 (sh 4)

Tavg Loop 1 (sh 7)

OPDT SP Loop 1 (sh 7)

OTDT SP Loop 1 (sh 7)

DT Loop 1 (sh 7)

Tavg Loop 3 (sh 9)

OPDT SP Loop 3 (sh 9)

OTDT SP Loop 3 (sh 9)

DT Loop 3 (sh 9)

Pzr Level i (sh 11)

Pzr Level III (sh 11)

Pzr Pressure I (sh 12)

Pzr Pressure III (sh 44)

SG Feedwater Flow Loop 1 (sh 13) 1 SG Compensated Steam Flow Loop i (sh 13) 1 SG Feedwater Flow Loop 3 (sh 14) 11 SG Compensated Steam Flow Loop 3 (sh 14) 11 SG Feedwater Flow Loop 2 (sh 45) I SG Compensated Steam Flow Loop 2 (sh 45) I SG Feedwater Flow Loop 4 (sh 46) I SG Compensated Steam Flow Loop 4 (sh 46) I SG Level Loop 3 (sh 49)111 SG Level Loop 4 (sh 49)111 Turbine Impulse Pressure PT-1-72 Indication and computer (sh 18) 1 SG Level Loop I (sh 19)111 SG Level Loop 2 (sh 19) 111 SG Level Loop 2 (sh 21) 111 SG Level Loop 3 (sh 21) 111

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 206 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)

Lower Containment Pressure I (sh 22)

Lower Containment Pressure II (sh 22)

WR SG Level Loop 1 (sh 34) 111 WR SG Level Loop 2 (sh 34) IV Containment Sump Level III (sh 40)

RCS WR Pressure I (sh 42)

RCS WR Pressure II (sh 42)

Containment Spray Pump I Discharge Header Flow Ill (sh 51)

Control Rack R27 RCS Flow Loop 1 (sh 3)

RCS Flow Loop 2 (sh 3)

RCS Flow Loop 3 (sh 3)

RCS Flow Loop 4 (sh 3)

Tavg Loop 2 (sh 8)

OPDT SP Loop 2 (sh 8)

OTDT SP Loop 2 (sh 8)

DT Loop 2 (sh 8)

Tavg Loop 4 (sh 10)

OPDT SP Loop 4 (sh 10)

OTDT SP Loop 4 (sh 10)

DT Loop 4 (sh 10)

Pzr Level II (sh 11)

Pzr Pressure II (sh 12)

Pzr Pressure IV (sh 44)

SG Feedwater Flow Loop I (sh 15).11 SG Compensated Steam Flow Loop 1 (sh 15) 11 SG Feedwater Flow Loop 2 (sh 16) 11 SG Compensated Steam Flow Loop 2 (sh 16) 11 SG Feedwater Flow Loop 3 (sh 47) 11 SG Compensated Steam Flow Loop 3 (sh 47) 11 SG Feedwater Flow Loop 4 (sh 48) 11 SG Compensated Steam Flow Loop 4 (sh 48) 11 SG Level Loop I (sh 17) 11 SG Level Loop 2 (sh 17) 11 SG Level Loop 3 (sh 17) 11 SG Level Loop 4 (sh 17) 11

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 207 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)

Turbine Impulse Pressure PT-1-73 Indication and computer (sh 18) 11 SO Level Loop 1 (sh 20) IV SO Level Loop 2 (sh 20) IV SG Level Loop 1 (sh 21) IV SO Level Loop 4 (sh 21) IV SO Level Loop 3 (sh 50) IV SO Level Loop 4 (sh 50) IV Lower Containment Pressure IV (sh 22)

Lower Containment Pressure III (sh 22)

WR SG Level Loop 3 (sh 34) IV (sh 22)

WR SG Level Loop 4 (sh 34)111 (sh 22)

Containment Spray Pump 2 Discharge Header Flow IV (sh 51)

RWST Level Computer point Ii (sh 52)

Containment Sump Level computer point II (sh 52)

Containment Sump Level computer point and MCR indictor IV (sh 52)

Time Response

i. Anti-Aliasing The system shall have the capability to implement anti-aliasing for all input signals. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.
2. Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).
3. Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals Involved in closed loop control.

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 208 of 440 10.0 MISC NSSS CONTROL SYSTEMS (continued)

4. Manual Control Response The total delay for all manual component control signals of these loops shall be no greater than 1000 milli-seconds.

Controller Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second. During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and ratellag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

Applicable Criteria & Standards The following criteria apply to this system.

institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4,7)

The above Criteria and Standards have been considered in preparing the requirements of this section.

System Diagrams None Accuracy See Section 3.9 11.0 SOP CONTROL AND INDICATION SYSTEM REQUIREMENTS 11.1 System Description

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 209 of 440 11.1 System Description (continued)

The Offerer will supply the necessary equipment in accordance with these general specifications to perform the SOP control and indication functions as described in the following detailed specifications and Appendix E - the SOP I/O List. In the specification that follows, this will be referred to as the "System" or the "BOP Control and Indication System." This equipment will replace an existing SOP instrumentation system, which is located in or whose I/O will be routed to 10 instrument racks in the Auxiliary Instrument Room (AIR), which receive inputs from various transmitters located locally throughout the plant, and which provides outputs to the ICS, to local control devices, and operator readout devices in the Main Control Room (MCR).

11.1.1 Redundancy The SOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required.

11.1.2 Field Loads The BOP control system shall be capable of supplying the field loads (eg.,

transmitters) with a maximum of 48 VOC.

11.2 System Functional Details The BOP control and indication system have been grouped into several generic categories. Specific loop details may be found the BOP I/O listing.

11.2.1 Integrated Control System (ICS) Data Point Loops and Test Loops A large number of the SOP Loops only provide data for input for the ICS through a resistor in the current loop with the power supply and transmitter or for pressure testing. This resistor driven communication scheme with ICS will be retained. The System will only provide power to the field sensor.

There will be no output for these loops. Refer to Appendix E for the sensor input signal, power supply requirement, and input signal location.

11.2.2 Main Control Room Display and Recording Loops A number of the SOP Loops serve only to provide readout data for the operator in the Main Control Room. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices. The required signals and locations are tabulated in Appendix E.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 210 of 440 11.2.3 Display and Contact Output Loops A number of the BOP Loops provide readout data for the operator in the Main Control Room and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights, or possibly contacts alone. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.

11.2.4 Display and Contact Output Loops with field located MVII A number of the BOP Loops have a locally mounted MV/I converter which has its own power supply, takes an input from a thermocouple, and delivers a 4 to 20 mA signal back to the signal processing equipment. The signal processing equipment provided by the Offerer will provide readout data for the operator in the Main Control Room and provide contact outputs for input to externally developed logic or annunciation and status lights. The System will interrogate the input current signal, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix E. All contacts will have externally supplied interrogation voltage.

11.2.5 Reactor Building Floor and Equipment Drain Sump Level Loops The Offerer will supply signal-processing equipment as tabulated in Appendix E to process signals from four ultrasonic Reactor Building Sump level sensors and transmitters. The sensors and transmitters are locally mounted and have their own power supplies. The outputs will be indication and switch outputs for annunciation and externally developed pump logic.

The System will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact outputs that will change status at predetermined setpoints.

11.2.6 Containment Moisture Loops The Offerer will provide signal processing equipment for 2 moisture sensing loops. The system will be required to interrogate a 4 to 20 mA input signal representing 40 to 140 degrees F dewpoint temperature. The System will monitor rate of change of the input and provide a contact output at a predetermined dewpoint temperature rate of change. See Appendix E for input output details.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification PPage 211 of 440 11.2.7 Main Feed Pump Suction Pressure Instrumentation and Alarm Sensors 2-PT-5-31 and 2-PT-2-129 provide pressure monitoring for 2 BOP points and are combined arithmetically to provide an alarm of low net positive suction pressure for the main feed pumps. Each of the 2 loops have an indicator on the on the Main Control Boards. Details on the input points and output points for the 2 loops are tabulated in Appendix E. In addition, a switch contact output denoted as 2-PS-2-129A will be required to drive an annunciator window based on the arithmetic difference between these 2 loop values. Scaling will be provided later.

11.2.8 Annulus Vacuum Control and Indication Loops Normal annulus vacuum control is maintained by 2 separate differential pressure measurement and control loops. Each loop measures differential pressure between the Annulus and Auxiliary Building exhaust stack. Only 1 of the 2 control loops is active at any one time. The controlling loop is switched out and the standby loop is switched in at a predetermined setpoint. The inputs and outputs are tabulated in Appendix E. The control function is simple setpoint control. For information, the configurations of the existing loops are shown in figures 11.2.8-1 and 11.2.8-2.

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 212 of 440 11.2.8 Annulus Vacuum Control and Indication Loops (continued)

K --

VR

(ý)----- ......

i~ ..........

Figure 11.2.8.-1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 213 of 440 11.2.8 Annulus Vacuum Control and Indication Loops (continued) 1 f- (1 tt~).

(S~am .............

a 4P b --"6-Figure 11.2.8.-2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 214 of 440 11.2.9 Hotwell Pump Discharge Bypass Flow Control This flow control loop is a function critical to plant availability as it is a fail open valve that can bypass sufficient flow to the condenser to starve the Main Feed Pump suction stream. It normally only modulates to control bypass flow to the condenser during short cycle operation. During normal operation, the valve is held closed by the high flow signal through the control system. The control function is simple setpoint control. The current plant design relies on a single flow transmitter input. The control scheme will be expanded to a three input system through Field Bus Modules located locally in the Turbine Building. See Appendix E for I/O details on the 2 new flow transmitters. Appendix E identifies the I/O requirements for the single transmitter input. There is a switch output for this loop but it is located locally in the turbine building and will be picked up in the current loop with the transmitter, and thus, will not require a System output. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide an output current loop to drive the valve I/P transducer.

11.3 Applicable Criteria & Standards The following criteria apply to this system.

Institute of Electrical & Electronics Engineers (IEEE)

Standards: IEEE Std. 279-1971 (Section 4.7)

The above Criteria and Standards have been considered in preparing the requirements of this section.

11.4 WBN System Diagrams None 11.5 Indicators, Status Lights. and Controls Main Control Room Controls See I/O Listing Main Control Room Indication Displays shall be located in the Main Control Room to provide the unit operator indications. See I/O listing.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 215 of 440 11.6 Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 11.7 Performance Limits Critical Control System See Section 11.2.

11.8 Specific Requirements None 11.9 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuraey is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.

11.10 Range TBD - See I/O Listing 11.11 Inputs Additional information for these inputs are documented in Appendix E

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 216 of 440 11.11 Inputs (continued)

The BOP inputs to the System are specified in Appendix E and are primarily transmitters. The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 MA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions that follow.

11.12 Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions.

11.13 Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 11.2. 9.

11.14 Time Response 11.14.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.

This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.

11.14.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

11.14.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 217 of 440 11.14.4 Manual Control Response The total delay for all manual component control signals shall be no greater than 1000 milli-seconds.

11.15 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

11.16 Noise Levels The root mean square noise should be limited to 1,2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

11.17 Programmed Functions None 11.18 Setpoints TBD - See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

11.19 Requirements for Test and Calibration The BOP Control and Indication System is not a protection system and, thus, does not require the capability of being tested at power.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 218 of 440 12.0 TURBINE BUILDING BOP EXPANSION (TBBOP) EQUIPMENT REQUIREMENTS 12.1 System Description The Offerer will supply the necessary equipment in accordance with these general specifications. The System will include 2 new instrument racks for local mounting in the Turbine Building for use in signal processing and control of local turbine building processes and devices. These racks and equipment will be suitable for use in an industrial type environment (not a controlled instrument room or control room type environment) and will include the necessary equipment to implement the Input/Output features specified in Appendix E and in the detailed loop descriptions provided in this section. Connection of the input sensor signals, the output to the controlled devices, and connection of the new racks with the System Control Processors in the Auxiliary Instrument Room will be done by TVA. On the Appendix E I/O list, these racks will be designated TB-N (north) and TB-S (south).

12.1.1 Redundancy The TBBOP control system shall have redundant control processors and power supplies as defined for the NSSS Control system. Redundant input and output modules are not required except for those input and output points identified as critical in Appendix E.

12.1.2 Field Loads The TBBOP control system shall be capable of supplying the field loads (eg.,

transmitters) with a maximum of 95 VDC.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 219 of 440 12.2 Instrument Rack Specifications 12.2.1 General Rack Requirements Two free standing instrument racks (TB-S and TB-N) shall be furnished of standard dimensions for mounting 19 inch rack style equipment. The rack will be large enough to house typical rack style signal processing equipment including space for terminal blocks suitable for landing typical field cables.

The rack shall be large enough to house the specified required I/O devices included in this Specification plus room for future expansion of other equipment. Approximate dimensions will be 30 inches deep by 90 inches tall, but any standard cabinet of similar dimensions will be suitable. The racks will include both front and rear doors. Terminal blocks shall be provided in each compartment for field termination of 120V AC power supply cables and input and output cables. Wiring from terminal blocks to function modules and power supply modules shall be provided as part of the System.

Separate terminal blocks shall be provided for 120V AC power supply wiring and instrument wiring. Two rows of full height terminal blocks shall be provided for future expansion. All terminals shall be readily accessible when the back door of each rack is opened.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 220 of 440 12.2.2 Internal wiring requirements Contractor shall give prime consideration to the prevention of fire when designing or selecting components and/or materials. Material shall not be used which would support combustion or cause the propagation of a fire.

Non-metallic components such as terminal blocks, wire and cable insulation, circuit boards, wire troughs, resistors, capacitors, cable ties, and switches shall be manufactured from materials which do not burn or are flame retardant as defined in IEEE Std 384-81 and are self-extinguishing as defined by IEEE Std 420-73. Polyvinyl chloride (PVC) shall not be used for wire insulation and cable jackets. For 120V AC power circuits where maximum current does not exceed 5 amperes, minimum wire size shall be 14 AWG. Instrument wiring and power wiring shall be separately bundled and be adequately supported to prevent sagging and breakage in transit and while in service. Bending radius of wires shall be in accordance with ICEA requirements for the specified wires. Each wire shall be cut so that wire manufacturer permanent marking is visible at its terminal block end. All wires shall be terminated by crimped, insulated ring-tongue type terminals.

Alternate termination mechanisms may be used with the approval of WVA.

Each wire shall be provided with suitable wire markers near its terminals for wire number identification. All terminal blocks shall be rated not less than 600V with barriers. Each terminal block shall be provided with a wire marking strip and terminal block cover secured onto the terminal block by nonferrous material. Termination of each field wire shall be made at separate terminal screw. The terminal screws shall be not less than No. 10.

Wiring shall be arranged to enable function modules and power supply modules to be removed and/or serviced without unduly disturbing the wiring.

No wire shall be routed across the modules in a manner which will impede or obstruct terminals.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 221 of 440 12.2.3 Detailed Rack Physical Requirements Each compartment shall have two vent openings, one at the bottom and the second at the top, for effective natural convection of heat produced by equipment. All vent openings shall be covered by EMI screen or honeycomb to prevent the entrance or exit of RFI. Door and front openings of the compartments shall be designed so that each 19-inch cabinet can be removed straight out without twisting and turning. The rack configuration shall allow for both top and bottom cable entry. The exact configuration of the cable access openings and conduit bulkhead fittings will be supplied upon submittal of the rack drawings. Each compartment door shall be made of one steel plate with edges turned back and rounded for rigidity. Door shall be flushed, equipped with concealed hinges, latches and 3-point lock. The lock shall be CCL Security Products 15766, 3 point Tee handle with chrome finish, or equal. All hinged doors shall have a flexible conductor bonded to the cabinet and door to ensure good electrical conductivity. Gaskets for doors and removable plates shall be provided. The gaskets shall be electrically conductive EMI type. Sheet steel used in the panel construction shall not be less than No. 11 gauge (0.12 inch) in thickness with sufficient structural reinforcement to assure a plane surface, to limit vibration and to provide rigidity. The panel base shall be designed for flat surface mounting.

Minimum height of the bottom of the lowest compartment to the floor shall be six (6) inches. The panel shall be provided with removable lifting eyes for lifting of the panel complete with all six fully functional 19-inch cabinets.

Contractor shall submit outline dimensional drawings and structural detail drawings of the panel.

12.2.4 Finishing, Painting and Shipping Requirements After fabrication, all manufacturer waste shall be removed from the equipment. All external and internal cast iron carbon steel and low alloy steel surfaces shall, as a minimum, be protected by application of one coat of primer and two coats of finish paint. All surfaces to be coated shall be prepared for priming by blast cleaning in accordance with the applicable Steel Structures Painting Council Specification. Primer shall be applied within eight (8) hours after blast cleaning and before rusting occurs.

Application of primer shall be in accordance with Federal Specification T"-P-664. After air dried, a first and second coat of alkyd enamel shall be applied per Federal Specification TT-E-508. The enamel shall be in accordance with Federal Standard No. 595a, Color No. 34410, light green. All grease, chalk, crayon, paint marks and other deleterious materials shall be removed from interior and exterior surfaces. At time of shipment equipment shall be clean inside and outside. All electrical and electronic equipment and parts including 19-inch cabinets shall be wrapped and sealed in plastic for weather protection during shipment and while in storage. Desiccant shall be used to prevent moisture build-up in sealed packages.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 222 of 440 12.3 Detailed Functional Descriptions 12.3.1 Temperature Control Functions Many of the control functions in the Turbine Building Racks are temperature control functions where the sensed variable is temperature and the control function is valve modulation to control a valve position to a selected temperature setpoint. The System input will be a thermocouple or RTD and the output will be a 4 to 20 mA control signal. In all cases, a local control station or a MCR control station will be required that will emulate a Handstation as outlined in Appendix F. The 1/O list reflects the 14 point I/O list that will provide the Handstation function in addition to the normal input and output. Refer to Appendix F for a list of the required control stations and design description. None of these functions are considered critical for the purposes of this specification. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide contact output, indication, and control to drive the valve I/P transducer. The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.

12.3.2 Heater Drain Tank Level Controls The System will provide level measurement and level control functions for both the #3 Heater Drain Tank and the #7 Heater Drain Tank. The control scheme for both tanks will be the same and the following is a description of the control system for one of the tanks. In both cases the System will be required to receive 3 level measurement inputs and provide control signals to 2 control valves. These are considered critical functions for the purposes of this specification. One of the 2 valves provides tank level control through a normal setpoint control scheme with proportional band and reset by modulating a control valve in the Heater Drain Tank Pump Discharge Header which feeds the Condensate stream. The second valve stays closed until a high level is reached indicating failure of the primary control system. Upon reaching a predetermined high setpoint, the second valve starts opening and dumping a portion of the Pump Suction Header to the Condenser. The control scheme for the second valve is proportional band control only. There are also various contact outputs for annunciation and logic. Local Handstations as detailed in Appendix F will be required for all control functions. The required inputs and outputs are listed in Appendix E and the Handstations will be listed in Appendix F. The System will provide power to the field sensor, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contact output, indication, and control to drive the valve I /P transducers. The required inputs and outputs are listed in Appendix E and the Handstations are listed in Appendix F.

12.4 Indicators, Status Lights. and Controls Main Control Room Controls None Main Control Room Indication None

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 223 of 440 12.5 Alarms and Annunciators Main Control Room Annunciation See IO listing Computer Monitoring The plant computer shall be used to generate alarm conditions. The following information shall be supplied to the computer systems. See I/O listing 12.6 Performance Limits See section 12.3 12.7 Specific Requirements None 12.8 Accuracy Channel accuracy is defined to include the accuracy of the primary element, transmitter, rack modules and any process or environmental effects on field mounted hardware. Rack environmental effects are not included in channel accuracy. The control accuracy is defined to include the channel accuracy plus the accuracy of any isolators in the system, the controller accuracy and the actual environmental effects.

Repeatability is defined as the closeness of agreement among repeated measurements of the output for the same value of input, under normal operating conditions over a short period of time (defined below), approaching an operating point from a defined direction. Therefore, repeatability recognizes but does not include any hysteresis non linearities in the system. The period of time over which the repeatability is defined is such that long term component drift is not included.

Accuracy Requirements for Normal and Abnormal Operating Conditions Digital processing effects such as analog-to-digital conversion, software round-off error, and digital-to-analog conversion should not contribute any additional inaccuracies greater than 0.5% of channel span to the uncertainties specified in the above accuracy requirements.

12.9 Range TBD - See i/O Listing

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 224 of 440 12.10 Inputs The TBBOP inputs to the System are specified in Appendix E and are primarily transmitters. The System must be able to supply power to the devices as noted in Appendix E. The System must be capable of accepting both 10 to 50 mA and 4 to 20 mA inputs. The input signals and locations are specified in Appendix E and in the detailed loop descriptions in Section 12.3.

12.11 Outputs The System outputs will be to indicating devices, recording devices, bistable outputs for both annunciation and logic functions, and analog control signals to final control devices. All outputs and their location are specified in Appendix E and in the detailed loop descriptions that follow.

12.12 Proposed Signal Validation Designs Input Signal Validation Critical Control System See Section 12.3.2.

12.13 Time Response 12.13.1lAnti=Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.

This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.

12.13.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 1000 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

12.13.3Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 1000 milli-seconds for control signals involved in closed loop control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 225 of 440 12.13.4Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.

12.14 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible hardware or software controller reset windup, After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within I second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

12.15 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag.

and filter time constants set to 0.0 and module gains set to 1.

12.16 Programmed Functions None 12.17 Setpoints TBD - See I/O Listing All settings with the exception of time constants shall be continuously adjustable within their range and all time constants shall be continuously adjustable or adjustable in increments such that any setpoint can be obtained within +/- 10% of the setpoint value.

12.18 Requirements for Test and Calibration The TBBOP Control System is not a protection system and, thus, does not require the capability of being tested at power.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 226 of 440 13.0 SHIPMENT AND STORAGE 13.1 Marking and Identification Cartons, shipping crates, or skid mounted equipment prepared for shipment shall be marked as required by the applicable carrier's rules, regulations, statutes, and the purchase order. Any individually packaged items shall be marked with the name of the vendor, the model, component, or part number, and the purchaser's contract and requisition numbers. Shipping containers shall be marked with the item description, quantities and weight, purchase order number, name and address of the supplier, name and address of the consignee, and the TVA contract number.

The Offerer shall submit to TVA at the time of shipment a detailed list of all items shipped, their quantities, and their crate location. This list shall be used by the engineer to ensure receipt at the plant site. Failure to provide a complete and adequate shipping list will delay the payment for the items until such time as a determination of adequate receipt can be made. The additional time required for verification as a result of the vendor's failure to provide the required documentation shall not entitle the vendor to any late charges, fees, or interest payments.

13.2 Preparation For Shipment The Offerer shall prepare all materials in such a manner as to facilitate handling and to protect them from damage in transit. The Offerer shall also be responsible for and make good any arnd all damage due to improper preparation for loading and shipment.

Boxes and crates shall have a packing list enclosed showing parts contained therein.

Before shipment all finished surfaces shall be coated or otherwise protected with an approved non-lead rust preventative.

All components and associated spare parts shall be assembled into the largest pieces which can be shipped to the jobsite without incurring additional shipping charges.

Exceptions can be made with prior approval of the Engineer.

13.3 Shipping Notice Shipping notices are required for any delivery. The shipping notices must arrive 10 days ahead of the estimated shipment arrival. These notices must be sent to the persons listed in the Commercial Terms section entitled Shipping Information and Marking. FAX transmittals 10 days ahead of estimated shipment arrival are acceptable, so long as a copy is sent following the FAX.

Advance notification for all shipments shall be made to the applicable site.

13.4 Storage Requirements All boxes and packages shall be labeled and shall state the environment recommended for their storage, e.g., outside, under roof, minimum and maximum temperature, and humidity control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 227 of 440 13.5 Spare Parts Spare parts shall be packaged separate from the remainder of the equipment. The shipping contents shall, in addition to labeling required in Section 13.1, be clearly labeled as containing spare parts.

13.6 Shipment The Offerer shall be fully responsible for damage from handling and environmental conditions during loading and shipment. Each assembly or component of the equipment shall be braced, crated, packed, or otherwise protected so that no damage will occur in transit, handling, or storage.

Provisions shall be made for lifting and skidding. All lifting points shall be clearly marked. All accessories, monitoring devices, and packing lists shall be packed and shipped with the equipment.

Shipments shall be made by Air Ride (Air Suspension) exclusively. Truck shipments will be accepted weekdays only between the hours of 7:00 a.m. and 1:00 p.m.

(Eastern Time) Monday through Friday. After-hour deliveries not provided for by contract may be refused until the next regular workday.

14.0 DEFINITIONS The following are definitions of terms that may be used throughout this specification.

Analog Signal - A continuously variable signal which varies across a range of voltage or current.

Architecture (System) - The combination and relationship of hardware, configuration, and communications of any system. The functions and capabilities contained in systems and how they operate with each other.

Bus - A control network topology in which nodes share one single linear medium.

Messages propagate the length of the medium and are received by all nodes simultaneously, except for distance considerations.

Common Mode Failure Source - An element of the control system which, when it fails, influences more than one piece of process equipment and inhibits operation of more than one out of a group of redundant process parts.

Computer - A logic processing device which performs many calculations sequentially, at high speed.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 228 of 440 14.0 DEFINITIONS (continued)

Communications Network (Also called a Data Highway) - The mechanism of transmitting data and commands between independently functioning microprocessors (nodes). A high speed, integrated, communications path capable of detecting the failure of nodes or the loss of signal integrity and able to recover from these losses. It should be fully redundant so that no single fault will cause the loss of communication of all plant signals. The media for the network may be twisted wire, coax, triax, twinax, or fiber optic cable.

Configuration - The ability of plant personnel to change the engineering and operational contents of a DCS without the requirement of a programmer. An example of a configuration change would be the use of a ODU screen display with fill-in blanks to change a high alarm limit from 1020 degrees to 1025 degrees.

Offerer, Vendor, Contractor, Supplier - Provider of the materials or services and any subcontracted supplier under this contract.

Cycle time - The time span in which the inputs programs (algorithms) and outputs in system is updated.

Data Base - The collection of stored data regarding the process variable programs and processing procedures.

Datalink - The use of a communications path to send more than one signal. Datalinks commonly use an RS 232-C serial cable which passes messages slowly according to a standard originally designed to allow computers to send print messages to printers.

Drop - An intelligent device performing specific functions that communicate through the node or the communications network and or subnetworks. Typical functions are data acquisition, monitoring, calculation, logging, controlling, printing, interfacing, etc.

A drop performs tasks without central supervision.

Detailed Functional Specifications - The detailed requirements and descriptions of the operation of the system as well as procedures and agreements as to development of the system provided by the Offerer.

Distributed Processing - Organizational mode of operation in which multiple processors are working concurrently or non-concurrently, each with their own memory and are connected by a network.

Engineer - The term "Engineer" or "Technical Engineer" is the Site Lead Electrical Engineer or their designee who is the point of contact for all technical issues. Further definition may be supplied in the special conditions section of the contract.

Failure - Whenever the external behavior of a system (to the process) does not conform to the expected system's specified performance.

Fault - Any abnormal event within the system, or malfunction in hardware or software.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 229 of 440 14.0 DEFINITIONS (continued)

Fault Tolerance - The quality of a system to assure functional integrity in the event of a component (hardware or software) fault. The ability to prevent failure of the system upon a fault in the system.

Functional Area - A functional area is a location, such as the control room, where all actions and annunciation need to be coordinated on all ODU screens and similar displays. A functional area would not be affected by actions in another functional area.

Functional Distribution - The ability to place control functions, such as the control of each SG Level, in a separate microprocessor or group of microprocessors operating as a single entity called a node. With this approach, each mill operates autonomously such that a failure of one of the nodes should not affect the ability of the other mills (nodes) to continue operations.

Functional Capacity - The number of I/O points on a card that may be used by the Control System. The maximum limit under is contract is 16 points/card regardless of the capability of the card.

Global Time - The time elapsed between the moment an external event triggers a system reaction and the moment the system actuates a processed response.

Hard Control - Hard control is the use of dedicated switches, indicators, and control stations for each device.

Hardware Cutoff - The date when TVA's ability to change I/O, node, or other hardware requirements without effecting delivery or price ends.

Hard Wire - Connecting and running dedicated wires between pieces of equipment, usually to communicate information or control commands. One wire communicates one (and only one) piece of information or command.

Input/Output (110) Points - The hard wired signals into or out of any C&MS.

Main Frame - A large computer that can handle multiple tasks concurrently Mean Time to Detection (MTTD) - The elapsed time (in hours) between the occurrence of a fault until it is detected by the service personnel. The MIUI'D depends on the technique used by the control system for fault detection, and the training of personnel's skills.

Mean Time to Repair (MTTR) - The elapsed time (in hours) to repair a component or a system after a fault has been detected, Medium Access Control - The method of determining which node has access to the network or sub-network.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 230 of 440 14.0 DEFINITIONS (continued)

Microcomputer - A computer whose packaging of electronic cards and speed is on a small scale, such as an IBM microcomputer used for classroom training.

Monitoring - A means of providing automatic performance supervision and alarming of the status of a plant process through which changes can be made to the status of the process through control equipment or operator action.

Multiprocessing - A computer organization mode of operation on a local basis in which multiple processors are working concurrently for high availability and/or high computing power.

Network Coupler- A device connecting two independent communications networks.

Node - A microprocessor or group of microprocessors that operate synchronously and can communicate data and/or commands over a communications network. A node performs tasks without central supervision.

Object Code - The instructions comprising a computer program expressed in machine language, being the binary representations which actually cause the computer machinery to execute operations, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.

Operator - TVA's plant personnel responsible for operating the unit and normally assigned to the control room.

Owner - Tennessee Valley Authority Plant Engineer - A technically competent plant person on TVA's staff assigned to the plant.

Point - A value or input in the system. Also a variable, point ID or tag name.

Ring - A topology in which the nodes are linked through point-to-point communication in a closed loop.

RISC - Reduced Instruction Set Computing: internal computing architecture where processor instructions are pared down so that most can be performed in a single processor cycle, theoretically improving computing efficiency.

RoHS - See web link http://www.rohs.gov.uk - Restriction of Hazardous Substances.

Scan Time - The interval between successive readings of a field input, including processing and reporting.

Serial Interface - Usually, as pertains to computers or terminals, the mechanical and electrical components that allow data to be sent sequentially-by-bit over a transmission medium; in contrast to parallel interface.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 231 of 440 14.0 DEFINITIONS (continued)

Soft Control - The use of ODU screens and keyboards for the direct operator interface to the process equipment (through to the final control actuators). Each ODU location can perform any one of the many control functions (i.e., stations, switches, indicators, etc.) that are presently located on the existing control panel.

Software - The computer programs which are a part of the System, are provided by the CONTRACTOR to "VA in accordance with the terms of the Contract Documents.

Software Cutoff - The date all program and configuration requirements become final and cannot be changed without effecting delivery or price.

Soft Wire - The use of a network to send and receive commands and information. No dedicated wires or connections to hardware exist.

Source Code - The instructions comprising a computer program expressed in the system programming language, without regard to whether the instructions are printed or stored magnetically on tape, disc, or other medium.

Starian - A local area network design and specification within the IEEE 802.3 standards subcommittee, characterized by I-Mbit/s baseband data transmission over two-pair wiring.

Star A topology in which the nodes are linked through a common point; either active or passive, such that loss of this central point causes loss of that network.

Sub-network - Serial network connecting nodes or communicating modules.

Switched Line - Communications link for which the physical path, established by dialing, may vary with each use.

Synchronous Transmission - Data communications where characters or bits are sent at a fixed rate with the transmitting and receiving devices synchronized.

System - The DCS and the equipment and software covered by the Contract Documents.

System Documentation - All printout specifications, file specifications, data base dictionary in file sequence, flow charts, ODU screen formats, report formats, and all documents which collectively contain a complete description and definition of all operating conditions of, and all maintenance requirements and procedures for all parts of the System, and all user guides describing the operation and management of the System.

Systems Network Architecture - The layered logical structure, formats, protocols, and procedures that govern information transmission.

Tree - A topology derived from the bus by branching the bus through active or passive splitters.

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 232 of 440 14.0 DEFINITIONS (continued)

Terminal - A point in a network at which data can either enter or leave; usually equipped with keyboard, often with a display, capable of sending and receiving data over a communications link.

Token Ring - A local network access mechanism and topology in which a supervisory frame or token is passed from station to station in sequential order; stations wishing to gain access to the network must wait for the token to arrive before transmitting data; in a token ring, the next logical station receiving the token is also the next physical station on the ring.

TVA Representative - A TVA Engineer or their designee who is the point of contact for coordinating Owner-witnessed events or materials inspection visits.

15.0 AUXILLIARY CONTROL ROOM EQUIPMENT REQUIREMENTS 15.1 System Description A separate, stand alone control system shall be provided to replace existing analog modules and hand control stations locating in existing panels in the Auxilliary Control Room (ACR). This equipment is intended to provide an alternate location to control certain loops if the Main Control Room (MCR) is uninhabitable. Accordingly, this system shall operate independently of the rest of the system described in the rest of this document, and shall not require the availability of any equipment outside the ACR to operate. It is desired that the engineering workstation located in the Aux Instrument Room not be required for loading the configuration when both controller processors power up; offerer shall state ifthis is required.

None of this equipment is safety related, but there are train associations as shown in the I/O list (Appendix G). A pair of control processors and associated I/O shall be provided for each train. Train A and B hardware will be physically separated.

15.1.1 Redundancy The ACR control system shall have redundant control processors and power supplies.

Redundant input and output modules are not required.

15.2 System Functional Details The ACR loops have been grouped into several generic categories. Specific loop details may be found in the I/O listing (Appendix G), which references these sections.

15.2.1 Indicator Loops A number of the ACR Loops serve only to provide readout data for the operator on panel 2-L-1 0. The System will provide power to the field sensor, will interrogate the field sensor output, and will provide the data to one or more control room devices-The required signals and locations are tabulated in Appendix G0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 233 of 440 15.2.2 Display and Contact Output Loops A number of the ACR Loops provide readout data for the operator on panel 2-L-10 and in addition, provide contact outputs for input to externally developed logic, annunciation and/or status lights. The System will provide power to the field sensor if required, will interrogate the field sensor output, will provide the data to one or more control room devices, and will provide contacts that will change status at predetermined setpoints. The required signals, contact outputs, and locations are tabulated in Appendix G.

15.2.3 Alternate Controller Loops Some of the ACR loops provide an alternate control loop for loops in the MCRIAIR.

For each loop, a switch is located in the ACR on panel 2-L-1-A or 2-L-11B to allow the operator to select either the MCR as the control location or the ACR as the control location. The switch simply selects which output goes to the control valve. Where a transmitter is included in the loop, standard PID control is required with a single input from a transmitter and a single output to a valve. Other loops are hand loading stations only. Hand control stations shall be provided as shown in the I/O list, to replace existing controllers. The required signals and locations are tabulated in Appendix G.

15.3 Time Response 16.3.1 Anti-Aliasing Filtering The system shall have the capability to implement anti-aliasing for all input signals.

This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within the subject loops.

15.3.2 Control Processors Response Time The control processor response time (from the control system's input module/s to output module/s including control system processing time) for all input signals shall not exceed 500 milli-seconds. This requirement includes all input process channels utilized for control, interlocks, and permissives within the noted system(s), and also applies to interlock and permissive signals calculated outside of but utilized within these loops. This requirement includes all modulating control signals, bistable logic (on/off) control signals, mode signals, and signals to the main control board (indication, status, and alarm/annunciators).

16.3.3 Communication Response Time between Control Processors Communication between different Control Processor pairs shall not exceed 500 milli-seconds for control signals involved in closed loop control.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 234 of 440 15.3.4 Manual Control Response The total delay for all manual component control signals shall be no greater than 500 milli-seconds.

15.4 Controller Reset Windup and Recovery Characteristics The control system shall not be susceptible to hardware or software controller reset windup. After the out-of-range signal causing the overload returns from the overload condition, all component units of the system must recover from the saturated condition and return to their correct output values (within normal error limits) within 1 second.

During recovery from overload, the output of all affected component units must progress smoothly from the saturated value to the correct value without oscillation or overshoot larger than 1% (peak to peak) of channel range exclusive of the theoretical amplification of lead/lag and rate/lag units. The 1 second recovery time specified above need be met only when all externally adjustable time delays are set to 0.0. The requirements on oscillation and overshoot should be met even with all externally adjustable time delays set to 0.0.

15.5 Noise Levels The root mean square noise should be limited to 1.2% of output span in all channels.

The noise limitation does not apply to process signal noise, e.g., fluctuations in applicable process variables, but should apply to all noise generated from detecting the signal onward. Where applicable, the requirement should be met with all lead, lag, and filter time constants set to 0.0 and module gains set to 1.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering I Upgrade Specification Rev. 0001 Specification I Page 235 of 440 Appendix A (Page I of 2)

Format Requirements 1.0

SUMMARY

IOVERVIEW Provide a general overview of the proposed system, and clearly list any alternative proposals or options as "ALTERNATE PROPOSAL #1", "OPTION #1", etc., and describe the difference from the base proposal and the advantages/disadvantages of each alternative/option.

2.0 PROJECT ORGANIZATION Submit the proposed project structure and identify key personnel by name and include qualifications (i.e., resume). Identify points of contact for technical, project management, and any other pertinent areas. Clearly indicate any requirements for support from outside the described structure.

3.0 SYSTEM DESIGN Provide the following:

A technical description of the proposed hardware system, its configuration, functional capabilities, physical mounting requirements, power supply requirements, its expansion capability, etc.

A technical description of the proposed software system, its configuration, functional capabilities, logic for operation, proposed graphics, and its expansion capabilities.

An overview of the techniques which will be used to ensure high availability and reliability. A listing of deliverables, including all hardware, software, training, and documentation included in the Offerer's base proposal and any alternative proposals.

A recommended spare parts list.

A list of recommended maintenance tools, including any specialty tools.

4.0 MILESTONE SCHEDULE Develop and show a design schedule with the following milestone dates:

  • Conceptual Design Complete
  • Required Plant Data Document Submittal
  • Approved SQAP Submittal
  • Approved System Design Description Submittal
  • Approved Logic Drawing Submittal

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 236 of 440 Appendix A (Page 2 of 2)

Format Requirements 4.0 MILESTONE SCHEDULE (continued)

  • Approved Wiring and Physical Drawing Submittal
  • Approved Power Requirements Submittal
  • Approved Component Accuracy and Seismic
  • Qualification Data Submittal
  • Approved EMI/RFI Test Plan Submittal
  • Approved EMIIRFI Test Report Submittal
  • Approved Drawing Submittal - All Drawings

" Design Complete - Hardware and Software

  • Approved FAT Test Plan Submittal
  • Approved FAT Documentation Submittal
  • Approved Bill of Material Submittal
  • Approved Software Configuration Control Documentation
  • Submittal
  • System Storage Requirements Submittal

" Approved Operators Guide Submittal

" System Delivery 5.0 SYSTEM COMPONENT INFORMATION Provide information, such as product specification sheets for all proposed components.

