ML090340707: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(StriderTol Bot change)
 
(4 intermediate revisions by the same user not shown)
Line 2: Line 2:
| number = ML090340707
| number = ML090340707
| issue date = 12/18/2008
| issue date = 12/18/2008
| title = Watts Bar Nuclear Plant, Unit 2, Final Safety Analysis Report, Amendment 92, Section 3, Design of Structures, Components, Equipment, and Systems
| title = Final Safety Analysis Report, Amendment 92, Section 3, Design of Structures, Components, Equipment, and Systems
| author name =  
| author name =  
| author affiliation = Tennessee Valley Authority
| author affiliation = Tennessee Valley Authority
Line 15: Line 15:


=Text=
=Text=
{{#Wiki_filter:REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-iWATTS BARTABLE OF CONTENTS SectionTitle Page3.0DESIGN OF STRUCTURES, COMPONENTS, EQUIPMENT, AND SYSTEMS3.1CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA3.1-13.1.1Introduction3.1-13.1.2WBNP Conformance with GDCs3.1-1 3.1.2.1Overall Requirements3.1-13.1.2.2Protection By Multiple Fission Product Barriers3.1-53.1.2.3Protection and Reactivity Control Systems3.1-123.1.2.4Fluid Systems3.1-173.1.2.5Reactor Containment3.1-303.1.2.6Fuel and Radioactivity Control3.1-353.2CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS3.2-1 3.2.1 Seismic Classifications 3.2-13.2.2System Quality Group Classification3.2-13.2.2.1Class A3.2-23.2.2.2Class B3.2-2 3.2.2.3Class C3.2-23.2.2.4Class D3.2-23.2.2.5Relationship of Applicable Codes to Safety Classification for Mechanical Com-ponents3.2-33.2.2.6Nonnuclear Safety Class (NNS)3.2-33.2.2.7Heating, Ventilation and Air Conditioning (HVAC) Safety Classification3.2-33.2.3Code Cases and Code Editions and Addenda3.2-33.2.3.1TVA Design and Fabrication3.2-33.2.3.2Purchased Materials and Components3.2-43.3Wind and Tornado Loading3.3-13.3.1Wind Loadings3.3-1 3.3.1.1Design Wind Velocity3.3-13.3.1.2Determination of Applied Force3.3-13.3.2Tornado Loadings3.3-1 3.3.2.1Applicable Design Parameters3.3-13.3.2.2Determination of Forces on Structures3.3-23.3.2.3Ability of Category I Structures to Pe rform Despite Failure of Structures Not Designed for Tornado Loads3.3-33.4WATER LEVEL (FLOOD) DESIGN3.4-13.4.1Flood Protection3.4-13.4.2Analysis Procedure3.4-13.5MISSILE PROTECTION3.5-13.5.1Missile Selection and Description3.5-2 REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-iiWATTS BARTABLE OF CONTENTSSectionTitle Page3.5.1.1Internally Generated Missiles (Outside Containment)3.5-23.5.1.2Internally Generated Missiles (Inside Containment)3.5-53.5.1.3Turbine Missiles3.5-93.5.1.4Missiles Generated By Natural Phenomena3.5-273.5.1.5Missiles Generated by Events Near the Site.3.5-283.5.1.6Aircraft Hazards3.5-28 3.5.2Systems To Be Protected3.5-293.5.3Barrier Design Procedures3.5-293.5.3.1Additional Diesel Generator Building (And Other Category I Structures Added After July 1979)3.5-323.5AESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES3.5A-1 REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-iiiWATTS BARLIST OF TABLES SectionTitleTable 3.2-1Category I StructuresTable 3.2-2Summary of Criteria - Mechanical System ComponentsTable 3.2-2aClassification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)Table 3.2-2bClassification of Systems No t Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below)Table 3.2-3 Electrical Power System E quipment Designed to Operate During and After a "Safe Shutdown Earthquake"Table 3.2-4Summary of Codes and St andards for Safety Class Compo-nents of The Watts Bar Nucl ear Plant Code RequirementsTable 3.2-5Non-Nuclear Safety ClassificationsTable 3.2-6TVA Heating, Ventilation, and Air Conditioning ClassificationsTable 3.2-7Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationTable 3.5-1Summary of Postul ated CRDM Missile AnalysisTable 3.5-2Typical Postulated Valve Missile CharacteristicsTable 3.5-3Postulated Piping Temperature Element Assemb ly Missile Characteris-ticsTable 3.5-4Characteristics of Other Missiles Postulated Within Reactor Contain-mentTable 3.5-5Deleted by Ame ndment 71; See Section 10.2.3.1Table 3.5-6Tabulated Calculat ion of the Probability of Event H - The Receipt of Unacceptable DamageTable 3.5-7Tornado Missile Spectrum A  for Category I Structures(1)Table 3.5-8Tornado Missile Spectrum B Diesel Generator Building Equipment Doors(1)Table 3.5-9Tornado Missile Spectrum C for Category I Structures(1)Table 3.5-10Tabulation of the Probability of Receipt of Unacceptable Damage - Per Critical StructureTable 3.5-11Postulated CRDM Missile Char acteristicsTable 3.5-12Typical Postulated Valve Missile CharacteristicsTable 3.5-13Postulated Pipi ng Temperature Element Asse mbly Missile Characteris-ticsTable 3.5-14Outdoor Safety-Related Features(1) (Including Air Intakes and Ex-hausts)Table 3.5-15Exit Missile Properties For Lo w-Pressure Discs (A nd Fragments) - All Low Pressures Exit Missile Properties For No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3)Table 3.5-16LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11)Table 3.5-17Tornado Missile Spectrum D(1)
{{#Wiki_filter:tion                                    Title                                        Page DESIGN OF STRUCTURES, COMPONENTS, EQUIPMENT, AND SYSTEMS CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA                                        3.1-1 1        Introduction                                                                    3.1-1 2        WBNP Conformance with GDCs                                                      3.1-1 2.1           Overall Requirements                                                      3.1-1 2.2           Protection By Multiple Fission Product Barriers                          3.1-5 2.3            Protection and Reactivity Control Systems                                3.1-12 2.4            Fluid Systems                                                            3.1-17 2.5            Reactor Containment                                                      3.1-30 2.6            Fuel and Radioactivity Control                                          3.1-35 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-1 1       Seismic Classifications                                                         3.2-1 2       System Quality Group Classification                                            3.2-1 2.1            Class A                                                                  3.2-2 2.2           Class B                                                                  3.2-2 2.3            Class C                                                                  3.2-2 2.4            Class D                                                                  3.2-2 2.5            Relationship of Applicable Codes to Safety Classification for Mechanical Com-ponents                                                                  3.2-3 2.6            Nonnuclear Safety Class (NNS)                                             3.2-3 2.7            Heating, Ventilation and Air Conditioning (HVAC) Safety Classification 3.2-3 3        Code Cases and Code Editions and Addenda                                        3.2-3 3.1            TVA Design and Fabrication                                                3.2-3 3.2           Purchased Materials and Components                                        3.2-4 Wind and Tornado Loading                                                            3.3-1 1        Wind Loadings                                                                  3.3-1 1.1           Design Wind Velocity                                                      3.3-1 1.2            Determination of Applied Force                                            3.3-1 2        Tornado Loadings                                                                3.3-1 2.1            Applicable Design Parameters                                              3.3-1 2.2           Determination of Forces on Structures                                    3.3-2 2.3           Ability of Category I Structures to Perform Despite Failure of Structures Not Designed for Tornado Loads                                                3.3-3 WATER LEVEL (FLOOD) DESIGN                                                          3.4-1 1       Flood Protection                                                                3.4-1 2       Analysis Procedure                                                              3.4-1 MISSILE PROTECTION                                                                  3.5-1 1       Missile Selection and Description                                              3.5-2 UIREMENTS FOR FURTHER TECHNICAL INFORMATION                                                3.0-i
Table 3.5-18Minimum Wall and Roof Thickness RequirementsTo Resist the Effects of Tornado Missile Impact(1)
REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-ivWATTS BARLIST OF TABLESSectionTitle REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-vWATTS BAR LIST OF FIGURES SectionTitleFigure 3.3-1Variations of Differential Pr essure and Tangential Plus Translational Velocity as a Function of the Dist ance from the Center of a TornadoFigure 3.5-1Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory OrientationFigure 3.5-2Physical Dimensions of Important Potential Turbine MissilesFigure 3.5-3Turbine Generation Locations Figure 3.5-4Watts Ba r Nuclear Plant LayoutFigure 3.5-5Cross-Sectional Analysis of Susceptibility of Critical Components to Upward Turb ine Missile TrajectoriesFigure 3.5-6Comparison of Missile Fo rmulas (6-in Cylindrical Missile)Figure 3.5-7Comparison of Missile Fo rmulas (l6-in Cylindrical Missile)Figure 3.5-8Depth of Missile Penetrat ion for Tornado (2-in Diameter Pipe)Figure 3.5-9Depth of Missile Penetration for Tornado (2X4)Figure 3.5-10LP Disc MissilesFigure 3.5-11LP Cylinder & Blade Ring Fragments REQUIREMENTS FOR FURTHER TECHNICAL INFORMATION3.0-viWATTS BAR LIST OF FIGURESSectionTitle CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-1WATTS BARWBNP-92009_TVA_WB_FSAR_Section_3_A.book3.0 DESIGN OF STRUCTURES, COMP ONENTS, EQUIPMEN T, AND SYSTEMS3.1  CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1.1  IntroductionThe Watts Bar Nuclear Power plant was designed to meet the intent of the "Proposed General Design Criteria for Nuclear Power Plant Construction Permits" published in July, 1967. The Watts Bar construction permit was issued in January, 1973. This FSAR, however, addresses the NRC Genera l Design Criteria (GDC) published as Appendix A to 10 CFR 50 in July, 1971, including Criterion 4 as amended October 27, 1987.Each criterion is followed by a discussion of the design features and procedures which meet the intent of the criteria. Any exception to the 1971 GDC resulting from the earlier commitments is identified in the discussion of the corresponding criterion. References to other sections of the FSAR are given for system design details.
3.1.2  WBNP Conformance with GDCs 3.1.2.1  Overall RequirementsCriterion 1 - Quality Standards and RecordsStructures, systems, and components important to safety shall be designed, fabricated, erected, and tested to quality standards commensurate with the importance of the safety functions to be performed. Where generally recognized codes and standards are used, they shall be identified and evaluated to determine their applicability, adequacy, and sufficiency and shall be supplemented or modified as necessary to assure a quality product in keeping with the required safety function. A Quality Assurance Program shall be established and implemented in order to provide adequate assurance that these structures, systems, and components will satisfactorily perform their safety function. Appropriate records of the design, fabrication, erection and testing of structures, systems, and components important to safety shall be maintained by or under the control of the nuclear power unit licensee throughout the life of the unit.ComplianceDiscussions related to the applicable codes, design criteria and standards used in the design of particular systems are contained in the appropriate SAR sections and in Tables 3.2-1, 3.2-2, 3.2-3, 3.2-4 and 3.2-5.The Quality Assurance Program conforms to the requirements of 10 CFR 50 Appendix B, "Quality Assurance Criteria for Nuclear Power Plants." Details of the program are given in Chapter 17.


3.1-2CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-89Criterion 2 - Design Bases for Protection Against Natural Phenomena Structures, systems, and components important to safety shall be designed to withstand the effects of natural phenomena such as earthquakes, tornadoes, hurricanes, floods, tsunami, and seiches without loss of capability to perform their safety functions. The design bases for these structures, systems, and components shall reflect:
tion                                    Title                                      Page 1.1            Internally Generated Missiles (Outside Containment)                    3.5-2 1.2            Internally Generated Missiles (Inside Containment)                      3.5-5 1.3            Turbine Missiles                                                        3.5-9 1.4            Missiles Generated By Natural Phenomena                              3.5-27 1.5            Missiles Generated by Events Near the Site.                          3.5-28 1.6            Aircraft Hazards                                                      3.5-28 2        Systems To Be Protected                                                    3.5-29 3        Barrier Design Procedures                                                  3.5-29 3.1            Additional Diesel Generator Building (And Other Category I Structures Added After July 1979)                                                      3.5-32 A ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES                                3.5A-1 UIREMENTS FOR FURTHER TECHNICAL INFORMATION                                            3.0-ii
(1)Appropriate consideration of the most severe of the natural phenomena that have been historically reported for the site and surrounding area, with sufficient margin for the limited accuracy, quantity, and period of time in which the historical data have been accumulated, (2)Appropriate combinations of the effects of normal and accident conditions with the effects of the natural phenomena, and (3)The importance of the safety functions to be performed.ComplianceThe structures, systems, and components important to safety are designed to either withstand the effects of natural phenomena without loss of capability to perform their safety functions, or to fail in the safest condition. Those structures, systems, and components vital to the shutdown capability of the reactor are designed to withstand the maximum probable natural phenomenon expected at the site, determined from recorded data for the site vicinity, with appropriate margin to account for uncertainties in historical data. Appropriate combinations of normal, accident, and natural phenomena structural loadings are considered in the plant design.The nature and magnitudes of the natural phenomena considered in the design of the plant are discussed in Sections 2.3, 2.4, and 2.5. Sections 3.2 through 3.10 discuss the design of the plant in relationship to natural events. Seismic and safety classifications, as well as other pertinent standards and information, are given in the sections discussing individual structures and components.
 
tion                                    Title le 3.2-1              Category I Structures le 3.2-2              Summary of Criteria - Mechanical System Components le 3.2-2a            Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd) le 3.2-2b            Classification of Systems Not Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below) le 3.2-3              Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" le 3.2-4              Summary of Codes and Standards for Safety Class Compo-nents of The Watts Bar Nuclear Plant Code Requirements le 3.2-5              Non-Nuclear Safety Classifications le 3.2-6              TVA Heating, Ventilation, and Air Conditioning Classifications le 3.2-7              Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and Fabrication le 3.5-1              Summary of Postulated CRDM Missile Analysis le 3.5-2              Typical Postulated Valve Missile Characteristics le 3.5-3              Postulated Piping Temperature Element Assembly Missile Characteris-tics le 3.5-4              Characteristics of Other Missiles Postulated Within Reactor Contain-ment le 3.5-5              Deleted by Amendment 71; See Section 10.2.3.1 le 3.5-6              Tabulated Calculation of the Probability of Event H - The Receipt of Unacceptable Damage le 3.5-7              Tornado Missile Spectrum A for Category I Structures(1) le 3.5-8              Tornado Missile Spectrum B        Diesel Generator Building Equipment Doors(1) le 3.5-9              Tornado Missile Spectrum C for Category I Structures(1) le 3.5-10            Tabulation of the Probability of Receipt of Unacceptable Damage - Per Critical Structure le 3.5-11            Postulated CRDM Missile Characteristics le 3.5-12            Typical Postulated Valve Missile Characteristics le 3.5-13            Postulated Piping Temperature Element Assembly Missile Characteris-tics le 3.5-14            Outdoor Safety-Related Features(1)      (Including Air Intakes and Ex-hausts) le 3.5-15            Exit Missile Properties For Low-Pressure Discs (And Fragments) - All Low Pressures Exit Missile Properties For No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) le 3.5-16            LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11) le 3.5-17            Tornado Missile Spectrum D(1) le 3.5-18            Minimum Wall and Roof Thickness Requirements To Resist the Effects of Tornado Missile Impact(1)
UIREMENTS FOR FURTHER TECHNICAL INFORMATION                                              3.0-iii
 
tion                                    Title UIREMENTS FOR FURTHER TECHNICAL INFORMATION    3.0-iv
 
tion                                    Title ure 3.3-1            Variations of Differential Pressure and Tangential Plus Translational Velocity as a Function of the Distance from the Center of a Tornado ure 3.5-1             Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory Orientation ure 3.5-2            Physical Dimensions of Important Potential Turbine Missiles ure 3.5-3            Turbine Generation Locations ure 3.5-4            Watts Bar Nuclear Plant Layout ure 3.5-5            Cross-Sectional Analysis of Susceptibility of Critical Components to Upward Turbine Missile Trajectories ure 3.5-6            Comparison of Missile Formulas (6-in Cylindrical Missile) ure 3.5-7            Comparison of Missile Formulas (l6-in Cylindrical Missile) ure 3.5-8            Depth of Missile Penetration for Tornado (2-in Diameter Pipe) ure 3.5-9            Depth of Missile Penetration for Tornado (2X4) ure 3.5-10            LP Disc Missiles ure 3.5-11            LP Cylinder & Blade Ring Fragments UIREMENTS FOR FURTHER TECHNICAL INFORMATION                                              3.0-v
 
tion                                    Title UIREMENTS FOR FURTHER TECHNICAL INFORMATION    3.0-vi
 
ection_3_A.book DESIGN OF STRUCTURES, COMPONENTS, EQUIPMENT, AND SYSTEMS CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
.1 Introduction The Watts Bar Nuclear Power plant was designed to meet the intent of the "Proposed General Design Criteria for Nuclear Power Plant Construction Permits" published in July, 1967. The Watts Bar construction permit was issued in January, 1973. This FSAR, however, addresses the NRC General Design Criteria (GDC) published as Appendix A to 10 CFR 50 in July, 1971, including Criterion 4 as amended October 27, 1987.
Each criterion is followed by a discussion of the design features and procedures which meet the intent of the criteria. Any exception to the 1971 GDC resulting from the earlier commitments is identified in the discussion of the corresponding criterion. References to other sections of the FSAR are given for system design details.
.2 WBNP Conformance with GDCs
.2.1 Overall Requirements Criterion 1 - Quality Standards and Records Structures, systems, and components important to safety shall be designed, fabricated, erected, and tested to quality standards commensurate with the importance of the safety functions to be performed. Where generally recognized codes and standards are used, they shall be identified and evaluated to determine their applicability, adequacy, and sufficiency and shall be supplemented or modified as necessary to assure a quality product in keeping with the required safety function. A Quality Assurance Program shall be established and implemented in order to provide adequate assurance that these structures, systems, and components will satisfactorily perform their safety function. Appropriate records of the design, fabrication, erection and testing of structures, systems, and components important to safety shall be maintained by or under the control of the nuclear power unit licensee throughout the life of the unit.
Compliance Discussions related to the applicable codes, design criteria and standards used in the design of particular systems are contained in the appropriate SAR sections and in Tables 3.2-1, 3.2-2, 3.2-3, 3.2-4 and 3.2-5.
The Quality Assurance Program conforms to the requirements of 10 CFR 50 Appendix B, "Quality Assurance Criteria for Nuclear Power Plants." Details of the program are given in Chapter 17.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                            3.1-1
 
Criterion 2 - Design Bases for Protection Against Natural Phenomena Structures, systems, and components important to safety shall be designed to withstand the effects of natural phenomena such as earthquakes, tornadoes, hurricanes, floods, tsunami, and seiches without loss of capability to perform their safety functions. The design bases for these structures, systems, and components shall reflect:
(1)   Appropriate consideration of the most severe of the natural phenomena that have been historically reported for the site and surrounding area, with sufficient margin for the limited accuracy, quantity, and period of time in which the historical data have been accumulated, (2)   Appropriate combinations of the effects of normal and accident conditions with the effects of the natural phenomena, and (3)   The importance of the safety functions to be performed.
Compliance The structures, systems, and components important to safety are designed to either withstand the effects of natural phenomena without loss of capability to perform their safety functions, or to fail in the safest condition. Those structures, systems, and components vital to the shutdown capability of the reactor are designed to withstand the maximum probable natural phenomenon expected at the site, determined from recorded data for the site vicinity, with appropriate margin to account for uncertainties in historical data. Appropriate combinations of normal, accident, and natural phenomena structural loadings are considered in the plant design.
The nature and magnitudes of the natural phenomena considered in the design of the plant are discussed in Sections 2.3, 2.4, and 2.5. Sections 3.2 through 3.10 discuss the design of the plant in relationship to natural events. Seismic and safety classifications, as well as other pertinent standards and information, are given in the sections discussing individual structures and components.
Criterion 3 - Fire Protection Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions. Noncombustible and heat-resistant materials shall be used wherever practical throughout the unit, particularly in locations such as the containment and control room. Fire detection and fighting systems of appropriate capacity and capability shall be provided and designed to minimize the adverse effects of fires on structures, systems, and components important to safety. Fire-fighting systems shall be designed to assure that their rupture or inadvertent operation does not significantly impair the safety capability of these structures, systems, and components.
Criterion 3 - Fire Protection Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions. Noncombustible and heat-resistant materials shall be used wherever practical throughout the unit, particularly in locations such as the containment and control room. Fire detection and fighting systems of appropriate capacity and capability shall be provided and designed to minimize the adverse effects of fires on structures, systems, and components important to safety. Fire-fighting systems shall be designed to assure that their rupture or inadvertent operation does not significantly impair the safety capability of these structures, systems, and components.
Rev. 02 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-3WATTS BARWBNP-92ComplianceThe plant is designed to minimize the probability of fires and explosions, and in the event of such occurrences to minimize the potential effects of such events to plant safety related equipment and personnel. Prime consideration was given to these requirements throughout the design process by providing for the duplication and physical separation of components in plant design and the use of materials classified as noncombustible and/or fire resistant wherever practical in safety-related areas of the plant. Equipment and facilities for fire protection, including detection, alarm, and extinguishment, are provided to protect both plant-equipment and personnel from fire, explosion, and the resultant release of toxic vapors. Fire-fighting systems are designed to assure that their rupture or inadvertent operation will not significantly impair systems important to safety. Portions of the fire-protection systems necessary to protect safety-related equipment in Class I structures are designed to seismic requirements.The Fire Protection Systems provided are:
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
(1)High pressure water, (2)Carbon dioxide, and (3)Portable extinguishers.The Fire Protection System is designed such that a failure of any component of the system or inadvertent operation:
(1)Does not cause a nuclear accident or significant release of radioactivity to the environment.
(2)Does not impair the ability of equipment to safely shutdown and isolate the reactor or limit the releases of radioactivity to the environment in the event of a postulated accident.The Fire Protection Systems for the Watts Bar Nuclear Plant are discussed in Section 9.5.1. Protection from fire in the control room is discussed in Section 6.4. Criterion 4 - Environmental and Missile Design BasesStructures, systems, and components important to safety shall be designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents, including loss-of-coolant accidents (LOCAs). These structures, systems, and components shall be appropriately protected against dynamic effects, including the effects of missiles, pipe whipping, and discharging fluids, that may result from equipment failures and from events and conditions outside the nuclear power unit.
3.1-4CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92ComplianceThis criterion has been implemented as amended and published in the Federal Register, Volume 52, Number 207, October 27, 1987, 41288, which added the following:"However, dynamic effects associated with postulated pipe ruptures in nuclear power units may be excluded from the design basis when analyses reviewed and approved by the Commission demonstrate that the probability of fluid system piping rupture is extremely low under conditions consistent with the design basis for the piping."Structures, systems, and components important to safety are designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents.
The associated environmental parameters are identified and incorporated in the design requirements and specifications. Particular care was given to the extreme environmental conditions associated with major incidents such as LOCAs. Required equipment and instrumentation are identified, environmental conditions such as temperature, pressure, humidity, and irradiation, are calculated, and the effects of the latter on the former were evaluated either analytically or experimentally. The dynamic effects associated with an accident were carefully identified and assurance given that the structures and systems (including engineered safeguards) assumed undamaged in the total assessment of the accident consequences are suitably protected.Emergency core cooling components are austenitic stainless steel or equivalent corrosion resistant material and hence are compatible with the containment atmosphere over the full range of exposure during the postaccident conditions.Where vital components cannot be located away from potential missiles, protective walls and slabs, local missile shielding, and restraining devices are provided to protect the containment and engineered safety feature components within the containment against damage from missiles generated by the equipment failures associated with the design basis accident (DBA).The environmental design of safety-related items is discussed in Section 3.8 on the design of structures; Sections 6.2.2 and 6.2.3 on containment heat removal and air purification; and Section 9.4 on ventilation systems. Safety- related systems and components used the input from these sections for design as discussed in Section 3.11. Missile and environmental protection is discussed in Sections 3.5 and 3.11, respectively.Criterion 5 - Sharing of Structures, Systems, and ComponentsStructures, systems, and components important to safety shall not be shared among nuclear power units unless it is shown that such sharing will not impair significantly their ability to perform their safety functions, including, in the event of an accident in one unit, an orderly shutdown and cooldown of the remaining units.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-5WATTS BARWBNP-92ComplianceThe structures important to safety that are shared are the Auxiliary Building (Section 3.8), Control Building (Section 3.8), Diesel Generator Building (Section 3.8), and the intake pumping station (Section 3.8). Shared safety- related systems include the essential raw cooling water (Section 9.2), component cooling water (Section 9.2), fire protection (Section 9.5), spent fuel cooling (Section 9.1), fuel oil storage tanks (Section 9.5), preferred and emergency electric power (Section 8.2 and 8.3, respectively), chemical and volume control (Section 9.3), radioactive waste (Chapter 11), emergency gas treatment system (Sections 6.2 and 6.5), and control and Auxiliary Building ventilation systems (Section 6.4). The vital dc power system is shared to the extent that a few loads (e.g., the vital inverters) in one nuclear unit are energized by the dc power channels assigned primarily to power loads of the other unit. In no case does the sharing inhibit the safe shutdown of one unit while the other unit is experiencing an accident. All shared systems are sized for all credible initial combinations of normal and accident states for the two units, with appropriate isolation to prevent an accident condition in one unit from carrying into the other. During the period of time when unit 1 is licensed and unit 2 is unlicensed, all portions of systems and structures important to the safe operation and safe shutdown of unit 1 will be isolated and protected. For systems which are shared and have interface points, a means is provided for isolating and protecting the portions required for unit 1 operation and safe shutdown from the balance of the unit 2 systems which are not necessary or desirable for the operation and/or safe shutdown of unit 1.If the designated equipment configuration is revised to allow system testing or modification, appropriate action will be taken to ensure that the required system availability for accident mitigation is maintained.
3.1.2.2  Protection By Mult iple Fission Product BarriersCriterion 10 - Reactor DesignThe reactor core and associated coolant, control, and protection systems shall be designed with appropriate margin to assure that specified acceptable fuel design limits are not exceeded during any condition of normal operation, including the effects of anticipated operational occurrences.ComplianceThe reactor core with its related coolant, control, and protection systems is designed to function throughout its design lifetime without exceeding acceptable fuel damage limits. The reactor trip system is designed to actuate a reactor trip for any anticipated combination of plant conditions when necessary to ensure that fuel design limits are not exceeded. The core design, together with reliable process and decay heat removal systems, provides for this capability under all expected conditions of normal operation with appropriate margins for uncertainties and anticipated transient situations, including the effects of loss of reactor coolant flow, trip of the turbine-generator, loss of normal feedwater and loss of both normal and preferred power sources.
3.1-6CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86Chapter 4 discusses the design bases and design evaluation of reactor components. Chapter 5 discusses the reactor coolant system. The details of the reactor trip and engineered safety features actuation system design and logic are discussed in Chapter 7. This information supports the accident analyses presented in Chapter 15.Criterion 11 - Reactor Inherent Protection The reactor core and associated coolant systems shall be designed so that in the power operating range the net effect of the prompt inherent nuclear feedback characteristics tends to compensate for a rapid increase in reactivity.ComplianceA negative reactivity coefficient is a basic feature of core nuclear design as discussed in Chapter 4.Criterion 12 - Suppression of Reactor Power Oscillations The reactor core and associated coolant, control and protection systems shall be designed to assure that power oscillations which can result in conditions exceeding specified acceptable fuel design limits are not possible or can be reliably and readily detected and suppressed.CompliancePower oscillations of the fundamental mode are inherently eliminated by the negative Doppler and nonpositive moderator temperature coefficients of reactivity.Oscillations due to xenon spatial effects in the radial, diametral and azimuthal overtone modes are heavily damped due to the inherent design and due to the negative Doppler and nonpositive moderator temperature coefficients of reactivity.Oscillations due to xenon spatial effects in the axial first overtone mode may occur. Assurance that fuel design limits are not exceeded by xenon axial oscillations is provided as a result of reactor trip functions using the measured axial power imbalance as an input.Oscillations due to xenon spatial effects in axial modes higher than the first overtone are heavily damped due to the inherent design and due to the negative Doppler coefficient of reactivity.The stability of the core against xenon-induced power oscillations and the functional requirements of instrumentation for monitoring and measuring core power distribution are discussed in Section 4.3. Details of the instrumentation design and logic are discussed in Chapter 7.Criterion 13 - Instrumentation and Control Instrumentation shall be provided to monitor variables and systems over their anticipated ranges for normal operation, for anticipated operational occurrences, and for accident conditions as appropriate to assure adequate safety, including those CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-7WATTS BARWBNP-92variables and systems that can affect the fission process, the integrity of the reactor core , the reactor coolant pressure boundary, and the containment and its associated systems. Appropriate controls shall be provided to maintain these variables and systems within prescribed operating ranges.ComplianceInstrumentation and controls are provided to monitor and control neutron flux, control rod position, temperatures, pressures, flows, and levels as necessary to assure that adequate plant safety can be maintained. Instrumentation is provided in the reactor coolant system, steam and power conversion system, the containment, engineered safety features systems, radiological waste systems and other auxiliaries. Parameters that must be provided for operator use under normal operating and accident conditions are indicated in the control room in proximity with the controls for maintaining the indicated parameter in the proper range.The quantity and types of process instrumentation provided measures safe and orderly operation of all systems over the full design range of the plant. These systems are described in Chapters 6, 7, 8, 9, 11 and 12.Criterion 14 - Reactor Coolant Pressure Boundary The reactor coolant pressure boundary shall be designed, fabricated, erected, and tested so as to have an extremely low probability of abnormal leakage, or rapidly propagating failure, and of gross rupture.ComplianceThe reactor coolant pressure boundary is designed to accommodate the system pressures and temperatures attained under all expected modes of plant operation, including all anticipated transients, and to maintain the stresses within applicable stress limits. In addition to the loads imposed on the piping under operating conditions, consideration is also given to abnormal loadings, such as pipe rupture and seismic loadings as discussed in Sections 3.6 and 3.7, respectively. The piping is protected from overpressure by means of pressure relieving devices as required by applicable codes.Reactor coolant pressure boundary materials selection and fabrication techniques ensure a low probability of gross rupture or significant leakage.The materials of construction of the reactor coolant pressure boundary are protected by control of coolant chemistry from corrosion which might otherwise reduce the structural integrity of the boundary during its service lifetime.The reactor coolant pressure boundary has provisions for inspections, testing and surveillance of critical areas to assess the structural and leak tight integrity. The details are given in Section 5.2. For the reactor vessel, a material surveillance program conforming to applicable codes is provided.
3.1-8CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92Means are provided to detect significant uncontrolled leakage from the reactor coolant pressure boundary with indication in the control room as discussed in Section 5.2.Criterion 15 - Reactor Coolant System Design The reactor coolant system and associated auxiliary, control, and protection systems shall be designed with sufficient margin to assure that the design conditions of the reactor coolant pressure boundary are not exceeded during any condition of normal operation, including anticipated operational occurrences.ComplianceTransient analyses presented in Section 5.2 lead to the conclusion that design conditions are not exceeded during normal operation. Protection and control set points are based on these transient analyses.Additionally, reactor coolant pressure boundary components achieve a large margin of safety by the use of proven ASME materials and design codes, use of proven fabrication techniques, nondestructive shop testing and integrated hydrostatic testing of assembled components.The effect of radiation embrittlement is considered in reactor vessel design, and surveillance samples monitor adherence to expected conditions throughout plant life.Multiple safety and relief valves are provided for the reactor coolant system. These valves and their set points meet ASME criteria for over-pressure protection. The ASME criteria are satisfactory based on a long history of industry use. Chapter 5 discusses reactor coolant system design.Criterion 16 - Containment Design Reactor containment and associated systems shall be provided to establish an essentially leaktight barrier against the uncontrolled release of radioactivity to the environment and to assure that the containment design conditions important to safety are not exceeded for as long as postulated accident conditions require.ComplianceThe reactor containment (Section 6.2) is a freestanding, continuous steel membrane structure housing the reactor and various auxiliary components including the ice condenser. The ice condenser (Section 6.7) limits the initial containment pressure to a value less than design during a large LOCA. A concrete ShieldBuilding surrounding the steel vessel allows for collection of any containment leakage, which is subsequently processed by the emergency gas treatment system (Section 6.5) before release to the environment. The containment also contains a spray system (Section 6.2) which supplements the ice condenser in limiting pressure and which also provides long-term cooling following a LOCA. The design pressure is not exceeded in any pressure transients which result from combining the effects of heat sources with minimal operation of the engineered safety features.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-9WATTS BARWBNP-92The containment system is designed to provide for protection of the public from the consequences of a LOCA based on a postulated break of the reactor coolant piping up to and including a doubled-ended break of the largest reactor coolant pipe. Periodic containment leak rate measurements ensure that the leaktight barrier is maintained.Criterion 17 - Electric Power Systems An onsite electric power system and an offsite electric power system shall be provided to permit functioning of structures, systems, and components important to safety. The safety function for each system (assuming the other system is not functioning) shall be to provide sufficient capacity and capability to assure that (1) specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.The onsite power sources, including the batteries, and the onsite electric distribution system, shall have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure.Electric power from the transmission network to the onsite electric distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights of way) designed and located so as to minimize to the extent practical the likelihood of their simultaneous failure under operating and postulated accident and environmental conditions. A switchyard common to both circuits is acceptable. Each of these circuits shall be designed to be available in sufficient time following a loss of all onsite alternating current power supplies and the other offsite electric power circuit, to assure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded. One of these circuits shall be designed to be available within a few seconds following a LOCAt to assure that core cooling, containment integrity, and other vital safety functions are maintained.Provisions shall be included to minimize the probability of losing electric power from any of the remaining sources as a result of, or coincident with, the loss of power generated by the nuclear power unit, the loss of power from the transmission network, or the loss of power from the onsite electric power sources.ComplianceThe capacity and capability of either the onsite or offsite electric power system is sufficient to assure that (1) specified fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.Offsite Electrical Power SystemThe offsite electrical power source consists of two physically independent circuits which are energized and available. The offsite sources are two independent 161-kV transmission lines terminating at the 161-kV switchyard, providing power to the plant, 3.1-10CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86on demand, via the common station service transformers to the onsite Class 1E distribution system.Onsite Electrical Power SystemThe onsite electrical power system serves both nuclear power units and certain common plant equipment. It consists of two independent diesel generator systems, each system containing two diesel generator units, two redundant Class 1E electric power distribution trains, and four redundant vital instrument and control power channels, each provided with an uninterruptible ac power supply and distribution panel. A plant Class 1E dc power system is provided with four redundant divisions, each consisting of a battery, battery charger, and distribution panel. Each redundant onsite power supply, train, and channel has the capability and capacity to supply the required safety loads assuming the failure of its redundant counterpart.For a detailed description and analysis of the offsite electrical power system and onsite electrical power system, see Sections 8.2 and 8.3, respectively.Criterion 18 - Inspection and Testing of Electric Power Systems Electric power systems important to safety shall be designed to permit appropriate periodic inspection and testing of important areas and features, such as wiring, insulation, connections, and switchboards, to assess the continuity of the systems and the condition of their components. The systems shall be designed with a capability to test periodically (1) the operability and functional performance of the components of the systems, such as onsite power sources, relays, switches, and buses, and (2) the operability of the systems as a whole and, under conditions as close to design as practical, the full operation sequence that brings the systems into operation, including operation of applicable portions of the protection system, and the transfer of power among the nuclear power unit, the offsite power system, and the onsite power system.ComplianceInspectionIn addition to continuous surveillance by visual and audible alarms for any abnormal condition, the onsite power system is designed to permit inspection and checking of wiring, insulation, connections, and switchboards to the extent that personnel safety is not jeopardized, equipment not damaged, and the plant not exposed to accidental tripping.On-Line TestingThe onsite power system is designed with provision for periodic testing during normal operation with the unit on line, to the extent that the plant is not exposed to accidental tripping and the reliability of the safety system not degraded. These features include provisions for starting and loading of onsite emergency diesel generators, and starting and loading of individual or groups of engineered safeguards to their respective buses. The system is also designed to permit testing of larger integrated segments of the system during planned cooldown of the reactor coolant system.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-11WATTS BARWBNP-92 Off-Line TestingThe onsite power system is designed with facilities for a complete test of the operability of the system as a whole from initiation of protection system, starting and loading of the diesel generators, transfer of power sources and the full operational sequence of engineered safety features.Inspection and testing of electrical power systems is further described in Sections 8.3.1.1 and 8.3.2.1. Criterion 19 - Control Room A control room shall be provided from which actions can be taken to operate the nuclear power unit safely under normal conditions and to maintain it in a safe condition under accident conditions including LOCAs. Adequate radiation protection shall be provided to permit access and occupancy of the control room under accident conditions without personnel receiving radiation exposures in excess of 5 rem whole body, or its equivalent to any part of the body, for the duration of the accident.Equipment at appropriate locations outside the control room shall be provided (1) with a design capability for prompt hot shutdown of the reactor, including necessary instrumentation and controls to maintain the unit in a safe condition during hot shutdown, and (2) with a potential capability for subsequent cold shutdown of the reactor through the use of suitable procedures.ComplianceThe plant is provided with a separate structure designated as the Control Building. Within the Control Building are located control rooms, auxiliary instrument room, computer room, battery and dc equipment rooms (including space for instrument motor generator, etc), switchyard relay room, plant communications room and service facilities such as shift engineer office, kitchen, instrument shop, toilet facilities, and mechanical equipment room for heating, ventilating, and air conditioning equipment.The main control room was provided with unit control panels for each of the two units, the switchyard, electrical recording, dc distribution, operation of the diesel generator system, and for those systems shared by the two units. The unit control panels contain those instruments and controls necessary for operation of the unit, functions such as the reactor and its auxiliary system, turbine generator, and the steam and power conversion systems. Selection of loading from the various plant electrical distribution boards such as the startup boards, common service board, shutdown boards, and motor control centers is accomplished from the unit control panels.The control room is designed and equipped to minimize the effects of possible events such as fire, high radiation levels, and excessive temperature which might preclude occupancy. The main control room is continuously occupied by qualified operating personnel under all operating and accident conditions except in the case of events such as fire or smoke which could necessitate its evacuation. In the unlikely event that control room occupancy becomes impossible, provisions have been made to bring the reactor units to, and maintain them in, a hot shutdown condition, from a location 3.1-12CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86external to the main control room. By use of appropriate procedures and available equipment, the unit can also be brought to cold shutdown conditions.Sufficient shielding, distance, and containment integrity are provided to assure that under postulated accident conditions control room personnel shall not be subjected to radiation doses which would exceed 5 rem to the whole body, or its equivalent to any part of the body, including doses received during both ingress and egress. Control room ventilation is provided by a system having a large percentage of recirculated air. After an accident, makeup air is automatically routed through a system of HEPA and charcoal filters.The design of the control room for occupancy during accidents is discussed in Section 6.4. The heating, ventilation, and air conditioning of the Control Building is discussed in Section 9.4. Radiation doses to control personnel following a LOCA are evaluated in Section 15.5.3. Radiation protection design features are discussed in Section 12.3.3.1.2.3  Protection and R eactivity Control SystemsCriterion 20 - Protection System Functions The protection system shall be designed (1) to initiate automatically the operation of appropriate systems including the reactivity control systems, to assure that specified acceptable fuel design limits are not exceeded as a result of anticipated operational occurrences and (2) to sense accident conditions and to initiate the operation of systems and components important to safety.ComplianceA fully automatic protection system (with appropriate redundant channels) is provided to cope with transients where insufficient time is available for manual corrective action. The design basis for all protection systems is in accord with IEEE Standard 279-1971. The reactor trip system automatically initiates a reactor trip when any appropriate monitored variable or combination of variables exceed the normal operating range.
Setpoints are chosen to provide an envelope of safe operating conditions with adequate margin for uncertainties to ensure that fuel design limits are not exceeded.Reactor trip is initiated by removing power to the rod drive mechanisms of all the full length rod cluster control assemblies. This will allow the assemblies to free fall into the core, rapidly reducing reactor power output.The engineered safety features actuation system automatically initiates emergency core cooling, and other safeguards functions, by sensing accid ent conditions using redundant process protection system channels measuring diverse parameters. Manual actuation of safeguards is relied upon where ample time is available for operator action. The ESF actuation system also provides a reactor trip on manual or automatic safety injection (S) signal generation.The response and adequacy of the protection systems is analyzed for all conditions specified by the ANS N18.2 standard through Condition IV.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-13WATTS BARWBNP-86For further discussion of the reactor trip system and engineered safety features actuation system, see Sections 7.2 and 7.3, respectively.Criterion 21 - Protection System Reliability and Testability The protection system shall be designed for high functional reliability and inservice testability commensurate with the safety functions to be performed. Redundancy and independence designed into the protection system shall be sufficient to assure that (1) no single failure results in loss of protection function and (2) removal from service of any component or channel does not result in a loss of the required minimum redundancy unless the acceptable reliability of operation of the protection can be otherwise demonstrated. The protection system shall be designed to permit periodic testing of its functioning when the reactor is in operation, including a capability to test channels independently to determine failures and losses of redundancy that may have occurred.ComplianceThe protection system is designed for high functional reliability and inservice testability. The design employs redundant logic trains, and measurement and equipment diversity.The protection system is designed in accordance with IEEE Standard 279-1971. All safety actuation circuitry is provided with a capability for testing with the reactor at power. The protection systems, including the process protection system, nuclear instrumentation system and the engineered safety features test cabinet comply with Regulatory Guide 1.22 on periodic testing of protection system actuation functions. Under the present design, there are protective functions which are not tested at power. The functions can be tested under shutdown plant conditions, so that they do not interrupt power operation, as allowed by Regulatory Guide 1.22. For those process protection functions that may be tested in bypass, alarms are provided in the control room and at the process rack to indicate the bypassed condition. Additional information on the capability of the process protection system to be tested in the bypassed mode is provided in Section 7.2.2.2, Subsections 10, 11, 12, 13 and 14.In those cases where equipment cannot be tested at power, it is only the actuation device function which is not tested. The logic associated with the actuation devices has the capability for testing at power. Such testing will disclose failures or reduction in redundancy which may have occurred. Removal from service of any single channel or component does not result in loss of minimum required redundancy. For example, a two-of-three function becomes a one-of-two function when one channel is removed.  (Note that this is not true for the logic trains which are effectively a one-out-of-two logic).Semiautomatic testers are built into each of the two logic trains in a protection system. These testers have the capability of testing the major part of the protection system very rapidly while the reactor is at power. Between tests, a number of internal protection system points including the associated power supplies and fu ses are continuously monitored. Outputs of the monitors are logically processed to provide alarms for 3.1-14CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92failures in one train and automatic reactor trip for failures in both trains. Self-testing provision is designed into each tester. Additional details can be found in Sections 7.2 and 7.3.Criterion 22 - Protection System IndependenceThe protection system shall be designed to assure that the effects of natural phenomena, and of normal operating, maintenance, testing, and postulated accident conditions on redundant channels do not result in loss of the protection function, or shall be demonstrated to be acceptable on some other defined basis. Design techniques, such as functional diversity or diversity in component design and principles of operation, shall be used to the extent practical to prevent loss of the protection function.ComplianceDesign of protection systems includes consideration of natural phenomena, normal maintenance, testing and accident conditions such that the protection functions are always available.Sufficient redundancy and independence is designed into the protection system to assure that no single failure, or removal from service of any component or channel of a system, will result in loss of the protection function. The minimum redundancy is exceeded in each protection function which is active with the reactor at power. Functional diversity and consequential location diversity are designed into the system. For example, loss of one feedwater pump would actuate one pressure reactor trip, one high-level trip, one low-level trip, and two temperature trips. The protective system is discussed in detail in Sections 7.2 and 7.3.Criterion 23 - Protection System Failure Modes The protection system shall be designed to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of energy (e.g., electric power, instrument air), or postulated adverse environments (e.g., extreme heat or cold, fire, pressure, steam, water, and radiation) are experienced.ComplianceThe protection system is designed with due consideration of the most probable failure modes of the components under various perturbations of the environment and energy sources. Each reactor trip and engineered safety features actuation channel (except for containment spray and switchover from injection to recirculation) is designed on the deenergize-to-trip principle so loss of power, disconnection, open-channel faults, and the majority of internal channel short-circuit faults cause the channel to go into its tripped mode. The protection system is discussed in Sections 7.2 and 7.3.Criterion 24 - Separation of Protection and Control Systems The protection system shall be separated from control systems to the extent that failure of any single control system component or channel, or failure or removal from service CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-15WATTS BARWBNP-92of any single protection system component or channel which is common to the control and protection systems leaves intact a system satisfying all reliability, redundancy, and independence requirements of the protection system. Interconnection of the protection and control systems shall be limited so as to assure that safety is not significantly impaired.ComplianceThe protection system is separate and distinct from control systems. Control systems may be dependent on the protection system in that control signals are derived from protection system measurements where applicable. These signals are transferred to the control system by isolation devices which are classified as protection components. The adequacy of system isolation has been verified by testing under conditions of postulated credible faults. The failure or removal of any single control system component or channel, or failure or removal from service of any single protection system component or channel which is common to the control and protection system leaves intact a system which satisfies the requirements of the protection system. Distinction between channel and train is made in this discussion. The removal of a train from service is allowed only during testing of the train. For discussion of details of compliance, see Chapter 7.Criterion 25 - Protection System Requirements for Reactivity Control MalfunctionsThe protection system shall be designed to assure that specified acceptable fuel design limits are not exceeded for any single malfunction of the reactivity control systems, such as accidental withdrawal (not ejection or dropout) of control rods.ComplianceThe protection system is designed to limit reactivity transients so that fuel design limits are not exceeded. Reactor shutdown by full-length rod insertion is completely independent of the normal control function since the trip breakers interrupt power to the rod mechanisms regardless of existing control signals. Thus, in the postulated accidental withdrawal, (assumed to be initiated by a control malfunction) flux, temperature, pressure, level and flow signals would be generated independently. Any of these signals (trip demands) would operate the breakers to trip the reactor.Analyses of the effects of possible malfunctions are discussed in Chapter 15. These analyses show that for postulated dilution during refueling, startup, or manual or automatic operation at power, the operator has ample time to determine the cause of dilution, terminate the source of dilution and initiate reboration before the shutdown margin is lost. The analyses show that acceptable fuel damage limits are not exceeded even in the event of a single malfunction of either system.Criterion 26 - Reactivity Control System Redundancy and Capability Two independent reactivity control systems of different design principles shall be provided. One of the systems shall use control rods, preferably including a positive means for inserting the rods, and shall be capable of reliably controlling reactivity 3.1-16CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86changes to assure that under conditions of normal operation, including anticipated operational occurrences, and with appropriate margin for malfunctions such as stuck rods, specified acceptable fuel design limits are not exceeded. The second reactivity control system shall be capable of reliably controlling the rate of reactivity changes resulting from planned, normal power changes (including xenon burnout) to assure acceptable fuel design limits are not exceeded. One of the systems shall be capable of holding the reactor core subcritical under cold conditions.Compliance Two reactivity control systems are provided. These are rod cluster control assemblies (RCCAs) and chemical shim (boric acid). The RCCAs are inserted into the core by the force of gravity.During operation the shutdown rod banks are fully withdrawn. The full length control rod system automatically maintains a programmed average reactor temperature compensating for reactivity effects associated with scheduled and transient load changes. The shutdown rod banks along with the full length control banks are designed to shutdown the reactor with adequate margin under conditions of normal operation and anticipated operational occurrences thereby ensuring that specified fuel design limits are not exceeded. The most restrictive period in core life is assumed in all analyses and the most reactive rod cluster is assumed to be in the fully withdrawn position.The boron system will maintain the reactor in the cold shutdown state independent of the position of the control rods and can compensate for xenon burnout transients.Details of the construction of the RCCAs are presented in Chapter 4 and the operation is discussed in Chapter 7. The means of controlling the boric acid concentration is described in Chapter 9. Performance analyses under accident conditions are included in Chapter 15.Criterion 27 - Combined Reactivity Control Systems Capability The reactivity control systems shall be designed to have a combined capability, in conjunction with poison addition by the emergency core cooling system, of reliably controlling reactivity changes to assure that under postulated accident conditions and with appropriate margin for stuck rods the capability to cool the core is maintained.ComplianceSufficient shutdown capability is provided to maintain the core subcritical for any anticipated cooldown transient, e.g., accidental opening of a steam bypass or relief valve, or safety valve stuck open. This shutdown capability is achieved by a combination of RCCA insertion and automatic boron addition via the emergency core cooling system with the most reactive control rod assumed to be fully withdrawn. Manually controlled boric acid addition is used to supplement the RCCA in maintaining the shutdown margin for the long-term conditions of xenon decay and plant cooldown. For further discussion, see Sections 4.3 and 7.2.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-17WATTS BARWBNP-86Criterion 28 - Reactivity LimitsThe reactivity control systems shall be designed with appropriate limits on the potential amount and rate of reactivity increase to assure that the effects of postulated reactivity accidents can neither (1) result in damage to the reactor coolant pressure boundary greater than limited local yielding nor (2) sufficiently disturb the core, its support structures or other reactor pressure vessel internals to impair significantly the capability to cool the core. These postulated reactivity accidents shall include consideration of rod ejection (unless prevented by positive means), rod dropout, steam line rupture, changes in reactor coolant temperature and pressure, and cold water addition.ComplianceThe maximum reactivity worth of control rods and the maximum rate of reactivity insertion employing control rods and boron removal are limited to values that prevent rupture of the reactor coolant system boundary or disruptions of the core or vessel internals to a degree that could impair the effectiveness of emergency core cooling.The appropriate reactivity insertion rate for the withdrawal of RCCA and the dilution of the boric acid in the reactor coolant systems are specified in the Technical Specifications for the facility. The specification includes appropriate graphs that show the permissible mutual withdrawal limits and overlap of functions of the several RCCA banks as a function of power. These data on reactivity insertion rates, dilution and withdrawal limits are also discussed in Section 4.3. The capability of the chemical and volume control system to avoid an inadvertent excessive rate of boron dilution is discussed in Chapter 9. The relationship of the reactivity insertion rates to plant safety is discussed in Chapter 15.Criterion 29 - Protection Against Anticipated Operational OccurrencesThe protection and reactivity control systems shall be designed to assure an extremely high probability of accomplishing their safety functions in the event of anticipated operational occurrences.ComplianceThe protection and reactivity control systems are designed to assure an extremely high probability of fulfilling their intended functions. The design principl es of diversity and redundancy coupled with a rigorous Quality Assurance Program and analyses support accomplishing this probability as does operating experience in plants using the same basic design. Section 4.2.3 and Sections 7.2 and 7.7 describe design bases and system design.
3.1.2.4  Fluid SystemsCriterion 30 - Quality of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed, fabricated, erected, and tested to the highest quality standards practical.
3.1-18CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86Means shall be provided for detecting and, to the extent practical, identifying the location of the source of reactor coolant leakage.ComplianceAll reactor coolant system components are designed, fabricated, inspected and tested in conformance with ASME Boiler and Pressure Vessel Code, Section III.Leakage is detected by an increase in the amount of makeup water required to maintain a normal level in the pressurizer. The reactor vessel closure joint is provided with a temperature monitored leakoff between double 0-rings. Leakage inside the reactor containment is drained to the Reactor Building sump where the level is monitored. Leakage is also detected by measuring the airborne activity and humidity of the containment.See Section 5.2 for compliance of reactor coolant system components with ASME Boiler and Pressure Vessel Code, Section III.Criterion 31 - Fracture Prevention of Reactor Coolant Pressure BoundaryThe reactor coolant pressure boundary shall be designed with sufficient margin to assure that when stressed under operating, maintenance, testing, and postulated accident conditions (1) the boundary behaves in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the boundary material under operating, maintenance, testing, and postulated accident conditions and the uncertainties in determining (1) material properties, (2) the effects of irradiation on material properties, (3) residual, steady-state and transient stresses, and (4) size of flaws.ComplianceClose control is maintained over material selection and fabrication for the reactor coolant system to assure that the boundary behaves in a nonbrittle manner. The reactor coolant system materials which are exposed to the coolant are corrosion resistant stainless steel or Inconel. The reference temperature RT NDT of the reactor vessel material samples is established by Charpy V-Notch Tensile and 1/2 T compact tension tests. These tests also insure that materials with proper toughness properties and margins are used.As part of the reactor vessel specification certain requirements which are not specified by the applicable ASME codes are performed, as follows:
(1)1.A complete independent review of the supplier stress analysis is conducted by Westinghouse on the reactor vessel. Independent stress analysis is conducted in selected areas to ascertain that the design conditions imposed by the Westinghouse specification have been adequately accounted for.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-19WATTS BARWBNP-89 (2)2.The reactor vessel received a complete stress analysis, including analysis for cyclic pressure and temperature operation. The ASME Boiler and Pressure Vessel Code, Section III, "Nuclear Power Plant Components," Class 1 rules to which these components are designed generally exempt them from cyclic analysis by code Paragraph NB-3222.4 (d).
(3)3.Welding Preheat Requirements - On the reactor vessel, the non-mandatory preheat requirements for P1 and P12 material were performed on all weldments.
(4)4.Reactor Vessel Out-of-Roundness Requirements - To ensure uniform coolant flow, the Westinghouse out-of-roundness requirements on the cylindrical region in the area of the thermal shield are above code. Section III, Class 1 out-of-roundness requirements are stated in Paragraph NB-4221.1 of the code. This referenced paragraph states that the difference in inches between the maximum and minimum inside diameters at any cross section shall not exceed the smaller of (D + 50)/200 and D/100, where D is the nominal inside diameter in inches at the cross section under consideration. Westinghouse required the out-of-roundness to be less than O.5 percent of the diameter in the cylindrical section of the vessel in the region of the thermal shield.Special requirements were imposed by Westinghouse on the quality control procedure for both the basic materials of construction, and on various sub-assemblies and final assembly for the reactor coolant loop components. These requirements supplemented the rules for quality assurance stated in the applicable design codes. Examples of the special quality assurance requirements for the reactor vessel that are beyond code requirements are:Ultrasonic Examinations (1)A 100-percent shear wave ultrasonic test of plate material.
(2)An ultrasonic test of cladding bond.
(3)Weld buildup areas to which the core support pads are attached are examined 100 percent.
(4)Selected areas of completed vessel are ultrasonically mapped after hydrotest to provide a base for future in-service inspection.
(5)Ultrasonic examination of the entire volume of all full penetration welds and heat affected zones in primary pressure boundary welds. The testing was done during fabrication upon completion of the welding and intermediate heat treatment.
3.1-20CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86Dye Penetrant Testing (1)Dye penetrant test all cladding surfaces and other vessel and head internal surfaces after hydrotest.
(2)Dye penetrant examine the weld between the bottom head and instrumentation tubes, after each layer of weld is deposited.
(3)Dye penetrant examine weld between CRDM housing and closure head and vent pipe and closure head after the first layer; each 1/4 inch of weld deposited and final surface.
(4)Dye penetrant examine weld between the lower core support pad and the vessel shell, after the first layer and each 1/2 inch of weld metal are deposited.
(5)Base metal or weld metal surfaces which are exposed to mechanical operations was dye penetrant or magnetic particle inspected.Magnetic Particle Testing (1)Magnetic particle examination of all exterior vessel and head surfaces after hydrotest.
(2)Magnetic particle examination of welds attaching the vessel supports, closure head lifting lugs, and refueling seal ledge to the reactor vessel, after the first layer and each 1/2 inch of weld metal are deposited.
(3)Magnetic particle examination of all closure stud surfaces after threading. Continuous circular and longitudinal magnetization was used.
(4)Magnetic particle examination of I.D. surfaces of carbon and low alloy steel products that have their properties enhanced by accelerated cooling. This inspection was performed after forming and prior to cladding.The fabrication and quality control techniques used in the fabrication of the reactor coolant system were equivalent to those for the reactor vessel. The inspections of reactor vessel, pressurizer, piping and steam generator were governed by ASME code requirements.The permissible pressure - temperature relationships for selected heatup and cooldown rates were calculated using the methods of ASME Code Section III Non-mandatory Appendix G. The change in RT NDT due to irradiation during plant life was calculated using conservative methods and will be verified periodically by surveillance program irradiated material test data.See Section 5.2 for further discussion of compliance.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-21WATTS BARWBNP-92Criterion 32 - Inspection of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed to permit (1) periodic inspection and testing of important areas and features to assess their structural and leak-tight integrity, and (2) an appropriate material surveillance program for the reactor pressure vessel.ComplianceThe design of the reactor coolant pressure boundary provides the capability for accessibility during service life to the entire internal surfaces of the reactor vessel, certain external zones of the vessel including the nozzle to reactor coolant piping welds and the top and bottom heads, and external surfaces of the reactor coolant piping except for the area of pipe within the primary shielding concrete. The inspection capability complements the leakage detection systems in assessing the pressure boundary component's integrity. The reactor coolant pressure boundary will be periodically inspected under the provision of ASME Code, Section XI.The RT NDT properties of the reactor vessel core region forging, weldments and associated heat treated zones will be monitored by a surveillance program which is based on ASTM-E-185, Recommended Practice for Surveillance Testing on Structural Materials in Nuclear Reactors. Samples of reactor vessel plate materials will be retained and catalogued in case future engineering development shows the need for further testing.The material properties surveillance program includes not only the conventional tensile and impact tests, but also fracture mechanics specimens. The observed shifts in RTNDT of the core region materials with irradiation will be used to confirm the calculated limits to startup and shutdown transients.To define permissible operating conditions below RTNDT, a pressure range was established which is bounded by a lower limit for pump operation and an upper limit which satisfies reactor vessel stress criteria. To allow for thermal stresses during heatup or cooldown of the reactor vessel, an equivalent pressure limit was defined to compensate for thermal stress as a function of rate of change of coolant temperature.
Since the normal operating temperature of the reactor vessel is well above the maximum expected RT NDT, brittle fracture during normal operation is not considered to be a credible mode of failure. Additional details can be found in Section 5.2.Criterion 33 - Reactor Coolant Makeup A system to supply reactor coolant makeup for protection against small breaks in the reactor coolant pressure boundary shall be provided. The system safety function shall be to assure that specified acceptable fuel design limits are not exceeded as a result of reactor coolant loss due to leakage from the reactor coolant pressure boundary and rupture of small piping or other small components which are part of the boundary. The system shall be designed to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be 3.1-22CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92accomplished using the piping, pumps, and valves used to maintain coolant inventory during normal reactor operation.ComplianceThe chemical and volume control system includes charging pumps and makeup paths that serve the safety function of maintaining reactor coolant inventory during normal operations and in the event of small reactor coolant leakages. The charging pumps can maintain reactor coolant pressure sufficiently high to allow orderly reactor shutdown for small tubing or small pipe breaks. Chapter 5 discusses the reactor coolant system, Section 9.3.4 discusses the chemical and volume control system, and Chapter 15 analyzes charging pump performance and fuel damage in event of postulated accidents. The offsite power system and onsite power system are discussed in Sections 8.2 and 8.3, respectively.Criterion 34 - Residual Heat Removal (RHR)A system to remove residual heat shall be provided. The system safety function shall be to transfer fission product decay heat and other residual heat from the reactor core at a rate such that specified acceptable fuel design limits and the design conditions of the reactor coolant pressure boundary are not exceeded.Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.ComplianceThe RHR system includes two redundant trains of pumps and heat exchangers each having sufficient heat removal capability to ensure fuel protection. The system is Seismic Category I and is provided electric power by either the preferred power system or the diesel generators of the standby power system. The normal steam and power conversion system is used for the first stage cooldown (i.e., above 350 EF and 400 psig). The auxiliary feedwater system provides guaranteed backup of the steam and power conversion system in this function. The systems together accommodate the


single-failure criterion.Section 5.5.7 describes the RHR System.Criterion 35 - Emergency Core Cooling A system to provide abundant emergency core cooling shall be provided. The system safety function shall be to transfer heat from the reactor core following any loss of reactor coolant at a rate such that (1) fuel and clad damage that could interfere with continued effective core cooling is prevented and (2) clad metal-water reaction is limited to negligible amounts.
Compliance The plant is designed to minimize the probability of fires and explosions, and in the event of such occurrences to minimize the potential effects of such events to plant safety related equipment and personnel. Prime consideration was given to these requirements throughout the design process by providing for the duplication and physical separation of components in plant design and the use of materials classified as noncombustible and/or fire resistant wherever practical in safety-related areas of the plant. Equipment and facilities for fire protection, including detection, alarm, and extinguishment, are provided to protect both plant-equipment and personnel from fire, explosion, and the resultant release of toxic vapors. Fire-fighting systems are designed to assure that their rupture or inadvertent operation will not significantly impair systems important to safety. Portions of the fire-protection systems necessary to protect safety-related equipment in Class I structures are designed to seismic requirements.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-23WATTS BARWBNP-92Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.ComplianceThe Emergency Core Cooling System (ECCS) design and safety analysis is in accordance with the NRC Acceptance Criterion for Emergency Core Cooling System for Light-Water Power Reactors of December 1973 (10 CFR 50.46).By combining the use of passive accumulators, centrifugal charging pumps, safety injection pumps, and residual heat removal pumps, emergency core cooling is provided even if there should be a failure of any component in any system. The ECCS employs passive system of accumulators which do not require any external signals or source of power. Two independent and redundant pumping systems are also provided to supplement the passive accumulator system. These systems are arranged to that the single failure of any active component does not prevent meeting the short-term cooling requirements.The primary function of the ECCS is to deliver borated cooling water to the reactor core in the event of a LOCA. This limits the fuel-clad temperature and thereby ensures that the core will remain intact and in place and fuel damage will not exceed that stipulated as a basis in the safety analysis (Chapter 15). This protection is afforded for:
The Fire Protection Systems provided are:
(1)All pipe break sizes up to and including the hypothetical circumferential rupture of a reactor coolant loop, (2)A loss of coolant associated with a rod ejection accident.The ECCS is described in Section 6.3. TheLOCA, including an evaluation of consequences, is discussed in Chapter 15.Criterion 36 - Inspection of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic inspection of important components, such as spray rings in the reactor pressure vessel, water injection nozzles, and piping, to assure the integrity and capability of the system.ComplianceDesign provisions facilitate access to the critical parts of the reactor vessel internals, injection nozzles, pipes and valves for visual or nondestructive inspection.The components outside the containment are accessible for leaktightness inspection during operation of the reactor.
(1)   High pressure water, (2)   Carbon dioxide, and (3)   Portable extinguishers.
3.1-24CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92Details of the inspection program for the reactor vessel internals are included in Section 5.4. Inspection of the ECCS is discussed in Section 6.3.Criterion 37 - Testing of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.ComplianceThe design provides for periodic testing of both active and passive components of the ECCS.Proof tests of the components were performed in the manufacturer's shop. Preoperational system hydrostatic and performance tests demonstrate structural and leaktight integrity of components and proper functioning of the system. Thereafter, periodic tests demonstrate that components are functioning properly.Design provisions include special instrumentation, testing, and sampling lines to perform the tests during plant shutdown to demonstrate proper automatic operation of the ECCS.Each active component of the ECCS may be individually actuated on the normal power source at any time during plant operation to demonstrate operability. Components are actuated on the emergency power system during preoperational tests and subsequently during plant shutdown per Technical Specifications.Details of the ECCS are found in Section 6.3, with periodic testing procedures  identified in Section 6.3.4. Performance under accident conditions is evaluated in Chapter 15.Criterion 38 - Containment Heat RemovalA system to remove heat from the reactor containment shall be provided. The system safety function shall be to reduce rapidly, consistent with the functioning of other associated systems, the containment pressure and temperature following any LOCA and maintain them at acceptably low levels.Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
The Fire Protection System is designed such that a failure of any component of the system or inadvertent operation:
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-25WATTS BARWBNP-92ComplianceSystems are provided to effect post-accident containment heat removal. The systems are classified as engineered safety features and as such incorporate a large degree of redundancy as well as being provided with multiple power supplies.Containment heat removal is provided by the ice condenser and by containment sprays. The ice condenser is a passive system consisting of energy absorbing ice on which steam is condensed during and immediately after a LOCA. The condensation of steam on the ice limits the pressure and temperature to values less than containment design.An air return system is used to circulate the containment gaseous inventory through the upper compartment, lower compartment, and ice condenser after the initial blowdown. This maintains proper mixing of the containment air and steam with the heat removal media, spray and ice, for the necessary heat removal.The containment spray system sprays coolant automatically into the upper compartment containment atmosphere in the event of a large LOCA, thereby removing containment heat. The recirculation mode allows for a long-term heat removal by means of two spray systems, each of which contains redundant components including spray headers. The containment spray system consists of two completely separate trains consisting of pumps, heat exchangers, valves, and headers. The containment spray system is initiated automatically upon containment high pressure and is later manually realigned for proper operation in the recirculation mode. The residual heat removal spray contains two spray headers which are supplied from separate trains of the residual heat removal system by manual diversion of a portion of the low-pressure safety injection system flow during recirculation.The loss of a single active component was assumed in the design of these systems. Emergency power system arrangements assure the proper functioning of the air return fan system, and the containment spray system and residual heat removal sprays.The engineered safety features systems are discussed in Chapter 6; the electric power systems in Chapter 8; the protection systems in Chapter 7.Criterion 39 - Inspection of Containment Heat Removal SystemThe containment heat removal system shall be designed to permit appropriate periodic inspection of important components, such as the torus, pumps, spray nozzles, and piping to assure the integrity and capability of the system.ComplianceThe ice condenser design includes provisions for visual inspections of the ice bed flow channels, doors, and cooling equipment. The air return fan system provides for visual inspection of the fans and the associated backflow dampers and for duct systems that are not embedded in concrete. The containment spray system and the  RHR sprays are designed such that active and passive components can be readily inspected to demonstrate system readiness. Pressure contained systems are inspected for leaks 3.1-26CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92from pump seals, valve packing, flange joints, and relief valves. During operational testing of the containment spray pumps and RHR pumps, the portions of the systems subjected to pressure are inspected for leaks.System design details are given in Section 6.2.Criterion 40 - Testing of Containment Heat Removal SystemThe containment heat removal system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole, and, under conditions as close to the design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.ComplianceThe containment heat removal systems described in Section 6.2 are designed to permit periodic testing so that proper operation can be assured. In some cases whole systems can be operated for test purposes. In others, individual components are operated for functional tests so that plant operations are not disrupted.The ice condenser contains no active components, other than the ice condenser doors, which are required to function during an accident condition. Samples of the ice are taken periodically and tested for boron concentration. The lower inlet door opening force is measured when the reactor is in the shutdown condition. The position of the lower inlet doors is monitored at all times. Top deck door and intermediate deck doors are tested for operability during the shutdown condition. Air return fans and their associated backflow dampers are tested for operability while the reactor is shut down for refueling.All active components of the containment spray system and the residual heat removal spray system are tested in place after installation. These spray systems receive initial flow tests to assure proper dynamic functioning. Further testing of the active components is conducted after component maintenance and in accordance with technical specifications. Air test lines, located upstream of the spray isolation valves, are provided for testing to assure that spray nozzles are not obstructed. Testing of transfer between normal and emergency power supplies is also conducted. Criterion 41 - Containment Atmosphere CleanupSystems to control fission products, hydrogen, oxygen, and other substances which may be released into the reactor containment shall be provided as necessary to reduce, consistent with the functioning of other associated systems, the concentration and quality of fission products released to the environment following postulated accidents, and to control the concentration of hydrogen or oxygen and other substances in the containment atmosphere following postulated accidents to assure that containment integrity is maintained.
(1)   Does not cause a nuclear accident or significant release of radioactivity to the environment.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-27WATTS BARWBNP-92Each system shall have suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) its safety function can be accomplished, assuming a single failure.ComplianceThe Shield Building, surrounding the primary containment, serves as a  secondary containment. During accident conditions prior to containment isolation, primary and secondary containment purge exhaust is processed by the containment purge system filters prior to release to the atmosphere. The  emergency gas treatment system (Section 6.2) maintains this secondary containment at a negative pressure during the entire post-accident period. The emergency gas treatment system also collects and processes the secondary containment atmosphere. After processing, the portion of this processed air necessary to assure a negative pressure is exhausted through the Shield Building exhaust vent. The remainder is recirculated and distributed in the secondary containment.The Auxiliary Building serves to collect any equipment leakage during the recirculation of containment sump water. The Auxiliary Building ventilation system (Section 9.4) is isolated by the containment Phase A isolation signal. The AuxiliaryBuilding gas treatment system (Section 9.4) then maintains the building at a negative pressure and processes any inleakage prior to release to the environment.Post-accident hydrogen control within the containment is provided by an electrical hydrogen recombiner (Section 6.2). Distribution of the atmosphere within the containment is provided by the air return fan system (Section 6.8). The air return fan system also takes suction from each compartment to prevent stagnation and excessive accumulation of hydrogen.Criterion 42 - Inspection of Containment Atmosphere Cleanup SystemsThe containment atmosphere cleanup systems shall be designed to permit appropriate periodic inspection of important components, such as filter frames, ducts, and piping, to assure the integrity and capability of the systems.ComplianceThe emergency gas treatment system (Section 6.2) filtration train and fans and the containment purge filters (Section 9.4.6) are located in the Auxiliary Building and are designed to facilitate inspections. The dampers that control recirculation and exhaust of the emergency gas treatment system effluent are located inside the Shield Building and may be inspected during reactor shutdown.The entire Auxiliary Building gas treatment system (Section 9.4.2) is located in the Auxiliary Building and is designed to facilitate inspection. The electric hydrogen recombiners (Section 6.2.5) are located inside the containment and may he inspected during reactor shutdown.
(2)   Does not impair the ability of equipment to safely shutdown and isolate the reactor or limit the releases of radioactivity to the environment in the event of a postulated accident.
3.1-28CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92Criterion 43 - Testing of Containment Atmosphere Cleanup Systems The containment atmosphere cleanup systems shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the systems such as fans, filters, dampers, pumps, and valves, and (3) the operability of the systems as a whole and, under conditions as close to design as practical, the performance of the full operational sequence that brings the systems into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of associated systems.ComplianceThe containment purge system (Section 9.4) is designed to permit testing to assure leaktightness of the filter trains; functional testing to assure operability of containment isolation valves; and performance testing to assure filter efficiency and to demonstrate the isolation valve closure in response to the accident mode isolation signal.The emergency gas treatment system (Section 6.2) is designed to permit testing to assure leaktightness of the filtration trains; functional testing to assure operability of the fans, dampers, and instrumentation; and performance testing to assure overall operability of the system and to demonstrate the proper alignment of the system to the accident unit.The AuxiliaryBuilding gas treatment system (section 9.4) is designed to allow testing to assure the pressure and leaktightness of the filters, adsorbers, and the filtration train housing to assure the operability of the fans and dampers; and to assure the operability of the system as a whole. The system design will permit testing of the actuation signals, the isolation of the normal ventilation system, and the proper alignment of dampers.The hydrogen recombiner system (Section 6.2.5) and hydrogen mitigation system (Section 6.2.5A) are designed to allow testing to assure the operability of the manual controls that place the systems in operation, and to assure the power supply and the operability of the electric heaters. The systems are designed to permit, under conditions as close to design as practical, the operability of each system as a whole.Criterion 44 - Cooling WaterA system to transfer heat from structures, systems, and components important to safety, to an ultimate heat sink shall be provided. The system safety function shall be to transfer the combined heat load of these structures, systems, and components under normal operating and accident conditions.Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
The Fire Protection Systems for the Watts Bar Nuclear Plant are discussed in Section 9.5.1. Protection from fire in the control room is discussed in Section 6.4.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-29WATTS BARWBNP-92ComplianceA Seismic Category I Component Cooling System (CCS) (Section 9.2) is provided to transfer heat from the reactor coolant system reactor support equipment and engineered safety equipment to a Seismic Category I Essential Raw Cooling Water (ERCW) system (Section 9.2).The CCS serves as an intermediate system and thus a barrier between potentially or normally radioactive fluids and the river water which flows in the ERCW system.The CCS consists of two independent engineered safety subsystems, each of which is capable of serving all necessary loads under normal or accident conditions.In addition to serving as the heat sink for the CCS, the ERCW system is also used as heat sink for the containment through use of the containment spray heat exchangers, and engineered safety equipment through use of compartment and space coolers. The ERCW system consists of two independent trains, each of which is capable of providing all necessary heat sink requirements. The ERCW system transfers heat to the ultimate heat sink (Section 9.2).Electric power is discussed in Chapter 8.Criterion 45 - Inspection of Cooling Water System The cooling water system shall be designed to permit appropriate periodic inspection of important components, such as heat exchangers and piping, to assure the integrity and capability of the system.ComplianceThe integrity and capability of the component cooling water system (Section 9.2) and essential raw cooling water system (Section 9.2) will be monitored during normal operation by the Surveillance Instruction Program. Nonsafety related systems may be isolated temporarily for inspection. All major components will be visually inspected on a periodic basis.The component cooling and essential raw cooling water pumps are arranged such that any pump may be isolated for inspection and maintenance while maintaining full plant operational capabilities.Criterion 46 - Testing of Cooling Water System The cooling water system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and the performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation for reactor shutdown and for LOCAs, including operation of applicable portions of the protection system and the transfer between normal and emergency power sources.
Criterion 4 - Environmental and Missile Design Bases Structures, systems, and components important to safety shall be designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents, including loss-of-coolant accidents (LOCAs). These structures, systems, and components shall be appropriately protected against dynamic effects, including the effects of missiles, pipe whipping, and discharging fluids, that may result from equipment failures and from events and conditions outside the nuclear power unit.
3.1-30CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92ComplianceThe cooling water systems will be pressurized during plant operations; thus, the structural and leaktight integrity of each system and the operability and performance of their active components will be continuously demonstrated. In addition, normally idle portions of the piping system and idle components will be tested during plant shutdown. The emergency functions of the systems will be periodically tested out to the final actuated device in accordance with the technical specifications.For details, see the discussions on electric power (Chapter 8), component cooling water (Section 9.2), essential raw cooling water (Section 9.2), and instrumentation and controls (Chapter 7).3.1.2.5  Reactor ContainmentCriterion 50 - Containment Design Basis The reactor containment structure, including access openings, penetrations, and the containment heat removal system shall be designed so that the containment structure and its internal compartments can accommodate, without exceeding the design leakage rate and, with sufficient margin, the calculated pressure and temperature conditions resulting from any LOCA. This margin shall reflect consideration of (1) the effects of potential energy sources which have not been included in the determination of the peak conditions, such as energy in steam generators and energy from metal-water and other chemical reactions that may result from degraded emergency core cooling functioning, (2) the limited experience and experimental data available for defining accident phenomena and containment responses, and (3) the conservatism of the calculational model and input parameters.ComplianceThe containment structure, including access openings and penetrations, is designed with sufficient conservatism to accommodate, without exceeding the design leakage rate, the transient peak pressure and temperature associated with a postulated reactor coolant piping break up to and including a double-ended rupture of the largest reactor coolant pipe.The containment design consists of a freestanding steel containment vessel and a separate outer reinforced concrete shield wall and roof. The ice condenser concept is used for energy absorption during a LOCA. The annular space between the containment vessel and the exterior shield wall forms a double barrier to fission products and is maintained at less than atmospheric pressure. The ice condenser, which is located inside the steel containment and consists of a suitable quantity of borated ice in a cold storage compartment, provides rapid energy absorption to maintain the containment vessel design pressure at a low level and to reduce the peak duration, thus reducing the potential for escape of fission products from the primary containment vessel.The functional design of the containment is based upon the following assumptions and conditions:
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                   3.1-3
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-31WATTS BARWBNP-86 (1)A design basis blowdown energy and mass release.
(2)Secondary energy released by safety injection.
(3)Carryover energy from zirconium-water reaction.
(4)Decay heat from the reactor at rated power.
(5)The single failure criterion is accommodated.The internal design pressure of the containment is greater than the peak pressure occurring as the result of the complete blowdown of the reactor coolant through any rupture of the reactor coolant system up to and including the hypothetical double-ended severance of the largest reactor coolant pipe. The design pressure is not exceeded during any subsequent long-term pressure transient.Refer to Section 3.8 for a description of containment, and to Section 6.2 for design basis details.Criterion 51 - Fracture Prevention of Containment Pressure BoundaryThe reactor containment boundary shall be designed with sufficient margin to assure that under operating, maintenance, testing, and postulated accident conditions (1) its ferritic materials behave in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the containment boundary material during operation, maintenance, testing, and postulated accident conditions, and the uncertainties in determining (1) material properties, (2) residual, steady-state, and transient stresses, and (3) size of flaws.ComplianceThe containment vessel and its penetration sleeves meet the material, design and technical process requirements of ASME Boiler and Pressure Vessel Code, Section III, Class B. Charpy V-notch impact tests were made of the containment vessel material (ASTM A 516, Grade 70) 5/8 inch and greater, weld deposit, and the base metal weld heat affected zone employing a test temperature at least 30 E F below minimum service temperature in accordance with ASME Code, Paragraph N-1210. This test measured the ductile to brittle transition with allowable values for energy absorption given in Tables N-421 and N-422. It insures that the material used will not behave in a brittle manner and that rapidly propagating fracture is minimized. The containment boundary design considered uncertainties in material properties, residual, steady-state and transient stresses, and material flaws along with conservative allowable stress levels for all stressed elements of the containment boundary. All material was examined for flaws that would adversely affect the performance of the material in its intended location. See Section 6.2 for further details.
3.1-32CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86Criterion 52 - Capability for Containment Leakage Rate TestingThe reactor containment and other equipment which may be subjected to containment test conditions shall be designed so that periodic integrated leakage rate testing can be conducted at containment design pressure.ComplianceThe reactor containment design permitted overpressure strength testing during construction and permits preoperational integrated leakage rate testing at containment design pressure and at reduced pressure, in accordance with Appendix J, 10 CFR 50. The reactor containment and other equipment which may be subjected to containment test conditions are designed so that periodic integrated leakage rate testing can be conducted at containment design pressure. All equipment which may be subjected to the test pressure is either vented to the containment, removed from the containment during the test, or designed to withstand the containment design pressure without damage.The preoperational integrated leak tests at peak pressure verify that the containment, including the isolation valves and the resilient penetration seals, leaks less than the allowable value of 0.25 weight percent per day at peak pressure.Details concerning the conduct of periodic integrated leakage rate tests are in Section 6.2.Criterion 53 - Provisions for Containment Testing and InspectionThe reactor containment shall be designed to permit (1) appropriate periodic inspection of all important areas, such as penetrations, (2) an appropriate surveillance program, and (3) periodic testing at containment design pressure of the leaktightness of penetrations which have resilient seals and expansion bellows.ComplianceThe reactor containment and the containment isolation system (Section 6.2) are designed so that:
(1)1.Integrated leak rate tests can be run during plant lifetime (see compliance to Criterion 52).
(2)2.Visual inspections can be made of all important areas, such as penetrations.
(3)3.An appropriate surveillance program can be maintained (see Section 6.2).
(4)4.Periodic testing at containment design pressure of the leaktightness of isolation valves and penetrations which have resilient seals and expansion bellows is possible.
(5)5.The operability of the containment isolation system can be demonstrated periodically.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-33WATTS BARWBNP-79In testing locally the resilient seals and expansion bellows leakages, the guidelines for Type B tests in Appendix J to 10 CFR 50 will be followed.Criterion 54 - Piping Systems Penetrating ContainmentPiping systems penetrating primary reactor containment shall be provided with leak detection, isolation, and containment capabilities having redundance, reliability, and performance capabilities which reflect the importance to safety of isolating these piping systems. Such piping systems shall be designed with a capability to test periodically the operability of the isolation valves and associated apparatus and to determine if valve leakage is within acceptable limits.ComplianceContainment isolation features are classified as Seismic Category I. These components required quality assurance measures which enhance reliability. The containment isolation design provides for a double barrier at the containment penetration in those fluid systems that are not required to function following a design basis event.All piping systems penetrating the containment, in so far as practical, have been provided with test vents and test connections or have other provisions to allow periodic leak testing as required. Section 6.2.4.4 has further details on testing.See Section 6.2.4 for general containment isolation details and Section 6.2.4.3 for exceptions to General Design Criteria 54, 55, 56, and 57.Criterion 55 - Reactor Coolant Pressure Boundary Penetrating Containment Each line that is part of the reactor coolant pressure boundary and that penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provisions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis: (1)One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2)One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3)One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4)One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.
3.1-34CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-86Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.Other appropriate requirements to minimize the probability or consequences of an accidental rupture of these lines or of lines connected to them shall be provided as necessary to assure adequate safety. Determination of the appropriateness of these requirements, such as higher quality in design, fabrication, and testing, additional provisions for inservice inspection, protection against more severe natural phenomena, and additional isolation valves and containment, shall include consideration of the population density, use characteristics, and physical characteristics of the site environs.ComplianceThe reactor coolant pressure boundary is defined as those piping systems and components which contain reactor coolant as design pressure and temperature. With the exception of the reactor coolant sampling lines, the entire reactor coolant pressure boundary, as defined above, is located entirely within the containment structure. All sampling lines are provided with remotely operated valves for isolation in the event of a failure. These valves also close automatically on a containment isolation signal.All other piping and components which may contain reactor coolant are low pressure, low temperature systems which would yield minimal environmental doses in the event of failure.The sampling system and low-pressure systems are described in Section 9.3. An analysis of malfunctions in these systems is included in Chapter 15.Criterion 56- Primary Containment IsolationEach line that connects directly to the containment atmosphere and penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provis ions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis:
(1)One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2)One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3)One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4)One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-35WATTS BARWBNP-92Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.ComplianceAt least two barriers are provided between the atmosphere outside the containment and the containment atmosphere, the reactor coolant system, or closed systems which are assumed vulnerable to accident forces.Redundant valving is provided for piping that is open to the atmosphere and to the containment atmosphere. Additional details can be found in Section 6.2.Criterion 57 - Closed Systems Isolation ValvesEach line that penetrates primary reactor containment and is neither part of the reactor coolant pressure boundary nor connected directly to the containment atmosphere shall have at least one containment isolation valve which shall be either automatic, or locked closed, or capable of remote manual operation. This valve shall be outside containment and located as close to the containment as practical. A simple check valve may not be used as the automatic isolation valve.ComplianceThose lines that penetrate the containment, that do not communicate with either the reactor coolant pressure boundary or the containment atmosphere, and that are not affected byLOCA forces, are defined as closed systems. All lines penetrating the containment are designed to meet this GDC.See Section 6.2.4 for a discussion of containment isolation valves.3.1.2.6  Fuel and Ra dioactivity ControlCriterion 60 - Control of Releases of Radioactive Materials to the EnvironmentThe nuclear power unit design shall include means to control suitably the release of radioactive materials in gaseous and liquid effluents and to handle radioactive solid wastes produced during normal reactor operation, including anticipated operational occurrences. Sufficient holdup capacity shall be provided for retention of gaseous and liquid effluents containing radioactive materials, particularly where unfavorable site environmental conditions can be expected to impose unusual operational limitations upon the release of such effluents to the environment.ComplianceLiquid, gaseous, and solid radioactive waste processing equipment is provided. The principles of filtration, demineralization, evaporation, solidification and storage for decay are utilized as described in Chapter 11. Process monitoring is provided to control this equipment and regulate releases to the environment as described in Section 11.4.
3.1-36CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92Criterion 61 - Fuel Storage and Handling and Radioactivity Control The fuel storage and handling, radioactive waste, and other systems which may contain radioactivity shall be designed to assure adequate safety under normal and postulated accident conditions. These systems shall be designed (1) with a capability to permit appropriate periodic inspection and testing of components important to safety, (2) with suitable shielding for radiation protection, (3) with appropriate containment, confinement, and filtering systems, (4) with a residual heat removal capability having reliability and testability that reflects the importance to safety of decay heat and other residual heat removal, and (5) to prevent significant reduction in fuel storage coolant inventory under accident conditions.ComplianceThe spent fuel pool and cooling system, fuel handling system, radioactive waste processing systems, and other systems that contain radioactivity are designed to assure adequate safety under normal and postulated accident conditions.
(1)Components are designed and located such that appropriate periodic inspection and testing may be performed.
(2)All areas of the plant are designed with suitable shielding for radiation protection based on anticipated radiation dose rates and occupancy as discussed in Section 12.1.
(3)Individual components which contain significant radioactivity are located in confined areas which are adequately ventilated through appropriate filtering systems.(4)The spent fuel cooling systems provide cooling to remove residual heat from the fuel stored in the spent fuel pool. The system is designed for testability to permit continued heat removal.
(5)The spent fuel pool is designed such that no postulated accident could cause excessive loss of coolant inventory.Radioactive waste treatment systems are located in the Auxiliary Building, which contains or confines leakage under normal and accident conditions.The Auxiliary Building gas treatment system includes charcoal filtration which minimizes radioactive material release associated within a postulated spent fuel handling accident.Fuel storage and handling is discussed in Section 9.1, and radioactive waste management in Chapter 11.Criterion 62 - Prevention of Criticality in Fuel Storage and Handling Criticality in the fuel storage and handling system shall be prevented by physical systems or processes, preferably by use of geometrically sa fe configurations.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-37WATTS BARWBNP-92ComplianceThe restraints and interlocks provided for safe handling and storage of new or spent fuel are discussed in Section 9.1.The center-to center distance between adjacent spent fuel assemblies together with the use of fixed Boral neutron absorber panels in the storage racks and burnup credit administrative controls on fuel assembly placement are sufficient to ensure subcriticality, even if unborated water is used to fill the spent fuel storage pool. Credit for borated water is permitted to maintain subcriticality for inadvertent misplacement of a fuel assembly, e.g., loading of a fresh fuel assembly in a storage cell designated for exposed fuel or placement outside of and adjacent to a rack module.Layout of the fuel handling area is such that the spent fuel casks will never be required to traverse the spent fuel storage pool during removal of the spent fuel assemblies.Criterion 63 - Monitoring Fuel and Waste StorageAppropriate systems shall be provided in fuel storage and radioactive waste systems and associated handling area (1) to detect conditions that may result in loss of residual heat removal capability and excessive radiation levels and (2) to initiate appropriate


safety actions.ComplianceFailure in the spent fuel pool cooling system will result in control room annunciators and local temperature indication and high radiation in the spent fuel storage area will produce a local and control room alarm. The operator can then take appropriate action to alleviate the situation. High radiation in the radioactive waste area will produce a local alarm enabling notification of the operator to allow appropriate action to be taken.See Sections 9.1 and 12.3 and Chapter 11 for further details.Criterion 64  Monitoring Radioactivity ReleasesMeans shall be provided for monitoring the reactor containment atmosphere, spaces containing components for recirculation of LOCA fluids, effluent discharge paths, and the plant environs for radioactivity that may be released from normal operations, including anticipated operational occurrences, and from postulated accidents.ComplianceThe facility contains means for monitoring the containment atmosphere and all other important areas during both normal and accident conditions to detect and measure radioactivity which could be released under any conditions. The monitoring system includes area gamma monitors, atmospheric monitors and liquid monitors with full indication in the control room. Alarms are provided to warn of high radioactivity.Chapter 11 discusses the process and effluent radiation monitoring systems. Chapter 12 discusses the area and airborne radiation monitoring systems.
Compliance This criterion has been implemented as amended and published in the Federal Register, Volume 52, Number 207, October 27, 1987, 41288, which added the following:
3.1-38CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA WATTS BARWBNP-92REFERENCES None CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-1WATTS BARWBNP-92 3.2  CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2.1  Seismic ClassificationsThe Watts Bar Nuclear Plant structures, systems, and components which perform a primary safety function have been designed to remain functional in the event of a Safe Shutdown Earthquake (SSE). These structures, systems, and components, designated as Seismic Category I, are those necessary to assure:
          "However, dynamic effects associated with postulated pipe ruptures in nuclear power units may be excluded from the design basis when analyses reviewed and approved by the Commission demonstrate that the probability of fluid system piping rupture is extremely low under conditions consistent with the design basis for the piping."
(1)The integrity of the reactor coolant pressure boundary.
Structures, systems, and components important to safety are designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents.
(2)The capability to shut down the reactor and maintain it in a safe shutdown condition, or (3)The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures comparable to or in excess of the guideline exposures of 10 CFR Part 100.These structures, systems, and components are classified in accordance with Regulatory Guide 1.29 unless exception is taken in detailed classificaition information provided in other sections of the FSAR, such as Table 3.2-2a, 3.2-6, etc.Piping, pumps, valves, and other fluid system components which must retain limited structural integrity because their failure could jeopardize to an unacceptable extent the achievement of a primary safety function, because they form an interface between Seismic Category I and non-Seismic Category I plant features, or because they perform a secondary safety function, are designated by TVA as Seismic Category I(L) (i.e., limited requirements). Those fluid containing elements which are included in Seismic Category I(L) are seismically qualified to meet the intent of Position 2 of Regulatory Guide 1.29. Where portions of mechanical systems are Category I or I(L) and the remaining portions not seismically classified, the systems have been seismically qualified to a terminating anchor (or other appropriate analysis problem termination) beyond the defined boundary such as a valve, thus meeting Position 3 of Regulatory Guide 1.29.All Category I safety-related structures, and portions of mechanical and electrical systems and components are listed in Tables 3.2-1, 3.2-2, 3.2-2a, 3.2-2b and 3.2-3. Those Category I(L) portions of mechanical systems are also listed in Table 3.2-2.
The associated environmental parameters are identified and incorporated in the design requirements and specifications. Particular care was given to the extreme environmental conditions associated with major incidents such as LOCAs. Required equipment and instrumentation are identified, environmental conditions such as temperature, pressure, humidity, and irradiation, are calculated, and the effects of the latter on the former were evaluated either analytically or experimentally. The dynamic effects associated with an accident were carefully identified and assurance given that the structures and systems (including engineered safeguards) assumed undamaged in the total assessment of the accident consequences are suitably protected.
3.2.2  System Qual ity Group ClassificationFluid system components for the Watts Bar Nuclear Plant that perform a primary safety function are identified by TVA Classes A, B, or C (see Section 3.2.2.7 for HVAC Safety Classifications). These piping classes are assigned to fluid systems based on the ANS Safety Classes 1, 2a, and 2b, respectively, which are assigned to nuclear power plant equipment per the August 1970 Draft of ANSI N18.2, "Nuclear Safety Criteria for the Design of Stationary Pressurized Water Reactor Plants."  Fluid system components whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to
Emergency core cooling components are austenitic stainless steel or equivalent corrosion resistant material and hence are compatible with the containment atmosphere over the full range of exposure during the postaccident conditions.
Where vital components cannot be located away from potential missiles, protective walls and slabs, local missile shielding, and restraining devices are provided to protect the containment and engineered safety feature components within the containment against damage from missiles generated by the equipment failures associated with the design basis accident (DBA).
The environmental design of safety-related items is discussed in Section 3.8 on the design of structures; Sections 6.2.2 and 6.2.3 on containment heat removal and air purification; and Section 9.4 on ventilation systems. Safety- related systems and components used the input from these sections for design as discussed in Section 3.11. Missile and environmental protection is discussed in Sections 3.5 and 3.11, respectively.
Criterion 5 - Sharing of Structures, Systems, and Components Structures, systems, and components important to safety shall not be shared among nuclear power units unless it is shown that such sharing will not impair significantly their ability to perform their safety functions, including, in the event of an accident in one unit, an orderly shutdown and cooldown of the remaining units.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


3.2-2CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-89the whole body, or its equivalent to any part of the body, are identified as TVA Class D and are based on ANSI N18.2 (Aug., 1970 draft) Safety Class 3 and Regulatory Guide 1.26. The TVA piping classification system for WBNP does not conform strictly to the guidance of Regulatory Guide 1.26 (which was not in effect on the docket date for the Construction Permit). The ANS safety classification of each component has been considered in the various aspects of design, fabrication, construction, and operation.
Compliance The structures important to safety that are shared are the Auxiliary Building (Section 3.8), Control Building (Section 3.8), Diesel Generator Building (Section 3.8), and the intake pumping station (Section 3.8). Shared safety- related systems include the essential raw cooling water (Section 9.2), component cooling water (Section 9.2), fire protection (Section 9.5), spent fuel cooling (Section 9.1), fuel oil storage tanks (Section 9.5), preferred and emergency electric power (Section 8.2 and 8.3, respectively),
3.2.2.1  Class AClass A applies to reactor coolant pressure boundary components whose failure could cause a loss of reactor coolant which would not permit an orderly reactor shutdown and cool down assuming that makeup is only provided by the normal makeup system. Branch piping 3/8 inch inside diameter and smaller, or protected by a 3/8 inch diameter or smaller orifice, is exempted from Class A  requirements. The branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller) is also exempted from Class A requirements.The components which are within the Reactor Coolant Pressure Boundary (RCPB) and meet all the following requirements may be classified as TVA Class G:
chemical and volume control (Section 9.3), radioactive waste (Chapter 11), emergency gas treatment system (Sections 6.2 and 6.5), and control and Auxiliary Building ventilation systems (Section 6.4). The vital dc power system is shared to the extent that a few loads (e.g., the vital inverters) in one nuclear unit are energized by the dc power channels assigned primarily to power loads of the other unit. In no case does the sharing inhibit the safe shutdown of one unit while the other unit is experiencing an accident. All shared systems are sized for all credible initial combinations of normal and accident states for the two units, with appropriate isolation to prevent an accident condition in one unit from carrying into the other. During the period of time when unit 1 is licensed and unit 2 is unlicensed, all portions of systems and structures important to the safe operation and safe shutdown of unit 1 will be isolated and protected. For systems which are shared and have interface points, a means is provided for isolating and protecting the portions required for unit 1 operation and safe shutdown from the balance of the unit 2 systems which are not necessary or desirable for the operation and/or safe shutdown of unit 1.
(1)Piping and associated components in the RCPB which penetrate containment excluding the actual penetration and its associated components.
If the designated equipment configuration is revised to allow system testing or modification, appropriate action will be taken to ensure that the required system availability for accident mitigation is maintained.
(2)Piping and associated components which perform no primary safety function.
.2.2 Protection By Multiple Fission Product Barriers Criterion 10 - Reactor Design The reactor core and associated coolant, control, and protection systems shall be designed with appropriate margin to assure that specified acceptable fuel design limits are not exceeded during any condition of normal operation, including the effects of anticipated operational occurrences.
(3)Piping and associated components which are isolated by a normally closed valve off a line in the RCPB that meets the exclusion requirements of 10 CFR Part 50.55a paragraphs (C) (1) and (C) (2). An example would be the ECCS check valve leak test lines.
Compliance The reactor core with its related coolant, control, and protection systems is designed to function throughout its design lifetime without exceeding acceptable fuel damage limits. The reactor trip system is designed to actuate a reactor trip for any anticipated combination of plant conditions when necessary to ensure that fuel design limits are not exceeded. The core design, together with reliable process and decay heat removal systems, provides for this capability under all expected conditions of normal operation with appropriate margins for uncertainties and anticipated transient situations, including the effects of loss of reactor coolant flow, trip of the turbine-generator, loss of normal feedwater and loss of both normal and preferred power sources.
3.2.2.2  Class BSafety Class B applies to those components of safety systems necessary to fulfill a system safety function. The classification is specifically applicable to containment and to components of those safety systems, or portions thereof, through which reactor coolant water flows directly from the reactor coolant system or the containment sump.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                      3.1-5
3.2.2.3  Class CClass C applies to components of those safety systems that are important to safe operation and shutdown of the reactor but that do not recirculate reactor coolant.
3.2.2.4  Class DClass D applies to components not in TVA Class A, B, or C whose failure would result in release to the environment of gaseous radioactivity normally held up for radioactive decay. This is being interpreted as those portions of systems whose postulated failure would result in calculated potential offsite doses that exceed 0.5 rem to the whole body or its equivalent to any part of the body.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-3WATTS BARWBNP-92 3.2.2.5 Relationship of Applicable Codes to Safety Classification for Mechanical ComponentsThe applicable codes used for the design, material selection, and inspection of components for the various safety classes are shown in Table 3.2-4. The applicable TVA classification and ANS Safety Classification for each of the fluid systems are tabulated in Table 3.2-2. TVA classifications are also delineated on flow diagrams which have been included as figures in those sections of the FSAR where the systems are discussed in detail.
3.2.2.6  Nonnuclear Safety Class (NNS)Components that are used in Seismic Category I structures whose failure would not result in a release of radioactive products and are not required to function during an accident or malfunction within the reactor coolant pressure boundary have been assigned TVA Classifications G or K. Since these components complement components having a primary safety function during normal operation and may be in close proximity to them, they are seismically qualified as Seismic Category I(L) to the extent necessary to prevent an unacceptable influence on Safety Class equipment during a seismic event. Thus the minimum capability of primary system components is not compromised by the failure of a Class G or K component during a seismic event. Components which are assigned to TVA Class H or L, located inside Seismic Category I structures, are also designed as Seismic Category I(L). The applicable codes, along with the seismic classifications used for the design of the components covered by these classifications, are shown in Table 3.2-5. TVA Class P is assigned to specific sense lines located (in part or totally) in a non-seismic area.
3.2.2.7  Heating, Ve ntilation and Air Co nditioning (HVAC) Safety ClassificationThose portions of the HVAC Systems which are safety related have been assigned TVA classifications and have been designed to Seismic Category I and I(L) specifications as applicable. All equipment, components, duct work, etc., in the August 1970 Draft ANSI N18.2 Safety Classes 2a and 2b perform primary safety functions and are designed to Seismic Category I requirements, except as exempted in Table 3.2-6. Portions of systems not performing a safety function may need a degree of seismic qualification because their failure could produce an unacceptable influence on the performance of safety functions. These are designed to Seismic Category I(L) requirements. The applicable codes along with the seismic qualifications used for the design of the HVAC ducting are shown in Table 3.2-6 . See Sections 3.7.3.17 and 3.7.3.18 for details of seismic analysis and design of HVAC duct and duct support systems.3.2.3  Code Cases and C ode Editions and Addenda 3.2.3.1  TVA Desi gn and FabricationThe Code of Record of Section III of the ASME Code applied to systems within TVA's scope is the 1971 Edition with Addenda through Summer 1973. The use of later 3.2-4CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Edition and Addenda, as permitted by paragraph NA-1140 of the ASME Code, is controlled to ensure the following: (a)Later Edition and Addenda used has been accepted by the NRC through incorporation by reference in 10 CFR 50.55a.(b)Related requirements necessary to support use of later Edition and Addenda are implemented in accordance with NA-1140.(c)Code Cases used have been accepted by the NRC through incorporation by reference in either Regulatory Guide 1.84 or Regulatory Guide 1.85.(d)Additional requirements added by either Regulatory Guide 1.84 or Regulatory Guide 1.85 are implemented.A listing of Code Cases and provisions of later Code editions and addenda which have been used for design and fabrication is given in Table 3.2-7. A similar listing of Code Cases and provisions of later Code editions and addenda used in analysis of fluid systems is given in Section 3.7.3.8.1. Another similar listing for the RCS is given in Section 5.2.1.4. Code cases and provisions of later Code Editions and Addenda associated with Section XI are found in the Section XI programs. Exceptions to the system classification Code requirements associated with Generic Letter 89-09 may be found in notes on the flow diagrams.
3.2.3.2  Purchased Materials and ComponentsThe Code of Record for components ordered by TVA is determined in accordance with 10 CFR 50.55a, footnote 5. Material ordered by TVA and supplied with certification to a later Edition and Addenda is controlled by a comparison of the Edition and Addenda to which it is certified to the Code of Record applicable to the application in which it is used. Deviations from the applicable Code of Record are reconciled prior to use of the material.Material procured prior to the initiation of the Acceptable Suppliers List (ASL) program (approximately May 1978) has been addressed through an NRC approved alternative to the ASME Code paragraph NA-3451(a)
[1]. Material procured as ASTM material,installed or to be installed in an ASME system,whose proof of survey or qualification by TVA of the manufacturer's quality assurance program at the time of procurement cannot be retrieved, and whose material specification is identical to the requirements of ASME Section II as stated by the ASME material specification,is acceptable for use assuming all other attributes of the material and the documentation conform to ASME Code requirements.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-5WATTS BARWBNP-79REFERENCES1. Letter from B.D. Liaw, NRC, to O. D. Kingsley, TVA, dated March 15, 1990, "NRC Inspection Report Nos. 50-390/90-02 and 50-391/90-02."2. Letter from Frederick J. Hebdon, NRR, to Mark O. Medford, TVA, dated February 22, 1993.
3.2-6CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Table 3.2-1  Category I Structures1.Reactor Building (Shield Building, Steel Containment Vessel, and Interior Concrete) 2.Auxiliary - Control Buildinga.Auxiliary Building portion b.Additional Equipment Building portion c.Control bay portion d.Waste packaging area 3.Condensate Demineralizer Waste Evaporator Building 4.Class 1E Electrical Systems Structures (Manholes, Handholes, and Conduit Banks) 5.Diesel Generator Building 6.ERCW Pipe Tunnels and RWST Foundations 7.ERCW Structures 8.North Steam Valve Room 9.Intake Pumping Station and Retaining Walls 10.Additional Diesel Generator Building11.Refueling Water Storage Tank (RWST).
12.Underground Barrier.
13.ERCW Standpipe Structures I and II and ERCW Discharge Overflow Structure.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-7WATTS BARWBNP-79Table 3.2-2  Summary of Criteria - Mechanical System Components  (Page 1 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)  Reactor VesselFull Length CRDM Housing CRDM Head Adapter Plugs Steam Generators (Tube Side)
                (Shell Side)
Pressurizer Reactor Coolant Pipe Reactor Coolant Fittings Reactor Coolant Fabricated Piping Reactor Coolant Crossover  LegsReactor Coolant Thermowell Thimble Guide Tubing Thimble Guide Couplings Flux Thimble Assembly Loop Bypass Line Pressurizer Safety Valves Power Operated Relief Valves Pressurizer Relief Tank W W W
W W
W W
W W W W W
W W
W W W W A A A
A A(17)A A
A A A A A
A B
A A A G (13)III-1 III-1 III-1 III-1 III-1 III-1 III-1III-1III-1III-1 III-1 III-1 III-2 III-1 III-1III-1VIII X X X
X X
X X
X X X X X
X X
X X X X C C C
C C
C C
C C C C C
C C
C C C C X X X
X X
X X
X X X X X
X X
X X X P I I I
I I
I I
I I I I I
I I
I I II(L)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-8WATTS BARWBNP-79Reactor Coolant Pump  RCP Casing Main Flange Thermal Barrier Thermal Barrier Heat Exchanger  No. 1 Seal Housing    Bolts Upper Seal Housing Pressure Retaining BoltingRCP Motor  Motor Rotor Motor Shaft Shaft Coupling Spool Piece Flywheel Bearing (Motor Upper Thrust)  Motor Bolting  Motor Stand Motor Frame W W W
W W W W W W W W
W W
W W W W W A A A
A C A B A 2b 2b 2b 2b 2b 2b 2b 2b 2b 2bIII-1III-1 III-1 III-1 (14)III-1III-1III-1NEMA-MG1 NA NA NA NA NA NA NA NA NA X X X
X X X X X X X X
X X
X X X X X C C C
C C C C C C C C
C C
C C C C C X X X
X X X X X--
-
-
-
----
-I I I
I I I I I I I I
I I
I I I I ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 2 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-9WATTS BARWBNP-79 Upper Oil Reservoir    (UOR)
Upper Oil Cooler Lube Oil Piping Lower Oil Reservoir (LOR)  LOR Cooling Coil -    CC (supports only)
Motor Air Coolers W W W W W W 2b 2b 2b 2b 2b-NA (14)
(14)NA NA-X X X X X X C C C C C C P P P P P-I I I I II(L)Safety Injection System  Safety Injection Pumps  Accumulators (9)  Boron Injection Tank Refueling Water Storage Tank  Residual Heat Removal System  RHR Pumps  RHR Heat Exchangers (Tube)                      (Shell)
W W W T W W W B B B B  B B CIII-2III-2III-2 III-2  III-2III-2III-3 X X X X  X X X AB C AB O  AB AB AB X P X P  X X P I I I I  I I ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 3 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-10WATTS BARWBNP-79Containment Spray System  CS Pumps  CS Heat Exchangers (Tube)                    (Shell)  CS NozzlesPrimary Water Make-Up System  Pump  TankChemical and Volume Control System  Pumps    Charging, Reciprocating Charging, Centrifugal    Boric Acid Transfer  Heat Exchangers    Regenerative    Letdown (Tube)            (Shell)    Excess Letdown (Tube)                  (Shell)
Seal Water (Tube)              (Shell)
T W W T T T W W W W W W W W W W B B C B G G(22)B B C B B C B B B CIII-2III-2III-3-ANSI B31.1VIIIP&V-IIP&V-IIP&V-IIIIII-2III-2III-3III-2 III-2III-2III-3 X X X X X X X X X X X X X X X X AB AB AB C AB O AB AB AB C AB AB C C AB AB X X P P--X X-X X P X P X P I I I II(L)I(L)I I I I I I I I I I TanksTable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 4 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-11WATTS BARWBNP-79Volume ControlWBIII-2XABXIBoric AcidWCIII-3XABPIBoric Acid BatchingWGVIIIXAB-I(L)Chemical MixingWGVIIIXAB-I(L)Resin FillWGVIIIXAB-I(L)Steam Generator Blowdown SystemSG Blowdown Isolation ValvesTBIII-2XABPISG Blowdown Heat ExchangersT-VIII-TBP-Flash TankT- VIII-TBP-Flash Tank PumpsT-HIS-TBP-Compressed Air SystemService & Control Air Subsystem CompressorsTH--TB--Receiver TanksTHVIII-TB--
Air DryersTHVIII-TB--Auxiliary Control Air SubsystemCompressorsT(19)-XAB-IReceiver TanksT(19)VIIIXAB-IAir DryersTC(14)XAB-IIce CondenserIce BasketsWC-XC-ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 5 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-12WATTS BARWBNP-79Lower Inlet DoorsWC-XC-ILattice FramesWC-XC-ILattice Frame ColumnsWC-XC-ILower Support StructureWC-XC-IIntermediate Deck DoorsWC-XC-IWall PanelsWC-XC-I Floor StructuresW,TC-XC-ITop Deck DoorsWC-XC-IAir Handling Unit SupportsWC-XC-ITop Deck BeamsWC-XC-IRefrigeration SystemW--XC,AB-I(L)Ice MachineW--XAB-I(L)Ice Condenser Bridge CraneW--XC-I(L)
Floor Drain GateWC-XC-IContainment Isolation System  ValvesTBIII-2XC,ABX,PI  Air Return FansT(11)AMCAXC-I  IEEEComponent Cooling System PumpsTCIII-3XABPI    Heat Exchangers (Tube)TCIII-3XAB-I  Table 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 6 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-13WATTS BARWBNP-79                  (Shell)TCIII-3XABPI    Surge TankTCIII-3XABPI    Valve (Containment Isolation)TBIII-2XC-I    ValvesTCIII-3XAB,C-I    ValvesTGB31.1XAB-I(L)  ValvesTHB31.1-CDWEB-  Seal Leakage Return UnitTL-XAB -I(L)Radioactive Waste Disposal System  Tanks Laundry & Hot ShowerWGVIIIXABXI(L)    Chemical DrainWGVIIIXABXI(L)    Reactor Coolant DrainWGVIIIXCXI(L)    Tritiated Drain CollectorWGVIIIXABXI(L)    Waste CondensateWHVIIIXABXI(L)
Spent Resin StorageWDIII-3XABXI      Gas DecayWDIII-3XABXI      Floor Drain CollectorWGVIIIXABXI(L)    CVCS MonitorWG IIIXABPI(L)    Cask Decontamination CollectorTG----XABPI(L)  Pumps    Reactor Coolant Drain Tank PumpsWGB31.1XCXI(L)Table 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 7 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-14WATTS BARWBNP-79    Chemical Drain Tank PumpWGB31.1XABXI(L)    Laundry & Hot Shower Tank PumpWGB31.1XABXI(L)    Tritiated Equipment Drain Sump PumpsWGB31.1XABXI(L)    Waste Condensate PumpsWHB31.1XABXI(L)    Tritiated Drain Collector Tank      Discharge PumpWGB31.1XABXI(L)    Floor Drain Collector Tank Discharge PumpWGB31.1XABXI(L)    Aux. Condensate Demin Waste Evap Feed PumpWGB31.1XABXI(L)    CVCS Monitor Tank PumpWGB31.1XABPI(L)    Cask Decon Collector Tank PumpTGB31.1XABPI(L)  Containment Pit Sump PumpsWGB31.1XCXI(L)  AB Floor & Equip Drain Sump PumpsWGB31.1XABPI(L)
RB Floor & Equip. Drain Sump PumpTGB31.1XCXI(L)  RB Floor & Equip Drain Pocket Sump PumpTGB31.1XCXI(L)  AEB Floor & Equip. Drain Sump PumpTGB31.1XAEBPI(L)Miscellaneous        Waste Gas Compressor Pkg.WDIII-3XABXIWaste Gas FilterTGVIIIXABXI(L)Table 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 8 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-15WATTS BARWBNP-79Nitrogen ManifoldTG-XAB-I(L)Hydraulic CompactorW---SBP-Laundry Tank Basket StrainerWGVIIIXABPI(L)Cond Demin Waste EvaporatorTHIII-3XCDWEBP-Fire Protection System  Valves - Flood Mode & CITCIII-3X      C,AB,O,B,P-I  Valves - Balance of SystemTGB31.1, UL/FMX  C,AB,O,B,P,CB
,  DB,SB,CDWE B-I(L)Fire Pumps (vertical turbine)TCIII-3XO-IStation Ventilation SystemContainment Ventilation Containment Purge Fans (excluding Inst. Rm. Fan)T(11)AMCAXAB-I(L)  FiltersT(11)-XABXI DampersT(11)-XABXITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 9 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-16WATTS BARWBNP-79  DuctworkT(11)SMACNAXC,ABXI/I(L)(See Note 20)Upper CompartmentT(11)C I(L) CRDM & Instrument Room CoolingT(11)C I(L)
Fan/Coil UnitsT-AMCAXCPI(L)(See Note 12)  Supply Air FiltersT(11)-XAB-I(L)Lower Compartment Cooling Units  FansT(11)AMCAXC-I  MotorsT(11)IEEEXC I  CoilsT-ARIXCPI(L)(See Note 12)  Backdraft DampersT(11)ASMEXC-I  Instrumentation/ControlsT(11)IEEEXC/CB-I Ductwork/AccessoriesT(11)SMACNAXCPIAuxiliary Bldg. VentilationFan/Coil UnitsT(11)AMCAXAB-I(L)
Filters  T(11)-XAB-I(L)
ESF Room CoolersT(11)-XABPI Auxiliary Board Rooms  Air-conditioning SystemT(11)AMCA,ARIXAB-ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 10 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-17WATTS BARWBNP-79Shutdown Board Rooms  Air-conditioning SystemT(11)AMCA,ARIXAB-IOther Air Conditioning SystemsT(11)AMCA,ARIXAB-I(L)Control Bldg. Ventilation FanT(11)-XCB-I FiltersT(11)-XCBXIAir Conditioning Unit (MCR)T(11)AMCA,ARIXCB-IAir Conditioning Unit  (Elec. Bd. Rm.)T(11)AMCA,ARIXCB-IRB Inst Rm Air Conditioning SystemT(11)AMCA,ARIXRB-I(L)(See Note 21)Diesel Bldg. VentilationExhaust SystemT(11)AMCAXDB-I Battery Hood Exhaust SystemT(11)AMCAXDB-I Elec Board Room Exhaust System FansT(11)AMCAXDB-I Main Steam System Stop ValvesTBIII-2XAB-I Isolation Bypass ValvesTBIII-2XAB-I Feedwater SystemStop ValvesTBIII-2XAB-IAuxiliary Feedwater SystemTable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 11 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-18WATTS BARWBNP-79Auxiliary Feedwater Pumps  Motor DrivenTCIII-3XAB-I Steam Turbine DriveTCIII-3XAB-I Steam Dump Systems Turbine BypassW-  --TB--
Relief Valves TBIII-2XAB-ISafety ValvesTBIII-2XAB-ISpent Fuel PitSpent Fuel Pit Heat Exch.
  (Tube)WCIII-3XABXI  (Shell)WCIII-3XABXISpent Fuel Pit PumpWCIII-3XABXI Spent Fuel Pit FilterWGVIIIXABXI(L)Spent Fuel Pit DemineralizerWGVIIIXABXI(L)Spent Fuel Pit StrainerWG  -XABXI(L)Spent Fuel Pit Skimmer PumpWG  -XABXI(L)Spent Fuel Pit Skimmer  Strainer AssemblyWG  -XABXI(L)Spent Fuel Pit Skimmer FilterWGVIIIXABXI(L)Fuel Handling SystemTable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 12 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-19WATTS BARWBNP-79Manipulator Crane, Reactor  CavityW--XC-I(L)Reactor Vessel Head Lifting  DeviceW--XC--Reactor Internals Lifting  DeviceW--XC--Spent Fuel Pit Bridge & HoistW--XAB-I(L)
Rod Cluster Cont. Handling  FixtureW--X---Reactor Vessel Stud TensionerW--X---Spent Fuel Handling ToolW--X---Fuel Transfer SystemFuel Transfer Tube & FlangeWB-XC,ABPIConveyor System & ControlsW--XC,ABP-New Fuel Storage RacksW--XAB-ISpent Fuel Storage RacksT--XABXIEmergency Diesel Fuel Oil System  To 7 Day Tanks Transfer PumpsTGB31.1XDB-I(L)Fuel Oil Tanks (7 Day)TIVIIIXDB-I Table 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 13 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-20WATTS BARWBNP-79Raw Cooling Water SystemPumpsT-- -O--StrainersT---TB--Sampling SystemSample Heat ExchangerT-VIII-ABX-Sample VesselT-VIII-ABX-Delay CoilTBIII-2XC XIEquipment Decontamination System PumpW---AB--
TankT-D100-AB--
Demineralizers Mixed BedWDIII-3XABXI CationWDIII-3XAB XIFiltersReactor CoolantWBIII-2XABXI Seal Water ReturnWBIII-2XABXI Seal Water InjectionWBIII-2XABXI Boric AcidWCIII-3XAB-IMiscellaneousTable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 14 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-21WATTS BARWBNP-79Letdown OrificesWBIII-2XCXIBoric Acid BlenderWCIII-3XAB-IBoron Recovery System Pumps Holdup Tank Recirc.WDP&V-IIIXABXI  Gas Stripper FeedWDP&V-IIIXABXI  Monitor TankWGVIIIXABPI(L)
TanksHoldupTDIII-3XABXI MonitorTGVIIIXABPI(L)DemineralizersEvaporator Feed Ion ExchWGVIIIXABXI(L)
Evaporator CondensateWGVIIIXABXI(L)
Filters Evaporator Feed Ion ExchWGVIIIXABXI(L)
Evaporator CondensateWGVIIIXABXI(L)ConcentratesWGVIIIXABXI(L)Table 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 15 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-22WATTS BARWBNP-79 MiscellaneousGas Stripper & Boric Acid Evap. Pkg.W(16)(16)XABXI(L)
Emergency Gas Treatment System FansT(11)AMCAXABPI FiltersT(11)-XABPIMoisture SeparatorT(11)-XABPIDampersT(11)-XAB,CPI DuctingT(11)-XAB,CPIAuxiliary Bldg. Gas Treatment SystemFansT(11)AMCAXABPI FiltersT(11)-XABPI Moisture SeparatorT(11)-XABPI DampersT(11)-XAB,CPI DuctingT(11)-XAB,CPI Essential Raw Cooling Water System PumpsTCIII-3XP-I ERCW Pump Motor Bearing Cooling CoilsT(18)-XP-ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 16 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7)
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-23WATTS BARWBNP-79Containment Isolation ValvesTBIII-2XC-IValvesTCIII-3XAB-I Valves (yard)TCIII-3XB-I Valves (Station Air Compressor)THB31.1-TB-Valves (Auxiliary Air Compressor)TCIII-3XAB-I Valves (Screen Wash Supply)T(15)B31.1XP-I(L)(15)Screen Wash PumpsT(15)B58.1XP-I(15)Automatic Backwashing StrainersTCIII-3XP-I Flood Mode Boration Makeup System Aux. Boration Makeup TankTCIII-3XABXI Aux. Charging Booster PumpsTHB31.1XABXI Flood Mode Boration DemineralizerTHB31.1XABXIL)
Flood Mode Boration FiltersTHB31.1XABXI(L)
Aux. Charging PumpTHB31.1XABXI(L)
ValvesTHB31.1XABXI(L)
ValvesT T B CIII-2III-3 X X AB AB X XI(L)ITable 3.2-2  Summary of Criteria - Mechanical System Components  (Continued) (Page 17 of 17)ComponentScope (1) TVA/ANSSafety Class    (2)
Code (3) QA Required  (4)  Location  (5)  Rad Source    (6)  Seismic  (7) 3.2-24CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-79 Notes: (1)T = Tennessee Valley Authority W = Westinghouse (2)A = TVA Safety Class A B = TVA Safety Class B


C = TVA Safety Class C
Chapter 4 discusses the design bases and design evaluation of reactor components.
Chapter 5 discusses the reactor coolant system. The details of the reactor trip and engineered safety features actuation system design and logic are discussed in Chapter 7. This information supports the accident analyses presented in Chapter 15.
Criterion 11 - Reactor Inherent Protection The reactor core and associated coolant systems shall be designed so that in the power operating range the net effect of the prompt inherent nuclear feedback characteristics tends to compensate for a rapid increase in reactivity.
Compliance A negative reactivity coefficient is a basic feature of core nuclear design as discussed in Chapter 4.
Criterion 12 - Suppression of Reactor Power Oscillations The reactor core and associated coolant, control and protection systems shall be designed to assure that power oscillations which can result in conditions exceeding specified acceptable fuel design limits are not possible or can be reliably and readily detected and suppressed.
Compliance Power oscillations of the fundamental mode are inherently eliminated by the negative Doppler and nonpositive moderator temperature coefficients of reactivity.
Oscillations due to xenon spatial effects in the radial, diametral and azimuthal overtone modes are heavily damped due to the inherent design and due to the negative Doppler and nonpositive moderator temperature coefficients of reactivity.
Oscillations due to xenon spatial effects in the axial first overtone mode may occur.
Assurance that fuel design limits are not exceeded by xenon axial oscillations is provided as a result of reactor trip functions using the measured axial power imbalance as an input.
Oscillations due to xenon spatial effects in axial modes higher than the first overtone are heavily damped due to the inherent design and due to the negative Doppler coefficient of reactivity.
The stability of the core against xenon-induced power oscillations and the functional requirements of instrumentation for monitoring and measuring core power distribution are discussed in Section 4.3. Details of the instrumentation design and logic are discussed in Chapter 7.
Criterion 13 - Instrumentation and Control Instrumentation shall be provided to monitor variables and systems over their anticipated ranges for normal operation, for anticipated operational occurrences, and for accident conditions as appropriate to assure adequate safety, including those CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