6.0 INDUSTRY REFERENCES Provide industry references for similar applications, nuclear or non-nuclear, and nuclear industry references. Include a description of the projects the hardware/software supplied, and a contact at the customer facility.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 237 of 440 Appendix B (Page I of 1)

Software Quality Spec Sheet (from Standard Specification SS-E18.15.01)

Requirements for Systems Critical to Plant Operations (CPO)

Requirements Normally Applied Requirements for this Requisition 5.1.1 Software QA Plans Section 3.5 of this Spec 5.1.2 Requirement Specification Section 3.5 of this Spec 5.1.3 Software Design Description Section 3.5 of this Spec 5.1.4 Coding Standards and Conventions Section 3.5 of this Spec 5.1.5 Software Verification and Validation Plan Section 3.5 of this Spec (SWP) (Not Required - See Section 5.1.6 of SS E18.15.01) 5.1.6 SWP for Systems other than SRPS (Validation Section 3.5 of this Spec is required but does not have to be performed by independent personnel) 5.1.7 Installation, Checkout, and Final Acceptance Section 3.5 of this Spec 5.1.8 User Manual Section 3.5 of this Spec 5.1.9 Source Code Listing Section 3.5 of this Spec 5.1.10 Software Training Section 3.5 of this Spec 5.1.11 Problem/Error Handling Section 3.5 of this Spec 5.1.12 Document Control and Media Control Section 3.5 of this Spec 5.1.13 Procurement of Software from Sub-tier Section 3.5 of this Spec Suppliers (Section 5.2 of SS E18.16.01 is not applicable, Section 5.3 is not applicable except for 5.3.1 which applies) 5.1.14 Configuration Control Section 3.5 of this Spec 5.1.15 Software Security Section 3.5 of this Spec

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 238 of 440 Appendix C (Page 1 of 2)

Functional Library The following is a listing of the minimum library function blocks:

Required Functions:

Function Generator RTD Input Manual Set Constant AND (2 Input)

Lead/Lag AND (4 Input)

OR (2 Input) OR (4-Input)

High/Low Limiter Digital Input Square Root Digital Output Velocity/Rate Limiter Manual Set Switch Analog Transfer Time Delay (analog)

High Select Digital Transfer Low Select Thermocouple Temperature Input High/Low Compare Digital Sum With Gain (4 Inputs) 4 Input Summer 2 Input Summer Multiply Elapsed Timer Divide Exclusive OR PID PID Error Input Indicator Station (for soft control) Pulse Input/Totalization M/A Station (Basic for soft control) Transfer Function M/A Station (Cascade for soft control) Ramp Function Analog Input Bias Function Analog Output Ratio Function Test Quality Exponential NOT Power Set Reset Flip Flop Logarithm (Natural and Common)

Timer Averaging Function Median Signal Select (3 Input) Rate/Lag Additional Desired Functions:

Regression Integration Digital Controller Polynomial Smith Predictor Interpolation Sequence Generator Matrix Addition Moving Average Matrix Multiplication Trigonometric Pulse Positioner Qualified OR (i.e., 3 out of 4) Pulse Rate Blink Pulse Input/Period Up/Down Counter Pulse Input/Frequency Other types of Flip Flops (D, JK, etc.) Adaptive tuning function Neural Networks

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 239 of 440 Appendix C (Page 2 of 2)

Functional Library Specific Minimum Set of Algorithms Lag Filter (i + -CS)

Lead/Lag

( + , s)

(I+ Es)

Lead with Two Lags 1+tS

( + - sXi + s)

Derivative

-rS

( + - S)

PID Function Output =+ +

Input TS

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 240 of 440 Appendix D (Page 1 of 7)

WBN Simulator Requirements The following Appendix is being added to better define the WBN Simulator upgrade modification requirements.

Simulator Requirements for Process Panel and BOP panel replacements.

1.0 Introduction The Watts Bar simulator is certified per the requirements of ANSI 3.5 as required by 10CFR55. This certification requires that operators receive training and testing on a simulator that looks and behaves in the same manner as the actual plant in both normal, abnormal, and accident conditions. Concerning the installation of the plant instrument panels, it is our goal to ensure that the quality of simulator fidelity remains at least as good as if not better than the present simulation.

There are two broad areas of simulation that must be considered. The first is the man/machine interface (panel hardware requirements or operator controls and displays) on the main trainer. The second is modeling the algorithms (software modeling and control requirements) that describe the internal operation of the new instrument panels. These two functional areas are divided to explain more fully the requirements for each.

7.0 Panel Hardware Requirements The simulator panels shall have the same look and "feel" as the plant. The requirements are:

A. The Offerer shall provide necessary simulator switches, controls, and panels to replicate those to be installed in Main Control Room and/or Auxiliary Control Room on existing simulator panels.

B. The Offerer shall supply two spares of each type of simulator hardware; i.e. ODU, keyboard, indicators, switches, control stations, etc. for new or custom equipment.

Spares for standard equipment such as VX-252 meters need not be included.

C. These controls shall be of the type that will interface with the present simulator i/O equipment. Simulator analog outputs are 0-10VDC @lma, analog inputs are 0-10V, and relay or lamp outputs are 20VDC@500ma. Digital inputs are simple dry contact closure (current sinking, 3.35VDC open circuit voltage, 1.25VDC threshold voltage).

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 241 of 440 Appendix D (Page 2 of 7)

WBN Simulator Requirements 7.0 Panel Hardware Requirements (continued)

D. MCR Controllers can be simulated or stimulated. In the simulated case, the panel device is simply a false front with appropriate dials, indicators, and switches that drive the software emulation of the controller function. In the simulated case, the Offerer would disclose full descriptions of the algorithms used, including limits, controller characteristics, rates, gains, etc. to ensure full fidelity. In the stimulated case, the actual controller would be mounted to the simulator panel with appropriate IO to make it fully functional. The controller would be the identical model to that installed in the plant, with the exception that qualification for seismic events and radiation exposure is not required The controller will then be set to identical tuning factors as the plant. In either case, each would have to meet the requirements listed in the software modeling and control requirements for initialization, snapshots, backtracks, etc. Either method would be satisfactory and the best way to simulate the proposed system is at Offerer discretion.

8.0 Software Modeling and Control Requirements Software shall be provided for two simulation systems: the simulation system with the panels attaehed and the develoirment systemr without panels attached. The functions of the proposed process cabinets and BOP racks shall be fully replicated in the WBN simulator to ensure fidelity. All simulator commands, such as fast time, real time, slow time, reset, freeze run, snapshot, etc. are to be accepted from the existing simulator computer. The Offerer shall specify in detail how the proposed equipment will respond to these commands, especially with regard to the Snap and Backtrack functions and the format and methodology of saving and resetting to a given state. The Reset feature must be able to reset to a saved condition with complete initialization for the saved condition. No effects from a previous simulator run must be carried over to the new reset condition. The requirements are:

A. The simulator must be able to freeze the process. This includes being able to freeze the time sensitive devices such that timing functions and integration do not continue.

Placing the simulator into run from freeze shall continue the process in the same manner as ifthe freeze had not occurred.

B. The software must be able to snapshot and reset to at least 1000 different initial conditions (ICs 0-999) When resetting to an IC after making a snapshot, the simulator must be able to resume simulation regardless of the condition of timing functions, such as controller integration values, signal conditioning values (lags, rates, etc). That is, the process shall be continuous with data prior to the snapshot. Snapshots shall be taken upon demand from the simulator before any calculations begin in order to ensure consistency of data between the simulator models and the digital feedwater software.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 242 of 440 Appendix D (Page 3 of 7)

WBN Simulator Requirements 8.0 Software Modeling and Control Requirements (continued)

C. The simulator must be able to provide at least 60 backtrack records in a cyclical type file such that the simulator may be reset to a previous point with a backtrack interval of 15 seconds to 5 minutes, with a nominal value of 1 minute. This enables instructors to backtrack the simulator to anywhere in the last hour of operation using a backtrack recording rate of 1 minute. Backtrack records shall be taken upon demand from the simulator before any calculations begin. The process of making the backtrack record shall not cause a visible pause in the execution of the simulation.

D. The simulation must be able to run in real time, fast time, and slow time. This may require changing the iteration rate rather than program time constants if necessary to maintain source code equivalence with the plant implementation of functional calculations and algorithms. Specifically, the normal real time execution of the simulator consists of 12 frames per second. A slow time factor of up to 24 may be applied, in which case the simulator executes the appropriate number of frames per second. Due to limitations of the simulator's core/RCS model, a fast time factor of no more than 2 is possible, in which case 24 frames per second would be executed.

Synchronization of the simulation software and digital feedwater system execution rates shall ensure that both systems maintain the same time rate.

E. The simulator must fully simulate the failure conditions expected in the plant-both single and multiple failures. This includes but is not limited to loss of power, CPU lockups, analog output failures, analog input failures, etc. The Offerer shall provide malfunction hooks as necessary in his software to perform these functions.

F. Upon removal of a malfunction to a failed simulated component, the simulator must be able to replicate the same response as would occur in the plant, such as changing outputs, alarms, etc. As an example, on a loss of power, a lead-lag module may have a step change in its output when power is restored and could impact a control system it is connected to in a negative way. The simulator must respond similarly.

G. The simulated process cabinets must have the same gains, time constants, logic, and failure modes as the system in the plant. A user interface must exist to modify parameters that can be field tuned in plant equipment.

H. There must be capability to modify or upgrade the software based upon changes in plant design, setpoints, time constants and other functions as necessary. There must be a method available to add malfunctions or remote functions to the code necessary to support future training needs, such as unforeseen problems that will require simulator training in the future.

1. The digital feedwater system shall accept a command from the simulator to erase all trend information. This would typically be used during license exams where the recall of trends from previous scenarios has the potential to compromise the exam. After receipt of this command, no past history of parameter trends shall be available from the panel mounted GUI displays.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 243 of 440 Appendix D (Page 4 of 7)

WBN Simulator Requirements 8.0 Software Modeling and Control Requirements (continued)

J. The incorporation of changes to the plant digital feedwater software into the simulator environment shall not invalidate existing simulator initial conditions. WVA recognizes that addition of new components to the plant software may result in those components not being initialized in the proper state for each simulator initial condition. This requirement means that the state of all existing components shall be preserved in order to minimize the initial condition stabilization required after incorporation of plant software changes on the simulator.

K. The software for the simulator development computer shall be able to run properly without the panel hardware attached in order to allow software testing and development when the simulator panels are not available. Initial conditions shall be portable between the simulation and development environments.

L. TVA engineers must have the capability to monitor and change internal variables that are important to the operation of the digital feedwater system for debugging and troubleshooting purposes.

M. If the plant digital feedwater systern, is to be interfaced directly to the plant Integrated Computer System (ICS), the simulator digital feedwater system software must provide the same computer points for transmission to the simulator ICS.

9.0 Implementation Requirements These modeling requirements can be implemented in two general ways. They may be fully simulated by the Offerer in the present WBN simulator computer, or they may be simulated using a stand alone computer running the same software as the plant. TVA engineers will assist the Offerer, if necessary, in the modification of existing simulator software to provide inputs that are not currently available or to rescale outputs as needed. Regardless of which option is chosen, the interfacing software which executes in the existing simulation and development computers shall be compatible with the Wafts Bar OpenSim simulation environment and shall be developed under Microsoft Visual Studio version 6.0. All source code and Developer Studio files necessary to build the interfacing task shall be supplied to TVA. Certain include files and libraries necessary to compile and link the interfacing program will be provided by TVA. The Offerer shall not modify these files in any way. The list of variables to be transferred shall be defined by a text file (or group of files) editable with any standard text editor. Modification of the file(s) and restarting the software shall be sufficient to redefine the list of variables to be transferred.

The general requirements for each simulation option are described below:

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 244 of 440 Appendix D (Page 5 of 7)

WBN Simulator Requirements 9.0 Implementation Requirements (continued)

A. Simulation in the present simulator computer.

Under this option, all software necessary to run the digital feedwater system would execute in the existing simulator and development computers. An interfacing task would execute under the OpenSim executive and transfer necessary inputs, outputs and state variables to and from the digital feedwater software which executes outside the OpenSim executive. If this option is chosen, the execution of the digital feedwater software shall not cause the rest of the simulation software to fail to execute on a real time basis.

B. Simulation of the new system on a standalone computer.

Under this option, the present simulator software models would supply input information to another computer(s) supplied by the Offerer and the simulator computer would accept output data from this computer. An interfacing task, similar in function and identical in requirements to that described under option (a) would communicate with the standalone computer. This computer would utilize the identical software source code as the plant processors for the functional calculations and algorithms such that fidelity is assured. Simulator-specific control routines external to these routines may be used. All timing relationships must be maintained for independent processes as in the plant processors regardless of series/parallel execution differences. Simulator communication to and from the new standalone computer(s) (eg, TCP/IP with Ethernet connections) must be compatible with existing simulator hardware and software.

Documentation for hardware and software requirements and protocols for interfacing with the existing simulation computer must be provided in detail.

The Offerer shall provide two simulated computer systems with supporting hardware: one to be used on the main simulator trainer and the other for simulation engineering development.

10.0 Documentation Requirements Manufacturer and vendor documentation for supplied hardware including configuration drawings of vendor packaging of equipment shall be supplied. Documentation of the hardware and software system, including content description and procedures for modifying and rebuilding the software system, shall be provided.

The Offerer shall provide, at a minimum, the following hardware documentation in the form of two printed and two electronic copies:

List of all parts required for installation into the simulator panels List of all required cables for connection to the computer room List of any required computer room interfacing equipment

INPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 245 of 440 Appendix D (Page 6 of 7)

WBN Simulator Requirements 10.0 Documentation Requirements (continued)

Interconnection diagrams detailing the proper connection of all panel instruments to the computer room equipment The Offerer shall provide, at a minimum, the following software documentation in the form of two printed and two electronic copies:

Description of the interfacing program which runs under the SimPort environment, including the structure of the message buffers used to transfer information to and from the digital feedwater system Description of the format of the text file(s) used to specify the variables transferred to and from the digital feedwater system Procedures for updating the simulator digital feedwater system for changes made in the plant Description of the organization and layout of initial condition and backtrack snapshots 11.0 Schedule All plant simulator hardware, software, and documentation shall be delivered as specified in the Commercial portion of this solicitation.

12.0 Licensing, Support, Training and Warranty Licensing fees for the simulator computer and development computer shall be included in the total price for the supplied digital feedwater simulation. The seller shall also provide a price quote per individual license for running the digital feedwater simulation on computers other than the simulator computer and development computer, as well as any available discounted license fees for running on multiple computers. TVA may choose to purchase additional licenses to allow use of the software on classroom computers.

On site technical support of the installation of simulator components must be provided. On site training for installation and maintenance of the simulator equipment must also be provided. The training shall include, at a minimum, the following:

  • Starting and stopping the software
  • Modifying the interface configuration file(s), including explanation of the file(s) format

" Incorporation of plant configuration changes into the simulator

  • Monitoring and changing internal variables
  • Establishment and stabilization of simulator initial conditions

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 246 of 440 Appendix D (Page 7 of 7)

WBN Simulator Requirements 12.0 Licensing, Support, Training and Warranty (continued)

A warranty period, one year at a minimum, shall be established after delivery during which the Offerer shall provide technical support.

13.0 Testing requirements The simulator system provided by the Offerer must be able to meet the requirements specified in this bid specification for snapshots, resets, etc. In addition, the Offerer shall provide necessary plant startup test data to the WBN simulator group so that the simulator can be verified to respond like the plant in each instrument process that is upgraded per the requirements of ANSI-3.5 1998. Offerer shall ensure that plant design changes as a result of plant or simulator implementation and installation are incorporated into the simulator software and/or hardware.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 247 of 440 Appendix E (Page 1 of 148) 10 Listings WBN Unit 2 Listing NSSS Control Racks NOTE This appendix is not being updated at Revision 1. The project I/O list is maintained in a separate Microsoft Access database.

LOOP NO DESCRIPTION SIGNAL SIGNAL FBM TYPE INPUT/OUTPUT COMMENTS SPEC LOCATION TYPE NUMBER MFW CONTROL SYSTEM FIC-003- MFW SG I M-3 4-20 MA FBM237 AO 0035 CNTRL - 4.0 Deviation Indication FIC-003- MFW SG 1 M-3 4-20 MA FBM237 A 4.

0035 CNTRL - Output 4.0 Indication FIC-003- MFW SG 1 M-3 24 VDC FBM241d DO 0035 CNTRL - Ramp 4.0 PB LED FIC-003- MFW SG 1 M-3 24 VDC FBM241d DO4 0035 CNTRL - Manual 4.0 PB LED FIC-003- MFW SG 1 M-3 24 VDC FBM241d DO 4.0 0035 CNTRL - Auto PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 248 of 440 Appendix E (Page 2 of 148) 10 Listings FIC-003- MFW SG 1 M-3 24 VDC FBM241d DO 0035 CNTRL - Increase 4.0 PB LED FIC-003- MFW SG 1 M-3 24 VDC FBM241d DO 0035 CNTRL - 4.0 Decrease PB LED FIC-003- MFW SG 1 M-3 CONTACT FBM241d DII 0035 CNTRL - increase 40 PB FIC-003- MFW SG 1 M-3 CONTACT FBM241d DI0 0035 CNTRL- 4.0 Decrease PB FIC-003- MFW SG 1 M-3 CONTACT FBM241d DI 0035 CNTRL - M/A PB 4.0 FIC-003- MFW SG 1 M-3 CONTACT FBM241d DI 0035 CNTRL - Ramp 4.0 PB FIC-003- MFW SO 2 CNTRL- M-3 4-20 MA FBM237 AO4 4.0 0048 Deviation Indication MFW SG 2 M-3 4-20 MA FBM237 AO FIC-003- CNTRL - Output 4.0 0048 Indication MFW SG 2 M-3 24 VDC FBM241d DO FIC-003- CNTRL - Ramp 4.0 0048 PB LED MFW SG 2 M-3 24 VDC FBM241d DO 4.0 FIC-003ý CNTRL - Manual 0048 PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 249 of 440 Appendix E (Page 3; of 148) 10 Listings MFWSG2 M-3 24 VDC FBM241d DO4 FIC-003- CNTRL - Auto PB 4.0 0048 LED MFW SG 2 M-3 24 VDC FBM241d DO 4.0 FIC-003- CNTRL - Increase 0048 PB LED MFWSG2 M-3 24 VDC FBM241d DO FIC-003- CNTRL - 4.0 0048 Decrease PB LED MFW SG 2 M-3 CONTACT FBM241d DI FIC-003- CNTRL - Increase 40 0048 PB MFW SG 2 M-3 CONTACT FBM241d DI FIC-003- CNTRL- 4.0 0048 Decrease PB MFW SG 2 M-3 CONTACT FBM241d DI FIC-003- CNTRL - MfA PB 4.0 0048 MFW SG 2 M-3 CONTACT FBM241d DI FIC-003- CNTRL - Ramp 4.0 0048 PB MFW SG 3 M-3 4-20 MA FBM237 AD A.

FIC-003- CNTRL - 4.0 0090 Deviation Indication MFW SG 3 M-3 4-20 MA FBM237 AD F1C-003- CNTRL - Output 4.0 0090 Indication MFW 0SG3 M-3 24VDC FBM241d DO4 F1C-003- CNTRL - Ramp 4.0 0090 PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 250 of 440 Appendix E (Page 4 of 148) 10 Listings MFWSG 3 M-3 24 VDC FBM241d DO4 FIC-O03- CNTRL - Manual 4.0 0090 PB LED MFW SG 3 M-3 24 VDC FBM241d DO)

FIC-003- CNTRL - Auto PB 4.0 0090 LED MFW SG 3 M-3 24 VDC FBM241d DO4 FIC-003- CNTRL - Increase 4.0 0090 PB LED MFW SG 3 M-3 24 VDC FBM241d DO FIC-003- CNTRL - 4.0 0090 Decrease PB LED MFW SG 3 M-3 CONTACT FBM241d 0l FIC-003- CNTRL - Increase 4.0 0090 P MFW SG 3 M-3 CONTACT FBM241d DI FIC-003- CNTRL- 4.0 0090 Decrease PB MFW SO 3 M-3 CONTACT FBM241d DI FIC-003- CNTRL - M/A PB 40 0090 MFW SG 3 M-3 CONTACT FBM241d DI FIC-003- CNTRL - Ramp 4.0 0090 PB MFW SG 4 M-3 4-20 MA FBM237 AO4 FIC-003- CNTRL - 4.0 0103 Deviation Indication MFW SG 4 M-3 4-20 MA FBM237 AO 4.0 FIC-003- CNTRL - Output Indication

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 251 of 440 Appendix E (Page 5 of 148) 10 Listings 0103 MFW SG 4 M-3 24 VDC FBM241 d DO FIC-003- CNTRL - Ramp 4.0 0103 PB LED MFWSG4 M-3 24 VDC FBM241d DO FIC-003- CNTRL - Manual 4.0 0103 PB LED MFW SG 4 M-3 24 VDC FBM241d DO FIC-003- CNTRL - Auto PB 4.0 0103 LED MFW SG 4 M-3 24 VDC FBM241d DO FIC-003- CNTRL - Increase 4.0 0103 PB LED MFW SG 4 M-3 24 VDC FBM241d DO FIC-003- CNTRL - 4.0 0103 Decrease PB LED MFW SG 4 M-3 CONTACT FBM241d DI FIC-D03- CNTRL - Increase 4.0 0103 PB MFW SG 4 M-3 CONTACT FBM241d DI FIC-003- CNTRL - 4.0 0103 Decrease PB MFW SG 4 M-3 CONTACT FBM241d DI FIC-003- CNTRL - MIA PB 4.0 0103 MFW SG 4 M-3 CONTACT FBM241d DI FIC-003- CNTRL - Ramp 4.0 0103 PB FM-003- CNTL SIGNAL TO R-16 4-20 MA 218 OUT 4.0 035 FCV-003-0035A

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 252 of 440 Appendix E (Page 6 of 148) 10 Listings FM-003- CNTL SIGNALTO R-15 4-20 MA 218 OUT 4.0 035G FCV-003-0035 FM-003- CNTLSIGNALTO R-19 4-20 MA 218 OUT 4.0 048 FCV-003-0048A FM-003- CNTLSIGNALTO R-19 4-20 MA 218 OUT 4.0 0048G FCV-003-0048 FM-003- CNTL SIGNAL TO R-21 4-20 MA 218 OUT 4.0 0090 FCV-003-0090A FM-003- CNTL SIGNAL TO R-21 4-20 MA 218 OUT 4-0 0090G FCV-003-0090 FM-003- CNTL SIGNAL TO R-23 4-20 MA 218 OUT 40 0103 FCV-003-0103A FM-003- CNTL SIGNAL TO R-23 4-20 MA 218 OUT 40 0103G FCV-003-0103 FR-003- FW SG NO. 1 M4 4-20 MA 237 OUT TP(R15)=10: Recorder--? 4.0 0035P001 FLOW FR-003- MS SG NO. 1 M-4 4-20 MA 237 OUT TP(R15)=10; Recorder-? 4.0 0035P002 FLOW FR-003- SG NO. 1 MED R-15 4-20 MA 237 OUT TP(R15)=10. Recorder? 4.0 0035P003 LEVEL FR-003- FW SG NO. 2 M-4 4-20 MA 237 OUT TP(R19)=10; Recorder? 4.0 0048P001 FLOW FR-003- MS SG NO. 2 M-4 4-20 MA 237 OUT TP(R19)=10; Recorder=? 4.0 0048P002 FLOW

NPG Site-Specific -WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 253 of 440 Appendix E (Page 7 of 148) 1O Listings FR-003- SG NO 2 MED R-19 4-20 MA 237 OUT TP(R19)=10; Recorder=? 4.0 0048P003 LEVEL FR-003- FWSG NO. 3 M-4 4-20 MA 237 OUT TP(R21)=10; Recorder-? 4.0 D09OPOOl FLOW FR-003- MS SG NO. 3 M-4 4-20 MA 237 OUT TP(R21)=10; Recorder-? 4.0 0090P002 FLOW FR-003- SG NO 3 MED R-21 4-20 MA 237 OUT TP(R21)l10; Recorder-? 4.0 0090P003 LEVEL FR-003- FW SG NO 4 M4 4-20 MA 237 OUT TP(R23)=10. Recorder? 4.0 0103POOl FLOW FR-003- MS SG NO. 4 M-4 4-20 MA 237 OUT TP(R23)=10; Recorder-? 4.0 0103P002 FLOW FR-003- SG NO. 4 MED R-23 4-20 MA 237 OUT TP(R23)=10: Recorder-? 4.0 0103P003 LEVEL FT-00I- STM FLOW SG I M-4 4-20 MA 2010? IN TP(R3)=10;IA=200x2:Total=410ohms 4.0 0003A-D from Eagle 21 (Redundant)

FT-001- STM FLOW SG 1 M4 4-20 MA 201D? IN TP(R7)=10;IA=200x2;Total=410ohms 4.0 0003B-E from Eagle 21 (Redundant)

FT-001- STM FLOW SG 2 M-4 4-20 MA 201D1 IN TP(R3)=10;IA=200x2;Tctal=410ohms 4.0 0010A-D from Eagle 21 (Redundant)

FT-001- STM FLOW SG 2 M-4 4-20 MA 2010? IN TP(R8)=10;IA=200x2:Total=410ohms 4.0 001OB-E from Eagle 21 (Redundant)

FT-001- STM FLOW SG 3 M-4 4-20 MA 201D? IN TP(R3)=10;lA=200x2;Total=41Dohms 4.0 0021A-D from Eagle 21 (Redundant)

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 264 of 440 Appendix E (Page 8 of 148) 10 Listings FT-001- STM FLOW SG 3 M-4 4-20 MA 201D? IN TP(R7)=10;IA=200x2;Total=410ohms 4.0 0021B-E from Eagle 21 (Redundant)

FT-001 - STM FLOW SG 4 M-4 4-20 MA 201 D? IN TP(R4)=10;IA=200x2:Total=410ohms 4.0 0028A-D fmm Eagle 21 (Redundant)

FT STM FLOW SG 4 M-4 4-20 MA 20103? IN TP(R8)= 10;A=200x2.Total=410ohms 4.0 0028B-E from Eagle 21 (Redundant)

FT-003- MFW FLOW SG I MA 4-20 MA 2010? IN TP(R3)=10:lA=20Ox2.Total=410ohms 4.0 0035A-D from Eagle 21 (Redundant)

FT-003- MFW FLOW SG i MA 4-20 MA 201D? IN TP(R7)=10;IA=200x2;Total=410ohms 4.0 O035B-E from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 2 M4 4-20 MA 201D? IN TP(R3)=10;lA=200x2;Total=410ohms 4.0 0048A-D from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 2 MA 4-20 MA 2010? IN TP(R8)=10:IA=200x2;Total-410ohms 4.0 0048B-E from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 3 M-4 4-20 MA 201D? IN TP(R4)=10;OA=20x2;Tatal=410ohms 4.0 0090A-D from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 3 MA 4-20 MA 2010? IN TP(R7)=10;A=200x2;TotaI=410ohms 4.0 0090B-E from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 4 M-4 4-20 MA 201D? IN TP(R4)=10:IA=200x2:TotaI=410ohms 4.0 0103A-D from Eagle 21 (Redundant)

FT-003- MFW FLOW SG 4 M-4 4-20 MA 201D? IN TP(RB)=10;,IA=200x2,TotaI=41Oohms 4.0 0103B-E from Eagle 21 (Redundant) 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 255 of 440 Appeindix E (Page 91 of 148) 10 Listings MFW SG I M-3 4-20 MA FBM237 AD LIC-003- BYPASS CNTRL- 4.0 0035A Deviation Indication MFW SO 1 M-3 4-20 MA FBM237 AD4 LIC-003- BYPASS CNTRL - 4.0 0035A6 Setpoint Indication MFW SG 1 M-3 4-20 MA FBM237 AO)

LIC-003- BYPASS CNTRL - 4.0 0035A Output Indication MFW SG 1 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - to 0035A Ramp PB LED MFW SG 1 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - 4.0 0035A Setpoint PB LED MFWSG 1I M-3 24 VDC FBM241d DO)

LIC-003- BYPASS CNTRL - 4.0 0035A Manual PB LED MFW SG 1 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - 4.0 0035A Auto PB LED MFW SG 1 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - 40 0035A Increase PB LED MFW SG 1 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0035A Decrease PB LED MFW SG 1 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0035A Increase PB MFW SG 1 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0035A Decrease PB MFWS G 1 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 256 of 440 Appendix E (Page 10 of 148) 10 Listings 0035A MIA PB MFWSOG I M-3 CONTACT FBM24Id Dl LIC-003- BYPASS CNTRL - 4.0 0035A Ramp P8 MFW SG 1 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL -

0035A Setpoint PB 4.0 MFW SG 2 M-3 4-20 MA FBM237 AO LIC-003- BYPASS CNTRL - 4.0 0048A Deviation Indication MFW SG 2 M-3 4-20 MA FBIM237 AO4 LIC-003- BYPASS CNTRL - 4.0 0048A Setpoint Indication MFWSG2 M-3 4-20 MA FBM237 AO 4.0 LIC-003- BYPASS CNTRL -

0048A Output Indication MFW SG 2 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - 40 0048A Ramp PB LED MFW S0 2 M-3 24 VDC FBM241 d DO LIC-003- BYPASS CNTRL - 4.0 0048A Setpoint PB LED MFW SG 2 M-3 24 VDC FBM241 d DO LIC-003- BYPASS CNTRL - 4o 0048A Manual PB LED MFW SO 2 M-3 24 VOC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0048A Auto PB LED MFW SG 2 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0048A Increase PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 257 of 440 Appemdix E (Page li of 148) 10 Listings MFW SG 2 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL -

0048A Decrease PB LED MFW SG 2 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0048A Increase PS MFW SG 2 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0048A Decrease PB MFW SG 2 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0048A M/A PB MFW SG 2 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0048A Ramp PS MFW SG 2 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0048A Setpoint PB, 4-0 MFW SG 3 M-3 4-20 MA FBM237 AO 40 LIC-003- BYPASS CNTRL - 40 0090A Deviation Indication MFW SG 3 M-3 4-20 MA FBM237 AO LIC-003- BYPASS CNTRL -

0090A Setpoint Indication MFN SG 3 M-3 4-20 MA FBM237 AO LIC-003- BYPASS CNTRL - 4.0 OD90A Output Indication MFWSG 3 M-3 24 VDC FBM241d DO '

LIC-003- BYPASS CNTRL - 4.0 0090A Ramp PB LED MFW SG 3 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0090A Setpoinl PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 258 of 440 Appendix E (Page 12 of 148) 10 Listings MFW SG 3 M-3 24 VDC FBM24Id DO LIC-003- BYPASS CNTRL - to 0090A Manual PB LED MFW SG 3 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0090A Auto PB LED MFW SG 3 M-3 24 VIDC FBM241d DO 4.0 LIC-003- BYPASS CNTRL -

0090A Increase PB LED MFWSG3 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0090A Decrease PB LED MFW SG 3 M-3 CONTACT FBM241d D0 LIC-003- BYPASS CNTRL - 40 0090A Increase PB MFWSG 3 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 40 0090A Decrease PB MFW SG 3 M-3 CONTACT FBM241d DI L1C-003- BYPASS CNTRL - 40 0090A M/A PB MFW SO 3 M-3 CONTACT FBM241d Di LIC-003- BYPASS CNTRL- 40 0090A Ramp PB MFW SG 3 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 40 O090A Setpoint PB 4.0 MFW SG 4 M-3 4-20 MA FBM237 AC 4.0 LIC-003- BYPASS CNTRL -

0103A Deviation Indication MFW SG 4 M-3 4-20 MA FBM237 AO4

[IC-003- BYPASS CNTRL - 4.0 0103A Setpoint I Indication

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 259 of 440 Appemdix E (Page 13 of 148) 10 Listings MFW SG 4 M-3 4-20 MA FBM237 AO LIC-003- BYPASS CNTRL - 4.0 0103A Output Indication MFW SG 4 M-3 24 VD FBM241d DO LIC-COS- BYPASS CNTRL - 4.0 0103A Ramp PB LED MFW SG 4 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0103A Setpoint PB LED MFW SG 4 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 40 0103A Manual PB LED MFW SG 4 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 40 0103A Auto PB LED MFWSG4 M-3 24 VDC FBM241d DO LIC-003- BYPASS CNTRL - 4.0 0103A Increase PB LED MFW SG 4 M-3 24 VDC FBM241d DO4 LIC-003- BYPASS CNTRL - 4.0 0103A Decrease PB LED MFW SG 4 M-3 CONTACT FBM241 d DI LIC-003- BYPASS CNTRL - 4.0 0103A Increase PB MFW SG 4 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0103A Decrease PB MFW SG 4 M-3 CONTACT FBM241d DIi LIC-003- BYPASS CNTRL - 4.0 0103A MIA PB MFW SG 4 M-3 CONTACT FBM241d DI LIC-003- BYPASS CNTRL - 4.0 0103A Ramp PB MFWSG 4 M-3 CONTACT FBM24Id DI LIC-003- BYPASS CNTRL - 4.0 0103A Setpoint PB

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 260 of 440 Appendix E (Page 14 of 148) 10 Listings 4.0 MFVV SETPT M-3 4-20 MA FBM237 AO LIC-003- CNTRL - 4.0 0231 Deviation Indication MFA SETPT M-3 4-20 MA FBM237 AO LIC-003- CNTRL - Output 4.0 0231 Indication MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL- Ramp 4.0 0231 PRIBED MFW SETPT M-3 24 V0C FBM241d DO LIC-003- CNTRL - Manual 4.0 0231 PB LED MFA SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Auto PB 4.0 0231 LED MAN SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Increase 4.0 0231 PB LED MFA SETPT M-3 24 VDC FBM241d Do)

LIC-003- CNTRL - 4.0 0231 Decrease PB LED MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - Increase 4.0 0231 PB MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - 4.0 0231 Decrease PB MFW SETPT M-3 CONTACT FBM241d DI 110-003- CNTRL - M/A PB 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 261 of 440 Appendix E (Page 15 of 148) 10 Listings 0231 LEC-003- MFW SETPT M-3 CONTACT FBM241d DI 4.0 0231 CNTRL PB - Ramp 40 4.0 MFW SETPT M-3 4-20 MA FBM237 AO 4.0 LIC-003- CNTRL -

0232 Deviation Indication MFW SETPT M-3 4-20 MA F8M237 AO LIC-003- CNTRL - Output 40 0232 Indication MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Ramp 40 0232 PB LED MFW SETPT M-3 24 VDC FBM241d DO4 LIC-003- CNTRL - Manual 4.0 0232 PB LED MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Auto PB 4.0 0232 LED MFW LI - 0 C NTRL SETPT

- Incre a se4 M-3 24 VDC FBM241d DO 4.0 0232 PB LED MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL-0232 Decrease PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 262 of 440 Appendix E (Page 16 of 148) 10 Listings MFW SETPT M-3 CONTACT FBM241 d DI LIC-003- CNTRL - Increase 4.0 0232 PB MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - 4.0 0232 Decrease PB MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - MIA PB 4.0 0232 MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - Ramp 4.0 0232 PB 4.0 4.0 MFW SETPT M-3 4-20 MA FBM237 AO LIC-003- CNTRL - 40 0233 Deviation Indication MFW SETPT M-3 4-20 MA FBM237 AO LICCOS3- CNTRL - Output 4.0 0233 Indication L MFW SETPT M-3 24 VDC FBM241d DO 4.0 LIC-003- CNTRL - Ramp 0233 PB LED MFW SETPT M-3 24 VDC FBM241d DCO UC-003- CNTRL - Manual 4.0 0233 PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 263 of 440 Appendix E (Page 17 of 148) 10 Listings MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Auto PB 4.0 0233 LED LIC-003- MFW CNTRL SETPT

- Increase M-3 24 VDC FBM241d DO to 0233 PB LED MFW SETPT M-3 24 VDC FBM241d D00 LIC-003- CNTRL - 4.0 0233 Decrease PB LED MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - Increase to 0233 PB MFW SETPT M-3 CONTACT FBM241d DI LFC-003- CNTRL - to 0233 Decrease PB MFW SETPT M-3 CONTACT FBM241d DI 4.0 LIC-003- CNTRL - MIA PB 0233 MFW SETPT M-3 CONTACT FBM241d 1I LIC-003- CNTRL - Ramp 4.0 0233 PB 4.0 MFW SETPT M-3 4-20 MA FBM237 AO4 LIC-003- CNTRL - 4.0 0234 Deviation Indication MFW SETPT M-3 4-20 MA FBM237 AO4 LIC-003- CNTRL - Output 4.0 0234 Indication MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Ramp 4.0 PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 264 of 440 Appendix E (Page 18 of 148) 10 Listings 0234 MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Manual 4.0 0234 PB LED MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Auto PB 4.0 0234 LED MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - Increase 4.0 0234 PB LED MFW SETPT M-3 24 VDC FBM241d DO LIC-003- CNTRL - 4.0 0234 Decrease PB LED MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - Increase 4.0 0234 PB MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - 4.0 0234 Decrease PB MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - M/A PB 4.0 0234 MFW SETPT M-3 CONTACT FBM241d DI LIC-003- CNTRL - Ramp 4.0 0234 PB 4.0 LS-003- MFW CNTRL R-15 Bistable OUT 40 0042D DEV ALARM 0-11VAC

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 265 of 440 Appendix E (Page 19 of 148) 10 Listings LS-003- MFW CNTRL R-15 Bistable OUT 4.0 0042E DEV ALARM 0-118BVAC LS-003- MFW CNTRL R-19 Bistable OUT 4.0 0055D DEV ALARM 0-118VAC LS-003- MFW CNTRL R-19 Bistable OUT 4.0 0055E DEV ALARM 0-118 VAC LS-003- MFW CNTRL R-21 Bistable OUT 40 0097D DEV ALARM 0-1 18 VAC LS-003- MFW CNTRL R-21 Bistable OUT 4.0 0097E DEV ALARM 0-1 18 VAC LS-003- MFW CNTRL R-23 Bistable OUT 4.0 0110D DEV ALARM 0-118 VAC LS-003- MFW CNTRL R-23 Bistab[e OUT 4.0 0110E DEV ALARM 0-418 VAC LT-003- SG NR LVL SG 1 R-15 4-20 MA 201D IN TP(R5)=10;ICS(R27)=100;IA=200x2;Total=510ohms 4.0 0038-E from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 1 R-15 4-20 MA 201D IN TP(R11)=10;ICS(R26)=100;IA=200x2;TotaI=510ohms 4.0 0039-F from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 1 R-15 4-20 MA 201D IN TP(R12)n-10; CS(R27)=100;IA=200x2;Total=50ohms 4.0 0042-G from Eagle 21 (Redundant)

LT-003- SG WR LVL SG I M-4 4-20 MA 201D IN TP(R6)=10:TP(R23)=10:ICS(R27)=1I0;IA=200;LI=5;LR=100; 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 266 of 440 Appendix E (Page 20 of 148) 10 Listings 0043-F from Eagle 21 TOTAL=425 LT-003- SG NR LVL SG 2 R-19 4-20 MA 201 D IN TP(RI)-10;ICS(R26)=100;IA=200x2;Total=51 Oohrns 4.0 0051-E from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 2 R-19 4-20 MA 201D IN TP(R1 1)=10:lCS(R26)=100;IA=200x2;Total=510ohma 4.0 0052-F from Eagle 21 (Redundant)

LT-003- SG NR LVIL SG 2 R-19 4-20 MA 201D IN TP(R12)=10:ICS(R27)=100:IA=200r2;Total=510ohms 4.0 0055-G from Eagle 21 (Redundant)

LT-003- SG WR LVL SG2 M-4 4-20 MA 201D IN TP(R2)=IO;TP(R23)=10;ICS(R26)=100;IA=200;LI=5;LR=100; 4.0 0056-G from Eagle 21 TOTAL=425 LT-003- SG NR LVL SG 3 R-21 4-20 MA 201D IN TP(R1)=10;ICS(R26)=100:IA=200x2;Tota=510Oohms 4.0 0093-E from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 3 R-21 4-20 MA 201D IN TP(R11)=10;ICS(R26)=100:IA=200x2;Total-510ohms 4.0 0094-F from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 3 R-21 4-20 MA 201D IN TP(R12)=10;ICS(R27)=100;IA=200x2;Total=510ohms 4.0 0097-G from Eagle 21 (Redundant)

LT-003- SG WR LVIL SG 3 M-4 4-20 MA 201D IN TP(R10)=1O.TP(R23)=10;ICS(R26)=100IlA=200;LI=5;LR=100; 4.0 0098-G from Eagle 21 TOTAL=425 LT-003- SG NR LVL SG 4 R-23 4-20 MA 201D IN TP(R5)=10;ICS(R27)=100;IA=200x2;Total=510ohms 4.0 0106-E from Eagle 21 (Redundant)

LT-003- SG NR LVL SG 4 R-23 4-20 MA 201D IN TP(R11)=10;ICS(R26)=100;IA=200x2;Total=51Oohms 4.0 0107-F from Eagle 21 (Redundant)

LT-003- SG NR LVIL SG 4 R-23 4-20 MA 201D IN TP(R12)=10;ICS(R27)=100-IA=200x2;Total=510ohms 4.0 0110-G from Eagle 21 (Redundant)

LT-003- SG WR LVL SG4 M-4 10-50 MA 201D IN TP(R13)-10;TP(R23)=10:ICS(R27)=100;IA=200:.LI=5;LR=100: 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 267 of 440 Appemdix E (Page 21 of 148) 10 Listings 0111-F from Eagle 21 TOTAL-425 MFWP MASTER M-3 4-20 MA FBM237 AC4 PC-046- SPEED CNTRL - 4.0 0020 Deviation Indication MFWP MASTER M-3 4-20 MA FBM237 AC)

PC-046- SPEED CNTRLL - 4_0 0020 Setpoint Indication A0 MFWP MASTER M-3 4-20 MA FBM237 A4)

PC-046- SPEED CNTRL - 4.0 0020 Output Indication MFWP MASTER M-3 24 VOC FBM241d DO PC-046- SPEED CNTRL - 4.0 0020 Ramp PB LED MFWP MASTER M-3 24 VDC FBM241d DO PC-046- SPEED CNTRL - 4.0 0020 Setpoint PB LED MFWP MASTER M-3 24 VDC FBM241d DO PC-046- SPEED CNTRL - 4.0 0020 Manual PB LED MFWP MASTER M-3 24 VDC FBM241d DO PC-046- SPEED CNTRL - 4.0 0020 Auto PB LED MFWP MASTER M-3 24 VDC FBM241d DO PC-046- SPEED CNTRL - 4.0 0020 Increase PB LED MFWP MASTER M-3 24 VDC FBM241d DC PC-046- SPEED CNTRL - 4.0 0020 Decrease PB LED MFWP MASTER M-3 CONTACT FBM241d DI PC-046- SPEED CNTRL - 4.0 0020 Increase PB MFWP MASTER M-3 CONTACT FBM241J DI P0-046- SPEED CNTRL - 4.0 0020 Decrease PB

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 268 of 440 Appendix E (Page 22 of 148) 10 Listings MFWP MASTER M-3 CONTACT FBM241d DI PC-046- SPEED CNTRL - 4.0 0020 M/A PB MFWP MASTER M-3 CONTACT FBM241d DII PC-046- SPEED CNTRL - 4.0 0020 Ramp PB MFWP MASTER M-3 CONTACT FBM241d DI PC-046- SPEED CNTRL - 4.0 0020 Setpoint Pa P1-1-033 Main Stm Header M-4 4-20 MA OUT 40 Pressure P1-1-033 4-20 MA PI-3-001 MFW Header M-3 237? OUT 4.0 Pressure PI-3-001 4-20 MA ...

PT-001- Main Stm Header R-24 201D IN 4-0 0006 Pressure SG 1 4-20 MA PT-001- Main Stm Header R-21 201D IN 4.0 0013 Pressure SG 2 4-20 MA PT-0OW- Main Stm Header R-21 201D IN 4.0 0024 Pressure SG 3 4-20 MA PT-001- Main Stm Header R-24 201D IN 4.0 0031 Pressure SG 4 4-20 MA PT-001- STM HDR PRESS R-16 201D IN PP(R16)=10?;IA=200x2:Total=410ohms 4.0 0033 (Redundant)

PT-001- STM HDR PRESS R-NEW 4-20 MA 201 IN PP(RNEW)=10?;IA=250x2:Total=510ohms 4.0 0033A (Redundant)

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 269 of 440 Appendix E (Page 23 of 148) 10 Listings PT-001- STM HDR PRESS R-NEW 4-20 MA 201 IN PP(RNEW)=10?:IA=250x2;Total=510ohms 4.0 0033B (Redundant) 4-20 MA PT-003- MFW HDR R-16 201D IN PP(R16)=10"R:IA=200x2;TotaI-410ohms 4.0 0001 PRESS (Redundant)

PT-003- MFW HDR R-NEW 4-20 MA 201 IN PP(RNEW)=t 0?;:A=250x2;Total=510ohms 4.0 0001A PRESS (Redundant)

PT-003- MFW HDR R-NEW 4-20 MA 201 IN PP(RNEW)=10?;IA=250x2;Total=510ohms 4.0 0001B PRESS (Redundant)

SC-046- MFPTASPEED R-16 10-50 MA 208 or 218 OUT Hart not needed for this function 4.0 0013A CONTROL Signal SC-046- MFPT B SPEED R-16 10-50 MA 208 or 218 OUT Hart not needed for this function 4.0 0040A CONTROL Signal TE-003- MFW HDR TEMP R-NEW 100 OHM 203 IN 4.0 0036 SG 1 RTD TE-003- MFW HDR TEMP R-NEW 100 OHM 203 IN 4.0 0049 SG 2 RTD TE-003- MFW HDR TEMP R-NEW 100 OHM 203 IN 4.0 0091 SG3 RTD TE-003- MFW HDR TEMP R-NEW 100 OHM 203 IN 4.0 0104 SG4 RTD

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 270 of 440 Appendix E (Page 24 of 148) 10 Listings LPY-092- NIS CHANNEL 1 R-25 0- 10 volts 201D? IN 4.0 0412P LPY-092- NIS CHANNEL 2 R-25 0 - 10 volts 201 D? IN 4.0 0412Q MFP A SPEED M-3 4-20 MA FBM237 AO SIC-046- CNTRL - 4-0 0020A Deviation Indication MFP A SPEED M-3 4-20 MA FBM237 AO SIC*046- CNTRL - Setpoint 40 0020A Indication MFP A SPEED M-3 4-20 MA FBM237 AO SIC-046- CNTRL- Output 4.0 0020A Indication MFP A SPEED M-3 24 VDC FBM241d DO SIC-046- CNTRL - Ramp 40 0020A PB LED MFP A SPEED M-3 24 VDC FBM241d DO SIC-046- CNTRL - Setpoint 40 0020A PB LED MFP A SPEED M-3 24 VDC FBM241d DO SIC-046- CNTRL - Manual 4.0 0020A PB LED MFP A SPEED M-3 24 VOC FBM241d DO SIC-046- CNTRL - Auto PB 4.0 0020A LED MFP A SPEED M-3 24 VDC FBM241d DO SIC-046- CNTRL - Increase 4.0 PB LED I

NPG Site-Specific Engineering Specification WBN Unit 2 NSSS and BOP Controls Upgrade Specification 1 I

Specification Rev. 0001 Page 271 of 440 Appendix E (Page 25 of 148)

I Listings 0020A MFP A SPEED M-3 24 VOC FBM241d DO 4.0 SIC-046- CNTRL- Decrease 0020A PB LED MFP A SPEED M-3 CONTACT FBM241d DI 4.0 SIC-046- CNTRL - Increase 0020A PB MFP A SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL- 40 0020A Decrease PB MFP A SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL- W/A PB 40 0020A MFP A SPEED M-3 CONTACT FBM241d 04 SIC-046- CNTRL - Ramp 4.0 0020A PB MFP A SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL - Setpoint 4.0 0020A PB MFP B SPEED M-3 4-20 MA FBM237 AO, SIC-046- CNTRL - 4.0 0020B Deviation Indication MFP 8 SPEED M-3 4-20 MA FBM237 AC0 SIC-046- CHTRL - Setpoint 4.0 0020B Indication MFP B SPEED M-3 4-20 MA FBM237 AO4 S1C-046- CNTRL- Output 4.0 0020B Indication MFP B SPEED M-3 24 VDC FBM241d DO4 SIC-046- CNTRL - Ramp 4.0 00206 PB LED MFP B SPEED M-3 24 VDC FBM241d DOI S1C-046- CNTRL - Setpoinl 4.0 00206 PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 272 of 440 Appendix E (Page 26 of 148) 10 Listings MFP B SPEED M-3 24 VDC FBM241d DO SIC-046- CNTRL - Manual 4.0 0020B PB LED MFP B SPEED M-3 24 VDC FBM241d DO4 SIC-046- CNTRL - Auto PB 4.0 0020B LED MFP B SPEED M-3 24 VDC FBM241d DO 4.0 SIC-046- CNTRL - Increase 0020B PB LED MFP B SPEED M-3 24 VDC FBM241d DO SICo046- CNTRL- Decrease 4.0 0020B PB LED MFP B SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL - Increase 4.0 0020B PB MFP B SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL- 4.0 0020B Decrease PB MFP B SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL- M/A PB 4.0 0020B MFP B SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL - Ramp 4.0 002DB PB MFP B SPEED M-3 CONTACT FBM241d DI SIC-046- CNTRL - Setpoint 4.0 0020B PB M-3 4-20 MA 4.0 IN PT-46-12 MFPT A BRG OIL PRESS M-3 4-20 MA 4.0 IN PT-46-17 MFPTA BRG OIL PRESS M-3 4-20 MA 4.0 IN PT-46-39 MFPT B BRG OIL PRESS

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 273 of 440 Appendix E (Page 27 of 148) 10 Listings M-3 4-20 MA 4.0 PT-46-45 MFPT B BRG OIL IN PRESS LPY-092- NIS CHANNEL 3 R-25 0 - 10 volts 201D? IN 4.0 0412R LPY-092- NIS CHANNEL 4 R-25 0 - 10 volts 201D? IN 4.0 0412S ZM-046- MFPT A LP GOV M-3 0-1 MA 201B IN 4.0 0013A VLV ZM-046- MFPT A HP GOV M-3 0-1 MA 201B IN 4.0 0013B VLV ZM-046- MFPT B LP GOV M-3 0-1 MA 2018 IN 4.0 0040A VLV ZM-046- MFPT B HP GOV M-3 0-1 MA 201B IN 4.0 0040B VLV MFW 4.0 Recirc 4-20 MA FT-003- MFW Pump A R-123 IN 4.0 0070A Header Flow FS-003- MFW Pump A R-123 Contact OUT 4.0 0070B Recirc Flow Annunc iator AN 2-11 M-3 FM-003- MFW Pump A 4-20 MA OUT 4.0 0070E Recire Flow Control Signal

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 274 of 440 Appendix E (Page 28 of 148)

I Listings MFW PUMP A M-3 4-20 MA FBM237 AO FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Deviation Indication MFW PUMP A M-3 4-20 MA FBM237 AO FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Setpoint Indication MFW PUMP A M-3 4-20 MA FBM237 AO4 FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Output Indication MFW PUMP A M-3 24 VDC FBM241d DO FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Ramp PB LED MFW PUMP A M-3 24 VDC FBM241d DO FIC-003- RECIRC FLOW 4-0 0070 CONTROL -

I Setpoint PB LED MFW PUMP A M-3 24 VDC FBM241 d DO FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Manual PB LED MFW PUMP A M-3 24 VDC FBM241d DO FIC-003- RECIRC FLOW 4.0 0070 CONTROL - Auto PB LED MFW PUMP A M-3 24 VDC FBM241d DO FIC-003- RECIRC FLOW 4.0 0070 CONTROL -

Increase PB LED MFW PUMP A M-3 24 VDC FBM241d DO FIC-003- RECIRC FLOW 4.0 0070 CONTROL-Decrease PB LED MFW PUMP A M-3 CONTACT FBM241d DI 4.0 FIC-003- RECIRC FLOW II0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 275 of 440 Appendix E (Page 29 of 148) 10 Listings 0070 CONTROL-Increase PB MFW PUMP A M-3 CONTACT FBM241d DI 4.0 FIC-003- RECIRC FLOW4 0070 CONTROL -

Decrease PB MFW PUMP A M-3 CONTACT FBM24Id DI FIC-003- RECIRC FLOW 40 0070 CONTROL - M/A PB MFW PUMP A M-3 CONTACT FBM241d DI 40 FIC-003- RECIRC FLOW 0070 CONTROL -

Ramp PB MFW` PUMP A M-3 CONTACT FBM241d 0I FIC-003- RECIRC FLOW 40 0070 CONTROL-Setpoint PB 4.0 FT-003- MFW Pump B R-130 4-20 MA IN 4.0 0084A Header Flow FS-003- MFW Pump B R-130 CONTACT OUT 40 0084B Recirc Flow Annunc iator AN 2-11 M-3 4-20 MA FM-003- MFW Pump B OUT i/P CONVERTER 40 0084E Recirc Flow Control Signal MFW PUMP B M-3 4-20 MA FBM237 AO FIC-003- RECIRC FLOW 40 0084 CONTROL -

Deviation Indication MFW PUMP B M-3 4-20 MA FBM237 AOC FIC-003- RECIRC FLOW 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 276 of 440 Appendix E (Page 30 of 148) 10 Listings 0084 CONTROL -

Setpoint Indication MFW PUMP B M-3 4-20 MA FBM237 AO4 FIC-003- RECIRC FLOW 4.0 0084 CONTROL-Output Indication MFW PUMP 8 M-3 24 VDC FBM241d DO 4.0 FIC-003- RECIRC FLOW 0084 CONTROL-Ramp PB LED MFW PUMP B M-3 24 VDC FBM241d D04 FIC-003- RECIRC FLOW 4.0 0084 CONTROL -

I Selpoint PB LED MFW PUMP B M-3 24 VDC FBM241d DO' 4.0 FIC-003- RECIRC FLOW 0084 CONTROL -

Manual PB LED MFW PUMP B M-3 24 VDC FBM241d DC0 4.0 FIC-003- RECIRC FLOW 0084 CONTROL - Auto PB LED MFW PUMP B M-3 24 VDC FBM241d D04 FIC-003- RECIRC FLOW 4.0 0084 CONTROL-Increase PB LED MFW PUMP B M-3 24 VOC FBM241d DO' 40 FIC-003- RECIRC FLOW 0084 CONTROL-I Decrease PB LED I MFW PUMP B M-3 CONTACT FBM241d DI FIC-003- RECIRC FLOW 4.0 0084 CONTROL -

Increase PB1 MFW PUMP B M-3 CONTACT FBM241d DI FIC-003- RECIRC FLOW 40 0084 CONTROL -

I Decrease PB

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 277 of 440 Appendix E (Page 31 of 148) 10 Listings MFW PUMP B M-3 CONTACT FBM241d DI 40 FIC-003- RECIRC FLOW 0084 CONTROL - WA PB MFW PUMP B M-3 CONTACT FBM241d DI FIC-003- RECIRC FLOW 40 0084 CONTROL -

I Ramp PB I MFW PUMP B M-3 CONTACT FBM241d DI FIC-003- RECIRC FLOW 40 0084 CONTROL -

Selpoint PB 4.0 FT-003- MFW Pump B R-130 4-20 MA IN 4.0 0084 Header Flow R-130 FI-003- MFW Pump B 4-20 MA OUT 4.0 00840 Recirc Flow Indication FT-003- MFW Pump A R-1 23 4-20 MA IN 4.0 0070D Header Flow FI-003- MFW Pump A R-123 4-20 MA OUT 4.0 0070 Recirc Flow Indication 4.0 FT-003- MFW Pump A R-1 23 4-20 MA IN 4.0 0070B Header Flow FT-003- MFW Pump B R-123 4-20 MA IN 4.0 0084B Header Flow

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 278 of 440 Appendix E (Page 32 of 148) 10 Listings FS-003- MFW Pump A R-1 23 CONTACT OU40 0070A Recirc Flow #7 Htr Drain Tank Pump Control CONTACT FS-003- MFW Pump A R-123 OUT 4.0 00700 Recirc Flow #7 Htr Drain Tank Pump Control FS-003- MFW Pump A R-123 CONTACT OUT 4.0 0070E Recirc Flow #7 Hit Drain Tank Pump Control 4.0 FT-003- MFW Standby R-141 4-20 MA IN 4.0 0208B Pump Header Flow MFW STANDBY M-3 4-20 MA FBM237 AO FIC-003- PUMP RECIRC 40 0208 FLOW CONTROL

- Deviation Indication MFW STANDBY M-3 4-20 MA FBM237 AO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Setpoint Indication MFW STANDBY M-3 4-20 MA FBM237 AO4 FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Output Indication MFW STANDBY M-3 24 VDC FBM241d DO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Ramp PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 279 of 440 Appendix E (Page 33 of 148) 10 Listings MFW STANDBY M-3 24 VDC FBM241d DO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Setpoint PB LED MFW STANDBY M-3 24 VDC FBM241d DO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Manual PB LED MFW STANDBY M-3 24 VDC FBM241d DO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Auto PB LED MFW STANDBY M-3 24 VDC FBM241d DO FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Increase PB LED MFW STANDBY M-3 24 VDC FBM241d DO FIC.003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Decrease PB LED MFWSTANDBY M-3 CONTACT FBM241d DI 4 FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Increase PB MFW STANDBY M-3 CONTACT FBM241d DI FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- Decrease PB I MFW STANDBY M-3 CONTACT FBM241d D4 FIC-003- PUMP RECIRC 4.0 0208 FLOW CONTROL

- MIA PB MFW STANDBY M-3 CONTACT FBM241d DI FIC-003- PUMP RECIRC 40 0208 FLOW CONTROL

- Ramp PB MFW STANDBY M-3 CONTACT FBM241d DI FIC-003- PUMP RECIRC 4.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 280 of 440 Appendix E (Page 34 of 148) 10 Listings 0208 FLOW CONTROL

- Setpoint PB FM-003- MFW STANDBY R-141 4-20 MA OUT 4.0 0208D PUMP RECIRC FLOW I/P CONVERTER FT-003- MFW Standby R-121 4-20 MA IN 4.0 0208A Pump Header Flow FI-003- MFW Standby R-121 4-20 MA OUT 4.0 0208 Pump Recirc Flow Indication CONTACT, FS-003- MFW Standby R-121 OUT 4.0 0208 Pump Recih Low Flow and Pump running logic ROD 5.0 CONTROL SYSTEM LOOP NO DESCRIPTION SIGNAL SIGNAL FBM TYPE INPUT/OUTPUT COMMENTS 5.0 LOCATION TYPE Rod CNTL BANKS M-4 CONTACT IN 5.0 Selector AUTO HS Rod CNTL BANKS M-4 CONTACT IN 5.0 Selector MANUAL HS

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 281 of 440 Appendix E (Page 35 of 148) 10 Listings Rod SHUTDOWN M-4 CONTACT IN 5.0 Selector BANKS MANUAL HS ISY ROD SPEED R-25 1.9 TO 9.5 OUT 5.0 412B DEMAND TO VDC ROD CONTROL SYS ISY ROD SPEED R-25 1.9 TO 9.5 OUT 5.0 4128 DEMAND TO VDC CEPRI IS3 RODS IN R-25 CONTACT OUT 5.0 412A/J ISB RODS OUT R-25 CONTACT OUT 5.0 412A1B ROD MANUAL R-25 9.5 VDC IN 5.0 CONTROL SUPPLY SYS VOLTAGE FROM LOGIC CABINET TM-88-2S AUCT DT TO R-24 4-20 MA OUT TO CEPRI (MODIFY CEPRI) 5.0 ROD CONTROL SYS TM-88-2 Tavg Loop 1 (from R-24 4-20 MA IN 5.0 Eagle 21 in R2) -

TY-412C TM Tavg Loop 2 (from R-24 4-20 MA IN 5.0 250 Eagle 21 in R6)

TY-422C

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 282 of 440 Appendix E (Page 36 of 148) 10 Listings TM Tavg Loop 3 (from R-24 4-20 MA IN 5.0 440 Eagle 21 in RIO)

TY-432C TM Tavg Loop 4 (from R-24 4-20 MA IN 5.0 67Q Eagle 21 in R13)

TY-442C Four position XS-68-2M Tavg Defeat M-5 Contacts 4 INs 5.0 Switch - Transmit Switch status across network PT-0O1- Turbine Impulse R-25 4-20 MA IN Hardwared and Tref replicated in Stm Dump Control 5.0 073 Pressure (from Eagle 21 in R4) -

PY-505A PT-0D1- Turbine Impulse R-16 4-20 MA IN Hardwared and Tref replicated in Stm Dump Control 50 072 Pressure (from Eagle 21 in R8) -

PY-506A PT-047- Diverse Signal R-NEW 1-5 VDC IN Hardwared and Tref replicated in Stm Dump Control 5.0 013 representative of Turbine Impulse Signal from R-56 Pressure IN TM-68-2 dT Loop I (from R-24 4-20 MA 5.0 Eagle 21 in R2) -

TY-411D II TM-68-25 dT Loop 2 (from R-24 4-20 MA IN 5.0 Eagle 21 in R6) -

TY-421D (R24)

TM-68-44 dT Loop 3 (from R-24 4-20 MA IN 5.0 1 Eagle 21 in RI0) - 1 1 1 1 1 1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 283 of 440 Appendix E (Page 37 of 148) 10 Listings TY-431D (R24)

IN TM-68-67 dT Loop 4 (from R-24 4-20 MA 5.0 Eagle 21 in R13) -

TY-441D (R24)

XS-68-2D Four position dT M-5 CONTACT 4 DIs required 5.0 Defeat Switch -

XS-6B-2D TM-68-2T Auctioneered dT R-27 Digital Output OUT 5.0 output to Plant to ICS Computer (ICS) for Rod insertion limits (TY-411Kin R24 going to R27)

TR 2 Pen Recorder M-5 4-20 MA OUT Recorder change out required 5.0 2BP01 (Auctioneered Tavg and Tref)

TR 2 Pen Recorder M-5 4-20 MA OUT Recorder change out required 5.0 2SP02 (Auctioneered Tavg and Tref)

TS Tavg Loop I R-24 BISTABLE OUT 5.0 2MIN Deviation Alarms (High) 118 VAC TS Tavg Loop I R-24 BISTABLE OUT 5.0 2NIM Deviation Alarms (Low) 118 VAC TS-"8- Tavg Loop 2 R-24 BISTABLE OUT 5.0 25M/N Deviation Alarms

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 284 of 440 Appendix E (Page 38 of 148) 10 Listings (High) 118 VAC TS Tavg Loop 2 R-24 BISTABLE OUT 5.0 25N/M Deviation Alarms (Low) 118 VAC TS Tavg Loop 3 R-24 BISTABLE OUT 5.0 44M1N Deviation Alarms (High) 118 VAC TS Tavg Loop 3 R-24 BISTABLE OUT 50 44N/M Deviation Alarms (Low) 118 VAC TS Tavg Loop 4 R-24 BISTABLE OUT 5.0 67M/N Deviation Alarms (High) 118 VAC TS Tavg Loop 4 R-24 BISTABLE OUT 5.0 67N/M Deviation Alarms (Low) 118 VAC TS Tref/Tavg R-24 BISTABLE OUT 5.0 2P1Q Deviation Alarm (High) 118 VAC TS Tref/Tavg R-24 BISTABLE OUT 5.0 2Q/P Deviation Alarm (Low) 118 VAC TS-68-2R High Auct Tavg R-24 BISTABLE OUT 5.0 Alarm 118 VAC TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 2A/B 1 High Deviation Alarm (TB-411J in 118 VAC

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 285 of 440 Appendix E (Page 39 of 148) 10 Listings R24)

TS dT/Auot dT Loop R-24 BISTABLE OUT 5.0 2B/A I Low Deviation Alarm (TB-41IK in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 25NB 2 High Deviation Alarm (TB-421J in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 25B/A 2 Low Deviation Alarm (TB-421K in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 44A/B 3 High Deviation Alarm (TB-431J in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 44B/A 3 Low Deviation Alarm (TB-431K in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 67A/B 4 High Deviation Alarm (TB-441J in 118 VAC R24)

TS dT/Auct dT Loop R-24 BISTABLE OUT 5.0 678/A 4 Low Deviation Alarm (TB-441K in 118 VAC R24)

NPG Site-Specific WBN Unit 2 NSSS and GOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 286 of 440 Appendix E (Page 40 of 148) 10 Listings STM DUMP CONTROL SYSTEM LOOP NO DESCRIPTION SIGNAL SIGNAL FBM TYPE INPUT/OUTPUT LOOP IMPEDANCE 6.0 LOCATION TYPE P4 Trip Breaker R-58 Contact IN 6.0 Status (Open)

P-4 Trip Breaker R-58 Contact IN 60 Status (Open)

Contact HS 3 Position Switch R-16 IN 60 1030 - Mode Switch -

Steam Pressure Mode Permissive IN RTCILRC R-16 Contact 6.0 SELECTOR SWITCH FM-1-103 Modulation R-16 4-20 MA OUT 60 Control Signal to Condenser Dump Valves TS-1-33A High Tavg Alarm R-16 Bistable OUT 6.0 118VAC TS-1-33B Hi HiTavg Alarm R-16 Bistable OUT 6.0 118 VAC

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 287 of 440 Appendix E (Page 41 of 148) 10 Listings OUT TS-1-33D High Tavg Alarm R-16 Bistable 6.0 118 VAC OUr TS-1-33E Hi Hi Tavg Alarm R-16 Bistable 6.0 118 VAC OUT PS-1-72E Loss of Load R-16 Bistable 6.0 Interlock 118 VAC PIC-001- Steam Dump MA 4-20 MA 237 OUT 0033 Pressure CNTRL - 6-0 Deviation PIC-ao1- Steam Dump MA 4-20 MA 237 OUT 0033 Pressure CNTRL 6.0

- Setpoint Indication PIC-001- Steam Dump MA 4-20 MA 237 OUTi.

0033 Pressure CNTRL - 6.0 1 Output Indication PIC-001- Steam Dump M-4 24 VDC 241c OUT 0033 Pressure CNTRL 60

- Ramp PB LED PIC-001- Steam Dump MA 24 VDC 241c OUT 0033 Pressure CNTRL - 6.0 Setpoint PB LED PIC-001- Steam Dump M-4 24 VDC 241c OUT 0033 Pressure CNTRL - 6.0 Manual PB LED PIC-001- Steam Dump MA 24 VDC 241c OUT 0033 Pressure CNTRL - 6.0 Auto PB LED PIC-001- Steam Dump M-4 CONTACT 241c IN 0033 Pressure CNTRL - 6.0 Increase PB PIC-001- Steam Dump MA CONTACT 241c IN 0033 Pressure CNTRL - 6.0 Decrease PB I I I I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 288 of 440 Appendix E (Page 42 of 148) 10 Listings PIC-001- Steam Dump M-4 CONTACT 241c IN 0033 Pressure CNTRL - 6.0 WA PB PIC-001- Steam Dump M-4 CONTACT 241c IN 0033 Pressure CNTRL - 60 Ramp PB1 PIC-001- Steam Dump M-4 CONTACT 241c iN 0033 Pressure CNTRL - 6,0 Setpoint PB PIC-00i- Steam Dump M-4 24 VOC 241c OUT 0033 Pressure CNTRL - 6.0 Increase PB LED PIC-O01- Steam Dump M-4 24 VDC 241c OUT 0033 Pressure CNTRL - 6.0 Decrease PB LED PIC-1-6A SG-i ATM Relief M-4 4-20 MA 237 OUT Valve CNTRL - 6.0 Deviation PIC-1-6A SG-1 ATM Relief M-4 4-20 MA 237 OUT Valve CNTRL - 6.0 Setpoint Indication PIC-1-6A SG-i ATM Relief M-4 4-20 MA 237 OUT Valve CNTRL - 6_0 Output Indication PIC-1-6A SG-1 ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.1 Ramp PB LED PIC-1-6A SG-1 ATM Relief M-4 24 VOC 241c OUT Valve CNTRL - 6.0 Setpoint PB LED PIC-I-SA SG-I ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.0 Manual PB LED PIC-1-6A SG-I ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.0 Auto PB LED PlC-i-BA SG-1 ATM Relief M-4 CONTACT 241c IN 6.0 Valve CNTRL -

Increase PB I I I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 289 of 440 Appendix E (Page 43 of 148) 10 Listings PIC-1-6A SG-1 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 6-0 Decrease PB PIC-*-6A SO-1 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 6.0 M/A PB PIC-IA-A SG-1 ATM Relief M4 CONTACT 241c IN Valve CNTRL - 6.0 Ramp PB.

PIC-1-6A SG-i ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 6.0 Setpoint PB PIC-1-6A SG-i ATM Relief M-4 24 VDC 241c ouir Valve CNTRL - 6.0 Increase PB LED PIC-1-6A SG-i ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.0 Decrease PB LED PM-I-6 SG-1 I/P M-4 4-20 MA 237 OUT 6.0 PIC-1-13A SG-2 ATM Relief M-4 4-20 MA 237 OUT'6 Valve CNTRL - 6.0 Deviation PIC-I-13A 6G-2 ATM Relief M-4 4-20 MA 237 OUT Valve CNTRL - 60 Setpoint Indication PIC-1-13A SG-2 ATM Relief M-4 4-20 MA 237 OU0 Valve CNTRL - 60 Output Indication PIC-1-13A SG-2 ATM Relief M-4 24 VDC 241c ou'6.

Valve CNTRL - 6,0 Ramp PB LED PIC-1-13A SG-2 ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.0 Setpoint PB LED PIC-1-13A SG-2 ATM Relief M-4 24 VDC 241c OUT 6.0 Valve CNTRL -

Manual PB LED

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 290 of 440 Appendix E (Page s of 148) 10 Listings PIC-1-13A SG-2 ATM Relief M4 24 VDC 241c OUT Valve CNTRL - 60 Auto PB LED PIC-1-13A SG-2 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 6.0 Increase PB PIC-I-13A SG-2 ATM Relief M-4 CONTACT 241c IN 6.0 Valve CNTRL -

Decrease PB PIC-1-13A SG-2 ATM Relief M-4 CONTACT 241c IN 60 Valve CNTRL -

M/A PB PIC-1-13A SG-2 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 60 Ramp PB PIC-1-13A SG-2 ATM Relief MA CONTACT 241c IN Valve CNTRL - 60 Setpoint PB PIC-1-13A SG-2 ATM Relief M-4 24 VDC 241 c OUT 5.0 Valve CNTRL -

I Increase PB LED PIC-1-13A SG-2 ATM Relief M4 24 VDC 241c OUT Valve CNTRL - 60 Decrease PB LED PM-1-13 SG-2 I/P M-4 4-20 MA 237 OUT 6.0 PIC-1-24A SG-3 ATM Relief M-4 4-20 MA 237 OUT 6.0 Valve CNTRL -

Deviation PIC-1-24A SG-3 ATM Relief M-4 4-20 MA 237 OUT 6.0 Valve CNTRL -

Selpoint Indication PIC-1-24A SG-3 ATM Relief M4 4-20 MA 237 OUT6r Valve CNTRL - 6.0 Output Indication PIC-1-24A SG-3 ATM Relief M4 24 VDC 241 c OUT6.