D = TVA Safety Class D G = TVA Safety Class G H = TVA Safety Class H 1, 2a, 2b, or 3 = ANS N18.2 Safety Class I = Seismic Category I, part of structure (3)The code class listed for an item is the minimum required. An item may have been obtained to a higher code level than that listed. III=ASME Boiler and Pressure Vessel Code - Section III III-1=ASME Boiler and Pressure Vessel Code - Section III, Class 1 III-2=ASME Boiler and Pressure Vessel Code - Section III, Class 2 III-3=ASME Boiler and Pressure Vessel Code - Section III, Class 3 IIIa9=ASME Boiler and Pressure Vessel Code - Section III, Article 9 "Protection Against Overpressure" VIII=ASME Boiler and Pressure Vessel Code - Section VIII P&V-I=ASME Code for Pumps and Valves for Nuclear Power, Class I
variables and systems that can affect the fission process, the integrity of the reactor core, the reactor coolant pressure boundary, and the containment and its associated systems. Appropriate controls shall be provided to maintain these variables and systems within prescribed operating ranges.
Compliance Instrumentation and controls are provided to monitor and control neutron flux, control rod position, temperatures, pressures, flows, and levels as necessary to assure that adequate plant safety can be maintained. Instrumentation is provided in the reactor coolant system, steam and power conversion system, the containment, engineered safety features systems, radiological waste systems and other auxiliaries. Parameters that must be provided for operator use under normal operating and accident conditions are indicated in the control room in proximity with the controls for maintaining the indicated parameter in the proper range.
The quantity and types of process instrumentation provided measures safe and orderly operation of all systems over the full design range of the plant. These systems are described in Chapters 6, 7, 8, 9, 11 and 12.
Criterion 14 - Reactor Coolant Pressure Boundary The reactor coolant pressure boundary shall be designed, fabricated, erected, and tested so as to have an extremely low probability of abnormal leakage, or rapidly propagating failure, and of gross rupture.
Compliance The reactor coolant pressure boundary is designed to accommodate the system pressures and temperatures attained under all expected modes of plant operation, including all anticipated transients, and to maintain the stresses within applicable stress limits. In addition to the loads imposed on the piping under operating conditions, consideration is also given to abnormal loadings, such as pipe rupture and seismic loadings as discussed in Sections 3.6 and 3.7, respectively. The piping is protected from overpressure by means of pressure relieving devices as required by applicable codes.
Reactor coolant pressure boundary materials selection and fabrication techniques ensure a low probability of gross rupture or significant leakage.
The materials of construction of the reactor coolant pressure boundary are protected by control of coolant chemistry from corrosion which might otherwise reduce the structural integrity of the boundary during its service lifetime.
The reactor coolant pressure boundary has provisions for inspections, testing and surveillance of critical areas to assess the structural and leak tight integrity. The details are given in Section 5.2. For the reactor vessel, a material surveillance program conforming to applicable codes is provided.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                      3.1-7


P&V-II= ASME Code for Pumps and Valves for Nuclear Power, Class II P&V-III=ASME Code for Pumps and Valves for Nuclear Power, Class III CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-25WATTS BARWBNP-79D100=American Waterworks Association, Standard for Steel Tanks, Standpipes, Reservoirs, and Elevated Tanks for Water Storage, AWWA, D100B31.1=ANSI B31.1 1973 Edition through summer 1973 Addenda ACI=American Concrete Institute AMCA=Air Moving and Conditioning Association
Means are provided to detect significant uncontrolled leakage from the reactor coolant pressure boundary with indication in the control room as discussed in Section 5.2.
Criterion 15 - Reactor Coolant System Design The reactor coolant system and associated auxiliary, control, and protection systems shall be designed with sufficient margin to assure that the design conditions of the reactor coolant pressure boundary are not exceeded during any condition of normal operation, including anticipated operational occurrences.
Compliance Transient analyses presented in Section 5.2 lead to the conclusion that design conditions are not exceeded during normal operation. Protection and control set points are based on these transient analyses.
Additionally, reactor coolant pressure boundary components achieve a large margin of safety by the use of proven ASME materials and design codes, use of proven fabrication techniques, nondestructive shop testing and integrated hydrostatic testing of assembled components.
The effect of radiation embrittlement is considered in reactor vessel design, and surveillance samples monitor adherence to expected conditions throughout plant life.
Multiple safety and relief valves are provided for the reactor coolant system. These valves and their set points meet ASME criteria for over-pressure protection. The ASME criteria are satisfactory based on a long history of industry use. Chapter 5 discusses reactor coolant system design.
Criterion 16 - Containment Design Reactor containment and associated systems shall be provided to establish an essentially leaktight barrier against the uncontrolled release of radioactivity to the environment and to assure that the containment design conditions important to safety are not exceeded for as long as postulated accident conditions require.
Compliance The reactor containment (Section 6.2) is a freestanding, continuous steel membrane structure housing the reactor and various auxiliary components including the ice condenser. The ice condenser (Section 6.7) limits the initial containment pressure to a value less than design during a large LOCA. A concrete ShieldBuilding surrounding the steel vessel allows for collection of any containment leakage, which is subsequently processed by the emergency gas treatment system (Section 6.5) before release to the environment. The containment also contains a spray system (Section 6.2) which supplements the ice condenser in limiting pressure and which also provides long-term cooling following a LOCA. The design pressure is not exceeded in any pressure transients which result from combining the effects of heat sources with minimal operation of the engineered safety features.
CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


P=TVA Safety Class P ARI=Air Conditioning and Refrigeration Institute HIS=Hydraulic Institute Standards
The containment system is designed to provide for protection of the public from the consequences of a LOCA based on a postulated break of the reactor coolant piping up to and including a doubled-ended break of the largest reactor coolant pipe. Periodic containment leak rate measurements ensure that the leaktight barrier is maintained.
Criterion 17 - Electric Power Systems An onsite electric power system and an offsite electric power system shall be provided to permit functioning of structures, systems, and components important to safety. The safety function for each system (assuming the other system is not functioning) shall be to provide sufficient capacity and capability to assure that (1) specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.
The onsite power sources, including the batteries, and the onsite electric distribution system, shall have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure.
Electric power from the transmission network to the onsite electric distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights of way) designed and located so as to minimize to the extent practical the likelihood of their simultaneous failure under operating and postulated accident and environmental conditions. A switchyard common to both circuits is acceptable. Each of these circuits shall be designed to be available in sufficient time following a loss of all onsite alternating current power supplies and the other offsite electric power circuit, to assure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded. One of these circuits shall be designed to be available within a few seconds following a LOCAt to assure that core cooling, containment integrity, and other vital safety functions are maintained.
Provisions shall be included to minimize the probability of losing electric power from any of the remaining sources as a result of, or coincident with, the loss of power generated by the nuclear power unit, the loss of power from the transmission network, or the loss of power from the onsite electric power sources.
Compliance The capacity and capability of either the onsite or offsite electric power system is sufficient to assure that (1) specified fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.
Offsite Electrical Power System The offsite electrical power source consists of two physically independent circuits which are energized and available. The offsite sources are two independent 161-kV transmission lines terminating at the 161-kV switchyard, providing power to the plant, FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                    3.1-9


IEEE=  Institute of Electr ical and Electronics EngineersNFPA=National Fire Protection Association B58.1=ANSI B58.1 Vertical Turbine Pumps B73.1=ANSI B73.1M Horizontal end Suction Centrifugal Pumps UL/FM=Underwriters Laboratory or Factory Mutual (4)Quality assurance required:
on demand, via the common station service transformers to the onsite Class 1E distribution system.
X = Yes, - = No (5)C=Containment AB=Auxiliary Building AEB=Additional Equipment Bldg.
Onsite Electrical Power System The onsite electrical power system serves both nuclear power units and certain common plant equipment. It consists of two independent diesel generator systems, each system containing two diesel generator units, two redundant Class 1E electric power distribution trains, and four redundant vital instrument and control power channels, each provided with an uninterruptible ac power supply and distribution panel. A plant Class 1E dc power system is provided with four redundant divisions, each consisting of a battery, battery charger, and distribution panel. Each redundant onsite power supply, train, and channel has the capability and capacity to supply the required safety loads assuming the failure of its redundant counterpart.
For a detailed description and analysis of the offsite electrical power system and onsite electrical power system, see Sections 8.2 and 8.3, respectively.
Criterion 18 - Inspection and Testing of Electric Power Systems Electric power systems important to safety shall be designed to permit appropriate periodic inspection and testing of important areas and features, such as wiring, insulation, connections, and switchboards, to assess the continuity of the systems and the condition of their components. The systems shall be designed with a capability to test periodically (1) the operability and functional performance of the components of the systems, such as onsite power sources, relays, switches, and buses, and (2) the operability of the systems as a whole and, under conditions as close to design as practical, the full operation sequence that brings the systems into operation, including operation of applicable portions of the protection system, and the transfer of power among the nuclear power unit, the offsite power system, and the onsite power system.
Compliance Inspection In addition to continuous surveillance by visual and audible alarms for any abnormal condition, the onsite power system is designed to permit inspection and checking of wiring, insulation, connections, and switchboards to the extent that personnel safety is not jeopardized, equipment not damaged, and the plant not exposed to accidental tripping.
On-Line Testing The onsite power system is designed with provision for periodic testing during normal operation with the unit on line, to the extent that the plant is not exposed to accidental tripping and the reliability of the safety system not degraded. These features include provisions for starting and loading of onsite emergency diesel generators, and starting and loading of individual or groups of engineered safeguards to their respective buses.
The system is also designed to permit testing of larger integrated segments of the system during planned cooldown of the reactor coolant system.
0                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


CB=Control Building DB=Diesel Generator Building SB=Service Building CDWEB=Condensate Demineralizer Waste Evaporator Building O=Outdoors above ground B=Buried in ground 3.2-26CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92 P=ERCW Pumping StationTB=Turbine Building (6)X=Source of radiation-=No source of radiation P=Possible source of radiation (7)I=Seismically qualifiedI(L)=Limited seismic qualification
Off-Line Testing The onsite power system is designed with facilities for a complete test of the operability of the system as a whole from initiation of protection system, starting and loading of the diesel generators, transfer of power sources and the full operational sequence of engineered safety features.
-=Not seismically qualified (8)AMCA Class III and performance tested in accordance with AMCA Standard air moving devices.
Inspection and testing of electrical power systems is further described in Sections 8.3.1.1 and 8.3.2.1.
(9)Performance test required.
Criterion 19 - Control Room A control room shall be provided from which actions can be taken to operate the nuclear power unit safely under normal conditions and to maintain it in a safe condition under accident conditions including LOCAs. Adequate radiation protection shall be provided to permit access and occupancy of the control room under accident conditions without personnel receiving radiation exposures in excess of 5 rem whole body, or its equivalent to any part of the body, for the duration of the accident.
(10) Deleted by FSAR Amendment 79 (11)Those components of the heating, ventilating, and air conditioning system (HVAC), which are not covered directly by the TVA piping classifications of Subsection 3.2.2, have been designed and constructed to standards and specifications which are equivalent to ANS Safety Class 2b.
Equipment at appropriate locations outside the control room shall be provided (1) with a design capability for prompt hot shutdown of the reactor, including necessary instrumentation and controls to maintain the unit in a safe condition during hot shutdown, and (2) with a potential capability for subsequent cold shutdown of the reactor through the use of suitable procedures.
(12)The lower compartment coolers are Seismic Category I except for the cooling coils which are Seismic Category I(L). The upper compartment, CRDM and instrument room coolers are Seismic Category I(L). None of the Reactor Building ventilation coolers are qualified to maintain ERCW pressure boundary integrity.
Compliance The plant is provided with a separate structure designated as the Control Building.
(13)Vessel was built to the requirements of ASME code but does not have code stamp.(14)Acceptable for use within Regulatory Guide 1.26 Quality Group C system (ASME Section III, Class 3.)  For the auxiliary air system, see also Note 1 of Table 3.2-2a.
Within the Control Building are located control rooms, auxiliary instrument room, computer room, battery and dc equipment rooms (including space for instrument motor generator, etc), switchyard relay room, plant communications room and service facilities such as shift engineer office, kitchen, instrument shop, toilet facilities, and mechanical equipment room for heating, ventilating, and air conditioning equipment.
(15)Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C.
The main control room was provided with unit control panels for each of the two units, the switchyard, electrical recording, dc distribution, operation of the diesel generator system, and for those systems shared by the two units. The unit control panels contain those instruments and controls necessary for operation of the unit, functions such as the reactor and its auxiliary system, turbine generator, and the steam and power conversion systems. Selection of loading from the various plant electrical distribution boards such as the startup boards, common service board, shutdown boards, and motor control centers is accomplished from the unit control panels.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-27WATTS BARWBNP-92 (16)This component is actually a system containing many components. Those parts of the system that contain component cooling water are Safety Class C with design code of ASME III, Class 3. The remainder of the system is Safety Class G with design codes as identified in Table 3.2-5.
The control room is designed and equipped to minimize the effects of possible events such as fire, high radiation levels, and excessive temperature which might preclude occupancy. The main control room is continuously occupied by qualified operating personnel under all operating and accident conditions except in the case of events such as fire or smoke which could necessitate its evacuation. In the unlikely event that control room occupancy becomes impossible, provisions have been made to bring the reactor units to, and maintain them in, a hot shutdown condition, from a location FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                      3.1-11
(17)The secondary chamber of the steam generators (shell side) are built to the ASME B&PV Code Section III, Division 1, Class 1, and applicable code interpretations and/or rulings. Although the shell side of the steam generator functions only dictate a TVA Class B, they were procured to comply with ASME Section III, Class 1. Therefore, repairs, modifications and/or additions shall be in accordance with the original contract specifications and drawing requirements.
(18)The ERCW pump motor bearing cooling coils, required for plant safety, were not purchased to TVA Class C standards. The vendor-supplied cooling coils have been seismically qualified and are considered safety-related and suitable for the intended service. For their application, the level of qualification meets the intent of TVA Class C* at the motor interface.
(19)Although not purchased and stamped in accordance with ASME Section III Code Requirements, this equipment meets the highest available commercial quality standards.  
(20)All purge air ductwork (supply and exhaust) inside the annulus and exhaust air ductwork from the Shield Building isolation valves 1-FCV-30-61 and -62 to 1-FCV-30-213 and -216 is Seismic Category I. Supply air ductwork from the


ABSCE isolation valves 1-FCV-30-294 and -295 to the Sh ield Building isolation valves 1-FCV-30-2 and -5 and all purge air ductwork (supply and exhaust) inside primary containment up to the inboard containment isolation valves is Seismic Category I(L).
external to the main control room. By use of appropriate procedures and available equipment, the unit can also be brought to cold shutdown conditions.
(21)All piping between the containment isolation valves is Seismic Category I. The piping up to the containment isolation valves on each side is Seismic Category I(L).(22)This tank was procured to ASME Section III-3 requirements.
Sufficient shielding, distance, and containment integrity are provided to assure that under postulated accident conditions control room personnel shall not be subjected to radiation doses which would exceed 5 rem to the whole body, or its equivalent to any part of the body, including doses received during both ingress and egress. Control room ventilation is provided by a system having a large percentage of recirculated air.
(23)Not used for Unit 1 operation.
After an accident, makeup air is automatically routed through a system of HEPA and charcoal filters.
(24)The boron recycle (recovery) system is not required for the operation of Unit 1. See FSAR Section 9.3.7. The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.
The design of the control room for occupancy during accidents is discussed in Section 6.4. The heating, ventilation, and air conditioning of the Control Building is discussed in Section 9.4. Radiation doses to control personnel following a LOCA are evaluated in Section 15.5.3. Radiation protection design features are discussed in Section 12.3.
(25)The Primary Water Storage Tank (PWST) meets the ASME Section III, Class 3, design by analysis requirements with Seismic Class I(L) Forcing Functions for atmosphere tanks.
.2.3 Protection and Reactivity Control Systems Criterion 20 - Protection System Functions The protection system shall be designed (1) to initiate automatically the operation of appropriate systems including the reactivity control systems, to assure that specified acceptable fuel design limits are not exceeded as a result of anticipated operational occurrences and (2) to sense accident conditions and to initiate the operation of systems and components important to safety.
3.2-28CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategoryAuxiliary Control AirPortions of the System necessary forcontainment isolation.(See Note 5)2aBIBalance of system.(See Note 1 and Note 5). Systemboundary is considered to exist to the upstream sideof the filterswhich tie the non-essential controlair systems to theauxiliary controlair lines.2bCIBoron Recycle(See Note 12)Equipment used toprovide a readysupply of con-centrated boricacid (boric acidtanks, boric acid transfer pumps, boric acid filters,and associatedpipes and valves). 2bC (See Note 11)I (See Note 11)Processing and WasteHoldup Equipmentwhose failure could result in a siteboundary dose of 0.5rem or more. (See Note 8) (gas stripper feed pumps, holdup tanks and holdup tank recirculation pumps, and associated piping and valves).3DI CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-29WATTS BARWBNP-92Other equipment whichcarries minimal or noradioactive wastes and/or has no safetyfunction to perform(monitor tank andpumps, evaporatorcondensate deminera-lizers, batchingtank, gas stripper and boric acidevaporator packages,evaporator feed ionexchangers, condensatefilters, concentrate filters, evaporatorfeed ion exchangefilters, and associatedpipes and valving).-GI(L)Chemical and Volume ControlEquipment that cir-culates reactorcoolant normally orduring an accident(charging, letdown,excess letdown, seal
Compliance A fully automatic protection system (with appropriate redundant channels) is provided to cope with transients where insufficient time is available for manual corrective action.
The design basis for all protection systems is in accord with IEEE Standard 279-1971.
The reactor trip system automatically initiates a reactor trip when any appropriate monitored variable or combination of variables exceed the normal operating range.
Setpoints are chosen to provide an envelope of safe operating conditions with adequate margin for uncertainties to ensure that fuel design limits are not exceeded.
Reactor trip is initiated by removing power to the rod drive mechanisms of all the full length rod cluster control assemblies. This will allow the assemblies to free fall into the core, rapidly reducing reactor power output.
The engineered safety features actuation system automatically initiates emergency core cooling, and other safeguards functions, by sensing accident conditions using redundant process protection system channels measuring diverse parameters.
Manual actuation of safeguards is relied upon where ample time is available for operator action. The ESF actuation system also provides a reactor trip on manual or automatic safety injection (S) signal generation.
The response and adequacy of the protection systems is analyzed for all conditions specified by the ANS N18.2 standard through Condition IV.
2                                                CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


water return lines;positive displacementand centrifugalcharging pumps;volume control tank; and, miscellaneousassociated lines andvalves). (See Note 8)2aBIEquipment necessary forboric acid addition (boric acid tanks, boric acid blender, lines and valves).2bC(See Note 11)I (See Note 11)Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-30CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Equipment associatedwith radwaste cleanupwhose failure could result in a 0.5 remoffsite dose (Mixedbed and cationdemineralizers,associated pipingand valves).3DIBalance of equipment(resin fill and chemi-cal mixing tanks,piping and valves).-GI(L)Component CoolingPortions of the systemnecessary for con-
For further discussion of the reactor trip system and engineered safety features actuation system, see Sections 7.2 and 7.3, respectively.
Criterion 21 - Protection System Reliability and Testability The protection system shall be designed for high functional reliability and inservice testability commensurate with the safety functions to be performed. Redundancy and independence designed into the protection system shall be sufficient to assure that (1) no single failure results in loss of protection function and (2) removal from service of any component or channel does not result in a loss of the required minimum redundancy unless the acceptable reliability of operation of the protection can be otherwise demonstrated. The protection system shall be designed to permit periodic testing of its functioning when the reactor is in operation, including a capability to test channels independently to determine failures and losses of redundancy that may have occurred.
Compliance The protection system is designed for high functional reliability and inservice testability.
The design employs redundant logic trains, and measurement and equipment diversity.
The protection system is designed in accordance with IEEE Standard 279-1971. All safety actuation circuitry is provided with a capability for testing with the reactor at power. The protection systems, including the process protection system, nuclear instrumentation system and the engineered safety features test cabinet comply with Regulatory Guide 1.22 on periodic testing of protection system actuation functions.
Under the present design, there are protective functions which are not tested at power.
The functions can be tested under shutdown plant conditions, so that they do not interrupt power operation, as allowed by Regulatory Guide 1.22. For those process protection functions that may be tested in bypass, alarms are provided in the control room and at the process rack to indicate the bypassed condition. Additional information on the capability of the process protection system to be tested in the bypassed mode is provided in Section 7.2.2.2, Subsections 10, 11, 12, 13 and 14.
In those cases where equipment cannot be tested at power, it is only the actuation device function which is not tested. The logic associated with the actuation devices has the capability for testing at power. Such testing will disclose failures or reduction in redundancy which may have occurred. Removal from service of any single channel or component does not result in loss of minimum required redundancy. For example, a two-of-three function becomes a one-of-two function when one channel is removed.
(Note that this is not true for the logic trains which are effectively a one-out-of-two logic).
Semiautomatic testers are built into each of the two logic trains in a protection system.
These testers have the capability of testing the major part of the protection system very rapidly while the reactor is at power. Between tests, a number of internal protection system points including the associated power supplies and fuses are continuously monitored. Outputs of the monitors are logically processed to provide alarms for FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                    3.1-13


tainment isolation.2aBIMajor pressureboundary components.2bCIEquipment inside theCDWE Building. (See Note 13)-H-Sample heat exchangers,drains, and vents.-G or LI(L)Containment SprayMajor pressure boundarycomponents.2aBI Essential Raw Cooling WaterPortions of the systempiping necessary forcontainment isolation.2aBIPortions of the systempiping required for plant safety. (See Note 4, 10).2bCIPortions of the system piping not required for plant safety, but in Seismic Category I  structures.GI(L)Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-31WATTS BARWBNP-86Portions of the systempiping not requiredfor safety and/or not in Seismic Category I structures.-H  -Auxiliary control aircompressors (see Note 1).-CIHVAC equipment required for plant  safety (see Note 2).--IHVAC equipment notrequired for plantsafety (see Note 3)--I(L)Portions of the strainer backwash/backflush piping (see Note 6).-GI(L)Feedwater Downstream of andincluding theanchors in the valveroom exterior walls.2aBIFlow transmittersensing lines-P- Upstream of theanchors.-H-Feedwater, AuxiliaryDownstream of andincluding the firstanchor which isimmediately up-stream of the checkvalve closest to andoutside of contain-ment.Portions of the system not in SC-2a but required after a seismic event.2a 2b B C I ITable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-32CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-86Condensate supplyand other piping notrequired after a seismic event butin Seismic CategoryI structures.-GI(L)Balance of system.-H-Fire Protection High Pressure(HPFP)Piping necessary toprovide water toAFW system in the event of a floodabove plant grade.Equipment necessaryto provide makeupto the primary and spent fuelcooling systemsin the event ofa flood aboveplant grade.2bCIBalance of equipment within SeismicCategory I structures.-GI(L)Remainder-H-Flood ModeBoration andMakeup (AuxiliaryCharging)Portion of thesystem necessaryfor containment isolation.2aBIPiping essential formakeup and boration in the event of a flood above plant grade.2bCIBalance of system.HI(L)Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-33WATTS BARWBNP-86Fuel OilEquipment necessaryto assure continuous,full power operation of theemergency diesel-generator sets forseven days followinga loss of offsitepower.2bCIBalance of equipmentin Seismic Category Istructures whichperforms no safetyfunction but needs to maintain pressure boundary.-G or HI(L)Remainder-H-Fuel Pool Cleaning and Cooling Portions of thesystem requiredfor containment
failures in one train and automatic reactor trip for failures in both trains. Self-testing provision is designed into each tester. Additional details can be found in Sections 7.2 and 7.3.
Criterion 22 - Protection System Independence The protection system shall be designed to assure that the effects of natural phenomena, and of normal operating, maintenance, testing, and postulated accident conditions on redundant channels do not result in loss of the protection function, or shall be demonstrated to be acceptable on some other defined basis. Design techniques, such as functional diversity or diversity in component design and principles of operation, shall be used to the extent practical to prevent loss of the protection function.
Compliance Design of protection systems includes consideration of natural phenomena, normal maintenance, testing and accident conditions such that the protection functions are always available.
Sufficient redundancy and independence is designed into the protection system to assure that no single failure, or removal from service of any component or channel of a system, will result in loss of the protection function. The minimum redundancy is exceeded in each protection function which is active with the reactor at power.
Functional diversity and consequential location diversity are designed into the system.
For example, loss of one feedwater pump would actuate one pressure reactor trip, one high-level trip, one low-level trip, and two temperature trips. The protective system is discussed in detail in Sections 7.2 and 7.3.
Criterion 23 - Protection System Failure Modes The protection system shall be designed to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of energy (e.g., electric power, instrument air), or postulated adverse environments (e.g., extreme heat or cold, fire, pressure, steam, water, and radiation) are experienced.
Compliance The protection system is designed with due consideration of the most probable failure modes of the components under various perturbations of the environment and energy sources. Each reactor trip and engineered safety features actuation channel (except for containment spray and switchover from injection to recirculation) is designed on the deenergize-to-trip principle so loss of power, disconnection, open-channel faults, and the majority of internal channel short-circuit faults cause the channel to go into its tripped mode. The protection system is discussed in Sections 7.2 and 7.3.
Criterion 24 - Separation of Protection and Control Systems The protection system shall be separated from control systems to the extent that failure of any single control system component or channel, or failure or removal from service 4                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


isolation.2aBIPortions of thesystem required tocool the spentfuel (heat exchangers, pumps, associatedpiping and valves).2bCIMakeup water loop fromthe RWST through RWPpumps to isolation valve downstream of pumps SFP skimmer piping.-G(See Note 7)I(L)Line from isolation valve downstream of RWP pumps to the SFPC loop2bCIBalance of system.GI(L)SystemSystem SubsectionSafety Class ANS, N-18.2 TVAClass SeismicCategoryTable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-34CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-86 Heating, Ventilation,and Air Con-ditioning (HVAC)System  containment isolation valvesand piping between
of any single protection system component or channel which is common to the control and protection systems leaves intact a system satisfying all reliability, redundancy, and independence requirements of the protection system. Interconnection of the protection and control systems shall be limited so as to assure that safety is not significantly impaired.
Compliance The protection system is separate and distinct from control systems. Control systems may be dependent on the protection system in that control signals are derived from protection system measurements where applicable. These signals are transferred to the control system by isolation devices which are classified as protection components.
The adequacy of system isolation has been verified by testing under conditions of postulated credible faults. The failure or removal of any single control system component or channel, or failure or removal from service of any single protection system component or channel which is common to the control and protection system leaves intact a system which satisfies the requirements of the protection system.
Distinction between channel and train is made in this discussion. The removal of a train from service is allowed only during testing of the train. For discussion of details of compliance, see Chapter 7.
Criterion 25 - Protection System Requirements for Reactivity Control Malfunctions The protection system shall be designed to assure that specified acceptable fuel design limits are not exceeded for any single malfunction of the reactivity control systems, such as accidental withdrawal (not ejection or dropout) of control rods.
Compliance The protection system is designed to limit reactivity transients so that fuel design limits are not exceeded. Reactor shutdown by full-length rod insertion is completely independent of the normal control function since the trip breakers interrupt power to the rod mechanisms regardless of existing control signals. Thus, in the postulated accidental withdrawal, (assumed to be initiated by a control malfunction) flux, temperature, pressure, level and flow signals would be generated independently. Any of these signals (trip demands) would operate the breakers to trip the reactor.
Analyses of the effects of possible malfunctions are discussed in Chapter 15. These analyses show that for postulated dilution during refueling, startup, or manual or automatic operation at power, the operator has ample time to determine the cause of dilution, terminate the source of dilution and initiate reboration before the shutdown margin is lost. The analyses show that acceptable fuel damage limits are not exceeded even in the event of a single malfunction of either system.
Criterion 26 - Reactivity Control System Redundancy and Capability Two independent reactivity control systems of different design principles shall be provided. One of the systems shall use control rods, preferably including a positive means for inserting the rods, and shall be capable of reliably controlling reactivity FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                    3.1-15


valves.2aBIHVAC components, duct-work, and pipinglocated in theReactor, Auxiliary,Control, and Diesel Generator Buildingsthat perform safetyrelated air coolingand heating opera-tions or essential air filtration andpurification pro-cesses or thatsupply life sup-porting air (see
changes to assure that under conditions of normal operation, including anticipated operational occurrences, and with appropriate margin for malfunctions such as stuck rods, specified acceptable fuel design limits are not exceeded. The second reactivity control system shall be capable of reliably controlling the rate of reactivity changes resulting from planned, normal power changes (including xenon burnout) to assure acceptable fuel design limits are not exceeded. One of the systems shall be capable of holding the reactor core subcritical under cold conditions.
Compliance Two reactivity control systems are provided. These are rod cluster control assemblies (RCCAs) and chemical shim (boric acid). The RCCAs are inserted into the core by the force of gravity.
During operation the shutdown rod banks are fully withdrawn. The full length control rod system automatically maintains a programmed average reactor temperature compensating for reactivity effects associated with scheduled and transient load changes. The shutdown rod banks along with the full length control banks are designed to shutdown the reactor with adequate margin under conditions of normal operation and anticipated operational occurrences thereby ensuring that specified fuel design limits are not exceeded. The most restrictive period in core life is assumed in all analyses and the most reactive rod cluster is assumed to be in the fully withdrawn position.
The boron system will maintain the reactor in the cold shutdown state independent of the position of the control rods and can compensate for xenon burnout transients.
Details of the construction of the RCCAs are presented in Chapter 4 and the operation is discussed in Chapter 7. The means of controlling the boric acid concentration is described in Chapter 9. Performance analyses under accident conditions are included in Chapter 15.
Criterion 27 - Combined Reactivity Control Systems Capability The reactivity control systems shall be designed to have a combined capability, in conjunction with poison addition by the emergency core cooling system, of reliably controlling reactivity changes to assure that under postulated accident conditions and with appropriate margin for stuck rods the capability to cool the core is maintained.
Compliance Sufficient shutdown capability is provided to maintain the core subcritical for any anticipated cooldown transient, e.g., accidental opening of a steam bypass or relief valve, or safety valve stuck open. This shutdown capability is achieved by a combination of RCCA insertion and automatic boron addition via the emergency core cooling system with the most reactive control rod assumed to be fully withdrawn.
Manually controlled boric acid addition is used to supplement the RCCA in maintaining the shutdown margin for the long-term conditions of xenon decay and plant cooldown.
For further discussion, see Sections 4.3 and 7.2.
6                                          CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


Note 2).2bM,Q,or S IHydrogenAnalyzerBalance of system(see Note 3).Portion of H 2 Analyzer system which supplies pure O 2 as reagent gas to H 2 Analyzer Panels and Vacuum Trap Assemblies located on sample tubing low points for H 2 Analyzer System. (see Note 9).
Criterion 28 - Reactivity Limits The reactivity control systems shall be designed with appropriate limits on the potential amount and rate of reactivity increase to assure that the effects of postulated reactivity accidents can neither (1) result in damage to the reactor coolant pressure boundary greater than limited local yielding nor (2) sufficiently disturb the core, its support structures or other reactor pressure vessel internals to impair significantly the capability to cool the core. These postulated reactivity accidents shall include consideration of rod ejection (unless prevented by positive means), rod dropout, steam line rupture, changes in reactor coolant temperature and pressure, and cold water addition.
--M,Q,S, U,V-I(L)IIce CondenserPortions of thesystem required tofunction during a DBA.2bCIPortions of thesystem that provide a containmentisolation function2aBITable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-35WATTS BARWBNP-86System refrigerationpiping-NI(L)SystemSystem SubsectionSafety Class ANS, N-18.2 TVAClass SeismicCategorySystem refrigerationpiping in Reactor Building.-MI(L)Balance of system notclassified asrefrigeration piping (i.e. drains).-G or HI(L)Main SteamUpstream of, andincluding the flued-head anchors in thevalve room exterior
Compliance The maximum reactivity worth of control rods and the maximum rate of reactivity insertion employing control rods and boron removal are limited to values that prevent rupture of the reactor coolant system boundary or disruptions of the core or vessel internals to a degree that could impair the effectiveness of emergency core cooling.
The appropriate reactivity insertion rate for the withdrawal of RCCA and the dilution of the boric acid in the reactor coolant systems are specified in the Technical Specifications for the facility. The specification includes appropriate graphs that show the permissible mutual withdrawal limits and overlap of functions of the several RCCA banks as a function of power. These data on reactivity insertion rates, dilution and withdrawal limits are also discussed in Section 4.3. The capability of the chemical and volume control system to avoid an inadvertent excessive rate of boron dilution is discussed in Chapter 9. The relationship of the reactivity insertion rates to plant safety is discussed in Chapter 15.
Criterion 29 - Protection Against Anticipated Operational Occurrences The protection and reactivity control systems shall be designed to assure an extremely high probability of accomplishing their safety functions in the event of anticipated operational occurrences.
Compliance The protection and reactivity control systems are designed to assure an extremely high probability of fulfilling their intended functions. The design principles of diversity and redundancy coupled with a rigorous Quality Assurance Program and analyses support accomplishing this probability as does operating experience in plants using the same basic design. Section 4.2.3 and Sections 7.2 and 7.7 describe design bases and system design.
.2.4 Fluid Systems Criterion 30 - Quality of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed, fabricated, erected, and tested to the highest quality standards practical.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                    3.1-17


walls.2aBITurbine impulse pressure transmitter sensing lines-P-Downstream of theflued-head anchors.-H-Reactor CoolantEquipment within thereactor coolant systemboundary, failure ofwhich could cause a Condition III or IV loss-of-coolantaccident. (Com-ponents downstreamof a 3/8 inch orsmaller orifice areexcluded).1AITable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-36CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-86Portions of the systemprotected from reactorcoolant pressure by a 3/8 inch or smallerorifice, reactorvent head ventilationsystem, and branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller).2aBIPortions of the systemthat provide a contain-ment isolation function.2aBISystemSystem SubsectionSafety Class ANS, N-18.2 TVAClass SeismicCategorySafety and relief valvedischarge piping.-GI(L)Equipment that does notprovide a safety function(pressurizer relief tank (PRT), primary watersupply inside containment,nitrogen supply and ventheaders to the PRT).-GI(L)Residual HeatRemoval (RHR)Major pressure boundarycomponents.2aBISafety In-jection (SI)Balance of system thatrecirculates reactorcoolant after anaccident or preventsleakage of reactorcoolant to points external to the system. (See Note 8).2aBI Refueling waterstorage tank and SIS accumulators.2aBITable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-37WATTS BARWBNP-92Piping from the SISaccumulators to theaccumulator isolation valves, and from the RWST to SC-2a valvesin the safety injection, RHR,charging pump,and containmentspray pump suction
Means shall be provided for detecting and, to the extent practical, identifying the location of the source of reactor coolant leakage.
Compliance All reactor coolant system components are designed, fabricated, inspected and tested in conformance with ASME Boiler and Pressure Vessel Code, Section III.
Leakage is detected by an increase in the amount of makeup water required to maintain a normal level in the pressurizer. The reactor vessel closure joint is provided with a temperature monitored leakoff between double 0-rings.
Leakage inside the reactor containment is drained to the Reactor Building sump where the level is monitored. Leakage is also detected by measuring the airborne activity and humidity of the containment.
See Section 5.2 for compliance of reactor coolant system components with ASME Boiler and Pressure Vessel Code, Section III.
Criterion 31 - Fracture Prevention of Reactor Coolant Pressure Boundary The reactor coolant pressure boundary shall be designed with sufficient margin to assure that when stressed under operating, maintenance, testing, and postulated accident conditions (1) the boundary behaves in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the boundary material under operating, maintenance, testing, and postulated accident conditions and the uncertainties in determining (1) material properties, (2) the effects of irradiation on material properties, (3) residual, steady-state and transient stresses, and (4) size of flaws.
Compliance Close control is maintained over material selection and fabrication for the reactor coolant system to assure that the boundary behaves in a nonbrittle manner. The reactor coolant system materials which are exposed to the coolant are corrosion resistant stainless steel or Inconel. The reference temperature RTNDT of the reactor vessel material samples is established by Charpy V-Notch Tensile and 1/2 T compact tension tests. These tests also insure that materials with proper toughness properties and margins are used.
As part of the reactor vessel specification certain requirements which are not specified by the applicable ASME codes are performed, as follows:
(1)   1.A complete independent review of the supplier stress analysis is conducted by Westinghouse on the reactor vessel. Independent stress analysis is conducted in selected areas to ascertain that the design conditions imposed by the Westinghouse specification have been adequately accounted for.
8                                          CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


lines.2aBIPiping to CVCS holduptanks.2bCIAccumulators N 2 fill line.-GI(L)SystemSystem SubsectionSafety Class ANS, N-18.2 TVAClass SeismicCategory Steam Generator BlowdownPiping and valves from the steam generators  to and includingthe containment isolation valves2aBI    Piping and valves down stream of the containment isolation valves to Column U-GI(L)Piping and valves down stream of Column U.-H-Waste DisposalPortions of systemthat provide acontainment isolationfunction.2aBIEquipment whose failure could cause a site boundary dose of 0.5 rem or more (per RG 1.26).  (See
(2)  2.The reactor vessel received a complete stress analysis, including analysis for cyclic pressure and temperature operation. The ASME Boiler and Pressure Vessel Code, Section III, "Nuclear Power Plant Components,"
Class 1 rules to which these components are designed generally exempt them from cyclic analysis by code Paragraph NB-3222.4 (d).
(3)  3.Welding Preheat Requirements - On the reactor vessel, the non-mandatory preheat requirements for P1 and P12 material were performed on all weldments.
(4)   4.Reactor Vessel Out-of-Roundness Requirements - To ensure uniform coolant flow, the Westinghouse out-of-roundness requirements on the cylindrical region in the area of the thermal shield are above code. Section III, Class 1 out-of-roundness requirements are stated in Paragraph NB-4221.1 of the code. This referenced paragraph states that the difference in inches between the maximum and minimum inside diameters at any cross section shall not exceed the smaller of (D + 50)/200 and D/100, where D is the nominal inside diameter in inches at the cross section under consideration. Westinghouse required the out-of-roundness to be less than O.5 percent of the diameter in the cylindrical section of the vessel in the region of the thermal shield.
Special requirements were imposed by Westinghouse on the quality control procedure for both the basic materials of construction, and on various sub-assemblies and final assembly for the reactor coolant loop components. These requirements supplemented the rules for quality assurance stated in the applicable design codes.
Examples of the special quality assurance requirements for the reactor vessel that are beyond code requirements are:
Ultrasonic Examinations (1)  A 100-percent shear wave ultrasonic test of plate material.
(2)   An ultrasonic test of cladding bond.
(3)  Weld buildup areas to which the core support pads are attached are examined 100 percent.
(4)  Selected areas of completed vessel are ultrasonically mapped after hydrotest to provide a base for future in-service inspection.
(5)  Ultrasonic examination of the entire volume of all full penetration welds and heat affected zones in primary pressure boundary welds. The testing was done during fabrication upon completion of the welding and intermediate heat treatment.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-19


Note 8).3DITable 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-38CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Balance of system in Seismic Category Istructures for which a component failuremay cause damage to safety-relatedequipment.-GI(L)Equipment not within Seismic Category I structures.-H-Note 1:Although not purchased and stamped in accordance with ASME Code Section III requirements, the auxiliary control air system compressors and dryers meet the highest commercial quality standards.Note 2:Although not purchased under ASME Section III requirements, the HVAC equipment is required for plant safety and does meet the highest commercial quality standards. Safety Class 2b round flexible and trian gular duct board ducting installed as part of the ceiling air delivery system in the main co ntrol room above the suspended ceiling is qualified to limited seismic requirements, analyzed to ensure that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, and the ducting pressure boundary will not be lost, and the ducting is constructed of standard commercial grade materials.Note 3:Although not purchased under ASME Section III requirements, this HVAC equipment (except for the Reactor Building coolers) maintains the pressure boundary integrity of the ERCW system. Inside containment, the lower compartment coolers are Seismic  Category I except for  the cooling coils which are Seismic Category I(L). The upper compartment coolers, CRDM and instrument room coolers are Seismic Category I(L).Note 4:Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C. Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-39WATTS BARWBNP-86NRC Bulletin 83-06 "Nonconforming Materials Supplied By Tube-Line Corporation" has been evaluated for this system; Carbon Steel and Stainless Steel Program Plans were developed, presented to the NRC, verbally approved, initiated, completed, and reported to the NRC in the NRC Bulletin 83-06 report. The NRC Bulletin 83-06 and NCR GENMEB 8301 were closed and approved by the NRC Inspection Reports 50-390/84-03 and 50-391/84-03. The fittings that were installed and found to be acceptable are identified in Tables 3.1-6 and 3.1-7 of WB-DC-40-36 (Reference DIM WB-DC-40-36-18). The potential effect of unacceptable indications in radiographs of Tube-Line fittings welded with filler material has also been evaluated. The radiographs were supplied by Tube-Line as required by the material specification (ASME SA-403). Piping stress analysis was reviewed for Condition Adverse to Quality Report WBP890546. The review showed that stresses in the fittings are within ASME Section III allowable stresses even if the worst radiographic indications for each size fitting were to be transposed to the highest-stressed fitting. Authorization to use an alternative to the testing requirements of Section III Subsection ND-2000 of the ASME Code was provided by the NRC through a SER dated September 23, 1991. Note 5Portions of the control air system were not pneumatic tested to the correct pressure. NRC Inspection Report Nos. 50-390/90-04 and 50-391/90-04 has approved an alternate acceptance to pneumatic test criterion.Note 6The strainer backwash/backflush piping has been upgraded from Class G to Class G Seismic Category I(L) for pressure boundary integrity.Note 7Class G piping labeled with PBQA is analyzed for Seismic Category I(L) pressure boundary retention and is within the scope of the hydrostatic QA program (the valve seat terminates the PBQA boundary). All remaining Class G piping is seismically supported for position retention only.Note 8Manual block valves exist in the discharge piping of the relief valves which provide overpressure protection for the volume control tank, the boron injection tank, and the waste gas compressors. ASME Code, Section III, Subsection NC/ND, Paragraph 7153 prohibits the placement of a block valve in the discharge of pressure relief devices unless the block valve is installed with positive controls and interlocks and means are provided such that the operation of the controls and interlocks can be verified. The following design and administrative features, evaluated and approved by NRC,[2] are an acceptable alternative to the ASME code requirements because they provide reasonable assurance that both stop valves would not be left closed during plant operation. Redundant flowpaths exist in the relief valve discharge piping, the locked-open block valves are installed in a controlled access location, and administrative procedures are in place to assure the locked-open position of the block valves.Note 9Although not purchased under ASME Section III requirements, the O 2 supply bottles, related manifolds and vacuum trap assemblies are required for post-LOCA conditions and meet the highest commercial quality standards, and are qualified to WBNP Seismic Category I classification.Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory 3.2-40CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Note 10Some welds in the buried portion of the ERCW System did not receive a Section III hydrostatic test visual examination. They did, however, receive a vacuum box examination after welding and the code required NDE. Additionally, a pressure test was performed and held for 1 hour, then a Section XI VT-2 test was performed using 1 psi/min pressure drop or a 2 gal/min loss for 10 min. This was approved by the NRC in Safety Evaluation Report, Supplement 12.Note 11Although not originally purchased to ASME Section III and Seismic Category I requirements, the replacement immersion heater assemblies for boric acid tank A have been non-destructive tested and evaluated to be acceptable for the classification.Note 12The boron recycle system is not required for operation of Unit 1. See FSAR Section 9.3.7. The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.Note 13Not used for Unit 1 operation.Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function  (Cont'd)SystemSystem SubsectionSafety Class ANS, N-18.2 TVA Class SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-41WATTS BARWBNP-91Table 3.2-2b Classification of Systems Not Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below)        System Subsection Safety ClassANS. N-18.2TVA ClassSeismicCategoryPortion of system necessary for primary containment isolation.2aBIPortion of system in Seismic Category I structures and not in a higher safety class (except refrigeration piping).-G, H or L(See Note 1)I(L)Balance of system (except refrigeration piping).-H, J, or L-Note 1:In special applications, where the code requirements for Class G are not appropriate, Class K may be used.Note 2:  All Entries Above Apply to the Following Systems:Auxiliary BoilerCarbon Dioxide Storage, Fire Protection, and PurgeChemical Cleaning CondensateCondenser Circulating WaterCondenser Tube Cleaning Demineralized Water Extraction Steam Feedwater Treatment and Secondary Chemical FeedGland Seal Insulating Oil Gland Seal Water Heater Drains and VentsHydrogen CoolingLayup Water Treatment Lube Oil Makeup WaterPotable WaterPrimary Water Raw Cooling Water Raw Service Water Reheat Steam Roof and Floor Drains Service Air and Non-Essential Control Air Station Drainage Turbine Drains and Misc. Piping, Vacuum primer.
Dye Penetrant Testing (1)   Dye penetrant test all cladding surfaces and other vessel and head internal surfaces after hydrotest.
3.2-42CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Table 3.2-3  Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 1 of 4)
(2)   Dye penetrant examine the weld between the bottom head and instrumentation tubes, after each layer of weld is deposited.
EquipmentNumber    NumberPer Unit / In Plant  Qualified in  Conformance (1)with IEEE 344-19716.9-kV Auxiliary Power System 6.9-kV Shutdown Boards2/4Yes (2)
(3)   Dye penetrant examine weld between CRDM housing and closure head and vent pipe and closure head after the first layer; each 1/4 inch of weld deposited and final surface.
(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B6.9-kV Shutdown LogicRelay Panels2/4Yes(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B6.9-kV/480V ShutdownBoard Transformers6/12Yes(2000 kVA)(Unit 1) 1A1-A, 1A-A, 1A2-A, 1B1-B, 1B-B, 1B2-B (Unit 2) 2A1-A, 2A-A, 2A2-A, 2B1-B, 2B-B, 2B2-B6.9-kV/480V PressurizerHeater Backup Group Transformers (500 kVA)2/4Yes (3)(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B(Not required for Unit 1 operation)480V Auxiliary Power System480V Shutdown Boards4/8Yes (4)
(4)   Dye penetrant examine weld between the lower core support pad and the vessel shell, after the first layer and each 1/2 inch of weld metal are deposited.
(Unit 1)  1A1-A, 1A2-A,1B1-B, 1B2-B (Unit 2)  2A1-A, 2A2-A, 2B1-B, 2B2-B480V Reactor MOV Boards4/8Yes(Unit 1)  1A1-A, 1A2-A, 1B1-B, 1B2-B (Unit 2)  2A1-A, 2A2-A, 2B1-B, 2B2-B480V Reactor Vent Boards2/4Yes CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-43WATTS BARWBNP-92(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B480V Control and Auxiliary Bldg. Vent Boards4/8Yes(Unit 1)  1A1-A, 1B1-B, 1A2-A, 1B2-B (Unit 2)  2A1-A, 2B1-B, 2A2-A, 2B2-B 480V Diesel Auxiliary Boards4/8Yes(Unit 1)  1A1-A, 1B1-B,1A2-A, 1B2-B (Unit 2)  2A1-A, 2B1-B, 2A2-A, 2B2-B480V Distribution Panelboards for Pressurizer Heater Backup Groups2/4Yes(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B(Not required for Unit 1 Operation)480V Transfer Switch forComponent Cooling System
(5)   Base metal or weld metal surfaces which are exposed to mechanical operations was dye penetrant or magnetic particle inspected.
Magnetic Particle Testing (1)   Magnetic particle examination of all exterior vessel and head surfaces after hydrotest.
(2)    Magnetic particle examination of welds attaching the vessel supports, closure head lifting lugs, and refueling seal ledge to the reactor vessel, after the first layer and each 1/2 inch of weld metal are deposited.
(3)    Magnetic particle examination of all closure stud surfaces after threading.
Continuous circular and longitudinal magnetization was used.
(4)   Magnetic particle examination of I.D. surfaces of carbon and low alloy steel products that have their properties enhanced by accelerated cooling. This inspection was performed after forming and prior to cladding.
The fabrication and quality control techniques used in the fabrication of the reactor coolant system were equivalent to those for the reactor vessel. The inspections of reactor vessel, pressurizer, piping and steam generator were governed by ASME code requirements.
The permissible pressure - temperature relationships for selected heatup and cooldown rates were calculated using the methods of ASME Code Section III Non-mandatory Appendix G. The change in RTNDT due to irradiation during plant life was calculated using conservative methods and will be verified periodically by surveillance program irradiated material test data.
See Section 5.2 for further discussion of compliance.
0                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


Pump C-S-/1Yes120V AC Vital Plant Control Power System Static Inverter System Components4/8Yes a.Auctioneer unitb.A transformer rect ifier power supplyc.A single phase static inverter with associated equipment for control, voltage, regulation, filtering, and instrumentation
Criterion 32 - Inspection of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed to permit (1) periodic inspection and testing of important areas and features to assess their structural and leak-tight integrity, and (2) an appropriate material surveillance program for the reactor pressure vessel.
: d. Regulated transformer bypass source with static and manual bypass switches(Unit 1)  1-I, 1-II, 1-III, 1-IV (Unit 2) 2-I, 2-II, 2-III, 2-IV(Spare) 0-I, 0-II, 0-III, 0-IVTable 3.2-3  Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 2 of 4)
Compliance The design of the reactor coolant pressure boundary provides the capability for accessibility during service life to the entire internal surfaces of the reactor vessel, certain external zones of the vessel including the nozzle to reactor coolant piping welds and the top and bottom heads, and external surfaces of the reactor coolant piping except for the area of pipe within the primary shielding concrete. The inspection capability complements the leakage detection systems in assessing the pressure boundary component's integrity. The reactor coolant pressure boundary will be periodically inspected under the provision of ASME Code, Section XI.
EquipmentNumber    NumberPer Unit / In Plant  Qualified in  Conformance (1)with IEEE 344-1971 3.2-44CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92120V AC Vital Instrument Power Boards4/8Yes(Unit 1)  1-I, 1-II, 1-III, 1-IV(Unit 2)  2-I, 2-II, 2-III, 2-IV125V DC Vital Plant Control Power System480V AC Vital Transfer Switches-/4 Note (4)Yes Transfer SW I, II, III, IV 125V DC Vital Battery Chargers-/6 Note (4)Yes Chgrs I, II, III, IV, Spare Chgr 6-S and 7-S Transfer Devices for Spare 125V DC Vital Battery Chargers-/4 Note (4)Yes DC Transfer Switch 6DC-8DC Transfer Switch 7DC-S AC Transfer Switch 6AC-S AC Transfer Switch 7AC-S480V AC Vital Disconnect PanelsPanel I, II, III, IV-/4 Note (4)Yes125V DC Vital Batteries-/4 Note (4)Batteries I & IIBatteries III & IV125V DC Vital Battery Boards-/4 Note (4)Yes I, II, III, IVElectrical Penetrations High Voltage PowerPenetrations4/8YesNuclear Instrument System Penetrations4/8Yes Control Rod PositionIndication Penetrations1/2YesTable 3.2-3  Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 3 of 4)
The RTNDT properties of the reactor vessel core region forging, weldments and associated heat treated zones will be monitored by a surveillance program which is based on ASTM-E-185, Recommended Practice for Surveillance Testing on Structural Materials in Nuclear Reactors. Samples of reactor vessel plate materials will be retained and catalogued in case future engineering development shows the need for further testing.
EquipmentNumber    NumberPer Unit / In Plant  Qualified in  Conformance (1)with IEEE 344-1971 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-45WATTS BARWBNP-92Low Voltage, Power,Control, and Indication Penetrations41/82YesThermocouple Penetrations3/6YesOnsite Electrical Power Source Components Diesel Generator ProtectiveRelay Panels2/4Yes(Unit 1) 1A, 1B(Unit 2) 2A, 2BDiesel Control Panels2/4Yes 125V Diesel Generator Batteriesand Battery Racks2/4YesDC Distribution Panels2/4Yes 125V DC Battery Chargers2/4Yes Standby Diesel Generators2/4Yes(Unit 1)  1A-A, 1B-B(Unit 2)  2A-A, 2B-B1.Those equipment items procured prior to publicat ion of IEEE 344-1971 were purchased under specifications which TVA believes conform to the intent of that document. Equipment procurement, modification, and evaluation activities after September 1, 1974 applied the IEEE 344-1975 standard for seismic qualification.2.The 6.9-kV shutdown boards are qualified under Section 3.2.2.4.3 of IEEE 344-1971. The test unit withstood higher accelerations than shown on the frequency response spectrum for resonance at 1 percent damping. 3.The 500-kVA transformers were shown analytically to have lower stress under seismic loading conditions than the 2000-kVA transformers which were tested. The 500-kVA transformers are similar in design and construction to the 2000-kVA transformers. 4.The 125-V DC Vital Control Power System is not unitized therefore, numbers shown are on a per plant basis. Table 3.2-3  Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 4 of 4)
The material properties surveillance program includes not only the conventional tensile and impact tests, but also fracture mechanics specimens. The observed shifts in RTNDT of the core region materials with irradiation will be used to confirm the calculated limits to startup and shutdown transients.
EquipmentNumber    NumberPer Unit / In Plant  Qualified in  Conformance (1)with IEEE 344-1971 3.2-46CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-79Table 3.2-4  Summary of Codes and Standards for Safety Class Components of The Watts Bar Nuclear Plant Code RequirementsSafety Class ANS N-18.2TVA Class Seismic CategoryCode ClassificationPiping, Pumps, Valves, and VesselsRemarks1AIASME Code,Sec. III,Class 1Note 12aBIASME Code,Sec. III,Class 2Note 12bCIASME Code,Sec. III,Class 3 Notes 1,2,33DIASME Code, III,Class 3 Notes 1 & 3NOTE:1)Equipment designated "Vendor-Supplied Safety-Related Equipment Packages" on the drawing meet the following requirements:a.The vendor-supplied equipment packages (component and piping) contained within TVA piping systems classified as A, B, C, or D which do not meet the requirements of ASME Section III are installed and documented using the rules of ASME Section III, and manufacturer's instruction manuals, as requirements, except that the materials and equipment are not certified to Section III, and N-5 data report is not required. 10 CFR 50 Appendix B applies. In some cases there may be portions of these packages which are not safety-related (i.e., drains and vents past the first normally closed isolation valve) and do not require installation to these requirements.b.Any substitute material used or repairs performed by construction shall be in accordance with the original contract specification and drawing requirements.          c.TVA Class D components are those whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to the whole body, or its equivalent. Class D components do not perform a primary safety function.d.Exception is taken to Note 1.a above for the auxiliary systems supplied on the diesel generator skid. The fuel oil, engine cooling water (except the ASME Section III, Class 3 heat exchangers), starting air and lubricating oil systems are designed per ANSI B31.1. They are designed to Seismic Category I and are within the 10CFR50 Appendix B QA program. Criteria requires that any modifications to this piping are performed to meet the intent of ASME Section III Class 3 (TVA Class C).
To define permissible operating conditions below RTNDT, a pressure range was established which is bounded by a lower limit for pump operation and an upper limit which satisfies reactor vessel stress criteria. To allow for thermal stresses during heatup or cooldown of the reactor vessel, an equivalent pressure limit was defined to compensate for thermal stress as a function of rate of change of coolant temperature.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-47WATTS BARWBNP-792)ANSI B31.1 code is an acceptable substitute for the ASME code for installation of piping and valves on  Class C instrument lines attached to TVA Class M, Q, and S systems. 10 CFR 50 Appendix B applies. 3)Condition Adverse to Quality Report WBP 900336SCA and NRC Violation 390/90-15-02 identified lack of penetration and/or lack of fusion in ASME Code Section III, Class 3 butt welds made prior to September 26, 1990.Table 3.2-4  Summary of Codes and Standards for Safety Class Components of The Watts Bar Nuclear Plant Code RequirementsSafety Class ANS N-18.2TVA Class Seismic CategoryCode ClassificationPiping, Pumps, Valves, and VesselsRemarks 3.2-48CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-88Table 3.2-5  Non-Nuclear Safety ClassificationsTVA Class SeismicCategoryPipingCode ClassificationPumpsValvesVessels  GI(L)ANSI B31.1Manufac-turers StandardsANSI B31.1B16.5, or MSS-SP-66ASME Code, Sec. VIII, Div. 1  HNote 1ANSI B31.1 1*1  Code used is determined by the design requirements of the equipment.Note 1:Those portions of TVA Class H and L systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading.Note 2:This class applies to specific sensing lines which meet ASME Code Section III, Class 3 requirements except that inertia effects need not be used for design of lines in non seismic areas and independent verification by an Authorized Nuclear Inspector is not required for fabrication and installation. 10 CFR 50 Appendix B applies. N-5 data report is not required. Portions of sensing lines in Seismic Category I structures meet Seismic Ca tegory I(L) pressure boundary requirements.ANSI B31.1,B16.5, or MSS-SP-66
Since the normal operating temperature of the reactor vessel is well above the maximum expected RTNDT, brittle fracture during normal operation is not considered to be a credible mode of failure. Additional details can be found in Section 5.2.
* JN/A    *  *    *
Criterion 33 - Reactor Coolant Makeup A system to supply reactor coolant makeup for protection against small breaks in the reactor coolant pressure boundary shall be provided. The system safety function shall be to assure that specified acceptable fuel design limits are not exceeded as a result of reactor coolant loss due to leakage from the reactor coolant pressure boundary and rupture of small piping or other small components which are part of the boundary. The system shall be designed to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-21
* KI(L)    *  *    *
* LNote 1    *  *    *
* PNote 2    *  *    *
* CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-49WATTS BARWBNP-92Table 3.2-6  TVA Heating, Ventilation, and Air Conditioning ClassificationsTVAClass  ANSSafety ClassCode Jurisdiction SeismicCategory M2b*ANSI B31.5I or I(L)NNoneANSI B31.5Note 1 Q2b*Round Duct, Steel, Spiralor Longitudinal Seam, Locked Seam or Welded (ASTM A211) and SMACNA High Velocity Duct Con-struction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/
ASME N509 (see Note 2). I or I(L) S2b*Rect. Duct, Steel, Locked Seam or Welded, SMACNA High Velocity Duct Construction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/ASME N509 (see Note 2).I or (L)Note 4UNoneRound Duct, Steel, SMACNA LowVelocity Duct Construction Standards, 4th Edition, 1969.


Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).I(L)VNoneRect. Duct, Steel, SMACNA LowVelocity Duct Construction Standards, 4th Edition, 1969.
accomplished using the piping, pumps, and valves used to maintain coolant inventory during normal reactor operation.
Compliance The chemical and volume control system includes charging pumps and makeup paths that serve the safety function of maintaining reactor coolant inventory during normal operations and in the event of small reactor coolant leakages. The charging pumps can maintain reactor coolant pressure sufficiently high to allow orderly reactor shutdown for small tubing or small pipe breaks. Chapter 5 discusses the reactor coolant system, Section 9.3.4 discusses the chemical and volume control system, and Chapter 15 analyzes charging pump performance and fuel damage in event of postulated accidents. The offsite power system and onsite power system are discussed in Sections 8.2 and 8.3, respectively.
Criterion 34 - Residual Heat Removal (RHR)
A system to remove residual heat shall be provided. The system safety function shall be to transfer fission product decay heat and other residual heat from the reactor core at a rate such that specified acceptable fuel design limits and the design conditions of the reactor coolant pressure boundary are not exceeded.
Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
Compliance The RHR system includes two redundant trains of pumps and heat exchangers each having sufficient heat removal capability to ensure fuel protection. The system is Seismic Category I and is provided electric power by either the preferred power system or the diesel generators of the standby power system. The normal steam and power conversion system is used for the first stage cooldown (i.e., above 350EF and 400 psig). The auxiliary feedwater system provides guaranteed backup of the steam and power conversion system in this function. The systems together accommodate the single-failure criterion.
Section 5.5.7 describes the RHR System.
Criterion 35 - Emergency Core Cooling A system to provide abundant emergency core cooling shall be provided. The system safety function shall be to transfer heat from the reactor core following any loss of reactor coolant at a rate such that (1) fuel and clad damage that could interfere with continued effective core cooling is prevented and (2) clad metal-water reaction is limited to negligible amounts.
2                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA


Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).I(L)*TVA Class M, Q, and S designations are also used on heating, ventilation, and air-conditioning systems which have no ANS safety class requirements if seismic requirements are invoked.
Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
3.2-50CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92Note 1:Those portions of TVA Class N systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading. Note 2:Those portions of TVA Classes Q and S Category I duct which are of welded construction, that are fabricated or repaired after January 12, 1987, meet the welding requirements of ANSI/ASME N509 1976. The workmanship samples are not required to have Penetrant Testing (PT) or Magnetic Testing (MT).Note 3:All duct installations prior to December 21, 1990, were evaluated and qualified to meet the requirements of WB-DC-40-31.8.All duct installations after December 21, 1990, shall be in accordance with specifications G-95, N3M-914, N3C-942, and Design Criteria WB-DC-40-31.8.Note 4Safety Class 2b round flexible and triangular duct board ducting installed as part of this ceiling air delivery system in the main control room above the suspended ceiling is qualified to Seismic I(L) requirements, analyzed to ensue that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, the ducting pressure boundary will not be lost, and is constructed of standard commercial grade materials.Table 3.2-6  TVA Heating, Ventilation, and Air Conditioning ClassificationsTVAClass  ANSSafety ClassCode Jurisdiction SeismicCategory CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-51WATTS BARWBNP-90Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When UsedI.CODE CASES A.DESIGN/MATERIAL RELATED N/AN-192Provides rules for use of flexible metal hoseRegulatory Guide 1.84, Rev 26 imposes the following addition to the requirements of Code Case N-192:  The applicant should indicate system application, design and operating pressure/temperature rating of the flexible hose. Data to demonstrate compliance of the flexible hose with NC/ND-3649 particularly NC/ND-3649.4(e), are required to be furnished with the application.Referenced in data report for some of the flexible metal hose
Compliance The Emergency Core Cooling System (ECCS) design and safety analysis is in accordance with the NRC Acceptance Criterion for Emergency Core Cooling System for Light-Water Power Reactors of December 1973 (10 CFR 50.46).
By combining the use of passive accumulators, centrifugal charging pumps, safety injection pumps, and residual heat removal pumps, emergency core cooling is provided even if there should be a failure of any component in any system. The ECCS employs passive system of accumulators which do not require any external signals or source of power. Two independent and redundant pumping systems are also provided to supplement the passive accumulator system. These systems are arranged to that the single failure of any active component does not prevent meeting the short-term cooling requirements.
The primary function of the ECCS is to deliver borated cooling water to the reactor core in the event of a LOCA. This limits the fuel-clad temperature and thereby ensures that the core will remain intact and in place and fuel damage will not exceed that stipulated as a basis in the safety analysis (Chapter 15). This protection is afforded for:
(1)  All pipe break sizes up to and including the hypothetical circumferential rupture of a reactor coolant loop, (2)  A loss of coolant associated with a rod ejection accident.
The ECCS is described in Section 6.3. TheLOCA, including an evaluation of consequences, is discussed in Chapter 15.
Criterion 36 - Inspection of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic inspection of important components, such as spray rings in the reactor pressure vessel, water injection nozzles, and piping, to assure the integrity and capability of the system.
Compliance Design provisions facilitate access to the critical parts of the reactor vessel internals, injection nozzles, pipes and valves for visual or nondestructive inspection.
The components outside the containment are accessible for leaktightness inspection during operation of the reactor.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-23


assemblies.N-224-1N/AProvides rules for the use of ASTM A-500 Grade B and ASTM A-501 as integrally welded attachments.N/AN-304Provides for use of other materials not listed in the appendices.NoneCode Case N-304 was originally approved by the NRC in Regulatory Guide 1.84, Rev.
Details of the inspection program for the reactor vessel internals are included in Section 5.4. Inspection of the ECCS is discussed in Section 6.3.
Criterion 37 - Testing of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.
Compliance The design provides for periodic testing of both active and passive components of the ECCS.
Proof tests of the components were performed in the manufacturer's shop.
Preoperational system hydrostatic and performance tests demonstrate structural and leaktight integrity of components and proper functioning of the system. Thereafter, periodic tests demonstrate that components are functioning properly.
Design provisions include special instrumentation, testing, and sampling lines to perform the tests during plant shutdown to demonstrate proper automatic operation of the ECCS.
Each active component of the ECCS may be individually actuated on the normal power source at any time during plant operation to demonstrate operability. Components are actuated on the emergency power system during preoperational tests and subsequently during plant shutdown per Technical Specifications.
Details of the ECCS are found in Section 6.3, with periodic testing procedures identified in Section 6.3.4. Performance under accident conditions is evaluated in Chapter 15.
Criterion 38 - Containment Heat Removal A system to remove heat from the reactor containment shall be provided. The system safety function shall be to reduce rapidly, consistent with the functioning of other associated systems, the containment pressure and temperature following any LOCA and maintain them at acceptably low levels.
Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
4                                          CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
Compliance Systems are provided to effect post-accident containment heat removal. The systems are classified as engineered safety features and as such incorporate a large degree of redundancy as well as being provided with multiple power supplies.
Containment heat removal is provided by the ice condenser and by containment sprays. The ice condenser is a passive system consisting of energy absorbing ice on which steam is condensed during and immediately after a LOCA. The condensation of steam on the ice limits the pressure and temperature to values less than containment design.
An air return system is used to circulate the containment gaseous inventory through the upper compartment, lower compartment, and ice condenser after the initial blowdown. This maintains proper mixing of the containment air and steam with the heat removal media, spray and ice, for the necessary heat removal.
The containment spray system sprays coolant automatically into the upper compartment containment atmosphere in the event of a large LOCA, thereby removing containment heat. The recirculation mode allows for a long-term heat removal by means of two spray systems, each of which contains redundant components including spray headers. The containment spray system consists of two completely separate trains consisting of pumps, heat exchangers, valves, and headers. The containment spray system is initiated automatically upon containment high pressure and is later manually realigned for proper operation in the recirculation mode. The residual heat removal spray contains two spray headers which are supplied from separate trains of the residual heat removal system by manual diversion of a portion of the low-pressure safety injection system flow during recirculation.
The loss of a single active component was assumed in the design of these systems.
Emergency power system arrangements assure the proper functioning of the air return fan system, and the containment spray system and residual heat removal sprays.
The engineered safety features systems are discussed in Chapter 6; the electric power systems in Chapter 8; the protection systems in Chapter 7.
Criterion 39 - Inspection of Containment Heat Removal System The containment heat removal system shall be designed to permit appropriate periodic inspection of important components, such as the torus, pumps, spray nozzles, and piping to assure the integrity and capability of the system.
Compliance The ice condenser design includes provisions for visual inspections of the ice bed flow channels, doors, and cooling equipment. The air return fan system provides for visual inspection of the fans and the associated backflow dampers and for duct systems that are not embedded in concrete. The containment spray system and the RHR sprays are designed such that active and passive components can be readily inspected to demonstrate system readiness. Pressure contained systems are inspected for leaks FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                3.1-25
 
from pump seals, valve packing, flange joints, and relief valves. During operational testing of the containment spray pumps and RHR pumps, the portions of the systems subjected to pressure are inspected for leaks.
System design details are given in Section 6.2.
Criterion 40 - Testing of Containment Heat Removal System The containment heat removal system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole, and, under conditions as close to the design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.
Compliance The containment heat removal systems described in Section 6.2 are designed to permit periodic testing so that proper operation can be assured. In some cases whole systems can be operated for test purposes. In others, individual components are operated for functional tests so that plant operations are not disrupted.
The ice condenser contains no active components, other than the ice condenser doors, which are required to function during an accident condition. Samples of the ice are taken periodically and tested for boron concentration. The lower inlet door opening force is measured when the reactor is in the shutdown condition. The position of the lower inlet doors is monitored at all times. Top deck door and intermediate deck doors are tested for operability during the shutdown condition. Air return fans and their associated backflow dampers are tested for operability while the reactor is shut down for refueling.
All active components of the containment spray system and the residual heat removal spray system are tested in place after installation. These spray systems receive initial flow tests to assure proper dynamic functioning. Further testing of the active components is conducted after component maintenance and in accordance with technical specifications. Air test lines, located upstream of the spray isolation valves, are provided for testing to assure that spray nozzles are not obstructed. Testing of transfer between normal and emergency power supplies is also conducted.
Criterion 41 - Containment Atmosphere Cleanup Systems to control fission products, hydrogen, oxygen, and other substances which may be released into the reactor containment shall be provided as necessary to reduce, consistent with the functioning of other associated systems, the concentration and quality of fission products released to the environment following postulated accidents, and to control the concentration of hydrogen or oxygen and other substances in the containment atmosphere following postulated accidents to assure that containment integrity is maintained.
6                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
Each system shall have suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) its safety function can be accomplished, assuming a single failure.
Compliance The Shield Building, surrounding the primary containment, serves as a secondary containment. During accident conditions prior to containment isolation, primary and secondary containment purge exhaust is processed by the containment purge system filters prior to release to the atmosphere. The emergency gas treatment system (Section 6.2) maintains this secondary containment at a negative pressure during the entire post-accident period. The emergency gas treatment system also collects and processes the secondary containment atmosphere. After processing, the portion of this processed air necessary to assure a negative pressure is exhausted through the Shield Building exhaust vent. The remainder is recirculated and distributed in the secondary containment.
The Auxiliary Building serves to collect any equipment leakage during the recirculation of containment sump water. The Auxiliary Building ventilation system (Section 9.4) is isolated by the containment Phase A isolation signal. The AuxiliaryBuilding gas treatment system (Section 9.4) then maintains the building at a negative pressure and processes any inleakage prior to release to the environment.
Post-accident hydrogen control within the containment is provided by an electrical hydrogen recombiner (Section 6.2). Distribution of the atmosphere within the containment is provided by the air return fan system (Section 6.8). The air return fan system also takes suction from each compartment to prevent stagnation and excessive accumulation of hydrogen.
Criterion 42 - Inspection of Containment Atmosphere Cleanup Systems The containment atmosphere cleanup systems shall be designed to permit appropriate periodic inspection of important components, such as filter frames, ducts, and piping, to assure the integrity and capability of the systems.
Compliance The emergency gas treatment system (Section 6.2) filtration train and fans and the containment purge filters (Section 9.4.6) are located in the Auxiliary Building and are designed to facilitate inspections. The dampers that control recirculation and exhaust of the emergency gas treatment system effluent are located inside the Shield Building and may be inspected during reactor shutdown.
The entire Auxiliary Building gas treatment system (Section 9.4.2) is located in the Auxiliary Building and is designed to facilitate inspection. The electric hydrogen recombiners (Section 6.2.5) are located inside the containment and may he inspected during reactor shutdown.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                3.1-27
 
Criterion 43 - Testing of Containment Atmosphere Cleanup Systems The containment atmosphere cleanup systems shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the systems such as fans, filters, dampers, pumps, and valves, and (3) the operability of the systems as a whole and, under conditions as close to design as practical, the performance of the full operational sequence that brings the systems into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of associated systems.
Compliance The containment purge system (Section 9.4) is designed to permit testing to assure leaktightness of the filter trains; functional testing to assure operability of containment isolation valves; and performance testing to assure filter efficiency and to demonstrate the isolation valve closure in response to the accident mode isolation signal.
The emergency gas treatment system (Section 6.2) is designed to permit testing to assure leaktightness of the filtration trains; functional testing to assure operability of the fans, dampers, and instrumentation; and performance testing to assure overall operability of the system and to demonstrate the proper alignment of the system to the accident unit.
The AuxiliaryBuilding gas treatment system (section 9.4) is designed to allow testing to assure the pressure and leaktightness of the filters, adsorbers, and the filtration train housing to assure the operability of the fans and dampers; and to assure the operability of the system as a whole. The system design will permit testing of the actuation signals, the isolation of the normal ventilation system, and the proper alignment of dampers.
The hydrogen recombiner system (Section 6.2.5) and hydrogen mitigation system (Section 6.2.5A) are designed to allow testing to assure the operability of the manual controls that place the systems in operation, and to assure the power supply and the operability of the electric heaters. The systems are designed to permit, under conditions as close to design as practical, the operability of each system as a whole.
Criterion 44 - Cooling Water A system to transfer heat from structures, systems, and components important to safety, to an ultimate heat sink shall be provided. The system safety function shall be to transfer the combined heat load of these structures, systems, and components under normal operating and accident conditions.
Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.
8                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
Compliance A Seismic Category I Component Cooling System (CCS) (Section 9.2) is provided to transfer heat from the reactor coolant system reactor support equipment and engineered safety equipment to a Seismic Category I Essential Raw Cooling Water (ERCW) system (Section 9.2).
The CCS serves as an intermediate system and thus a barrier between potentially or normally radioactive fluids and the river water which flows in the ERCW system.
The CCS consists of two independent engineered safety subsystems, each of which is capable of serving all necessary loads under normal or accident conditions.
In addition to serving as the heat sink for the CCS, the ERCW system is also used as heat sink for the containment through use of the containment spray heat exchangers, and engineered safety equipment through use of compartment and space coolers.
The ERCW system consists of two independent trains, each of which is capable of providing all necessary heat sink requirements. The ERCW system transfers heat to the ultimate heat sink (Section 9.2).
Electric power is discussed in Chapter 8.
Criterion 45 - Inspection of Cooling Water System The cooling water system shall be designed to permit appropriate periodic inspection of important components, such as heat exchangers and piping, to assure the integrity and capability of the system.
Compliance The integrity and capability of the component cooling water system (Section 9.2) and essential raw cooling water system (Section 9.2) will be monitored during normal operation by the Surveillance Instruction Program. Nonsafety related systems may be isolated temporarily for inspection. All major components will be visually inspected on a periodic basis.
The component cooling and essential raw cooling water pumps are arranged such that any pump may be isolated for inspection and maintenance while maintaining full plant operational capabilities.
Criterion 46 - Testing of Cooling Water System The cooling water system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and the performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation for reactor shutdown and for LOCAs, including operation of applicable portions of the protection system and the transfer between normal and emergency power sources.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                3.1-29
 
Compliance The cooling water systems will be pressurized during plant operations; thus, the structural and leaktight integrity of each system and the operability and performance of their active components will be continuously demonstrated. In addition, normally idle portions of the piping system and idle components will be tested during plant shutdown. The emergency functions of the systems will be periodically tested out to the final actuated device in accordance with the technical specifications.
For details, see the discussions on electric power (Chapter 8), component cooling water (Section 9.2), essential raw cooling water (Section 9.2), and instrumentation and controls (Chapter 7).
.2.5 Reactor Containment Criterion 50 - Containment Design Basis The reactor containment structure, including access openings, penetrations, and the containment heat removal system shall be designed so that the containment structure and its internal compartments can accommodate, without exceeding the design leakage rate and, with sufficient margin, the calculated pressure and temperature conditions resulting from any LOCA. This margin shall reflect consideration of (1) the effects of potential energy sources which have not been included in the determination of the peak conditions, such as energy in steam generators and energy from metal-water and other chemical reactions that may result from degraded emergency core cooling functioning, (2) the limited experience and experimental data available for defining accident phenomena and containment responses, and (3) the conservatism of the calculational model and input parameters.
Compliance The containment structure, including access openings and penetrations, is designed with sufficient conservatism to accommodate, without exceeding the design leakage rate, the transient peak pressure and temperature associated with a postulated reactor coolant piping break up to and including a double-ended rupture of the largest reactor coolant pipe.
The containment design consists of a freestanding steel containment vessel and a separate outer reinforced concrete shield wall and roof. The ice condenser concept is used for energy absorption during a LOCA. The annular space between the containment vessel and the exterior shield wall forms a double barrier to fission products and is maintained at less than atmospheric pressure. The ice condenser, which is located inside the steel containment and consists of a suitable quantity of borated ice in a cold storage compartment, provides rapid energy absorption to maintain the containment vessel design pressure at a low level and to reduce the peak duration, thus reducing the potential for escape of fission products from the primary containment vessel.
The functional design of the containment is based upon the following assumptions and conditions:
0                                                CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
(1)    A design basis blowdown energy and mass release.
(2)    Secondary energy released by safety injection.
(3)    Carryover energy from zirconium-water reaction.
(4)    Decay heat from the reactor at rated power.
(5)    The single failure criterion is accommodated.
The internal design pressure of the containment is greater than the peak pressure occurring as the result of the complete blowdown of the reactor coolant through any rupture of the reactor coolant system up to and including the hypothetical double-ended severance of the largest reactor coolant pipe. The design pressure is not exceeded during any subsequent long-term pressure transient.
Refer to Section 3.8 for a description of containment, and to Section 6.2 for design basis details.
Criterion 51 - Fracture Prevention of Containment Pressure Boundary The reactor containment boundary shall be designed with sufficient margin to assure that under operating, maintenance, testing, and postulated accident conditions (1) its ferritic materials behave in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the containment boundary material during operation, maintenance, testing, and postulated accident conditions, and the uncertainties in determining (1) material properties, (2) residual, steady-state, and transient stresses, and (3) size of flaws.
Compliance The containment vessel and its penetration sleeves meet the material, design and technical process requirements of ASME Boiler and Pressure Vessel Code, Section III, Class B. Charpy V-notch impact tests were made of the containment vessel material (ASTM A 516, Grade 70) 5/8 inch and greater, weld deposit, and the base metal weld heat affected zone employing a test temperature at least 30E F below minimum service temperature in accordance with ASME Code, Paragraph N-1210. This test measured the ductile to brittle transition with allowable values for energy absorption given in Tables N-421 and N-422. It insures that the material used will not behave in a brittle manner and that rapidly propagating fracture is minimized. The containment boundary design considered uncertainties in material properties, residual, steady-state and transient stresses, and material flaws along with conservative allowable stress levels for all stressed elements of the containment boundary. All material was examined for flaws that would adversely affect the performance of the material in its intended location. See Section 6.2 for further details.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-31
 
Criterion 52 - Capability for Containment Leakage Rate Testing The reactor containment and other equipment which may be subjected to containment test conditions shall be designed so that periodic integrated leakage rate testing can be conducted at containment design pressure.
Compliance The reactor containment design permitted overpressure strength testing during construction and permits preoperational integrated leakage rate testing at containment design pressure and at reduced pressure, in accordance with Appendix J, 10 CFR 50.
The reactor containment and other equipment which may be subjected to containment test conditions are designed so that periodic integrated leakage rate testing can be conducted at containment design pressure. All equipment which may be subjected to the test pressure is either vented to the containment, removed from the containment during the test, or designed to withstand the containment design pressure without damage.
The preoperational integrated leak tests at peak pressure verify that the containment, including the isolation valves and the resilient penetration seals, leaks less than the allowable value of 0.25 weight percent per day at peak pressure.
Details concerning the conduct of periodic integrated leakage rate tests are in Section 6.2.
Criterion 53 - Provisions for Containment Testing and Inspection The reactor containment shall be designed to permit (1) appropriate periodic inspection of all important areas, such as penetrations, (2) an appropriate surveillance program, and (3) periodic testing at containment design pressure of the leaktightness of penetrations which have resilient seals and expansion bellows.
Compliance The reactor containment and the containment isolation system (Section 6.2) are designed so that:
(1)  1.Integrated leak rate tests can be run during plant lifetime (see compliance to Criterion 52).
(2)  2.Visual inspections can be made of all important areas, such as penetrations.
(3)  3.An appropriate surveillance program can be maintained (see Section 6.2).
(4)  4.Periodic testing at containment design pressure of the leaktightness of isolation valves and penetrations which have resilient seals and expansion bellows is possible.
(5)  5.The operability of the containment isolation system can be demonstrated periodically.
2                                          CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
In testing locally the resilient seals and expansion bellows leakages, the guidelines for Type B tests in Appendix J to 10 CFR 50 will be followed.
Criterion 54 - Piping Systems Penetrating Containment Piping systems penetrating primary reactor containment shall be provided with leak detection, isolation, and containment capabilities having redundance, reliability, and performance capabilities which reflect the importance to safety of isolating these piping systems. Such piping systems shall be designed with a capability to test periodically the operability of the isolation valves and associated apparatus and to determine if valve leakage is within acceptable limits.
Compliance Containment isolation features are classified as Seismic Category I. These components required quality assurance measures which enhance reliability. The containment isolation design provides for a double barrier at the containment penetration in those fluid systems that are not required to function following a design basis event.
All piping systems penetrating the containment, in so far as practical, have been provided with test vents and test connections or have other provisions to allow periodic leak testing as required. Section 6.2.4.4 has further details on testing.
See Section 6.2.4 for general containment isolation details and Section 6.2.4.3 for exceptions to General Design Criteria 54, 55, 56, and 57.
Criterion 55 - Reactor Coolant Pressure Boundary Penetrating Containment Each line that is part of the reactor coolant pressure boundary and that penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provisions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis:
(1)  One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2)  One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3)  One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4)  One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-33
 
Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.
Other appropriate requirements to minimize the probability or consequences of an accidental rupture of these lines or of lines connected to them shall be provided as necessary to assure adequate safety. Determination of the appropriateness of these requirements, such as higher quality in design, fabrication, and testing, additional provisions for inservice inspection, protection against more severe natural phenomena, and additional isolation valves and containment, shall include consideration of the population density, use characteristics, and physical characteristics of the site environs.
Compliance The reactor coolant pressure boundary is defined as those piping systems and components which contain reactor coolant as design pressure and temperature. With the exception of the reactor coolant sampling lines, the entire reactor coolant pressure boundary, as defined above, is located entirely within the containment structure. All sampling lines are provided with remotely operated valves for isolation in the event of a failure. These valves also close automatically on a containment isolation signal.
All other piping and components which may contain reactor coolant are low pressure, low temperature systems which would yield minimal environmental doses in the event of failure.
The sampling system and low-pressure systems are described in Section 9.3. An analysis of malfunctions in these systems is included in Chapter 15.
Criterion 56- Primary Containment Isolation Each line that connects directly to the containment atmosphere and penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provisions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis:
(1)    One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2)    One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3)    One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4)    One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.
4                                            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.
Compliance At least two barriers are provided between the atmosphere outside the containment and the containment atmosphere, the reactor coolant system, or closed systems which are assumed vulnerable to accident forces.
Redundant valving is provided for piping that is open to the atmosphere and to the containment atmosphere. Additional details can be found in Section 6.2.
Criterion 57 - Closed Systems Isolation Valves Each line that penetrates primary reactor containment and is neither part of the reactor coolant pressure boundary nor connected directly to the containment atmosphere shall have at least one containment isolation valve which shall be either automatic, or locked closed, or capable of remote manual operation. This valve shall be outside containment and located as close to the containment as practical. A simple check valve may not be used as the automatic isolation valve.
Compliance Those lines that penetrate the containment, that do not communicate with either the reactor coolant pressure boundary or the containment atmosphere, and that are not affected byLOCA forces, are defined as closed systems. All lines penetrating the containment are designed to meet this GDC.
See Section 6.2.4 for a discussion of containment isolation valves.
.2.6 Fuel and Radioactivity Control Criterion 60 - Control of Releases of Radioactive Materials to the Environment The nuclear power unit design shall include means to control suitably the release of radioactive materials in gaseous and liquid effluents and to handle radioactive solid wastes produced during normal reactor operation, including anticipated operational occurrences. Sufficient holdup capacity shall be provided for retention of gaseous and liquid effluents containing radioactive materials, particularly where unfavorable site environmental conditions can be expected to impose unusual operational limitations upon the release of such effluents to the environment.
Compliance Liquid, gaseous, and solid radioactive waste processing equipment is provided. The principles of filtration, demineralization, evaporation, solidification and storage for decay are utilized as described in Chapter 11. Process monitoring is provided to control this equipment and regulate releases to the environment as described in Section 11.4.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                    3.1-35
 
Criterion 61 - Fuel Storage and Handling and Radioactivity Control The fuel storage and handling, radioactive waste, and other systems which may contain radioactivity shall be designed to assure adequate safety under normal and postulated accident conditions. These systems shall be designed (1) with a capability to permit appropriate periodic inspection and testing of components important to safety, (2) with suitable shielding for radiation protection, (3) with appropriate containment, confinement, and filtering systems, (4) with a residual heat removal capability having reliability and testability that reflects the importance to safety of decay heat and other residual heat removal, and (5) to prevent significant reduction in fuel storage coolant inventory under accident conditions.
Compliance The spent fuel pool and cooling system, fuel handling system, radioactive waste processing systems, and other systems that contain radioactivity are designed to assure adequate safety under normal and postulated accident conditions.
(1)    Components are designed and located such that appropriate periodic inspection and testing may be performed.
(2)    All areas of the plant are designed with suitable shielding for radiation protection based on anticipated radiation dose rates and occupancy as discussed in Section 12.1.
(3)    Individual components which contain significant radioactivity are located in confined areas which are adequately ventilated through appropriate filtering systems.
(4)    The spent fuel cooling systems provide cooling to remove residual heat from the fuel stored in the spent fuel pool. The system is designed for testability to permit continued heat removal.
(5)    The spent fuel pool is designed such that no postulated accident could cause excessive loss of coolant inventory.
Radioactive waste treatment systems are located in the Auxiliary Building, which contains or confines leakage under normal and accident conditions.
The Auxiliary Building gas treatment system includes charcoal filtration which minimizes radioactive material release associated within a postulated spent fuel handling accident.
Fuel storage and handling is discussed in Section 9.1, and radioactive waste management in Chapter 11.
Criterion 62 - Prevention of Criticality in Fuel Storage and Handling Criticality in the fuel storage and handling system shall be prevented by physical systems or processes, preferably by use of geometrically safe configurations.
6                                              CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
Compliance The restraints and interlocks provided for safe handling and storage of new or spent fuel are discussed in Section 9.1.
The center-to center distance between adjacent spent fuel assemblies together with the use of fixed Boral neutron absorber panels in the storage racks and burnup credit administrative controls on fuel assembly placement are sufficient to ensure subcriticality, even if unborated water is used to fill the spent fuel storage pool. Credit for borated water is permitted to maintain subcriticality for inadvertent misplacement of a fuel assembly, e.g., loading of a fresh fuel assembly in a storage cell designated for exposed fuel or placement outside of and adjacent to a rack module.
Layout of the fuel handling area is such that the spent fuel casks will never be required to traverse the spent fuel storage pool during removal of the spent fuel assemblies.
Criterion 63 - Monitoring Fuel and Waste Storage Appropriate systems shall be provided in fuel storage and radioactive waste systems and associated handling area (1) to detect conditions that may result in loss of residual heat removal capability and excessive radiation levels and (2) to initiate appropriate safety actions.
Compliance Failure in the spent fuel pool cooling system will result in control room annunciators and local temperature indication and high radiation in the spent fuel storage area will produce a local and control room alarm. The operator can then take appropriate action to alleviate the situation. High radiation in the radioactive waste area will produce a local alarm enabling notification of the operator to allow appropriate action to be taken.
See Sections 9.1 and 12.3 and Chapter 11 for further details.
Criterion 64 Monitoring Radioactivity Releases Means shall be provided for monitoring the reactor containment atmosphere, spaces containing components for recirculation of LOCA fluids, effluent discharge paths, and the plant environs for radioactivity that may be released from normal operations, including anticipated operational occurrences, and from postulated accidents.
Compliance The facility contains means for monitoring the containment atmosphere and all other important areas during both normal and accident conditions to detect and measure radioactivity which could be released under any conditions. The monitoring system includes area gamma monitors, atmospheric monitors and liquid monitors with full indication in the control room. Alarms are provided to warn of high radioactivity.
Chapter 11 discusses the process and effluent radiation monitoring systems. Chapter 12 discusses the area and airborne radiation monitoring systems.
FORMANCE WITH NRC GENERAL DESIGN CRITERIA                                                  3.1-37
 
REFERENCES None 8            CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA
 
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
.1 Seismic Classifications The Watts Bar Nuclear Plant structures, systems, and components which perform a primary safety function have been designed to remain functional in the event of a Safe Shutdown Earthquake (SSE). These structures, systems, and components, designated as Seismic Category I, are those necessary to assure:
(1)    The integrity of the reactor coolant pressure boundary.
(2)    The capability to shut down the reactor and maintain it in a safe shutdown condition, or (3)    The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures comparable to or in excess of the guideline exposures of 10 CFR Part 100.
These structures, systems, and components are classified in accordance with Regulatory Guide 1.29 unless exception is taken in detailed classificaition information provided in other sections of the FSAR, such as Table 3.2-2a, 3.2-6, etc.
Piping, pumps, valves, and other fluid system components which must retain limited structural integrity because their failure could jeopardize to an unacceptable extent the achievement of a primary safety function, because they form an interface between Seismic Category I and non-Seismic Category I plant features, or because they perform a secondary safety function, are designated by TVA as Seismic Category I(L)
(i.e., limited requirements). Those fluid containing elements which are included in Seismic Category I(L) are seismically qualified to meet the intent of Position 2 of Regulatory Guide 1.29.
Where portions of mechanical systems are Category I or I(L) and the remaining portions not seismically classified, the systems have been seismically qualified to a terminating anchor (or other appropriate analysis problem termination) beyond the defined boundary such as a valve, thus meeting Position 3 of Regulatory Guide 1.29.
All Category I safety-related structures, and portions of mechanical and electrical systems and components are listed in Tables 3.2-1, 3.2-2, 3.2-2a, 3.2-2b and 3.2-3.
Those Category I(L) portions of mechanical systems are also listed in Table 3.2-2.
.2 System Quality Group Classification Fluid system components for the Watts Bar Nuclear Plant that perform a primary safety function are identified by TVA Classes A, B, or C (see Section 3.2.2.7 for HVAC Safety Classifications). These piping classes are assigned to fluid systems based on the ANS Safety Classes 1, 2a, and 2b, respectively, which are assigned to nuclear power plant equipment per the August 1970 Draft of ANSI N18.2, "Nuclear Safety Criteria for the Design of Stationary Pressurized Water Reactor Plants." Fluid system components whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                            3.2-1
 
the whole body, or its equivalent to any part of the body, are identified as TVA Class D and are based on ANSI N18.2 (Aug., 1970 draft) Safety Class 3 and Regulatory Guide 1.26. The TVA piping classification system for WBNP does not conform strictly to the guidance of Regulatory Guide 1.26 (which was not in effect on the docket date for the Construction Permit). The ANS safety classification of each component has been considered in the various aspects of design, fabrication, construction, and operation.
.2.1 Class A Class A applies to reactor coolant pressure boundary components whose failure could cause a loss of reactor coolant which would not permit an orderly reactor shutdown and cool down assuming that makeup is only provided by the normal makeup system.
Branch piping 3/8 inch inside diameter and smaller, or protected by a 3/8 inch diameter or smaller orifice, is exempted from Class A requirements. The branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller) is also exempted from Class A requirements.
The components which are within the Reactor Coolant Pressure Boundary (RCPB) and meet all the following requirements may be classified as TVA Class G:
(1)  Piping and associated components in the RCPB which penetrate containment excluding the actual penetration and its associated components.
(2)  Piping and associated components which perform no primary safety function.
(3)  Piping and associated components which are isolated by a normally closed valve off a line in the RCPB that meets the exclusion requirements of 10 CFR Part 50.55a paragraphs (C) (1) and (C) (2). An example would be the ECCS check valve leak test lines.
.2.2 Class B Safety Class B applies to those components of safety systems necessary to fulfill a system safety function. The classification is specifically applicable to containment and to components of those safety systems, or portions thereof, through which reactor coolant water flows directly from the reactor coolant system or the containment sump.
.2.3 Class C Class C applies to components of those safety systems that are important to safe operation and shutdown of the reactor but that do not recirculate reactor coolant.
.2.4 Class D Class D applies to components not in TVA Class A, B, or C whose failure would result in release to the environment of gaseous radioactivity normally held up for radioactive decay. This is being interpreted as those portions of systems whose postulated failure would result in calculated potential offsite doses that exceed 0.5 rem to the whole body or its equivalent to any part of the body.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
.2.5 Relationship of Applicable Codes to Safety Classification for Mechanical Components The applicable codes used for the design, material selection, and inspection of components for the various safety classes are shown in Table 3.2-4. The applicable TVA classification and ANS Safety Classification for each of the fluid systems are tabulated in Table 3.2-2. TVA classifications are also delineated on flow diagrams which have been included as figures in those sections of the FSAR where the systems are discussed in detail.
.2.6 Nonnuclear Safety Class (NNS)
Components that are used in Seismic Category I structures whose failure would not result in a release of radioactive products and are not required to function during an accident or malfunction within the reactor coolant pressure boundary have been assigned TVA Classifications G or K. Since these components complement components having a primary safety function during normal operation and may be in close proximity to them, they are seismically qualified as Seismic Category I(L) to the extent necessary to prevent an unacceptable influence on Safety Class equipment during a seismic event. Thus the minimum capability of primary system components is not compromised by the failure of a Class G or K component during a seismic event.
Components which are assigned to TVA Class H or L, located inside Seismic Category I structures, are also designed as Seismic Category I(L). The applicable codes, along with the seismic classifications used for the design of the components covered by these classifications, are shown in Table 3.2-5. TVA Class P is assigned to specific sense lines located (in part or totally) in a non-seismic area.
.2.7 Heating, Ventilation and Air Conditioning (HVAC) Safety Classification Those portions of the HVAC Systems which are safety related have been assigned TVA classifications and have been designed to Seismic Category I and I(L) specifications as applicable. All equipment, components, duct work, etc., in the August 1970 Draft ANSI N18.2 Safety Classes 2a and 2b perform primary safety functions and are designed to Seismic Category I requirements, except as exempted in Table 3.2-6.
Portions of systems not performing a safety function may need a degree of seismic qualification because their failure could produce an unacceptable influence on the performance of safety functions. These are designed to Seismic Category I(L) requirements. The applicable codes along with the seismic qualifications used for the design of the HVAC ducting are shown in Table 3.2-6 . See Sections 3.7.3.17 and 3.7.3.18 for details of seismic analysis and design of HVAC duct and duct support systems.
.3 Code Cases and Code Editions and Addenda
.3.1 TVA Design and Fabrication The Code of Record of Section III of the ASME Code applied to systems within TVA's scope is the 1971 Edition with Addenda through Summer 1973. The use of later SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                          3.2-3
 
Edition and Addenda, as permitted by paragraph NA-1140 of the ASME Code, is controlled to ensure the following:
(a)  Later Edition and Addenda used has been accepted by the NRC through incorporation by reference in 10 CFR 50.55a.
(b)  Related requirements necessary to support use of later Edition and Addenda are implemented in accordance with NA-1140.
(c)  Code Cases used have been accepted by the NRC through incorporation by reference in either Regulatory Guide 1.84 or Regulatory Guide 1.85.
(d)  Additional requirements added by either Regulatory Guide 1.84 or Regulatory Guide 1.85 are implemented.
A listing of Code Cases and provisions of later Code editions and addenda which have been used for design and fabrication is given in Table 3.2-7. A similar listing of Code Cases and provisions of later Code editions and addenda used in analysis of fluid systems is given in Section 3.7.3.8.1. Another similar listing for the RCS is given in Section 5.2.1.4. Code cases and provisions of later Code Editions and Addenda associated with Section XI are found in the Section XI programs. Exceptions to the system classification Code requirements associated with Generic Letter 89-09 may be found in notes on the flow diagrams.
.3.2 Purchased Materials and Components The Code of Record for components ordered by TVA is determined in accordance with 10 CFR 50.55a, footnote 5. Material ordered by TVA and supplied with certification to a later Edition and Addenda is controlled by a comparison of the Edition and Addenda to which it is certified to the Code of Record applicable to the application in which it is used. Deviations from the applicable Code of Record are reconciled prior to use of the material.
Material procured prior to the initiation of the Acceptable Suppliers List (ASL) program (approximately May 1978) has been addressed through an NRC approved alternative to the ASME Code paragraph NA-3451(a)[1]. Material procured as ASTM material, installed or to be installed in an ASME system, whose proof of survey or qualification by TVA of the manufacturer's quality assurance program at the time of procurement cannot be retrieved, and whose material specification is identical to the requirements of ASME Section II as stated by the ASME material specification, is acceptable for use assuming all other attributes of the material and the documentation conform to ASME Code requirements.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
FERENCES etter from B.D. Liaw, NRC, to O. D. Kingsley, TVA, dated March 15, 1990, NRC Inspection eport Nos. 50-390/90-02 and 50-391/90-02.
etter from Frederick J. Hebdon, NRR, to Mark O. Medford, TVA, dated February 22, 1993.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                    3.2-5
 
Table 3.2-1 Category I Structures Reactor Building (Shield Building, Steel Containment Vessel, and Interior Concrete)
Auxiliary - Control Building
: a.      Auxiliary Building portion
: b.      Additional Equipment Building portion
: c.      Control bay portion
: d.      Waste packaging area Condensate Demineralizer Waste Evaporator Building Class 1E Electrical Systems Structures (Manholes, Handholes, and Conduit Banks)
Diesel Generator Building ERCW Pipe Tunnels and RWST Foundations ERCW Structures North Steam Valve Room Intake Pumping Station and Retaining Walls Additional Diesel Generator Building Refueling Water Storage Tank (RWST).
Underground Barrier.
ERCW Standpipe Structures I and II and ERCW Discharge Overflow Structure.
CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
TTS BAR (Page 1 of 17)
TVA/ANS ent                            Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7)
Vessel                          W            A              (13)        X            C          X          I th CRDM Housing                W            A              III-1        X            C          X          I ead Adapter Plugs                W            A              III-1        X            C          X          I enerators (Tube Side)            W            A              III-1        X            C          X          I (Shell Side)                  W          A(17)            III-1        X            C          X          I zer                            W            A              III-1        X            C          X          I Coolant Pipe                    W            A              III-1        X            C          X          I Coolant Fittings                W            A              III-1        X            C          X          I Coolant Fabricated W            A              III-1        X            C          X          I Coolant Crossover W            A              III-1        X            C          X          I Coolant Thermowell              W            A              III-1        X            C          X          I Guide Tubing                    W            A              III-1        X            C          X          I Guide Couplings                W            A              III-1        X            C          X          I mble Assembly                  W            B              III-2        X            C          X          I pass Line                        W            A              III-1        X            C          X          I zer Safety Valves              W            A              III-1        X            C          X          I perated Relief W            A              III-1        X            C          X          I zer Relief Tank                W            G              VIII        X            C          P          I(L)
WBNP-79
 
TTS BAR TVA/ANS ent                            Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7)
Coolant Pump                  W            A              III-1        X            C          X          I asing                            W            A              III-1        X            C          X          I ange                          W            A              III-1        X            C          X          I l Barrier                      W            A              III-1        X            C          X          I l Barrier Heat nger                            W            C              (14)        X            C          X          I eal Housing W            A              III-1        X            C          X          I Seal Housing                    W            B              III-1        X            C          X          I e Retaining g                              W            A              III-1        X            C          X          I tor                              W          2b          NEMA-MG1        X            C          -          I otor                          W          2b              NA          X            C          -          I haft                          W          2b              NA          X            C          -          I oupling                        W          2b              NA          X            C          -          I iece                          W          2b              NA          X            C          -          I el                              W          2b              NA          X            C          -          I (Motor Upper
  )                              W          2b              NA          X            C          -          I olting                        W          2b              NA          X            C          -          I WBNP-79 tand                          W          2b              NA          X            C          -          I rame                          W          2b              NA          X            C          -          I
 
TTS BAR TVA/ANS ent                                Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7) il Reservoir W          2b              NA          X            C          P          I Oil Cooler                          W          2b              (14)        X            C          P          I il Piping                          W          2b              (14)        X            C          P          I Oil Reservoir W          2b              NA          X            C          P          I ooling Coil -
upports only)                      W          2b              NA          X            C          P          I ir Coolers                        W            -                -          X            C          -          I(L) jection System njection Pumps                    W            B              III-2        X            AB          X          I ulators (9)                          W            B              III-2        X            C          P          I njection Tank                      W            B              III-2        X            AB          X          I ng Water Storage Tank              T            B              III-2        X            O          P          I Heat Removal System umps                                W            B              III-2        X            AB          X          I eat Exchangers (Tube)                W            B              III-2        X            AB          X          I (Shell)                      W            C              III-3        X            AB          P          I WBNP-79
 
TTS BAR TVA/ANS ent                                Scope    Safety Class        Code      QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7) ent Spray System ps t Exchangers (Tube)                  T            B              III-2        X          AB          X          I (Shell)                      W            B              III-2        X          AB          X          I zles                                W            C              III-3        X          AB          P          I T            B                -          X            C          P          I Water Make-Up System T            G          ANSI B31.1      X          AB          -        I(L)
T          G(22)            VIII          X            O          -        I(L) l and Volume Control System ing, Reciprocating ing, Centrifugal                    W            B            P&V-II        X          AB          X          I Acid Transfer                      W            B            P&V-II        X          AB          X          I W            C            P&V-III        X          AB          -          I changers erative wn (Tube)                            W            B              III-2        X            C          X          I Shell)                            W            B              III-2        X          AB          X          I s Letdown (Tube)                    W            C              III-3        X          AB          P          I (Shell)                        W            B              III-2        X            C          X          I ater (Tube)                        W            B              III-2        X            C          P          I (Shell)                          W            B              III-2        X          AB          X          I WBNP-79 W            C              III-3        X          AB          P          I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7)
Control                              W            B              III-2        X          AB          X          I d                                  W            C              III-3        X          AB          P          I d Batching                          W            G              VIII        X          AB          -          I(L) l Mixing                              W            G              VIII        X          AB          -          I(L) l                                  W            G              VIII        X          AB          -          I(L) enerator Blowdown System down Isolation Valves                T            B              III-2        X          AB          P          I down Heat Exchangers                  T            -              VIII        -          TB          P          -
nk                                  T            -              VIII        -          TB          P          -
nk Pumps                            T            -              HIS          -          TB          P          -
sed Air System
  & Control Air Subsystem ressors                                T            H                -          -          TB          -          -
Tanks                              T            H              VIII        -          TB          -          -
s                                  T            H              VIII        -          TB          -          -
Control Air Subsystem sors                                  T          (19)              -          X          AB          -          I Tanks                              T          (19)            VIII        X          AB          -          I s                                  T            C              (14)          X          AB          -          I enser WBNP-79 ets                                  W            C                -          X          C          -          I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7) let Doors                            W            C                -          X          C          -          I rames                                W            C                -          X          C          -          I rame Columns                        W            C                -          X          C          -          I upport Structure                      W            C                -          X          C          -          I iate Deck Doors                      W            C                -          X          C          -          I els                                  W            C                -          X          C          -          I uctures                            W,T          C                -          X          C          -          I k Doors                                W            C                -          X          C          -          I ling Unit Supports                    W            C                -          X          C          -          I k Beams                                W            C                -          X          C          -          I tion System                          W            -                -          X          C,AB        -          I(L) ine                                  W            -                -          X          AB          -          I(L) enser Bridge Crane                    W            -                -          X          C          -          I(L) ain Gate                              W            C                -          X          C          -          I ent Isolation System T            B              III-2        X          C,AB        X,P          I n Fans                              T          (11)          AMCA          X          C          -          I IEEE ent Cooling System T            C              III-3        X          AB          P          I WBNP-79 changers (Tube)                      T            C              III-3        X          AB          -          I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class        Code    QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7)
(Shell)                          T            C              III-3        X          AB          P          I ank                                  T            C              III-3        X          AB          P          I Containment Isolation)              T            B              III-2        X          C          -          I T            C              III-3        X          AB,C        -          I T            G              B31.1        X          AB          -          I(L)
T            H              B31.1        -        CDWEB          -
akage Return Unit                    T            L                -          X          AB          -          I(L) ive Waste Disposal System ry & Hot Shower                      W            G              VIII        X          AB          X          I(L) ical Drain                            W            G              VIII        X          AB          X          I(L) or Coolant Drain                      W            G              VIII        X          C          X          I(L) ed Drain Collector                  W            G              VIII        X          AB          X          I(L)
Condensate                          W            H              VIII        X          AB          X          I(L)
Resin Storage                        W            D              III-3        X          AB          X          I ecay                                  W            D              III-3        X          AB          X          I Drain Collector                      W            G              VIII        X          AB          X          I(L)
Monitor                              W            G                III        X          AB          P          I(L)
Decontamination Collector            T            G              ----        X          AB          P          I(L)
WBNP-79 or Coolant Drain Tank Pumps          W            G              B31.1        X          C          X          I(L)
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class          Code    QA Required        Location  Rad Source          Seismic (1)          (2)              (3)        (4)              (5)        (6)              (7) ical Drain Tank Pump                  W            G                B31.1        X                AB          X                I(L) ry & Hot Shower Tank Pump            W            G                B31.1        X                AB          X                I(L) ed Equipment Drain Sump Pumps      W            G                B31.1        X                AB          X                I(L)
Condensate Pumps                    W            H                B31.1        X                AB          X                I(L) ed Drain Collector Tank harge Pump                            W            G                B31.1        X                AB          X                I(L)
Drain Collector Tank Discharge      W            G                B31.1        X                AB          X                I(L) ondensate Demin Waste Evap          W            G                B31.1        X                AB          X                I(L) mp Monitor Tank Pump                    W            G                B31.1        X                AB          P                I(L)
Decon Collector Tank Pump            T            G                B31.1        X                AB          P                I(L) ment Pit Sump Pumps                  W            G        B31.1                X        C                  X        I(L) r & Equip Drain Sump Pumps          W            G        B31.1                X        AB                  P        I(L) or & Equip. Drain Sump Pump          T            G        B31.1                X        C                  X        I(L) or & Equip Drain Pocket Sump          T            G        B31.1                X        C                  X        I(L) oor & Equip. Drain Sump Pump          T            G        B31.1                X        AEB                P        I(L) neous WBNP-79 as Compressor Pkg.                    W            D        III-3                X        AB                  X        I as Filter                            T            G        VIII                X        AB                  X        I(L)
 
TTS BAR TVA/ANS ent                                    Scope    Safety Class          Code  QA Required        Location    Rad Source          Seismic (1)          (2)              (3)        (4)              (5)          (6)              (7)
Manifold                              T            G        -                  X        AB                    -        I(L) c Compactor                            W            -        -                  -        SB                    P        -
Tank Basket Strainer                  W            G        VIII                X        AB                    P        I(L) min Waste Evaporator                    T            H        III-3              X        CDWEB                P        -
ection System
  - Flood Mode & CI                      T            C        III-3              X            C,AB,O,B,P      -        I
  - Balance of System                    T            G        B31.1, UL/FM        X                              -        I(L)
C,AB,O,B,P,CB DB,SB,CDWE B
ps (vertical turbine)                  T            C        III-3              X        O                    -        I entilation System ent Ventilation ent Purge xcluding Inst. Rm. Fan)                T          (11)      AMCA                X        AB                    -        I(L)
T          (11)      -                  X        AB                    X        I WBNP-79 rs                                      T          (11)      -                  X        AB                    X        I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class          Code  QA Required        Location  Rad Source          Seismic (1)          (2)              (3)        (4)              (5)        (6)              (7) rk                                    T          (11)        SMACNA            X        C,AB                X        I/I(L)(See Note 20) ompartment                            T          (11)                                    C                            I(L)
Instrument Room Cooling              T          (11)                                    C                            I(L) il Units                              T            -          AMCA              X        C                  P        I(L)(See Note 12)
Air Filters                          T          (11)        -                  X        AB                  -        I(L) ompartment Cooling Units T          (11)        AMCA              X        C                  -        I T          (11)        IEEE              X        C                            I T            -          ARI                X        C                  P        I(L)(See Note 12) aft Dampers                          T          (11)        ASME              X        C                  -        I entation/Controls                    T          (11)        IEEE              X        C/CB                -        I rk/Accessories                        T          (11)        SMACNA            X        C                  P        I Bldg. Ventilation Units                              T          (11)        AMCA              X                AB          -                I(L)
T          (11)        -                  X                AB          -                I(L) m Coolers                            T          (11)        -                  X                AB          P                  I Board Rooms WBNP-79 ditioning System                    T          (11)        AMCA,ARI          X                AB          -                  I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class            Code  QA Required  Location  Rad Source    Seismic (1)          (2)                (3)        (4)        (5)        (6)          (7) n Board Rooms ditioning System                    T          (11)        AMCA,ARI            X          AB          -              I Conditioning Systems              T          (11)        AMCA,ARI            X          AB          -            I(L) ldg. Ventilation T          (11)        -                  X          CB          -              I T          (11)        -                  X          CB          X              I itioning Unit (MCR)                  T          (11)        AMCA,ARI            X          CB          -              I itioning Unit
: d. Rm.)                            T          (11)        AMCA,ARI            X          CB          -              I Rm Air Conditioning System          T          (11)        AMCA,ARI            X          RB          -        I(L)(See Note 21) dg. Ventilation System                              T          (11)        AMCA                X          DB          -              I ood Exhaust System                  T          (11)        AMCA                X          DB          -              I rd Room Exhaust System Fans          T          (11)        AMCA                X          DB          -              I am System ves                                  T            B          III-2              X          AB          -              I Bypass Valves                      T            B          III-2              X          AB          -              I er System WBNP-79 ves                                  T            B          III-2              X          AB          -              I Feedwater System
 
TTS BAR TVA/ANS ent                                    Scope    Safety Class            Code  QA Required  Location  Rad Source  Seismic (1)          (2)                (3)        (4)        (5)        (6)        (7)
Feedwater Pumps riven                                  T            C          III-3              X          AB          -          I Turbine Drive                          T            C          III-3              X          AB          -          I ump Systems Bypass                                W            -          -                  -          TB          -          -
lves                                  T            B          III-2              X          AB          -          I alves                                  T            B          III-2              X          AB          -          I Fuel Pit el Pit Heat Exch.
W            C          III-3              X          AB          X          I W            C          III-3              X          AB          X          I el Pit Pump                            W            C          III-3              X          AB          X          I el Pit Filter                          W            G          VIII                X          AB          X          I(L) el Pit Demineralizer                  W            G          VIII                X          AB          X          I(L) el Pit Strainer                        W            G          -                  X          AB          X          I(L) el Pit Skimmer Pump                    W            G          -                  X          AB          X          I(L) el Pit Skimmer r Assembly                            W            G          -                  X          AB          X          I(L) el Pit Skimmer Filter                  W            G          VIII                X          AB          X          I(L) dling System                                                                                                                  WBNP-79
 
TTS BAR TVA/ANS ent                                    Scope    Safety Class          Code  QA Required  Location  Rad Source  Seismic (1)          (2)              (3)        (4)        (5)        (6)        (7) tor Crane, Reactor W            -          -                  X          C          -          I(L)
Vessel Head Lifting W            -          -                  X          C          -          -
Internals Lifting W            -          -                  X          C          -          -
el Pit Bridge & Hoist                  W            -          -                  X          AB          -          I(L) ter Cont. Handling W            -          -                  X            -          -          -
Vessel Stud Tensioner                  W            -          -                  X            -          -          -
el Handling Tool                      W            -          -                  X            -          -          -
nsfer System nsfer Tube & Flange                    W            B          -                  X          C,AB        P          I r System & Controls                    W            -          -                  X          C,AB        P          -
l Storage Racks                        W            -          -                  X          AB          -          I el Storage Racks                      T            -          -                  X          AB          X          I cy Diesel Fuel Oil System ay Tanks WBNP-79 Pumps                                T            G          B31.1              X          DB          -          I(L)
Tanks (7 Day)                        T            I          VIII              X          DB          -          I
 
TTS BAR TVA/ANS ent                              Scope    Safety Class            Code    QA Required  Location  Rad Source  Seismic (1)          (2)                (3)        (4)        (5)        (6)        (7) ling Water System T            -          -                    -          O          -          -
T            -          -                    -          TB          -          -
g System Heat Exchanger                    T            -                  VIII        -          AB          X          -
Vessel                            T            -                  VIII        -          AB          X          -
il                                T            B                  III-2        X          C          X          I nt Decontamination System W            -          -                    -          AB          -          -
T            -          D100                -          AB          -          -
alizers ed                                W            D          III-3                X          AB          X          I W            D          III-3                X          AB          X          I Coolant                          W            B          III-2                X          AB          X          I ter Return                        W            B          III-2                X          AB          X          I ter Injection                      W            B          III-2                X          AB          X          I d                                W            C          III-3                X          AB          -          I WBNP-79 neous
 
TTS BAR TVA/ANS ent                              Scope    Safety Class            Code  QA Required  Location  Rad Source  Seismic (1)          (2)                (3)        (4)        (5)        (6)        (7)
Orifices                          W            B          III-2              X          C          X          I d Blender                        W            C          III-3              X          AB          -          I ecovery System Tank Recirc.                      W            D          P&V-III            X          AB          X          I ipper Feed                        W            D          P&V-III            X          AB          X          I Tank                            W            G          VIII                X          AB          P          I(L)
T            D          III-3              X          AB          X          I T            G          VIII                X          AB          P          I(L) alizers or Feed Ion Exch                  W            G          VIII                X          AB          X          I(L) or Condensate                    W            G          VIII                X          AB          X          I(L) or Feed Ion Exch                  W            G          VIII                X          AB          X          I(L)
WBNP-79 or Condensate                    W            G          VIII                X          AB          X          I(L) rates                              W            G          VIII                X          AB          X          I(L)
 
TTS BAR TVA/ANS ent                                Scope    Safety Class        Code      QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7) neous pper & Boric Acid kg.                                W          (16)            (16)          X          AB          X          I(L) cy Gas Treatment System T          (11)            AMCA          X          AB          P          I T          (11)              -          X          AB          P          I Separator                        T          (11)              -          X          AB          P          I T          (11)              -          X          AB,C        P          I T          (11)              -          X          AB,C        P          I Bldg. Gas Treatment System T          (11)            AMCA          X          AB          P          I T          (11)              -          X          AB          P          I Separator                        T          (11)              -          X          AB          P          I T          (11)              -          X          AB,C        P          I T          (11)              -          X          AB,C        P          I l Raw Cooling Water System T            C              III-3        X          P          -          I WBNP-79 ump Motor Bearing Coils                              T          (18)              -          X          P          -          I
 
TTS BAR TVA/ANS ent                                  Scope    Safety Class        Code      QA Required  Location  Rad Source  Seismic (1)          (2)            (3)          (4)        (5)        (6)        (7) ent Isolation Valves                  T            B              III-2        X          C          -          I T            C              III-3        X          AB          -          I ard)                                T            C              III-3        X          B          -          I Station Air Compressor)              T            H              B31.1          -          TB          -
Auxiliary Air Compressor)            T            C              III-3        X          AB          -          I Screen Wash Supply)                  T          (15)            B31.1          X          P          -        I(L)(15)
Wash Pumps                            T          (15)            B58.1          X          P          -        I(15) c Backwashing Strainers              T            C              III-3        X          P          -          I ode Boration Makeup System ation Makeup Tank                    T            C              III-3        X          AB          X          I rging Booster Pumps                  T            H              B31.1          X          AB          X          I ode Boration Demineralizer            T            H              B31.1          X          AB          X          IL) ode Boration Filters                  T            H              B31.1          X          AB          X          I(L) rging Pump                            T            H              B31.1          X          AB          X          I(L)
T            H              B31.1          X          AB          X          I(L)
T            B              III-2        X          AB          X          I(L)
T            C              III-3        X          AB          X          I WBNP-79
 
Notes:
(1) T = Tennessee Valley Authority W = Westinghouse (2) A = TVA Safety Class A B = TVA Safety Class B C = TVA Safety Class C D = TVA Safety Class D G = TVA Safety Class G H = TVA Safety Class H 1, 2a, 2b, or 3 = ANS N18.2 Safety Class I = Seismic Category I, part of structure (3) The code class listed for an item is the minimum required. An item may have been obtained to a higher code level than that listed.
III=ASME Boiler and Pressure Vessel Code - Section III III-1=ASME Boiler and Pressure Vessel Code - Section III, Class 1 III-2=ASME Boiler and Pressure Vessel Code - Section III, Class 2 III-3=ASME Boiler and Pressure Vessel Code - Section III, Class 3 IIIa9=ASME Boiler and Pressure Vessel Code - Section III, Article 9 "Protection Against Overpressure" VIII=ASME Boiler and Pressure Vessel Code - Section VIII P&V-I=ASME Code for Pumps and Valves for Nuclear Power, Class I P&V-II= ASME Code for Pumps and Valves for Nuclear Power, Class II P&V-III=ASME Code for Pumps and Valves for Nuclear Power, Class III 4                                CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
D100=American Waterworks Association, Standard for Steel Tanks, Standpipes, Reservoirs, and Elevated Tanks for Water Storage, AWWA, D100 B31.1=ANSI B31.1 1973 Edition through summer 1973 Addenda ACI=American Concrete Institute AMCA=Air Moving and Conditioning Association P=TVA Safety Class P ARI=Air Conditioning and Refrigeration Institute HIS=Hydraulic Institute Standards IEEE= Institute of Electrical and Electronics Engineers NFPA=National Fire Protection Association B58.1=ANSI B58.1 Vertical Turbine Pumps B73.1=ANSI B73.1M Horizontal end Suction Centrifugal Pumps UL/FM=Underwriters Laboratory or Factory Mutual (4)  Quality assurance required:
X = Yes, - = No (5)  C=Containment AB=Auxiliary Building AEB=Additional Equipment Bldg.
CB=Control Building DB=Diesel Generator Building SB=Service Building CDWEB=Condensate Demineralizer Waste Evaporator Building O=Outdoors above ground B=Buried in ground SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                  3.2-25
 