Valve CNTRL -

Ramp PB LED I 1_

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 291 of 440 Appendix E (Page 45 of 148) 10 Listings PIC-1-24A SG-3 ATM Relief M- 24 VDC 241c OUT 6.0 Valve CNTRL -

Setpoint PB LED PIC-1-24A SG-3 ATM Relief M-4 24 VDC 241c OUT 6.0 Valve CNTRL -

Manual PB LED PIC-1-24A SG-3 ATM Relief MA 24 VDC 241c OUT Valve CNTRL - 60 Auto PB LED PIC-1 -24A SG-3 ATM Relief M-4 CONTACT 241c IN 6.0 Valve CNTRL -

Increase PB PIC-1-24A SG-3 ATM Relief M4 CONTACT 241c IN 6.0 Valve CNTRL -

Decrease PB PIC-1-24A SG-3 ATM Relief M-4 CONTACT 241c IN 6.0 Valve CNTRL -

WA PB I PIC-1-24A SG-3 ATM Relief M4 CONTACT 24C IN Valve CNTRL - 60 Ramp PB PIC-1-24A SG-3 ATM Relief M4 CONTACT 241c IN 6.0 Valve CNTRL -

Selpoint PB PIC-1-24A SG-3 ATM Relief M-4 24 VDC 241c OUT Valve CNTRL - 6.0 Increase PB LED PIC-1 -24A SG-3 ATM Relief M-4 24 VDC 241c OUT 6.0 Valve CNTRL -

Decrease PB LED PM-1-24 SGO3 I/P M-4 4-20 MA 237 OUT 6.0 PIC-[-31A SO-4 ATM Relief M4 4-20 MA 237 OUT Valve CNTRL - 60 Deviation I PIC-1-31A SG-4 ATM Relief MA 4-20 MA 237 OUT 6.0 Valve CNTRL -

Setpoint Indication I

NPG Site-Specific WBN Unit 2 NSSS and BSOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 292 of 440 Appendix E (Page 46 of 148) 10 Listings PIC-1-31A SG-4 ATM Relief M-4 4-20 MA 237 OUT Valve CNTRL - 6.0 Output Indication PIC-1-31A SG-4 ATM Relief MA 24 VDC 241c OUT Valve CNTRL - 60 Ramp PB LED PIC-1-31A SG-4 ATM Relief MA 24 VDC 241c OUT Valve CNTRL - 60 Setpoint PB LED PIC-1-31A SG-4 ATM Relief MA 24 VDC 241c OUT Valve CNTRL - 60 Manual PB LED PIC-1-31A SG-4 ATM Relief MA 24 VDC 241c OUT6 Valve CNTRL - 6.0 Auto PB LED 1, PIC-1-31A SG-4 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 60 Increase PB PIC-1-31A SG-4 ATM Relief MA CONTACT 241c IN Valve CNTRL - 60 Decrease PB PIC-1-31A SG-4 ATM Relief MA CONTACT 241c IN Valve CNTRL - 6.0 MIA PB PIC-1-31A SG-4 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 6,0 Ramp PB PIC-1-31A SG-4 ATM Relief M-4 CONTACT 241c IN Valve CNTRL - 5.0 Setpoint PB *,_

PIC-1-31A SG4 ATM Relief MA 24 VDC 241c OUT Valve CNTRL - 6.0 Increase PB LED PIC-1-31A SG4 ATM Relief M-4 24 VDC 241c OUT 5.0 Valve CNTRL -

Decrease PB LED PM-1-31 SG-4 I/P M4 4-20 MA 237 OUT 6.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 293 of 440 Appendix E (Page 47 of 148) 10 Listings 4-20 MA IN PT-1-2A SG#1 Pressure R-26 6.0 PT-i-2B S Presur R 4-20 MA IN 6.0 PT-i-2B SG#2 Pressure R-27 4-20 MA 6.0 PT-i-SBA SG#2 Pressure R-26 4-20 MA IN 6.0 4-20 MA IN PT-1-20A SG#2 Pressure R-26 6.0 PT-1-27B SG#4 Pressure R-27 4t20 MA IN 6.0 BA BLENDER CONTROL SYSTEM LOOP NO DESCRIPTION SIGNAL SIGNAL FBM TYPE INPUT/OUTPUT LOOP IMPEDANCE 8.0 LOCATION TYPE 0-062- CVCS Blender PA-6 4-20 MA 237 OUT 0139 Makeup Flow 8.0 CNTRL -

Deviation _______

0-062- OVCS Blender MA-6 4-20 MA 237 OUT 0139 Makeup FlowCNTRL -

Setpaint Indication _____ ______ _____ _______ __________________________ ____

P-062- V7 S Blender - 4-20 MA 237 OUT 8.0 0139 Makeup FCowNNTRL -

_________ Output Indication _____ ______ _____ _______ _________________ ________ _____

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification -Page 294 of 440 Appendix E (Page 48 of 148) 10 Listings FC-062- CVCS Blender M-6 24 VDC 241c OUT 0139 Makeup 8.0 FIowCNTRL -

Ramp PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0139 Makeup 8.0 FlowCNTRL -

Setpoint PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0139 Makeup so FlowCNTRL -

Manual PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0139 Makeup 8.0 FlowCNTRL -

Auto PB LED FC-062- CVCS Blender M-6 CONTACT 241c IN 0139 Makeup 8.0 FlowCNTRL -

Increase PB FC-062- CVCS Blender M-6 CONTACT 241c IN 0139 Makeup 8.0 FlowCNTRL -

Decrease PB FC-062- CVCS Blender M-6 CONTACT 241c IN 0139 Makeup 8.0 FlowCNTRL - MA FC-062- CVCS Blender M-6 CONTACT 241c IN 0139 Makeup 8.0 FlowCNTRL -

Ramp PB, FC-062- CVCS Blender M-6 CONTACT 241c IN 8.0 0139 Makeup FlowCNTRL -

Setpoint PB1 FC-062- CVCS Blender M-6 24 VDC 241c OUT 8.0 0139 Makeup FlowCNTRL -

I Increase PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 295 of 440 Appendix E (Page 49 of 148) 10 Listings FC-062- CVCS Blender M-6 24 VDC 241c OUT 0139 Makeup 8.0 FlowCNTRL -

Decrease PB LED FC-062- CVCS Blender M-6 4-20 MA 237 OUT 0142 Makeup Flow 8.0 CNTRL -

Deviation FC-062- CVCS Blender M-6 4-20 MA 237 OUT 0142 Makeup 8.0 FlowCNTRL -

Setpoint Indication FC-062- CVCS Blender M-6 4-20 MA 237 OUT 0142 Makeup 8.0 FlowCNTRL -

Output Indication FC-062- CVCS Blender M-6 24 VDC 241c OUT 0142 Makeup 8.0 FaowCNTRL-I Ramp PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0142 Makeup 8.0 FlowCNTRL -

Setpoint PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0142 Makeup 8.0 FloWCNTRL -

Manual PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 0142 Makeup FlowCNTRL -

Auto PB LED FC-062- CVCS Blender M-6 CONTACT 241c IN 8.0 0142 Makeup 8-0 FlowCNTRL -

Increase PB FC-062- CVCS Blender M-6 CONTACT 241c IN 0142 Makeup 8.0 FIowCNTRL -

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 296 of 440 Appendix E (Page 50 of 148) 10 Listings Decrease PB, FC-062- CVCS Blender M-6 CONTACT 241c IN 0142 Makeup 8.0 FlowCNTRL - M/A PB FC-062- CVCS Blender M-6 CONTACT 241c IN 0142 Makeup 8.0 FlowCNTRL -

Ramp PB I FC-062- CVCS Blender M-6 CONTACT 241c IN 0142 Makeup 8.O FlowCNTRL -

Setpoint PB FC-062- CVCS Blender M-6 24 VDC 241c OUT 0142 Makeup 8.0 FlowCNTRL -

Increase PB LED FC-062- CVCS Blender M-6 24 VDC 241c OUT 8.0 0142 Makeup FIowCNTRL -

Decrease PB LED M-6 HS Auto Makeup CONTACT IN 8.0 140B Mode HS Alt-Dilute Mode CONTACT IN 8.0 140B FS Primary Water R-1 5 Bistable OUT 8.0 142A/B Deviation High 118VAC FS-"2- Primary Water R-15 Bistable OU1T 8.0 142B/A Deviation Low 118 VAC FS Boric Acid R-1 5 Bistable OUT 8.0 139A/B Deviation High 118 VAC

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 297 of 440 Appemdix E (Page 51 of 148) 10 Listings FS Boric Acid R-1 5 Bistable OUT 8.0 139BJA Deviation Low 118 VAC M-6 IN FQ-62-139 BA Batch Flow 4-20 MA 8,0 M-6 IN FO-62-142 Primary Water 4-20 MA 8.0 Batch Flow M-I OUT FM-62-140 CNTL SIGNAL TO 4-20 MA I/PCONVERTER 8.0 FCV-062-0140 FM-62-143 CNTL SIGNAL TO M5 4-20 MA OUT I/P CONVERTER 8.0 FCV-062-0143 Pzr Controls PT-68-340 Pressurizer R-15 4-20 MA IN 7.0 Pressure (Eagle

21) - Channel I (P-455A)

PT-68-334 Pressurizer R-19 4-20 MA IN 7.0 Pressure (Eagle

21) - Channel II (P-456A)

PT-68-323 Pressurizer R-15 4-20 MA IN 7.0 Pressure (Eagle 21)- Channel Ill (P-457A)

PT-68-322 Pressurizer R-19 4-20 MA IN 7.0 Pressure (Eagle

21) - Channel IV (P-458A)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 298 of 440 Appemdix E (Page 52 of 148) 10 Listings LT-68-320 Pressurizer Level R15 or 4-20 MA IN 7.0 (Eagle 21) - R18 Channel III (L-461A)

LT-68-335 Pressurizer Level R15 4-20 MA IN 7.0 (Eagle 21) -

Charnel II (L-460A)

LT-68-339 Pressurizer Level R18 4-20 MA IN 7.0 (Eagle 21) -

Channel I (L-459A)

TC-68-2 Auctioneered Tavg (TC-412C) R-18 4-20 MA IN 7.0 for Pzr Level Setpoint (internal control system input)

PIC-068- PZR Pressure M-4 4-20 MA 237 OUT 0340A Master CNTRL - 7.0 Deviation Indication PIC-068- PZR Pressure M-4 4-20 MA 237 OUT 0340A Master CNTRL - 7.0 Output Indication PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340A Master CNTRL - 7.0 Ramp PB LED PIC-068- PZR Pressure M-4 24 VDC 241 c OUT 0340A Master CNTRL - 7.0 Manual PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340A Master CNTRL - 7.0 Auto PB LED PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340A Master CNTRL - 7.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 299 of 440 Appemdix E (Page 53 of 148) 10 Listings I Increase PB PIC-068- PZR Pressure M-4 CONTACT 241 c IN 0340A Master CNTRL - 7.0 Decrease PB PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340A Master CNTRL - 7.0 MIA PB PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340A Master CNTRL - 7.0 Ramp PB PIC-068- PZR Pressure MA 24 VDC 241C OUT 0340A Master CNTRL - 7.0 Increase PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340A Master CNTIRL - 70 Decrease PB LED 7.0 PIC-068- PZR Pressure M-4 4-20 MA 237 OUT 0340D Loop 1 Spray 7.0 CNTRL -

Deviation Indication PIC-068- PZR Pressure M-4 4-20 MA 237 OUT 0340D Loop 1 Spray 7.0 CNTRL - Output Indication 1 1 PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340D Loop 1 Spray 7.0 CNTRL - Ramp PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340D Loop I Spray 7.0 CNTRL - Manual PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340D Loop 1 Spray 7.0 CNTRL - Auto PB LEDI

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 300 of 440 Appendix E (Page 54 of 148) 10 Listings PIC-068- PZR Pressure M-4 CONTACT 241c IN 7.0 0340D Loop 1 Spray CNTRL - Increase PS PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340D Loop 1 Spray 7-0 CNTRL-Decrease PB PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340D Loop 1 Spray 7.0 CNTRL - M/A PB13 PIC-068- PZR Pressure M-4 CONTACT 241c IN 0340D Loop I Spray 7.0 CNTRL - Ramp PB PIC-068- PZR Pressure MA 24 VDC 241c OUT 7.0 03400 Loop I Spray CNTRL - Increase PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 0340D Loop 1 Spray 7.0 CNTRL -

Decrease PB LED 7-0 PIC-068- PZR Pressure M-4 4-20 MA 237 OUT 7.0 0340B Loop 2 Spray CNTRL -

Deviation Indication PIC-068- PZR Pressure M-4 4-20 MA 237 OUT7.

0340B Loop 2 Spray 7.0 CNTRL - Output Indication PIC-068- PZR Pressure M-A 24 VDC 241c OUT 1.

0340B Loop 2 Spray 7.0 CNTRL - Ramp PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 7.0 0340B Loop 2 Spray IIIII_ 7.0

NPG Site-Specific WBN Unit 2 N$SS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 301 of 440 Appendix E (Page 55 of 148) 10 Listings CNTRL - Manual PB LED PIC-068- PZR Pressure M-4 24 VDC 241c OUT 03408 Loop 2 Spray 70 CNTRL - Auto PB LED PIC-068- PZR Pressure M-4 CONTACT 241c IN7 0340B Loop 2 Spray 7.0 CNTRL - Increase SPB PIC-068- PZR Pressure M-4 CONTACT 241c IN 7.0 0340B Loop 2 Spray CNTRL -

Decrease PB PIC-068- PZR Pressure M-4 CONTACT 241c IN 7.0 03408 Loop 2 Spray CNTRL - MA PB PIC-068- PZR Pressure M4 CONTACT 241 c IN 7.0 03408 Loop 2 Spray CNTRL - Ramp PB PIC-068- PZR Pressure M4 24 VDC 241c IN 7.0 0340B Loop 2 Spray CNTRL -

Deviation PB LED PIC-068- PZR Pressure MA4 24 VDC 241c OUT 03408 Loop 2 Spray 7.0 CNTRL - Increase PB LED LIC Pzr Level CNTRL M 4-20 MA 237 OUT 7.0 339 Deviation Indication LIC-068- PZR Level M4 4-20 MA 237 OUT 0339 CNTRL - Setpoint 7.0 Indication LIC-068- PZR Level M4 4-20 MA 237 OUT 7.0 0339 CNTRL - Output Indication I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 302 of 440 Appendix E (Page 58 of 148) 10 Listings LIC-068- PZR Level M-4 24 VDC 241c OUT 0339 CNTRL - Ramp 7.0 PB LED LIC-068- PZR Level M-4 24 VOC 241c OUT 7O 0339 CNTRL - Setpoint PB LED LIC-068- PZR Level M-4 24 VDC 241c OUT 0339 CNTRL - Manual 7.0 PB LED LIC-068- PZR Level M41 24 VDC 241c OUT 7.0 0339 CNTRL - Auto PB LED I LIC-068- PZR Level M-4 CONTACT 241C IN 7.0 0339 CNTRL - Increase PB LIC-068- PZR Level M-4 CONTACT 241c IN 7-0 0339 CNTRL -

Decrease PB LIC-068- PZR Level M-4 CONTACT 241c IN 7.0 0339 CNTRL - WA PB LIC-068- PZR Level M-4 CONTACT 241c IN 7.0 0339 CNTRL - Ramp PB LIC-068- PZR Level M-4 CONTACT 241c IN 0339 CNTRL - Setpoint 7.0 PB LIC-068- PZR Level M-4 24 VDC 241c OUT 7.0 0339 CNTRL - Increase PB LED LIC-068- PZR Level M-4 24 VDC 241c OUT 7.0 0339 CNTRL -

Decrease PB LED LT-088- Pressurizer Level R-25 4 - 20 ma IN 321 Pressurizer Level 4-20ma OUT LI-068-321 R-25 7.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 303 of 440 Appendix E (Page 57 of 148) 10 Listings X548 Four position Pressurizer M-5 CONTACT 1 241c IN 70 340D Pressure Control Selector Switch -

(PS-455F)

Four position CONTACT 2 241c IN XS Pressurizer M-5 7.0 340D Pressure Control Selector Switch -

(PS-455F)

Four position CONTACT 3 241c IN XS Pressurizer M-5 7.0 340D Pressure Control Selector Switch -

(PS-455F)

Four position Pressurizer M-5 CONTACT 4 241c IN 7.0 340D Pressure Control Selector Switch -

(PS-455F) 7.0 7.0 Four position CONTACT1 241c IN0 Pressurizer Level M-5 C2 339E Control Selector Switch - (LS-459D)

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 304 of 440 Appendix E (Page 58 of 148) 10 Listings Four position CONTACT 2 24.c IN Pressurizer Level M-5 C Tc 339E Control Selector Switch - (LS-Four position CONTACT 3 241c IN 7.0 XS Pressurizer Level M-5 339E Control Selector Switch - (LS-459D)

XS Four positionLevel CONTACT 4 241c IN 33 Pressurizer CNA 4 21 I 339E Control Selector Switch - (IS-459D).

7.0 RCS Wide Range TM-68-1 That Temperature R14 4-20 MA 201 IN 7.0 Loop 1 - (TY- (Redundant) 413C) - Train A (Eagle 21) to TM-68-1 E RCS Wide Range TM-68-24 That Temperature R14 4-20 MA 201 IN 7.0 Loop 2 - (TY- (Redundant) 423C) - Train A (Eagle 21) to TM-68-IE RCS Wide Range TM-68-43 Thot Temperature R17 4-20 MA 201 IN 7.0 Loop 3 - (TY- (Redundant) 433C) - Train B (Eagle 21) to TM-68-43E RCS Wide Range TM-68-65 ThOt Temperature R17 4-20 MA 201 IN 7.0 Loop 4 - (TY- (Redundant) 443C) - Train B (Eagle 21) to TM.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 305 of 440 Appendix E (Page 59 of 148) 10 Listings68-43E TM-68-18 RCS Wide Range TCWid R14 4-20 MA 201 IN 7.0 Temperature (Redundant)

Loop 1 - (TY-413D) - Train A (Eagle 21) to TM-68-1E RCS Wide Range TM-68-41 Twold R14 4-20 MA 201 IN 7.0 Temperature (Redundant)

Loop 2 - (TY-423D) - Train A (Eagle 21) to TM-68-1 E TM-68-60 CWde Range R17 4-20 MA 201 IN 7.0 TM80 Tcold10 Temperature (Redundant)

Loop 3 - (TY-433D) - Train B (Eagle 21) to TM-I 68-43E TM-68-83 RCS Wide Range R17 4-20 MA 201 IN 7.0 Temperature (Redundant)

Loop 4 - (TY-443D) - Train B (Eagle 21) to TM-68-43E PM-68-66 RCS Wide Range R15 4-20 MA 201 IN 7.0 Pressure (PY- (Redundant) 403A) - Train A (Eagle 21) to PS-68-66G/H PM-68-68 RCS Wide Range R20 4-20 MA 201 IN 7.0 Pressure (PY- (Redundant) 405A) - Train B (Eagle 21) to PS-

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 306 of 440 Appendix E (Page 60 of 148) 10 Listings 68-MBG/H PI-69-66A RCS Wide Range R-15 4-20 MA OUT 7.0 Pressure Indication PM Loop I R-15 4-20 MA 218 OUT (I/P require change cut to 4-20ma) 7.0 340H Pressurizer Spray (Redundant)

Control Output -

IUP Converter to PCV-68-340D PM Loop 2 R-15 4-20 MA 218 OUT (I/P require change out to 4-20ma) 7.0 340G Pressurizer Spray (Redundant)

Control Output -

(PC-455B) - R15 to Spray Valve PCV-68-340B PS R19 Bistable 241c? OUT 7.0 334G/F Open PORV PCV-68-334 118 VAC (Energize output on High Pressure)

- PB-456E PS-GB- R19 Bistable 241c? OUT 7.0 334F/G High Pressure Annunciation (De- 118 VAC energize output on High Pressure)

-PB-456F PS R19 Bistable 241c? OUT 7.0 3228 PCV-68-340A (PCV-455A) 118 VAC Interlock (Energize output on High Pressure) 1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 307 of 440 Appendix E (Page 611 of 148) 10 Listings

- PB-4588 PS PCV-68-334 R15 Bistable 241c? OUT 7.0 323F (PCV-456A) 118 VAC Interlock (Energize output on Hsgh Pressure)

- PB-457E PS R15 Bistable 241c? OUT 7.0 340H Open PORV PCV-68-340A 118 VAC (Energize output on High Pressure)

- PB455E PS R15 Bistable 241c? OUT 7.0 340G/F Low Pressure Htr Control and 118 VAC Annunciation 2-110 (Energize output on Low Pressure) - PB-455G PS Turn on Backup R15 Bistable 241c? OUT 7.0 340G/F Heaters an Low Pressure 118 VAC (Energize output an Low Pressure)

- PB-455G PC R15 4-20 MA 218 OUT (Change out to 4-20ma if Robicon controls (680 ohm resistor) 7.0 340E Pressurizer Variable Heater can becontrols).

MFPT changed or use the 10-50ma design being used for Control Output -

PC-455D - R15 to

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 308 of 440 Appemdix E (Page 62 of 148) 10 Listings Robicon SCR heater control input Two Pen LR-68-339 Recorder with Pzr R-24 4-20 MA 218 OUT (Recorder change to 4-20ma required) 7.0 P002 Level Setpoint Program Value (function of Tavg)

LS +5% High Level7.

LS Deviation R18 Bistable 241c? OUT 7.0 339./F Annunciation 2- 118 VAC 117 (Energize output on High Level) - LB-459E

-5% Low Level LS Deviation R18 Bistable 241c? OUT 7.0 339F1E Annunciation 14- 118 VAC 65 (Energize output on Low Level) - LB-459F 17% Low Level LS Letdown Isolation R15 Bistable 241c? OUT (Look at need for separate outputs for each function) 70 335E/D (Close FCV 118 VAC 69), Letdown Orifice Isolation (Closes FCV 72, -73, & -74),

and Annunciation 2-116 (Energize output on Low Level) - LB-460D ,..

17% Low Level LS Letdown Isolation R18 Bistable 241 c? OUT (Look at need for separate outputs for each function) 7.0 339D (Close FCV 118 VAC 70), Letdown Orifice Isolation (Closes FCV 72, -73, & -74),

and Annunciation

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 309 of 440 Appendix E (Page 63 of 148) 10 Listings 2-116 (Energize output on Low

,._ Level) - LB-459C LS 70% High Level R15 Bistable 241c? OUT 7.0 335DIE Annunciation 14-64 (De-energize 118 VAC output on High Level) - LB-460C TS-68-1 WR RCS Low R14 Bistable 241c? OUT 7.0 Temperature Annunciation ANN 118 VAC 13-110 (4A-67B -

De-energize output on Low Temperature) -

TB-413J COPS A Over-PS pressurization R14 Bistable 241c? OUT 7.0 66HIG High Approaching 118 VAC COPS Limit Annunciation ANN 1 5-84 (5A-90E) -

De-energize output on High Pressure)- TB-403E COPS A Over-pressurization R14 Bistable 241? OUT 70 66G/H Actuation. 118 VAC Annunciation ANN 3-61 (5A-90D),

and R-14 Light -

(Energize output on High Pressure)

- TB-403D WR RCS Low TS-68-43 Temperature R17 Bistable 241c? OUT 7.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 310 of 440 Appendix E (Page 64 of 148) 10 Listings Annunciation ANN 118 VAC 13-1110 (4A-67B) -

De-energize output on Low Temperature) -

TB-413K P8 COPS B Over- R1 Bistable 241c? OUT 7.0 pressurization 68H!G High Approaching 118 VAC COPS Limit Annunciation ANN 15-85 (5A-91E) -

De-energize output on High Pressure) - TB-405E P8 COPS B Over-pressurization R17 Bistable 241c7 OUT 7.0 68GIH Actuation Output, 118 VAC Annunciation ANN 3-62 (SA-91D),

and R-17 Light -

(Energize output on High Pressure)

- Tr-405D Charging Flow M-5 4-20 MA 237 OUr HIC CNTRL - 9.0 93A Deviation Charging M-5 4-20 MA 237 OUT HIC FIowCNTRL - 9.0 93A Setpoint Indication Charging Flow M-5 4-20 MA 237 OUT'90 HIC CNTRL- Output 9-0 g3A Indication Charging Flow M-5 24 VDC 241c OUT 9.0 HIC CNTRL-Ramp PB LED I I I I

NPG Site-Specific WBN Unit 2 NSSS and B1OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 311 of 440 Appendix E (Page 65 of 148) 10 Listings 93A Charging Flow M-5 24 VDC 241c OUT HIC CNTRL - Setpoint 90 93A PB LED Charging Flow M-5 24 VDC 241c OUT HIC CNTRL - Manual 9.0 93A PB LED Charging Flow M-5 24 VDC 241c OUT HIC CNTRL - Auto PB 9.0 93A LED Charging Flow M-5 CONTACT 241c IN HIC CNTRL - Increase 9-0 93A PB Charging Flow M-5 CONTACT 241c IN HIC CNTRL - 9-0 93A Decrease PB Charging Flow M-5 CONTACT 241C IN HIC CNTRL - MIA PB 9.0 93A Charging Flow M-5 CONTACT 241c IN HIC CNTRL - Ramp 9.0 93A PB Charging Flow M-5 CONTACT 2410 IN HIC CNTRL - Setpoint 9.0 93A PB Charging Flow M-5 24 VDC 241c OUT9.0 HIC CNTRL - Increase 9.0 93A PB LED Charging Flow M-5 24 VDC 2410 OUT HIC CNTRL- 9.0 93A Decrease PB LED 4-20 MA OUT FI-62-93A Charging Flow M-5 9.0 Indicator CVCS

F NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 312 of 440 Appendix E (Page 68 of 148) 10 Listings 4-20 MA PT-52-57 Excess letdown R-19 IN Look at replacing transmitter with 4 to 20 ma (Could leave loop 9.0 HX outlet as is) pressure PI-62-57 Excess letdown R-19 4-20 MA OUT Requires replacement indicator with 4 to 20 ma (Could leave 9.0 HX outlet loop as is) pressure PT-62-81 Letdown HX R-23 4-20 MA IN 9.0 Pressure Control Transmitter input PI-62-81 Letdown HX R-23 4-20 MA OUT 9.0 Pressure Indication PS-62-81 Letdown HX R-23 Bistable OUT 9.0 Pressure Annunication ANN 118 VAC 15-14 PM-62-81 Letdown HX R-23 4-20 MA OUT I/Ps will need to be changed out to 4 to 20 ma input 9.0 Pressure Control Output HIC-062- Letdown HX 4-20 MA 237 OUT 0081A Pressure CNTRL - M-6 9.0 Deviation HIC-062- Letdown HX 4-20 MA 237 OUT 0081A Pressure CNTRL M-6 9.0

- Setpoint Indication HIC-062- Letdown HX 4-20 MA 237 OUT 0081A Pressure CNTRL - M- 9.0 Output Indication

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 313 of 440 Appendix E (Page 67 of 148) 10 Listings HIC-062- Letdown HX 24 VDC 241 c OUT 0081A Pressure CNTRL 9.0

- Ramp PB LED HIC-062- Letdown HX 24 VDC 241c OUT 0081A Pressure CNTRL- M6 9.0 Setpoint PB LED HIC-062- Letdown HX 24 VDC 241c OUT 0081A Pressure CNTRL - M-6 9.0 Manual PB LED HIC-062- Letdown HX 24 VDC 241c OUT 0081A Pressure CNTRL - M-6 9.0 Auto PB LED HIC-062- Letdown HX CONTACT 241c IN 0081A Pressure CNTRL - M6 90 Increase PB HIC-062- Letdown HX CONTACT 241c IN 0081A Pressure CNTRL - M-6 9,0 Decrease PB HIC-062- Letdown HX CONTACT 241c IN 0081A Pressure CNTRL - M-6 9.0 MIA PB HIC-062- Letdown HX CONTACT 241c IN 0081A Pressure CNTRL - M-6 9.0 Ramp PB HIC-062- Letdown X M_6 CONTACT 241 c IN 0081A Pressure CNTRL- -9.0 Setpoint PB HIC-062- Letdown HX 24 VDC 241c OUT 0081A Pressure CNTRL- M-6 9.0 Increase LED Letdown HX 24 VDC 241c OUT HIC-062- Pressure CNTRL - M-6 9.0 0081A Decrease LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 314 of 440 Appendix E (Page 68 of 148) 10 Listings PdT-62-8 RCP 1 No. 1 Seal R-14 4-20 MA IN Look at replacing transmitter with 4 to 20 ma 9.0 DP PdS-62-8 R-14 Bistable OUT 9.0 Low RCP 1 No. 1 Seal DP 118 VAC Annunciation ANN 14-88 Pdi-62-SA RCP 1 No. I Seal R-14 4-20 MA OUT Replace indicator with 4 to 20 ma Both indicator in same loop 9.0 PdM-62-8B DP Indication PdT R-17 4-20 MA IN Look at replacing transmitter with 4 to 20 ma 9.0 21 RCP 2 No. I Seal DP PdS R-17 Bistable OUT 9.0 21 Low RCP 2 No. 1 Seal DP 118 VAC Annunciation ANN 14-87 Pdl R-17 4-20 MA OUT Replace indicator with 4 to 20 ma Both indicator in same loop 9.0 21A RCP 2 No. 1 Seal OP Indication Pdl 21B PdT RCP 3 No. I Seal R-20 4-20 MA IN Look at replacing transmitter with 4 to 20 ma 9.0 32 DP PdS R-20 Bistable OUT 9.0 32 Low RCP 3 No. 1 Seal DP I I I 1 -1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 315 of 440 Appendix E (Page 69 of 148) 10 Listings Annunciation ANN 118 VAC 14-86 Pdl R-20 4-20 MA OUT Replace indicator with 4 to 20 ma Both indicator In same loop 9.0 32A RCP 3 No. 1 Seal DP Indication Pdl 32B PdT R-22 4-20 MA IN Look at replacing transmitter with 4 to 20 ma 9.0 47 RCP 4 No- 4 Seal DP PdS.62- R-22 Bistable OUT 9.0 47 Low RCP 4 No- 4 Seal OP 118 VAC Annunciation ANN 14-85 Pdl R-22 4-20 MA OUT Replace indicator with 4 to 20 ma Both Indicator in same loop 9.0 47A RCP 4 No. 4 Seal DP Indication Pdl 47B PT-62-122 VCT Pressure R-19 4-20 MA IN 9.0 Transmitter input PI-62-122 VCT Pressure R-19 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Indication PS VCT Pressure R-19 Bistable OUT 9.0 122AIB Annunication ANN 15-18 118 VAC P" VCT Pressure R-19 Bistable OUT 9.0 1228/A Annunication ANN

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 316 of 440 Appemdix E (Page 70 of 148) 10 Listings 15-19 118 VAC PT-62-92A VCT Pressure R-19 4-20 MA IN Transmitter PI-62-92A CVCS Charging R-19 4-20 MA OUT Replace indicator with 4 to 20 ma Both indicator in same loop 9.0 PI-62-92B Hdr Pressure TE-62-3 RCP I Low R-14 RTD Input IN 9-0 Bearing Temperature TI-62-3 RCP 1 Low R-14 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Bearing Temperature Indication TS-62-3 RCP 1 Low R-14 Bistable OUT 9.0 Bearing Temperature 118 VAC Annunciation ANN 15-2 TE-52-16 RCP 2 Low R-17 RTD Input IN 9.0 Bearing Temperature TI-62-16 RCP 2 Low R-17 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Bearing Temperature Indication TS-62-16 RCP 2 Low R-17 Bistable OUT 9.0 Bearing Temperature 118 VAC Annunciation ANN 15-1

NPG Site-Specific WBN Unit 2 NSSS and S1OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 317 of 440 I Appendix E (Page 711 of 148) 0 Listings TE-62-29 RCP 3 Low R-20 RTD Input IN 9.0 Bearing Temperature TI-62-29 RCP 3 Low R-20 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Bearing Temperature Indication TS-62-29 RCP 3 Low R-20 Bistable OUT 9.0 Bearing Temperature 118 VAC Annunciation ANN 14-90 TE-62-42 RCP 4 Low R-22 RTD Input IN 9.0 Bearing Temperature TI-62-42 RCP 4 Low R-22 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Bearing Temperature Indication TS-62-42 ROP 4 Low R-22 Bistable OUT 9.0 Bearing Temperature 118 VAC Annunciation ANN 12-89 TE-62-75 Letdown Line R-19 RTD Input IN 9.0 Relief Valve Discharge Temperature TI-62-75 Letdown Line R-19 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Relief Valve Discharge I --I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 318 of 440 Appendix E (Page 72 of 148) 10 Listings Temperature Indication TS-62-75 Letdown Line R-19 Bistable OUT g.0 Relief Valve Discharge 118 VAC Temperature Annunciation ANN 15-20 TE-62-78 Letdown R-23 RTD' Input IN 9.0 Temperature Control TI-62-78 Letdown R-23 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Control Indication TS-62-78 Letdown R-23 Bistable OUT 9.0 Temperature Control 118VAC Annunciation ANN 15-12 HIC-062- Letdown 4-20 MA 237 OUT 0078A Temperature M-6 9.0 CNTRL -

Deviation HIC-062- Letdown 4-20 MA 237 OUT 0078A Temperature M-6 9.0 CNTRL - Setpoint Indication HIC-062- Letdown 4-20 MA 237 OUT 0078A Temperature M-6 9.0 CNTRL - Output Indication HIC-062- Letdown 24 VDC 241c OUT 0078A Temperature M6 9,0 CNTRL - Ramp PB LED I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 319 of 440 Appendix E (Page 73 of 148) 10 Listings HIC-062- Letdown 24 VOC 241c OUT 0078A Temperature M-6 9.0 CNTRL - Setpoint PB LED HIC-062- Letdown 24 VDC 241c OUT 0078A Temperature M-6 9.0 CNTRL - Manual PB LED HIC-062- Letdown 24 VDC 241c OUT 0078A Temperature M-6 9.0 CNTRL - Auto PB LED HIC-062- Letdown CONTACT 241c IN 0078A Temperature M-6 9.0 CNTRL - Increase PB HIC-062- Letdown CONTACT 241C IN 0078A Temperature M-6 9.0 CNTRL-Decrease PB HIC-062- Letdown CONTACT 241c IN 0078A Temperature M-6 9.0 CNTRL - MWA PB HIC-062- Letdown CONTACT 241c IN 0078A Temperature M-6 9.0 CNTRL - Ramp PB HIC-062- Letdown CONTACT 241c IN 0078A Temperature M-6 9.0 CNTRL - Setpolnt PB HIC-062- Letdown 24 VDC 241c OUT 0078A Temperature M-6 9.0 CNTRL - Increase LEDI HIC-062- Letdown 24 VDC 241c OUTr 0078A Temperature M-6 9.0 CNTRL -

Decrease LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 320 of 440 Appendix E (Page 74 of 148) 10 Listings TE-62-58 Excess Letdown R-19 RTD Input IN 9.0 Temperature TI-62-58 Excess Letdown R-19 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-58 Excess Letdown R-19 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 14-84 TE-62-87 Regenerative Hx R-15 RTD Input IN 9.0 Temperature TI-62-87 Regenerative Hx R-15 4-20 MA OUT Replace indicator with 4 to 20 ma 9D0 Temperature Indication TE-62-71 Regenerative Hx R-19 RTD Input IN 9.0 Letdown Temperature TI-62-71 Regenerative Hx R-19 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Letdown Temperature Indication TS-82-71 Regenerative Hx R-15 Bistable OUT 9.0 Letdown Temperature 118 VAC Annunciation ANN 15-24 TE-62-4 RCP 1 Seal Outlet R-14 RT'D Input IN 9.0 Temperature

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 321 of 440 Appendix E (Page 75 of 148) 10 Listings TI-62-4 RCP I Seal Outlet R-14 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-4 RCP 1 Seal Outlet R-14 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 15-6 TE-62-17 RCP 2 Seal Outlet R-17 RID Input IN 90 Temperature TI-62-17 RCP2SeaI Outlet R-17 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-17 RCP 2 Seal Outlet R-17 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 15-5 TE-62-30 RCP 3 Seal Outlet R-20 RTO Input IN 9.0 Temperature TI-62-30 RCP 3 Seal Outlet R-20 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-30 RCP 3 Seal Outlet R-20 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 15-4 TE-62-43 RCP 4 Seal Outlet R-22 RTD Input IN 9.0 Temperature

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 322 of 440 Appendix E (Page 76 of 148) 1O Listings TI-62-43 RCP 4 Seal Outlet R-22 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-43 RCP 4 Seal Outlet R-22 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 15-3 TE-62-131 VCT Outlet R-19 RTD Input IN 9-0 Temperature TI-62-131 VCT Outlet R-19 4-20 MA OUT Replace indicator with 4 to 20 ma 9.0 Temperature Indication TS-62-131 VCT Outlet R-19 Bistable OUT 9.0 Temperature Annunciation ANN 118 VAC 15-13 LT VCT Level R-23 4-20 MA IN Replace 10-50MA transmitter (sealed capillary) and power 9.0 130A Transmitter supply in R-23 LI-62-130 VCT Level R-23 4-20 MA OUT Replace local indicator to 4-20 MA 9.0 Indicator LS VCT Low Level R-23 Bistable OUT 9.0 130F Annunciation ANN 15-3 De- 118 VAC energize on decreasing level LS VCT High Level R-23 Bistable OUT 9.0 130A/B Annunciation ANN 15-82 De- 118 VAC energize on I I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 323 of 440 Appendix E (Page 77 of 148) 10 Listings increasing level LS VCT Level < SP R-23 Bistable OUT 90 130B/A De-energize on decreasing level 118 VAC LS VCT Level > SP R-23 Bistable OUT 9.0 130DIE De-energize on increasing level 118 VAC LS VCT Level < SP R-23 BistabWe OUT 9.0 130E/D De-energize on decreasing level 118 VAC LM-62-118 Diversion Valve R-23 4-20 MA OUT I/Ps will need to be changed out to 4 to 20 ma input 9.0 Control Output LIC-062- Diversion Valve 4-20 MA 237 OUT 130A CNTRL - M-6 90 Deviation LIC-062- Diversion Valve 4-20 MA 237 OUT 130A CNTRL - Setpoint M-6 90 Indication LIC-062- Diversion Valve 4-20 MA 237 OUT 130A CNTRL - Output M- 90 Indication LIC-062- Diversion Valve 24 VDC 241c OUT 130A CNTRL-Ramp M-6 90 PB LED LIC-062- Diversion Valve 24 VDC 241c OUT 130A CNTRL - Setpoint M-6 9.0 PB LED LIC-062. Diversion Valve 24 VDC 241c OU9.0 130A CNTRL - Manual M- 2o PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 324 of 440 Appemdix E (Page 78 of 148) 10 Listings UC-062- Diversion Valve 24 VDC 241c OUT 130A CNTRL - Auto PB M-6 9.0 LED LIC-062- Diversion Valve CONTACT 241c IN 130A CNTRL - Increase M-6 90 PB LIC-062- Diversion Valve CONTACT 241c IN 130A CNTRL - M-6 9.0 Decrease PB LIC-062- Diversion Valve CONTACT 241 c IN 130A CNTRL - M/A PB M-6 9.0 LIC-062- Diversion Valve CONTACT 241 IN 130A CNTRL - Ramp M-6 9.0 PB LIC-062- Diversion Valve CONTACT 241 c IN 130A CNTRL - Setpoint M-6 9.0 PB LIC-062- Diversion Valve 24 VDC 241c OUT 130A CNTRL - Increase M-6 9.0 PB LED LIC-062- Diversion Valve 24 VDC 241c OUT 130A CNTRL- M-6 9.0 Decrease PR LED LT VCT Level R-15 4-20 MA IN Replace 10-50 MA transmitter (sealed capillary) and power 9.0 129A Transmitter supply in R-1 5 LI VCT Level MCR R-15 4-20 MA N/A Replace MCR indicator to 4-20 MA 9.0 129A Indicator LS VCT Level c SP R-15 Bistable OUT 9.0 129AJB De-energize on decreasing level 118 VAC

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 325 of 440 Appendix E (Page 79 of 148) 10 Listings LS VCT Low Level R-15 Bistable OUT 9.0 129BIA Annunciation ANN 15-11 &ANN 15- 118VAC 81 De-energize on decreasing level LS-"2- VCT High Level R-15 Bistable OUT 9.0 129DIE Annunciation ANN 15-11 &ANN 15- 118 VAC 81 De-energize on increasing level LS VCT Level > SP R-15 Bistable OUT 9.0 129E/D Annunciation ANN 2-28 Energize on 118 VAC increasing level LT-62-242 Boric Acid Tank C O-L-302 to 4-20 MA IN Replace transmitter with 4-20 MA type (Seal Capillary). 9.0 Level 1-R-28 to Eliminate Eagle 21 interface and run cable from UI AIR to U2 2-R-15 AIR.

LI-62-242 Boric Acid Tank C R-15 4-20 MA OUT Replace indicator with 4-20 MA type 9.0 LR-62-238 Level Indication P002 LS Boric Acid Tank C R-1 5 Bistable OUT 9.0 242A Level High Annunciation ANN 118 VAC 15-21 De-energize on increasing level LS Boric Acid Tank C R-15 Bistable OUT 9.0 242B Level Low Annunciation ANN 118 VAC 15-22 De- I

NPG Site-Specific WBN Unit 2 NSSS and 1OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 326 of 440 Appendix E (Page 80 of 148) 10 Listings energize on decreasing level LT.62-238 Boric Acid Tank B L-301 to R- 4-20 MA IN Replace transmiller with 4-20 MA type (Seal Capillary). 9.0 Level 3 to R-21 Eliminate Eagle 21 interface.

LI-62-238 Boric Acid Tank B R-21 4-20 MA OUT Replace indicator with 4-20 MA type 9.0 LR-62-238 Level Indication Pool LS Boric Acid Tank B R-21 Bistable OUT 9.0 238A Level High Annunciation ANN 118 VAC 15-74 De-energize on increasing level LS Boric Acid Tank B R-21 Bistable OUT 9.0 238B Level Low Annunciation ANN 118 VAC 15-75 De-energize on decreasing level FT-62-10 RCP No. 1 Seal R-14 4-20 MA IN 9.0 Low Range Leakoff Flow Transmitter FS-62-10 RCP No. 1 Seal R-14 Bistable OUT 9.0 Low Range Leakfolf Flow 118 VAC Transmitter Annunciation ANN 14-75 FT-62-11 RCP No. 1 Seal R-14 4-20 MA IN 9.0

-_ I High Range I I I I I

[ NPG Engineering Site-Specific Specification Upgrade Specification WBN Unit 2 NSSS and BSOP Controls Rev. 0001 Specification Page 327 of 440 Appendix E (Page 811 of 148) 10 Listings Leakoff Flow Transmitter FS-62-11 RCP No. I Seal R-14 Bistable OUT 9.0 High Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-79 FT-62-23 RCP No. 2 Seal R-17 4-20 MA IN 9.0 Low Range Leakoff Flow Transmitter FS-62-23 RCP No. 2 Seal R-17 Bistable OUT 9.0 Low Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-74 FR-62-23 RCP No. 1 Seal R-14 4-20 MA OUT Change out recorder to 4-20 MA 9.0 POOl Low Range Leakoff Flow Recorder FR-62-23 RCP No. 2 Seal R-17 4-20 MA OUT Change out recorder to 4-20 MA 9.0 P002 Low Range Leakoff Flow Recorder FT-62-24 RCP No. 2 Seal R-17 4-20 MA IN 9.0 High Range Leakoff Flow Transmitter FS-62-24 RCP No. 2 Seal R-17 Bistable OUT 9.0

NPG Site-Specific WBN Unit 2 NSSS and 1OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 328 of 440 Appendix E (Page 82 of 148) 10 Listings High Range 118 VAC Leakoff Flow Transmitter Annunciation ANN 14-78 FT-62-36 RCP No. 3 Seal R-20 4-20 MA IN 9.0 Low Range Leakoff Flow Transmitter FS-62-36 RCP No. 3 Seal R-20 Bistable OUT 9-0 Low Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-73 FT-62-37 RCP No. 3 Seal R-20 4-20 MA IN 9.0 High Range Leakoff Flow Transmitter FS-62-37 RCP No 3 Seal R-20 Bistable OUT 9.0 High Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-77 FR-62-24 RCP No. 1 Seal R-14 4-20 MA OUT Change out recorder to 4-20 MA 90 POOl High Range Leakoff Flow Recorder FR-62-24 RCP No. 2 Seal R-17 4-20 MA OUT Change out recorder to 4-20 MA 9.0 P002 High Range Leakoff Flow I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 329 of 440 Appendix E (Page 83 of 148) 10 Listings Recorder FT-62-49 RCP No. 4 Seal R-22 4-20 MA IN 9.0 Low Range Leakoff Flow Transmitter FS-62-49 RCP No. 4 Seal R-22 Bistable OUT 9.0 Low Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-72 FR-62-49 RCP No. 3 Seal R-20 4-20 MA OUT Change out recorder to 4-20 MA 9.0 Pool Low Range Leakoff Flow Recorder FT-62-50 RCP No. 4 Seal R-22 4-20 MA IN 9.0 High Range Leakoff Flow Transmitter FS-62-50 RCP No. 4 Seal R-22 Bistable OUT 9.0 High Range Leakoff Flow 118 VAC Transmitter Annunciation ANN 14-76 FR-62-49 RCP No. 4 Seal R-22 4-20 MA OUT Change out recorder to 4-20 MA 9.0 P002 Low Range Leakoff Flow Recorder FR-62-50 RCP No. 3 Seal R-20 4-20 MA OUT Change out recorder to 4-20 MA 9.0 P001 High Range

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 330 of 440 Appendix E (Page 84 of 148) 10 Listings Leakoff Flow Recorder FT-62-1 RCP No. I Seal R-14 4-20 MA IN 9.0 Flow FI-62-IA RCP No. 1 Seal R-14 4-20 MA OUT 90 Flow MCR FI-62-1 B Indicator FS-62-1 RCP No. 1 Seal R-14 Bistable OUT 9.0 Flow Low Annunciation ANN 118 VAC 14-83 FT-62-14 RCP No. 2 Seal R-17 4-20 MA IN 90 Flow FR-62-50 RCP No. 4 Seal R-22 4-20 MA OUT Change out recorder to 4-20 MA 90 P002 High Range Leakoff Flow Recorder FI-62-14A RCP No. 2 Seal R-17 4-20 MA OUT 9.0 Flow MCR FI-62-14B Indicator FS-62-14 RCP No- 2 Seal R-17 Bistable OUT 90 Flow Low Annunciation ANN 118 VAC 14-82 FT-62-27 RCP No. 3 Seal R-20 4-20 MA IN 9.0 Flow FI-62-27A RCP No. 3 Seal R-20 4-20 MA OUT 9.0 Flow Indicator

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 331 of 440 Appendix E (Page 85 of 148) 10 Listings FI-62-27B FS-62-27 RCP No. 3 Seal R-20 Bistable OUT 9.0 Flow Low Annunciation ANN 118 VAC 14-81 FT-62-40 RCP No. 4 Seal R-22 4-20 MA IN 9.0 Flow FI-62-40A RCP No. 4 Seal R-22 4-20 MA OUT 9,0 Flow Indicator FI-62-40B FS-62-40 RCP No. 4 Seal R-22 Bistable OUT 9.0 Flow Low Annunciation ANN 118 VAC 14-80 FT-62-82 Letdown Flow R-23 4-20 MA IN 9.0 Transmitter FI-62-82 Letdown Flow R-23 4-20 MA OUT 90 Indicator FS-62-82 Letdown Flow R-23 Bistable OUT 9.0 High Annunciation ANN 15-15 118 VAC FT-62-93A Charging Flow R-1 8 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 9.0 Transmitter take dose?)

FI-62-93A Charging Flow R-18 4-20 MA OUT Change out indicator to 4-20 MA 9.0 MCR Indicator FS Charging Flow R-18 Bistable OUT 90 93A/B High Annunciation

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 332 of 440 Appendix E (Page 86 of 148) 10 Listings ANN 15-76 118iVAC 4-20 MA 237 OUIT FM Charging Flow R-18 9.0 93B Controller Output H1C42 Charging CNTRL - Flow M-5 4-20 MA 237 OUT 9.0 93A Deviation Charging Flow 4-20 MA 237 OUT H1C CNTRL - Output M- 9.0 93A Indication Charging Flow 24 VDC 241c OUT 0 HIC CNTRL - Ramp M5 9.0 93A PB LED Charging Flow 24 VDC 241c OUTI0 NIC CNTRL - Manual M5 90 93A PBRLED Charging Flow 24 VDC 241c OUT HIC CNTRL - Auto PB M5 90 93.A LED Charging Flow CONTACT 241c IN HIC CNTRL - Increase M5 90 93A PB Charging Flow CONTACT 241c IN HIC CNTRL - M-5 9.0 W3A Decrease PB Charging Flow CONTACT 241c IN 9 HIC CNTRL - MIA PB M-5 90 93A Charging Flow CONTACT 241c IN HIC CNTRL - Ramp M-5 9.0 93A PB

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 333 of 440 Appendix E (Page 87 of 148) 10 Listings Charging Flow 24 VDC, 241 c OUIT HIC CNTRL - Increase M-5 9.0 93A PB LED Charging Flow 24 VEX0 241c OUT HIC CNTRL - M-5 90 93A Decrease PB LED Excess Letdown 4-20 MA 237 OUT 9.0 HICo2- Flaw CNTRL -

56A Output Indication Excess Letdown 24 VDC 241c OUT HIC Flow CNTRL - M-5 9.0 56A Ramp PB LED Excess Letdown 24 VDC 241c OUT HIC Flow CNTRL - M-5 9.0 56A Manual PB LED Excess Letdown CONTACT 241c IN HI10 Flow CNTRL - M-5 90 56A Increase PB Excess Letdown CONTACT 241c IN 90 HIC Flow CNTRL- M-5 56A Decrease PB Excess Letdown CONTACT 241c IN HIC Flow CNTRL - M5 9.0 56A Ramp PB Charging Flow 24 VDC' 241c OUT HIC CNTRL - Increase M5 9.0 56A PB LED Charging Flow 24 VDC' 241 c OUT HIC-e2- CNTRL - M-5 9.0 56A Decrease PB LED CVCS LETDOWN 4-20 MA FBM237 AO HIC RHR CLEANUP M-6 83A CNTRL -

_ Deviation

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 334 of 440 Appendix E (Page 88 of 148) 10 Listings Indication CVCS LETDOWN 4-20 MA FBM237 AOG HIC0 RHR CLEANUP M-6 83A CNTRL - Output Indication CVCS LETDOWN 24 VDC FBM241d DO' HIC RHR CLEANUP M-6 83A CNTRL-Ramp PB LED CVCS LETDOWN 24 VOC FBM241d DO' HIC RHR CLEANUP M-6 83A CNTRL - Increase PB LED CVCS LETDOWN 24 VDC FBM241d DO)

HIC R4HR CLEANUP M-6 83A CNTRL-Decrease PB LED CVCS LETDOWN CONTACT FBM241d DI HIC RHR CLEANUP M-6 83A CNTRL - Increase PB CVCS LETDOWN CONTACT FBM241d DI HIC RHR CLEANUP MC T 83A CNTRL - M/A PB CVCS LETDOWN CONTACT FBM241d DI HIC RHR CLEANUP M-6 83A CNTRL-Ramp IPB FT-62-137 BA Emergency R-18 4-20 MA IN Flow Transmitter 4-20 MA FI BA Emergency R-18 OUT 137A Flow Indication FI 137B 4-20 MA FM-62-83 CVCS Letdown M-6 OUT I Valve Output to I I . I L I

NPG Site-Specific WBN Unit 2 NSSS and BlOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 335 of 440 Appendix E (Page 89 of 148) 10 Listings tiP MISC SYSTEMS TE-68-21 Reactor Vessel R-15 RTD Input IN 10.0 Flange Leakoff Temperature TS-68-21 Reactor Vessel R-15 Bistable OUT 10.0 Flange Leakoff Temperature 118 VAC Annunciation ANN 14-20 TI-68-21 Reactor Vessel R-15 4-20 MA OUT New 4-20 ma indicator required 10.0 Flange Leakoff Temperature Indication FM-62-56 Excess Letdown M-5 4-20 MA OUT Signal to i/P Flow converter TE-68-317 RCS Loop 1 R-14 RTD Input IN 10.0 Spray Temperature TS-68-317 RCS Loop 1 R-14 Bistable OUT 10.0 Spray Temperature 118 VAC Annunciation ANN 14-63

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Specification Upgrade Specification Rev. 0001 Page 336 of 440 j Appendix E (Page 90 of 148) 10 Listings TI-68-317 RCS Loop 1 R-14 4-20 MA OUT New 4-20 ma indicator required 10.0 Spray Temperature Indication TE-6B-316 RCS Loop 2 R-17 RTD Input IN 10.0 Spray Temperature TS-68-316 RCS Loop 2 R-17 Bistable OUT 10.0 Spray Temperature 118 VAC Annunciation ANN 14-63 TI-68-316 RCS Loop 2 R-17 4-20 MA OUT New 4-20 ma indicator required 1010 Spray Temperature Indication LT-68-300 PRT Level R-16 4-20 MA IN 10.0 LI-68-300 PRT Level R-1 6 4-20 MA OUT 10.0 Indicator LS PRT Level Low R-16 Bistable OUT 10.0 300A/B 118 VAC LS PRT Level High R-i6 Bistable OUT 10.0 300B/A 118VAC PT-68-301 PRT Pressure R-16 4-20 MA IN 10.0 PI-68-301 PRT Level R-16 4-20 MA OUT 10.0 Indicator

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 337 of 440 Appendix E (Page 911 of 148) 10 Listings PS-68-301 PRT Level High R-16 Bistable OUT 10.0 Control and Annuciation ANN 118 VAC 2-107 TE-68-309 PRT Temperature R-19 RTD Input IN 10.0 TS-68-309 PRT Temperature R-19 Bistable OUT 10.0 Annunciation ANN 14-61 118 VAC TI-68-309 PRT Temperature R-19 4-20 MA OUT New 4-20 ma indicator required 10.0 Indication TE-68-318 Pressurizer Surge R-19 RTD Input IN 10.0 Line Temperature TS-68-318 Pressurizer Surge R-19 Bistable OUT 10.0 Line Temperature Annunciation ANN 118 VAC 14-21 1T-68-318 Pressurizer Surge R-19 4-20 MA OUT New 4-20 ma indicator required 10.0 Line Temperature Indication TF-68-331 Pressurizer Relief R-16 RTD Input IN 10.0 Discharge Temperature TS-68-331 Pressurizer Relief R-16 Sistable OUT 10.0 Discharge Temperature 118 VAC Annunciation ANN 14-71

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 338 of 440 Appendix E (Page 92 of 148) 10 Listings TI-68-331 Pressurizer Relief R-16 4-20 MA OUT New 4-20 ma indicator required 10.0 Discharge Temperature Indication TE-68-328 Pressurizer Relief R-21 RTD Input IN 10.0 Discharge Temperature TS-68-328 Pressurizer Relief R-21 Bistable OUT 10.0 Discharge Temperature 118 VAC Annunciation ANN 14-69 TI-68-328 Pressurizer Relief R-21 4-20 MA OUT New 4-20 ma indicator required 10.0 Discharge Temperature Indication TE-68-329 Pressurizer Relief R-23 RTD Input IN 10.0 Discharge Temperature TS-68-329 Pressurizer Relief R-23 Bistable OUT 10.0 Discharge Temperature 118 VAC Annunciation ANN 14-70 TI-68-329 Pressurizer Relief R-23 4-20 MA OUT New 4-20 ma indicator required 10.0 Discharge Temperature Indication

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 339 of 440 Appendix E (Page 93 of 148) 10 Listings TE-68-330 Pressurizer Relief R-19 RTD Input IN 10.0 Discharge Temperature TS-68-330 Pressurizer Relief R-1 9 Bislable OUT 10.0 Discharge Temperature 118 VAC Annunciation ANN 14-68 TI-68-330 Pressurizer Relief R-19 4-20 MA OUT New 4-20 ma indicator required 10.0 Discharge Temperature Indication TE-68-324 Pressurizer Vapor R-22 RTD Input IN From R-13 Eagle 21 10.0 Temperature TS-08-324 Pressurizer Vapor R-22 Bistable OUT 10.0 Temperature Annunciation ANN 118 VAC 14-43 TE-68-319 Pressurizer Liquid R-20 4-20 MA IN From R-10 Eagle 21 10.0 Temperature TS-68-319 Pressurizer Liquid R-20 Bistable OUT 10.0 Temperature Annunciation ANN 118 VAC 14-42 RCS Narrow LT Range Level R-16 4-20 MA IN 100 399A Transmitter RCS Narrow LI Range Indicator R-16 4-20 MA OUT New 4-20 ma indicator required 10.0 399A

NPG Site-Specific WBN Unit 2 NSSS and 13OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 340 of 440 Appendix E (Page 94 of 148) 10 Lis;tings RCS Narrow" LS Range R-16 Bistable OUT 10.0 399A1 Annunciation ANN 118 VAC 19-108 (Energize on Decrease)

LS RangeNarrow RCS R-16 Bistable OUT 10.0 399A2 Annunciation ANN 118 VAC 19-109 (Energize on Increase)

RCS Wide Range 399B Level Transmitter R-1 4-20 MA IN 10.0 RCS Wide Range LI Level Indicator R-16 4-20 MA OUT New 4-20 ma indicator required 10.0 399B ROS Wide Range LS Level R-16 Bistable OUT 10.0 3998 Annunciation ANN 118 VAC 19-109 (Energize on Decrease)

N2 SUPPLY 4-20 MA FBM237 AD HIC CNTRL VALVE - M-6 65A Output Indication 1N2 SUPPLY 24 VDC FBM24ld DO-HI1 CNTRL VALVE - M-6 65A Ramp PB LED N2 SUPPLY 24 VDC FBM241d DO-HIC CNTRL VALVE - M-6 65A Increase PB LED N2 SUPPLY 24 VDC FBM241d DO-HIC CNTRL VALVE - M-6 65A Decrease PB LED N2 SUPPLY CONTACT FBM241d DI HIC CNTRL VALVE - M-6 65A Increase PB N2 SUPPLY CONTACT FBM241d DI HIC CNTRL VALVE - M-6

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 341 of 440 Appendix E (Page 95 of 148) 10 Listings 65A WA PB N2 SUPPLY CONTACT FBM241d DI HIC CNTRL VALVE - M-6 65A Ramp PB N2 SUPPLY CONTACT FBM241d DI HIC CNTRL VALVE - M-6 65A Decrease PB N2 SUPPLY 4-20 MA OUT FM-63-85 CNTRL VALVE - M-6 IP CONVERTER I/P CONVERTER HIC CVCS BACKPRESSURE M-6 4-20 MA FBM237 AO 89A CNTRL - Output Indication CVCS 24 VDC FBM241d DO HIC BACKPRESSURE M-6 89A CNTRL -Ramp PB LED CVCS VDC FBM241d DO24 00 HiC BACKPRESSURE M-2 89A CNTRL -

Increase PB LED CVCS 24 VOC FBM241d DO HIC BACKPRESSURE M-6 89A CNTRL -

Decrease PB LED CVCS CONTACT FBM241d DI HIC BACKPRESSURE M-6 89A CNTRL -

increase PB M- CONTACT FBM241d Dl HIC42-H CVCS BACKPRESSUREM-89A CNTRL - M/A PB HCHIC CVCS MG CONTACT FBM241d DI B a ckpres su reM -

89A CNTRL - Ramp PB I

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 342 of 440 Appendix E (Page 96 of 148) 10 Lls;tlngs HIC Bacs M-6 CONTACT FBM241d IN 89A CNTRL -

Decrease PB CVCS 4-20 MA AO FM-62-89 Backpressure CNTRL Output Signal to lIP SI Pump A-A PT-63-150 Pressure R-17 4-20 MA IN 10.0 Transmitter SI Pump A-A is changed to a 4-20 MA 10.0 P1-63-150 Pressure Indicator R-17 4-20 MA N/A loopchange unless the transmitter No SI Pump B-B PT-63-19 Pressure R-22 4-20 MA N/A No change unless the transmitter is changed to a 4-20 MA 10.0 Transmitter loop SI Pump B-B P1-63-19 Pressure Indicator R-22 4-20 MA N;A No change unless the transmitter is changed to a 4-20 MA 10.0 loop SI Pump A-A Flow FT-63-151 Transmitter R14 4-20 MA IN 10.0 SI Pump A-A F1-63-151 Pressure Indicator R14 4-20 MA OUT 10.0 Si Pump B-B Flow FT-63-20 Transmitter R-20 4-20 MA IN 10.0 SI Pump B-B F1-63-20 Pressure Indicator R20 4-20 MA OUT 10_0 RWST Level LT-63-50 Transmitter R-16 4-20 MA IN From Eagle 21 R-3 10.0 RWST Level 10,0 L8-3-50B Annunciation ANN R-16 Bistable OUT 10.0 15-77 (De- 118 VAC energize on Decrease) .....

RWST Level From Eagle 21 R-7 10.0 Transmitter R-18 4-20 MA IN LT-63-51

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 343 of 440 Appendix E (Page 97 of 148) 10 Listings RWST Level LS-53-51B Annunciation ANN R-18 Contact or OUT 10.0 15-78 Voltage?

RWST Level LT-63-52 Transmitter R-20 4-20 MA IN From Eagle 21 R-9 10.0 RWST Level LS-63-52B Annunciation ANN R-20 Bistable OUT 10.0 15-79 (De- 118 VAC energize on Decrease)

RWST Level LT-63-53 TransmtLer l R-22 4-20 MA IN From Eagle 21 R-28 10.0 RWST Level LS-63-53B Annunciation ANN R22 Bistable OUT 10.0 15-80 118 VAC Cold Leg LT-63-129 Accumulator Tk 1 R-14 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter OUT 10.0 LS L1 Cold Leg Accumulator Tk 1 R-14 Voltage?or Contact 129A Level Low Voltage' Anununciation ANN 15-29 L8 Cold Leg R-14 Bisable OUT '10.0 1298 Level Low Tk 1 Accumulator 118 VAC Anununciation ANN 15-30 Cold Leg U-83-129 Accumulator Tk 1 R-14 4-20 MA OUT New 4-20 MA Indicator required 10.0 I Level Indicator LT8-19Cold Leg ....

LT-63-119 Accumulator T 1 R-1 7 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter LS Cold Leg 11QA Accumulator Tk 1 R-17 Bistable OUT 10.0 119A Level Low 118 VAC Anununciation

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 344 of 440 Appendix E (Page 98 of 148) 10 Listings

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 345 of 440 Appendix E (Page 99 of 148) 10 Listings Level Indicator Cold Leg LT-63-89 Accumulator Tk 3 R-20 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter Cold Leg LS-83-89A Accumulator Tk 3 R-20 Bistable OUT 10.0 Level Low 118VAC Anununciation ANN 1t-49 Cold Leg LS-63-89B Accumulator Tk 3 R-20 Bistable OUT 10.0 Level Low 118 VAC Anununciation ANN 15-50 "Cold Leg LI-63-89 Accumulator Tk 3 R-20 4-20 MA OUT New 4-20 MA Indicator required 10.0 Level Indicator Cold Leg LT-63-81 Accumulator Th 3 R-22 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter_

Cold Leg LS-63-81A AccumulatordTk 3 R-22 Bistable OUT 10.0 Level Low 118 VAC Anununciation ANN 15-51 Cold Leg LS-6341B Accumulator Tk 3 R-22 Bistable OUT 10.0 Level Low 118 VAC Anununciation ANN 15-52 Cold Leg LI-3B1 Accumulator Tk 3 R-22 4-20 MA OUT New 4-20 MA Indicator required 10.0 Level Indicator Cold Leg LT-63-82 Accumulator Tk 4 R-20 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter Cold Leg LS-63-82A Accumulator Tk 4 R-20 Bistable OUT 10.0 Level Low 118VAC

_Anununciation I I I

NPG Site-Specific Engineering Specification WBN Unit 2 NSSS and BOP Controls Upgrade Specification Appenidix E Specification Rev. 0001 Page 346 of 440 I (Page 100 of 148) 10 Listings 9 r ¶ I 7 ANN 15-58 Cold Leg LS-63-82B Accumulator Tk 4 R-20 Bistable OUT 10.0 Level Low 11B VAC Anununciation ANN 15-59 Cold Leg LI-63-82 Accumulator TL 4 R-20 4-20 MA OUT New 4-20 MA Indicator required 10.0 Level Indicator Cold Leg LT-63-60 Accumulator Tk 4 R-22 4-20 MA IN New 4-20 MA Transmitter required 10.0 Level Transmitter Cold Leg LS-63-40A Accumulator Tk 4 R-22 Bistable OUT 10.0 Level Low 118 VAC Anununciation ANN 15-60 Cold Leg R-22 Bistable OUT 10.0 LS-63-60B Accumulator Tk 4 Level Low 118 VAC Anununciation ANN 15-61 Cold Leg LI-63-60 Accumulator Tk 4 R-22 4-20 MA OUT New 4-20 MA Indicator required 10.0 Level Indicator 10.0 Cold Leg PT-63-128 Accumulator Tk I R-14 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg Accumulator Tk I R14 Bistable OUT 10.0 128A Pressure Low 118 VAC Anununciation ANN 15-25 Cold Leg P8 Accumulator Tk i R14 Bistable OUT 100 128B Pressure Low 118 VAC Anununciation 1 -1 1 1 1 1

NPG Site-Specific WBN Unit 2 NSSS and B'OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 347 of 440 Appendix E (Page 101 of 148) 10 Listings ANN 15-26 Cold Leg PI-63-128 Accumulator L Tk R-14 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator ....

Cold Leg PT-3-126 Accumulator Tk R-17 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter PS63 Accumulator k 1 R-17 Bistable OUT 10.0 126A Pressure Low 118VAC Anununciation ANN 15-27 Cold Leg PS Accumulator Tk 1 R-7 Bistable OUT 10.0 126B Pressure Low 118 VAC Anununciation ANN 15-28 P-316 Cold Leg P-3-126 Accumulator k R-17 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator PT-83-108 Cold Leg Accumulator ok 2 R-14 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg P"3- Accumulator Tk 2 R-14 Bistable OUT 10.0 108A Pressure Low 118 VAC Anununclation ANN 15-37 Cold Leg PS Accumulator Tk 2 R-4 Bistable OUT 10.0 108B Pressure Low 118 VAC Anununciatlon ANN 15-38 Cold Leg P-63108 Accumulator Tk 2 R-14 4-20 MA OUT New 4-20 MA Indicator required 100 Pressure Indicator Cold Leg PT-63-106 Accumulator Tk 2 R-17 4-20 MA IN New 4-20 MA Transmitter required 10.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 348 of 440 Appenidix E (Page 102 of 148) 10 Listings Pressure Transmitter Cold Leg PS Accumulator Tk 2 R17 Bistable OUT 10.0 106A Pressure Low 118 VAC Anununciation ANN 15-39 PS0- Cold Leg PS AccumulatorTk 2 R-17 Bistable OUT 10.0 106B Pressure Low 118 VAC Anununciation ANN 15-40 Cold Leg pi-63-106 Accumulator Tk 2 R-1 7 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator Cold Leg PT-63-88 Accumulator Tk 3 R-20 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg PS-63-88A Accumulator Tk 3 R-20 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-45 Cold Leg P-543-8B Accumulator Tk 3 R20 Bistabte OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-46 Cold Leg PI-63-88 Accumulator Tk 3 R-20 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator Cold Leg PT-63-86 Accumulator TL3 R-22 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg PS-63-86A Accumulator Tk 3 R-22 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specific~ation Rev. 0001 Specification Page 349 of 440 Appendix E (Page 103 of 148) 10 Listings ANN 15-47 Cold Leg PS-63-86B Accumulator Tk 3 R-22 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-48 Cold Leg PI-63-86 Accumulator Tk 3 R-22 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator Cold Leg PT-63-62 Accumulator Tk 4 R-20 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg PS-63-62A Accumulator Tk 4 R-20 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-54 Cold Leg PS-63-428 Accumulator Tk 4 R-20 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-55 Cold Leg PI-63-62 Accumulator Tk 4 R-20 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator ,

Cold Leg ,,

PT-63-61 Accumulator 4 R-22 4-20 MA IN New 4-20 MA Transmitter required 10.0 Pressure Transmitter Cold Leg PS-63-61A Accumulator Tk 4 R-22 Bistable OUT 10.0 Pressure Low 118 VAC Anununciation ANN 15-56 Cold Leg 10.0 PS-43-618 AccumulatorTk4 R-22 Bistable OUT Pressure Low 118 VAC Anununciation ANN 15-57

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specificiation Rev. 0001 Specification Page 350 of 440 Appen~dix E (Page 104 of 148) 10 Listings Cold Leg PI-63-61 Accumulator Tk 4 R-22 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure indicator

'$18 Flow to RCS FT-63-91A 2&3 CL Power R-23 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Transmitter take dose?)

818 Rllow to RCS FI-63-91A 2&3 CL Power R-23 4-20 MA IN New 4-20 MA Indicator required 10.0 Indicator I 818 Flowlto RCS FT-63-92A 1&4 CL Power R-21 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Transmitter take dose?)

818 Flow to R'CS"'

FI-63-92A 1&4 CL Power R-21 4-20 MA IN New 4-20 MA Indicator required 10.0 Indicator RCS Press - Cold LT-68-321 Calibration Xmtr R-25 4-20 MA IN RCS Press - Cold LI-68-321 Calibration R-25 4-20 MA OUT Indicator CCS Pmp B TE-72-6 Discharge Temp 2-R-19 RTD IN CCS Prop A TE-72-31 Discharge Temp 2-R-16 RTID IN ..

RHR PUP A-A PT-74-13 Discharge R-23 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Pressure take dose?)

Transmitter PI-74-13 sPMhPA-A R-23 4-20 MA OUT New 4-20 MA Indicator required 10.0 P17-3 Discharge 1.

Pressure Indicator RHR PMP A-A 10.0 P6-74-13 Discharge R23 Bistable OUT Pressure 118 VAC Annuciation ANN 15-36 & Status Panel input

NPG Site-Specific Engineering WBN Unit 2 NSSS and BOP Controls Upgrade Specifi cation ISpecification Rev. 0001 Specification Page 351 of 440 Appendix E (Page 106 of 148) 10 Listings PT-74-26 RHRarge R-21 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Pressure take dose?)

Transmitter RMR PMP B-B PI-74-26 Discharge R-21 4-20 MA OUT New 4-20 MA Indicator required 10.0 Pressure Indicator RHR PMP B-B PS-74-26 Discharge R-21 Bistable OUT 10.0 Pressure 118 VAC Annuciation ANN 16-35 & Status Panel input RHR Hx 8 Outlet TE-74-39 Temp Transmitter R-1 RTD Input IN 10.0 RHR Hx B Outlet TR Temp Recorder R-16 4-20 MA OUT New 4-20 MA Indicator required 10.0 26P002 RHR Hx A Outlet TE-74-29 Temp Transmitter R-19 RTD Input IN 10.0 RHR Hx A Outlet TR Temp Recorder R-19 4-20 MA OUT New 4-20 MA Indicator required 10.0 14P002 RHR FLOW 4-20 MA FBM237 AO HIC CNTRL - Output M-6 16A Indication RHR FLOW 24 VDC FBM241d DO HIC CNTRL - Ramp 2V, 16A PB LED RHR FLOW FBM241d DO HIC CNTRL - M-6 IBA Increase PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 352 of 440 Appendix E (Page 106 of 148) 10 Listings RHR FLOW 24 VDC FBM24Id DO HIC CNTRL - M-6 16A Decrease PB LED RHR FLOW CONTACT FBM241 d Oi HIC CNTRL - M-6 16A Increase PB RHR FLOW CONTACT FBM241d oi HIC CNTRL - MIA PB M-6 16A RHR Flow CNTRL MCONTACT FBM241d DI 1I6 - Ramp PB M-6 16A RHR Flow CNTRL CONTACT HIC0 - Decrease PB M- FRM24Id Al 16A RHR Flow Output 4-20 MA FM-74-16 Signal to liP M-6 AO RHR FLOW 4-20 MA FBM237 AO HIC CNTRL - Output M-6 28A Indication RHR FLOW 24 VDC FBM241 d DO HIC CNTRL - Ramp M-6 28A PB LED RHR FLOW 24 VDC FBM241 d DO HIC CNTRL - M-6 28A Increase PB LED RHR FLOW M-6 24 VDC FBM241d DO HIC CNTRL -

28A Decrease PB LED RHR FLOW CONTACT FBM241d DiI HIC CNTRL - M-S 28A Increase PB RHR FLOW CONTACT FBM241d O1 HIC CNTRL - MA PB M-6 28A

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specifiication Rev. 0001 Specification Page 353 of 440 Appendix E (Page 107 of 148) 10 Listings RHR Flow CNTRL CONTACT FBM241d Dil H2C-4 - Ramp PB M6 28A HIC 28A RHR Flow CNTRL

- Decrease PB MS6 CONTACTA CONTAC 1 28A RHR Flow Output 4-20 MA Signal to I/P RHR FLOW 4-20 MA FBM237 AO HIC CNTRL - Output M-6 32A Indication RHR FLOW 24 VDC FBM241d DO H1C-44 CNTRL - Ramp M24 32A PB LED RHR FLOW 24 VDC FBM241d DO HIC CNTRL - 2DM 32A Increase PB LED 24 VDC FBM241d DO HIC RHR FLOW CNTRL - M-6 32A Decrease PB LED RHR FLOW M6CONTACT FBM24ld DI HIC CNTRL - U-C 32A increase PB RHR FLOW CONTACT FBM241d Dl HIC CNTRL - M/A PB M-6 32A M-6 CONTACT FBM241d DI HIC RHR Flow CNTRL 32A - Ramp PB RHR Flow CNTRL CONTACT HIC - Decrease PB MCT FBM241d Dl 32A RHR Flow Output 4-20 MA FM-74-32 Signal to I/P M- AI SIS Flow to RCS FT-63-91B 2&3 CL Power R-23 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 100

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 354 of 440 Appendix E (Page 108 of 148) 10 Listings Transmitter take dose?)

SIS Flow to RCS , ,.

FI-63-91 B 2&3 CL Power R-23 4-20 MA OUT New 4-20 MA Indicator required 10.0 Indicator SIS Flow to RCS FT63-92B &4 CL Power R-21 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Transmitter take dose?)

51S flow to RCS FI-63-926 i&4 CL Power R-21 4-20 MA OUT New 4-20 MA Indicator required 10.0 Indicator RHR Inj or Recirc FT Flow after a R-19 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 173A LOCA Transmitter take dose?)

RHR Inj or Recirt FI FlOw after a R-1 9 4-20 MA OUT New 4-20 MA Indicator required 10.0 173A LOCA Indicator SIS CCP Inj Trk FT-63-170 Outlet Flow 1R-21 4-20 MA IN Look at Smart Transmitter with Square Root Extractor (Can it 10.0 Transmitter take dose?)

SIS CCP Inj Tk FI-63-170 Outlet Flow M-6 4-20 MA IN New 4-20 MA Indicator required 10.0 Indicator new 10/5 10.0

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 365 of 440 Appendix E (Page 109 of 148) 10 Listings WBN Unit 2 Listing BOP Control Racks LOOP DESCRIPTION SIGNAL SIGNAL FBM TYPE INPUT/OUTPUT COMMENTS SPEC NUMBER LOCATION TYPE NUMBER 2-Fr-1-152 SG 1 Blowdown Flow 2-R-125 4-20 mA In 11.2-3 2-FT-1-156 SG 2 Blowdown Flow 2-R-125 4-20 mA In 11.2.3 2-FT-1-160 SG 3 Blowdown Flow 2-R-125 4-20 mA In 11-2.3 2-FT-1-164 SG 4 Blowdown Flow 2-R-125 4-20 mA I In 11.2.3 MFPT A Seal Stm 2-FT-1-34 Flow 2-R-124 4-20 mA In 11.2.1 MFPT B Seal Stm 2-FT-1-41 Flow 2-R-124 4-20 mA In 11.2.1 MSR A-2 Cold 2-PT-1-120 Reheat Press 2-R-123 4-20 mA In 11.2.1 MSR B-2 Cold 2-PT-1-125 Reheat Press 2-R-123 4-20 mA In 11.2.1 MSR C-2 Cold 2-PT-i-130 Reheat Press 2-R-123 4-20 mA In 11.2.1 MSR A-1 Cold 2-PT-I-83 Reheat Press 2-R-1 23 4-20 mA In 11.2.1 MSR B-I Cold 2-PT-I-90 Reheat Press 2-R-123 4-20 mA In 11.2.1 MSR C-1 Cold 2-PT-1 -97 Reheat Press 2-R-123 4-20 mA In 11.2.1 MSR A-2 Hot Reheat 2-PT-1-122 Press 2-R-123 4-20 mA In 112.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification , Page 356 of 440 Appendix E (Page 110 of 148) 10 Listings Press MSR A-I Hot Reheat 2-PT-1-86 Press 2-R-123 4-20 mA In 11.2.1 MSR B-I Hot Reheat 2-PT-1-93 Press 2-R-123 4-20 mA In 11.2.1 MSR C-I Hot Reheat 2-PT-1-100 Press 2-R-123 4-20 mA In 11.2.1 MSR A-2 Reheat 2-PT-1-76 Press 2-R-121 4-20 mA In 11,2.1 MSR B-2 Reheat 2-PT-1-78 Press 2-R-121 4-20 mA In 11.2.1 MSR C-2 Reheat 2-PT-1-80 Press 2-R-121 4-20 mA In 11.2.1 MSR A-1 Reheat 2-PT-1-85 Press 2-R-121 4-20 mA In 11.2.1 MSR B-1 Reheat 2-PT-1-92 Press 2-R-121 4-20 mA In 11.2.1 MSR C-1 Reheat 2-PT-1-SQ Press 2-R-121 4-20 mA In 11.2.1 MSR A-2 Reheat Stm 2-FT-1-56 Flow 2-R-141 4-20 mA In 11.2.1 MSR B-2 Reheat Stm 2-FT-1-57 Flow 2-R-141 4-20 mA In 11.2.1 MSR C-2 Reheat Stm 2-FT-1-58 Flow 2-R-141 4-20 mA In 11.2.1 MSR A-1 Reheat Stm 2-FT-1-53 Flow 2-R-141 4-20 mA In 11.2.1 MSR B-I Reheat Stm 2-FT-1-54 Flow 2-R-141 4-20 mA In 11.2.1 MSR C-I Reheat Stm 2-FT-1-55 Flow 2-R-141 4-20 mA In 11.2.1 MSR A-I Reheat Stmr 2-FT-1-1 16 to MFPT A 2-R-124 4-20 mA In 11.2.1 MSR B-I Reheat Stm 2-FT-1-117 to MFPT B 2-R-124 4-20 mA In 11.2.1 Reheat Stir to MFPT 2-PT-1-118 Press 2-R-123 4-20 mA In 11.2.1 2-FT-1-17 AFWPT Stm Flow 2-R-137 4-20 mA In 11.2.1 2-PT-1-48 High Pressure US 2-R-123 4-20 mA In 11.21

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 357 of 440 Appendix E (Page 1III of 148) 10 Listings Supply Pressure Hotwell Pump DIsch 2-FT-2-35 Flow 2-R-124 4-20 mA In-Crltical Rec on M-3, Sw Logic VIv Intdk, VMvCont Output 11.2.9 Hotwell Pump Disch 2-FR-2-35 Flow 2-R-124 4-20 mA Out Recorder on 2-M-3 11.2.9 Hotweli Pump Disch 2-FM-2-35B Flow 2-R-123 4-20 mA Out-Critical Controller output to local I/P and valve 11.2.9 HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AO 2-LlC-2-2 CNTRL - Deviation Indication HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AO 2-UC-2-2 CNTRL - Setpoint Indication HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AO 2-LIC-2-2 CNTRL - Output Indication HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Ramp PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Setpoint PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Manual PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Auto PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Increase PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-2 CNTRL - Decrease PB LED HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-2 CNTRL- Increase PB CT HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-2 CNTRL - Decrease CT PB

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 358 of 440 Appemdix E (Page 11:2 of 148) 10 Listings HOTWELL LEVEL 2-M-2 CONTA FBM24 Id DI 2-LIC-2-2 CNTRL - Decrease CT PB HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-2 CNTRL - M/A PB CT HOTWELL LEVEL 2-M-2 CONTA FBM241d D0 2-LIC-2-2 CNTRL - Ramp PB CT HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-2 CNTRL - Setpoint PB CT HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AD 2-LIC-2-9 CNTRL - Deviation Indication HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AO 2-LIC-2-9 CNTRL - Setpoint Indication HOTWELL LEVEL 2-M-2 4-20 MA FBM237 AO 2-LICo2-9 CNTRL - Output Indication HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Ramp PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Setpoint PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Manual PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Auto PB LED HOTWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Increase PB LED HOIWELL LEVEL 2-M-2 24 VDC FBM241d DO 2-LIC-2-9 CNTRL - Decrease PB LED HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-9 CNTRL - Increase PB CT

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 359 of 440 Appendix E (Page 11:3 of 148) 10 Listings


~r-1-r~-----, - - .~ - ¶ -- - -- - - - - -

HOTWELL LEVEL CONTA FBM241d 01 2-LIC-2-9 CNTRL - Decrease CT PB HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-9 CNTRL - MA PB CT HOTWELL LEVEL 2-M-2 CONTA FBM241 d DI 2-LIC-2-9' CNTRL - Ramp PB CT HOTWELL LEVEL 2-M-2 CONTA FBM241d DI 2-LIC-2-9 CNTRL - Setpoint PB CT Condenser Zone A 2-PT-2-1 pressure 2-R-123 4-20 mA In 11.2_3 Condenser Zone A 2-PS-2-IB pressure 2-R-123 Contact Out Switch Logic C-9 Interlock 11.2.3 Condenser Zone A 2-PT-2-2 pressure 2-R-123 4-20 mA In 112.1 Condenser Zone B 2-PT-2-7 pressure 2-R-1 24 4-20 mA In 11.2.3 Condenser Zone B.