P=ERCW Pumping Station TB=Turbine Building (6)  X=Source of radiation
      -=No source of radiation P=Possible source of radiation (7)  I=Seismically qualified I(L)=Limited seismic qualification
      -=Not seismically qualified (8)  AMCA Class III and performance tested in accordance with AMCA Standard air moving devices.
(9)  Performance test required.
(10) Deleted by FSAR Amendment 79 (11) Those components of the heating, ventilating, and air conditioning system (HVAC), which are not covered directly by the TVA piping classifications of Subsection 3.2.2, have been designed and constructed to standards and specifications which are equivalent to ANS Safety Class 2b.
(12) The lower compartment coolers are Seismic Category I except for the cooling coils which are Seismic Category I(L). The upper compartment, CRDM and instrument room coolers are Seismic Category I(L). None of the Reactor Building ventilation coolers are qualified to maintain ERCW pressure boundary integrity.
(13) Vessel was built to the requirements of ASME code but does not have code stamp.
(14) Acceptable for use within Regulatory Guide 1.26 Quality Group C system (ASME Section III, Class 3.) For the auxiliary air system, see also Note 1 of Table 3.2-2a.
(15) Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C.
6                                  CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
(16) This component is actually a system containing many components. Those parts of the system that contain component cooling water are Safety Class C with design code of ASME III, Class 3. The remainder of the system is Safety Class G with design codes as identified in Table 3.2-5.
(17) The secondary chamber of the steam generators (shell side) are built to the ASME B&PV Code Section III, Division 1, Class 1, and applicable code interpretations and/or rulings. Although the shell side of the steam generator functions only dictate a TVA Class B, they were procured to comply with ASME Section III, Class 1. Therefore, repairs, modifications and/or additions shall be in accordance with the original contract specifications and drawing requirements.
(18) The ERCW pump motor bearing cooling coils, required for plant safety, were not purchased to TVA Class C standards. The vendor-supplied cooling coils have been seismically qualified and are considered safety-related and suitable for the intended service. For their application, the level of qualification meets the intent of TVA Class C* at the motor interface.
(19) Although not purchased and stamped in accordance with ASME Section III Code Requirements, this equipment meets the highest available commercial quality standards.
(20) All purge air ductwork (supply and exhaust) inside the annulus and exhaust air ductwork from the Shield Building isolation valves 1-FCV-30-61 and -62 to 1-FCV-30-213 and -216 is Seismic Category I. Supply air ductwork from the ABSCE isolation valves 1-FCV-30-294 and -295 to the Shield Building isolation valves 1-FCV-30-2 and -5 and all purge air ductwork (supply and exhaust) inside primary containment up to the inboard containment isolation valves is Seismic Category I(L).
(21) All piping between the containment isolation valves is Seismic Category I. The piping up to the containment isolation valves on each side is Seismic Category I(L).
(22) This tank was procured to ASME Section III-3 requirements.
(23) Not used for Unit 1 operation.
(24) The boron recycle (recovery) system is not required for the operation of Unit 1.
See FSAR Section 9.3.7. The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.
(25) The Primary Water Storage Tank (PWST) meets the ASME Section III, Class 3, design by analysis requirements with Seismic Class I(L) Forcing Functions for atmosphere tanks.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                            3.2-27
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA        Seismic tem                System Subsection                ANS, N-18.2      Class        Category xiliary Control Air Portions of the System            2a                B          I necessary for containment isolation.
(See Note 5)
Balance of system.                2b                C          I (See Note 1 and Note 5). System boundary is considered to exist to the upstream side of the filters which tie the non-essential control air systems to the auxiliary control air lines.
ron Recycle        Equipment used to                  2b                C (See      I (See Note ee Note 12)        provide a ready                                      Note 11)    11) supply of con-centrated boric acid (boric acid tanks, boric acid transfer pumps, boric acid filters, and associated pipes and valves).
Processing and Waste              3                D          I Holdup Equipment whose failure could result in a site boundary dose of 0.5 rem or more. (See Note 8) (gas stripper feed pumps, holdup tanks and holdup tank recirculation pumps, and associated piping and valves).
8                                          CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class TVA      Seismic tem              System Subsection                ANS, N-18.2  Class    Category Other equipment which            -            G        I(L) carries minimal or no radioactive wastes and/or has no safety function to perform (monitor tank and pumps, evaporator condensate deminera-lizers, batching tank, gas stripper and boric acid evaporator packages, evaporator feed ion exchangers, condensate filters, concentrate filters, evaporator feed ion exchange filters, and associated pipes and valving).
emical and        Equipment that cir-              2a          B        I lume Control      culates reactor coolant normally or during an accident (charging, letdown, excess letdown, seal water return lines; positive displacement and centrifugal charging pumps; volume control tank; and, miscellaneous associated lines and valves). (See Note 8)
Equipment necessary for          2b          C        I boric acid addition (boric acid              (See Note (See Note tanks, boric acid blender, lines              11)      11) and valves).
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                3.2-29
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA        Seismic tem            System Subsection                  ANS, N-18.2      Class        Category Equipment associated                3                  D          I with radwaste cleanup whose failure could result in a 0.5 rem offsite dose (Mixed bed and cation demineralizers, associated piping and valves).
Balance of equipment                -                  G          I(L)
(resin fill and chemi-cal mixing tanks, piping and valves).
mponent          Portions of the system              2a                B          I oling            necessary for con-tainment isolation.
Major pressure                      2b                C          I boundary components.
Equipment inside the                -                  H          -
CDWE Building. (See Note 13)
Sample heat exchangers,            -                  G or L    I(L) drains, and vents.
ntainment        Major pressure boundary            2a                B          I ray              components.
sential Raw      Portions of the system              2a                B          I oling Water      piping necessary for containment isolation.
Portions of the system              2b                C          I piping required for plant safety. (See Note 4, 10).
Portions of the system piping not                      G          I(L) required for plant safety, but in Seismic Category I structures.
0                                        CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class TVA  Seismic tem                System Subsection                ANS, N-18.2  Class Category Portions of the system            -            H      -
piping not required for safety and/or not in Seismic Category I structures.
Auxiliary control air              -            C    I compressors (see Note 1).
HVAC equipment                    -            -    I required for plant safety (see Note 2).
HVAC equipment not                -            -    I(L) required for plant safety (see Note 3)
Portions of the strainer          -            G    I(L) backwash/backflush piping (see Note 6).
dwater            Downstream of and                  2a            B    I including the anchors in the valve room exterior walls.
Flow transmitter                  -            P    -
sensing lines Upstream of the                    -            H    -
anchors.
dwater,            Downstream of and                  2a            B    I iliary            including the first anchor which is immediately up-stream of the check valve closest to and outside of contain-ment.
Portions of the system not in      2b            C    I SC-2a but required after a seismic event.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                              3.2-31
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA        Seismic tem            System Subsection                ANS, N-18.2      Class        Category Condensate supply                  -                  G        I(L) and other piping not required after a seismic event but in Seismic Category I structures.
Balance of system.                -                  H        -
Protection    Piping necessary to                2b                  C        I h Pressure      provide water to FP)            AFW system in the event of a flood above plant grade.
Equipment necessary to provide makeup to the primary and spent fuel cooling systems in the event of a flood above plant grade.
Balance of equipment              -                  G        I(L) within Seismic Category I structures.
Remainder                          -                  H        -
od Mode          Portion of the                    2a                  B        I ation and        system necessary keup            for containment xiliary          isolation.
rging)
Piping essential for              2b                  C        I makeup and boration in the event of a flood above plant grade.
Balance of system.                                    H        I(L) 2                                      CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class TVA        Seismic tem                System Subsection            ANS, N-18.2  Class      Category l Oil              Equipment necessary            2b            C        I to assure continuous, full power operation of the emergency diesel-generator sets for seven days following a loss of offsite power.
Balance of equipment          -            G or H    I(L) in Seismic Category I structures which performs no safety function but needs to maintain pressure boundary.
Remainder                      -            H        -
l Pool            Portions of the                2a            B        I aning and          system required ling              for containment isolation.
Portions of the                2b            C        I system required to cool the spent fuel (heat exchangers, pumps, associated piping and valves).
Makeup water loop from        -            G        I(L) the RWST through RWP                        (See Note pumps to isolation valve                    7) downstream of pumps SFP skimmer piping.
Line from isolation valve      2b            C        I downstream of RWP pumps to the SFPC loop Balance of system.                          G        I(L)
Safety Class  TVA      Seismic tem                System Subsection              ANS, N-18.2  Class    Category SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                3.2-33
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA        Seismic tem              System Subsection                ANS, N-18.2      Class        Category ting,          System containment                2a                  B        I tilation,        isolation valves Air Con-        and piping between ning            valves.
AC)
HVAC components, duct-            2b                  M,Q,      I work, and piping                                      or S located in the Reactor, Auxiliary, Control, and Diesel Generator Buildings that perform safety related air cooling and heating opera-tions or essential air filtration and purification pro-cesses or that supply life sup-porting air (see Note 2).
Balance of system                  -                  M,Q,S,    I(L)
(see Note 3).                                          U,V rogen            Portion of H2 Analyzer system      -                  -        I lyzer            which supplies pure O2 as reagent gas to H2 Analyzer Panels and Vacuum Trap Assemblies located on sample tubing low points for H2 Analyzer System. (see Note 9).
Condenser        Portions of the                    2b                  C        I system required to function during a DBA.
Portions of the                    2a                  B        I system that provide a containment isolation function 4                                        CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class TVA    Seismic tem                System Subsection              ANS, N-18.2  Class  Category System refrigeration            -            N      I(L) piping Safety Class  TVA    Seismic tem                System Subsection              ANS, N-18.2  Class  Category System refrigeration            -            M      I(L) piping in Reactor Building.
Balance of system not          -            G or H I(L) classified as refrigeration piping (i.e. drains).
n Steam            Upstream of, and                2a            B      I including the flued-head anchors in the valve room exterior walls.
Turbine impulse pressure        -            P      -
transmitter sensing lines Downstream of the              -            H      -
flued-head anchors.
ctor Coolant      Equipment within the            1            A      I reactor coolant system boundary, failure of which could cause a Condition III or IV loss-of-coolant accident. (Com-ponents downstream of a 3/8 inch or smaller orifice are excluded).
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                              3.2-35
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA        Seismic tem            System Subsection                  ANS, N-18.2      Class        Category Portions of the system              2a                  B        I protected from reactor coolant pressure by a 3/8 inch or smaller orifice, reactor vent head ventilation system, and branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller).
Portions of the system              2a                  B        I that provide a contain-ment isolation function.
Safety Class        TVA      Seismic tem              System Subsection                  ANS, N-18.2        Class    Category Safety and relief valve            -                  G        I(L) discharge piping.
Equipment that does not            -                  G        I(L) provide a safety function (pressurizer relief tank (PRT), primary water supply inside containment, nitrogen supply and vent headers to the PRT).
idual Heat      Major pressure boundary            2a                  B        I moval (RHR)      components.
ety In-          Balance of system that              2a                  B        I ion (SI)        recirculates reactor coolant after an accident or prevents leakage of reactor coolant to points external to the system. (See Note 8).
Refueling water                    2a                  B        I storage tank and SIS accumulators.
6                                        CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class TVA    Seismic tem                System Subsection                ANS, N-18.2  Class  Category Piping from the SIS              2a            B    I accumulators to the accumulator isolation valves, and from the RWST to SC-2a valves in the safety injection, RHR, charging pump, and containment spray pump suction lines.
Piping to CVCS holdup            2b            C    I tanks.
Accumulators N2 fill              -            G    I(L) line.
Safety Class  TVA  Seismic tem                System Subsection                ANS, N-18.2  Class Category am Generator      Piping and valves from the steam 2a            B    I wdown              generators to and including the containment isolation valves Piping and valves down stream of -            G    I(L) the containment isolation valves to Column U Piping and valves down stream of -            H    -
Column U.
ste Disposal      Portions of system                2a            B    I that provide a containment isolation function.
Equipment whose failure could    3            D    I cause a site boundary dose of 0.5 rem or more (per RG 1.26). (See Note 8).
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                3.2-37
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class        TVA        Seismic tem              System Subsection                      ANS, N-18.2        Class        Category Balance of system in                  -                    G          I(L)
Seismic Category I structures for which a component failure may cause damage to safety-related equipment.
Equipment not within                  -                    H          -
Seismic Category I structures.
e 1:  Although not purchased and stamped in accordance with ASME Code Section III requirements, the auxiliary control air system compressors and dryers meet the highest commercial quality standards.
e 2:  Although not purchased under ASME Section III requirements, the HVAC equipment is required for plant safety and does meet the highest commercial quality standards. Safety Class 2b round flexible and triangular duct board ducting installed as part of the ceiling air delivery system in the main control room above the suspended ceiling is qualified to limited seismic requirements, analyzed to ensure that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, and the ducting pressure boundary will not be lost, and the ducting is constructed of standard commercial grade materials.
e 3:  Although not purchased under ASME Section III requirements, this HVAC equipment (except for the Reactor Building coolers) maintains the pressure boundary integrity of the ERCW system. Inside containment, the lower compartment coolers are Seismic Category I except for the cooling coils which are Seismic Category I(L). The upper compartment coolers, CRDM and instrument room coolers are Seismic Category I(L).
e 4:  Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C.
8                                            CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class      TVA          Seismic tem                  System Subsection                    ANS, N-18.2        Class        Category NRC Bulletin 83-06 "Nonconforming Materials Supplied By Tube-Line Corporation" has been evaluated for this system; Carbon Steel and Stainless Steel Program Plans were developed, presented to the NRC, verbally approved, initiated, completed, and reported to the NRC in the NRC Bulletin 83-06 report. The NRC Bulletin 83-06 and NCR GENMEB 8301 were closed and approved by the NRC Inspection Reports 50-390/84-03 and 50-391/84-03. The fittings that were installed and found to be acceptable are identified in Tables 3.1-6 and 3.1-7 of WB-DC-40-36 (Reference DIM WB-DC-40-36-18). The potential effect of unacceptable indications in radiographs of Tube-Line fittings welded with filler material has also been evaluated. The radiographs were supplied by Tube-Line as required by the material specification (ASME SA-403). Piping stress analysis was reviewed for Condition Adverse to Quality Report WBP890546. The review showed that stresses in the fittings are within ASME Section III allowable stresses even if the worst radiographic indications for each size fitting were to be transposed to the highest-stressed fitting. Authorization to use an alternative to the testing requirements of Section III Subsection ND-2000 of the ASME Code was provided by the NRC through a SER dated September 23, 1991.
e 5      Portions of the control air system were not pneumatic tested to the correct pressure. NRC Inspection Report Nos. 50-390/90-04 and 50-391/90-04 has approved an alternate acceptance to pneumatic test criterion.
e 6      The strainer backwash/backflush piping has been upgraded from Class G to Class G Seismic Category I(L) for pressure boundary integrity.
e 7      Class G piping labeled with PBQA is analyzed for Seismic Category I(L) pressure boundary retention and is within the scope of the hydrostatic QA program (the valve seat terminates the PBQA boundary). All remaining Class G piping is seismically supported for position retention only.
e 8      Manual block valves exist in the discharge piping of the relief valves which provide overpressure protection for the volume control tank, the boron injection tank, and the waste gas compressors. ASME Code, Section III, Subsection NC/ND, Paragraph 7153 prohibits the placement of a block valve in the discharge of pressure relief devices unless the block valve is installed with positive controls and interlocks and means are provided such that the operation of the controls and interlocks can be verified. The following design and administrative features, evaluated and approved by NRC,[2] are an acceptable alternative to the ASME code requirements because they provide reasonable assurance that both stop valves would not be left closed during plant operation. Redundant flowpaths exist in the relief valve discharge piping, the locked-open block valves are installed in a controlled access location, and administrative procedures are in place to assure the locked-open position of the block valves.
e 9      Although not purchased under ASME Section III requirements, the O2 supply bottles, related manifolds and vacuum trap assemblies are required for post-LOCA conditions and meet the highest commercial quality standards, and are qualified to WBNP Seismic Category I classification.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                                    3.2-39
 
Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)
Safety Class        TVA        Seismic tem              System Subsection                  ANS, N-18.2        Class        Category e 10  Some welds in the buried portion of the ERCW System did not receive a Section III hydrostatic test visual examination. They did, however, receive a vacuum box examination after welding and the code required NDE. Additionally, a pressure test was performed and held for 1 hour, then a Section XI VT-2 test was performed using 1 psi/min pressure drop or a 2 gal/min loss for 10 min. This was approved by the NRC in Safety Evaluation Report, Supplement 12.
e 11  Although not originally purchased to ASME Section III and Seismic Category I requirements, the replacement immersion heater assemblies for boric acid tank A have been non-destructive tested and evaluated to be acceptable for the classification.
e 12  The boron recycle system is not required for operation of Unit 1. See FSAR Section 9.3.7.
The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.
e 13  Not used for Unit 1 operation.
0                                          CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
able 3.2-2b Classification of Systems Not Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below)
Safety Class          TVA              Seismic System Subsection                ANS. N-18.2          Class            Category tion of system necessary for primary                2a                  B                    I tainment isolation.
tion of system in Seismic Category I                  -              G, H or L              I(L) ctures and not in a higher safety class                          (See Note 1) cept refrigeration piping).
ance of system (except refrigeration                  -              H, J, or L              -
ng).
e 1:In special applications, where the code requirements for Class G are not appropriate, Class K y be used.
e 2: All Entries Above Apply to the Following Systems:
iliary Boiler                              Hydrogen Cooling bon Dioxide Storage, Fire Protection,      Layup Water Treatment Purge Lube Oil emical Cleaning Makeup Water ndensate Potable Water ndenser Circulating Water Primary Water ndenser Tube Cleaning Raw Cooling Water mineralized Water Raw Service Water raction Steam Reheat Steam dwater Treatment and Secondary emical Feed                                  Roof and Floor Drains nd Seal Insulating Oil                      Service Air and Non-Essential Control Air nd Seal Water                              Station Drainage ater Drains and Vents                        Turbine Drains and Misc. Piping, Vacuum primer.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                                3.2-41
 
ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 1 of 4)
Qualified in Number Number            Conformance (1)
Equipment                Per Unit / In Plant    with IEEE 344-1971
-kV Auxiliary Power tem 6.9-kV Shutdown Boards                      2/4                    Yes (2)
(Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B 6.9-kV Shutdown Logic Relay Panels                                2/4                    Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B 6.9-kV/480V Shutdown Board Transformers                          6/12                    Yes (2000 kVA)
(Unit 1) 1A1-A, 1A-A, 1A2-A, 1B1-B, 1B-B, 1B2-B (Unit 2) 2A1-A, 2A-A, 2A2-A, 2B1-B, 2B-B, 2B2-B 6.9-kV/480V Pressurizer Heater Backup Group                          2/4                    Yes (3)
Transformers (500 kVA)
(Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B                (Not required for Unit 1 operation)
V Auxiliary Power System 480V Shutdown Boards                        4/8                    Yes (4)
(Unit 1) 1A1-A, 1A2-A, 1B1-B, 1B2-B (Unit 2) 2A1-A, 2A2-A, 2B1-B, 2B2-B V Reactor MOV Boards                          4/8                    Yes (Unit 1) 1A1-A, 1A2-A, 1B1-B, 1B2-B (Unit 2) 2A1-A, 2A2-A, 2B1-B, 2B2-B V Reactor Vent Boards                          2/4                    Yes 2                                    CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 2 of 4)
Qualified in Number Number            Conformance (1)
Equipment                    Per Unit / In Plant    with IEEE 344-1971 (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B V Control and Auxiliary
: g. Vent Boards                                      4/8                    Yes (Unit 1) 1A1-A, 1B1-B, 1A2-A, 1B2-B (Unit 2) 2A1-A, 2B1-B, 2A2-A, 2B2-B V Diesel Auxiliary Boards                          4/8                    Yes (Unit 1) 1A1-A, 1B1-B, 1A2-A, 1B2-B (Unit 2) 2A1-A, 2B1-B, 2A2-A, 2B2-B V Distribution Panelboards Pressurizer Heater kup Groups                                        2/4                    Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B                    (Not required for Unit 1 Operation)
V Transfer Switch for mponent Cooling System mp C-S                                              -/1                    Yes V AC Vital Plant Control Power System Static Inverter System Components                4/8                    Yes a.Auctioneer unit b.A transformer rectifier power supply c.A single phase static inverter with associated equipment for control, voltage, regulation, filtering, and instrumentation
: d. Regulated transformer bypass source with static and manual bypass switches (Unit 1) 1-I, 1-II, 1-III, 1-IV (Unit 2) 2-I, 2-II, 2-III, 2-IV (Spare) 0-I, 0-II, 0-III, 0-IV SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                    3.2-43
 
ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 3 of 4)
Qualified in Number Number            Conformance (1)
Equipment                  Per Unit / In Plant    with IEEE 344-1971 120V AC Vital Instrument                        4/8                    Yes Power Boards (Unit 1) 1-I, 1-II, 1-III, 1-IV (Unit 2) 2-I, 2-II, 2-III, 2-IV V DC Vital Plant Control Power System 480V AC Vital Transfer Switches            -/4 Note (4)                Yes Transfer SW I, II, III, IV 125V DC Vital Battery Chargers            -/6 Note (4)                Yes Chgrs I, II, III, IV, Spare Chgr 6-S and 7-S Transfer Devices for Spare 125V DC Vital Battery Chargers                    -/4 Note (4)                Yes DC Transfer Switch 6DC-8 DC Transfer Switch 7DC-S AC Transfer Switch 6AC-S AC Transfer Switch 7AC-S V AC Vital Disconnect Panels                  -/4 Note (4)                Yes Panel I, II, III, IV V DC Vital Batteries                          -/4 Note (4)
Batteries I & II Batteries III & IV V DC Vital Battery Boards                    -/4 Note (4)                Yes I, II, III, IV ctrical Penetrations High Voltage Power Penetrations                                  4/8                    Yes Nuclear Instrument System Penetrations                          4/8                    Yes Control Rod Position Indication Penetrations                      1/2                    Yes 4                                        CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 4 of 4)
Qualified in Number Number              Conformance (1)
Equipment                      Per Unit / In Plant      with IEEE 344-1971 Low Voltage, Power, Control, and Indication Penetrations                                    41/82                      Yes Thermocouple Penetrations                        3/6                      Yes site Electrical Power rce Components Diesel Generator Protective Relay Panels                                    2/4                      Yes (Unit 1) 1A, 1B (Unit 2) 2A, 2B Diesel Control Panels                            2/4                      Yes 125V Diesel Generator Batteries and Battery Racks                                2/4                      Yes Distribution Panels                                  2/4                      Yes V DC Battery Chargers                                2/4                      Yes ndby Diesel Generators                                2/4                      Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B
: 1. Those equipment items procured prior to publication of IEEE 344-1971 were purchased under specifications which TVA believes conform to the intent of that document.
Equipment procurement, modification, and evaluation activities after September 1, 1974 applied the IEEE 344-1975 standard for seismic qualification.
: 2. The 6.9-kV shutdown boards are qualified under Section 3.2.2.4.3 of IEEE 344-1971. The test unit withstood higher accelerations than shown on the frequency response spectrum for resonance at 1 percent damping.
: 3. The 500-kVA transformers were shown analytically to have lower stress under seismic loading conditions than the 2000-kVA transformers which were tested. The 500-kVA transformers are similar in design and construction to the 2000-kVA transformers.
: 4. The 125-V DC Vital Control Power System is not unitized therefore, numbers shown are on a per plant basis.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                          3.2-45
 
Table 3.2-4 Summary of Codes and Standards Safety Class Components of The Watts Bar Nuclear Plant Code Requirements Safety                                      Code Classification Class        TVA          Seismic      Piping, Pumps, Valves, S N-18.2    Class          Category            and Vessels                Remarks 1          A                I              ASME Code,                  Note 1 Sec. III, Class 1 2a          B                I              ASME Code,                  Note 1 Sec. III, Class 2 2b          C                I              ASME Code,                Notes 1,2,3 Sec. III, Class 3 3          D                I              ASME Code,                Notes 1 & 3 III, Class 3 TE:1)    Equipment designated "Vendor-Supplied Safety-Related Equipment Packages" on the drawing meet the following requirements:
: a. The vendor-supplied equipment packages (component and piping) contained within TVA piping systems classified as A, B, C, or D which do not meet the requirements of ASME Section III are installed and documented using the rules of ASME Section III, and manufacturer's instruction manuals, as requirements, except that the materials and equipment are not certified to Section III, and N-5 data report is not required. 10 CFR 50 Appendix B applies. In some cases there may be portions of these packages which are not safety-related (i.e., drains and vents past the first normally closed isolation valve) and do not require installation to these requirements.
: b. Any substitute material used or repairs performed by construction shall be in accordance with the original contract specification and drawing requirements.
: c. TVA Class D components are those whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to the whole body, or its equivalent. Class D components do not perform a primary safety function.
: d. Exception is taken to Note 1.a above for the auxiliary systems supplied on the diesel generator skid. The fuel oil, engine cooling water (except the ASME Section III, Class 3 heat exchangers), starting air and lubricating oil systems are designed per ANSI B31.1. They are designed to Seismic Category I and are within the 10CFR50 Appendix B QA program. Criteria requires that any modifications to this piping are performed to meet the intent of ASME Section III Class 3 (TVA Class C).
6                                          CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-4 Summary of Codes and Standards Safety Class Components of The Watts Bar Nuclear Plant Code Requirements Safety                                      Code Classification Class          TVA          Seismic      Piping, Pumps, Valves, S N-18.2      Class        Category          and Vessels                  Remarks ANSI B31.1 code is an acceptable substitute for the ASME code for installation of piping and valves on Class C instrument lines attached to TVA Class M, Q, and S systems. 10 CFR 50 Appendix B applies.
Condition Adverse to Quality Report WBP 900336SCA and NRC Violation 390/90-15-02 identified lack of penetration and/or lack of fusion in ASME Code Section III, Class 3 butt welds made prior to September 26, 1990.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                        3.2-47
 
Table 3.2-5 Non-Nuclear Safety Classifications A          Seismic                            Code Classification ss        Category          Piping          PumpsValves                            Vessels I(L)              ANSI B31.1      Manufac-          ANSI B31.1          ASME Code, turers            B16.5, or            Sec. VIII, Standards          MSS-SP-66            Div. 1 1
Note 1            ANSI B31.1
* ANSI B31.1,
* B16.5, or MSS-SP-66 N/A                  *                *                *
* I(L)                *                *                *
* Note 1              *                *                *
* Note 2              *                *                *
* 1 Code used is determined by the design requirements of the equipment.
Note 1:Those portions of TVA Class H and L systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading.
Note 2:This class applies to specific sensing lines which meet ASME Code Section III, Class 3 requirements except that inertia effects need not be used for design of lines in non seismic areas and independent verification by an Authorized Nuclear Inspector is not required for fabrication and installation. 10 CFR 50 Appendix B applies. N-5 data report is not required.
Portions of sensing lines in Seismic Category I structures meet Seismic Category I(L) pressure boundary requirements.
8                                          CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
Table 3.2-6 TVA Heating, Ventilation, and Air Conditioning Classifications VA              ANS                                                                Seismic ass        Safety Class                  Code Jurisdiction                        Category M              2b*          ANSI B31.5                                            I or I(L)
N              None          ANSI B31.5                                            Note 1 Q              2b*          Round Duct, Steel, Spiral                            I or I(L) or Longitudinal Seam, Locked Seam or Welded (ASTM A211) and SMACNA High Velocity Duct Con-struction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/
ASME N509 (see Note 2).
S              2b*          Rect. Duct, Steel, Locked Seam or                      I or (L)
Welded, SMACNA High Velocity                          Note 4 Duct Construction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/ASME N509 (see Note 2).
U              None          Round Duct, Steel, SMACNA Low                            I(L)
Velocity Duct Construction Standards, 4th Edition, 1969.
Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).
V              None          Rect. Duct, Steel, SMACNA Low                            I(L)
Velocity Duct Construction Standards, 4th Edition, 1969.
Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).
*TVA Class M, Q, and S designations are also used on heating, ventilation, and air-conditioning systems which have no ANS safety class requirements if seismic requirements are invoked.
SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS                                              3.2-49
 
Table 3.2-6 TVA Heating, Ventilation, and Air Conditioning Classifications VA              ANS                                                                Seismic ass        Safety Class                    Code Jurisdiction                        Category e 1:  Those portions of TVA Class N systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading.
e 2:  Those portions of TVA Classes Q and S Category I duct which are of welded construction, that are fabricated or repaired after January 12, 1987, meet the welding requirements of ANSI/ASME N509 1976. The workmanship samples are not required to have Penetrant Testing (PT) or Magnetic Testing (MT).
e 3:  All duct installations prior to December 21, 1990, were evaluated and qualified to meet the requirements of WB-DC-40-31.8.
All duct installations after December 21, 1990, shall be in accordance with specifications G-95, N3M-914, N3C-942, and Design Criteria WB-DC-40-31.8.
e 4  Safety Class 2b round flexible and triangular duct board ducting installed as part of this ceiling air delivery system in the main control room above the suspended ceiling is qualified to Seismic I(L) requirements, analyzed to ensue that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, the ducting pressure boundary will not be lost, and is constructed of standard commercial grade materials.
0                                          CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
 
TTS BAR New                                                    Related Requirements and Regulatory ent      Source    Provisions of Later Code                      Guide Requirements                            Examples When Used CASES GN/MATERIAL RELATED N-192    Provides rules for use of flexible metal hose Regulatory Guide 1.84, Rev 26 imposes the Referenced in data report for following addition to the requirements of      some of the flexible metal hose Code Case N-192: The applicant should          assemblies.
indicate system application, design and operating pressure/temperature rating of the flexible hose. Data to demonstrate compliance of the flexible hose with NC/ND-3649 particularly NC/ND-3649.4(e), are required to be furnished with the application.
1        N/A      Provides rules for the use of ASTM A-500 Grade B and ASTM A-501 as integrally welded attachments.
N-304    Provides for use of other materials not       None                                          Code Case N-304 was listed in the appendices.                                                                   originally approved by the NRC in Regulatory Guide 1.84, Rev.
20 dated November 1982.
20 dated November 1982.
Subsequent revisions of the Code Case have continued to retain unrestricted approval.NX-2000N-188-1Provides rules for using alloy 625 or 825 tubing that is welded without filler metal.NoneMaterials to be used for flexible metal hose assembliesN/AN-514Provides alternate analysis for pressure/temperature curves and low temperature overpressure protection (LTOP) system.NonePressure and Temperature Limits Report (PTLR)B.FABRICATION/EXAMINATION/TESTING RELATED CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-52WATTS BARWBNP-90N-32-4NAProvides for alternative testing of inaccessible or embedded welded joints in piping. Regulatory Guide 1.84, Rev. 26, accepts Code Case N-32-4 based on the following clarification and interpretation. Code Case N-32-4 does not replace paragraph NC/ND-6129, "Provisions For Embedded Or Inaccessible Welded Joints In Piping," of the Code. The intent of the Code Case is to provide additional testing above code requirements and permit liquid penetrant or magnetic particle testing in place of radiographic testing for Class 3 piping with 3/8 inch nominal wall or less. Paragraph 1 contains an additional requirement to the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.
Subsequent revisions of the Code Case have continued to retain unrestricted approval.
Paragraph 2 is a variation in the volumetric examination technique and was acceptable as written. Paragraph 3 contains an additional requirement and is not a relaxation of the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.Used in G-29 Process Specification 3.M.9.1N-127NAProvides for an alternative examination requirement for Class 1 and 2 welds made by an automatic welding process.NoneUsed on the 47B333 drawings. N-237-2NAPermits acceptance of open ended Class 2 or 3 piping within Class 2 or 3 vessels or tanks or into the gaseous atmosphere of Class MC vessels without hydrostatic  
0        N-188-1  Provides rules for using alloy 625 or 825     None                                          Materials to be used for flexible tubing that is welded without filler metal.                                                 metal hose assemblies N-514    Provides alternate analysis for               None                                          Pressure and Temperature pressure/temperature curves and low                                                         Limits Report (PTLR) temperature overpressure protection (LTOP) system.
ICATION/EXAMINATION/TESTING RELATED WBNP-90
 
TTS BAR New                                                  Related Requirements and Regulatory ent    Source  Provisions of Later Code                    Guide Requirements                          Examples When Used NA      Provides for alternative testing of         Regulatory Guide 1.84, Rev. 26, accepts       Used in G-29 Process inaccessible or embedded welded joints in  Code Case N-32-4 based on the following       Specification 3.M.9.1 piping.                                    clarification and interpretation. Code Case N-32-4 does not replace paragraph NC/ND-6129, "Provisions For Embedded Or Inaccessible Welded Joints In Piping," of the Code. The intent of the Code Case is to provide additional testing above code requirements and permit liquid penetrant or magnetic particle testing in place of radiographic testing for Class 3 piping with 3/8 inch nominal wall or less. Paragraph 1 contains an additional requirement to the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.
Paragraph 2 is a variation in the volumetric examination technique and was acceptable as written. Paragraph 3 contains an additional requirement and is not a relaxation of the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.
NA      Provides for an alternative examination None                                            Used on the 47B333 drawings.
requirement for Class 1 and 2 welds made by an automatic welding process.
2      NA      Permits acceptance of open ended Class 2 None                                            Used in G-29 Process or 3 piping within Class 2 or 3 vessels or                                               Specification 3.M.9.1. Also tanks or into the gaseous atmosphere of                                                 invoked by NC/ND-6000.
Class MC vessels without hydrostatic testing WBNP-90
 
TTS BAR New                                                    Related Requirements and Regulatory ent      Source  Provisions of Later Code                      Guide Requirements                    Examples When Used NA      Permits acceptance of open ended piping        None                                  Used in G-29 Process without hydrostatic testing.                                                          Specification 3.M.9.1. Also invoked by NC/ND-6000.
NA      Safety and safety relief valve piping          None                                  Used in G-29 Process submerged in a suppression pool inside a                                              Specification 3.M.9.1. Also Class MC or CC vessel may be exempted                                                invoked by from hydrostatic testing.                                                            NC/ND-6000.
NA      Provides rules for addition of weld metal at Regulatory Guide 1.84, Rev. 26 imposes the Used to disposition NCR W                    weld end prep to meet dimensional and        following requirement in addition to the      P.
minimum wall considerations.                requirements in Code Case N-292: Class 3 piping that is longitudinally welded and that has a weld efficiency factor of 1.0 as selected from Table ND-3613.4-1 should receive a 100% volumetric examination (RT or UT) of the deposited weld metal in accordance with the requirements of ND-5000.
NA      Provides for socket weld sizes <1.09 TNOM. None                                      Used to disposition NCRs 3702R R0, W-427-P R0, 3555R R0, 4135R R0, 4345R R1, 4739-0, 2217R, 4114, 5305-0, and 5833 R0.
N-341    Provides for a five year period of            None certification of Level III NDE personnel.
LITY ASSURANCE RELATED NA      Allows information to be cross referenced or depicted on an attached drawing rather than physically attached to the data report.
WBNP-92 NA      Provides alternatives when Code data          None                                  Used in disposition of NCRs plates are removed.                                                                  1464R R1 and 3750.
 
TTS BAR New                                                  Related Requirements and Regulatory ent        Source  Provisions of Later Code                    Guide Requirements                    Examples When Used E EDITION AND ADDENDA GN/MATERIAL RELATED SA-36    74S76    Bend testing made an optional              None                                  See Interpretation III-1-83-275.
(supplemental) requirement                                                        Used in G-62.
SA-515  74W74    Bend testing made an optional              None                                  See Interpretation III-1-83-275.
(supplemental) requirement                                                        Used in G-62.
SA-516  74W74    Bend testing made an optional              None                                  See Interpretation III-1-83-275.
(supplemental) requirement                                                        Used in G-62.
SA-283  74S76    Bend testing made an optional              None                                  See Interpretation III-1-83-275.
(supplemental) requirement                                                        Used in G-62.
SA-479  74S76    Decreased the required elongation to 30%    None                                  Used in G-62.
and reduction in area to 40%.
40(e)      80W81    Permits the use of material certified to  None                                  Used in G-62 editions and addenda earlier than the Code of Record providing certain requirements are met.
0          77W78    Deletes the minimum size of attachment      None                                  Used in disposition of NCR pads                                                                              3723R 5          74ED    Provides for certain minor permanent        None                                  Used to disposition NCR 5409 attachments to be made of uncertified                                            R1 material 80S81    Deleted the paragraph limiting instrument  None                                  Used to disposition NCR WBNP-92 take off size                                                                    2001R. Also involved in change number NC/ND3676-1
 
TTS BAR New                                                  Related Requirements and Regulatory ent      Source  Provisions of Later Code                    Guide Requirements                    Examples When Used 3.10    74ED    Provides for acceptance of locally over-    None                                  Used to disposition NCR 3250 stressed conditions                                                              R1
-        74W76    Provides for use of intervening isolation  None A                valves 80S81    Deletes requirements formerly in          None                                    This request has been paragraph NC/ND-3676 affecting lagging of                                        generated to cover situations in steam instrument lines.                                                          which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.
-3643.1  77S77    Adds provisions for making branch          None                                  This request has been connections by means of complete                                                  generated to cover situations in penetration pipe to pipe welds.                                                  which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.
-2311    74W76    Lists materials exempted from impact        None                                Requirements of later Code testing. This provision exists in Section NB                                      exempting certain materials 2311 Summer 1972 Addenda which is                                                from impact test for Class 2 referenced in Section NC/ND.                                                      and Class 3 systems.
WBNP-92
 
TTS BAR New                                                  Related Requirements and Regulatory ent        Source  Provisions of Later Code                    Guide Requirements                    Examples When Used II,        80ED    Bolting material allowable stress of non-    None                                  For the analysis of non-ix XVII,            pressure retention parts (i.e., motor                                              pressure retention parts of 1-actuator mounting screws).                                                        FCV-72-13 and -34 for Sect.
increased valve closure thrust loops. SQN calc. SCG-4M-00786 was reviewed for WBN application. Since the 1971 ASME III NC Codes do not contain stress allowables for non-pressure retention parts, thus ASME III NC and Appendix XVII of 1980 Codes, Sect. 2461.1 rules will be used for the analysis. Ref. DCN-S-33722-A and MEB Calc. EPM-CDM-071092 and -071192.
ICATION/EXAMINATION/TESTING RELATED 6          80W81    Permits limited welding of attachments to a None                                  Used in G-29 Process piping system after it has been                                                    Specification 3.M.9.1.
hydrostatically tested providing certain conditions are met.
9          77W78    Provides for alternative testing of        None                                    Used in G-29 Process inaccessible or embedded welding joints in                                        Specification 3.M.9.1.
piping.
8          77S78    Piping systems which serve as spray          None                                  Used in G-29 Process systems shall be hydrostatically tested to                                        Specification 3.M.9.1. Also the rules of this section, except that the                                        invoked by NC/ND-6000.
test may be performed with the spray nozzle attachment connections plugged.
The spray nozzles and any connection WBNP-92 beyond the run connections need not be hydrostatically tested.
 
TTS BAR New                                                Related Requirements and Regulatory ent      Source  Provisions of Later Code                  Guide Requirements                    Examples When Used 1      80S80    Air pockets in components or systems shall None                                Used in G-29 Process be minimized during the conduct of the                                          Specification 3.M.9.1. Also hydrostatic test by providing vents at high                                    invoked by NC/ND-6000.
points, or by flushing the system or by providing calculations to show that the entrapped air is dissolved at the pressure/temperature conditions existing during the test.
2.1-1  74ED    PWHT holding time is specified to be: For T None                                Used in G-29 Process less than or equal to 1/2 inch, 30 minutes;                                    Specification 2.M.1.1.
For T greater than 1/2 inch but less than or equal to 2 inches (P number 1 & 3), 1 hour per inch; For T greater than 2 inches (P number 1 & 3), 2 hours plus 15 minutes per inch over 2 inches; For T greater than 1/2 inch but less than or equal to 5 inches (P number 4,5,6,7,11,11A), 1 hour per inch; For T greater than 5 inches (P number 4,5,6,7), 5 hours plus 15 minutes per inch over 5 inches. For T greater than 5-inches (P Number 11, 11A) one hour per inch.
3      74ED    For PWHT above 800&deg;F, the rate of heating None                                  Used in G-29 Process
                  & cooling shall not exceed a rate of 400&deg;                                      Specification 2.M.1.1.
per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400&deg;F per hour.
4.3    74ED    For PWHT, the minimum width of controlled None                                  Used in G-29 Process band at each side of the weld on the face of                                    specification 2.M.1.1. G-29 the greatest weld width shall be the                                            uses 2 times the thickness or 2 thickness of the weld or 2 inches whichever                                    inches whichever is less. This is less. (2.M.1.1 uses the minimum from                                        is more conservative than the WBNP-92 71S73 and the maximum from 74).                                                Code requires.
 
TTS BAR New                                                  Related Requirements and Regulatory ent      Source  Provisions of Later Code                    Guide Requirements                    Examples When Used 3      74ED    For PWHT above 800&deg;F, the rate of heating None                                    Used in G-29 Process
                  & cooling shall not exceed a rate of 400&deg;                                          Specification 2.M.1.1.
per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400&deg;F per hour.
74ED    Deleted requirement of Code of Record    None                                    Used in G-29 Process Paragraph 4623.1 that furnace temperature                                          Specification 2.M.1.1.
be less than 400&deg;F when the component is placed in it for PWHT.
3.1    83S83    Relative to examination of defect removal    None                                  Used in G-29 Process area (adds the following) this examination                                        Specification 1.M.1.2.
is not required where defect removal removes the full thickness of the weld and where the backside of the weld is not accessible for removal of examination materials.
1.2    74ED    Deletes Code of Record requirements for      None                                  Used in G-29 Process MT/PT examination of temporary                                                    Specification 1.M.1.2.
attachment removal sites on Class 3 components. Permits temporary attachments but deletes the NDE examinations of removal areas.
-6322    80S81    (By reference to NC/ND-6222) If the          NC/ND-6221(a)                        Used in G-29 Process minimum test pressure of NC/ND-6221(a)      NC/ND-6221(d)                        Specification 3.M.12.1 or (d) is exceeded by 6% at any location, the upper limit shall be established by analysis using all loadings that may exist during the test.
WBNP-90


testingNoneUsed in G-29 Process Specification 3.M.9.1. Also invoked by NC/ND-6000.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-53WATTS BARWBNP-92N-240NAPermits acceptance of open ended piping without hydrostatic testing.NoneUsed in G-29 Process Specification 3.M.9.1. Also invoked by NC/ND-6000.N-241NASafety and safety relief valve piping submerged in a suppression pool inside a Class MC or CC vessel may be exempted from hydrostatic testing.NoneUsed in G-29 Process Specification 3.M.9.1. Also invoked by NC/ND-6000.N-292NAProvides rules for addition of weld metal at weld end prep to meet dimensional and minimum wall considerations.Regulatory Guide 1.84, Rev. 26 imposes the following requirement in addition to the requirements in Code Case N-292:  Class 3 piping that is longitudinally welded and that has a weld efficiency factor of 1.0 as selected from Table ND-3613.4-1 should receive a 100% volumetric examination (RT or UT) of the deposited weld metal in accordance with the requirements of ND-5000.Used to disposition NCR W P.N-316NAProvides for socket weld sizes <1.09 T NOM.NoneUsed to disposition NCRs 3702R R0, W-427-P R0, 3555R R0, 4135R R0, 4345R R1, 4739-0, 2217R, 4114, 5305-0, and 5833 R0.N/AN-341Provides for a five year period of certification of Level III NDE personnel.NoneC.QUALITY ASSURANCE RELATEDN-272NAAllows information to be cross referenced or depicted on an attached drawing rather than physically attached to the data report.N-282NAProvides alternatives when Code data plates are removed.NoneUsed in disposition of NCRs 1464R R1 and 3750.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-54WATTS BARWBNP-92II.CODE EDITION AND ADDENDAA.DESIGN/MATERIAL RELATED Sect II SA-3674S76Bend testing made an optional (supplemental) requirementNoneSee Interpretation III-1-83-275. Used in G-62.Sect II SA-51574W74Bend testing made an optional (supplemental) requirementNoneSee Interpretation III-1-83-275. Used in G-62.Sect II SA-51674W74Bend testing made an optional (supplemental) requirementNone See Interpretation III-1-83-275. Used in G-62.Sect II SA-28374S76Bend testing made an optional (supplemental) requirementNoneSee Interpretation III-1-83-275. Used in G-62.Sect II SA-47974S76Decreased the required elongation to 30% and reduction in area to 40%.NoneUsed in G-62.NCA-1140(e)80W81Permits the use of material certified to editions and addenda earlier than the Code of Record providing certain requirements are met.NoneUsed in G-62NE-443077W78Deletes the minimum size of attachment padsNoneUsed in disposition of NCR 3723RND-443574EDProvides for certain minor permanent attachments to be made of uncertified materialNoneUsed to disposition NCR 5409 R1NA80S81Deleted the paragraph limiting instrument take off sizeNoneUsed to disposition NCR 2001R. Also involved in change number NC/ND3676-1Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-55WATTS BARWBNP-92NE-3213.1074EDProvides for acceptance of locally over-stressed conditionsNoneUsed to disposition NCR 3250 R1 NC/ND-3612.4A74W76Provides for use of intervening isolation valvesNoneNA80S81Deletes requirements formerly in paragraph NC/ND-3676 affecting lagging of steam instrument lines.NoneThis request has been generated to cover situations in which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.NC/ND-3643.177S77Adds provisions for making branch connections by means of complete penetration pipe to pipe welds.NoneThis request has been generated to cover situations in which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.NC/ND-231174W76Lists materials exempted from impact testing. This provision exists in Section NB 2311 Summer 1972 Addenda which is referenced in Section NC/ND.NoneRequirements of later Code exempting certain materials from impact test for Class 2 and Class 3 systems.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-56WATTS BARWBNP-92ASME III, Appendix XVII, 2461.1 80EDBolting material allowable stress of non-pressure retention parts (i.e., motor actuator mounting screws).NoneFor the analysis of non-pressure retention parts of 1-FCV-72-13 and -34 for Sect.
TTS BAR New                                                    Related Requirements and Regulatory ent    Source  Provisions of Later Code                       Guide Requirements                   Examples When Used 0      74ED    (By reference to Section V T-732.2(B)        T-733.2                                Used in G-29 Process which refers to T-733.2) Direct or rectified                                        Specification 3.M.2.1.
increased valve closure thrust loops. SQN calc. SCG-4M-00786 was reviewed for WBN application. Since the 1971 ASME III NC Codes do not contain stress allowables for non-pressure retention parts, thus ASME III NC and Appendix XVII of 1980 Codes, Sect. 2461.1 rules will be used for the analysis. Ref. DCN-S-33722-A and MEB Calc. EPM-CDM-071092 and -071192.B.FABRICATION/EXAMINATION/TESTING RELATEDNX-443680W81Permits limited welding of attachments to a piping system after it has been hydrostatically tested providing certain conditions are met.NoneUsed in G-29 Process Specification 3.M.9.1.NC-612977W78Provides for alternative testing of inaccessible or embedded welding joints in piping.NoneUsed in G-29 Process Specification 3.M.9.1.NB-612877S78Piping systems which serve as spray systems shall be hydrostatically tested to the rules of this section,  except that the test may be performed with the spray nozzle attachment connections plugged.
current shall be used at 700/N to 900/N amperes per inch OD up to 5 inches and 500/N to 700/N amperes per inch OD from 5 to 10 inches and 300/N to 500/N amperes per inch OD over 10 inches where N = # of turns.
The spray nozzles and any connection beyond the run connections need not be hydrostatically tested.NoneUsed in G-29 Process Specification 3.M.9.1. Also invoked by NC/ND-6000.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-57WATTS BARWBNP-92NX-621180S80 Air pockets in components or systems shall be minimized during the conduct of the hydrostatic test by providing vents at high points, or by flushing the system or by providing calculations to show that the entrapped air is dissolved at the pressure/temperature conditions existing during the test.NoneUsed in G-29 Process Specification 3.M.9.1. Also invoked by NC/ND-6000.NB-4622.1-1 (TBL)74EDPWHT holding time is specified to be: For T less than or equal to 1/2 inch, 30 minutes; For T greater than 1/2 inch but less than or equal to 2 inches (P number 1 & 3), 1 hour per inch; For T greater than 2 inches (P number 1 & 3), 2 hours plus 15 minutes per inch over 2 inches; For T greater than 1/2 inch but less than or equal to 5 inches (P number 4,5,6,7,11,11A), 1 hour per inch; For T greater than 5 inches (P number 4,5,6,7), 5 hours plus 15 minutes per inch over 5 inches. For T greater than 5-inches (P Number 11, 11A) one hour per inch.NoneUsed in G-29 Process Specification 2.M.1.1.NB-462374EDFor PWHT above 800
0      74ED    (By reference to Section V T-733.2.) Direct None                                    Used in G-29 Process or rectified current shall be used at 700 to                                         Specification 3.M.2.1.
&deg;F, the rate of heating &  cooling shall not exceed a rate of 400
900 amperes per inch OD up to 5 inches and 500 to 700 amperes per inch OD from 5 to 10 inches and 300 to 500 amperes per inch OD over 10 inches.
&deg; per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400
7-1    80S80    Minimum size for socket weld fitting fillet    None                                  Used in G-29 Process 80W81    weld (CX) = 1.09 T nominal.                                                         Specification 3.M.5.1.
&deg;F per hour.NoneUsed in G-29 Process Specification 2.M.1.1.NB-4624.374EDFor PWHT, the minimum width of controlled band at each side of the weld on the face of the greatest weld width shall be the thickness of the weld or 2 inches whichever is less. (2.M.1.1 uses the minimum from 71S73 and the maximum from 74).NoneUsed in G-29 Process specification 2.M.1.1. G-29 uses 2 times the thickness or 2 inches whichever is less. This is more conservative than the Code requires.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-58WATTS BARWBNP-90NC-462374EDFor PWHT above 800
Errata 0      74S75    (By Reference to Section V T-732.2) For          T-732.2(A)                         Used in G-29 Process encircling coils, direct or rectified current at T-732.2(B)                          Specification 3.M.2.1.
&deg;F, the rate of heating & cooling shall not exceed a rate of 400
35,000 ampere-turns divided by the sum of 2 plus the L/D ratio of the test part shall be used for magnetization.
&deg; per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400
0      74ED    (By reference to Section V T-731.3) Direct None                                      Used in G-29 Process or rectified magnetizing current shall be                                            Specification 3.M.2.1.
&deg;F per hour.NoneUsed in G-29 Process Specification 2.M.1.1.NA    74ED Deleted requirement of Code of Record Paragraph 4623.1 that furnace temperature be less than 400
used at a minimum of 100 and a maximum of 125 amperes per inch of prod spacing for sections greater than or equal to 3/4 inch.
&deg;F when the component is placed in it for PWHT.NoneUsed in G-29 Process Specification 2.M.1.1.NX-4453.183S83Relative to examination of defect removal area (adds the following) this examination is not required where defect removal removes the full thickness of the weld and where the backside of the weld is not accessible for removal of examination materials.NoneUsed in G-29 Process Specification 1.M.1.2.ND-4231.274EDDeletes Code of Record requirements for MT/PT examination of temporary attachment removal sites on Class 3 components. Permits temporary attachments but deletes the NDE examinations of removal areas.NoneUsed in G-29 Process Specification 1.M.1.2.NC/ND-632280S81(By reference to NC/ND-6222) If the minimum test pressure of NC/ND-6221(a) or (d) is exceeded by 6% at any location, the upper limit shall be established by analysis using all loadings that may exist during the test.NC/ND-6221(a)NC/ND-6221(d)Used in G-29 Process Specification 3.M.12.1Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-59WATTS BARWBNP-90NX-511074ED(By reference to Section V T-732.2(B) which refers to T-733.2)  Direct or rectified current shall be used at 700/N to 900/N amperes per inch OD up to 5 inches and 500/N to 700/N amperes per inch OD from 5 to 10 inches and 300/N to 500/N amperes per inch OD over 10 inches where N = # of  
For sections less than 3/4 inch, amperage shall be 90-110 ampere per inch of prod spacing.
WBNP-90


turns.T-733.2Used in G-29 Process Specification 3.M.2.1.NB-511074ED(By reference to Section V T-733.2.)  Direct or rectified current shall be used at 700 to 900 amperes per inch OD up to 5 inches and 500 to 700 amperes per inch OD from 5 to 10 inches and 300 to 500 amperes per inch OD over 10 inches.None             Used in G-29 Process Specification 3.M.2.1.NX-4427-1 (FIG)80S80 80W81 ErrataMinimum size for socket weld fitting fillet weld (CX) = 1.09 T nominal.NoneUsed in G-29 Process Specification 3.M.5.1.NX-511074S75(By Reference to Section V T-732.2) For encircling coils, direct or rectified current at 35,000 ampere-turns divided by the sum of 2 plus the L/D ratio of the test part shall be used for magnetization.T-732.2(A)T-732.2(B)Used in G-29 Process Specification 3.M.2.1.NX-511074ED(By reference to Section V T-731.3)  Direct or rectified magnetizing current shall be used at a minimum of 100 and a maximum of 125 amperes per inch of prod spacing for sections greater than or equal to 3/4 inch.
TTS BAR New                                                  Related Requirements and Regulatory ent    Source  Provisions of Later Code                    Guide Requirements                    Examples When Used 2     74ED    All NDE performed under this section shall None                                   Used in G-29 Process be executed in accordance with detailed                                          Specification 3.M.2.1.
For sections less than 3/4 inch, amperage shall be 90-110 ampere per inch of prod spacing.NoneUsed in G-29 Process Specification 3.M.2.1.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-60WATTS BARWBNP-92NX-511274EDAll NDE performed under this section shall be executed in accordance with detailed written procedures which have been proven by actual demonstration to the satisfaction of the inspector.NoneUsed in G-29 Process Specification 3.M.2.1.NX-511074W74(By reference to Section V T-630(B)). The penetrant materials are acceptable if the residue does not exceed 0.005 grams or the total sulfur or halogen content shall not exceed 1% of the residue by weight.NoneUsed in G-29 Process Specification 3.M.1.1.NX-511074ED(By reference to Section V T-662). A groove may be machined across the center of each face approximately 1/16 inch deep and 3/64 inch wide, or some other means should be provided to permit side by side comparison without interfering cross contamination between sides.NoneUsed in G-29 Process Specification 3.M.1.1.NX-511077W79(By reference to Section V T-660) Permits qualification to be performed by the entire block at each temperature, photographing the results and comparing the photographs.NoneUsed in G-29 Process Specification 3.M.1.1.NX-511274EDAll non-destructive examinations shall be executed in accordance with detailed written procedures which have been proven by actual demonstration to the satisfaction of the inspector.NoneUsed in G-29 Process Specification 3.M.1.1.NX-511274EDAll non-destructive examinations shall be executed in accordance with detailed written procedures which have been proven by actual demonstration to the satisfaction of the inspector.NoneUsed in G-29 Process Specification 3.M.7.1.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-61WATTS BARWBNP-92 Section IX, QW-20374EDAllows welding proc edure qualification in any position to qualify for all position production welds except as noted.QW-405.2 which requires qualification in the vertical position with upward progression if fracture toughness (impact testing) is a requirement.Used in G-29 Process Specification 1.M.1.2.NC/ND-257874EDUnacceptable surface defects may be removed by grinding or machining provided:  The remaining thickness is not reduced below the minimum required; the depression after defect elimination, is blended uniformly.NoneUsed in G-29 Process Specification 4.M.5.1.ND-413074W76Radiography is not required for welded repairs in material used in components provided that the welds joining these materials are not required to be radiographed, the extent of the welded repair does not exceed 10 square inches of surface area and the magnetic particle or liquid penetrant examination of the repair is made as required by ND-2539.4.NoneUsed in G-29 Process Specification 4.M.5.1.NB-4131 NC-413074W74The time of examination of the weld repairs to weld edge preparations shall be in accordance with NB-5130.  (NC-5130).Since NB/NC-5130d did not exist in summer 1973, these two paragraphs from winter 1974 must be added.Used in G-29 Process Specification 4.M.5.1.NX-511074ED(By reference to Section VT-535.1)  The primary reference shall be equalized at 50% full screen height.NoneUsed in G-29 Process Specification 3.M.7.1.NB-4620NB-465174EDFerritic alloy steel pipe that has been heated for bending shall receive a heat treatment in accordance with NB-4620.
written procedures which have been proven by actual demonstration to the satisfaction of the inspector.
Exemptions are listed in Table NB-4622.3-
0      74W74    (By reference to Section V T-630(B)). The None                                    Used in G-29 Process penetrant materials are acceptable if the                                         Specification 3.M.1.1.
residue does not exceed 0.005 grams or the total sulfur or halogen content shall not exceed 1% of the residue by weight.
0      74ED    (By reference to Section V T-662). A     None                                    Used in G-29 Process groove may be machined across the center                                         Specification 3.M.1.1.
of each face approximately 1/16 inch deep and 3/64 inch wide, or some other means should be provided to permit side by side comparison without interfering cross contamination between sides.
0      77W79    (By reference to Section V T-660) Permits None                                    Used in G-29 Process qualification to be performed by the entire                                       Specification 3.M.1.1.
block at each temperature, photographing the results and comparing the photographs.
2      74ED    All non-destructive examinations shall be  None                                  Used in G-29 Process executed in accordance with detailed                                              Specification 3.M.1.1.
written procedures which have been proven by actual demonstration to the satisfaction of the inspector.
2      74ED    All non-destructive examinations shall be  None                                  Used in G-29 Process executed in accordance with detailed                                              Specification 3.M.7.1.
written procedures which have been proven by actual demonstration to the WBNP-92 satisfaction of the inspector.