2-PS-2-76 pressure 2-R-124 Contact Out Switch for Annunciation 11.2.3 Condenser Zone B 2-PS-2-7D pressure 2-R-124 Contact .Out Switch Logic C-9 Interlock 11.2.3 Condenser Zone C 2-PT-2-1 0 pressure 2-R-123 4-20 mA In 11.2.3 2-PfUR Condenser Zone C 2P002 pressure 2-R-123 4-20 mA Out Recorder on 2-M-3 11.2.3 Condenser Zone C 2-PS-2-1 0 pressure 2-R-123 Contact Out Switch for Annunciation 11.23 Condenser Zone C 2-PT-2-336 pressure 2-R-125 4-20 mA In 11.2.1 2-LT 12/1009 Hotwell Level 2-R-124 4-20 mA In I of 2 transmitters is selected locally for the level signal 11.2.2 2-LR-2-12 Hotwell Level 2-R-124 4-20 mA Out Recorder on 2-M-3 11.2.2 Hotwell Pumps 2-PT-2-13 Suction Pressure 2-R-123 4-20 mA In 11.2.1 Cond Booster Pmp 2-PT-2-99 Disch Press 2-R-123 4-20 mA In 11.2.1 Cond Booster Pmp 2-PT-2-77 Suct Press 2-R-123 4-20 mA In 11.2-2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 360 of 440 Appendix E (Page 1114 of 148) 10 Listings Cond Booster Pmp 2-PI-2-77 Suct Press 2-R-123 4-20 mA Out Indicator on 2-M-3 11.2.2 Cond Vac Pmp Disch 2-FT-2-256 Fi'r Flow 2-R-142 4-20 mA In 11.2.1 Cond Vac Pmp Disch 2-FT-2-257 Fltr Byp Flow 2-R-142 4-20 mA In 11.2.1 MFPT A Condenser 2-PT-2-14 Press 2-R.141 4-20 mA 11.2.3 MFPT A Condenser 2-PS-2-1t4 Press 2-R-141 Contact Switch for Annunciation 11.2.3 MFPT B Condenser 2-PT-2-15 Press 2-R-141 4-20 mA 11.2.3 MFPT B Condenser 2-PS-2-15 Press 2-R-141 Contact Switch for Annunciation 11.2.3 MFPT A Condenser 2-PT-2-206 Inlet Press 2-R-1 23 4-20 mA In 11.2 1 MFPT B Condenser 2-PT-2-212 Inlet Press 2---123 4-20 mA In 11.2.1 MFP A Suction 2-PT-2-220 Press 2-R-125 4-20 mA In 11.2.1 MFP B Suction 2-PT-2-223 Press 2-R-125 4-20 mA In 11.2.1 SBMFP Suction 2-PT-2-273 Press 2-R-142 4-20 mA In 11.2.1 MFP Suction Hdr 2-PT-2-129 Press 2-R-1 23 4-20 mA In 11.2.7 MFP Suction Hdr 2-PI-2-129 Press 2-R-123 4-20 MA Out Indicator on 2-M-3 11.2-7 MFP Suction Hdr Switch for annunciation, arithmetic combination with input 2-PS-2-129A Press 2-R-141 Contact Out from 2-PT-5-3I. 11.2-7 Hotwell Level Valve 2-LM-2-3 I/P 2-M-2 4-20 mA Out Hotwell Level Valve 2-LM-2-9 liP 2-M-2 4-20 mA Out 2-FT-2-201 CST A to hotwell flow 2-R-124 4-20 mA In 11-2.2 2-FR 200P002 CST A to hotwell flow 2-R-124 4-20 mA Out Recorder on 2-M-3 11.2.2 2-FT-2-200 CST inlet flow 2-R-124 4-20 mA In 11.2.2 2-FR CST inlet flow 2-R-124 4-20 mA Out Recorder on 2-M-3 11.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 361 of 440 Appendix E (Page 115 of 148) 10 Listings 200P001 Gland Stm Cond Il 2-PT-2-36 Press 2-R-123 4-20 mA In 11.2.2 Gland Stm Cond Inl 2-PI-2-36 Press 2-R-123 4-20 mA Out Indicator on 2-M-3 11.2.2 2-PT-3-37 SG I FW Inlet Press 2-R-123 4-20 mA In 11.2.3 2-PI-3-37 SG I FW Inlet Press 2-R-123 4-20 mA Out Indicator on 2-M-4 11.2.3 2-PT-3-50 SG 2 FW Inlet Press 2-R-123 4-20 mA In 11.2.3 2-PI-3-50 SG 2 FW Inlet Press 2-R-123 4-20 mA Out Indicator on 2-M-4 11.2.3 2-PT-3-92 SO 3 FW Inlet Press 2-R-1 23 4-20 mA In 11.2.3 2-PI-3-92 SO 3 FW Inlet Press 2-R-123 4-20 mA Out Indicator on 2-M-4 11.2.3 2-PT-3-105 SG 4 FW Inlet Press 2-R-1 23 4-20 mA In 11.2.3 2-PI-3-105 SG 4 FW Inlet Press 2-R-123 4-20 mA Oul Indicator on 2-M-4 11.2.3 2-PT-3-66 MFPA Disch Press 2-R-123 4-20 mA Out 11.2.2 2-PI-3-66A/

2-PI-3-66B MFP A Disch Press 2-R-127 4-20 mA Out Indicator oan 2-M-4 11.2.2 2-PT-3-80 MFP B Disch Press 2-fl-130 4-20 mA In 11.2.2 2-PI-3-80 MFP B Disch Press 2-R-130 4-20 mA Out Indicator on 2-M-4 11.2.2 2-PT-3-203 SBMFP Disch Press 2-R-142 4-20 mA In 11.2.2 2-PI-3-203 SBMFP Disch Press 2-R-142 4-20 rrA Out Indicator on 2-M-3 11.2.2 SG I Tempering 2-FT-3-235 Flow 2-R-141 4-20 mA In 11.2.3 SG 1 Tempering 2-FI-3-235 Flow 2-R-141 4-20 mA Out Indicator on 2-M-4 11.2.3 SG 1 Tempering 2-FS-3-235 Flow 2-11-141 Contact Out Switch for a status light 11.2.3 SG I Tempering 2-FT-3-235A Flow 2-R-142 4-20 mA In 11.2.3 SG 4 Tempering 2-FT-3-244 Flow 2-R-141 4-20 mA In 11.2.3 SG 4 Tempering 2-FI-3-244 Flow 2-R-141 4-20 mA Out Indicator on 2-M-4 11.2.3 SG 4 Tempering 2-FS-3-244 Flow 2-R-141 Contact Out Switch for a status light 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 362 of 440 Appendix E (Page 116 of 148) 10 Listings SG 4 Tempering 2-FT-3-244A Flow 2-R-142 14-20 mA In 11.2.3 SG 2 Tempering 2-FT-3-238 Flow 2-R-141 4-20 mA In 11.2 3 SG 2 Tempering 2-FI-3-238 Flow 2-R-141 4-20 mA Out Indicator on 2-M-4 11.2.3 SG 2 Tempering 2-FS-3-238 Flow 2-R-141 Contact Out Switch for a status light 11-2.3 SG 1 Tempering 2-FT-3-238A Flow 2-R-142 4-20 mnA In 11.2.3 SG 3 Tempering 2-FT-3-241 Flow 2-R-141 4-20 mA In Ind on M-4, Sw for status light 11.2.3 SG 3 Tempering 24-1-3-241 Flow 2-R-141 4-20 mA Out Indicator on 2-M-4 11.2.3 SG 3 Tempering 2-FS-3-241 Flow 2-R-141 Contact Out Switch for a status light 11.2.3 SG 3 Tempering 2-FT-3-241A Flow 2-R-142 4-20 mA In 11.2.3 2-PT-3-161 SG 1 AFW Press 2-R-123 4-20 mA In 11.2_1 2-PT-3-168 SG 4 AFW Press 2-R-123 4-20 mA In 11.2.1 2-PT-3-153 SG 2 AFW Press 2-R-123 4-20 mA In 11.2.1 2-PT-3-146 SG 3 AFW Press 2-R-123 4-20 mA In 11.2.1 Exit Stm Flow to 2-FT-5-99 MSR A-1 2-R-142 4-20 mA In 11.2.1 Extr Stm Flow to 2-FT-5-100 MSR B-1 2-R-142 4-20 mA In 11.2.1 Extr Strn Flow to 2-FT-5-101" MSR C-1 2-R-142 4-20 mA In 11.2.1 Extr Stm Flow to 2-FT-5-102 MSR A-2 2-R-142 4-20 mA In 11.2.1 Extr Stm Flow to 2-FT-5-103 MSR 1-2 2-R-142 4-20 mA In 11.2.1 Extr Stm Flow to 2-FT-5-104 MSR C-2 2-R-142 4-20 mA In 11.2.1 LPT A Extr to Htr A4 2-PT-5-52 Press 2-R-123 4-20 mA In 11.2.2 LPT A Extr to Htr A4 2-PI-5-52 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 363 of 440 Appemdix E (Page 117 of 148) 10 Listings LPT U Extr to Htr B4 2-PT-5-AC Press 2-R-123 4-20 mA In 11.2.1 LPT C Extr to Htr C4 2-PT-5-68 Press 2-R-123 4-20 mA In 11,2.1 LPT A Extr to Htr A5 2-PT-5-77 Press 2-R-123 4-20 mA In 11.2.2 LPT A Extr to Htr A5 2-PI-5-77 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 LPT B Extr to H-r 85 2-PT-5-80 Press 2-R-1 23 4-20 mA In 11.2.1 LPT C Extr to Htr C5 2-PT-5-83 Press 2-R-124 4-20 mA In 11.2.1 LPT A Extr to Htr A6 2-PT-5-84 Press 2-R-123 4-20 mA In 11.2.2 LPTA Extr to HtrA6 2-PI-5-84 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 LPT B Extr to Htr B6 2-PT-5-85 Press 2-R-124 4-20 mA In 11.2.1 LPT C Extr to Htr C6 2-PT-5-86 Press 2-R-124 4-20 mA In 11.2.1 LPT A Extr to Htr A7 2-PT-5-87 Press 2-R-123 4-20 mA In 11.2.2 LPT A Extr to Htr A7 2-PI-5-87 Press 2-R-123 4-20 mA Out Indicator an 2-M-2 11.2.2 LPT B Extr to Htr B7 2-PT-5-89 Press 2-R-124 4-20 mA In 11.2.1 LPT C Extr to Htr C7 2-PT-5-91 Press 2-R-124 4-20 mA In 11.2.1 Hir A4 Sim Inlet 2-PT-5-55 Press 2-R-123 4-20 mA In 11.2.2 Hir A4 Sim Inlet 2-PI-5-55 Press 2-R-1 23 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr B4 Sim Inlet 2-PT-5-63 Press 2-1-M23 4-20 mA In 11.2.2 Htr B4 Sirn Inlet 2-PI-5-63 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr C4 Stm Inlet 2-PT-S-71 Press 2-R-123 4-20 mA In 11.2.2 Htr C4 Stm Inlet 2-PI-5-71 Press 2-R-1 23 4-20 mA Out Indicator on 2-M-2 11.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 364 of 440 Appendix E (Page 11 S of 148) 10 Listings Htr A3 Stm Inlet 2-PT-5-41 Press 2-R-123 4-20 MA I In 11.2.2 Htr A3 Stm Inlet 2-PI-5-41 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr C3 Stm Inlet 2-PT-5-45 Press 2-R-123 4-20 mA In 11.2.2 Htr C3 Stm Inlet 2-PI-5-45 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr A2 Stm Inlet 2-PT-5-31 Press 2-R-1 23 4-20 mA In signal combined arithmetically with 2-PT-2-129 11.2.7 Htr A2 Stm Inlet 2-PI-5-31 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.7 Htr B2 Stm Inlet 2-PT-5-33 Press 2-R-123 4-20 mA In 11.2.2 Htr 62 Stm Inlet 2-PI-5-33 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr C2 Stm Inlet 2-PT-6-35 Press 2-R-123 4-20 mA In 11.2.2 Htr C2 Stn Inlet 2-PI-5-35 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr Al Stm Inlet 2-PT-5-22 Press 2-R-t23 4-20 mA In 11.2.2 Htr Al Stm Inlet 2-PI-5-22 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr B1 Stm Inlet 2-PT-5-24 Press 2-R-123 4-20 mA In 11-2.2 Htr B1 Stm Inlet 2-PI-5-24 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11.2.2 Htr C1 Stm Inlet 2-PT-5-26 Press 2-R-123 4-20 mA In 11.2.2 Htr C1 Stm Inlet 2-PI-5-26 Press 2-R-123 4-20 mA Out Indicator on 2-M-2 11-2.2 HP Extr Stm to #1 2-PT-5-1 htrs 2-R-123 4-20 mA In 11.2.1 HP Extr Stm to #1 2-PT-5-19 hMrs 2-R-123 4-20 mA In 11.2.1 2-PT-5-27 HP Extr Stm to #2 2-R-123 4-20 mA In 11.2.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 365 of 440 Appendix E (Page 11S of 148) 10 Lis;tings htrs HP Extr Stm (o #3 2-PT-5-36 Flrs 2-R-123 4-20 mA In 11.2.1 MSR Aw LP Dr Tk 2-FT-6-227 Flow 2-R- 124 4-20 mA In 11.2.1 MSR A1 LP Dr Tk 2-FT-6-240 Flow 2-R-124 4-20 mA In 11.2.1 MSR C1 LP Dr Tk 2-FT-6-252 Flow 2-R-124 4.20 mA In 11.2.1 MSR A2 LP Dr Tk 2-FT-6-264 Flow 2-R-124 4-20 mA In 11.2.1 MSR B2 LP Dr Tk 2-FT-6-272 Flow 2-R-124 4-20 mA In 11.2.1 MSR C2 LP Dr Tk 2-FT-6-280 Flow 2-R-124 4-20 mA In 11.2.1 MSR A1 HP Dr Tk 2-FT-6-229 Flow 2-R-124 4-20 mA In 11.2.1 MSR 31 HP Dr Tk 2-FT-6-242 Flaw 2-R-124 4-20 mA In 11.2.1 MSRB1 HPDrTk 2-FT-6-254 Row 2-R-124 4-20 mA In 11.2.1 MSR A2 HP Dr Tk 2-FT-6-266 Flow 2-R-124 4-20 mA In 11.2.1 MSR B2 HP Dr Tk 2-FT-6-274 trow 2-R-124 4-20 mA In 11.2.1 MSR C2 HP Dr Tk 2-FT-6-282 Flow 2-R-124 4-20 mA In 11.2.1 2-FT-6-231 HtrMA Flow 2-R-124 4-20 mA In 11.2.1 2-FT-6-244 Htr B0 Flow 2-R-124 4-20 mA In 11.2.1 2-FT-6-256 Htr C1 Flow 2-R-124 4-20 mA In 11.2.1 2-FT-6-233 Htr A2 Flow 2-R-124 4-20 rnA in 11.2.1 2-FT-6-246 Htr B2 Flow 2-R-124 4-20 mA In 11 2.1 2-FT-6-258 Htr C2 Flow 2-R-124 4-20 rnA In 11.2.1 2-PT-6-290 #3 HDP Disch Press 2-R-124 4-20 mA In 11.2.1 2-FT-6-107 #3 HDP Disch Flow 2-R-124 4-20 mA In-Critk.al 11.2.3 2-FR 107P001 #3 HDP Disch Flow 2-R-124 4-20 mA Out Recorder on 2-h&2 11.2.3

Engineering Upgrade Specification Rev. 0001 NPG Site-Specific J Specification WBN Unit 2 NSSS and BOP Controls Specification Page 366 of 440 Appendix E (Page 1210 of 148)

I Listings 2-FS-6-107 #3 HDP Disch Flow 2-R-124 Contact Out-Critical Switch for turbine runback lbaic 11.2.3

  1. 3 HDP Suction 2-PT-6-286 Press 2-R-124 4-20 mA In 11.2.1 2-PT-5-201 #7 HDP Disch Press 2-R-124 4-20 mA In 11.2.1
  1. 7 HDP Suction 2-PT-6-292 Press 2-R-124 4-20 mA In 11-2-1 2-FT-6-205 #7 HDP Disch Flow 2-R-124 4-20 mA In 11.2.2 2-FR 107P002 #7 HDP Disch Flow 2-R-124 4-20 mA Out Recorder on 2-M-2 11.2.2 SG BLDN Control 2-HIC-15.43 Valve - Output Ind 2-M-4 4-20 MA Out SG BLDN Control 2-HIC-1 5-43 Valve - Ramp PB 2-M-4 Contact In SG BLDN Control 2-HIC-15-43 Valve - Increase PB 2-M-4 Contact In SG BLDN Control 2-HIC-1 5-43 Valve - Decrease PB 2-M-4 Contact In SG BLDN Control Valve - Ramp PB 2-HIC-15-43 LED 2-M4 24V DC Out SG BLDN Control Valve - Increase PB 2-HIC-15-43 LED 2-M-4 24V DC Out SG BLDN Control Valve - Decrease PB 2-HIC-15-43 LED 2-M-4 24V DC Out SG BLDN Control 2-POS-1 5-43 Valve - POS 2-M-4 4-20 MA Out CCW Pmp A Disch 2-PT-27-40 Press 2-R-122 4-20 mA In 11.2.1 CCW Pmp 8 Disch 2-PT-27-30 Press 2-R-122 4-20 mA In 11.2.1 CCW Prmp C Disch 2-PT-27-20 Press 2-R-1 22 4-20 rnA In 11.2.1 CCW Pmp D Disch 2-PT-27-10 Press 2-R-122 4-20 mA In 11.2.1 2-PDT 126 Ann toAB Diff Press 2-R-141 4-20 mA In 11.2.8 2-PDI Ann toAB Diff Press 2-R-141 4-20 rmA Out Indicators on 2-M-9 and 0-M27B 11.2.8

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 367 of 440 Appendix E (Page 121 of 148) 10 Listings 126/-126A 2-PDS-65-48 Ann to AB D1ff Press 2-R-1 23 Contact Out Single switch for annunciation & valve logic via relays 11.2.8 2-PM-65-48 Ann to AB Diff Press 2-R-123 4-20 mA Out Controller output to local I/P and damper operator 11.2.8 2-PDT 127 Ann to AB Diff Press 2-R-141 4-20 mA In 11.2.8 2-PDI-30-127 Ann to AB Diff Press 2-R-141 4-20 mA Out Indicator on 2-M-9 11.2.8 2-PDS-65-49 Ann to AB Diff Press 2-R-130 Contact Out Single switch for annunciation & valve logic via relays 11.2.8 2-PM-65-49 Ann to AB Diff Press 2-R-1 30 4-20 mA Out Controller output to local I/P and damper operator 11.2.8 Upper Containment 2-MT-30-240 Moisture 2-R-1 37 4-20 mA In 11-2.6 Upper Containment 2-MS-30-240 Moisture 2-R-1 37 Contact Out Switch for rate of change annunciation 11.2.6 Lower Containment 2-MT-30-241 Moisture 2-R-1 37 4-20 MA In 11.2.6 Lower Containment 2-MS.30-241 Moisture 2-R-1_37 Contact Out Switch for rate of change annunciation 11.2.6 2-PDT Containment to 133 Annulus DP 2-R-121 4-20 mA In 11-2.2 2-PDI 133/ 2-PDR- Containmentto 3-133 Annulus DP 2-R-121 4-20 mA I Out Indicator on 2-M-9, Recorder on 2-M-6 11.2.2 2-TM-47-8 EHC Tank Temp 2-R-121 4-20 mA In No sensor power supplied required. 11.2.4 2-TS-47-OA/B EHC Tank Temp 2-R-121 Contact Out Switch for ICS point Y2118D 11.2.4 2-TS-47-8B/A EHC Tank Temp 2-R- 121 Contact Out Switch for ICS point Y21i180 11.2.4 CVCS Charging Pmp 2-PT-62-1 06 B Disch Press 2-R-1 37 4-20 mA In 11.2.1 CVCS Charging Pmp 2-PT-62-110 A Dlsch Press 2-R-137 4-20 mA In 11.2.1 2-TM-63-132 RWST Temp 2-R-121 4-20 mA In No sensor power supplied required. 11.2.4 2-TI-63-132 RWST Temp 2-R-121 4-20 mA Out Indicator on 2-M-6 11.2.4 2-TS 132A RWSTTemp 2-R-121 Contact Out Switch for heater logic 11.2.4 2-TS 132B RWST Ternp 2-R-121 Contact Out Switch for heater logic 11.2.4

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 368 of 440 Appendix E (Page 122 of 148) 10 Listings 2-TS 4 CIRICT Thmn

  • -*.4")1 C'*i.9 Q:uitrk Q-h f

~

.. o..*n.rin C124 in, tII 9 2-TS 1320 RWST Temp 2-R-121 Contact Out Switch for annunciation 11.2.4 2-TM-63-131 RWST Temp 2-R-121 4-20 mA In No sensor power supplied required. 11.2.4 2-TI-63-131 RWST Temp 2-R-121 4-20 mA Out Indicator on 2-M-6 11.2.4 2-TS 131A RWST Tamp 2-R-121 Contact Out Switch for heater logic 11.2.4 2-TS 131B RWST Temp 2-R-121 Contact Out Switch for heater logic 11.2.4 2-TS 131C RWST Tamp 2-R-121 Contact Out Switch for annunciation 11.2.4 2-TS 1310 RWST Temp 2-R-121 Contact Out Switch for annunciation 11.2.4 2-LT-63-46 RWST Level 2-R-141 4-20 mA In 11.2,3 2-LI-63-46 RWST Level 2-R-141 4-20 mA Out Indicator on 2-M-6 11.2.3 2-LS-63-46A RWST Level 2-R-141 Contact Out Switch for annunciation 11.2.3 2-LS-63-46B RWST Level 2-R-141 Contact Out Switch for annunciation 11.2-3 2-LT-63-49 RWST Level 2-R-141 4-20 mA In 11-2.3 2-LI-63-49 RWST Level 2-R-141 4-20 mA Out Indicator on 2-M-6 11.2.3 2-LS-63-49A RWST Level 2-R-141 Contact Out Switch for annunciation 11.2.3 2-LS-63-49B RWST Level 2-R-141 Contact Out Switch for annunciation 11.2.3 Accumulator N2 2-FM-63-65 Pressure Control 1-M-6 4-20 mA Out 2-FT-67-122 CCS HTX B Flow 2-R-130 4-20 mA In 11.2.2 2-Fl-67-122 CCS HTX B Flow 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.2 2-FT-67-136 CCS HTX A Flow 2-R-123 4-20 mA In 11.2.2 2-FI-67-136 CCS HTX A Flow 2-R-123 4-20 mA Out Indicator on 0-M27B 11.2.2 C0S 2A-A DISCHARGE PRESS 2-PT-70-52 TEST 2-R- 137 4-20 MA IN 11.2.1 CCS 2B-B DISCHARGE PRESS 2-PT-70-53 TEST 2-R-137 4-20 MA IN 11.2.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 369 of 440 Appemdix E (Page 12:3 of 148) 10 Listings WASTE GAS COMPRESSOR B 2-FT-70-21 CCS FLOW 2-R-125 4-20 MA IN 11.2.3 WASTE GAS COMPRESSOR B CCS FLOW 2-FI-70-21 INDICATION 2-R-125 4-20 MA OUT INDICATOR ON 0-M-27B 11.2.3 WASTE GAS COMPRESSOR B CONTA 2-FS-70-21 CCS FLOW 2-R-1 25 CT OUT SWITCH FOR ANNUNICATION 11.2.3 WASTE GAS COMPRESSOR B CCS 2-TM-70-7 TEMPERATURE 2-R-142 4-20 MA IN 11.2.4 WASTE GAS COMPRESSOR B CCS TEMPERATURE 2-TI-70-7 INDICATION 2-R-142 4-20 MA OUT INDICATOR ON 0-M-27B 11-2.4 WASTE GAS COMPRESSOR B CCS 2-TS-70-7 TEMPERATURE 2-R-142 Contact OUT SWITCH FOR ANNUNICATION 11.2.4 2-FT ECCS Htx B Header 165A Flow 2-R-131 4-20 mA In 11.2.2 ECCS Hix B Header 2-Fl-70-15A Flow 2-R-1 31 4-20 mA Out Indicator on 0-M27B. 11.2.2 RHR Htx B Outlet 2-TM-70-154 Temp 2-R-130 4-20 mA -- In No sensor power supplied required 11.2.4 RHR Htx B Outlet 2-TI-70-154 Temp 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.4 RHR Htx B Outlet 2-TS-70-154 Temp 2-R-130 Contact Out Switch for annunciation 11.2.4 RHR Htx B Outlet 2-FT-70-155 Flow 2-R-130 4-20 mA In 11.2.3 RHR Htx B Outlet 2-FI-70-155 Flow 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.3 RHR Htx B Outlet 2-FS-70-155 Flow 2-R-130 Contact Out Switch for annunciation 11.2.3 2-FT-70-152 RHR Pmp B Htx Seal 2-R-130 4-20 mA In 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 370 of 440 Appendix E (Page 124 of 148) 10 Lis;tings Wtr Out Flow RHR Pmp B Htx Seal 2-FI-70-152 Wtr Out Flow 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.3 RHR Pmp B Htx Seal 2-FS-70-152 Wtr Out Flow 2-R-130 Contact Out Switch for annunciation 11.2.3 CS Pmp B Oil & Seal 2-FT-70-149 WIr HTX Flow 2-R-130 4-20 mA In 11.2.3 CS Prnp B Oil & Seal 2-FI-70-149 Wtr HTX Flow 2-R-1 30 4-20 rnA Out Indicator on 0-M27B 11.2.3 CS Pmp B Oil & Seal 2-FS-70-149 Wtr HTX Flow 2-R-130 Contact Out Switch for annunciation 11.2.3 SIS Pmp B Oil & Seal 2-FT-70-148 Wtr HTX Flow 2-R-130 4-20 mA In 11.23 SIS Pmp B Oil & Seal 2-FI-70-148 Wtr HTX Flow 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.3 SIS Pmp B Oil & Seal 2-FS-70-148 Wtr HTX Flow 2-R-130 Contact Out Switch for annunciation 11.2.3 Charging Pmp B Oil 2-FT-70-145 Htx Flow 2-R-130 4-20 mA In 11.2.3 Charging Pmp B Oil 2-FI-70-145 Htx Flow 2-R-130 4-20 mA Out Indicator on 0-M27B 11.2.3 Charging Prnp B Oil 2-FS-70-145 Htx Flow 2-R-130 Contact Out Switch for annunciation 11.2.3 2-FT Waste Gas Comp Htx 164A A Flow 2-R-142 4-20 mA In 11.2.3 Waste Gas Comp Htx 2-FI-70-164A A Flow 2-R-142 4-20 mA Out Indicator on 0-M27B 11.2-3 2-FS Waste Gas Coamp Htx 164A A Flow 2-R-142 Contact Out Switch for annunciation 11.2.3 Non-Regen Htx A 2-FT-70-190 Flow 2-R-125 4-20 mA In 112.2 Non-Regen Htx A 2-FI-70-190 Flow 2-R-125 4-20 mA Out Indicator on 0-M27B 11.2.2 Non-Regen Htx A 2-TM-70-191 Temp 2-R-142 4-20 mA In No sensor power supplied required. 112.4 Non-Regen Htx A 2-TI-70-191 Temp 2-R-142 4-20 mA Out Indicator on 0-M27B 11.2.4 Non-Regen Htx A 2-TS-70-191 Temp 2-R-142 Contact Out Switch for annunciation 11.2.4

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 371 of 440 Appendix E (Page 125 of 148) 10 Lis;tings 2-FT-70-1 76 Seal WtrHtx AFlow I2-R-125 4-20 mA I In 11.2.3 2-FI-70-176 Seal Wtr HtxA Flow 2-R-125 4-20 mA Out Indicator on 0-M-279 11.2.3 2-FS-70-176 Seal Wtr Htx A Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 2-TM-70-175 Seal Wtr Htx A Temp 2-R-142 4-20 mA In No sensor power supplied required. 11.2.4 2-TI-70-175 Seal Wtr Htx A Temp 2-R-142 4-20 mA Out Indicator on 0-M27B 11.2.4 2-TS-70-175 Seal Wtr Htx A Temp 2-R-142 Contact Out Switch for annunciation 11.2.4 2-FT-70-181 Sample Hb Flow 2-R-125 4-20 mA In 11,2.3 2-FI-70-181 Sample Htx Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 2-FS-70-181 Sample Htx Flow 2-R-125 Contact Out Switch for annunciation 11.2-3 2-TM-70-182 Sample Htx Temp 2-R-124 4-20 mA In No sensor power supplied required. 11.2.4 2-TI-70-182 Sample Htx Temp 2-R-124 4.20 mA Out Indicator on 0-M278 11.2.4 2-TS-70-182 Sample Htx Temp 2-R-I124 Contact Out Switch for annunciation 11.2.4 2-POT RCP 4 Thermal 126 Barrier DP 2-R-123 4-20 mA In 11.2.3 RCP 4 Thermal 2-PDI-70-126 Barrier DP 2-R-123 4-20 mA Out Indicator on 0-M-27B 11.2.3 2-PDS RCP 4 Thermal 126 Barrier DP 2-R-123 Contact Out Switch for annunciation 11.2.3 2-PDT-7o- RCP 1 Thermal 117 Barrier DP 2-R-123 4-20 mA In 11.2.3 RCP 1 Thermal 2-PDI-70-117 Barrier DP 2-R-123 4-20 mA Out Indicator on O-M-27B 11.2.3 2-PDS RCP 1 Thermal 117 Barrier DP 2-R-123 Contact Out Switch for annunciation 11.2.3 2-PDT RCP 2 Thermal 104 Barrier DP 2-R-123 4-20 mA In 11.2.3 RCP 2 Thermal 2-PDI-70-104 Barrier DP 2-R-123 4-20 mA Out Indicator on O-M-27B 11.2.3 2-PDS RCP 2 Thermal 104 Barrier DP 2-R-123 Contact Out Switch for annunciation 11.2.3 RCP 3 Thermal 2-PDT-70-94 Barrier DP 2-R-123 4-20 mA In 11.2-3 RCP 3 Thermal 2-PDI-70-94 Barrier DP 2-R-123 4-20 mA Out Indicator on O-M-27B 11 2.3 2-PDS-70-94 RCP 3 Thermal 2-R-123 Contact I Out Switch for annunciation 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 372 of 440 Appendix E (Page 1216 of 148) 10 Listings Barrier OP RCP 4 Thermal 2-FT-70-124 Banier Flow 2-R-125 4-20 mA In 11-2.3 RCP 4 Thermal 2-FI-70-124 Barrier Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 4 Thermal 2-FS-70-124 Barrier Flow 2-R-125 Contact Out Switch for annunciation 11.23 RCP 1 Thermal 2-FT-70-115 Barrier Flow 2-R-125 4-20 mA In 11.2.3 RCP 1 Thermal 2-Fl-70-115 Barrier Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 1 Thermal 2-FS-70-1 15 Barier Flow 2-R-1 25 Contact Out Switch for annunciation 11.2.3 RCP 2 Thermal 2-FT-70-105 Barrier Flow 2-R-125 4-20 mA In 11.2.3 RCP 2 Thermal 2-FI-70-105 Barrier Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 2 Thermal 2-FS-70-105 Barrier Flow 2-R-125 Contact Out Switch for annunciation 11-2.3 RCP 3 Thermal 2-FT-70-95 Barrier Flow 2-R-125 4-20 mA In 11.2.3 RCP 3 Thermal 2-FI-70-95 Barrier Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 3 Thermal 2-FS-70-95 Barrier Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP 4 Lower Oil 2-FT-70-128 Cooler Flow 2-R- 125 4-20 mA In 11.2.3 RCP 4 Lower Oil 2-FI-70-128 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 4 Lower Oil 2-FS-70-128 Cooler Flow 2-R-1 25 Contact Out Switch for annunciation 11.2.3 RCP 1 Lower Oil 2-FT-70-119 Cooler Flow 2-R-125 4-20 mA In 11.2.3 RCP I Lower Oil 2-FI-70-119 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 1 Lower Oil 2-FS-70-1I9 Cooler Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP 2 Lower Oil 2-FT-70-108 Cooler Flow 2-R-125 4-20 mA In 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 373 of 440 Appendix E (Page 127 of 148) 10 Lis;tings RCP 2 Lower Oil 2-Fl-70-108R ICooler Flaw 2-Rl-125 4-20 mA Out Indicator on 0-M-27R 11.2.3 RCP 2 Lower Oil 2-FS-70-108 Cooler Flow 2-R-125 Contact Out Switch for annunciati6n 11.2.3 RCP 3 Lower Oil 2-FT-70-98 Cooler Flow 2-R-1 25 4-20 mA In 11.2.3 RCP 3 Lower Oil 2-FI-7T-S8 Cooler Flow 2-R-1 25 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 3 Lower Oil 2-FS-70-98 Cooler Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP 4 Upper Oil 2-FT-70-125 Cooler Flow 2-R-125 4-20 mA In 11.2.3 RCP 4 Upper Oil 2-FI-70-125 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 4 Upper Oil 2-FS-70-125 Cooler Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP I Upper Oil 2-FT-70-116 Cooler Flow 2-R-125 4-20 mA In 11.2.3 RCP 1 Upper Oil 2-FI-70-116 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 1 Upper Oil 2-FS-70-116 Cooler How 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP 2 Upper Oil 2-FT-70-1O6 Cooler Flow 2-R-125 4-20 mA In 11.2.3 RCP 2 Upper Oil 2-Fl-70-106 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 2 Upper Oil 2-FS-70-106 Cooler Flow 2-R-125 Contact Out Switch for annunciation 11.2.3 RCP 3 Upper Oil 2-FT-70-96 Cooler Flow 2-R-125 4-20 mA In 11.2.3 RCP 3 Upper Oil 2-FI-70-96 Cooler Flow 2-R-125 4-20 mA Out Indicator on 0-M-27B 11.2.3 RCP 3 Upper Oil 2-FS-70-96 Cooler Flow 2-R-125 Contact- Out Switch for annunciation 11.2.3 RCPs Thermal 2-TM-70-88 Barrier Outlet Temp 2-R- 123 4-20 mA In No sensor power supplied required. 11.2.4 RCPs Thermal 2-TI-0-B8 Barrier Outlet Temp 2-R-123 4-20 mA Out Indicator on 0-M27B 11.2.4 RCPs Thermal 2-TS-70-88 Barrier Outlet Temp 2-R-123 Contact Out Switch for annunciation 11.2.4

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 374 of 440 Appendix E (Page 128 of 148) 10 Listings RCPs Oil Coolers 2-TM-70-91 Outlet Temo 2-R-142 4-20 MA In No sensor Dower supolied reauired. 11.2.4 RCPs Oil Coolers 2-TI-70-91 Outlet Temp 2-R-142 4-20 mA Out Indicator on 0-M27B 11.2.4 RCPs Oil Coolers 2-TS-70-91 Outlet Temp 2-R-142 Contact Out Switch for annunciation 11.2.4 2-FT-70-142 TBBP Sunction Flow 2-R-142 4-20 mA In 11.2.3 2-FI-70-142 TBBP Sunction Flow 2-R-142 4-20 mA Out Indicator on 0-M-27B 11.2.3 2-FS-70-142 TBBP Sunction Flow 2-R-142 Contact Out Switch for annunciation 1123 Excess Letdown Htx 2-FT-70-84 Outlet Flow 2-R-123 4-20 mA In 11.2.3 Excess Letdown Htx 2-FI-70-84 Outlet Flow 2-R-123 4-20 mA Out Indicator on 0-M-27B 11.2.3 Excess Letdown Htx 2-FS-70-84 Outlet Flow 2-R-123 Contact Out Switch for annunciation 11.2.3 Excess Letdown Htx 2-TM-70-86 Outlet Temp 2-R-142 4-20 mA In No sensor power supplied required. 11.2.4 Excess Letdown Htx 2-T"-70-86 Outlet Temp 2-R-142 4-20 mA Out Indicator on 0-M27B 11.2.4 Excess Letdown Htx 2-TS-70-86 Outlet Temp 2-R-142 Contact Out Switch for annunciation 11.2.4 RHR HltxA Outlet 2-FT-70-158 Flow 2-R-127 4-20 mA In 11.2.3 RHR HIx A Outlet 2-FI-70-158 Flow 2-R-127 4-20 mA Out Indicator on 0-M-27B 11.2.3 RHR HtxA Outlet 2-FS-70-158 Flow 2-R-127 Contact Out Switch for annunciation 11.2.3 RHR Pmp A Htx Seal 2-FT-70-1 51 Wtr Out Flow 2-R-127 4-20 mA In 11.2.3 RHR Pmp A Htx Seal 2-FI-70-151 Wtr Out Flow 2-R-127 4-20 mA Out Indicator on 0-M-27B 11.2.3 RHR Pmp A Htx Seal 2-FS-70-151 Wtr Out Flow 2-R-127 Contact Out Switch for annunciation 11.2.3 CS Prmp A Oil & Seal 2-FT-70-1 50 Wtr HTX Flow 2-R-127 4-20 rnA In 11.2.3 CS Pmp A Oil & Seal 2-FI-70-150 Wtr HTX Flow 2-R-127 4-20 mA Out Indicator on 0-M-27B 11.2.3 CS Prmp A Oil & Seal 2-FS-70-150 Wtr HTX Flow 2-R-127 Contact Out Switch for annunciation 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 375 of 440 Appendix E (Page 129 of 148) 10 Listings SIS Pmp A Oil & Seal 2-FT-70-1 47 Wir HTX Flow 2-R-127 4-20 mA In 11.2.3 SIS Pmp A Oil & Seal 2-FI-70-147 Wtr HTX Flow 2-R-127 4-20 mA Out Indicator on 0-M-27B 11.2.3 SIS Pmp A Oil & Seal 2-FS-70-147 Wer HTX Flow 2-R-127 Contact Out Switch for annunciation 11.2.3 Charging Pmp A Oil 2-FT-70-146 Htx Flow 2-R-127 4-20 mA In 11.2.3 Charging Pmp A Oil 2-Ft-70-146 Htx Flow 2-R-127 4-20 mA Out Indicator on 0-M-27B 11.2.3 Charging Pmp A Oil 2-FS-70-146 Htx Flow 2-R-127 Contact Out Switch for annunciation 11.2.3 CS Pmp A Diach 2-PT-72-17 Press 2-R-137 4-20 mA In 11.2.1 CS Prp B Disch 2-PT-72-18 Press 2-R-1 37 4-20 rnA In 11.2.1 RB Fl & Eq Drain 2-LT-T7-125 Sump Level 2-R-137 4-20 mA In No power supply required for this sensor. 11.2.5 2-LS RB Fl & Eq Drain 125A Sump Level 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LS RB Fl & Eq Drain 125B Sump Level 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LS RB Fl & Eq Drain 125D Sump Level 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LS RB Fl & Eq Drain 125E Sump Level 2-R-137 Contact Out Switch for annunciation 11.2.5 RB FI & Eq Drain 2-LS-77-125F Sump Level 2-R-137 Contact Out Switch for annunciation 11.2.5 2-LS RB FL& Eq Drain 1250 Sump Level 2-R-137 Contact Out Switch for pump logic 11.2.5 RB FI & Eq Drain 2-LT-77-126 Sump Level 2-R-137 4-20 mA In No power supply required for this sensor. 11.2.5 2-LS RB Fl & Eq Drain 126A Sump Level 2-R-1 37 Contact Out Switch for pump logic 11.2-5 2-LS RB Fl & Eq Drain 126B Sump Level 2-R-1 37 Contact Out Switch for pump logic 11.2.5 2-LS RB Fl & Eq Drain 2-R-137 Contact Out Switch for pump logic 11.2.5