1.NoneUsed in G-29 Process Specification 4.M.2.1.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-62WATTS BARWBNP-90Sect V T-263.383W83Provides for not using shims if the radiographic density requirements can be met.NoneUsed in G-29 Process Specification 3.M.3.1.NX-511274EDAll nondestructive examinations shall be executed in accordance with detailed written procedures which have been proven by actual demonstration to the satisfaction of the inspector.NoneUsed in G-29 Process Specification 3.M.3.1.
TTS BAR New                                                  Related Requirements and Regulatory ent      Source  Provisions of Later Code                    Guide Requirements                          Examples When Used IX,  74ED    Allows welding procedure qualification in  QW-405.2 which requires qualification in the Used in G-29 Process 3                any position to qualify for all position    vertical position with upward progression if Specification 1.M.1.2.
NC/ND-3641.1(a)71W73Revise the definition of certain terms in Equation 3 and 4 to permit other means than pipe wall thickness to provide for mechanical strength.Used in the following Calculations and NCRs:
production welds except as noted.          fracture toughness (impact testing) is a requirement.
B26850423089, B26850508012, B26850710009, B26850710010, B26850808014, B26860611003, MEB850228009, WBP850211062, NCR4145RRO, NCR2217R.
-2578    74ED    Unacceptable surface defects may be        None                                        Used in G-29 Process removed by grinding or machining                                                        Specification 4.M.5.1.
provided: The remaining thickness is not reduced below the minimum required; the depression after defect elimination, is blended uniformly.
0      74W76    Radiography is not required for welded        None                                      Used in G-29 Process repairs in material used in components                                                  Specification 4.M.5.1.
provided that the welds joining these materials are not required to be radiographed, the extent of the welded repair does not exceed 10 square inches of surface area and the magnetic particle or liquid penetrant examination of the repair is made as required by ND-2539.4.
1      74W74    The time of examination of the weld repairs Since NB/NC-5130d did not exist in summer Used in G-29 Process 0                to weld edge preparations shall be in      1973, these two paragraphs from winter    Specification 4.M.5.1.
accordance with NB-5130. (NC-5130).        1974 must be added.
0      74ED    (By reference to Section VT-535.1) The      None                                        Used in G-29 Process primary reference shall be equalized at                                                  Specification 3.M.7.1.
50% full screen height.
0      74ED    Ferritic alloy steel pipe that has been    None                                        Used in G-29 Process 1                heated for bending shall receive a heat                                                  Specification 4.M.2.1.
treatment in accordance with NB-4620.
Exemptions are listed in Table NB-4622.3-1.
WBNP-92
 
TTS BAR New                                                 Related Requirements and Regulatory ent      Source  Provisions of Later Code                    Guide Requirements                    Examples When Used T-263.3 83W83  Provides for not using shims if the         None                                  Used in G-29 Process radiographic density requirements can be                                         Specification 3.M.3.1.
met.
2      74ED    All nondestructive examinations shall be   None                                  Used in G-29 Process executed in accordance with detailed                                             Specification 3.M.3.1.
written procedures which have been proven by actual demonstration to the satisfaction of the inspector.
-       71W73    Revise the definition of certain terms in                                         Used in the following a)              Equation 3 and 4 to permit other means                                           Calculations and NCRs:
than pipe wall thickness to provide for                                           B26850423089, mechanical strength.                                                             B26850508012, B26850710009, B26850710010, B26850808014, B26860611003, MEB850228009, WBP850211062, NCR4145RRO, NCR2217R.
Also involved in Code changes NC-3641(A)-1-3, NC-3641(A)-
Also involved in Code changes NC-3641(A)-1-3, NC-3641(A)-
1-4, NC-3641(A)-1-5, ND-3641(A)-1-3, ND-3641(A)-1-4, and ND-3641(A)-1-6.NX-4311.380W81Provides for use of capacitor discharge welding of thermocouples and strain gauges.NoneUsed in G-29 Process Specification 1.M.4.3.NC-4244(e)74EDProvides alternative for attachment of internally threaded bosses.NoneUsed in Calculation B26850613072.ND-532177W77(By reference to Appendix VI, VI-1132) Provides minimum size for relevant RT indications.NoneUsed to disposition CAQR WBP890600.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-63WATTS BARWBNP-92NX-534277EDDefines nonrelevant condition as any indication with a major dimension of less than 1/16 of an inch.  (MT examination).NoneNB-4622.774EDProvides for exemptions to otherwise mandatory post weld heat treatment based on P number, size, carbon content, and preheat.NoneAlso invoked by NC/ND-4000.TBL NX-4622.1-174S76Provides for substitution of 200 EF preheat for PWHT when carbon >0.30% and/or tensile strength >70 ksi for certain material
1-4, NC-3641(A)-1-5, ND-3641(A)-1-3, ND-3641(A)-1-4, and ND-3641(A)-1-6.
1.3    80W81    Provides for use of capacitor discharge     None                                  Used in G-29 Process welding of thermocouples and strain                                               Specification 1.M.4.3.
gauges.
4(e)   74ED    Provides alternative for attachment of     None                                  Used in Calculation internally threaded bosses.                                                       B26850613072.
1      77W77    (By reference to Appendix VI, VI-1132)     None                                  Used to disposition CAQR WBNP-90 Provides minimum size for relevant RT                                             WBP890600.
indications.


applications.NoneUsed in disposition of NCR 1146R and in the 47B333 drawings.NX-4622.3-1 (TBL)74EDProvides additional exemptions to PWHT under conditions as described in Table.New Paragraph NX-4622.3 - defines term "nominal thickness" as used in Table NX-4622.3-1.Used on the 47B333 Drawings.NB-5320 & NC-532077W77(By reference to Appendix IV) Provides relevant size and spacing clarification for rounded indications for RT.NoneProvides acceptance criteria for rounded indications for RTNB-5250 and NC-526177W78Exempts welds of non-structural attachments from liquid penetrant or magnetic particle examination. Does not exempt the removal area of non-structural or temporary attachments.NoneWBPER910208NB/NC/ND 6114.280S81Provides exemption to requirement to re-hydro following repair by welding if repair weld is not required to be radiographed per NB/NC/ND-4453.4.NoneUsed in G-29 process specification 3.M.9.1Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-64WATTS BARWBNP-92NB 2510(a)83S83Seamless pipe, tube, and fittings 1"NPS and less need not be examined by the rules of this subarticle.NoneUse of examination requirements for ASME Section III, Class 1, 1" nominal pipe and smaller from a later edition. Invoke for 1" NPS and less, only.Table NC-4622.3-174S76Exempts PWHT in Pl materials less than 1 1/2" thick provided 200 degrees F preheat
TTS BAR New                                                    Related Requirements and Regulatory ent      Source  Provisions of Later Code                      Guide Requirements                        Examples When Used 2      77ED    Defines nonrelevant condition as any          None indication with a major dimension of less than 1/16 of an inch. (MT examination).
2.7    74ED    Provides for exemptions to otherwise    None                                            Also invoked by NC/ND-4000.
mandatory post weld heat treatment based on P number, size, carbon content, and preheat.
-      74S76    Provides for substitution of 200EF preheat None                                          Used in disposition of NCR 1              for PWHT when carbon >0.30% and/or                                                      1146R and in the 47B333 tensile strength >70 ksi for certain material                                            drawings.
applications.
2.3-1   74ED    Provides additional exemptions to PWHT       New Paragraph NX-4622.3 - defines term     Used on the 47B333 Drawings.
under conditions as described in Table.      "nominal thickness" as used in Table NX-4622.3-1.
0 & NC- 77W77    (By reference to Appendix IV) Provides       None                                      Provides acceptance criteria relevant size and spacing clarification for                                              for rounded indications for RT rounded indications for RT.
0 and   77W78    Exempts welds of non-structural               None                                      WBPER910208 1                attachments from liquid penetrant or magnetic particle examination. Does not exempt the removal area of non-structural or temporary attachments.
ND     80S81    Provides exemption to requirement to re-   None                                        Used in G-29 process hydro following repair by welding if repair                                             specification 3.M.9.1 weld is not required to be radiographed per NB/NC/ND-4453.4.
WBNP-92


is used.NoneUsed to disposition WBP 900419PERNX-442780W82Allows fillet welds to be undersize 1/16 inch for 10% of length of weld.NoneWeld ProjectNCA 1273 80S80Exempts orifice plates not exceeding 1/2" nominal thickness which are clamped between flanges and used for flow measuring service only from the code.NoneOrifice PlatesNB 2538(a)4 77ED Areas ground to remove oxide scale or other mechanically caused depressions...need not be PT or MT examined.NoneProvisions for not NDE examining impressions caused by mechanical means. NB-4622.989EDIncreases the area which can be repaird by temper bead to 100 in 2 and up to 1/3 of base material thickness.NoneSteam generator manway repair or other locations as required.C.QUALITY ASSURANCE RELATED NCA-400080W81Provided more detailed QA program requirements.NoneUsed in the NCMNCA-824083S83Provides alternatives when code data plates are removed.NoneUsed in disposition of WBP880052, NCR 5577R0, NCR 5611R0, and NCR 5619R0.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-65WATTS BARWBNP-92NCA-8240(b)80S81Provides alternatives when code data plates are removed.NoneUse in disposition of NCR 3951R.NX-2610b and c77EDMakes provision to exempt manufacturers of small products from certain QA program requirements.NoneUsed in Disposition NCR GENMEB8402, NCR 5146-0, WBP880431, WBP889432, WBP880433, WBP880437, and WBP880438.NCA 380089EDMetallic material manufacturers and material suppliers Quality System program provides for non certificate holders QA Manual revision and date to be placed on the documentation and also provides documentation requirements for 1" bar stock.NoneQA programmatic requirements for vendors supplying materials and components.Table 3.2-7  Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and FabricationSource Document New SourceProvisions of Later CodeRelated Requirements and Regulatory Guide RequirementsExamples When Used 3.2-66CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS WATTS BARWBNP-92THIS PAGE INTENTIONALLY BLANK Wind and Tornado Loading 3.3-1WATTS BARWBNP-92 3.3  Wind and Tornado Loading 3.3.1  Wind Loadings3.3.1.1  Design Wind VelocityThe Seismic Category I structures are designed for a 95-mile per hour wind, 30 feet above grade, with a 100 year recurrence interval. The wind was determined from Figure 1, ASCE paper 3269, "Wind Forces on Structures."[3] ANSI A58.1-1972, 'Building Code Requirements for Minimum Design Loads in Building and Other Structures'
TTS BAR New                                                  Related Requirements and Regulatory ent      Source  Provisions of Later Code                    Guide Requirements                    Examples When Used 0(a)    83S83    Seamless pipe, tube, and fittings 1"NPS    None                                  Use of examination and less need not be examined by the rules                                        requirements for ASME of this subarticle.                                                              Section III, Class 1, 1" nominal pipe and smaller from a later edition. Invoke for 1" NPS and less, only.
[4] is an acceptable alternative for determining design wind velocities and forces. The wind was applied for the full height of the structure. A gust factor of 1.1 is included for all wind loads and combinations of loads where wind is involved as recommended in ASCE paper 3269.
C-    74S76    Exempts PWHT in Pl materials less than 1 None                                    Used to disposition WBP 1              1/2" thick provided 200 degrees F preheat                                        900419PER is used.
[3]3.3.1.2  Determination of Applied ForceThe pressure and pressure distribution of wind loads on structures were determined by the methods described in ASCE Paper 3269.[3] The dynamic wind pressure, q, is defined as q = 0.00256V 2, where q is in psf and V is in mph. A gust factor of 1.1 is applied which redefines q as q = 0.00256 (1.1V) 2 = 0.0031OV
7      80W82    Allows fillet welds to be undersize 1/16 inch None                                Weld Project for 10% of length of weld.
: 2. The wind pressure, p, in psf, is defined as p = Cq, where C is the pressure distribution coefficient (Cpe or Cpi) or the shape coefficient (C D) determined from Table 4 in ASCE Paper 3269.
73      80S80    Exempts orifice plates not exceeding 1/2"   None                                  Orifice Plates nominal thickness which are clamped between flanges and used for flow measuring service only from the code.
[3]For the analysis of box-shaped structures, a shape coefficient (C D) of 1.3 is used which defines the wind pressure as p = 1.3q. Of the total pressure (p = 1.3q), 0.8q is applied to the windward wall, and 0.5q is applied to the leeward wall. Concurrently the end walls receive 0.7q negative pressure and the roof receives 0.5q uplift.For the analysis of cylindrical structures, such as the Shield Buildings and storage tanks, the shape coefficients and pressure distribution coefficients are obtained from Table 4(f) of ASCE Paper 3269.
8(a)4   77ED     Areas ground to remove oxide scale or       None                                  Provisions for not NDE other mechanically caused                                                        examining impressions caused depressions...need not be PT or MT                                               by mechanical means.
[3]3.3.2  Tornado Loadings 3.3.2.1  Applicable Design ParametersAll Category I structures except for the additional Diesel Generator Building are designed for a "funnel" of wind moving with a translational velocity of 60 miles per hour and having a rotational velocity of 300 miles per hour. Category I structures are also designed for an external depressurization of 3 psi occurring in 3 seconds.The tornado loading for the Additional Diesel Generator Building and structures initiated after July 1979 is discussed in Section 2.3.1.Information about the spectrum and pertinent characteristics of tornado-generated missiles is in Section 3.5.1.4.
examined.
2.9    89ED    Increases the area which can be repaird by None                                  Steam generator manway temper bead to 100 in2 and up to 1/3 of                                           repair or other locations as base material thickness.                                                          required.
LITY ASSURANCE RELATED 00      80W81    Provided more detailed QA program           None                                  Used in the NCM requirements.
40      83S83    Provides alternatives when code data       None                                  Used in disposition of plates are removed.                                                               WBP880052, NCR 5577R0, NCR 5611R0, and NCR WBNP-92 5619R0.


3.3-2Wind and Tornado Loading WATTS BARWBNP-923.3.2.2  Determination of Forces on StructuresThe pressures and pressure distribution of wind forces on Category I structures due to tornado wind loadings were determined by following the recommendations of ASCE Paper 3269, 'Wind Forces on Structures'.[3] ANSI A.58.1-1972, 'Building Code Requirements for Minimum Design Loads in Building and Other Structures'
TTS BAR New                                              Related Requirements and Regulatory ent      Source  Provisions of Later Code                 Guide Requirements                   Examples When Used 40(b)    80S81    Provides alternatives when code data    None                                  Use in disposition of NCR plates are removed.                                                           3951R.
[4] is used to provide an alternate method to determine tornado wind loads. The provisions for gust factors and variations of wind velocity with height are not applied. The dynamic wind pressure, q, is defined as q = 0.00256V 2, where q is in psf and V is in mph. The wind pressure, p, in psf, is defined as p = Cq, where C is the shape coefficient (C D).A 1.3 shape coefficient is included for box-shaped structures with vertical walls normal to the wind direction. The dynamic pressure load, p = 1.3q, due to tornadoes is applied to the structure walls and roof in the same manner as the wind loads in Section 3.3.1.Cylindrical structures and tanks have the same shape coefficients applied as for wind loads in Section 3.3.1. The pressures are applied over the structures as shown in Table 4(f) of ASCE Paper 3269.
0b and   77ED    Makes provision to exempt manufacturers None                                  Used in Disposition NCR of small products from certain QA program                                      GENMEB8402, NCR 5146-0, requirements.                                                                  WBP880431, WBP889432, WBP880433, WBP880437, and WBP880438.
[3]The loadings of the wind force and the depressurization are considered to act concurrently. Coincident wind velocities and pressure drops for the design tornado are shown in Figure 3.3-1. The relationship between wind velocity and pressure in the design tornado shown in Figure 3.3-1 was developed based on Hoecker's studies of the Dallas tornado of 1957.[1,2]Venting, when used as a design procedure for reducing the tornado-generated differential pressure, is accomplished by using blowoff panels that fail at a lower differential pressure. Upon relief of the differential pressure by the blowoff panel from the exterior wall of a room, the interior walls and slabs of these rooms are designed for the 3 psi pressure differential.The effective loads on Category I structures due to tornado-generated missiles were determined using the procedures described in Section 3.5.3.The effect of various combinations of tornado loadings were studied with respect to each Category I structure. The most adverse combination was selected individually for the design basis of each structure.The tornado loadings are not considered to be coincident with accident or earthquake loadings.Venting is utilized to reduce the effective tornado-generated differential pressure in portions of the Auxiliary Building. Four hundred square feet of relief panel area are provided in the roof over the spent fuel pool room and cask loading room at Elevation 814.75 for venting purposes during the tornado. The relief panels are held in place by gravity. An upward pressure of 0.25 psi is sufficient to offset the weight of the panels and cause them to be lifted from their nominal positions. Two corners of each panel are chained to the roof to prevent the panel from becoming a missile after it relieves.
00      89ED    Metallic material manufacturers and       None                                QA programmatic material suppliers Quality System program                                      requirements for vendors provides for non certificate holders QA                                        supplying materials and Manual revision and date to be placed on                                      components.
the documentation and also provides documentation requirements for 1" bar stock.
WBNP-92


Wind and Tornado Loading 3.3-3WATTS BARWBNP-92The shutdown board room and, in general, the area between columns q and u at Elevation 757.0 is not part of that portion of the Auxiliary Building vented by design; however, the remainder of the building is considered to depressurize due to the vent area provided by the air intake openings and through ventilation penetrations. In addition, the Diesel Generator Building and the Intake Pumping Station are designed to depressurize due to the vent areas provided by the ventilation openings in those buildings.The roof and exterior walls of the spent fuel pool room and cask loading area were evaluated for the effective tornado-generated pressure differential and were found to be within allowable stress limits. Air velocity induced by venting is expected to be high at the vent opening, but decrease rapidly within a few feet of the opening. No hazard to equipment is foreseen since the vents are located in the Auxiliary Building roof, well away from any essential equipment.No hazard to equipment in these areas is foreseen due to the small pressure differential and low air velocities. Walls, ceilings, and floors separating areas experiencing depressurization during a tornado from areas not experiencing depressurization are designed to withstand the total tornado-generated pressure differential of 3 psi.The analytical model employed in determining the effective differential pressures utilizes isentropic, perfect gas relations in a step-wise, steady-state first law analysis. The analysis determined pressure and temperature variations within the structure induced by the design base tornado defined in Section 3.3.2.1.Pressure differentials and assorted air ve locities are expected in all areas which depressurize due to the vented design of the building. In these areas, the partition walls have been checked for the differential pressure from depressurization. In the room(s) where the differential pressure exceeds the wall design, administrative operating instructions ensure that the doors will remain open during a tornado event to reduce the differential pressure to an acceptable value.3.3.2.3  Ability of Category I Structures to Perform Despite Failure of Structures Not Designed for Tornado LoadsAn investigation of the effect of tornado loading on the Turbine Building was made to determine the extent of failure of the structure as to collapse or to the possibility of generating missiles that could damage Category I structures and impair their ability to perform their intended design function.The following information was determined:
THIS PAGE INTENTIONALLY BLANK 6        CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS
(1)The metal siding panels will fail at loads considerably below the design tornado loading and will become missiles that could affect the Control Building. The siding will fail before the main girts are overloaded enough to cause failure. The failure of the parapet girts is likely, resulting in the release of 6WF15.5 in 4-foot lengths, 8C11.5 in 8-foot lengths, 18-inch x 3/8-inch plate in varying lengths, and 4ST8.5 in 7-foot lengths.
3.3-4Wind and Tornado Loading WATTS BARWBNP-92The roof of the Control Building was investigated for the above missiles and found to be adequately designed to resist the missiles.
(2)Following the failure of the siding, the structural steel framing of the building will be exposed to tornado forces acting upon the steel structure, equipment, piping, and other items of wind resistance. The resistance of the structure at this point will be sufficient to prevent collapse onto the Control Building.
(3)The turbine room cranes, if not anchored, could possibly be blown from the crane girders, either falling on the operating floor or out the end of the building onto the Control Building roof.To preclude the occurrence of this event, the cranes will be anchored to stops at one end of the runway during tornado alerts, watches, and tornadoes.
(4)The potable water tanks and gland seal water tanks at Elevation 796.0 floor could be blown to the Control Building roof along with air intake hoods, auxiliary boiler stack, and heating and vent equipment on the Elevation 796.0


floor.The Control Building roof was determined to be adequately designed to resist the described events.The methods used to convert the tornado wind loadings into loads acting on the structures, as well as their distributions across the structures, were determined by following the recommendations of ASCE Paper 3269.
Wind and Tornado Loading
[3]REFERENCES (1)Hoecker, W. H., 'Wind Speed and Air Flow Patterns in the Dallas Tornado and Some Resultant Implications', Monthly Weather Review, May 1960.
.1 Wind Loadings
(2)Hoecker, W. H., 'Three Dimensional Pressure Pattern of the Dallas Tornado and Some Resultant Implications,' Monthly Weather Review, December 1961.(3)'Wind Forces on Structures', Final Report, Task Committee On Wind Forces, Committee on Loads and Stresses, Structural Division, Transactions, American Society of Civil Engineers, Publication Number 3269, Volume 126, Part II, (1961).
.1.1 Design Wind Velocity The Seismic Category I structures are designed for a 95-mile per hour wind, 30 feet above grade, with a 100 year recurrence interval. The wind was determined from Figure 1, ASCE paper 3269, "Wind Forces on Structures."[3] ANSI A58.1-1972,
(4)ANSI A58.1-1972, "Building Code Requirements for Minimum Design Loads in Building and Other Structures," Committee A58.1, American National Standards Institute, 1972.
          'Building Code Requirements for Minimum Design Loads in Building and Other Structures'[4] is an acceptable alternative for determining design wind velocities and forces. The wind was applied for the full height of the structure. A gust factor of 1.1 is included for all wind loads and combinations of loads where wind is involved as recommended in ASCE paper 3269.[3]
WIND AND TORNADO LOADING 3.3-5WATTS BAR WBNP-86Figure 3.3-1 Variations of Differential Pressure and Tangential Plus TranslationalVelocity as a Function of the Distance from the Center of a Tornado
.1.2 Determination of Applied Force The pressure and pressure distribution of wind loads on structures were determined by the methods described in ASCE Paper 3269.[3] The dynamic wind pressure, q, is defined as q = 0.00256V2, where q is in psf and V is in mph. A gust factor of 1.1 is applied which redefines q as q = 0.00256 (1.1V)2 = 0.0031OV2. The wind pressure, p, in psf, is defined as p = Cq, where C is the pressure distribution coefficient (Cpe or Cpi) or the shape coefficient (CD) determined from Table 4 in ASCE Paper 3269.[3]
For the analysis of box-shaped structures, a shape coefficient (CD) of 1.3 is used which defines the wind pressure as p = 1.3q. Of the total pressure (p = 1.3q), 0.8q is applied to the windward wall, and 0.5q is applied to the leeward wall. Concurrently the end walls receive 0.7q negative pressure and the roof receives 0.5q uplift.
For the analysis of cylindrical structures, such as the Shield Buildings and storage tanks, the shape coefficients and pressure distribution coefficients are obtained from Table 4(f) of ASCE Paper 3269.[3]
.2 Tornado Loadings
.2.1 Applicable Design Parameters All Category I structures except for the additional Diesel Generator Building are designed for a "funnel" of wind moving with a translational velocity of 60 miles per hour and having a rotational velocity of 300 miles per hour. Category I structures are also designed for an external depressurization of 3 psi occurring in 3 seconds.
The tornado loading for the Additional Diesel Generator Building and structures initiated after July 1979 is discussed in Section 2.3.1.
Information about the spectrum and pertinent characteristics of tornado-generated missiles is in Section 3.5.1.4.
and Tornado Loading                                                                            3.3-1


3.3-6WIND AND TORNADO LOADINGWATTS BAR WBNP-86 THIS PAGE INTENTIONALLY BLANK WATER LEVEL (FLOOD) DESIGN 3.4-1WATTS BARWBNP-92 3.4  WATER LEVEL (FLOOD) DESIGN3.4.1  Flood ProtectionThe flood protection requirements and provisions for Category I structures are discussed in Sections 2.4.1.1, 2.4.2.2, 2.4.2.3, and 2.4.10.
.2.2 Determination of Forces on Structures The pressures and pressure distribution of wind forces on Category I structures due to tornado wind loadings were determined by following the recommendations of ASCE Paper 3269, 'Wind Forces on Structures'.[3] ANSI A.58.1-1972, 'Building Code Requirements for Minimum Design Loads in Building and Other Structures'[4] is used to provide an alternate method to determine tornado wind loads. The provisions for gust factors and variations of wind velocity with height are not applied. The dynamic wind pressure, q, is defined as q = 0.00256V2, where q is in psf and V is in mph. The wind pressure, p, in psf, is defined as p = Cq, where C is the shape coefficient (CD).
3.4.2 Analysis ProcedureThe methods and procedures by which the static and dynamic effects of the design basis flood conditions are applied to Category I structures are discussed in Sections 2.4.3.6 and 2.4.13.5.REFERENCES None.
A 1.3 shape coefficient is included for box-shaped structures with vertical walls normal to the wind direction. The dynamic pressure load, p = 1.3q, due to tornadoes is applied to the structure walls and roof in the same manner as the wind loads in Section 3.3.1.
3.4-2WATER LEVEL (FLOOD) DESIGN WATTS BARWBNP-92THIS PAGE INTENTIONALLY BLANK
Cylindrical structures and tanks have the same shape coefficients applied as for wind loads in Section 3.3.1. The pressures are applied over the structures as shown in Table 4(f) of ASCE Paper 3269.[3]
The loadings of the wind force and the depressurization are considered to act concurrently. Coincident wind velocities and pressure drops for the design tornado are shown in Figure 3.3-1. The relationship between wind velocity and pressure in the design tornado shown in Figure 3.3-1 was developed based on Hoecker's studies of the Dallas tornado of 1957.[1,2]
Venting, when used as a design procedure for reducing the tornado-generated differential pressure, is accomplished by using blowoff panels that fail at a lower differential pressure. Upon relief of the differential pressure by the blowoff panel from the exterior wall of a room, the interior walls and slabs of these rooms are designed for the 3 psi pressure differential.
The effective loads on Category I structures due to tornado-generated missiles were determined using the procedures described in Section 3.5.3.
The effect of various combinations of tornado loadings were studied with respect to each Category I structure. The most adverse combination was selected individually for the design basis of each structure.
The tornado loadings are not considered to be coincident with accident or earthquake loadings.
Venting is utilized to reduce the effective tornado-generated differential pressure in portions of the Auxiliary Building. Four hundred square feet of relief panel area are provided in the roof over the spent fuel pool room and cask loading room at Elevation 814.75 for venting purposes during the tornado. The relief panels are held in place by gravity. An upward pressure of 0.25 psi is sufficient to offset the weight of the panels and cause them to be lifted from their nominal positions. Two corners of each panel are chained to the roof to prevent the panel from becoming a missile after it relieves.
Wind and Tornado Loading


MISSILE PROTECTION 3.5-1WATTS BARWBNP-923.5  MISSILE PROTECTIONCategory I structures have been analyzed and designed to be protected against a wide spectrum of credible missiles. Failure of certain rotating or pressurized components of equipment is credible and would presumably lead to generation of missiles. In addition, noncredible missiles are identified and justification is given for their not being a credible source of missiles. Tornado-generated missiles and missiles resulting from activities peculiar to the site are also discussed in this section. It is shown that the missile protection criteria to which the plant has been analyzed and protected comply with the intent of Criterion 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.A very basic premise for protection is to design components and equipment so that they will have a low potential for generation of missiles. In general, the design that results in reduction of missile generation potential promotes the long life and usability of a component, and is well within permissible limits of accepted codes and standards.
The shutdown board room and, in general, the area between columns q and u at Elevation 757.0 is not part of that portion of the Auxiliary Building vented by design; however, the remainder of the building is considered to depressurize due to the vent area provided by the air intake openings and through ventilation penetrations. In addition, the Diesel Generator Building and the Intake Pumping Station are designed to depressurize due to the vent areas provided by the ventilation openings in those buildings.
The roof and exterior walls of the spent fuel pool room and cask loading area were evaluated for the effective tornado-generated pressure differential and were found to be within allowable stress limits. Air velocity induced by venting is expected to be high at the vent opening, but decrease rapidly within a few feet of the opening. No hazard to equipment is foreseen since the vents are located in the Auxiliary Building roof, well away from any essential equipment.
No hazard to equipment in these areas is foreseen due to the small pressure differential and low air velocities. Walls, ceilings, and floors separating areas experiencing depressurization during a tornado from areas not experiencing depressurization are designed to withstand the total tornado-generated pressure differential of 3 psi.
The analytical model employed in determining the effective differential pressures utilizes isentropic, perfect gas relations in a step-wise, steady-state first law analysis.
The analysis determined pressure and temperature variations within the structure induced by the design base tornado defined in Section 3.3.2.1.
Pressure differentials and assorted air velocities are expected in all areas which depressurize due to the vented design of the building. In these areas, the partition walls have been checked for the differential pressure from depressurization. In the room(s) where the differential pressure exceeds the wall design, administrative operating instructions ensure that the doors will remain open during a tornado event to reduce the differential pressure to an acceptable value.
.2.3 Ability of Category I Structures to Perform Despite Failure of Structures Not Designed for Tornado Loads An investigation of the effect of tornado loading on the Turbine Building was made to determine the extent of failure of the structure as to collapse or to the possibility of generating missiles that could damage Category I structures and impair their ability to perform their intended design function.
The following information was determined:
(1)  The metal siding panels will fail at loads considerably below the design tornado loading and will become missiles that could affect the Control Building. The siding will fail before the main girts are overloaded enough to cause failure. The failure of the parapet girts is likely, resulting in the release of 6WF15.5 in 4-foot lengths, 8C11.5 in 8-foot lengths, 18-inch x 3/8-inch plate in varying lengths, and 4ST8.5 in 7-foot lengths.
and Tornado Loading                                                                                3.3-3
 
The roof of the Control Building was investigated for the above missiles and found to be adequately designed to resist the missiles.
(2)  Following the failure of the siding, the structural steel framing of the building will be exposed to tornado forces acting upon the steel structure, equipment, piping, and other items of wind resistance. The resistance of the structure at this point will be sufficient to prevent collapse onto the Control Building.
(3)  The turbine room cranes, if not anchored, could possibly be blown from the crane girders, either falling on the operating floor or out the end of the building onto the Control Building roof.
To preclude the occurrence of this event, the cranes will be anchored to stops at one end of the runway during tornado alerts, watches, and tornadoes.
(4)  The potable water tanks and gland seal water tanks at Elevation 796.0 floor could be blown to the Control Building roof along with air intake hoods, auxiliary boiler stack, and heating and vent equipment on the Elevation 796.0 floor.
The Control Building roof was determined to be adequately designed to resist the described events.
The methods used to convert the tornado wind loadings into loads acting on the structures, as well as their distributions across the structures, were determined by following the recommendations of ASCE Paper 3269.[3]
REFERENCES (1) Hoecker, W. H., 'Wind Speed and Air Flow Patterns in the Dallas Tornado and Some Resultant Implications', Monthly Weather Review, May 1960.
(2)  Hoecker, W. H., 'Three Dimensional Pressure Pattern of the Dallas Tornado and Some Resultant Implications,' Monthly Weather Review, December 1961.
(3)  Wind Forces on Structures, Final Report, Task Committee On Wind Forces, Committee on Loads and Stresses, Structural Division, Transactions, American Society of Civil Engineers, Publication Number 3269, Volume 126, Part II, (1961).
(4)  ANSI A58.1-1972, "Building Code Requirements for Minimum Design Loads in Building and Other Structures," Committee A58.1, American National Standards Institute, 1972.
Wind and Tornado Loading
 
WATTS BAR                                                                                                  WBNP-86 Figure 3.3-1 Variations of Differential Pressure and Tangential Plus Translational Velocity as a Function of the Distance from the Center of a Tornado WIND AND TORNADO LOADING                                                                                      3.3-5
 
WATTS BAR                                              WBNP-86 THIS PAGE INTENTIONALLY BLANK 3.3-6                                  WIND AND TORNADO LOADING
 
WATER LEVEL (FLOOD) DESIGN
.1 Flood Protection The flood protection requirements and provisions for Category I structures are discussed in Sections 2.4.1.1, 2.4.2.2, 2.4.2.3, and 2.4.10.
.2 Analysis Procedure The methods and procedures by which the static and dynamic effects of the design basis flood conditions are applied to Category I structures are discussed in Sections 2.4.3.6 and 2.4.13.5.
FERENCES e.
ER LEVEL (FLOOD) DESIGN                                                                  3.4-1
 
THIS PAGE INTENTIONALLY BLANK WATER LEVEL (FLOOD) DESIGN
 
MISSILE PROTECTION Category I structures have been analyzed and designed to be protected against a wide spectrum of credible missiles. Failure of certain rotating or pressurized components of equipment is credible and would presumably lead to generation of missiles. In addition, noncredible missiles are identified and justification is given for their not being a credible source of missiles. Tornado-generated missiles and missiles resulting from activities peculiar to the site are also discussed in this section. It is shown that the missile protection criteria to which the plant has been analyzed and protected comply with the intent of Criterion 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.
A very basic premise for protection is to design components and equipment so that they will have a low potential for generation of missiles. In general, the design that results in reduction of missile generation potential promotes the long life and usability of a component, and is well within permissible limits of accepted codes and standards.
The following general methods are used in the design, manufacture, and inspection of equipment:
The following general methods are used in the design, manufacture, and inspection of equipment:
(1)Pressurized equipment and sections of piping that from time to time may become isolated under pressure have been provided with pressure relief valves. (Relief valves are in accordance with ASME Section III or the appropriate industry standards.) These valves are present to ensure that no pressure buildup in equipment or piping sections will exceed the design limits of the materials involved.
(1)   Pressurized equipment and sections of piping that from time to time may become isolated under pressure have been provided with pressure relief valves. (Relief valves are in accordance with ASME Section III or the appropriate industry standards.) These valves are present to ensure that no pressure buildup in equipment or piping sections will exceed the design limits of the materials involved.
(2)Components and equipment of the various systems have been designed and built to the standards established by the ASME or other equivalent industrial standard. A stringent quality control program has been enforced during manufacture, testing, and installation.
(2)   Components and equipment of the various systems have been designed and built to the standards established by the ASME or other equivalent industrial standard. A stringent quality control program has been enforced during manufacture, testing, and installation.
(3)Volumetric and ultrasonic testing where required by code, coupled with periodic inservice inspections of materials used in components and equipment, adds further assurance that any material flaws that could permit the generation of missiles will be detected.The design bases to which the plant has been designed in order to meet the intent of the criterion are listed below.
(3)   Volumetric and ultrasonic testing where required by code, coupled with periodic inservice inspections of materials used in components and equipment, adds further assurance that any material flaws that could permit the generation of missiles will be detected.
Design Bases (1)Protection shall be provided against potential missiles that could cause a loss-of-coolant accident (LOCA).
The design bases to which the plant has been designed in order to meet the intent of the criterion are listed below.
(2)Protection shall be provided against potential missiles that could result in the loss of ability to control the consequences of a LOCA, including both the necessity for core cooling and for retention of containment integrity.
Design Bases (1)   Protection shall be provided against potential missiles that could cause a loss-of-coolant accident (LOCA).
(2)   Protection shall be provided against potential missiles that could result in the loss of ability to control the consequences of a LOCA, including both the necessity for core cooling and for retention of containment integrity.
ILE PROTECTION                                                                                  3.5-1


3.5-2MISSILE PROTECTION WATTS BARWBNP-92 (3)Protection shall be provided against potential missiles that could jeopardize functions necessary to bring the reactor to a safe shutdown condition during normal or abnormal conditions.3.5.1 Missile Selection and Description3.5.1.1 Internally Generated Missiles (Outside Containment)The structures that are to be protected against damage from internally-generated missiles outside containment are listed in Table 3.2-1. The systems and components that are to be protected against damage from internally generated missiles outside containment include the ANS Safety Class equipment listed in Tables 3.2-2a, 3.2-2b, and 3.2-3.A discussion of the individual structures and the systems and components inside these structures is provided below. In general, the systems and components important to safety located in the structures of Table 3.2-1 rely on redundancy and separation for protection from internal missiles generated by failure of high pressure system components. Missiles which result from pipe breaks are not considered. Missiles that are associated with overspeed failures of rotating components are considered a greater safety hazard than those generated by failure of high-pressure system components and are evaluated in more detail.
(3) Protection shall be provided against potential missiles that could jeopardize functions necessary to bring the reactor to a safe shutdown condition during normal or abnormal conditions.
3.5.1.1.1 Shield BuildingNo rotating components which might generate missiles are installed between the primary containment and the Shield Building. No high-pressure system components whose failure could generate missiles are located in this area.
.1 Missile Selection and Description
3.5.1.1.2 North and S outh Steam Valve RoomsNo rotating components are installed in these rooms. The barriers provided to limit pipe whip and jet impingement in these rooms also provide protection from any potential missiles generated by failure of any high-pressure system components. The main steam isolation valve stems and the main feedwater isolation valve stems are not postulated as credible missiles in these rooms as explained below.Numerous features of the main steam isolation valve (MSIV) design and construction serve to prevent the valve stem from being ejected as a missile. The MSIV's are 32 inch wye, bi-directional globe valves that are air-opened, spring-closed, and qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the valve stem could be ejected. First, the pilot poppet is fastened onto the bottom end of the valve stem and backseated against the poppet cap. The lower segment of the valve stem has a larger diameter than the opening provided in the bonnet, the bottom spring seat, and the bottom bead of the air cylinder that the upper segment of the valve stem and the piston rod normally operate through.
.1.1 Internally Generated Missiles (Outside Containment)
The structures that are to be protected against damage from internally-generated missiles outside containment are listed in Table 3.2-1. The systems and components that are to be protected against damage from internally generated missiles outside containment include the ANS Safety Class equipment listed in Tables 3.2-2a, 3.2-2b, and 3.2-3.
A discussion of the individual structures and the systems and components inside these structures is provided below. In general, the systems and components important to safety located in the structures of Table 3.2-1 rely on redundancy and separation for protection from internal missiles generated by failure of high pressure system components. Missiles which result from pipe breaks are not considered. Missiles that are associated with overspeed failures of rotating components are considered a greater safety hazard than those generated by failure of high-pressure system components and are evaluated in more detail.
.1.1.1 Shield Building No rotating components which might generate missiles are installed between the primary containment and the Shield Building. No high-pressure system components whose failure could generate missiles are located in this area.
.1.1.2 North and South Steam Valve Rooms No rotating components are installed in these rooms. The barriers provided to limit pipe whip and jet impingement in these rooms also provide protection from any potential missiles generated by failure of any high-pressure system components. The main steam isolation valve stems and the main feedwater isolation valve stems are not postulated as credible missiles in these rooms as explained below.
Numerous features of the main steam isolation valve (MSIV) design and construction serve to prevent the valve stem from being ejected as a missile. The MSIV's are 32 inch wye, bi-directional globe valves that are air-opened, spring-closed, and qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the valve stem could be ejected. First, the pilot poppet is fastened onto the bottom end of the valve stem and backseated against the poppet cap. The lower segment of the valve stem has a larger diameter than the opening provided in the bonnet, the bottom spring seat, and the bottom bead of the air cylinder that the upper segment of the valve stem and the piston rod normally operate through.
The worst case failure tending to cause MSIV stem ejection would be the complete severance of the valve stem itself at the valve bonnet. This failure would eliminate the components and design features described thus far as barriers to valve stem ejection.
The worst case failure tending to cause MSIV stem ejection would be the complete severance of the valve stem itself at the valve bonnet. This failure would eliminate the components and design features described thus far as barriers to valve stem ejection.
The internal area of the stem, tending to eject it. However, the valve operator is  
The internal area of the stem, tending to eject it. However, the valve operator is MISSILE PROTECTION


MISSILE PROTECTION 3.5-3WATTS BARWBNP-92designed to withstand the transmitted forces acting through the stem during the normal operation of the valve. These thrust forces are at least as great as those that would act on a broken stem. Thus, several additional components of the valve and operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the top of the valve stem is fastened into the bottom spring seat cap which is in turn bolted to the bottom spring seat. The air cylinder piston rod is located directly over the valve on the same axis and is inserted through the opening in the air cylinder bottom bead. The air cylinder piston and top head (each 3 inch plate) are also located over the valve stem, perpendicular to its axis. The combination of these valve and operator features precludes the MSIV stem (or a segment of it) from being postulated as a credible missile.Similarly, various features of the main feedwater isolation valve (MFWIV) design and construction serve to prevent its valve stem from being ejected as a missile. The MFWIV's are 16 inch bolted bonnet, wedge gate valves with motor operators and are qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the stem could be ejected. First, the wedge gate holds the bottom end of the valve stem in a close-fitting ball-and-socket type arrangement. The lower segment of the valve stem itself is backseated against the valve bonnet. This segment has a larger diameter than the openings provided in the bonnet, the upper and lower yoke plates, and the motor operator that the upper segment of the valve stem normally operates through. The worst case failure tending to cause MFWIV stem ejection would be the severance of the stem itself above the backseat segment just described. For the same reasons as given previously for the MSIV, additional components of the MFWIV operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the upper stem segment is geared into the motor-driven worm shaft of the operator. Then, a pipe cap is bolted on top of the operator unit over the valve stem and perpendicular to its axis.
designed to withstand the transmitted forces acting through the stem during the normal operation of the valve. These thrust forces are at least as great as those that would act on a broken stem. Thus, several additional components of the valve and operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the top of the valve stem is fastened into the bottom spring seat cap which is in turn bolted to the bottom spring seat. The air cylinder piston rod is located directly over the valve on the same axis and is inserted through the opening in the air cylinder bottom bead. The air cylinder piston and top head (each 3 inch plate) are also located over the valve stem, perpendicular to its axis. The combination of these valve and operator features precludes the MSIV stem (or a segment of it) from being postulated as a credible missile.
This combination of valve and operator features precludes the MFWIV stem (or a segment of it) from being postulated as a credible missile.3.5.1.1.3 Auxiliary BuildingThe only rotating component which was considered for overspeed condition is the auxiliary feedwater steam-driven pump. All other pumps are electrically driven and incapable of achieving an overspeed condition. The manufacturer of the steam turbine (Terry Turbine) has indicated that they have tested their solid wheel turbine under overspeed conditions and no missiles are generated. The pump itself (manufactured by Ingersoll-Rand) may develop missiles under overspeed conditions but its potential for damage is small because of the small size of any missiles postulated. The room containing the pump is oriented in such a manner as to minimize the potential for damage caused by postulated pump missiles.Consideration of missiles associated with failure of high-pressure system components is handled by redundancy and separation of safety-related systems.The internal walls and floors of the Auxiliary Building are constructed of reinforced concrete which limit the range of any potential internal missiles. In particular, the spent 3.5-4MISSILE PROTECTION WATTS BARWBNP-86fuel pool is protected by at least one wall or floor of reinforced concrete from internal missiles generated in other parts of the Auxiliary Building. The portions of the CVCS and SIS outside of containment are physically separated and protected by concrete barriers of sufficient strength to contain any postulated internally generated missiles.3.5.1.1.4 Control BuildingThere are no credible potential internal missiles in this building. There are no rotating components which could have an overspeed failure and no high-pressure systems. The carbon dioxide fire protection system inside the Control Building is not pressurized until it is actuated.
Similarly, various features of the main feedwater isolation valve (MFWIV) design and construction serve to prevent its valve stem from being ejected as a missile. The MFWIV's are 16 inch bolted bonnet, wedge gate valves with motor operators and are qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the stem could be ejected. First, the wedge gate holds the bottom end of the valve stem in a close-fitting ball-and-socket type arrangement. The lower segment of the valve stem itself is backseated against the valve bonnet. This segment has a larger diameter than the openings provided in the bonnet, the upper and lower yoke plates, and the motor operator that the upper segment of the valve stem normally operates through. The worst case failure tending to cause MFWIV stem ejection would be the severance of the stem itself above the backseat segment just described. For the same reasons as given previously for the MSIV, additional components of the MFWIV operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the upper stem segment is geared into the motor-driven worm shaft of the operator. Then, a pipe cap is bolted on top of the operator unit over the valve stem and perpendicular to its axis.
3.5.1.1.5 ERCW StructuresAt the Intake Pumping Station the essential raw cooling water (ERCW) pump motors are exposed to the atmosphere. A structural steel grillage system, discussed in Section 3.8.4, provides protection to the pumps from tornado missiles. A concrete shield wall separates the four motors of Train A from those of Train B. These components are arranged in a straight line over a distance of about 100 feet. An overspeed failure is not postulated for these pumps. Even if a failure were postulated, no credible trajectory of any resultant missile could damage enough components to reduce the number available to less than four. No credible failure of any high-pressure component could create a missile which could reduce the availability of pumps on the opposite power train.No credible, potential internal missile sources are installed in the remainder of the ERCW structure.
This combination of valve and operator features precludes the MFWIV stem (or a segment of it) from being postulated as a credible missile.
3.5.1.1.6 ERCW Pipe Tunnels and RWST FoundationsNo credible potential internal missile sources are installed in these structures.
.1.1.3 Auxiliary Building The only rotating component which was considered for overspeed condition is the auxiliary feedwater steam-driven pump. All other pumps are electrically driven and incapable of achieving an overspeed condition. The manufacturer of the steam turbine (Terry Turbine) has indicated that they have tested their solid wheel turbine under overspeed conditions and no missiles are generated. The pump itself (manufactured by Ingersoll-Rand) may develop missiles under overspeed conditions but its potential for damage is small because of the small size of any missiles postulated. The room containing the pump is oriented in such a manner as to minimize the potential for damage caused by postulated pump missiles.
3.5.1.1.7 Diesel Generator BuildingFour emergency diesel generators, which are required to supply emergency power to certain engineered safety features, are each located inside a separate room in the Diesel Generator Building. Interior walls of reinforced concrete separate these generators. Additionally, a diesel generator C-S which may be substituted for any one of the normally aligned diesel generators is located within the separate Additional Diesel Generator Building.There is a mechanical governor on the diesel engine of each diesel-generator unit which is designed to assume control of the engine when there is a tendency to overspeed. In addition, the diesel generators have an overspeed trip which cuts off fuel to the diesel engine upon an overspeed condition. Consequently, no missiles are postulated for overspeed conditions of the generator. The diesel generator units are protected from the effects of a postulated failure of the carbon dioxide storage tank by an 18-inch thick reinforced concrete wall. Therefore, any missiles or pressure build-up generated by a rupture of the carbon dioxide storage tank would not damage essential equipment.
Consideration of missiles associated with failure of high-pressure system components is handled by redundancy and separation of safety-related systems.
MISSILE PROTECTION 3.5-5WATTS BARWBNP-88The vent path for the carbon dioxide storage tank compartment is through one set of standard double doors into a stairwell. If additional pressure relief is required, the vent path is through another set of standard double doors which open to the atmosphere from the stairwell.3.5.1.2 Internally Generated Missiles (Inside Containment) 3.5.1.2.1 Missile SelectionCatastrophic failure of the reactor vessel, steam generators, pressurizer, reactor coolant pump casings, and piping leading to generation of missiles is not considered credible. Massive and rapid failure of these components is not postulated because of the material characteristics and inspections; quality control during fabrication, erection, and operation; conservative design; and prudent operation as applied to the particular component. The reactor coolant pump flywheel is not considered as a source of missiles for the reasons discussed in Section 5.2.6. Nuclear steam supply components, which nevertheless are considered to have a potential for missile generation inside the reactor containment, are the following:
The internal walls and floors of the Auxiliary Building are constructed of reinforced concrete which limit the range of any potential internal missiles. In particular, the spent ILE PROTECTION                                                                                  3.5-3
(1)Control rod drive mechanism housing plug, drive shaft, and the drive shaft and drive mechanisms latched together.
 
(2)Certain valves.
fuel pool is protected by at least one wall or floor of reinforced concrete from internal missiles generated in other parts of the Auxiliary Building. The portions of the CVCS and SIS outside of containment are physically separated and protected by concrete barriers of sufficient strength to contain any postulated internally generated missiles.
(3)Temperature sensor assemblies.
.1.1.4 Control Building There are no credible potential internal missiles in this building. There are no rotating components which could have an overspeed failure and no high-pressure systems.
(4)Pressurizer instrument well and heaters.Gross failure of a control rod mechanism housing sufficient to allow a control rod to be rapidly ejected from the core is not considered credible for the following reasons:
The carbon dioxide fire protection system inside the Control Building is not pressurized until it is actuated.
(1)Full length control rod drive mechanisms are shop tested at 4105 psig.
.1.1.5 ERCW Structures At the Intake Pumping Station the essential raw cooling water (ERCW) pump motors are exposed to the atmosphere. A structural steel grillage system, discussed in Section 3.8.4, provides protection to the pumps from tornado missiles. A concrete shield wall separates the four motors of Train A from those of Train B. These components are arranged in a straight line over a distance of about 100 feet. An overspeed failure is not postulated for these pumps. Even if a failure were postulated, no credible trajectory of any resultant missile could damage enough components to reduce the number available to less than four. No credible failure of any high-pressure component could create a missile which could reduce the availability of pumps on the opposite power train.
(2)The mechanism housings are individually hydro-tested to 3107 psig as they are installed on the head adapters of the reactor vessel and they are checked during the hydro-test of the completed reactor coolant system.
No credible, potential internal missile sources are installed in the remainder of the ERCW structure.
(3)Stress levels in the mechanism are not affected by system transients at power, or by thermal movement of the coolant loops.
.1.1.6 ERCW Pipe Tunnels and RWST Foundations No credible potential internal missile sources are installed in these structures.
(4)The mechanism housings are made of type 304 stainless steel. This material exhibits excellent notch toughness at all temperatures that will be encountered.However, it is postulated that the top plug on the control rod drive mechanism will become loose and be forced upward by the water jet. The following sequence of events is assumed: The drive shaft and control rod cluster are forced out of the core by the differential pressure of 2500 psi across the drive shaft; the drive shaft and control rod cluster, latched together, are assumed fully inserted when the accident 3.5-6MISSILE PROTECTION WATTS BARWBNP-92starts; after approximately 12 feet of travel, the rod cluster control spider hits the underside of the upper support plate; upon impact, the flexure arms in the coupling joining the drive shaft and control cluster fracture, completely freeing the drive shaft from the control rod cluster. The control cluster would be completely stopped by the upper support plate; however, the drive shaft would continue to be accelerated upward to hit the missile shield provided. This analysis is summarized in Table 3.5-1. For a description of the missile shield see Section 3.5.1.2.6.Valve stems are considered to be extremely unlikely sources of missiles because of the design, construction qualifications, and testing of the valves. The isolation valves installed in the reactor coolant system have stems with a back seat. This effectively eliminates the possibility of ejecting valve stems even if the stem threads fail. Analysis shows that the back seat or the upset end would not penetrate the bonnet. Additional interference is encountered with air and motor operated valves.Valves with nominal diameter larger than 2 inches have been designed against bonnet body connection failure and subsequent bonnet ejection by means of:
.1.1.7 Diesel Generator Building Four emergency diesel generators, which are required to supply emergency power to certain engineered safety features, are each located inside a separate room in the Diesel Generator Building. Interior walls of reinforced concrete separate these generators. Additionally, a diesel generator C-S which may be substituted for any one of the normally aligned diesel generators is located within the separate Additional Diesel Generator Building.
(1)Using the design practice of ASME Section VIII which limits the allowable stress of bolting material to less than 20% of its yield strength; (2)Using the design practice of ASME Section VIII for flange design; and (3)By controlling the load during the bonnet body connection stud tightening process.The pressure containing parts are designed per code Class 1 requirements established by the ASME Section III Code.The proper stud torquing procedures and the use of a torque wrench, with indication of the applied torque, limit the stress of the studs to the allowable limits established in the ASME Code. This stress level is far below the material yield. The complete valves are hydrotested per the ASME Section III Code. The stainless steel bodies and bonnets are volumetrically and surface tested to verify soundness.Valves with a nominal pipe size of 2 inches or smaller are forged and have screwed bonnet with canopy seal. The canopy seal is the pressure boundary while the bonnet threads are designed to withstand the hydrostatic end force. The pressure containing parts are designed per criteria established by the ASME III Code specification.Whereas valve missiles are not generally postulated as outlined in the above discussion, it was decided to conservatively review valves as though their bonnets or stems could become missiles. Representative of these are the valves in the region where the pressurizer extends above the operating deck. Valves in this region are the pressurizer safety valves, the motor-operated isolation valves in the relief line, the air-operated relief valves, and the air-operated spray valves. Although failure of these valves is unlikely, provisions are made to assure protection of safety-related equipment, including the containment liner, from hypothetical missiles from these valves (see Table 3.5-2).
There is a mechanical governor on the diesel engine of each diesel-generator unit which is designed to assume control of the engine when there is a tendency to overspeed. In addition, the diesel generators have an overspeed trip which cuts off fuel to the diesel engine upon an overspeed condition. Consequently, no missiles are postulated for overspeed conditions of the generator. The diesel generator units are protected from the effects of a postulated failure of the carbon dioxide storage tank by an 18-inch thick reinforced concrete wall. Therefore, any missiles or pressure build-up generated by a rupture of the carbon dioxide storage tank would not damage essential equipment.
MISSILE PROTECTION 3.5-7WATTS BARWBNP-92The potential for other valve missiles in the lower compartment to damage safety equipment is assessed to be extremely limited. The same measures taken to prevent damage from other postulated non-valve missiles will be effective against damage from these hypothetical valve missiles. These measures include layout of the basic plant arrangement utilizing the design philosophy of physical separation of equipment and components through distance or by barriers. In consideration of the postulation that valve bonnet fragmentation may occur resulting in the ejection of a valve stem, valves are oriented such that any missile will strike such a barrier.The only other postulated jet-propelled missiles from the reactor coolant piping and piping systems connected to the reactor coolant system is that represented by the temperature sensor assemblies, as listed in Table 3.5-3. The resistance temperature sensor assemblies are of two types: 'with well' and 'without well'. Two rupture locations have been postulated: around the weld (or thread) between the temperature element assembly and the boss for the 'without well' element, and the weld (or thread) between the well and the boss for the 'with well' element.A temperature sensor is installed on the reactor coolant pumps close to the radial bearing assembly. A hole is drilled in the gasket and sealed on the internal end of a steel plate. In evaluating missile potential, it is assumed that this plate could break and the pipe plug on the external end of the hole could become a missile.In addition, it is assumed that the weld between the instrumentation well and the pressurizer wall could fail and the well and sensor assembly could become a jet-propelled missile.Finally, it is assumed that the pressurizer heaters could become loose and become jet-propelled missiles. Adequate barriers are provided for the missiles above to protect safety-related equipment.
MISSILE PROTECTION
3.5.1.2.2 Missile DescriptionThe postulated control rod drive mechanism (CRDM) miss iles are summarized in Table 3.5-1. The velocities of the missiles have been calculated using the method shown in Appendix 3.5A. The reactor coolant discharge rate from the break has been calculated using the Burnell equation.
 
[1] The coolant pressure has been assumed constant at the initial value. No spreading of the water jet has been assumed.The missile characteristics of the bonnets of the typical valves in the region where the pressurizer extends above the operating deck are given in Table 3.5-2.The missile characteristics of the postulated piping temperature sensor assemblies are given in Table 3.5-3. A 10-degree expansion half-angle water jet has been assumed. The missile characteristics of the piping pressure element assemblies are less severe than those of Table 3.5-3.The characteristics of other missiles postulated within reactor containment are given in Table 3.5-4. A 10-degree expansion half-angle water jet has been assumed.
The vent path for the carbon dioxide storage tank compartment is through one set of standard double doors into a stairwell. If additional pressure relief is required, the vent path is through another set of standard double doors which open to the atmosphere from the stairwell.
3.5-8MISSILE PROTECTION WATTS BARWBNP-92 3.5.1.2.3 El ectrical CablesElectrical cables are not protected against damage from internal missiles. However, separation and redundancy of vital cables are such that any single failure within the protection system will not prevent proper protective action at the system level when required.3.5.1.2.4 Upper CompartmentThe generation of internal missiles inside the upper compartment is not postulated. Piping in this area is not used during normal operation. The upper compartment is protected from missiles generated in the lower compartment by the steel reinforced divider deck and missile shield and by the reinforced concrete walls of the upper portions of the steam generator and pressurizer compartments.
.1.2 Internally Generated Missiles (Inside Containment)
3.5.1.2.5 Ice Conde nser CompartmentThe generation of internal missiles inside the ice condenser is not postulated. Low energy refrigeration piping is not considered to be a potential missile source. Missiles generated in portions of the lower compartment will be prevented from entering the ice condenser compartment by the crane wall. The trajectory of missiles generated within the bottom regions of the lower compartment is such that the missiles will not pass through the inlet door openings in the lower crane wall except by ricochet. The potential for damage of such a ricocheting missile is considered negligible. This situation is shown in Figure 3.5-1. As can be seen in the figure, the location of the main portions of the reactor coolant system and of the other systems which connect to it are below Elevation 718 feet-0 inches, whereas the openings for the ice condenser lower inlet doors are between Elevation 746 feet-5inchesand Elevation 753 feet-9 inches.3.5.1.2.6 Lower CompartmentThe spectrum of missiles generated within the lower compartment is discussed in Sections 3.5.1.2.1 and 3.5.1.2.2. These missiles will not cause failure of vital systems inside the lower compartment. Particular attention was paid to the potential missile damage to the steel containment structure, the emergency core cooling system, and the containment isolation system.Any missile generated within the lower compartment will not impair the integrity of the steel containment structure. Protection against the postulated missiles in the lower compartment was accomplished by locating a reinforced concrete wall (crane wall), a steel-reinforced concrete slab (divider deck), and steel-reinforced concrete removable blocks (control rod drive mechanism missile shield) between the primary reactor coolant system and the containment structure. Additionally, since there are openings in the crane wall, protection for the containment structure is enhanced by orienting potential missile sources, especially valve components, so that their anticipated trajectory will not permit them to pass through these openings.The control rod drive mechanism missile shield has been located above the reactor vessel and will prevent the postulated missiles of the control rod drive system from MISSILE PROTECTION 3.5-9WATTS BARWBNP-92striking the inside surface of the containment structure or the containment spray headers (see Table 3.5-1).The accumulator tanks and associated check valves and piping are not credible sources of missiles for the containment structure. Components are prevented from becoming a source of damaging missiles by orienting the components so that anticipated missile trajectories are away from the containment structure. Some other high-pressure system components are located in the space between the crane wall and the steel containment structure. Protection is accomplished by orienting components so that the anticipated missile trajectories are away from the containment structure.The emergency core cooling system (Section 6.3) includes four accumulator tanks which are located in separate rooms between the crane wall and the containment structure. The crane wall protects these tanks and their associated valves and piping from the postulated missiles generated within the lower compartment, and the Shield Building protects them from external missiles. The active components of the system (pumps, motors, and heat exchangers) are located in separate rooms in the Auxiliary Building. Therefore, these active components are protected from the postulated missiles generated within the lower compartment.Isolation valves of the containment isolation system (Section 6.2.4) are located in three regions: 1) inside the containment structure, 2) between the containment structure and the Shield Building, and 3) outside the Shield Building. The isolation valves which are located inside the containment structure are protected from the postulated missiles generated in the lower compartment by the crane wall, and are protected from tornado-generated missiles by the Shield Building.Even though the preceding methods have been used to protect the containment structure, emergency core cooling system, and the containment isolation system from potential internal missiles, the basic approach was to assure design adequacy against generation of missiles rather than to allow a missile to be generated and then try to contain the effects.3.5.1.3 Turbine Missiles 3.5.1.3.1 IntroductionThe Watts Bar turbine-generator unitwas manufactured by Westinghouse Electric Corporation. The Watts Bar turbine-generator unit consists of a double-flow high pressure turbine and three double-flow low pressure turbines with extraction nozzles arranged for seven stages of feedwater heating. The turbine utilizes a Westinghouse designed electrohydraulic control (EHC) system for control of both speed and load.
.1.2.1 Missile Selection Catastrophic failure of the reactor vessel, steam generators, pressurizer, reactor coolant pump casings, and piping leading to generation of missiles is not considered credible. Massive and rapid failure of these components is not postulated because of the material characteristics and inspections; quality control during fabrication, erection, and operation; conservative design; and prudent operation as applied to the particular component. The reactor coolant pump flywheel is not considered as a source of missiles for the reasons discussed in Section 5.2.6.
Nuclear steam supply components, which nevertheless are considered to have a potential for missile generation inside the reactor containment, are the following:
(1)   Control rod drive mechanism housing plug, drive shaft, and the drive shaft and drive mechanisms latched together.
(2)   Certain valves.
(3)   Temperature sensor assemblies.
(4)   Pressurizer instrument well and heaters.
Gross failure of a control rod mechanism housing sufficient to allow a control rod to be rapidly ejected from the core is not considered credible for the following reasons:
(1)   Full length control rod drive mechanisms are shop tested at 4105 psig.
(2)   The mechanism housings are individually hydro-tested to 3107 psig as they are installed on the head adapters of the reactor vessel and they are checked during the hydro-test of the completed reactor coolant system.
(3)   Stress levels in the mechanism are not affected by system transients at power, or by thermal movement of the coolant loops.
(4)   The mechanism housings are made of type 304 stainless steel. This material exhibits excellent notch toughness at all temperatures that will be encountered.
However, it is postulated that the top plug on the control rod drive mechanism will become loose and be forced upward by the water jet. The following sequence of events is assumed: The drive shaft and control rod cluster are forced out of the core by the differential pressure of 2500 psi across the drive shaft; the drive shaft and control rod cluster, latched together, are assumed fully inserted when the accident ILE PROTECTION                                                                                  3.5-5
 
starts; after approximately 12 feet of travel, the rod cluster control spider hits the underside of the upper support plate; upon impact, the flexure arms in the coupling joining the drive shaft and control cluster fracture, completely freeing the drive shaft from the control rod cluster. The control cluster would be completely stopped by the upper support plate; however, the drive shaft would continue to be accelerated upward to hit the missile shield provided. This analysis is summarized in Table 3.5-1. For a description of the missile shield see Section 3.5.1.2.6.
Valve stems are considered to be extremely unlikely sources of missiles because of the design, construction qualifications, and testing of the valves. The isolation valves installed in the reactor coolant system have stems with a back seat. This effectively eliminates the possibility of ejecting valve stems even if the stem threads fail. Analysis shows that the back seat or the upset end would not penetrate the bonnet. Additional interference is encountered with air and motor operated valves.
Valves with nominal diameter larger than 2 inches have been designed against bonnet body connection failure and subsequent bonnet ejection by means of:
(1)   Using the design practice of ASME Section VIII which limits the allowable stress of bolting material to less than 20% of its yield strength; (2)   Using the design practice of ASME Section VIII for flange design; and (3)   By controlling the load during the bonnet body connection stud tightening process.
The pressure containing parts are designed per code Class 1 requirements established by the ASME Section III Code.
The proper stud torquing procedures and the use of a torque wrench, with indication of the applied torque, limit the stress of the studs to the allowable limits established in the ASME Code. This stress level is far below the material yield. The complete valves are hydrotested per the ASME Section III Code. The stainless steel bodies and bonnets are volumetrically and surface tested to verify soundness.
Valves with a nominal pipe size of 2 inches or smaller are forged and have screwed bonnet with canopy seal. The canopy seal is the pressure boundary while the bonnet threads are designed to withstand the hydrostatic end force. The pressure containing parts are designed per criteria established by the ASME III Code specification.
Whereas valve missiles are not generally postulated as outlined in the above discussion, it was decided to conservatively review valves as though their bonnets or stems could become missiles. Representative of these are the valves in the region where the pressurizer extends above the operating deck. Valves in this region are the pressurizer safety valves, the motor-operated isolation valves in the relief line, the air-operated relief valves, and the air-operated spray valves. Although failure of these valves is unlikely, provisions are made to assure protection of safety-related equipment, including the containment liner, from hypothetical missiles from these valves (see Table 3.5-2).
MISSILE PROTECTION
 
The potential for other valve missiles in the lower compartment to damage safety equipment is assessed to be extremely limited. The same measures taken to prevent damage from other postulated non-valve missiles will be effective against damage from these hypothetical valve missiles. These measures include layout of the basic plant arrangement utilizing the design philosophy of physical separation of equipment and components through distance or by barriers. In consideration of the postulation that valve bonnet fragmentation may occur resulting in the ejection of a valve stem, valves are oriented such that any missile will strike such a barrier.
The only other postulated jet-propelled missiles from the reactor coolant piping and piping systems connected to the reactor coolant system is that represented by the temperature sensor assemblies, as listed in Table 3.5-3. The resistance temperature sensor assemblies are of two types: 'with well' and 'without well'. Two rupture locations have been postulated: around the weld (or thread) between the temperature element assembly and the boss for the 'without well' element, and the weld (or thread) between the well and the boss for the 'with well' element.
A temperature sensor is installed on the reactor coolant pumps close to the radial bearing assembly. A hole is drilled in the gasket and sealed on the internal end of a steel plate. In evaluating missile potential, it is assumed that this plate could break and the pipe plug on the external end of the hole could become a missile.
In addition, it is assumed that the weld between the instrumentation well and the pressurizer wall could fail and the well and sensor assembly could become a jet-propelled missile.
Finally, it is assumed that the pressurizer heaters could become loose and become jet-propelled missiles. Adequate barriers are provided for the missiles above to protect safety-related equipment.
.1.2.2 Missile Description The postulated control rod drive mechanism (CRDM) missiles are summarized in Table 3.5-1. The velocities of the missiles have been calculated using the method shown in Appendix 3.5A. The reactor coolant discharge rate from the break has been calculated using the Burnell equation.[1] The coolant pressure has been assumed constant at the initial value. No spreading of the water jet has been assumed.
The missile characteristics of the bonnets of the typical valves in the region where the pressurizer extends above the operating deck are given in Table 3.5-2.
The missile characteristics of the postulated piping temperature sensor assemblies are given in Table 3.5-3. A 10-degree expansion half-angle water jet has been assumed.
The missile characteristics of the piping pressure element assemblies are less severe than those of Table 3.5-3.
The characteristics of other missiles postulated within reactor containment are given in Table 3.5-4. A 10-degree expansion half-angle water jet has been assumed.
ILE PROTECTION                                                                                  3.5-7
 
.1.2.3 Electrical Cables Electrical cables are not protected against damage from internal missiles. However, separation and redundancy of vital cables are such that any single failure within the protection system will not prevent proper protective action at the system level when required.
.1.2.4 Upper Compartment The generation of internal missiles inside the upper compartment is not postulated.
Piping in this area is not used during normal operation. The upper compartment is protected from missiles generated in the lower compartment by the steel reinforced divider deck and missile shield and by the reinforced concrete walls of the upper portions of the steam generator and pressurizer compartments.
.1.2.5 Ice Condenser Compartment The generation of internal missiles inside the ice condenser is not postulated. Low energy refrigeration piping is not considered to be a potential missile source. Missiles generated in portions of the lower compartment will be prevented from entering the ice condenser compartment by the crane wall. The trajectory of missiles generated within the bottom regions of the lower compartment is such that the missiles will not pass through the inlet door openings in the lower crane wall except by ricochet. The potential for damage of such a ricocheting missile is considered negligible. This situation is shown in Figure 3.5-1. As can be seen in the figure, the location of the main portions of the reactor coolant system and of the other systems which connect to it are below Elevation 718 feet-0 inches, whereas the openings for the ice condenser lower inlet doors are between Elevation 746 feet-5inchesand Elevation 753 feet-9 inches.
.1.2.6 Lower Compartment The spectrum of missiles generated within the lower compartment is discussed in Sections 3.5.1.2.1 and 3.5.1.2.2. These missiles will not cause failure of vital systems inside the lower compartment. Particular attention was paid to the potential missile damage to the steel containment structure, the emergency core cooling system, and the containment isolation system.
Any missile generated within the lower compartment will not impair the integrity of the steel containment structure. Protection against the postulated missiles in the lower compartment was accomplished by locating a reinforced concrete wall (crane wall), a steel-reinforced concrete slab (divider deck), and steel-reinforced concrete removable blocks (control rod drive mechanism missile shield) between the primary reactor coolant system and the containment structure. Additionally, since there are openings in the crane wall, protection for the containment structure is enhanced by orienting potential missile sources, especially valve components, so that their anticipated trajectory will not permit them to pass through these openings.
The control rod drive mechanism missile shield has been located above the reactor vessel and will prevent the postulated missiles of the control rod drive system from MISSILE PROTECTION
 
striking the inside surface of the containment structure or the containment spray headers (see Table 3.5-1).
The accumulator tanks and associated check valves and piping are not credible sources of missiles for the containment structure. Components are prevented from becoming a source of damaging missiles by orienting the components so that anticipated missile trajectories are away from the containment structure. Some other high-pressure system components are located in the space between the crane wall and the steel containment structure. Protection is accomplished by orienting components so that the anticipated missile trajectories are away from the containment structure.
The emergency core cooling system (Section 6.3) includes four accumulator tanks which are located in separate rooms between the crane wall and the containment structure. The crane wall protects these tanks and their associated valves and piping from the postulated missiles generated within the lower compartment, and the Shield Building protects them from external missiles. The active components of the system (pumps, motors, and heat exchangers) are located in separate rooms in the Auxiliary Building. Therefore, these active components are protected from the postulated missiles generated within the lower compartment.
Isolation valves of the containment isolation system (Section 6.2.4) are located in three regions: 1) inside the containment structure, 2) between the containment structure and the Shield Building, and 3) outside the Shield Building. The isolation valves which are located inside the containment structure are protected from the postulated missiles generated in the lower compartment by the crane wall, and are protected from tornado-generated missiles by the Shield Building.
Even though the preceding methods have been used to protect the containment structure, emergency core cooling system, and the containment isolation system from potential internal missiles, the basic approach was to assure design adequacy against generation of missiles rather than to allow a missile to be generated and then try to contain the effects.
.1.3 Turbine Missiles
.1.3.1 Introduction The Watts Bar turbine-generator unitwas manufactured by Westinghouse Electric Corporation. The Watts Bar turbine-generator unit consists of a double-flow high pressure turbine and three double-flow low pressure turbines with extraction nozzles arranged for seven stages of feedwater heating. The turbine utilizes a Westinghouse designed electrohydraulic control (EHC) system for control of both speed and load.
The EHC system, composed of solid state electronic devices coupled through suitable electrohydraulic transducers to a high-pressure hydraulic fluid system, provides control of the main stop, governing, intercept, and reheat stop valves of the turbine.
The EHC system, composed of solid state electronic devices coupled through suitable electrohydraulic transducers to a high-pressure hydraulic fluid system, provides control of the main stop, governing, intercept, and reheat stop valves of the turbine.
Emergency speed protection is provided by a mechanical overspeed trip mechanism, backed up by an electrical overspeed trip circuit.
Emergency speed protection is provided by a mechanical overspeed trip mechanism, backed up by an electrical overspeed trip circuit.
3.5-10MISSILE PROTECTION WATTS BARWBNP-92Additional turbine protection is provided that will trip the turbine on evidence of low condenser vacuum, excessive shaft vibration, abnormal thrust bearing wear, or low oil pressure. The turbine trip system is also equipped with solenoid-operated trip devices, which provide a means to initiate direct tripping of the turbine upon receipt of appropriate electrical signals, as shown In Figure 10.2-1. Also, when a turbine trip is initiated, the extraction system nonreturn
ILE PROTECTION                                                                                3.5-9
 
Additional turbine protection is provided that will trip the turbine on evidence of low condenser vacuum, excessive shaft vibration, abnormal thrust bearing wear, or low oil pressure. The turbine trip system is also equipped with solenoid-operated trip devices, which provide a means to initiate direct tripping of the turbine upon receipt of appropriate electrical signals, as shown In Figure 10.2-1. Also, when a turbine trip is initiated, the extraction system nonreturn valves are tripped to close by means of a pilot dump valve connected to the turbine trip system. For overpressure protection of the turbine exhaust hoods and the condenser, four rupture diaphragms which rupture at approximately 5 psig are provided on each turbine exhaust hood. Additional protective devices include exhaust hood high temperature alarm and manual trip.
Each stop, governing, reheating stop, and intercept valve is spring closed; therefore, it is necessary only to dump the high pressure fluid from under the servoactuators to close the valves.
For additional details on the turbine,
C = inflight crash rate per mile for aircraft using airway.
C = inflight crash rate per mile for aircraft using airway.
w = width of airway (plus twice the distance from the airway edge to the site when the site is outside the airway) in miles.N = number of flights per year along the airway, and A = effective area of plant in square miles.
w = width of airway (plus twice the distance from the airway edge to the site when the site is outside the airway) in miles.
For the Watts Bar site, C = 4.0 x 10
N = number of flights per year along the airway, and A = effective area of plant in square miles.
-10, w = 8 miles, N = 2 x 2200/year, A = 0.01 mi
For the Watts Bar site, C = 4.0 x 10-10, w = 8 miles, N = 2 x 2200/year, A = 0.01 mi2.
: 2. The value for N, per Section 2.2.2.5, was doubled to account for increases in aircraft traffic. Therefore, P FA = 2.2 x 10
The value for N, per Section 2.2.2.5, was doubled to account for increases in aircraft traffic. Therefore, PFA = 2.2 x 10-9/year. This conservative upper bound probability is less than the Standard Review Plan range of "1 x 10-7" and indicates that further consideration of hazard from this federal airway is unnecessary.
-9/year. This conservative upper bound probability is less than the Standard Review Plan range of "1 x 10
There are no airports located within five miles of the site. There are no airports with projected operations greater than 500 d2 movements per year located within 10 miles of the site or greater than 1,000 d2 outside 10 miles, where d is the distance in miles from the site.
-7" and indicates that further consideration of hazard from this federal airway is unnecessary.There are no airports located within five miles of the site. There are no airports with projected operations greater than 500 d 2 movements per year located within 10 miles of the site or greater than 1,000 d 2 outside 10 miles, where d is the distance in miles from the site.
8                                                                              MISSILE PROTECTION
MISSILE PROTECTION 3.5-29WATTS BARWBNP-92There are no military installations or any airspace use that might present a hazard to the site. Therefore, aircraft hazards need not be considered in the design of the Watts Bar Nuclear Plant.
 
3.5.2 Systems To Be ProtectedSystems whose failure could lead to offsite radiological consequences or which are required for reactor shutdown and cooldown under normal and/or design basis conditions are listed in Table 3.2-1. These include 1) the fluid handling equipment in ANS Safety Classes 1, 2a, 2b or 3 listed by system in Tables 3.2-2a and 3.2-2b, 2) Class 1E electrical systems and components listed in Table 3.2-3, and 3) the Heating, Ventilating, and Air Conditioning components in TVA Classes B, M, Q, and S as described in Table 3.2-2a. A more detailed discussion of required equipment and its safety-related implications may be found in the FSAR sections covering individual system.It is important to note that all of the equipment referenced above is required for some safety-related function but not all at once. The list of required equipment for a particular missile event depends on the nature of the missile (whether it is associated with or can cause a LOCA, whether or not the missile is being generated from a safety-related piece of equipment, etc). Hence, much of the missile damage consideration outside containment can be reduced to looking at those systems and components required for reactor shutdown, coolant system makeup, and for decay heat removal to the ultimate heat sink.Table 3.5-14 lists outdoor features, including air intakes and exhausts, which may be required to perform a safety-related function coincident with or following the occurrence of a tornado.For the Watts Bar Nuclear Plant the layout of structures and equipment is such that there are no systems or components which rely upon redundancy and separation alone for protection against externally generated missiles. There are however certain systems and components which, due to their location and/or separation of trains, are inherently protected against specific types of missiles. This protection by separation and location concept has been addressed where applicable in the missile analyses of Section 3.5.1.
There are no military installations or any airspace use that might present a hazard to the site. Therefore, aircraft hazards need not be considered in the design of the Watts Bar Nuclear Plant.
3.5.3 Barrier Design ProceduresTo arrive at a formula to use in computing penetration into concrete walls, a comparison was made of formulas listed in ORNL-NSIC-22, "Missile Generation and Protection in Lightwater-Cooled Power Reactor Plants." Four equations were studied in ORNL-NSIC-22 in connection with penetration in concrete. Two of these, the Army Corps of Engineers formula and the National Defense Research Committee formula, do not apply for impact velocities under 500 ft/sec and thus are not applicable here (velocity of 300 mph = 440 ft/sec). The remaining two equations are the modified Petry formula and the Ballistic Research Laboratory formula. These two formulas were compared for a 6-inch diameter missile of 100 pounds and a 16-inch diameter missile 3.5-30MISSILE PROTECTION WATTS BARWBNP-92of 2,500 pounds with velocities in the range from 0 to 500 ft/sec. As seen in Figures 3.5-6 and 3.5-7, the Petry formula is the most conservative for velocities greater than 150 to 200 mph.The following describes the barrier procedures utilized for concrete barriers. The depth to which a missile penetrated a concrete wall was estimated by use of the modified Petry formula.[6]D' = 12 KAV' [1 + e-4(a - 2)]whereD' = depth of penetrationV = impact velocityK  = A material constantA = weight of missile/impact area of missile T = wall thicknessThe results are given in Figures 3.5-8 and 3.5-9. According to C. V. Moore,[7] spalling on the inside face of a wall does not occur for penetrations less than two-thirds the wall thickness. Conservatism was assured by assuming nondeformable missiles in the penetration analysis using the modified Petry formula.None of the postulated missiles described in Section 3.5.1, internal or external, will impair the capability of the engineered safety features to shut down the reactor or to maintain the reactor in a safe shutdown mode indefinitely. For portions of the engineered safety features located within the containment structure, protection against missiles generated inside containment is accomplished with the basic approach of assuring design adequacy against generation of credible missiles rather than to allow missile formation and try to contain the subsequent effects. Further, valves are oriented so that the trajectory of missiles will not likely pass through openings in the crane wall and the valve bonnets and stems will not penetrate the containment shell should they strike it. For these same engineered safety features, protection against tornado-generated missiles is provided by the Shield Building. If one of the pressurizer heaters in the bottom of the pressurizer should become loose and become a jet-propelled missile, it would move downward and could strike the pressurizer surge line beneath the pressurizer. The line will not be perforated and will not jeopardize the capability to bring the nuclear facility to a safe shutdown.For those portions of the engineered safety features located outside the Shield Building and required for shutdown of the reactor and/or indefinite maintenance of the reactor in the safe shutdown mode, protection is provided against tornado-generated V'log 10 1 V 2215,000---------------------
.2 Systems To Be Protected Systems whose failure could lead to offsite radiological consequences or which are required for reactor shutdown and cooldown under normal and/or design basis conditions are listed in Table 3.2-1.
+=a T12KAV'--------------------
These include 1) the fluid handling equipment in ANS Safety Classes 1, 2a, 2b or 3 listed by system in Tables 3.2-2a and 3.2-2b, 2) Class 1E electrical systems and components listed in Table 3.2-3, and 3) the Heating, Ventilating, and Air Conditioning components in TVA Classes B, M, Q, and S as described in Table 3.2-2a. A more detailed discussion of required equipment and its safety-related implications may be found in the FSAR sections covering individual system.
=
It is important to note that all of the equipment referenced above is required for some safety-related function but not all at once. The list of required equipment for a particular missile event depends on the nature of the missile (whether it is associated with or can cause a LOCA, whether or not the missile is being generated from a safety-related piece of equipment, etc). Hence, much of the missile damage consideration outside containment can be reduced to looking at those systems and components required for reactor shutdown, coolant system makeup, and for decay heat removal to the ultimate heat sink.
MISSILE PROTECTION 3.5-31WATTS BARWBNP-79missiles. Protection is provided by locating these features within structures which have been designed to withstand damage by the spectrum of credible tornado-generated missiles.The postulated missiles inside the containment as defined in Tables 3.5-1, 3.5-2, 3.5-3, and 3.5-4 have been investigated to determine their penetration characteristics.
Table 3.5-14 lists outdoor features, including air intakes and exhausts, which may be required to perform a safety-related function coincident with or following the occurrence of a tornado.
For the Watts Bar Nuclear Plant the layout of structures and equipment is such that there are no systems or components which rely upon redundancy and separation alone for protection against externally generated missiles. There are however certain systems and components which, due to their location and/or separation of trains, are inherently protected against specific types of missiles. This protection by separation and location concept has been addressed where applicable in the missile analyses of Section 3.5.1.
.3 Barrier Design Procedures To arrive at a formula to use in computing penetration into concrete walls, a comparison was made of formulas listed in ORNL-NSIC-22, "Missile Generation and Protection in Lightwater-Cooled Power Reactor Plants." Four equations were studied in ORNL-NSIC-22 in connection with penetration in concrete. Two of these, the Army Corps of Engineers formula and the National Defense Research Committee formula, do not apply for impact velocities under 500 ft/sec and thus are not applicable here (velocity of 300 mph = 440 ft/sec). The remaining two equations are the modified Petry formula and the Ballistic Research Laboratory formula. These two formulas were compared for a 6-inch diameter missile of 100 pounds and a 16-inch diameter missile ILE PROTECTION                                                                              3.5-29
 
of 2,500 pounds with velocities in the range from 0 to 500 ft/sec. As seen in Figures 3.5-6 and 3.5-7, the Petry formula is the most conservative for velocities greater than 150 to 200 mph.
The following describes the barrier procedures utilized for concrete barriers. The depth to which a missile penetrated a concrete wall was estimated by use of the modified Petry formula.[6]
D' = 12 KAV' [1 + e-4(a - 2)]
where        D' = depth of penetration              V = impact velocity K = A material constant                A = weight of missile/
impact area of missile 2                        T V' = log 10            V              a = --------------------
1 + ---------------------
215,000                    12KAV' T = wall thickness The results are given in Figures 3.5-8 and 3.5-9. According to C. V. Moore,[7] spalling on the inside face of a wall does not occur for penetrations less than two-thirds the wall thickness.
Conservatism was assured by assuming nondeformable missiles in the penetration analysis using the modified Petry formula.
None of the postulated missiles described in Section 3.5.1, internal or external, will impair the capability of the engineered safety features to shut down the reactor or to maintain the reactor in a safe shutdown mode indefinitely. For portions of the engineered safety features located within the containment structure, protection against missiles generated inside containment is accomplished with the basic approach of assuring design adequacy against generation of credible missiles rather than to allow missile formation and try to contain the subsequent effects. Further, valves are oriented so that the trajectory of missiles will not likely pass through openings in the crane wall and the valve bonnets and stems will not penetrate the containment shell should they strike it. For these same engineered safety features, protection against tornado-generated missiles is provided by the Shield Building. If one of the pressurizer heaters in the bottom of the pressurizer should become loose and become a jet-propelled missile, it would move downward and could strike the pressurizer surge line beneath the pressurizer. The line will not be perforated and will not jeopardize the capability to bring the nuclear facility to a safe shutdown.
For those portions of the engineered safety features located outside the Shield Building and required for shutdown of the reactor and/or indefinite maintenance of the reactor in the safe shutdown mode, protection is provided against tornado-generated 0                                                                                MISSILE PROTECTION
 
missiles. Protection is provided by locating these features within structures which have been designed to withstand damage by the spectrum of credible tornado-generated missiles.
The postulated missiles inside the containment as defined in Tables 3.5-1, 3.5-2, 3.5-3, and 3.5-4 have been investigated to determine their penetration characteristics.
Penetration depths, or minimum thickness to just perforate, have been calculated based upon three commonly used equations. They are:
Penetration depths, or minimum thickness to just perforate, have been calculated based upon three commonly used equations. They are:
(1)The Stanford Equation.
(1) The Stanford Equation.
(2)The Ballistics Research Laboratory Equation.
(2) The Ballistics Research Laboratory Equation.
(3)The Recht and Ipson Equation.The minimum thicknesses to just perforate a plate having the characteristics of SA-516-GR70 carbon steel represent the largest values obtained from the three above-mentioned equations. The worst case involves a penetration depth that is 45%
(3) The Recht and Ipson Equation.
of the actual containment thickness. Based upon the analysis, it is reasoned that none of the postulated missiles pose a threat to the integrity of the containment.Tornado missile impact loads, where required, were calculated based upon several applicable techniques. Impact loads for all missiles of Spectrum A (Table 3.5-7) except missile A3, the 4,000-pound automobile at 50 miles per hour, were determined by the relationships presented in Reference [9].         Missile A3 loads were based on actual test results and analysis technique. Time histories of decelerations were obtained from the National Highway Safety Bureau for automobile crash tests early in a crash safety program. Their time histories were converted to shock spectra by the usual methods and dynamic load factors were plotted against period of structures or elements of structures. An envelope was then constructed envel oping all spectra.To determine the automobile impact load on a structure or element of a structure, the natural period of the item was determined and the appropriate loading obtained from the shock spectra. This technique yields the maximum load irrespective of time.Values obtained from this technique have been corroborated with subsequent reports by the National Highway Safety Bureau. In Reference [5], time histories of forces are presented for several automobile crash tests which are closely confirmatory. The impact loads obtained by the previously described methods were then applied to the structures and the structures were analyzed for the effect of the loads by conventional analytical methods. Impact loads from the missiles of Spectrum C (Table 3.5-9) were calculated using the procedures of Reference [8]. See Section 3.5.1.4 for a discussion of structures designed for Spectrum C.Tornado missile protection for all safety-related buried piping is provided by one of the four protective schemes described below.
The minimum thicknesses to just perforate a plate having the characteristics of SA-516-GR70 carbon steel represent the largest values obtained from the three above-mentioned equations. The worst case involves a penetration depth that is 45%
3.5-32MISSILE PROTECTION WATTS BARWBNP-92 (1)10 feet of compacted fine-grained soil.
of the actual containment thickness. Based upon the analysis, it is reasoned that none of the postulated missiles pose a threat to the integrity of the containment.
(2)7 feet of compacted crushed stone.
Tornado missile impact loads, where required, were calculated based upon several applicable techniques. Impact loads for all missiles of Spectrum A (Table 3.5-7) except missile A3, the 4,000-pound automobile at 50 miles per hour, were determined by the relationships presented in Reference [9].
(3)18 inches of conventional unreinforced concrete.
Missile A3 loads were based on actual test results and analysis technique. Time histories of decelerations were obtained from the National Highway Safety Bureau for automobile crash tests early in a crash safety program. Their time histories were converted to shock spectra by the usual methods and dynamic load factors were plotted against period of structures or elements of structures. An envelope was then constructed enveloping all spectra.
(4)18 inches of roller-compacted unreinforced concrete.In each scheme, a 12-inch cushion of either compacted sand or fine-grained earthfill is required over the top of the pipe.The acceptability of each scheme has been verified by a full-scale test program
To determine the automobile impact load on a structure or element of a structure, the natural period of the item was determined and the appropriate loading obtained from the shock spectra. This technique yields the maximum load irrespective of time.
[16] in which missiles from the NRC spectrum were dropped from a helicopter into test pits of crushed stone or earthfill and onto concrete slabs. The missiles used in the testing were: (1.a)1,500-pound utility pole, (2.a)12-inch diameter schedule 40 steel pipe, (3.a)1-inch diameter steel rod, (4.a)3-inch diameter schedule 40 steel pipe, and (5.a)6-inch diameter schedule 40 steel pipe.Of these missiles, the 12-inch pipe and utility pole caused the greatest penetration depths. Impact velocities of 200-215 ft/s were achieved for both the utility pole and 12-inch pipe which equals or exceeds the design velocities for those missiles as listed in Tables 3.5-7 and 3.5-9. The protective thicknesses listed above are based on the maximum thicknesses observed in the test program and are, therefore, conservatively chosen.It is concluded that the missile protection criteria to which the plant has been analyzed and protected against comply with Criteria 2 and 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.
Values obtained from this technique have been corroborated with subsequent reports by the National Highway Safety Bureau. In Reference [5], time histories of forces are presented for several automobile crash tests which are closely confirmatory. The impact loads obtained by the previously described methods were then applied to the structures and the structures were analyzed for the effect of the loads by conventional analytical methods. Impact loads from the missiles of Spectrum C (Table 3.5-9) were calculated using the procedures of Reference [8]. See Section 3.5.1.4 for a discussion of structures designed for Spectrum C.
3.5.3.1 Additional Diesel Generator Building (And Other Category I Structures Added After July 1979)The openings in the walls and roof for access, ventilation, air intakes, and exhaust discharge, are designed to withstand the effects from the tornado missiles listed in Spectrum D of Table 3.5-17. The 480V auxiliary board room (ABR) ventilation air intake vent is the only primary safety-related equipment located outside the Additional Diesel Generator Building not protected against tornado missiles. The roof opening for the ABR vent is protected against tornado missile entry by a missile shield installed inside the roof structure. In-lieu of protecting the ABR vent from tornado missiles, operator actions are specified in the event of a tornado warning to restore ventilation cooling to the ABR. Overall structural response evaluation of concrete barriers to tornado missile impact was performed using the general requirements of Appendix C, MISSILE PROTECTION 3.5-33WATTS BARWBNP-92ACI 349-76, "Code Requirements For Nuclear Safety-Related Concrete Structures."   Minimum concrete thickness required to resist penetration, perforation or backface scabbing from these tornado missiles are given in Table 3.5-18.REFERENCES (1)Burnell, J., 'The Flow of Boiling Water Through Nozzles, Orifices, and Pipes.' The Institute of Engineers, Australia, March 1946.
Tornado missile protection for all safety-related buried piping is provided by one of the four protective schemes described below.
(2)Bush, Spencer H., 'Probability of Damage to Nuclear Components Due to Turbine Failures.' Nuclear Safety Magazine, Volume 14, No. 3, May-June 1973, pages 187-201.
ILE PROTECTION                                                                              3.5-31
(3)Proctor, L. D. 'Gallatin Turbine Disintegration Study,' TVA Document No. TI-275-4 RO, October 9, 1974.
 
(4)Semendares, S. N., 'Topical Report-Methods of Determining the Probability of a Turbine Missile Hitting a Particular Plant Region,' WCAP-7861, February 1972.(5)DeLeys, Norman J., et al., 'Full Scale Crash Tests of Rigid Simulated Heavy Vehicle Underride Guard,' Cornell Aeronautical Laboratory, Inc., Buffalo, New York, March 1970. Report prepared for Department of Transportation, Federal Highway Administration, National Highway Safety Bureau, Washington, DC.
(1)   10 feet of compacted fine-grained soil.
(6)Amirikan, A., 'Design of Protective Structures,' NP-3726, Bureau of Yards and Docks, Department of the Navy, Washington, DC, August 1950.
(2)   7 feet of compacted crushed stone.
(7)Moore, C. V., 'The Design and Barricades for Hazardous Pressure Systems,' Nuclear Engineering and Design, Vol. 5, 1967, pp. 85-86.
(3)   18 inches of conventional unreinforced concrete.
(8)Design of Structures for Missile Impact', BC-TOP-9A, Revision 2 Topical Report, Bechtel Power Corporation, San Francisco, California, September 1974.
(4)   18 inches of roller-compacted unreinforced concrete.
(9)Westinghouse Systems Standard Design Criteria, "Protection Criteria Against Dynamic Effects Resulting from Pipe Rupture" (Identification       No. 1.19).(10)Bush, S.H., "Probability of Damage to Nuclear Components Due to Turbine Failure." CONF-730304, Topical Meeting on Water Reactor Safety, Salt Lake City, Utah, March 26-28, 1973, pp. 84-104.
In each scheme, a 12-inch cushion of either compacted sand or fine-grained earthfill is required over the top of the pipe.
(11)Topical Report: "Procedures for Estimating the Probability of Steam Turbine Disc Rupture from Stress Corrosion Cracking," submitted to the NRC May 1981, by Westinghouse Steam Turbine Generator Division, WSTG-1-NP.
The acceptability of each scheme has been verified by a full-scale test program[16] in which missiles from the NRC spectrum were dropped from a helicopter into test pits of crushed stone or earthfill and onto concrete slabs. The missiles used in the testing were:
3.5-34MISSILE PROTECTION WATTS BARWBNP-92 (12)Topical Report: "Missile Energy Analysis Methods for Nuclear Steam Turbines," submitted to the NRC Ma y 1981, by the Westinghouse Steam Turbine Generator Division, WSTG-2-NP.
(1.a) 1,500-pound utility pole, (2.a) 12-inch diameter schedule 40 steel pipe, (3.a) 1-inch diameter steel rod, (4.a) 3-inch diameter schedule 40 steel pipe, and (5.a) 6-inch diameter schedule 40 steel pipe.
(13)Memorandum from L. W. Boyd to C. A. Chandley dated September 27, 1988 (B44 88 0927 005) transmitting copies of Turbine Missile Reports as listed below: (a)1974 Analysis for Turbine Missiles.(b)CT-24076 - SQN Methodology for Analyzing Turbine Missiles.(c)CT-24832, R1 - Results of Turbine Missile Analysis for SQN U-1.(d)CT-24873 - Report of Turbine Missile Analysis for SQN U-2.(e)LT-24831, R1 - Report of Turbine Missile Analysis for SQN U-1.
Of these missiles, the 12-inch pipe and utility pole caused the greatest penetration depths. Impact velocities of 200-215 ft/s were achieved for both the utility pole and 12-inch pipe which equals or exceeds the design velocities for those missiles as listed in Tables 3.5-7 and 3.5-9. The protective thicknesses listed above are based on the maximum thicknesses observed in the test program and are, therefore, conservatively chosen.
(14)Calculation TI-858, "Probability of Unacceptable Damage to the Diesel Generator Building from Turbine Missiles." (15)Calculation TI-521, "Probability for Turbine Missile Strike Damage at Watts Bar Nuclear Plant." (16)CEB Report CEB-81-20, "Testing of Protective Cover for Essential Buried Structures." (17)U.S. Nuclear Regulatory Commission NUREG-0800, "Standard Review Plan," Section 3.5.1.6.III.2.
It is concluded that the missile protection criteria to which the plant has been analyzed and protected against comply with Criteria 2 and 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.
MISSILE PROTECTION 3.5-35WATTS BARWBNP-92Table 3.5-1 Summary of Postulated CRDM Missile AnalysisPOSTULATED MISSILES WEIGHT (LB)THRUSTAREA (IN 2)IMPACTAREA (IN 2)IMPACT (1)VELOCITY(4)(Ft/SEC)KINETIC (1)ENERGY(Ft-Lbs)1.Mechanism Housing Plug 115.94 (2) 7.07450  34,6002.Drive Shaft Assembly 1402.41   2.41179  69,8003.Mechanism Housing (3) Plug And Drive Shaft Impacting On Same Missile Shield Spot-----4.Drive Shaft Latched To Mechanism15002.41   11.04 34   26,400NOTES: (1) Velocities and kinetic energies for a distance of 4.389(ft) between top of CRDM Housing and Missile Shield.(2)Flow discharge area (equal to thrust area-no expansion of jet assumed).
.3.1 Additional Diesel Generator Building (And Other Category I Structures Added After July 1979)
(3)Assume drive shaft further pushes housing plug into shield.
The openings in the walls and roof for access, ventilation, air intakes, and exhaust discharge, are designed to withstand the effects from the tornado missiles listed in Spectrum D of Table 3.5-17. The 480V auxiliary board room (ABR) ventilation air intake vent is the only primary safety-related equipment located outside the Additional Diesel Generator Building not protected against tornado missiles. The roof opening for the ABR vent is protected against tornado missile entry by a missile shield installed inside the roof structure. In-lieu of protecting the ABR vent from tornado missiles, operator actions are specified in the event of a tornado warning to restore ventilation cooling to the ABR. Overall structural response evaluation of concrete barriers to tornado missile impact was performed using the general requirements of Appendix C, 2                                                                              MISSILE PROTECTION
(4)For the calculational methods, see Appendix 3.5A.
 
MISSILE PROTECTION 3.5-36WATTS BARWBNP-79Table 3.5-2  Typical Postulated Valve Missile CharacteristicsMissile DescriptionWeight  (lb) FlowDischarge Area (in 2)Thrust Area (in 2)Impact Area (in 2)Weight toImpact AreaRatio (psi)Terminal (1)velocity  (fps) Safety Relief Valve Bonnet (3" x 6" or 6" x 6")3502.86 802414.5 1103 Inch Motor Operated Isolation Valve Bonnet (plus motor and stem) (3")4005.5 1132814.1 1352 Inch Air Operated Relief Valve Bonnet (plus stem) 751.8 2020 3.751153 Inch Air Operated Spray Valve Bonnet (plus stem)1205.5 5050 2.4 1904 Inch Air Operated Spray Valve2009.3 5050 4   190NOTES:1.For the calculational methods, see Appendix 3.5A MISSILE PROTECTION 3.5-37WATTS BARWBNP-79NOTES: 1.For the calculational methods, see Appendix 3.5ATable 3.5-3 Postulated Piping Temperature Element Assembly Missile Characteristics1.For a tear around the weld between the boss and the pipe:CharacteristicsFlow Discharge Area Thrust Area Missile Weight Area of Impact"without well"0.11 in 2 7.1 in 211.0 lb 3.14 in 2"with well" 0.60 in 2 9.6 in 215.2 lb 3.14 in 2        Missile Weight Impact Area          3.5 psi4.84 psiVelocity (1)20 ft/sec120 ft/sec2.For a tear at the junction between the temperature element assembly and the boss for the "without well" element and at the junction between the boss and the well for the "with well" element.CharacteristicsFlow Discharge Area Thrust Area Missile Weight Area of Impact"without well"0.11 in 23.14 in 2 4.0 lb 3.14 in 2"with well" 0.60 in 23.14 in 2 6.1 lb 3.14 in 2        Missile Weight Impact Area          1.27 psi1.94 psiVelocity 75 ft/sec120 ft/sec 3.5-38MISSILE PROTECTION WATTS BARWBNP-79Table 3.5-4 Characteristics of Other Missiles Postulated Within Reactor Containment Reactor CoolantPump Temperature    Element   InstrumentWell ofPressurizerPressurizer  Heaters WeightDischarge Area Thrust Area Impact Area0.25 lb 0.50 in 20.50 in 20.50 in 2 5.5 lb  0.442 in 21.35 in 2 1.35 in 2 15 lb    0.80 in 2 2.4 in 2 2.4  in 2          Missile WeightImpact Area            0.5 psi4.1 psi6.25 psiVelocity (1)260 ft/sec100 ft/sec55 ft/secNOTES:1. For the calculational procedures, see Appendix 3.5A MISSILE PROTECTION 3.5-39WATTS BARWBNP-79Table 3.5-5 Deleted by Amendment 71; See Section 10.2.3.1 MISSILE PROTECTION 3.5-40WATTS BARWBNP-86Table 3.5-6  Tabulated Calculation of the Probability of Event H - The Receipt of Unacceptable DamageNUCLEAR PLANT TURBINESSTEAM PLANT TURBINESEventRated Speed MissilesOverspeedRated Speed MissilesOverspeed250 fps + 10%350 fps + 10%550 fps + 10%310 fps + 10%500 fps + 10%865 fps + 10%CenterEndCenterEndCenterEndCenterEndCenterEndCenterEndA7X10-5 7X10-5 7X10-5 7X10-5 7X10-57X10-5 1X10-4 1X10-4 1X10-4 1X10-41X10-41X10-4B0.40.40.40.40.20.20.40.40.40.40.20.2C0.70.70.70.71.01.00.70.70.70.71.01.0D0.90.10.90.10.90.10.90.10.90.10.90.1E-0.5-0.5-0.5-0.5-0.5-0.5F6.72X10-37.89X10-3 3.42X10-32.81X10-37.67X10-48.79X10-402.91X10-508.77X10-43.32X10-62.23X10-4G0.50.51.01.01.01.01.01.01.01.01.01.0Subtotal5.93x10
ACI 349-76, "Code Requirements For Nuclear Safety-Related Concrete Structures."
-83.86x10-96.04x10-82.75x10-99.66x10-96.15x10-1004.07x10-1101.23x10-95.98x10-112.23x10-10Subtotal1.37x10
Minimum concrete thickness required to resist penetration, perforation or backface scabbing from these tornado missiles are given in Table 3.5-18.
-71.49x10-9H(2 1800 rpm Turbines)x(1.37x10
REFERENCES (1) Burnell, J., 'The Flow of Boiling Water Through Nozzles, Orifices, and Pipes.'
-7)+(4 3600 rpm Turbines)x(1.49x10
The Institute of Engineers, Australia, March 1946.
-9) = 2.79x10
(2) Bush, Spencer H., 'Probability of Damage to Nuclear Components Due to Turbine Failures.' Nuclear Safety Magazine, Volume 14, No. 3, May-June 1973, pages 187-201.
-7 events per year MISSILE PROTECTION 3.5-41WATTS BARWBNP-89Table 3.5-7 Tornado Missile Spectrum A for Category I Structures (1)Missile(2)     Description       Design VelocityExterior      RoofWall          Systemft/s (mi/h)   ft/s (mi/h)A1Wood plank, 2 in. x 4 in. x12-ft long, weight 27 lbs 440  (300)    --      A2Cross tie, 7 in. x 9 in. x8.5 ft long, weight 186 lbs 440  (300)    --A3Automobile, weight 4000 lbs,up to 25 ft above grade at structure 73    (50)    --A4Steel pipe, 2-in. diameter,7-ft long, weight 26 lbs147    (100)    --A5Steel rod, 1-in. diameter x3-ft long, weight 8 lbs210    (143)   168 (115)A6Utility pole, 13.5 in.diameter x 35-ft long, weight 1490 lbs, up to 30 feet above grade200    (136)    160  (109)
(3) Proctor, L. D. 'Gallatin Turbine Disintegration Study,' TVA Document No.
Notes:(1) See Section 3.5.1.4.
TI-275-4 RO, October 9, 1974.
(2) Missiles A1 through A4 were considered in original design. Missiles A5     and A6 were based on the structural adequacy of as-designed structures.
(4) Semendares, S. N., 'Topical Report-Methods of Determining the Probability of a Turbine Missile Hitting a Particular Plant Region,' WCAP-7861, February 1972.
3.5-42MISSILE PROTECTION WATTS BARWBNP-92Table 3.5-8 Tornado Missile Spectrum B Diesel Generator Building Equipment Doors (1)MissileDescriptionDesign Velocity ft/sec (mph) B1100-lb missile with 4-in. diameter for impact area147 (100)
(5) DeLeys, Norman J., et al., 'Full Scale Crash Tests of Rigid Simulated Heavy Vehicle Underride Guard,' Cornell Aeronautical Laboratory, Inc., Buffalo, New York, March 1970. Report prepared for Department of Transportation, Federal Highway Administration, National Highway Safety Bureau, Washington, DC.
B210-ft length of 2 in. standard pipe impact endwise (weight = 36.5 lbs.)147 (100)B310-ft length of 1/2-in. standard pipe impacting endwise (weight 8.5 lbs.)147 (100)B4Wood plank, 2 in. x 4 in. x 12 ft long, weight 27 lbs.440 (300)B5Cross tie, 7 in. x 9 in. x 8.5 ft long, weight 186 lbs.440 (300)
(6) Amirikan, A., 'Design of Protective Structures,' NP-3726, Bureau of Yards and Docks, Department of the Navy, Washington, DC, August 1950.
B6Steel pipe, 2-in. diameter by 7 ft long, weight 26 lbs.147 (100)Missiles B1, B2, and B3 were considered in the design of the equipment doors. Additional protection is provided for missiles B4, B5, and B6.
(7) Moore, C. V., 'The Design and Barricades for Hazardous Pressure Systems,'
Note:1. See Section 3.5.1.4.
Nuclear Engineering and Design, Vol. 5, 1967, pp. 85-86.
MISSILE PROTECTION 3.5-43WATTS BARWBNP-92Table 3.5-9  Tornado Missile Spectrum C for Category I Structures (1)       Design VelocityExterior      Roof   Wall         System ft/s (mi/h)   ft/s (mi/h)C1Wood plank, 4 in. x 12 in. x 12 ft., weight 200 lbs.368 (251)294 (200)C2Steel pipe, 3-in. diameter, 10-ft long, weight 78 lbs268 (183)215 (147)C3Steel rod, 1-in. diameter, 3-ft long, weight 8 lbs259 (177)207 (141)C4Steel pipe, 6-in. diameter, 15-ft long, weight 285 lbs230 (157)184 (125)C5Steel pipe, 12-in. diameter, 15-ft long, weight 743 lbs205 (140)165 (112)C6Utility Pole, 13-1/2-in. diameter, 35-ft long, weight 1490 lbs. 241 (164) 205 (140) C7Automobile, frontal area 20 ft 2, 4000 lbs, up to 30 ft above grade100 (70) 80 (56) NOTE:(1)   See Section 3.5.1.4.
(8) Design of Structures for Missile Impact', BC-TOP-9A, Revision 2 Topical Report, Bechtel Power Corporation, San Francisco, California, September 1974.
MISSILE PROTECTION 3.5-44WATTS BARWBNP-92Table 3.5-10  Tabulation of the Probability of Receipt of Unacceptable Damage - Per Critical StructureRated Speed MissilesOverspeed Missiles250fps+   10%   350 fps +   10%   550 fps   +    10%   Structure     Center     End   Center      End       Center         EndReactor Building #12.28 x 10
(9) Westinghouse Systems Standard Design Criteria, "Protection Criteria Against Dynamic Effects Resulting from Pipe Rupture" (Identification     No.
-8 1.35 x 10
1.19).
-9 3.13 x 10
(10) Bush, S.H., "Probability of Damage to Nuclear Components Due to Turbine Failure." CONF-730304, Topical Meeting on Water Reactor Safety, Salt Lake City, Utah, March 26-28, 1973, pp. 84-104.
-87.04 x 10-102.87 x 10-9 7.59 x 10-11Reactor Building #22.38 x 10
(11) Topical Report: "Procedures for Estimating the Probability of Steam Turbine Disc Rupture from Stress Corrosion Cracking," submitted to the NRC May 1981, by Westinghouse Steam Turbine Generator Division, WSTG-1-NP.
-8 1.49 x 10
ILE PROTECTION                                                                          3.5-33
-9 2.88 x 10
 
-86.35 x 10-102.67 x 10-9 5.78 x 10-11Control Room2.59 x 10
(12) Topical Report: "Missile Energy Analysis Methods for Nuclear Steam Turbines," submitted to the NRC May 1981, by the Westinghouse Steam Turbine Generator Division, WSTG-2-NP.
-8 5.61 x 10-108.82 x 10-92.04 x 10-102.55 x 10-9 5.85 x 10-11Spent Fuel Pool6.17 x 10
(13) Memorandum from L. W. Boyd to C. A. Chandley dated September 27, 1988 (B44 88 0927 005) transmitting copies of Turbine Missile Reports as listed below:
-101.88 x 10-103.34 x 10-97.72 x 10-113.18 x 10-10 7.46 x 10-12Valve Room 1A2.36 x 10 9 6.96 x 10-111.95 x 10-94.78 x 10-111.96 x 10-10 4.40 x 10-12Valve Room 1B4.22 x 10
(a)   1974 Analysis for Turbine Missiles.
-101.48 x 10-102.90 x 10-96.70 x 10-112.72 x 10-107.11 x 10-12Valve Room 2A2.61 x 10
(b)   CT-24076 - SQN Methodology for Analyzing Turbine Missiles.
-9 5.72 x 10-111.50 x 10-93.14 x 10-111.32 x 10-10 3.25 x 10-12Valve Room 2B5.72 x 10
(c)   CT-24832, R1 - Results of Turbine Missile Analysis for SQN U-1.
-101.72 x 10-103.88 x 10-99.86 x 10-112.55 x 10-10 5.85 x 10-12ERCW Conduit Run3.95 x 10
(d)   CT-24873 - Report of Turbine Missile Analysis for SQN U-2.
-8 3.58 x 10
(e)   LT-24831, R1 - Report of Turbine Missile Analysis for SQN U-1.
-9 3.56 x 10
(14) Calculation TI-858, "Probability of Unacceptable Damage to the Diesel Generator Building from Turbine Missiles."
-83.57 x 10-9 9.02 x 10
(15) Calculation TI-521, "Probability for Turbine Missile Strike Damage at Watts Bar Nuclear Plant."
-9 1.00 x 10
(16) CEB Report CEB-81-20, "Testing of Protective Cover for Essential Buried Structures."
-9 Diesel Generator Bldg01.14 x 10-102.55 x 10-97.03 x 10-111.03 x 10-9 1.15 x 10-11TOTALS1.19 x 10
(17) U.S. Nuclear Regulatory Commission NUREG-0800, "Standard Review Plan," Section 3.5.1.6.III.2.
-77.73 x 10-91.21 x 10-75.51 x 10-9 1.93 x 10
4                                                                  MISSILE PROTECTION
-8 1.23 x 10
 
-9 MISSILE PROTECTION 3.5-45WATTS BARWBNP-89 Notes:(1)Velocities and kinetic energies for a distance of 4.389 (ft) between top of CRDM housing and missile shield.(2)Flow discharge area (equal to thrust area - no expansion of jet assumed).
TTS BAR THRUST            IMPACT              IMPACT(1)    KINETIC(1)
(3)Assume drive shaft further pushes housing plug into shield.Table 3.5-11  Postulated CRDM Missile CharacteristicsPostulated MissilesWeight (lb)Thrust Area (in 2)Impact Area (in 2)Impact(1) Velocity (ft/sec)Kinetic(1)Energy (ft-lb)1.Mechanism Housing Plug115.94 (2)7.0745034,6002.Drive Shaft Assembly1402.412.4117969,8003.Mechanism Housing (3) Plug and Drive Shaft Impacting on Same Missile Shield Spot-----4.Drive Shaft Latched to Mechanism15002.4111.043426,400 3.5-46MISSILE PROTECTION WATTS BARWBNP-89Table 3.5-12  Typical Postulated Valve Missile CharacteristicsMissile Description Wgt (lb)Flow Discharge Area (in 2)Thrust Area (in 2)Impact Area(in 2)Weight to Impact Area Ratio (psi)Terminal Velocity (fps)Safety Relief Valve Bonnet (3"x 6" or 6" x 6")3502.86802414.51103 Inch Motor Operated Isolation Valve Bonnet (plus motor and stem)
WEIGHT                  AREA              AREA              VELOCITY(4)   ENERGY LATED MISSILES                            (LB)                   (IN2)             (IN2)             (Ft/SEC)     (Ft-Lbs) anism Housing Plug                         11                5.94(2)             7.07                  450      34,600 Shaft Assembly                           140                  2.41               2.41                179      69,800 anism Housing(3) Plug And                   -                    -                  -                    -          -
(3")4005.51132814.11352 Inch Air Operated Relief Valve Bonnet (plus stem)751.82020 3.751153 Inch Air Operated Spray Valve Bonnet (plus stem)1205.550502.41904 Inch Air Operated Spray Valve2009.35050 4190Characteristics Of Other Missiles Postulated Within Reactor ContainmentReactor Coolant Pump Temperature ElementInstrument Well of PressurizerPressurizer HeaterWeight 0.25 lb5.5 lb15 lbDischarge Area0.50 in 20.442 in 20.80 in 2Thrust Area0.50 in 21.35 in 2 2.4 in 2Impact Area0.50 in 21.35 in 2 2.4 in 2Missile Weight      Impact Area0.5 psi4.1 psi6.25 psiVelocity260 ft/sec100 ft/sec55 ft/sec MISSILE PROTECTION 3.5-47WATTS BARWBNP-89Table 3.5-13  Postulated Piping Temperature Element Assembly Missile Characteristics1.For a tear around the weld between the boss and the pipe:Characteristics"Without Well""With Well" Flow Discharge Area0.11 in 20.60 in 2Thrust Area7.1 in 2 9.6 in 2Missile Weight11.0 lb15.2 lb Impact Area3.14 in 23.14 in 2Missile Weight Impact Area3.5 psi4.84 psiVelocity20 ft/sec120 ft/sec2.For a tear at the junction between the temperature element assembly and the boss for the "without well" element and at the junction between the boss and the well for the "with well" element.Characteristics"Without Well""With Well" Flow Discharge Area0.11 in 20.60 in 2Thrust Area3.14 in 23.14 in 2Missile Weight4.0 lb6.1 lb Impact Area3.14 in 23.14 in 2Missile Weight  Impact Area1.27 psi1.94 psiVelocity75 ft/sec120 ft/sec MISSILE PROTECTION 3.5-48WATTS BARWBNP-86Table 3.5-14  Outdoor Safety-Related Features (1) (Including Air Intakes and Exhausts) (Sheet 1 of 2)FeatureFSARFigureTornado Protection1.ERCW pumps, traveling screens, and ancillary features located on the deck of the intake pumping station.3.8.4-50Steel grillage roof system consisting of a series of wide flange beams (W21 x 49) spaced 9 inches on center and rotated 45 degrees. Walls of 15 inch reinforced concrete.2.ERCW Standpipes2.5-225Reinforced concrete enclosure (15-inch clear cover) 3.ERCW Overflow Box3.8.4-46aReinforced concrete cover (2-feet thickness)4.ERCW yard piping9.2-40Buried with one of the following minimum covers: 18 inches of concrete, 7 feet of crushed stone, or 11 feet of earthfill.5.RWST3.8.4-353-1/2 feet high concrete wall with earth backfill surrounding tank to preserve necessary volume of water6.Pipe tunnels3.8.4-35Buried reinforced concrete cover (2-feet thickness) 7.Diesel generator ventilation intakes and exhausts3.8.4-26Reinforced concrete canopy (1-foot thickness)8.Diesel generator engine combustion air exhausts3.8.4-26Reinforced concrete curb, 3 feet high and 18 inches thick around the exhaust9.Diesel generator electric board room air intakes (4 total)3.8.4-26Steel canopy with barrier protection (steel frame with 1 inch cover plate).10.480V transformer room, ventilation intakes and exhausts1.2-1Suspended steel grating (2-1/2 inch x 3/8 inch main bars and 1/2 in diameter connecting bars).11.Vital battery room exhausts1.2-1Same as for Item 10 except the fifth Vital Battery Room is same as Item 9.12.480V board room condensing unit air intake and exhaust (train A)1.2-1Reinforced concrete roof parapet (a minimum of 12 inches thick and 3 feet high)13.480V board room condensing unit air intake (train B)1.2-1Reinforced concrete canopy (18 inches thick)NOTE:(1)This tabulation consists of these outdoor features which are safety-related in the event of a tornado and as defined in Branch Technical Position ASB3-2 of the Standard Review Plan for Section 3.5.1-4 "Missiles Generated by Natural Phenomena."
Drive Shaft Impacting On Same Missile Shield Spot Shaft Latched To Mechanism              1500                  2.41               11.04                 34       26,400 TES:
MISSILE PROTECTION 3.5-49WATTS BARWBNP-8614.480V board room condensing unit air exhaust (train B)1.2-1On roof of mechanical equipment rooms.15.Class 1E duct banks and manholes3.8.4-37Buried with concrete protection (9 inch clear concrete cover for conduits; 12 inches total concrete thickness of manholes).16.Fuel oil 7-day tank vent line (portion above roof)3.8.4-50Encased in reinforced concrete.17.IPS El. 728' terrace roof openings which expose Cat. I electrical cable trays3.8.4-27Steel grating 4'-10" x 4' -10" Borden type C Style 18 size C A36, structural steel shroud (3/4" thickness), 18" thick precast concrete panels.18.DGB & ADGB fuel oil 1-day tank vent lines (portions protruding from exterior walls)1.2-1Steel plate shrouds (2" cover plate thickness)19.Vacuum Relief Ducts in Aux. Bldg. Roof, Units 1&23.8.4-26Steel plate canopy (1/2" thickness) over existing duct opening20.Diesel Generator Bldg. roof access hatches (two)3.8.4-26Structural steel plate shrouds under DGB roof. Steel plate thicknes s varies from 1/4" to 1/2", as required21.Emergency Pressurizer Fan opening on Cont. Bldg. roof, column lines C10-C11 & n-q 1.2-1Steel plate canopy (1/2" min. thick.) over opening22.Toilet and locker room exhaust fan opening on Cont. Bldg. roof, column lines C2-C3 & n-q1.2-1Steel plate canopy (1/2" min. thick.) over opening23.Battery room exhaust vent in Cont. Bldg. roof, column lines C3-C4 & n-q 1.2-1Steel plate canopy (1/2" min. thick.) over openingTable 3.5-14  Outdoor Safety-Related Features (1) (Including Air Intakes and Exhausts) (Sheet 2 of 2)FeatureFSARFigureTornado Protection MISSILE PROTECTION 3.5-50WATTS BARWBNP-86Table 3.5-15  Exit Missile Properties For Low-Pressure Discs (And Fragments) - All Low Pressures Exit Missile Properties For No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) (Sheet 1 of 2)Rated Speed(100% Speed)Design Overspeed    20% Speed  Destructive Overspeed    100% Speed      Weight  (lb)  Velocity  (ft/s)
Velocities and kinetic energies for a distance of 4.389(ft) between top of CRDM Housing and Missile Shield.
Energy(10 6 ft-lb)Velocity (ft/s) Energy(10 6 ft-lb)Velocity (ft/s) Energy (10 6 ft-lb)90 E Disc BurstDisc No.12700ContainedContained1080.49 Fragment No. 1.13465ContainedContained1080.63 Fragment No. 1.22350ContainedContained1080.42 Fragment No. 1.31920ContainedContained1080.35
Flow discharge area (equal to thrust area-no expansion of jet assumed).
Assume drive shaft further pushes housing plug into shield.
For the calculational methods, see Appendix 3.5A.
WBNP-92
 
TTS BAR Flow                                      Weight to    Terminal(1)
Weight        Discharge        Thrust        Impact      Impact Area    velocity Missile Description                (lb)         Area (in2)     Area (in2)     Area (in2)   Ratio (psi)     (fps)
Relief Valve Bonnet (3" x 6" or 6"     350            2.86             80            24          14.5           110 Motor Operated Isolation Valve         400            5.5            113            28          14.1          135 (plus motor and stem) (3")
ir Operated Relief Valve Bonnet       75            1.8             20            20            3.75          115 em) ir Operated Spray Valve Bonnet       120            5.5             50            50            2.4           190 em)
Air Operated Spray Valve              200            9.3             50            50            4           190 TES:
or the calculational methods, see Appendix 3.5A WBNP-79
 
able 3.5-3 Postulated Piping Temperature Element Assembly Missile Characteristics For a tear around the weld between the boss and the pipe:
Characteristics                      "without well"             "with well" Flow Discharge Area                  0.11 in2                  0.60 in2 Thrust Area                          7.1 in2                    9.6 in2 Missile Weight                        11.0 lb                   15.2 lb Area of Impact                        3.14 in2                  3.14 in2 Missile Weight                     3.5 psi                    4.84 psi Impact Area Velocity (1)                         20 ft/sec                  120 ft/sec For a tear at the junction between the temperature element assembly and the boss for the "without well" element and at the junction between the boss and the well for the "with well" element.
Characteristics                      "without well"             "with well" Flow Discharge Area                  0.11 in2                  0.60 in2 Thrust Area                          3.14 in2                  3.14 in2 Missile Weight                        4.0 lb                     6.1 lb Area of Impact                        3.14 in2                  3.14 in2 Missile Weight                     1.27 psi                  1.94 psi Impact Area Velocity                              75 ft/sec                  120 ft/sec NOTES:
1.For the calculational methods, see Appendix 3.5A ILE PROTECTION                                                                                    3.5-37
 
able 3.5-4 Characteristics of Other Missiles Postulated Within Reactor Containment Reactor Coolant          Instrument Pump Temperature             Well of   Pressurizer Element             Pressurizer    Heaters ight                              0.25 lb                 5.5 lb        15 lb charge Area                        0.50 in2              0.442 in2    0.80 in2 ust Area                          0.50 in2              1.35 in2      2.4 in2 act Area                          0.50 in2              1.35 in2      2.4 in2 issile Weight                    0.5 psi                4.1 psi      6.25 psi pact Area ocity(1)                         260 ft/sec            100 ft/sec    55 ft/sec NOTES:
: 1. For the calculational procedures, see Appendix 3.5A 8                                                                    MISSILE PROTECTION
 
Table 3.5-5 Deleted by Amendment 71; See Section 10.2.3.1 ILE PROTECTION                                                         3.5-39
 
TTS BAR NUCLEAR PLANT TURBINES                                                    STEAM PLANT TURBINES t                  Rated Speed Missiles                        Overspeed                  Rated Speed Missiles                      Overspeed 250 fps + 10%             350 fps + 10%           550 fps + 10%           310 fps + 10%         500 fps + 10%         865 fps + 10%
Center          End      Center      End        Center        End      Center      End        Center    End        Center        End 7X10-5         7X10-5     7X10-5     7X10-5      7X10-5       7X10-5    1X10-4     1X10-4     1X10-4   1X10-4      1X10-4      1X10-4 0.4            0.4        0.4        0.4        0.2          0.2        0.4        0.4        0.4        0.4        0.2          0.2 0.7            0.7        0.7        0.7        1.0          1.0        0.7        0.7        0.7        0.7        1.0          1.0 0.9            0.1        0.9        0.1        0.9          0.1        0.9        0.1        0.9        0.1        0.9          0.1
        -             0.5         -         0.5         -           0.5         -         0.5         -         0.5         -           0.5 6.72X10-3      7.89X10-3   3.42X10-3  2.81X10-3  7.67X10-4    8.79X10-4      0      2.91X10-5      0      8.77X10-4  3.32X10-6    2.23X10-4 0.5            0.5        1.0        1.0        1.0          1.0        1.0        1.0        1.0        1.0        1.0          1.0
              -8  3.86x10-9  6.04x10-8  2.75x10-9  9.66x10-9    6.15x10-10            4.07x10-11            1.23x10-9  5.98x10-11  2.23x10-10 5.93x10                                                                        0                      0 1.37x10-7                                                                        1.49x10-9 (2 1800 rpm Turbines)x(1.37x10-7)+(4 3600 rpm Turbines)x(1.49x10-9) = 2.79x10-7 events per year WBNP-86
 