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 376 of 440 Appendix E (Page 1310 of 148) 10 Listings 126D Sump Level 2-LS RB Fl & Eq Drain 126E Sump Level 2-R-137 Contact Out Switch for annunciation 11.2.5 RB FI & Eq Drain 2-LS-77-126F Sump Level 2-R-137 Contact Out Switch for annunciation 11.2.5 2-LS RB Fl & Eq Drain 126G Sump Level 2-R-137 Contact Out Switch for pump logic 11.2.5 RBF&EDS Pocket 2-LT-77-410 Sump Lvi 2-R-137 4-20 mA In No power supply required for this sensor. 11.2.5 RBF&EDS Pocket 2-LI-77-410 Sump Lvi 2-R-137 4-20 mA Out Indicator on 2-M-15 11.2.5 2-LS RBF&EDS Pocket 410A Sump Lvl 2-R-137 Contact Out Switch for annunciation 11.2.5 2-LS RBF&EDS Pocket 410B Sump Lvi 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LS RBF&EDS Pocket 410D Sump Lvl 2-R-137 Contact Out Switch for pump logic 11.2.5 RBF&EDS Pocket 2-LT-77-411 Sump Lvl 2-R-137 4-20 mA In No power suppl required for this sensor. 11.2.5 RBF&EDS Pocket 2-LI-77-411 Sump Lvl 2-R-137 4-20 mA Out Indicator on 2-M-15 11.2.5 2-LS RBF&EDS Pocket 411A Sump Lvl 2-R-137 Contact Out Switch for annunciation 11.2.5 2-LS RBF&EDS Pocket 411B Sump Lvl 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LS RBF&EDS Pocket 411D Sump LvI 2-R-137 Contact Out Switch for pump logic 11.2.5 2-LT-81-1 PWST Level 2-R-142 4-20 mA In InridonMA. Sw for Ann. Sw for pump logic 11.2.3 2-LI-81-1 PWST Level 2-R-142 4-20 mA Out Indicator on 2-M-5 11.2.3 2-LS-81-1A/E PWST Level 2-R-142 Contact Out Switch for annunciation 11-2.3 2-LS-81-1EIA PWST Level 2-R-142 Contact Out Switch for annunciation 11.2.3 2-LS-81-IBID PWST Level 2-R-142 Contact Out Switch for pump logic 11.2.3 2-L5-81-1D/B PWST Level 2-R-142 Contact Out Switch for pump logic 11.2.3

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 377 of 440 Appendix E (Page 131 of 148) 10 Lis'tings WBN Unit 2 Listing TBBOP Control Racks LOOP DESCRIPTION SIGNAL SIGNAL TYPE F8M TYPE INPUT/OUTPUT COMMENTS SPEC NUMBER LOCATION NUMBER Stator CIg Wtr 2-TE-24-52 Temperature Control TB-S NR-227 RTD In 12.3.1 Stator Cig Wtr 2-TM-24-52 Temperature Control TB-S 4-20 mA Out Valve Control -4/P 12.3.1 Stator C1g Wtr Temperature Control-2-TIC-24-52 Handstation Deviation TB-S 4-20 mA Out 12.3.1 Stator CIg Wtr Temperature Control-Handstation Setpoint 2-TIC-24-52 Indication TB-S 4-20 mA Out 12.3.1 Stator Cig Wtr Temperature Control-Handstation Output 2-TIC-24-52 Indication TB-S 4-20 mA Out 12.3.1 Stator CIg Vtr Temperature Control-2-TIC-24-52 Handstation Ramp PB TB-S Contact In 12.3.1 Stator CGiWtr Temperature Control-Handstation Ramp PB 2-TIC-24-52 LED TB-S 24 VDC Out 12.3.1 Stator CIg Wtr Temperature Control-2-TIC-24-52 Handstation Setpoint PB TB-S Contact lin 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 378 of 440 Appendix E (Page 132 of 148)

I0 Listings Stator CIg Wtr Temperature Control-Handstation Setpoint PB 2-TIC-24-52 LED TB-S 24 VDC Out 12.3.1 Stator CIg Wtr Temperature Control-2-TIC-24-52 landstation WA PB TB-S contact In 12.3.1 Stator GIg Wtr Temperalure Control-Handstation MIA PB 2-TIC-24-52 LED "Manual" TB-S 24 VDC Out 12-3.1 Stator CIg Wir Temperature Control-Handstation WA PB 2-TIC-24-52 LED Auto" TB-S 24 VDC out 12.3.1 Stator CIg Wtr Temperature Control-2-TIC-24-52 Handstation Increase PB "B-S Contact In 12.3.1 Stator CIg Wtr Temperature Control-Handstation Increase PB 2-TIC-24-52 LED TB-S Contact _Out 12.3.1 Stator CIg Wtr Temperature Control-

-landstation Decrease 2-TIC-24-52 PB TB-S Contact In 12 3.1 Stator CIg WVr Temperature Control-

-andstation Decrease 2-TIC-24-52 PB LED TB-S 24 VDC Out 12.3.1 H12 Side Seal Oil Temp Thermocouple TEMPERATURE READING TO ICS VIA DATA 2-TE-24-74 Control TB-S TYPE T In LINK-T2811A 12.3.1 H12 Side Seal Oil Temp 2-TM-24-74B Control TB-S 4-20 mA Out Valve Control -I/P 12.3.1 H2 Side Seal Oil Temp Control- Handstation Z-TIC-24-74 Deviation TB-S 4-20 mA Out 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification I Page 379 of 440 Appendix E (Page 133 of 148) 10 Listings H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Selpoint Indication TB-S t-20 mA Dut 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Output Indication TB-S 4-20 mA _Out 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Ramp PB TB-S Contact In 12-3-1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Ramp PB LED TB-S 24 VDC Out 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Setpoint PB TB-S Contact In 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Setpoint PB LED TB-S 24 VDC Out 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 M/A PB TB-S Contact In 12.3 1 K2 Side Seal Oil Temp Control- Handsation 2-TIC-24-74 W/A PB LED "Manual" TB-S 24 VDC Out 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 M/A PB LED "Auto" TB-S 24 VDC Out 12.3.1 H2 Side Seal Oil Temp Control- Hlandstation 2-TIC-24-74 Increase PB TB-S Contact In 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Increase PB LED TB-S 24 VDC Out 12.3.1 H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Decrease PB TB-S Contact In 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Speciflcation Rev. 0001 Specification Page 380 of 440 Appendix E (Page 134 of 148) 10 Listings H2 Side Seal Oil Temp Control- Handstation 2-TIC-24-74 Dsecmase PR [ED TB -S 24 VDC iut 12.3.1 Air Side Seal Oil Temp Thermocouple TEMPERATURE READING TO ICS VIA DATA 2-TE-24-73 Control TB-S TYPE T In LINK T281OA 12.3.1 Ar Side Seal Oil Temp 2-TM-24-738 Control rB-S 4-20 mA Out Valve Control -U1P 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Deviation TB-S 4-20 mA Out 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Setpoint Indication TB-S 4-20 mA Out 12.3.1 Air Side Seal Oil Temp Control- Handstation Z-TIC-24-73 Output Indication . B-S 4-20 mA Out 12.3.1 Air Side Seat Oil Temp Control- Handstation 2-TIC-24-73 Ramp PB rB-S Contact In 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Ramp PB LED TB-S 24 VDC Out 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Setpoint PB TB-S Contact In 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Setpolnt PB LED TB-S 24 VDC Out 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 M/A PB TB-S Contact In 12.3.1 Air Side Seal Oil Temp Control- Handstation

,-TIC-24-73 M/A PB LED "Manual" TB-S 4 VDC Out 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 381 of 440 Appeodix E (Page 135 of 148) 10 Listings Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 M/A PB LED "Auto" rB-S 24 VOC Out 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Increase PB rB-S Contact In 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Increase PB LED FB-S 24 VDC Out 12.3.1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Decrease PB TB-S Contact In 12.3-1 Air Side Seal Oil Temp Control- Handstation 2-TIC-24-73 Decrease PB LED TB-S 24 VDC Out 12.3.1 Exciter Htx Temp Thermocouple 2-TE-24-41A&D Control TB-S TPE T In 12.3.1 Exciter Htx Temp 2-TCV-24-41 Control TB-S 4-20 mA Out Valve Control NEW UP REQURED 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Deviation TB-S 4-20 mA Out 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Setpoint Indication TB-S 4-20 mA Out 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Output Indication TB-S 4-20 mA Out 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Ramp PB TB-S Contact In 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Ramp PB LED TB-S 24 VDC Out -.12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 382 of 440 Appendix E (Page 136 of 148) 10 Lis;tings Exciter Htx Temp Control- Handstation 2-TIC-24-41 Setooint PB T1B-S Contact In 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Setpoint PB LED TB-S 24 VDC Out 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 M/A PB TB-S Contact In 12.3.1 Exciter Htx Tamp Control- Handstation 2-TIC-24-41 MIA PB LED "Manual" TB-S '24 VDC _ Out 12-3.1 Exciter HIx Tamp Control- Handstation 2-TIC-24-41 WA PB LED "Auto" TB-S 24 VDC Out 12.3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Increase PB TB-S Contact In 12.3.1 Exciter Hix Temp Control- Handstation 2-TIC-24-41 Increase PB LED TB-S 24 VDC: Out 12.3.1 Exciter Htx Tamp Control- Handstation 2-TIC-24-41 Decrease PB TB-S Contact In 12-3.1 Exciter Htx Temp Control- Handstation 2-TIC-24-41 Decrease PB LED TB-S 24 VDC Out 12-3.1 Hydrogen Htx Temp Thermocouple 2-TE-24-48A&B Control TB-S TYPE T In 12.3.1 Hydrogen Htx Temp 2-TM-24-48B Control 2-M-2 4-20 mA Out Valve Control NEW lIP REQURED 12-3.1 Hydrogen Htx Tamp Control- Handstation 2-TIC-24-48 Devration 2-M-2 4-20 mA Out 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 383 of 440 Appendix E (Page 137 of 148) 10 Listings Hydrogen Htx Temp Control- Handstation 2-TIC-24-4A Setocint Indication 2-M-2 4-20 mA Out 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Output Indication 2-M-2 4-20 mA Out 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Ramp PB 2-M-2 Contact In 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Ramp PB LED 2-M-2 24 VDC Out 12.3.1 Hydrogen Htx Temp Contml- Handstation Z-TIC-24-48 Setpoint PB 2-M-2 Contact In 12.3.1 Hydrogen HNx Temp Control- Handstation 2-TIC-24-48 Setpoint PB LED 2-M-2 24 VDC Out 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 MIA PB 2-M-2 Contact In 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 WA PB LED "Manual" 2-M-2 24 VDC Out 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 MIA PB LED "Auto" 2-M-2 24 VDC Out 12.3.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Increase PB 2-M-2 Contact In 123.1 Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Increase PB LED 2-M-2 24 VOC Out 12.3.1 Hydrogen Htx Temp Control- Haandstation 2-TIC-24-48 Decrease P8 2-M-2 Contact _In 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 384 of 440 Appendix E (Page 138 of 148) 10 Listings Hydrogen Htx Temp Control- Handstation 2-TIC-24-48 Decrease PB LED 2-M-2 24 VDC Out 12.3.1 Main Turbine Oil Htx Thermocouple 2-TE-24-69B Temp Control TB-N TYPE T In 12.3.1 Main Turbine Oil Htx 2-TM-24-69 Temp Control 2-M-2 4-20 mA Out Valve Control NEW I/P REQURED 12.3.1 Main Turbine Oil Htx remp Control-2-TIC-24-69 Handstation Deviation 2-M-2 4-20 mA Out 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Setpoint 2-TIC-24-69 Indication 2-M-2 4-20 mA Out 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Output 2-TIC-24-69 Indication 2-M-2 4-20 mA Out 12.3.1 Main Turbine Oil Htx Temp Control-2-TIC-24-69 Handstation Ramp PB 2-M-2 Contact In 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Ramp PB 2-TIC-24-69 LED 2-M-2 24 VDC Out 12.3.1 Main Turbine Oil Htx Temp Control-2-TIC-24-69 Handstation Setpoint PB 2-M-2 Contact In 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Setpoint PB 2-TIC-24-69 LED 2-M-2 24 VDC Out 12.3.1 Main Turbine Oil Htx Temp Control-2-TIC-24-69 Handstation M/A PB -M-2 Contact lIn 1 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and SOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 385 of 440 Appemdix E (Page 139 of 148) 10 Listings Main Turbine Oil Htx Temp Control-Ilandstation M/A PB 2-TIC-24-69 LED "Manuar 2-M-2 24 VOC Out 12.3.1 Main Turbine Oil Htx eemp Control-Handstation MIA PB 2-TIC-24-69 LED "Auto" 2-M-2 24 VDC Out 12-3.1 Main Turbine Oil HIx Temp Control-2-TIC-24-69 Handstation Increase PB 2-M-2 Contact In 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Increase PB 2-TIC-24-69 LED 2-M-2 24 VOC )Out 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Decrease 2-TIC-24-69 PB 2-M-2 Contact In 12.3.1 Main Turbine Oil Htx Temp Control-Handstation Decrease 2-TIC-24-69 PB LED 2-M-2 24 VDC: Out 12.3.1 FWP Turb 2A Oil Htx Thermocouple 2-TE-24-56A Temp Control IB-N TYPE T In 12.3.1 FWP Turb 2A Oil Htx 2-TCV-24-56A emp Control TB-N 4-20 mA ._ Out Valve Control NEW I/P REQURED 123.1 FWP Turb 2A Oi Htx Temp Control-2-TIC-24-56A -landstation Deviation "B-N 4-20 mA Out 12.3.1 FWP Turb 2A O0 Htx remp Control-Handstation Setpoint 2-TIC-24-56A Indication TB-N 4-20 mA ut 12.3.1 FWP Turb 2A Oil Htx Temp Control-2-TIC-24-56A Handstation Output TB-N 4-20 mA Out 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 386 of 440 Appendix E (Page 140 of 148) 10 Listings Indication FWP Turb 2A Oil Htx Tamp Control-2-TIC-24-56A Handstation Ramp PB TB-N Contact In 12.3.1 FWP Turb 2A Oil Htx Temp Control-Handstation Ramp PB 2-TIC-24-56A LED TB-N 24 VDC Out 12.3-1 FWP Turb 2A Oil Htx Tamp Control-2-TIC-24-56A Handstation Setpoint PB TB-N Contact In 12.3.1 FWP Turb 2A Oil Htx Tamp Control-Handstation Setpoint PB 2-TIC-24-56A LED TB-N 24 VDC _Out 12.3.1 FWP Turb 2A Oil Htx Tamp Control-2-TIC-24-56A Handatation MIA PB TB-N Contact In 12.3.1 FWP Turb 2A Oil Htx Tamp Control-Handstation M,/A PB 2-TIC-24-56A LED "Manual" TB-N Contact Out 12.3.1 FWP Turb 2A Oil Htx Tamp Control-Handstation M/A PB 2-TIC-24-56A LED "Auto" TB-N 24 VDC Out 12.3.1 FWP Turb 2A Oil Htx Tamp Control-2-TIC-24-56A Handstation Increase PB TB-N Contact In 12.3.1 F--WP Turb 2A Oil Htx Tamp Control-Handstation Increase PB 2-TIC-24-56A LED TB-N 24 VDC Out 12-3.1 FWP Turb 2A Oil Htb Tamp Control-Handstation Decrease Z-TIC-24-56A PB TB-N Contact In 12-3.1

NPG Site-Specific WBN Unit 2 NSSS and 13OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 387 of 440 Appendix E (Page 141 of 148) 10 Listings FWP Turb 2A Oil Htx Temp Control-Handstation Decrease 2-TIC-24-56A PB LED TB-N 24 VOC out 12.3.1 FWP Turb 2B Oil Htx Thermocouple 2-TE-24-56B Ternp Control TB-N TYPE T In 12.3.1 FWP Turb 2B Oil Htx 2-TCV-24-56B Temp Control TB-N 4-20 mA Out Valve Control NEW I/P REQURED 12.3.1 FWP Turb 2B Oil H-x Temp Control-2-TIC-24-56B Handstation Deviation TB-N 4-20 mA Out 12-3.1 FWPTurb 2B Oil Ill Tamp Control-Handstation Setpoint 2-TIC-24-56B Indication TB-N 4-20 mA Out 12-3.1 FWP Turb 28 Oil Htx Temp Control-Handstatjon Output 2-TIC-24-56B Indication TB-N 4-20 mA Out 12.3.1 FWP Turb 2B Oil Hix Temp Control-2-TIC-24-56B Handstation Ramp PB TB-N Contact In 12.3.1 FWP Turb 2B Oil Hl-tx Temp Control-Handstation Ramp PB 2-TIC-24-56B LED "B-N 24 VDC Out 12.3.1 FWP Turb 2B Oil Htx Temp Control-2-TIC-24-56B Handslation Setpoint PB TB-N Contact In 12.3.1 FWP Turb 2B Oil Htx Temp Control-Handlstation Setpoint PB 2-T1C-24-56B LED TB-N 24 VOC Out 12.3.1 MAP Turb 2B Oil Htx Temp Control-2-TIC-24-56B Handstation M/A PB TB-N Contact In 12.3.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 388 of 440 Appendix E (Page 142 of 148) 10 Listings FWP Turb 2B Oil Htx Temp Control-

-landstation M/A PB 2-TIC-24-56B ED 'Manual" TB-N 24 VDC Out 12.3-1 FWP Turb 2B Ol Htx Ternp Control-Handstation WA PB 2-TIC-24-56B LED "Auto" TB-N 24 VDC Out 12.3.1 FWP Turb 2B Oil Htx Ternp Control-2-TIC-24-56B Handstation Increase PS TB-N Contact In 12.3.1 FWP Turb 2B Oil Htx Temp Control-Handstation Increase PB 2-TIC-24-56B LED IB-N 24 VDC Out 12.3.1 FWP lurb 2B Oil HtxI-Temp Control-Handstation Decrease 2-TIC-24-56B PB IB-N Contact In 12.3.1 FWP Turb 2B Oil Htx Temp Control-Handstation Decrease 2-TIC-24-56B PB LED TB-N 24 VDC Out 12.3.1

  1. 3 Heater Drain Tank 2-LT-6-26 Level rB-S 4-20 m.A in-Critical 12.3.2
  1. 3 Heater Drain Tank 2-LT-6-106 Level "B-S 4-20 rnA In-Critical 12.3.2
  1. 3 Heater Drain Tank 2-LT-6-#3HDT Level rB-S 4-20 mA In-Critical 12.3.2
  1. 3 Heater Drain Tank Pumps Bypass Valve 2-LM-6-105 Control TB-S 4-20 mA Out-Critical VALVE CONTROL - lIP 12.3.2
  1. 3 Heater Drain Tank Pumps Discharge Valve 2-LM-6-106 Control rB-S 4-20 mA Out-Critical VALVE CONTROL - I/P 12.3.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 389 of 440 Appendix E (Page 143 of 148) 10 Lis;tings 93 Heater Drain Tank 2-LI-4-26 Level Indication TB-S 4-20 mA Out 12.3.2

  1. 3 Heater Drain Tank 2-LS-6-26 Level TB-S Contact Out Hi alarm 12.3.2
  1. 3 Heater Drain Tank 2-LS-6-26C0D Level TB-S Contact Out.Cntical Turbine Runback Logic- See Note 1 12.3.2
  1. 3 Neater Drain Tank 2-LS-6-26DiC Level TB-S Contact Out Lo alarm 12.3.2
  1. 3 Heater Drain Tank 2-LS-6-106A/B Level TB-S Contact Out-Critical Hi IvI pump start permissive 12.3.2 03 Heater Drain Tank 2-LS-6-106BA Level TB-S Contact Out-Critical Lo Lo level pump trip 12.3.2 03 HDT Pumps Discharge Valve 2-LIC-6-106 Handstation Deviation TB-S 4-20 mA Out 112.3-2
  1. 3 HDT Pumps Discharge Valve Handstation Setpoint 2-LIC-6-106 Indication TB-S 4-20 mA Out 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation Output 2-LIC-6-106 Indication TB-S 4-20 mA Out 12.3.2
  1. 3 HDT Pumps Discharge Valve 2-LIC-6-1006 Handstation Ramp PB. TB-S Contact In 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation Ramp PB 2-LIC-6-106 LED TB-S 24 VDC, Out 12.3.2 i

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 390 of 440 Appendix E (Page 144 of 148) 10 Listings

  1. 3 HDT Pumps Discharge Valve 2-LIC-6-1 06 Handstation Setooint PB rB-S Contact In 12_3.2
  1. 3 HDT Pumps Discharge Valve Handstation Setpoint PB 2-LIC-6-106 LED rB-S 24 VDC Out 12.3.2
  1. 3 HDT Pumps Discharge Valve 2-LIC-6-106 Handstation MIA PB r8-s Contact IN 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation MIA PB 2-LIC-6-106 LED "Manuarl TB-S 24 VDC Out 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation M/A PB 2-LIC-6-106 LED "Auto" TB-S 24 VDC Out 12.3.2
  1. 3 HDT Pumps Discharge Valve 2-LIC-6-106 Handstation Increase PB TB-S Contact _ _ 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation Increase PB 2-LIC-6-106 LED TB-S 24 VDC Out 12.3.2
  1. 3 HDT Pumps Discharge Valve Handstation Decrease 2-LIC-6-106 PB TB-S 4ontact Ou 12.3.2
  1. 3 HDT Pumps Discharge Valve Handlstation Decrease 2-LIC-6-106 PB LED TB-S 2)4 VDC Out 12.3.2
  1. 3 HDT Pumps Bypass Valve Handstation 2-LIC-6-105 _Output Indication TB-S 4-20 mA Out 12-3.2
  1. 3 HDT Pumps Bypass alve Handstation Ramp 2-LIC-6-105 PB TB-S Contact In 12.3.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 391 of 440 Appendix E (Page 145 of 148) 10 Listings

  1. 3 HDT Pumps Bypass Valve Handstation Ramp 2-LIC-6-105 PB LED TB-S 24 VOC Out 12.3.2
  1. 3 HDT Pumps Bypass Valve Handstation N/A 2-LIC-6-105 PB TB-S Contact IN 12.3.2 03 HDT Pumps Bypass Valve Handstation M/A 2-LIC-6-105 PB LED "Manual" TB-S 24 VDC Out 12.3.2
  1. 3 HOT Pumps Bypass Valve Handstation M/A 2-LIC-6-105 PB LED "Auto" TB-S 24 VDC Out 12.3.2 03 HDT Pumps Bypass Valve Handstation 2-LIC-6-105 Increase PB T8-S Contact In 12.3.2
  1. 3 HDT Pumps Bypass Valve Handstation 2-LIC-6-105 Increase PB LED TB-S 24 VDC Out 12.3.2
  1. 3 HDT Pumps Bypass Valve Handstation 2-LIC-6-105 Decrease PB TB-S Contact In 12-3.2 03 HDT Pumps Bypass Valve Handstation 2-LIC-6-105 Decrease PB LEO TB-S 24 VDC Out 12.3.2 07 Heater Drain Tank 2-LT-6-1901 Level TB-N 4-20 mA In-Critical 12.3.2
  1. 7 Heater Drain Tank 2-LT-6-190L2 Level TB-N 4-20 mA In-Critical 12.3.2
  1. 7 Heater Drain Tank 2-LT-6-1 9013 Level TB-N 4-20 mA In-Critical 12.3.2 7 Heater Drain Tank Pumps Bypass Valve 2-LCV-6-190B Control TB-N 4-20 mA Out-Critical 12.3-2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 392 of 440 Appendix E (Page 146 of 148) 10 Listings 97 Heater Drain Tank Pumps Discharge Valve 2-LCV-6-1 90A Control TB-N 6-20 mA Dut-Critical 12.3.2

  1. 7 Heater Drain Tank 2-LI-6-190 Level Indication IB-N 4-20 mA _Out 12.3.2
  1. 7 Heater Drain Tank 2-LS-6-190A1 Level TB-N Contact _Out-Critical Lo Level Pump Start Inhibit 12-3.2
  1. 7 Heater Drain Tank 2-LS-6-190A2 Level TB-N Contact Out-Critical Lo Level Pump Start Inhibit 12.3.2
  1. 7 Heater Drain Tank 2-LS-6-1905 Level TB-N Contact Out-Critical Lo Level pump trip 12.3.2
  1. 7 Heater Drain Tank 2-LS-6-190D Level TB-N Contact Out Hi alarm 12.3.2
  1. 7 HDT Pumps Discharge Valve 2-LIC-6-190A Handstation Deviation TB-N 4-20 mA Out 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation Setpoint 2-LIC-6-190A Indication TB-N 4-20 mA Out 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation Output 2-LIC-6-190A Indication TB-N 4-20 mA Out 12.3.2
  1. 7 HDT Pumps Discharge Valve 2-LIC-6-190A Handstation Ramp PB B-N Contact In 12-3.2
  1. 7 HDT Pumps Discharge Valve Handstation Ramp PB 2-LIC-6-190A LED TB-N 24 VDC Out 12.3.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 393 of 440 Appendix E (Page 147 of 148) 10 Lisitings DishDT Pumps Discharge Valve 2-LIC-6-190A [Hanidstation Setnaint PB Contact In 123.2

  1. 7 HDT Pumps Discharge Valve Handstation Setpoint PB 2-LIC-6-190A LED TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Discharge Valve 2-LIC-6-1 90A Handstation M/A PB TB-N Contact IN 12.3-2
  1. 7 HDT Pumps Discharge Valve Handstation WA PB 2-LIC-6-190A LED "Manual" TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation WA PB 2-LIC-6-190A LED "Auto" TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Discharge Valve 2-LIC-6-190A Handstation Increase PB TB-N Contact In 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation Increase PB 2-LIC-6-190A LED TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation Decrease 2-LIC-6-190A PB TB-N Contact In 12.3.2
  1. 7 HDT Pumps Discharge Valve Handstation Decrease 2-LIC-6-190A PB LED TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation 2-LIC-6-190B Output Indication TB-N 4-20 mA Out 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation Ramp 2-LIC-6-IQOB PB TB-N Contact In 12.3.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 394 of 440 Appendix E (Page 14:8 of 148) 10 Listings 17 HDT Pumps Bypass alve Handstation Ramp 2-LIC-6-190B P)B LED TB-N 24 VDC Out 12.3.2 I7 HDT Pumps Bypass alve Handstation W/A 2-LIC-6-190B PB TB-N Contact IN 12.3.2

  • 7 HOT Pumps Bypass alve Handstation M/A 2-LIC-6-190B PB LED "Manual" TB-N 24 VDC Out 12.3.2 7 HDT Pumps Bypass alve Handstation MIA 2-LIC-6-190B B LED "Auto" TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation 2-LIC-6-190B Increase PB TB-N Contact In 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation 2-LIC-6-190B Increase PB LED TB-N 24 VDC Out 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation Z-LIC-6-190B Decrease PB TB-N Contact In 12.3.2
  1. 7 HDT Pumps Bypass Valve Handstation 2-LIC-6-1 9GB Decrease PB LED TB-N 24 VDC Out 12.3.2 Hotwell Pump Disch 2-FT-2-35F2 Flow TB-S 4-20 mA In See Spec 11.2.9 12.3.3 Hotwell Pump Disch 2-FT-2-35F3 Flow TB-S -20 mA In See Spec 11.2.9 12.3.3 HO1WELL PUMP 2-FS-2-35 DISCHARGE FLOW TB-S *ONTACT OUT 11.2.9 SYS 15 VALVE LOGIC 12.3.3 Note: The #3 Heater Drain Tank Level (tabulated as output 2-LS-6-26C/D) and #3 Heater Drain Tank Pump Flow (tabulated as 2-FS 107) are logically combined external to the system to generate a Turbine Runback, and thus, are required to be single failure proof.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 395 of 440 Appendix F (Page I of 6)

Handstation Options WBN Proposed Handstation Design Ilia ckm~ far L6caflm r..dmg astpaht d~.y OW "YASS VALVE)

F*m Plot* View I 9LVIAIIIUMMI Cfrawyll ML 21)

I , Vur~uT 3 Edge Motor' S S 6.600 Handstation Scope The following list of Handstations shall be provided by the Offerer. The Offerer shall further develop this proposed handstation model for TVA's review and approval. The proposed design incorporates a maximum number of expected I/0 points that would be required. The option of using digital indicator in place of the proposed analog indication shall be proposed by the Offerer. If the indicators are not looped powered, the Offerer shall provide a redundant power supply scheme for handstations.

Specific component model numbers are only preferences and alternative components may be provided for TVA's review and approval.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 396 of 440 Appendix F (Page 2 of 5)

Handstation Options Indications Deviation Indicator - The Deviation Indicator displays the deviation between the between two parameter associated with the control function. The input type for this indicator shall be 4 to 20 ma.

lnll.a I p I IBil i i i i i i iI l Setpoint Indicator - The Setpoint Indicator displays the setpoint associated with the controller function (if applicable). The input type for this indicator shall be 4 to 20 ma.

F.. I j Output Indicator - The Output Indicator displays the associated control function's output to the final control device. The input type for this indicator shall be 4 to 20 ma.

Pushbuttons Setpoint Pushbutton - This is a latching pushbutton that must be depressed (contact closure occurs) to enable (toggles control function between enable and disable) the Increase and Decrease pushbuttons in order to manually change the setpoint associated with the control function. The backlit color of the pushbutton shall be "None or Off" for Not Depressed and Red for Depressed indicating that Setpoint change is enabled.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 397 of 440 Appendix F (Page 3 of 5)

Handstation Options Ramp Pushbutton - This is a latching pushbutton that must be depressed (contact closure occurs) to enable and place (toggles control system between enable and disable) the Increase and Decrease pushbuttons in the Ramp Mode. When in the Ramp mode, the Increase and Decrease pushbuttons can be used to quickly ramp the control function output up or down. The backlit color of the pushbutton shall be "None or Off" for not depressed and Red for depressed indicating the handstation/control function is in Ramp Mode. The speed of the ramp will be a fixed speed but shall be a configurable control system setting. When NOT in the Ramp Mode, the Increase and Decrease pushbuttons shall be an one shot that changes/bumps the output by a predetermined amount per depress and the amount of change/bump shall be a configurable control system setting.

The Ramp function could be implemented in software using the increase/decrease pushbuttons when the pushbutton is held, the output function will ramp at a defined slow rate and after a specific time period, the ramping function will increase the ramping speed.

Auto/Manual Pushbutton - This is a momentary pushbutton that must be depressed (contact closure occurs) in to change/toggle the Auto/Manual status of the associated control function. The backlit colors of the pushbutton shall be Blue for Auto and Amber for Manual.

Decrease Pushbutton - This is a momentary pushbutton that is used to decrease (contact closure occurs) either the setpoint or output demand of the associated control function. The backlit colors of the pushbutton shall be "None or Off" for Not Depressed and Red for Depressed to indicate that the pushbutton is demanding a change of the control function.

Increase Pushbutton - This is a momentary pushbutton that is used to increase (contact closure occurs) either the setpoint or output demand of the associated control function. The backlit colors of the pushbutton shall be "None or Off' for Not Depressed and Red for Depressed to indicate that the pushbutton is demanding a change of the control function.

NPG Site-Specific WON Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 398 of 440 Appendix F (Page 4 of 5)

Handstation Options Testing LED backlit indication is preferred if brightness is acceptable. If incandescence bulbs are used, the control system shall have a built in method to perform bulb testing from the EWS and the ODU.

Listing of Handstations NOTE This list is not being updated for Revision 1. Current information on the handstations is maintained in the project 110 database.

FIC-003-0035 MFW SG 1 CNTRL FIC-003-0048 MFW SG 2 CNTRL FIC-003-0090 MFW SG 3 CNTRL FIC-003-0103 MFW SG 4 CNTRL LIC-003-0035A MFW SG 1 BYPASS CNTRL LIC-003-0048A MFW SG 2 BYPASS CNTRL LIC-003-0090A MFW SG 3 BYPASS CNTRL LIC-003-0103A MFW SG 4 BYPASS CNTRL LIC-003-0231 MFW SETPT CNTRL LIC-003-0232 MFW SETPT CNTRL LIC-003-0233 MFW SETPT CNTRL LIC-003-0234 MFW SETPT CNTRL SIC-046-0020A MFP A SPEED CNTRL SIC-046-0020B MFP B SPEED CNTRL FIC-003-0070 MFW PUMP A RECIRC FLOW CONTROL FIC-003-0084 MFW PUMP B RECIRC FLOW CONTROL FIC-003-0208 MFW STANDBY PUMP RECIRC FLOW CONTROL PIC-001-0033 Steam Dump Pressure CNTRL PIC-1-6A SG-1 ATM Relief Valve CNTRL PIC-1-13A SG-2 ATM Relief Valve CNTRL PIC-1-24A SG-3 ATM Relief Valve CNTRL PIC-1-31A SG-4 ATM Relief Valve CNTRL FC-62-139 BA Flow CNTRL FC-62-142 Primary Water CNTRL PIC-068-0340A PZR Pressure Master CNTRL PIC-068-0340D PZR Pressure Loop 1 Spray CNTRL PIC-068-0340B PZR Pressure Loop 2 Spray CNTRL LIC-068-0339 PZR Level CNTRL HIC-062-0081A Letdown HX Pressure CNTRL HIC-062-0078A Letdown Temperature CNTRL LIC-062-130A Diversion Valve CNTRL HIC-62-93A Charging Flow CNTRL HIC-62-56 Excess Letdown Flow CNTRL PC-46-20 MFP SPEED MASTER CNTRL

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 399 of 440 Appendix F (Page 6 of 6)

Handstatlon Options HIC-74-16A RHR DISCH FLOW HIC-74-28A RHR DISCH FLOW HIC-74-32A RHR DISCH FLOW HIC-62-89A CVCS CHARGING FLOW HIC-62-83A CVCS LETSOEN RHR CLEANUP HIC-63-65A SIS ACCUM TK N2 SUPPLY LIC-2-0002 HOTWELL LEVEL LIC-2-0009 HOTWELL LEVEL FIC-003-0070 MFP A DISCHARGE FLOW FIC-003-0084 MFP B DISCHARGE FLOW FIC-003-0208 SBMFP DISCHARGE FLOW HIC-015-0043 SGBD FLOW CNTRL TIC-24-0048 RCW COOLING WATER CNTRL TIC-24-0069 RCW COOLING WATER CNTRL List of Handstations needed to go the Turbine Building Expansion portion of the Spec.

All Handstations are full setpoint control handstations (14 point I/O) unless otherwise noted.

TIC-24-52 Stator Water Temperature Control TIC-24-74 H2 Side Seal Oil Temperature Control TIC-24-73 Air Side Seal Oil Temperature Control TIC-24-41 Exciter Htx Temperature Control TIC-24-48 Hydrogen Htx Temperature Control TIC-24-69 Main Turbine Oil Htx Temperature Control TIC-24-56A FWP Turb 2A Oil Htx Temp Control TIC-24-56B FWP Turb 2B Oil Htx Temp Control LIC-6-105 #3 Heater Drain Tank Pumps Bypass Valve Control LIC-6-106 #3 Heater Drain Tank Pumps Discharge Valve Control LIC-6-190B #3 Heater Drain Tank Pumps Bypass Valve Control LIC-6-190A #3 Heater Drain Tank Pumps Discharge Valve Control

      • These 2 handstations proportional band control only and will not require Deviation Meters, Setpoint Indication Meters, Setpoint Outputs or Setpoint LED Inputs.

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 400 of 440 Appendix G (Page 1 of 23)

Auxiliary Control Room 1/0 List I/O DEVICE DESCRIPTION SIGNAL SIGNAL INPUT COMMENTS SPEC LOCATION TYPE /OUTP NUMBER UT 2-PI-1-IC SG 1 Power Relief Valve Aux Cntl 2-L-10 4-20 mA AO Train A Assoc 15.2.3 2-PT-i-iC SG1 Power Relief Valve Aux Cntl 2-L-1i1A 4-20 mA Al Train A Assoc 15.2.3 2-PIC-1-6C SGl Power Relief Valve Aux Cntl- 2-L-11A 4-20 mA AO Train A Assoc 15.2.3 Valve Control 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Deviation Meter 2-PIC-1-6C SGI Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Setpoint Meter 2-PIC-1 -6C SG1 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Output Meter 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Ramp PB 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstaton Ramp PB LED 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Setpoint PB

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 401 of 440 Appendix G (Page 2 of 23)

Auxiliary Control Room 110 List 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Setpoint PB LED 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation M/A PB 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-1 0 24 VDC DO Train A Assoc 15.2.3 Handstation M/A PB LED "Manual" 2-PIC-1-6C SGi Power Relief Valve Aux Gntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation M/A PB LED "Auto" 2-PIC-1 -6C SG1 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Increase PB 2-PIC-1-6C SG1 Power Relief Valve Aux CnU- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Increase PB LED 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Decrease PB 2-PIC-1-6C SG1 Power Relief Valve Aux Cntl- 2-L-10 24 VDC' DO Train A Assoc 15.2.3 Handstation Decrease PB LED 2-PI-1 -8C SG2 Power Relief Valve Aux Cntl 2-L-10 4-20 mA AO Train B Assoc 15.2.3 2-PT-1 -8C SG2 Power Relief Valve Aux Cntl 2-L-1i1B 4-20 mA Al Train B Assoc 15.2.3

NPG Site-Specific WBN Unit 2 NSSS and BIOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 402 of 440 Appendix G (Page 3 of 23)

Auxiliary Control Room 110 List 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-111B; 4-20 mA AO Train B Assoc 15.2.3 Valve Control 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Deviation Meter 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Setpoint Meter 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Output Meter 2-PIC-1 -1 3C SG2 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Ramp PB 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Ramp PB LED 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 Contact Dl Train B Assoc 15.2.3 Handstation Setpoint PB 2-PIC-1-13C SG2 Power Relief Valve Aux Cnti- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Setpoint PB LED 2-PIC-1-13C SG2 Power Relief Valve Aux CntI- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation M/A PB 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-1 0 24 VDC DO Train B Assoc 15.2.3 Handstation M/A PB LED "Manual"

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 403 of 440 Appendix G (Page 4 of 23)

Auxiliary Control Room 110 List 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation M/A PB LED "Auto" 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 Contact Dl Train B Assoc 15.23 Handstation Increase PB 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Increase PB LED 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Decrease PB 2-PIC-1-13C SG2 Power Relief Valve Aux Cntl- 2-L-1 0 24 VDC DO Train B Assoc 15.2.3 Handstation Decrease PB LED 2-PI-1-19C SG3 Power Relief Valve Aux Cntl 2-L-10 4-20 mA AO Train A Assoc 15.2.3 2-PT-1-19C SG3 Power Relief Valve Aux Cntl 2-L-1 IA. 4-20 mA Al Train A Assoc 15.2.3 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-11A. 4-20 mA AO Train A Assoc 15.2.3 Valve Control 2-PlC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Deviation Meter 2-PIC-1 -24C SG3 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Setpoint Meter

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 404 of 440 Appenidix G (Page 5 of 23)

Auxiliary Control Room 1/O List 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Output Meter 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Ramp PB 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Ramp PB LED 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Setpoint PB 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Setpoint PB LED 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation M/A PB 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 H-andstation M/A PB LED 'Manual" 2-PIC-1 -24C SG3 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation INA PB LED "Auto" 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Increase PB 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Increase PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 405 of 440 Appendix G (Page 6 of 23)

Auxiliary Control Room 110 List 2-PIC-1-24C SG3 Power Relief Valve Aux CntI- 2-L-10 Contact D1 Train A Assoc 15.2.3 Handstation Decrease PB 2-PIC-1-24C SG3 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Decrease PB LED 2-PI-1-26C SG4 Power Relief Valve Aux Cntl 2-L-10 4-20 mA AO Train B Assoc 15.2.3 2-PT-1 -26C SG4 Power Relief Valve Aux Cntl 2-L-1 1BR 4-20 mA" Al Train B Assoc 15.2.3 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-1 I B 4-20 mA AO Train B Assoc 15.2.3 Valve Control 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Deviation Meter 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Setpoint Meter 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Output Meter 2-PIC-1-31C SG4 Power Relief Valve Aux CntI- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Ramp PB 2-PIC-1-31C SG4 Power Relief Valve Aux Cnti- 2-L-1 0 24 VDC DO Train B Assoc 15.2.3 Handstation Ramp PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 406 of 440 Appendix G (Page 7 of 23)

Auxiliary Control Room 110 List 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Setpoint PB 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Setpoint PB LED 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation M/A PB 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation M/A PB LED "Manual" 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation M/A PB LED "Auto" 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Increase PB 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Increase PB LED 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Decrease PB 2-PIC-1-31C SG4 Power Relief Valve Aux Cntl- 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Decrease PB LED 2-PDI-30-30C Cont/Ann Differential Pressure 2-L-10 4-20 mA AO Train B Assoc 15.2.1

NPG Site-Specific WBN Unit 2 NSSS and EiOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 407 of 440 Appendix G (Page 8 of 23)

Auxiliary Control Room I/O List 2-PDT-30-30C Cant/Ann Differential Pressure 2-L-11B 4-20 mA Al Train B Assoc 15.2.1 2-HIC-62-56C Excess Letdown Htx Outlet Flow 2-L-10 4-20 mA AO 15.2.3 Cntl-Valve Control 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 4-20 mA AO 15.2.3 Handstation Output Indication 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Ramp PB 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Ramp PB LED 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Increase PB 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Increase PB LED 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-1 0 Contact DI 15.2.3 Handstation Decrease PB 2-HIC-62-56C Excess Letdown Htx Outlet Flow Cntl 2-L-10 24 VOC DO 15.2.3 Handstation Decrease PB LED 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 4-20 mA AO 15.2.3 CCS-Valve Control

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 408 of 440 Appendix G (Page 9 of 23)

Auxiliary Control Room I/O List 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 4-20 mA AO 15.2.3 CCS-Handstation Output Indication 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 Contact DI 15.2.3 CCS-Handstation Ramp PB 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 24 VDC DO- 15.2.3 CCS-Handstation Ramp PB LED 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 Contact DI 15.2.3 CCS-Handstation Increase PB 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 24 VDC DO 15.2.3 CCS-Handstation Increase PB LED 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 Contact DI 15.2.3 CCS-Handstation Decrease PB 2-HIC-62-78C Letdown Htx Temp Cntl Valve for 2-L-10 24 VDC DO 15.2.3 CCS-Handstation Decrease PB LED 2-TI-62-80C Letdown Htx Outlet Temp 2-L-10 4-20 mA AO Train A Assoc 15.2.2 2-TM-62-80C -Letdown Htx Outlet Temp 2-L-11A, 4-20 mA Al Train A Assoc--Externally 15.2.2 Powered 2-TS-62-80C Letdown Htx Outlet Temp 2-L-11AA Contact DO Train A Assoc 15.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 409 of 440 Appendix G (Page 10 of 23)

Auxiliary Control Room I/O List 2-HIC-62-81C Letdown Htx Outlet Pressure Cntl- 2-L-10 4-20 mA AO 15.2.3 Valve Control 2-HIC-62-81C Letdown Htx Outlet Pressure Cntl 2-L-10 4-20 mA AO 15.2.3 Handstation Output Indication 2-HIC-62-81 C Letdown Htx Outlet Pressure Cntl 2-L-10 Contact DI 15.2.3 Handstation Ramp PB 2-HIC-62-81C Letdown Htx Outlet Pressure Cntl 2-L-1 0 24 VDC DO 15.2.3 Handstation Ramp PB LED 2-HIC-62-81C Letdown Htx Outlet Pressure Cntl 2-L-10 Contact DI 15.2.3 Handstation Increase PB 2-HIC-62-BIC Letdown Htx Outlet Pressure Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Increase PB LED 2-HIC-62-81 C Letdown Htx Outlet Pressure Cntl 2-L-10 Contact DI 15.2.3 Handstation Decrease PB 2-HIC-62-81C Letdown Htx Outlet Pressure Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Decrease PB LED 2-PI-62-81C Letdown Htx Pressure 2-L-10 4-20 mA AO Train A Assoc 15.2.1 2-PT-62-81C Letdown Htx Pressure 2-L-1 1A 4-20 mA Al Train A Assoc 15.2.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 410 of 440 Appendix G (Page I1 of 23)

Auxiliary Control Room 1/0 List 2-HIC-62-83C RHR Clean Up Flow Cnti-Valve 2-L-10 4-20 mA AO 15.2.3 Control 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 4-20 mA AO 15.2.3 Handstation Output Indication 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 Contact Dl 15.2.3 Handstation Ramp PB 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Ramp PB LED 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Increase PB 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Increase PB LED 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Decrease PB 2-HIC-62-83C RHR Clean Up Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Decrease PB LED

.2-HIC-62-89C Charging Flow Cnti-Valve Control 2-L-10 4-20 mA AO 15.2.3 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 4-20 mA AO 15.2.3 Output Indication

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 411 of 440 Appendix G (Page 12 of 23)

Auxiliary Control Room IO List 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 Contact DI 15.2.3 Ramp PB 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 24 VDC DO 15.2.3 Ramp PB LED 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 Contact DI 15.2.3 Increase PB 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 24 VDC DO 15.2.3 Increase PB LED 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 Contact DI 15.2.3 Decrease PB 2-HIC-62-89C Charging Flow Cntl Handstation 2-L-10 24 VDC DO 15.2.3 Decrease PB LED 2-PI-62-92C Charging Header Pressure 2-L-10 4-20 mA AO Train A Assoc 15.2.1 2-PT-62-92C Charging Header Pressure 2-L-1 1A, 4-20 mA Al Train A Assoc 15.2.1 2-FI-62-93C Charging Header Flow 2-L-10 4-20 mA AO Train B Assoc 15.2.2 2-FS-62-93C Charging Header Flow 2-L-1 1 Contact

-B DO Train B Assoc 15.2.2 2-FT-62-93C Charging Header Flow 2-L-1 1 B 4-20 mA Al Train B Assoc 15.2.2 2-HIC-62-93C Charging Flow CntI-Valve Control 2-L-10 4-20 mA AO 15.2.3

NPG Site-Specific WBN Unit 2 NSSS and 13OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 412 of 440 Appendix G (Page 1:3 of 23)

Auxiliary Control Room 1/0 List 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 4-20 mA AO 15.2.3 Output Indication 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 Contact DI 15.2.3 Ramp PB 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 24 VDC DO 15,2.3 Ramp PB LED 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-1 0 Contact DI 15.2.3 Increase PB 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 24VDC DO 15.2.3 Increase PB LED 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 Contact DI 15.2.3 Decrease PB 2-HIC-62-93C Charging Flow Cntl Handstation 2-L-10 24 VDC DO 15.2.3 Decrease PB LED 2-LI-62-129C Volume Control Tank Level 2-L-10 4-20 mA AO Train A Assoc 15.2.2 2-LS-62-129CANB Volume Control Tank Level 2-L-11A Contact DO Train A Assoc 15.2.2 2-LS-62-129CB/A Volume Control Tank Level 2-L-11A Contact DO Train A Assoc 15.2.2 2-LT-62-129C Volume Control Tank Level 2-L-11A 4-20 mA Al Train A Assoc 15.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 413 of 440 Appendix G (Page 114 of 23)

Auxiliary Control Room 110 List 2-HIC-62-130C VCT Level Cntl - Valve Control 2-L-10 4-20 mA AO 15.2.3 2-HIC-62-130C VCT Level Cntl Handstation Output 2-L-10 4-20 mA AO 15.2.3 Indication 2-HIC-62-130C VCT Level Cntl Handstation Ramp 2-L-10 Contact DI 15.2.3 PB 2-HIC-62-130C VCT Level Cntl Handstation Ramp 2-L-10 24 VDC DO 15.2.3 PB LED 2-HIC-62-130C VCT Level Cntl Handstation Increase 2-L-10 Contact DI 15.2.3 PB 2-HIC-62-130C VCT Level Cntl Handstation Increase 2-L-10 24 VDC DO 15.2.3 PB LED 2-HIC-62-130C VCT Level Cntl Handstation 2-L-10 Contact DI 15-2.3 Decrease PB 2-HIC-62-130C VCT Level Cntl Handstation 2-L-10 24 VDC DO 15.2.3 Decrease PB LED 2-LS-62-I3OCA/B Volume Control Tank Level 2-L-11A Contact DO Train AAssoc 15.2.2 2-LS-62-130CBSA Volume Control Tank Level 2-L-1 1A Contact DO Train A Assoc 15.2.2 2-LT-62-130C Volume Control Tank Level 2-L-1 1A 4-20 mA Al Train A Assoc 15.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 414 of 440 Appendix G (Page 1:5 of 23)

Auxiliary Control Room 1/0 List 2-FI-62-137C Emergency Boration Flow 2-L-10 4-20 mA Al Train B. Assoc 15.2.1 2-FT-62-137C Emergency Boration Flow 2-L-1 I B 4-20 mA AI Train B Assoc--Sq Rt by the 15.2.1 ind scale 2-PI-63-59C SIS Acc Tank 4 Press 2-L-10 4-20 mA AO Train B Assoc 15.2.2 2-PS-63-59C SIS Acc Tank 4 Press 2-L-1 1 B Contact DO Train B Assoc 15.2.2 2-PT-63-59C $IS Acc Tank 4 Press 2-L-1 18B 4-20 mA AI Train B Assoc 15.2.2 2-HIC-63-65C N2 makeup to SIS Accum - Valve 2-L-10 4-20 mA AO 15.2.3 Control 2-HIC-63-65C N2 makeup to SIS Accum 2-L-10 4-20 mA AO 15.2.3 Handstation Output Indication 2-HIC-63-65C N2 makeup to SIS Accum 2-L-10 Contact DI 15.2.3 Handstation Ramp PB 2-HIC-63-65C N2 makeup to SIS Accum 2-L-10 24 VDC DO 15.2.3 Handstation Ramp PB LED 2-HIC-63-65C N2 makeup to SIS Accum 2-L-10 Contact DI 15.2.3 Handstation Increase PB 2-HIC-63-65C N2 makeup to SIS Accum 2-L-10 24 VDC DO 15.2.3 Handstation Increase PB LED

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 415 of 440 Appendix G (Page 116 of 23)

Auxiliary Control Room 110 List 2-HIC-63-65C N2 makeup to SIS Accum 2-L-1 0 Contact DI 15.2.3 Handstation Decrease PB 2-HIC-63-65C N2 makeup to SIS Accum 2-L-1 0 24 VDC DO 15.2.3 Handstation Decrease PB LED 2-PI-63-83C 55 Acc Tank 3 Press 2-L-10 4-20 mA AC Train AAssoc 15.2.2 2-PS-63-83C SIS Acc Tank 3 Press 2-L-1 lA Contact DO Train A Assoc 15.2.2 2-PT-63-83C SIS Acc Tank 3 Press 2-L-11A. 4-20 mA Al Train A Assoc 15.2.2 2-FI-63-91C RHR Pmp A to RCS Loops 2 & 3 2-L-10 4-20 mA AO Train A Assoc 15.2.1 Flow 2-FT-63-91C RHR Pmp A to RCS Loops 2 & 3 2-L-11A. 4-20 mA Al Train A Assoc-Sq Rt by the ind 15.2.1 Flow scale 2-FI-63-92C RHR Pmp B to RCS Loops 1 & 4 2-L-10 4-20 mA AO Train B Assoc 15.2.1 Flow 2-FT-63-92C RHR Pmp B to RCS Loops 1 & 4 2-L-11B 4-20 mA Al Train B Assoc-Sq Rt by the ind 15.2.1 Flow scale 2-PI-63-102C SIS Acc Tank 2 Press 2-L-10 4-20 mA AO Train B Assoc 15.2.2 2-PS-63-102C SIS Acc Tank 2 Press 2-L-11B. Contact DO Train B Assoc 15.2.2 2-PT-63-102C SIS Acc Tank 2 Press 2-L-111B, 4-20 mA Al Train B Assoc 15.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 416 of 440 Appendix G (Page 17 of 23)

Auxiliary Control Room 10 List 2-PI-63-120C SIS Acc Tank 1 Press 2-L-1-0 4-20 mA AO Train A Assoc 15.2.2 2-PS-63-120C SIS Acc Tank 1 Press 2-L-11A, Contact DO Train A Assoc 15.2.2 2-PT-63-120C SIS Ace Tank 1 Press 2-L-11A 4-20 mA Al Train A Assoc 15.2.2 2-FI-63-173C RHR Inj or Recirc after LOCA 2-L-10 4-20 mA AO Train A Assoc 15.2.1 2-FT-63-173C RHR Jnj or Recirc after LOCA 2-L-11A, 4-20 mA Al Train A Assoc 15.2.1 2-FI-67-61C ERCW 2A Hdr Flow 2-L-10 4-20 mA AO Train A Assoc - Active for Unit 15.2.1 1

2-FT-67-61C ERCW 2A Hdr Flow 2-L-11A, 4-20 mA Al Train A Assoc - Active for Unit 15.2.1 1

2-FI-67-62C ERCW 2B Hdr Flow 2-L-10 4-20 mA AO Train B Assoc -Active for Unit 15.2.1 1

2-FT-67-62C ERCW 2B Hdr Flow 2-L-1 I B; 4-20 mA Al Train B Assoc - Active for Unit 15.2.1 1

2-XR-68-3CP005 Pressurizer Narrow Range Level 2-L-10 4-20 mA AO Train B Assoc - input from loop 15.2.2 68-326C 2-XR-68-3CP006 Pressurizer Cold Calibration 2-L-10 4-20 mA AO Train B Assoc - input from loop 15.2.2 Pressure 68-342C 2-PI-68-311C RCS PRT Press 2-L-10 4-20 mA AO Train A Assoc 15.2.1

NPG Site-Specific WBN Unit 2 NSSS and B;OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 417 of 440 Appendix G (Page 16 of 23)

Auxiliary Control Room 110 List 2-PT-68-31 1C RCS PRT Press 2-L-1 IA. 4-20 mA Al Train A Assoc 15.2.1 2-LI-68-312C RCS PRT Level 2-L-10 4-20 mA AO Train 8 Assoc 15.2.2 2-LS-68-312CB/A RCS PRT Level 2-L-10 Contact DO Train B Assoc 15.2.2 2-LS-68-312CA/B RCS PRT Level 2-L-I1B Contact DO Train B Assoc 15.2.2 2-LT-68-312C0 RCS PRT Level 2-L-11 B 4-20 nA Al Train B Assoc 15.2.2 2-LI-68-325C Pressurizer Narrow Range Level 2-L-1 0 4-20 mA AO Train A Assoc 15.2.2 2-LS-68-325CNB Pressurizer Narrow Range Level 2-L-1 A Contact DO Train A Assoc 15.2.2 2-LS-68-325CB/A Pressurizer Narrow Range Level 2-L-1 IA Contact DO Train A Assoc 15.2.2 2-LT-68-325C Pressurizer Narrow Range Level 2-L-1 IA 4-20 nA Al Train A Assoc 15.2.2 2-LI-68-326C Pressurizer Narrow Range Level 2-L-10 4-20 mA AO Train A Assoc 15.2.2 2-LS-68-326CA/B Pressurizer Narrow Range Level 2-L-1 lB Contact DO Train B Assoc 15.2.2 2-LS-68-326CB1A Pressurizer Narrow Range Level 2-L-11B Contact DO Train B Assoc 15.2.2 2-LT-68-326C Pressurizer Narrow Range Level 2-L-11B 4-20 mA Al Train B Assoc 15.2.2 2-PS-68-336CA1B Pressurizer Narrow Range Pressure 2-L-11A Contact DO Train A Assoc 15.2.2 2-PS-68-336CB1A Pressurizer Narrow Range Pressure 2-L-1 lA Contact DO Train A Assoc 15.2.2

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 418 of 440 Appendix G (Page 19 of 23)

Auxiliary Control Room 110 List 2-PI-68-336C Pressurizer Narrow Range Pressure 2-L-10 4-20 mA AO Train A Assoc 15.2.2 2-PS-68-336CID Pressurizer Narrow Range Pressure 2-L-1 1A, Contact DO Train A Assoc 15.2.2 2-PT-68-336C Pressurizer Narrow Range Pressure 2-L-11 A, 4-20 mA Al Train A Assoc 15.2.2 2-PI-68-337C Pressurizer Narrow Range Pressure 2-L-10 4-20 mA AO Train B Assoc 15.2.2 2-PS-68-337CA/B Pressurizer Narrow Range Pressure 2-L-11 B Contact DO Train B Assoc 15.2.2 2-PS-68-337CB/A Pressurizer Narrow Range Pressure 2-L-1 1B Contact DO Train B Assoc 15.2.2 2-PT-68-337C Pressurizer Narrow Range Pressure 2-L-11 B 4-20 mA Al Train B Assoc 15.2.2 2-PI-68-342A Pressurizer Cold Calibration 2-M-5 4-20 mA AO Train B Assoc 15.2.1 Pressure 2-PI-68-342C Pressurizer Cold Calibration 2-L-1 0 4-20 mA AO Train B Assoc 15.2.1 Pressure 2-PT-68-342C Pressurizer Cold Calibration 2-L-1 1B, 4-20 mA Al Train B Assoc 15.2.1 Pressure 2-PI-70-17C CCS Htx B Inlet Press 2-L-10 4-20 mA AO Train B Assoc - Active for Unit 15.2.1 1

2-PT-70-17C CCS Htx B Inlet Press 2-L-11B; 4-20 rnA Al Train B Assoc -Active for Unit 15.2..1 1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 419 of 440 Appendix G (Page 210 of 23)

Auxiliary Control Room I/O List 2-LI-70-63C Pressurizer Narrow Range Level 2-L-10 4-20 mA AO Train A Assoc - Active for Unit 15.2.2 1

2-LS-70-63CA CCS Surge Tank Level 2-L-1 1A Contact DO Train A Assoc - Active for Unit 15.2.2 1

2-LS-70-63CB CCS Surge Tank Level 2-L-1 IA Contact DO Train A Assoc - Active for Unit 15.2.2 1

2-LT-70-63C Pressurizer Narrow Range Level 2-L- 1A 4-20 mA Al Train A Assoc - Active for Unit 15.2.2 1

2-LI-70-99C CCS Surge Tank Level 2-L-10 4-20 mA AO Train B Assoc - Active for Unit 15.2.1 1

2-LT-70-99C CCS Surge Tank Level 2-L-118; 4-20 mA Al Train B Assoc - Active for Unit 15.2.1 1

2-FI-70-159C RHR Htx 2A-A Supply Header Flow 2-L-10 4-20 mA AO Train A Assoc - Acive for Unit 1 15.2.1 2-FT-70-159C RHR Htx 2A-A Supply Header Flow 2-L-1 1A 4-20 mA Al Train A Assoc - Active for Unit 15.2.1 1

2-FI-70-164C Misc Equipment Supply Header Flow 2-L-10 4-20 mA AO Train BAssoc 15.2.1 2-FT-70-164C Misc Equipment Supply Header Flow 2-L-1 I B 4-20 mA Al Train B Assoc 15.2.1 2-FI-70-165C RHR Htx 28-B Supply Header Flow 2-L-10 4-20 mA AO Train B Assoc 15.2.1

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification J Page 420 of 440 Appendix G (Page 21 of 23)

Auxiliary Control Room I1O List 2-FT-70-165C RHR Htx 2B-B Supply Header Flow 2-L-11Bl 4-20 mA Al Train B Assoc 15.2.1 2-HIC-74-16C RHR Htx A Outlet Flow Cntl-Valve 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Control 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 4-20 mA AO Train A Assoc 15.2.3 Handstation Outlet Indication 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Ramp PB 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Ramp PB LED 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Increase PB 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Increase PB LED 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 Contact DI Train A Assoc 15.2.3 Handstation Decrease PB 2-HIC-74-16C RHR Htx A Outlet Flow Cntl 2-L-10 24 VDC DO Train A Assoc 15.2.3 Handstation Decrease PB LED 2-HIC-74-28C RHR Htx B Outlet Flow CntU-Valve 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Control

NPG Site-Specific WBN Unit 2 NSSS and BOP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 421 of 440 Appendix G (Page 2:2 of 23)

Auxiliary Control Room I/O List 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-10 4-20 mA AO Train B Assoc 15.2.3 Handstation Output Indication 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-10 Contact DI Train B Assoc 15.2.3 Handstation Ramp PB 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-10 24 VDC DO Train B Assoc 15.2.3 Handstation Ramp PB LED 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-1 0 Contact DI Train B Assoc 15.2.3 Handstation Increase PB 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-10 24VDC DO Train B Assoc 15.2.3 Handstation Increase PB LED 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-1 0 Contact DI Train B Assoc 15.2.3 Handstation Decrease PB 2-HIC-74-28C RHR Htx B Outlet Flow Cntl 2-L-1 0 24 VDC DO Train B Assoc 15.2.3 Handstation Decrease PB LED 2-HIC-74-32C RHR Htx NB Bypass Flow Cntl- 2-L-1 0 4-20 mA AO 15.2.3 Valve Control 2-HIC-74-32C RHR Htx A/B Bypass Flow Cntl 2-L-10 4-20 mA AO 15.2.3 Handstation Output Indication 2-HIC-74-32C RHR Htx NB Bypass Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Ramp PB

NPG Site-Specific WBN Unit 2 NSSS and 13OP Controls Specification Engineering Upgrade Specification Rev. 0001 Specification Page 422 of 440 Appendix G (Page 23 of 23)

Auxiliary Control Room 1/0 List 2-HIC-74-32C RHR Htx NB Bypass Flow Cntl 2-L-1 0 24 VDC DO 15.2.3 Handstation Ramp PB LED 2-HIC-74-32C RHR Htx A/B Bypass Flow Cntl 2-L-10 Contact DI 15.2.3 Handstation Increase PB 2-HIC-74-32C RHR Htx NB Bypass Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Increase PB LED 2-HIC-74-32C RHR Htx NB Bypass Flow CntI 2-L-10 Contact DI 15.2.3 Handstation Decrease PB 2-HIC-74-32C RHR Htx NB Bypass Flow Cntl 2-L-10 24 VDC DO 15.2.3 Handstation Decrease PB LED

z 0 0 TVA WATTS BAR U,,f - NEW-DESIGN/MODIFICATION ARS IP, gco 3.00 2% DAMPING AUXIUARY-CONTROL BUILDING

.3% DAMPING EL 692.00 SSE - NS RESPONSE 0

- 5% DAMPING ZPA O.23g 0

tm

--- 7% DAMPING V 2.25 --Ck z

0 L ________________________________________ ________________________________u_______ ________________n_______________n_______

C'X V1 C0

= 0-0.Q 0 *0 1.50 0~

La Xs 0=

C)

V) 0.75 I I

  • 0 to 0

0.001-10-1 FREQUENCY"-CPS I _

L I

I *. . . . . .

I 102 102 I

z "a

  • =

TVA WATTS BAR UtNIT * + NEW-DESIGN/MODIFICATION ARS o 3.00

- 2% DAMPING AUXIUARY-CONTROL BUILDING 3% DAMPING EL SSE 692.00

- EW RESPONSE .w Z

-5% DAMPING ZPA 0.23g . I' a I -- - 7% DAMPING "o-o 2.25 t.

(CL z 00,

0. > low La to L-a 1.50 o ° =o 2f

<( 1.50 0 0 0.75 La--' 3/4 U2 t.O I. .1 --- m -.

CL-0.001 10-i 0° 0" 102 FREQUENCY-CPS

0 0 I0 TFVA WATTS BAR Ut;t*T' - NEW-DESIGN/MODIFICATION ARS frz~

l

  • I I -i i :

3.00 I Y

-2X DAMPING AUXIUARY-CONTROL BUILDING EL 692.00

--- 3% DAMPING SSE - VER RESPONSE

--- 75% DAMPING ZPA = 0.16g

- -- 7% DAMPING U) I 2.25 co e.

z 0

a v

-AJ 0 1.50 0 w 0 O 0.75 EL*

i-0.001- I 10, 10-I 108 101 FREQUENCY-CPS

  • I TVA WATTS BAR tUtNT-t NEW-DESIGN/MODIFICATION ARS .19.s 3.00

.CL0 0C a 2.25 CD 0

to 5. CL z i.

0 0 F: 0 0-0 us cc 0 Lii 0 t 0Z

-I 0)0 LU 1.50 U U U C) 0

.4 C

-4 U

.4 (A I-C-, 0.75 LI

~1. M0*0 CO o) =

~m 0 0.001 0-1

. FREQUENCY-CPS 101 t=

z E

TVA WATTS BAR Ut*¢fT--1--lEW-DESICN/MODIFICATION ARS

)ING C(a V) 0to 00 Co z

0 I--

3W .5 C. 5 0* ir*

01=

~0.

_j -

50 0

aJ W)

M-C3, IV~.

a 0 102 FREQU ENCY-CPS

TVA WATTS BAR -UNIT-+ NEW-DESIGN/MODIFICATION ARS 3.00 ._... __-_'".. .

2% DAMPING AUXIUARY-CONTROL BUILDING 3% DAMPING EL 711.50 SSE - VER RESPONSE

-- 5% DAMPING ZPA = 0.17g I --- 7% DAMPING CO)*

to 2 -2 5 ~-!

z w o .5

,-U>

00.7 3

1.50 I 01O0 00.75 L ai (L

_f. Z, 7l%

Ir 0.00.

10-1 100 010 FREQUENCY-CPS

TVA WATTS BAR +41.-I- NEW-DESIGN/MODIFICATION ARS KP 12 9

(A) z 0 FA 3,d>

01' 0

to ,a

-J -43 6

(A

-J C,

0, I-. 3 0/

0!--tl(b 10-1 100 10'l 102 FREQUENCY-CPS

z CO )

TVA WATTS BAR UN 9F-- NEW-DESIGN/MODIFICATION ARS 18.0 CLC c/i 13.5 CL z

'a CD = .t0.

U0~

9.0 'a 00 cc CL*

-J 4.5 "a M 0 0.0 -' 0

z O"a 0 0  ;;n G TVA WATTS BAR -UNIfT-t NEW-DESIGN/MODIFICATION ARS i I.,.

6.0 2% DAMPING AUXILIARY-CONTROL BUILDING 3% DAMPING EL 771.50 CL W SSE - VER RESPONSE U) 5% DAMPING ZPA = 0.30g a-- 7%X DAMPING (I

4.5 lw

  • cn z

0 0 o ct-0 30.'

W 0 V-

.IJ i 3.0 S 4* 9 taC 0~

c co0 I- CD 1.5 i .4 iI "IL* I U.

0.01- a I 101 10, 101 102 FREQUENCY-CPS

z gem*

aM G a."c TVA WATTS BAR UNITF- NEW-DESIGN/MODIFICATION ARS 1  % APN


1% DAMPING AUXIUARY-CONTROL BUILDING W EL 692.00 Z 2% DAMPING OBE - NS RESPONSE C E) --- 4% DAMPING ZPA = 0.10g "m

--- 5% DAMPING CA.,

o 1.125 7% DAMPING CL e z mm co 3emO

.0,, 0

.4(4 Ix oV o Lal 0 oL 0

- 0.750 ou ao L) 0 0

U 0.1 37

.4 0 0.000-0.

10-' 1001012 FREQUENCY'-CPS

z 0 0 TVA WATTS BAR -Nff-t- NEW-DESIGN/MODIFICATION 5'0 ARS 1?5 1% DAMPING AUXIUARY-CONTROL BUILDING 2% DAMPING EL 692.00 w z

OBE - EW RESPONSE C 4% DAMPING ZPA = 0.09g

- -- 5% DAMPING U,, 1.125 7% DAMPING

'3 z "oW 0 V la>

inn I- 0 Q 0 0

._J Z.

0-750 Go C)

,0 0

n- 0o_.

I--

C-)

0.375 0.. //.,---"., x' U) r- '-. ,. -- ,d,-

    • t*:* . * *4,.,

'I.. .- . . . . . . ,

6 0 0.000 1IU" FREQUENCY-CPS 10, 102

z

'v

=mrG)

TVA WATTS BAR Ut;tT 1 NEW-DESIGN/MODIFICATION ARS 0 S1% DAMPING AUXIUARY-CONTROL BUILDING 2% DAMPING EL 592.00 z ODE - VER RESPONSE _

o) -- 4% DAMPING ZPA = 0.Og I --- 5% DAMPING _ _ "o 1.125 7% DAMPING 0 " z z I0(

lcow 0-.

0.7 .l(a(/ 0 0.1

=1

4. 0..00 Q- 0.7 o , ='m Cc '

_& X ** 0 I--

0.3750 0

1 0-1 100 10, I 02 FREOUENCY-CPS

z TVA WATTS BAR UtNIT

  • NEW-DESIJGN/MODIFICATION ARS moZ w
0) 1.125, 3 9

-3 CL C"

F R:

C>

  • 0 0

w 0.750 0 mz~

3 0.

0-LVi a:0

& 0::

0.375 0

0.000 102 FREQUENCY-CPS

z rnC) 9 TVA WATTS BAR UT1t NEW-DESIGN/MODIFICATION ARS z

0) -

I, CL CL to n* W v I>

I--

-J SCL 00 0

LLI 0 T, MC C,)

wi

.-j 0

I--

I haJ

01. 00 Un

% S0 C<.0l 10'

z NEW-DESIGN/MODIFICATION ARS In TA WATTS BAR -MT-1

- 1% DAMPING AUXILIARY-CONTROL BUILDING 2% DAMPING EL 711.50 ODE - VER RESPONSE W

-- 4% DAMPING ZPA = O.07g Z I --- 5% DAMPING 1-125 7% DAMPING to ca*n° 0*5.

o o_ '

Lai 0 CDV s.0

-a- C--

j~0.750 8hoi L0 o r0 0

_j 0 0 0.375 (L

U0&

0.000. mo ,,

10' 102 3 10-' 100 FREQUENCY-CPS

z

'rnc 0 0 co(

TVA WATTS BAR -tNf-T- NEW-DESIGN/MODIFICATION ARS ~

to 1g0 6.0 * * * *C m 6 1% DAMPING AUXIUARY-CONTROL BUILDING 2% DAMPING EL 771.50 z OBE - HS RESPONSE

- _ 4% DAMPING ZPA = 0;3 7g 4.5

--- 5% DAMPING 7% DAMPING -. 9 .

F I.

a, S

9 C, > (CL) rvr-' S

('9 Ca>

i'at U *0 L) 1 1 0 I I 0 C 3.0 S (L s 0 z) C, I t\ a C

(C 0

(4)

OP 1.5 a) SD'"

0 --

-k 0 0.01 0 10 -1 100 10' 102 FREQUENCY-CPS

z 0

rn

.. 2 AM Go1 w..

kaco TVA WATTS BAR UNIT NEW-DESIGN/MODIFICATION ARS a 9.00.

-17. DAMPING AUXILIARY-CONTROL BUILDING

-2% DAMPING EL 771.50 wz ODE - EW R~ESPONSE

-- 4% DAMPING ZPA 0O.42g I - -- 5% DAMPING wp 6.75 - 7 DAMPING 1.

X *

  • " 'W Lii 0 0. SO I.. 4.50 -o "0

'1 - 0 C r 0LJ 2.25 ,,

0--

I-h

.... -0 -.

0.00 a.

4 n-It e' n a -t f IUl IVU 1U IU" FREOUENCY-CPS

r I M '

0- . G0 TVA WATTS BAR UNt4F NEW-DESIGN/MODIFICATION ARS 1fZ-1 z

C 0)

I CD z c-t z

0 0 I

. 02

~0 M La

-J S0 0 V) cm oCc S ow C) 0 (D

CD 0 i~i n~

U) 10-' 100 101 102 FREQUENCY-CPS 1-1 I1

Attachment 15 Bechtel Power Corporation letter ELS-BM-TVA-U2CC-2011-0002, "Application for Withholding Proprietary Information from Public Disclosure, Material Requisition 25402-011-MRA-JDOI-00001, Revision 0, NSSS and BOP Controls Upgrade" (Proprietary)

August 22, 2011 U.S. Nuclear Regulatory Commission Document Control Desk 11555 Rockville Pike Rockville, MD 20852 Letter No.: ELS-BM-TVA-U2CC-2011-0002 Application for Withholding Proprietary Information from Public Disclosure

Subject:

Material Requisition 25402-01 1-MRA-JD01-00001, Revision 0, NSSS and BOP Controls Upgrade (Proprietary)

Attention: Document Control Desk Bechtel Power Corporation, pursuant to the attached affidavit, hereby requests withholding of the proprietary information marked as such in the above-referenced document. The affidavit, which accompanies this letter, sets forth the basis on which Bechtel Power Corporation may request the subject information to be withheld from public disclosure by the Commission and addresses with specificity the considerations listed in paragraph (b)(4) of 10 CFR Section 2.390 of the Commission's regulations ("Section 2.390").

Please also find attached a version of the above-referenced document that we have marked in accordance with the applicable requirements of Section 2.390. The first page of the document has been so marked and each successive page thereafter that contains information that we are seeking to withhold from public disclosure has also been marked accordingly. In addition, we have bracketed such information on each of the foregoing, subject pages.

Correspondence with respect to the proprietary aspects of the application for withholding or the Bechtel affidavit should reference this letter, and should be addressed to Robert Exton, Nuclear Procurement Operations Manger, Bechtel Power Corporation, 5275 Westview Drive Frederick, Maryland, 21703-8306.

Very truly yours, Robert Exton Nuclear Procurement Operations Manager Enclosures BECHTEL POWER CORPORATION 5275 Westview Drive tel (301) 2.28-6000 Frederick, MD 21703-8306 USA

Reference:

Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002 AFFIDAVIT Before me, the undersigned authority, personally appeared Robert Exton, who, being by me duly sworn according to law, deposes and says that he is authorized to execute this Affidavit on behalf of Bechtel Power Corporation, and that the averments of fact set forth in this Affidavit are true and correct to the best of his knowledge, information, and belief:

Robert Exton Nuclear Procurement Operations Manager Swo n to and subscribed before me Th~iday of August 2011 Notary Public VICKIE W. CRESAP NOTA RlV PUBLIC FREDEi'RICK COUINTV /

MV COIMMISSiON I'pPIRI,:S...... .

Reference:

Bechtel Letter No. ELS--BM-TVA-U2CC-2011-0002

1) I am Robert Exton, and as such, with respect to the Watts Bar 2 Nuclear Plant ject, I have been delegated the function of reviewing proprietary information sought to be withheld from public disclosure in connection with procurement materials to be included nuclear power plant licensing and rule making proceedings for this project, and am authorized to apply for its withholding on behalf of Bechtel Power Corporation.
2) I am making this Affidavit in conformance with the provisions of 10 CFR Section 2.390 of the Commission's regulations and in conjunction with the Bechtel Application for Withholding Proprietary Information from Public Disclosure accompanying this Affidavit.
3) I have personal knowledge of the criteria and procedures utilized by Bechtel Power Corporation in designating information as a trade secret, privileged or as confidential commercial or financial information.
4) Pursuant to the provisions of paragraph (b)(4) of Section 2.390 of the Commission's regulations, the following is furnished for consideration by the Commission in determining whether the information sought to be withheld from public disclosure should be withheld.

(i) The information sought to be withheld from public disclosure is owned by Bechtel and has been held in confidence by Bechtel Power Corporation, subject to the confidential use thereof by Tennessee Valley Authority.

(ii) The information sought to be withheld from public disclosure includes vendor sourcing and pricing information of a type customarily held in confidence by Bechtel Power Corporation and its customers and not normally disclosed to the public.

(iii) Its use by a competing company would reduce the ability of Bechtel Power Corporation and its customers to ensure a fair and competitive bidding process for future work.