Table 3.5-7 Tornado Missile Spectrum A for Category I Structures(1)
Design Velocity Exterior      Roof Wall        System issile(2)                   Description         ft/s (mi/h) ft/s (mi/h)
Wood plank, 2 in. x 4 in. x          440 (300)      --
12-ft long, weight 27 lbs Cross tie, 7 in. x 9 in. x            440 (300)      --
8.5 ft long, weight 186 lbs Automobile, weight 4000 lbs,         73    (50)  --
up to 25 ft above grade at structure Steel pipe, 2-in. diameter,         147    (100)  --
7-ft long, weight 26 lbs Steel rod, 1-in. diameter x          210    (143)   168 (115) 3-ft long, weight 8 lbs Utility pole, 13.5 in.               200    (136)  160 (109) diameter x 35-ft long, weight 1490 lbs, up to 30 feet above grade Notes:
(1) See Section 3.5.1.4.
(2) Missiles A1 through A4 were considered in original design. Missiles A5 and A6 were based on the structural adequacy of as-designed structures.
ILE PROTECTION                                                              3.5-41
 
ble 3.5-8 Tornado Missile Spectrum B Diesel Generator Building Equipment Doors(1)
Design Velocity Missile                                  Description                          ft/sec (mph)
B1                100-lb missile with 4-in. diameter for impact area          147 (100)
B2                10-ft length of 2 in. standard pipe impact endwise         147 (100)
(weight = 36.5 lbs.)
B3              10-ft length of 1/2-in. standard pipe impacting endwise       147 (100)
(weight 8.5 lbs.)
B4              Wood plank, 2 in. x 4 in. x 12 ft long, weight 27 lbs.       440 (300)
B5                Cross tie, 7 in. x 9 in. x 8.5 ft long, weight 186 lbs. 440 (300)
B6              Steel pipe, 2-in. diameter by 7 ft long, weight 26 lbs.     147 (100) siles B1, B2, and B3 were considered in the design of the equipment doors. Additional protection is vided for missiles B4, B5, and B6.
Note:
: 1. See Section 3.5.1.4.
2                                                                                MISSILE PROTECTION
 
Table 3.5-9 Tornado Missile Spectrum C for Category I Structures(1)
Design Velocity Exterior    Roof Wall     System ft/s (mi/h) ft/s (mi/h)
C1      Wood plank, 4 in. x 12 in. x 12 ft., weight 200 368 (251)           294 (200) lbs.
C2      Steel pipe, 3-in. diameter,                     268 (183)           215 (147) 10-ft long, weight 78 lbs C3      Steel rod, 1-in. diameter,                       259 (177)            207 (141) 3-ft long, weight 8 lbs C4      Steel pipe, 6-in. diameter,                     230 (157)           184 (125) 15-ft long, weight 285 lbs C5      Steel pipe, 12-in. diameter,                     205 (140)            165 (112) 15-ft long, weight 743 lbs C6      Utility Pole, 13-1/2-in. diameter, 35-ft long,   241 (164)           205 (140) weight 1490 lbs.
C7      Automobile, frontal area 20 ft2, 4000 lbs, up to 100 (70)             80 (56) 30 ft above grade NOTE:
(1) See Section 3.5.1.4.
ILE PROTECTION                                                                             3.5-43
 
TTS BAR Rated Speed Missiles                            Overspeed Missiles 250fps+     10%       350 fps +     10%                                             550 fps         +    10%
Structure           Center       End     Center      End                                       Center           End
                                      -8                        -9              -8            -10              -9 actor Building #1        2.28 x 10                   1.35 x 10       3.13 x 10     7.04 x 10     2.87 x 10                 7.59 x 10-11 actor Building #2        2.38 x 10-8                 1.49 x 10-9     2.88 x 10-8  6.35 x 10-10  2.67 x 10-9               5.78 x 10-11 Control Room              2.59 x 10-8               5.61 x 10-10        8.82 x 10-9  2.04 x 10-10  2.55 x 10-9               5.85 x 10-11 pent Fuel Pool          6.17 x 10-10              1.88 x 10-10        3.34 x 10-9  7.72 x 10-11  3.18 x 10-10               7.46 x 10-12 Valve Room 1A            2.36 x 109                6.96 x 10-11        1.95 x 10-9  4.78 x 10-11  1.96 x 10-10               4.40 x 10-12 Valve Room 1B            4.22 x 10-10              1.48 x 10-10        2.90 x 10-9  6.70 x 10-11  2.72 x 10-10              7.11 x 10-12 Valve Room 2A            2.61 x 10-9               5.72 x 10-11        1.50 x 10-9  3.14 x 10-11  1.32 x 10-10               3.25 x 10-12 Valve Room 2B            5.72 x 10-10              1.72 x 10-10        3.88 x 10-9  9.86 x 10-11  2.55 x 10-10               5.85 x 10-12 CW Conduit Run            3.95 x 10-8                 3.58 x 10-9     3.56 x 10-8  3.57 x 10-9   9.02 x 10-9               1.00 x 10-9 sel Generator Bldg              0                  1.14 x 10-10        2.55 x 10-9  7.03 x 10-11  1.03 x 10-9               1.15 x 10-11 TOTALS                1.19 x 10-7                  7.73 x 10-9      1.21 x 10-7  5.51 x 10-9   1.93 x 10-8               1.23 x 10-9 WBNP-92
 
Table 3.5-11 Postulated CRDM Missile Characteristics Thrust                  Impact(1)
Weight      Area        Impact      Velocity  Kinetic(1)Ene Postulated Missiles                  (lb)     (in2)     Area (in2)   (ft/sec)   rgy (ft-lb) echanism Housing Plug                      11      5.94(2)       7.07        450      34,600 rive Shaft Assembly                        140        2.41        2.41        179      69,800 Mechanism Housing(3) Plug and                 -          -            -            -          -
Drive Shaft Impacting on Same Missile Shield Spot rive Shaft Latched to Mechanism          1500      2.41        11.04          34      26,400 Notes:
(1)Velocities and kinetic energies for a distance of 4.389 (ft) between top of CRDM housing and missile shield.
(2)Flow discharge area (equal to thrust area - no expansion of jet assumed).
(3)Assume drive shaft further pushes housing plug into shield.
ILE PROTECTION                                                                                    3.5-45
 
Table 3.5-12 Typical Postulated Valve Missile Characteristics Flow            Thrust                  Weight to sile            Wgt      Discharge      Area      Impact        Impact Area      Terminal scription        (lb)    Area (in2)      (in2)     Area(in2)    Ratio (psi)      Velocity (fps) ety Relief Valve net (3"x 6" or 6")              350          2.86          80          24          14.5             110 ch Motor erated Isolation ve Bonnet (plus tor and stem) 400          5.5          113          28          14.1              135 ch Air Operated ief Valve Bonnet s stem)            75          1.8          20          20            3.75            115 ch Air Operated ay Valve Bonnet s stem)            120          5.5          50          50           2.4             190 ch Air Operated ay Valve            200          9.3          50          50            4              190 Characteristics Of Other Missiles Postulated Within Reactor Containment Reactor Coolant Pump        Instrument Well of        Pressurizer Heater Temperature Element          Pressurizer ight                  0.25 lb                      5.5 lb                    15 lb charge Area          0.50 in2                    0.442 in2                0.80 in2 ust Area              0.50 in2                    1.35 in2                  2.4 in2 act Area            0.50 in2                    1.35 in2                  2.4 in2 sile Weight         0.5 psi                      4.1 psi                  6.25 psi act Area ocity                260 ft/sec                  100 ft/sec                55 ft/sec 6                                                                               MISSILE PROTECTION


90 E Disc BurstDisc No. 229651851.572402.664418.96 Fragment No. 2.128601851/522402/564418/64 Fragment No. 2.2 545**1200.12--
ble 3.5-13 Postulated Piping Temperature Element Assembly Missile Characteristics or a tear around the weld between the boss and the pipe:
Fragment No. 2.3 130----4410.39*Exit missile energies of less than 100,000 ft-lb are not reported.
aracteristics                              "Without Well"                        "With Well" w Discharge Area                              0.11 in2                            0.60 in2 ust Area                                      7.1 in2                              9.6 in2 sile Weight                                    11.0 lb                              15.2 lb act Area                                    3.14  in2                            3.14 in2 sile Weight                                    3.5 psi                            4.84 psi pact Area ocity                                        20 ft/sec                          120 ft/sec or a tear at the junction between the temperature element assembly and the boss for the "without ell" element and at the junction between the boss and the well for the "with well" element.
aracteristics                              "Without Well"                        "With Well" w Discharge Area                              0.11 in2                            0.60 in2 ust Area                                      3.14 in2                            3.14 in2 sile Weight                                    4.0 lb                              6.1 lb act Area                                    3.14  in2                            3.14 in2 sile Weight                                  1.27 psi                            1.94 psi pact Area ocity                                        75 ft/sec                          120 ft/sec ILE PROTECTION                                                                                3.5-47


90 E Disc BurstDisc No. 327751661.192923.6759715.35 Fragment No. 3.112652190.94----
TTS BAR FSAR Feature                                  Figure                                    Tornado Protection CW pumps, traveling screens, and ancillary                3.8.4-50          Steel grillage roof system consisting of a series of wide flange tures located on the deck of the intake                                      beams (W21 x 49) spaced 9 inches on center and rotated 45 mping station.                                                                degrees. Walls of 15 inch reinforced concrete.
Fragment No. 3.1 765--3771.69706  5.92 Fragment No. 3.19701770.473111.45635 6.08
CW Standpipes                                              2.5-225            Reinforced concrete enclosure (15-inch clear cover)
CW Overflow Box                                          3.8.4-46a          Reinforced concrete cover (2-feet thickness)
CW yard piping                                              9.2-40            Buried with one of the following minimum covers: 18 inches of concrete, 7 feet of crushed stone, or 11 feet of earthfill.
ST                                                        3.8.4-35           3-1/2 feet high concrete wall with earth backfill surrounding tank to preserve necessary volume of water e tunnels                                                3.8.4-35          Buried reinforced concrete cover (2-feet thickness) sel generator ventilation intakes and exhausts            3.8.4-26          Reinforced concrete canopy (1-foot thickness) sel generator engine combustion air exhausts              3.8.4-26          Reinforced concrete curb, 3 feet high and 18 inches thick around the exhaust sel generator electric board room air intakes            3.8.4-26          Steel canopy with barrier protection (steel frame with 1 inch cover otal)                                                                      plate).
V transformer room, ventilation intakes and              1.2-1            Suspended steel grating (2-1/2 inch x 3/8 inch main bars and 1/2 in austs                                                                      diameter connecting bars).
l battery room exhausts                                  1.2-1            Same as for Item 10 except the fifth Vital Battery Room is same as Item 9.
V board room condensing unit air intake and              1.2-1            Reinforced concrete roof parapet (a minimum of 12 inches thick and aust (train A)                                                              3 feet high)
V board room condensing unit air intake                  1.2-1            Reinforced concrete canopy (18 inches thick) in B) s tabulation consists of these outdoor features which are safety-related in the event of a tornado and as defined in Branch Technical Position WBNP-86 B3-2 of the Standard Review Plan for Section 3.5.1-4 "Missiles Generated by Natural Phenomena."


90 E Disc BurstDisc No. 432103696.7846010.5477830.17 MISSILE PROTECTION 3.5-51WATTS BARWBNP-86Added by Amendment 51Fragment No. 4.1 4803691.01460 1.57 778 4.51Fragment No. 4.223801861/28232 1.99393 5.70 90 E Disc BurstDisc No. 5398040810.3949915.35-
TTS BAR FSAR Feature                          Figure                                Tornado Protection V board room condensing unit air exhaust          1.2-1        On roof of mechanical equipment rooms.
-Disc No. 5*3710----75232.59Fragment No. 5.1 340408 0.89499 1.31752 2.99Fragment No. 5.21290193 0.74235 1.11356 2.54*Weight change due to loss of blades prior to reaching destructive overspeed.Table 3.5-15  Exit Missile Properties For Low-Pressure Discs (And Fragments) - All Low Pressures Exit Missile Properties For No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) (Sheet 2 of 2)Rated Speed(100% Speed)Design Overspeed   20% Speed   Destructive Overspeed    100% Speed      Weight  (lb) Velocity  (ft/s)
in B) ss 1E duct banks and manholes                    3.8.4-37      Buried with concrete protection (9 inch clear concrete cover for conduits; 12 inches total concrete thickness of manholes).
Energy(10 6 ft-lb)Velocity (ft/s) Energy(10 6 ft-lb)Velocity (ft/s) Energy (10 6 ft-lb) 3.5-52MISSILE PROTECTION WATTS BARWBNP-92*Except as indicated by the following notes, dimensions apply to 100% and 120% speed and destructive overspeed.
l oil 7-day tank vent line (portion above roof)  3.8.4-50        Encased in reinforced concrete.
El. 728' terrace roof openings which expose      3.8.4-27      Steel grating 4'-10" x 4' -10" Borden type C Style 18 size C A36,
. I electrical cable trays                                      structural steel shroud (3/4" thickness), 18" thick precast concrete panels.
B & ADGB fuel oil 1-day tank vent lines            1.2-1         Steel plate shrouds (2" cover plate thickness) rtions protruding from exterior walls) uum Relief Ducts in Aux. Bldg. Roof, Units        3.8.4-26      Steel plate canopy (1/2" thickness) over existing duct opening 2
sel Generator Bldg. roof access hatches (two)    3.8.4-26      Structural steel plate shrouds under DGB roof. Steel plate thickness varies from 1/4" to 1/2", as required ergency Pressurizer Fan opening on Cont.           1.2-1        Steel plate canopy (1/2" min. thick.) over opening
: g. roof, column lines C10-C11 & n-q et and locker room exhaust fan opening on        1.2-1         Steel plate canopy (1/2" min. thick.) over opening nt. Bldg. roof, column lines C2-C3 & n-q tery room exhaust vent in Cont. Bldg. roof,        1.2-1        Steel plate canopy (1/2" min. thick.) over opening umn lines C3-C4 & n-q WBNP-86
 
TTS BAR No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) (Sheet 1 of 2)
Rated Speed               Design Overspeed        Destructive Overspeed (100% Speed)                   20% Speed                  100% Speed Weight            Velocity            Energy      Velocity      Energy      Velocity      Energy (lb)              (ft/s)          (106 ft-lb)    (ft/s)      (106 ft-lb)    (ft/s)    (106 ft-lb) c Burst
.1                    2700            Contained                        Contained                    108          0.49 nt No. 1.1              3465            Contained                        Contained                    108          0.63 nt No. 1.2              2350            Contained                        Contained                    108          0.42 nt No. 1.3              1920            Contained                        Contained                    108          0.35 c Burst
. 2                    2965                185                1.57        240            2.66        441          8.96 nt No. 2.1              2860                185                1/52        240            2/56        441          8/64 nt No. 2.2              545                *
* 120            0.12          -              -
nt No. 2.3              130                -                  -            -              -          441          0.39 ssile energies of less than 100,000 ft-lb are not reported.
c Burst
. 3                    2775                166                1.19        292            3.67        597          15.35 nt No. 3.1              1265                219                0.94          -              -          -              -
nt No. 3.1              765                -                  -          377            1.69        706          5.92 nt No. 3.1              970                177                0.47        311            1.45        635          6.08 c Burst WBNP-86
. 4                    3210                369                6.78        460          10.54        778          30.17
 
TTS BAR Rated Speed                  Design Overspeed         Destructive Overspeed (100% Speed)                      20% Speed                 100% Speed Weight          Velocity          Energy          Velocity      Energy      Velocity     Energy (lb)             (ft/s)         (106 ft-lb)       (ft/s)     (106 ft-lb)     (ft/s)     (106 ft-lb) nt No. 4.1              480              369                1.01            460            1.57        778            4.51 nt No. 4.2            2380              186                1/28            232            1.99        393            5.70 c Burst
. 5                  3980              408              10.39            499          15.35          -              -
. 5*                  3710                -                  -              -              -          752          32.59 nt No. 5.1              340              408              0.89            499            1.31        752            2.99 nt No. 5.2            1290              193              0.74            235            1.11        356            2.54 t change due to loss of blades prior to reaching destructive overspeed.
y Amendment 51 WBNP-86
 
ble 3.5-16 LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11)
Fragment              L (in)                B (in)              H (in)            Notes Number            90E Segment 1.1*                87.8                18.1                7.7                (a) 1.2                103.8                  8.5                9.4                (c) 1.3                117.1                  3.0                19.3                (c) 2.1                  95.7                12.0                8.8 2.2                  36.6                 9.4                5.6              (a,b) 2.2                  -                   9.4                5.6 2.2                  37.0                  1.9                6.5                (c) 3.1                  85.0                  9.4                5.6                (a) 3.1                  85.2                  6.1                5.2              (b,c) 3.1                  -                   9.4                5.6                (b) 3.1                  -                   6.1                5.2                (c) 3.1                  87.4                  4.0                9.8 4.1                  81.9                  4.5                4.6 4.2                  90.0                18.5                5.0 5.1                  72.8                  2.5                6.6 5.2                  74.0                14.0                4.4
*Except as indicated by the following notes, dimensions apply to 100% and 120% speed and destructive overspeed.
Notes:
Notes:
(a)100% speed(b) 120% speed(c)Destructive overspeed (190% speed)Table 3.5-16  LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11)FragmentNumber L (in)90 E Segment B (in)H (in)Notes1.1*1.2 1.3  87.8103.8117.118.1 8.5 3.0 7.7 9.419.3(a)(c)(c)2.1 2.2 2.2 2.2  95.7 36.6- 37.012.0 9.4 9.4 1.9 8.8 5.6 5.6 6.5(a,b)(c)3.1 3.1 3.1 3.1 3.1  85.0 85.2-- 87.4 9.4 6.1 9.4 6.1 4.0 5.6 5.2 5.6 5.2 9.8(a)(b,c)(b)(c)4.1 4.2  81.9 90.0 4.518.5 4.6 5.05.1 5.2  72.8 74.0 2.514.0 6.6 4.4 MISSILE PROTECTION 3.5-53WATTS BARWBNP-86 Notes:(1)For Additional Diesel Generator Building and additional Category I structures after July 1979(2)Vertical velocities of 70% of the postulated horizontal velocities are acceptable except for the 1 inch steel rod which shall have a vertical velocity equal to its horizontal velocity (167 ft/sec). These missiles are capable of striking in any horizontal or downward direction and at all elevations.Table 3.5-17  Tornado Missile Spectrum D(1)MissileDescriptionWeight (lb)
(a)100% speed (b) 120% speed (c)Destructive overspeed (190% speed) 2                                                                              MISSILE PROTECTION
CrossSectionLength (ft)HorizontalVelocity(2) (ft/sec) Wooden Plank 1154" x 12"12272 Steel Rod  91" dia 3167 6" Schedule 40 Pipe 2876" dia1517112" Schedule 40 Pipe 74312" dia15154Utility Pole112413-1/2" dia35180Automobile40006.5' x 4.3'16.5194 3.5-54MISSILE PROTECTION WATTS BARWBNP-79 Note:(1)For the Additional Diesel Generator Building and additional Category I structures added after July 1979.Table 3.5-18  Minimum Wall and Roof Thickness RequirementsTo Resist the Effects of Tornado Missile Impact (1)Tornado Intensity    Region      28-DayConcreteStrength  (PSI)   Wall Thickness  (Inches)   RoofThickness  (Inches)   Region I3000231840002016 50001814 MISSILE PROTECTION3.5-55WATTS BAR WBNP-79Figure 3.5-1  Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory Orientation
 
Table 3.5-17 Tornado Missile Spectrum D(1)
Horizontal Missile                                      Cross                                      Velocity(2)
Description            Weight (lb)             Section              Length (ft)             (ft/sec) oden Plank                  115                4" x 12"                  12                    272 el Rod                        9                 1" dia                    3                    167 Schedule 40                  287                6" dia                  15                    171 e
Schedule 40                743                12" dia                  15                    154 e
ity Pole                    1124              13-1/2" dia                35                    180 omobile                    4000                6.5' x 4.3'              16.5                   194 Notes:
(1)For Additional Diesel Generator Building and additional Category I structures after July 1979 (2)Vertical velocities of 70% of the postulated horizontal velocities are acceptable except for the 1 inch steel rod which shall have a vertical velocity equal to its horizontal velocity (167 ft/sec).
These missiles are capable of striking in any horizontal or downward direction and at all elevations.
ILE PROTECTION                                                                                        3.5-53
 
Table 3.5-18 Minimum Wall and Roof Thickness Requirements To Resist the Effects of Tornado Missile Impact(1) 28-Day Concrete                                                Roof Tornado Intensity              Strength              Wall Thickness                Thickness Region                    (PSI)                   (Inches)                   (Inches) gion I                          3000                        23                        18 4000                        20                        16 5000                        18                        14 Note:
(1)For the Additional Diesel Generator Building and additional Category I structures added after July 1979.
4                                                                                  MISSILE PROTECTION
 
WATTS BAR                                                                                                      WBNP-79 Figure 3.5-1 Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory Orientation MISSILE PROTECTION                                                                                                3.5-55
 
WATTS BAR                                                                                  WBNP-79 Figure 3.5-2 Physical Dimensions of Important Potential Turbine Missiles MISSILE PROTECTION                                                                            3.5-56
 
Security Information Withheld under 10CFR 2.390(d)(1)
WATTS BAR                                                                                                                        WBNP-79
[e5]
Figure 3.5-3 Turbine Generation Locations SECURITY SENSITIVE
[s5]
MISSILE PROTECTION                                                                                                                3.5-57
 
Security Information Withheld under 10CFR 2.390(d)(1)
WATTS BAR                                                                                                                          WBNP-41
[e5]
Figure 3.5-4 Watts Bar Nuclear Plant Layout SECURITY SENSITIVE
[s5]
MISSILE PROTECTION                                                                                                                  3.5-58
 
WATTS BAR                                                                              WBNP-41 Figure 3.5-5 Cross-Sectional Analysis of Susceptibility of Critical Components to Upward Turbine Missile Trajectories MISSILE PROTECTION                                                                        3.5-59
 
WATTS BAR                                                                                WBNP-41 Figure 3.5-6 Comparison of Missile Formulas (6-in Cylindrical Missile)
MISSILE PROTECTION                                                                          3.5-60
 
WATTS BAR                                                                                  WBNP-41 Figure 3.5-7 Comparison of Missile Formulas (l6-in Cylindrical Missile)
MISSILE PROTECTION                                                                            3.5-61
 
WATTS BAR                                                                                    WBNP-41 Figure 3.5-8 Depth of Missile Penetration for Tornado (2-in Diameter Pipe)
MISSILE PROTECTION                                                                              3.5-62
 
WATTS BAR                                                                     WBNP-41 Figure 3.5-9 Depth of Missile Penetration for Tornado (2X4)
MISSILE PROTECTION                                                                3.5-63
 
WATTS BAR                                        WBNP-51 Figure 3.5-10 LP Disc Missiles MISSILE PROTECTION                                  3.5-64
 
WATTS BAR                                                          WBNP-51 Figure 3.5-11 LP Cylinder & Blade Ring Fragments MISSILE PROTECTION                                                    3.5-65
 
WATTS BAR                                        WBNP-51 THIS PAGE INTENTIONALLY BLANK MISSILE PROTECTION                                  3.5-66


MISSILE PROTECTION3.5-56WATTS BAR WBNP-79Figure 3.5-2  Physical Dimensions of Important Potential Turbine Missiles MISSILE PROTECTION3.5-57WATTS BAR WBNP-79Security Information Withheld under 10CFR 2.390(d)(1)
A ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES A. Jet Stream Relations For steady flow, assuming bulk properties across a cross section of a "free jet," the following conservation relations hold between the orifice and any downstream position.
[s5]SECURITY SENSITIVEFigure 3.5-3  Turbine Generation Locations[e5]
Continuity in axial direction:
MISSILE PROTECTION3.5-58WATTS BAR WBNP-41Security Information Withheld under 10CFR 2.390(d)(1)
(1)
[s5]SECURITY SENSITIVEFigure 3.5-4  Watts Bar Nuclear Plant Layout[e5]
* W = G o A o = GA = PV zA From conservation of axial momentum:
MISSILE PROTECTION3.5-59WATTS BAR WBNP-41Figure 3.5-5  Cross-Sectional Analysis of Susceptibility of CriticalComponents to Upward Turbine Missile Trajectories MISSILE PROTECTION3.5-60WATTS BAR WBNP-41Figure 3.5-6  Comparison of Missile Formulas (6-in Cylindrical Missile)
                                              *
MISSILE PROTECTION3.5-61WATTS BAR WBNP-41Figure 3.5-7  Comparison of Missile Formulas (l6-in Cylindrical Missile)
* G o V o W
MISSILE PROTECTION3.5-62WATTS BAR WBNP-41Figure 3.5-8  Depth of Missile Penetration for Tornado (2-in Diameter Pipe)
(2)              Tj = Po Ao + W----- V o = PA + ----- V z =  P o + -------------- A g                g                      g  o Where, W = mass discharge rate A = area of jet stream Vz = axial fluid velocity P = fluid pressure G = mass flux rate
MISSILE PROTECTION3.5-63WATTS BAR WBNP-41Figure 3.5-9  Depth of Missile Penetration for Tornado (2X4)
                = fluid density Tj = total jet thrust G o = 0.61 2pg ( P r - P o )
MISSILE PROTECTION3.5-64WATTS BAR WBNP-51Figure 3.5-10  LP Disc Missiles MISSILE PROTECTION3.5-65WATTS BAR WBNP-51Figure 3.5-11  LP Cylinder & Blade Ring Fragments MISSILE PROTECTION3.5-66WATTS BAR WBNP-51THIS PAGE INTENTIONALLY BLANK ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES 3.5A-1WATTS BARWBNP-86 3.5A  ESTIMATES OF VELOCITI ES OF JET PROPELLED MISSILESA. Jet Stream RelationsFor steady flow, assuming bulk properties across a cross section of a "free jet," the following conservation relations hold between the orifice and any downstream position.Continuity in axial direction:From conservation of axial momentum:Where,W = mass discharge rate A = area of jet stream
MATES OF VELOCITIES OF JET PROPELLED MISSILES                                                    3.5A-1


V z = axial fluid velocityP = fluid pressure
2g ( P r - P o )
Vo =      ------------------------------
Po = orifice pressure Pr = reservoir pressure Subscript o refers to orifice conditions.
These relations indicate that mass flow rate and axial jet force are constant at any downstream plane even though pressure, area, density, and fluid velocity change from one downstream position to another.
B. Missile Acceleration Assuming that fluid impinging on missile imparts all of its axial momentum to the missile and splashes radially out of the stream, the force balance on the missile is:
W dV m                          G
                  ----- ------------ = f ( z ) P + ---- ( V z - V m ) A3 g dt                            g Where, f(z) = represents the fraction of the jet impinging W    = missile weight Vm = missile velocity For no expansion of jet, f(z) = 1, A = Ao (Am  Ao is assumed)
-2                                                            ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES


G = mass flux rate
C. Effect on Jet Radial Expansion For the general case, the missile would not receive the full thrust of the jet throughout its travel, and an estimate of f(z) with downstream distance is needed. For a first approximation, it is assumed that the jet expands with a constant half angle and that the thrust fraction, f(z), impinging on the missile is:
= fluid density T j = total jet thrust W*G o A oGAPVA z===(1)T j P o A o W*g-----+V o PA=W*g-----V z P o G o V o g--------------
f( z) = 1              forA m  A ( z )
+A o=+=(2)G o0.612pgP r P o-=
f ( z ) = Am  A ( z )  forA m  A ( z )
3.5A-2ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES WATTS BARWBNP-92 P o = orifice pressure P r = reservoir pressureSubscript o refers to orifice conditions.
Where, A(z)= (Ro + Z tan )2 MATES OF VELOCITIES OF JET PROPELLED MISSILES                                              3.5A-3
These relations indicate that mass flow rate and axial jet force are constant at any downstream plane even though pressure, area, density, and fluid velocity change from one downstream position to another.B. Missile AccelerationAssuming that fluid impinging on missile imparts all of its axial momentum to the missile and splashes radially out of the stream, the force balance on the missile is:(3)3Where,f(z) = represents the fraction of the jet impinging W    = missile weight


V m  = missile velocityFor no expansion of jet, f(z) = 1, A = A o  (A m  A o is assumed)
THIS PAGE INTENTIONALLY BLANK ection_3_A.book
V o 2 gP r P o-------------------------------
-4                          ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES}}
=W g-----dV m dt------------fzP G g----V z V m-+A=
ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES 3.5A-3WATTS BARWBNP-86C. Effect on Jet Radial ExpansionFor the general case, the missile would not receive the full thrust of the jet throughout its travel, and an estimate of f(z) with downstream distance is needed. For a first approximation, it is assumed that the jet expands with a constant half angle and that the thrust fraction, f(z), impinging on the missile is:Where, A(z)= (R o + Z tan )2 fz1=forA m Az fzA m Az=forA m Az 3.5A-4ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES WATTS BARWBNP-86THIS PAGE INTENTIONALLY BLANK009_TVA_WB_FSAR_Section_3_A.book}}

Latest revision as of 16:31, 12 March 2020

Final Safety Analysis Report, Amendment 92, Section 3, Design of Structures, Components, Equipment, and Systems
ML090340707
Person / Time
Site: Watts Bar Tennessee Valley Authority icon.png
Issue date: 12/18/2008
From:
Tennessee Valley Authority
To:
Office of Nuclear Reactor Regulation
References
Download: ML090340707 (188)
v • d • e


Text

tion Title Page DESIGN OF STRUCTURES, COMPONENTS, EQUIPMENT, AND SYSTEMS CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-1 1 Introduction 3.1-1 2 WBNP Conformance with GDCs 3.1-1 2.1 Overall Requirements 3.1-1 2.2 Protection By Multiple Fission Product Barriers 3.1-5 2.3 Protection and Reactivity Control Systems 3.1-12 2.4 Fluid Systems 3.1-17 2.5 Reactor Containment 3.1-30 2.6 Fuel and Radioactivity Control 3.1-35 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-1 1 Seismic Classifications 3.2-1 2 System Quality Group Classification 3.2-1 2.1 Class A 3.2-2 2.2 Class B 3.2-2 2.3 Class C 3.2-2 2.4 Class D 3.2-2 2.5 Relationship of Applicable Codes to Safety Classification for Mechanical Com-ponents 3.2-3 2.6 Nonnuclear Safety Class (NNS) 3.2-3 2.7 Heating, Ventilation and Air Conditioning (HVAC) Safety Classification 3.2-3 3 Code Cases and Code Editions and Addenda 3.2-3 3.1 TVA Design and Fabrication 3.2-3 3.2 Purchased Materials and Components 3.2-4 Wind and Tornado Loading 3.3-1 1 Wind Loadings 3.3-1 1.1 Design Wind Velocity 3.3-1 1.2 Determination of Applied Force 3.3-1 2 Tornado Loadings 3.3-1 2.1 Applicable Design Parameters 3.3-1 2.2 Determination of Forces on Structures 3.3-2 2.3 Ability of Category I Structures to Perform Despite Failure of Structures Not Designed for Tornado Loads 3.3-3 WATER LEVEL (FLOOD) DESIGN 3.4-1 1 Flood Protection 3.4-1 2 Analysis Procedure 3.4-1 MISSILE PROTECTION 3.5-1 1 Missile Selection and Description 3.5-2 UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-i

tion Title Page 1.1 Internally Generated Missiles (Outside Containment) 3.5-2 1.2 Internally Generated Missiles (Inside Containment) 3.5-5 1.3 Turbine Missiles 3.5-9 1.4 Missiles Generated By Natural Phenomena 3.5-27 1.5 Missiles Generated by Events Near the Site. 3.5-28 1.6 Aircraft Hazards 3.5-28 2 Systems To Be Protected 3.5-29 3 Barrier Design Procedures 3.5-29 3.1 Additional Diesel Generator Building (And Other Category I Structures Added After July 1979) 3.5-32 A ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES 3.5A-1 UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-ii

tion Title le 3.2-1 Category I Structures le 3.2-2 Summary of Criteria - Mechanical System Components le 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd) le 3.2-2b Classification of Systems Not Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below) le 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" le 3.2-4 Summary of Codes and Standards for Safety Class Compo-nents of The Watts Bar Nuclear Plant Code Requirements le 3.2-5 Non-Nuclear Safety Classifications le 3.2-6 TVA Heating, Ventilation, and Air Conditioning Classifications le 3.2-7 Code Cases and Provisions of Later Code Editions and Addenda Used By TVA for Design and Fabrication le 3.5-1 Summary of Postulated CRDM Missile Analysis le 3.5-2 Typical Postulated Valve Missile Characteristics le 3.5-3 Postulated Piping Temperature Element Assembly Missile Characteris-tics le 3.5-4 Characteristics of Other Missiles Postulated Within Reactor Contain-ment le 3.5-5 Deleted by Amendment 71; See Section 10.2.3.1 le 3.5-6 Tabulated Calculation of the Probability of Event H - The Receipt of Unacceptable Damage le 3.5-7 Tornado Missile Spectrum A for Category I Structures(1) le 3.5-8 Tornado Missile Spectrum B Diesel Generator Building Equipment Doors(1) le 3.5-9 Tornado Missile Spectrum C for Category I Structures(1) le 3.5-10 Tabulation of the Probability of Receipt of Unacceptable Damage - Per Critical Structure le 3.5-11 Postulated CRDM Missile Characteristics le 3.5-12 Typical Postulated Valve Missile Characteristics le 3.5-13 Postulated Piping Temperature Element Assembly Missile Characteris-tics le 3.5-14 Outdoor Safety-Related Features(1) (Including Air Intakes and Ex-hausts) le 3.5-15 Exit Missile Properties For Low-Pressure Discs (And Fragments) - All Low Pressures Exit Missile Properties For No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) le 3.5-16 LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11) le 3.5-17 Tornado Missile Spectrum D(1) le 3.5-18 Minimum Wall and Roof Thickness Requirements To Resist the Effects of Tornado Missile Impact(1)

UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-iii

tion Title UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-iv

tion Title ure 3.3-1 Variations of Differential Pressure and Tangential Plus Translational Velocity as a Function of the Distance from the Center of a Tornado ure 3.5-1 Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory Orientation ure 3.5-2 Physical Dimensions of Important Potential Turbine Missiles ure 3.5-3 Turbine Generation Locations ure 3.5-4 Watts Bar Nuclear Plant Layout ure 3.5-5 Cross-Sectional Analysis of Susceptibility of Critical Components to Upward Turbine Missile Trajectories ure 3.5-6 Comparison of Missile Formulas (6-in Cylindrical Missile) ure 3.5-7 Comparison of Missile Formulas (l6-in Cylindrical Missile) ure 3.5-8 Depth of Missile Penetration for Tornado (2-in Diameter Pipe) ure 3.5-9 Depth of Missile Penetration for Tornado (2X4) ure 3.5-10 LP Disc Missiles ure 3.5-11 LP Cylinder & Blade Ring Fragments UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-v

tion Title UIREMENTS FOR FURTHER TECHNICAL INFORMATION 3.0-vi

ection_3_A.book DESIGN OF STRUCTURES, COMPONENTS, EQUIPMENT, AND SYSTEMS CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

.1 Introduction The Watts Bar Nuclear Power plant was designed to meet the intent of the "Proposed General Design Criteria for Nuclear Power Plant Construction Permits" published in July, 1967. The Watts Bar construction permit was issued in January, 1973. This FSAR, however, addresses the NRC General Design Criteria (GDC) published as Appendix A to 10 CFR 50 in July, 1971, including Criterion 4 as amended October 27, 1987.

Each criterion is followed by a discussion of the design features and procedures which meet the intent of the criteria. Any exception to the 1971 GDC resulting from the earlier commitments is identified in the discussion of the corresponding criterion. References to other sections of the FSAR are given for system design details.

.2 WBNP Conformance with GDCs

.2.1 Overall Requirements Criterion 1 - Quality Standards and Records Structures, systems, and components important to safety shall be designed, fabricated, erected, and tested to quality standards commensurate with the importance of the safety functions to be performed. Where generally recognized codes and standards are used, they shall be identified and evaluated to determine their applicability, adequacy, and sufficiency and shall be supplemented or modified as necessary to assure a quality product in keeping with the required safety function. A Quality Assurance Program shall be established and implemented in order to provide adequate assurance that these structures, systems, and components will satisfactorily perform their safety function. Appropriate records of the design, fabrication, erection and testing of structures, systems, and components important to safety shall be maintained by or under the control of the nuclear power unit licensee throughout the life of the unit.

Compliance Discussions related to the applicable codes, design criteria and standards used in the design of particular systems are contained in the appropriate SAR sections and in Tables 3.2-1, 3.2-2, 3.2-3, 3.2-4 and 3.2-5.

The Quality Assurance Program conforms to the requirements of 10 CFR 50 Appendix B, "Quality Assurance Criteria for Nuclear Power Plants." Details of the program are given in Chapter 17.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-1

Criterion 2 - Design Bases for Protection Against Natural Phenomena Structures, systems, and components important to safety shall be designed to withstand the effects of natural phenomena such as earthquakes, tornadoes, hurricanes, floods, tsunami, and seiches without loss of capability to perform their safety functions. The design bases for these structures, systems, and components shall reflect:

(1) Appropriate consideration of the most severe of the natural phenomena that have been historically reported for the site and surrounding area, with sufficient margin for the limited accuracy, quantity, and period of time in which the historical data have been accumulated, (2) Appropriate combinations of the effects of normal and accident conditions with the effects of the natural phenomena, and (3) The importance of the safety functions to be performed.

Compliance The structures, systems, and components important to safety are designed to either withstand the effects of natural phenomena without loss of capability to perform their safety functions, or to fail in the safest condition. Those structures, systems, and components vital to the shutdown capability of the reactor are designed to withstand the maximum probable natural phenomenon expected at the site, determined from recorded data for the site vicinity, with appropriate margin to account for uncertainties in historical data. Appropriate combinations of normal, accident, and natural phenomena structural loadings are considered in the plant design.

The nature and magnitudes of the natural phenomena considered in the design of the plant are discussed in Sections 2.3, 2.4, and 2.5. Sections 3.2 through 3.10 discuss the design of the plant in relationship to natural events. Seismic and safety classifications, as well as other pertinent standards and information, are given in the sections discussing individual structures and components.

Criterion 3 - Fire Protection Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions. Noncombustible and heat-resistant materials shall be used wherever practical throughout the unit, particularly in locations such as the containment and control room. Fire detection and fighting systems of appropriate capacity and capability shall be provided and designed to minimize the adverse effects of fires on structures, systems, and components important to safety. Fire-fighting systems shall be designed to assure that their rupture or inadvertent operation does not significantly impair the safety capability of these structures, systems, and components.

CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Compliance The plant is designed to minimize the probability of fires and explosions, and in the event of such occurrences to minimize the potential effects of such events to plant safety related equipment and personnel. Prime consideration was given to these requirements throughout the design process by providing for the duplication and physical separation of components in plant design and the use of materials classified as noncombustible and/or fire resistant wherever practical in safety-related areas of the plant. Equipment and facilities for fire protection, including detection, alarm, and extinguishment, are provided to protect both plant-equipment and personnel from fire, explosion, and the resultant release of toxic vapors. Fire-fighting systems are designed to assure that their rupture or inadvertent operation will not significantly impair systems important to safety. Portions of the fire-protection systems necessary to protect safety-related equipment in Class I structures are designed to seismic requirements.

The Fire Protection Systems provided are:

(1) High pressure water, (2) Carbon dioxide, and (3) Portable extinguishers.

The Fire Protection System is designed such that a failure of any component of the system or inadvertent operation:

(1) Does not cause a nuclear accident or significant release of radioactivity to the environment.

(2) Does not impair the ability of equipment to safely shutdown and isolate the reactor or limit the releases of radioactivity to the environment in the event of a postulated accident.

The Fire Protection Systems for the Watts Bar Nuclear Plant are discussed in Section 9.5.1. Protection from fire in the control room is discussed in Section 6.4.

Criterion 4 - Environmental and Missile Design Bases Structures, systems, and components important to safety shall be designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents, including loss-of-coolant accidents (LOCAs). These structures, systems, and components shall be appropriately protected against dynamic effects, including the effects of missiles, pipe whipping, and discharging fluids, that may result from equipment failures and from events and conditions outside the nuclear power unit.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-3

Compliance This criterion has been implemented as amended and published in the Federal Register, Volume 52, Number 207, October 27, 1987, 41288, which added the following:

"However, dynamic effects associated with postulated pipe ruptures in nuclear power units may be excluded from the design basis when analyses reviewed and approved by the Commission demonstrate that the probability of fluid system piping rupture is extremely low under conditions consistent with the design basis for the piping."

Structures, systems, and components important to safety are designed to accommodate the effects of and to be compatible with the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents.

The associated environmental parameters are identified and incorporated in the design requirements and specifications. Particular care was given to the extreme environmental conditions associated with major incidents such as LOCAs. Required equipment and instrumentation are identified, environmental conditions such as temperature, pressure, humidity, and irradiation, are calculated, and the effects of the latter on the former were evaluated either analytically or experimentally. The dynamic effects associated with an accident were carefully identified and assurance given that the structures and systems (including engineered safeguards) assumed undamaged in the total assessment of the accident consequences are suitably protected.

Emergency core cooling components are austenitic stainless steel or equivalent corrosion resistant material and hence are compatible with the containment atmosphere over the full range of exposure during the postaccident conditions.

Where vital components cannot be located away from potential missiles, protective walls and slabs, local missile shielding, and restraining devices are provided to protect the containment and engineered safety feature components within the containment against damage from missiles generated by the equipment failures associated with the design basis accident (DBA).

The environmental design of safety-related items is discussed in Section 3.8 on the design of structures; Sections 6.2.2 and 6.2.3 on containment heat removal and air purification; and Section 9.4 on ventilation systems. Safety- related systems and components used the input from these sections for design as discussed in Section 3.11. Missile and environmental protection is discussed in Sections 3.5 and 3.11, respectively.

Criterion 5 - Sharing of Structures, Systems, and Components Structures, systems, and components important to safety shall not be shared among nuclear power units unless it is shown that such sharing will not impair significantly their ability to perform their safety functions, including, in the event of an accident in one unit, an orderly shutdown and cooldown of the remaining units.

CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Compliance The structures important to safety that are shared are the Auxiliary Building (Section 3.8), Control Building (Section 3.8), Diesel Generator Building (Section 3.8), and the intake pumping station (Section 3.8). Shared safety- related systems include the essential raw cooling water (Section 9.2), component cooling water (Section 9.2), fire protection (Section 9.5), spent fuel cooling (Section 9.1), fuel oil storage tanks (Section 9.5), preferred and emergency electric power (Section 8.2 and 8.3, respectively),

chemical and volume control (Section 9.3), radioactive waste (Chapter 11), emergency gas treatment system (Sections 6.2 and 6.5), and control and Auxiliary Building ventilation systems (Section 6.4). The vital dc power system is shared to the extent that a few loads (e.g., the vital inverters) in one nuclear unit are energized by the dc power channels assigned primarily to power loads of the other unit. In no case does the sharing inhibit the safe shutdown of one unit while the other unit is experiencing an accident. All shared systems are sized for all credible initial combinations of normal and accident states for the two units, with appropriate isolation to prevent an accident condition in one unit from carrying into the other. During the period of time when unit 1 is licensed and unit 2 is unlicensed, all portions of systems and structures important to the safe operation and safe shutdown of unit 1 will be isolated and protected. For systems which are shared and have interface points, a means is provided for isolating and protecting the portions required for unit 1 operation and safe shutdown from the balance of the unit 2 systems which are not necessary or desirable for the operation and/or safe shutdown of unit 1.

If the designated equipment configuration is revised to allow system testing or modification, appropriate action will be taken to ensure that the required system availability for accident mitigation is maintained.

.2.2 Protection By Multiple Fission Product Barriers Criterion 10 - Reactor Design The reactor core and associated coolant, control, and protection systems shall be designed with appropriate margin to assure that specified acceptable fuel design limits are not exceeded during any condition of normal operation, including the effects of anticipated operational occurrences.

Compliance The reactor core with its related coolant, control, and protection systems is designed to function throughout its design lifetime without exceeding acceptable fuel damage limits. The reactor trip system is designed to actuate a reactor trip for any anticipated combination of plant conditions when necessary to ensure that fuel design limits are not exceeded. The core design, together with reliable process and decay heat removal systems, provides for this capability under all expected conditions of normal operation with appropriate margins for uncertainties and anticipated transient situations, including the effects of loss of reactor coolant flow, trip of the turbine-generator, loss of normal feedwater and loss of both normal and preferred power sources.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-5

Chapter 4 discusses the design bases and design evaluation of reactor components.

Chapter 5 discusses the reactor coolant system. The details of the reactor trip and engineered safety features actuation system design and logic are discussed in Chapter 7. This information supports the accident analyses presented in Chapter 15.

Criterion 11 - Reactor Inherent Protection The reactor core and associated coolant systems shall be designed so that in the power operating range the net effect of the prompt inherent nuclear feedback characteristics tends to compensate for a rapid increase in reactivity.

Compliance A negative reactivity coefficient is a basic feature of core nuclear design as discussed in Chapter 4.

Criterion 12 - Suppression of Reactor Power Oscillations The reactor core and associated coolant, control and protection systems shall be designed to assure that power oscillations which can result in conditions exceeding specified acceptable fuel design limits are not possible or can be reliably and readily detected and suppressed.

Compliance Power oscillations of the fundamental mode are inherently eliminated by the negative Doppler and nonpositive moderator temperature coefficients of reactivity.

Oscillations due to xenon spatial effects in the radial, diametral and azimuthal overtone modes are heavily damped due to the inherent design and due to the negative Doppler and nonpositive moderator temperature coefficients of reactivity.

Oscillations due to xenon spatial effects in the axial first overtone mode may occur.

Assurance that fuel design limits are not exceeded by xenon axial oscillations is provided as a result of reactor trip functions using the measured axial power imbalance as an input.

Oscillations due to xenon spatial effects in axial modes higher than the first overtone are heavily damped due to the inherent design and due to the negative Doppler coefficient of reactivity.

The stability of the core against xenon-induced power oscillations and the functional requirements of instrumentation for monitoring and measuring core power distribution are discussed in Section 4.3. Details of the instrumentation design and logic are discussed in Chapter 7.

Criterion 13 - Instrumentation and Control Instrumentation shall be provided to monitor variables and systems over their anticipated ranges for normal operation, for anticipated operational occurrences, and for accident conditions as appropriate to assure adequate safety, including those CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

variables and systems that can affect the fission process, the integrity of the reactor core, the reactor coolant pressure boundary, and the containment and its associated systems. Appropriate controls shall be provided to maintain these variables and systems within prescribed operating ranges.

Compliance Instrumentation and controls are provided to monitor and control neutron flux, control rod position, temperatures, pressures, flows, and levels as necessary to assure that adequate plant safety can be maintained. Instrumentation is provided in the reactor coolant system, steam and power conversion system, the containment, engineered safety features systems, radiological waste systems and other auxiliaries. Parameters that must be provided for operator use under normal operating and accident conditions are indicated in the control room in proximity with the controls for maintaining the indicated parameter in the proper range.

The quantity and types of process instrumentation provided measures safe and orderly operation of all systems over the full design range of the plant. These systems are described in Chapters 6, 7, 8, 9, 11 and 12.

Criterion 14 - Reactor Coolant Pressure Boundary The reactor coolant pressure boundary shall be designed, fabricated, erected, and tested so as to have an extremely low probability of abnormal leakage, or rapidly propagating failure, and of gross rupture.

Compliance The reactor coolant pressure boundary is designed to accommodate the system pressures and temperatures attained under all expected modes of plant operation, including all anticipated transients, and to maintain the stresses within applicable stress limits. In addition to the loads imposed on the piping under operating conditions, consideration is also given to abnormal loadings, such as pipe rupture and seismic loadings as discussed in Sections 3.6 and 3.7, respectively. The piping is protected from overpressure by means of pressure relieving devices as required by applicable codes.

Reactor coolant pressure boundary materials selection and fabrication techniques ensure a low probability of gross rupture or significant leakage.

The materials of construction of the reactor coolant pressure boundary are protected by control of coolant chemistry from corrosion which might otherwise reduce the structural integrity of the boundary during its service lifetime.

The reactor coolant pressure boundary has provisions for inspections, testing and surveillance of critical areas to assess the structural and leak tight integrity. The details are given in Section 5.2. For the reactor vessel, a material surveillance program conforming to applicable codes is provided.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-7

Means are provided to detect significant uncontrolled leakage from the reactor coolant pressure boundary with indication in the control room as discussed in Section 5.2.

Criterion 15 - Reactor Coolant System Design The reactor coolant system and associated auxiliary, control, and protection systems shall be designed with sufficient margin to assure that the design conditions of the reactor coolant pressure boundary are not exceeded during any condition of normal operation, including anticipated operational occurrences.

Compliance Transient analyses presented in Section 5.2 lead to the conclusion that design conditions are not exceeded during normal operation. Protection and control set points are based on these transient analyses.

Additionally, reactor coolant pressure boundary components achieve a large margin of safety by the use of proven ASME materials and design codes, use of proven fabrication techniques, nondestructive shop testing and integrated hydrostatic testing of assembled components.

The effect of radiation embrittlement is considered in reactor vessel design, and surveillance samples monitor adherence to expected conditions throughout plant life.

Multiple safety and relief valves are provided for the reactor coolant system. These valves and their set points meet ASME criteria for over-pressure protection. The ASME criteria are satisfactory based on a long history of industry use. Chapter 5 discusses reactor coolant system design.

Criterion 16 - Containment Design Reactor containment and associated systems shall be provided to establish an essentially leaktight barrier against the uncontrolled release of radioactivity to the environment and to assure that the containment design conditions important to safety are not exceeded for as long as postulated accident conditions require.

Compliance The reactor containment (Section 6.2) is a freestanding, continuous steel membrane structure housing the reactor and various auxiliary components including the ice condenser. The ice condenser (Section 6.7) limits the initial containment pressure to a value less than design during a large LOCA. A concrete ShieldBuilding surrounding the steel vessel allows for collection of any containment leakage, which is subsequently processed by the emergency gas treatment system (Section 6.5) before release to the environment. The containment also contains a spray system (Section 6.2) which supplements the ice condenser in limiting pressure and which also provides long-term cooling following a LOCA. The design pressure is not exceeded in any pressure transients which result from combining the effects of heat sources with minimal operation of the engineered safety features.

CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

The containment system is designed to provide for protection of the public from the consequences of a LOCA based on a postulated break of the reactor coolant piping up to and including a doubled-ended break of the largest reactor coolant pipe. Periodic containment leak rate measurements ensure that the leaktight barrier is maintained.

Criterion 17 - Electric Power Systems An onsite electric power system and an offsite electric power system shall be provided to permit functioning of structures, systems, and components important to safety. The safety function for each system (assuming the other system is not functioning) shall be to provide sufficient capacity and capability to assure that (1) specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.

The onsite power sources, including the batteries, and the onsite electric distribution system, shall have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure.

Electric power from the transmission network to the onsite electric distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights of way) designed and located so as to minimize to the extent practical the likelihood of their simultaneous failure under operating and postulated accident and environmental conditions. A switchyard common to both circuits is acceptable. Each of these circuits shall be designed to be available in sufficient time following a loss of all onsite alternating current power supplies and the other offsite electric power circuit, to assure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded. One of these circuits shall be designed to be available within a few seconds following a LOCAt to assure that core cooling, containment integrity, and other vital safety functions are maintained.

Provisions shall be included to minimize the probability of losing electric power from any of the remaining sources as a result of, or coincident with, the loss of power generated by the nuclear power unit, the loss of power from the transmission network, or the loss of power from the onsite electric power sources.

Compliance The capacity and capability of either the onsite or offsite electric power system is sufficient to assure that (1) specified fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.

Offsite Electrical Power System The offsite electrical power source consists of two physically independent circuits which are energized and available. The offsite sources are two independent 161-kV transmission lines terminating at the 161-kV switchyard, providing power to the plant, FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-9

on demand, via the common station service transformers to the onsite Class 1E distribution system.

Onsite Electrical Power System The onsite electrical power system serves both nuclear power units and certain common plant equipment. It consists of two independent diesel generator systems, each system containing two diesel generator units, two redundant Class 1E electric power distribution trains, and four redundant vital instrument and control power channels, each provided with an uninterruptible ac power supply and distribution panel. A plant Class 1E dc power system is provided with four redundant divisions, each consisting of a battery, battery charger, and distribution panel. Each redundant onsite power supply, train, and channel has the capability and capacity to supply the required safety loads assuming the failure of its redundant counterpart.

For a detailed description and analysis of the offsite electrical power system and onsite electrical power system, see Sections 8.2 and 8.3, respectively.

Criterion 18 - Inspection and Testing of Electric Power Systems Electric power systems important to safety shall be designed to permit appropriate periodic inspection and testing of important areas and features, such as wiring, insulation, connections, and switchboards, to assess the continuity of the systems and the condition of their components. The systems shall be designed with a capability to test periodically (1) the operability and functional performance of the components of the systems, such as onsite power sources, relays, switches, and buses, and (2) the operability of the systems as a whole and, under conditions as close to design as practical, the full operation sequence that brings the systems into operation, including operation of applicable portions of the protection system, and the transfer of power among the nuclear power unit, the offsite power system, and the onsite power system.

Compliance Inspection In addition to continuous surveillance by visual and audible alarms for any abnormal condition, the onsite power system is designed to permit inspection and checking of wiring, insulation, connections, and switchboards to the extent that personnel safety is not jeopardized, equipment not damaged, and the plant not exposed to accidental tripping.

On-Line Testing The onsite power system is designed with provision for periodic testing during normal operation with the unit on line, to the extent that the plant is not exposed to accidental tripping and the reliability of the safety system not degraded. These features include provisions for starting and loading of onsite emergency diesel generators, and starting and loading of individual or groups of engineered safeguards to their respective buses.

The system is also designed to permit testing of larger integrated segments of the system during planned cooldown of the reactor coolant system.

0 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Off-Line Testing The onsite power system is designed with facilities for a complete test of the operability of the system as a whole from initiation of protection system, starting and loading of the diesel generators, transfer of power sources and the full operational sequence of engineered safety features.

Inspection and testing of electrical power systems is further described in Sections 8.3.1.1 and 8.3.2.1.

Criterion 19 - Control Room A control room shall be provided from which actions can be taken to operate the nuclear power unit safely under normal conditions and to maintain it in a safe condition under accident conditions including LOCAs. Adequate radiation protection shall be provided to permit access and occupancy of the control room under accident conditions without personnel receiving radiation exposures in excess of 5 rem whole body, or its equivalent to any part of the body, for the duration of the accident.

Equipment at appropriate locations outside the control room shall be provided (1) with a design capability for prompt hot shutdown of the reactor, including necessary instrumentation and controls to maintain the unit in a safe condition during hot shutdown, and (2) with a potential capability for subsequent cold shutdown of the reactor through the use of suitable procedures.

Compliance The plant is provided with a separate structure designated as the Control Building.

Within the Control Building are located control rooms, auxiliary instrument room, computer room, battery and dc equipment rooms (including space for instrument motor generator, etc), switchyard relay room, plant communications room and service facilities such as shift engineer office, kitchen, instrument shop, toilet facilities, and mechanical equipment room for heating, ventilating, and air conditioning equipment.

The main control room was provided with unit control panels for each of the two units, the switchyard, electrical recording, dc distribution, operation of the diesel generator system, and for those systems shared by the two units. The unit control panels contain those instruments and controls necessary for operation of the unit, functions such as the reactor and its auxiliary system, turbine generator, and the steam and power conversion systems. Selection of loading from the various plant electrical distribution boards such as the startup boards, common service board, shutdown boards, and motor control centers is accomplished from the unit control panels.

The control room is designed and equipped to minimize the effects of possible events such as fire, high radiation levels, and excessive temperature which might preclude occupancy. The main control room is continuously occupied by qualified operating personnel under all operating and accident conditions except in the case of events such as fire or smoke which could necessitate its evacuation. In the unlikely event that control room occupancy becomes impossible, provisions have been made to bring the reactor units to, and maintain them in, a hot shutdown condition, from a location FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-11

external to the main control room. By use of appropriate procedures and available equipment, the unit can also be brought to cold shutdown conditions.

Sufficient shielding, distance, and containment integrity are provided to assure that under postulated accident conditions control room personnel shall not be subjected to radiation doses which would exceed 5 rem to the whole body, or its equivalent to any part of the body, including doses received during both ingress and egress. Control room ventilation is provided by a system having a large percentage of recirculated air.

After an accident, makeup air is automatically routed through a system of HEPA and charcoal filters.

The design of the control room for occupancy during accidents is discussed in Section 6.4. The heating, ventilation, and air conditioning of the Control Building is discussed in Section 9.4. Radiation doses to control personnel following a LOCA are evaluated in Section 15.5.3. Radiation protection design features are discussed in Section 12.3.

.2.3 Protection and Reactivity Control Systems Criterion 20 - Protection System Functions The protection system shall be designed (1) to initiate automatically the operation of appropriate systems including the reactivity control systems, to assure that specified acceptable fuel design limits are not exceeded as a result of anticipated operational occurrences and (2) to sense accident conditions and to initiate the operation of systems and components important to safety.

Compliance A fully automatic protection system (with appropriate redundant channels) is provided to cope with transients where insufficient time is available for manual corrective action.

The design basis for all protection systems is in accord with IEEE Standard 279-1971.

The reactor trip system automatically initiates a reactor trip when any appropriate monitored variable or combination of variables exceed the normal operating range.

Setpoints are chosen to provide an envelope of safe operating conditions with adequate margin for uncertainties to ensure that fuel design limits are not exceeded.

Reactor trip is initiated by removing power to the rod drive mechanisms of all the full length rod cluster control assemblies. This will allow the assemblies to free fall into the core, rapidly reducing reactor power output.

The engineered safety features actuation system automatically initiates emergency core cooling, and other safeguards functions, by sensing accident conditions using redundant process protection system channels measuring diverse parameters.

Manual actuation of safeguards is relied upon where ample time is available for operator action. The ESF actuation system also provides a reactor trip on manual or automatic safety injection (S) signal generation.

The response and adequacy of the protection systems is analyzed for all conditions specified by the ANS N18.2 standard through Condition IV.

2 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

For further discussion of the reactor trip system and engineered safety features actuation system, see Sections 7.2 and 7.3, respectively.

Criterion 21 - Protection System Reliability and Testability The protection system shall be designed for high functional reliability and inservice testability commensurate with the safety functions to be performed. Redundancy and independence designed into the protection system shall be sufficient to assure that (1) no single failure results in loss of protection function and (2) removal from service of any component or channel does not result in a loss of the required minimum redundancy unless the acceptable reliability of operation of the protection can be otherwise demonstrated. The protection system shall be designed to permit periodic testing of its functioning when the reactor is in operation, including a capability to test channels independently to determine failures and losses of redundancy that may have occurred.

Compliance The protection system is designed for high functional reliability and inservice testability.

The design employs redundant logic trains, and measurement and equipment diversity.

The protection system is designed in accordance with IEEE Standard 279-1971. All safety actuation circuitry is provided with a capability for testing with the reactor at power. The protection systems, including the process protection system, nuclear instrumentation system and the engineered safety features test cabinet comply with Regulatory Guide 1.22 on periodic testing of protection system actuation functions.

Under the present design, there are protective functions which are not tested at power.

The functions can be tested under shutdown plant conditions, so that they do not interrupt power operation, as allowed by Regulatory Guide 1.22. For those process protection functions that may be tested in bypass, alarms are provided in the control room and at the process rack to indicate the bypassed condition. Additional information on the capability of the process protection system to be tested in the bypassed mode is provided in Section 7.2.2.2, Subsections 10, 11, 12, 13 and 14.

In those cases where equipment cannot be tested at power, it is only the actuation device function which is not tested. The logic associated with the actuation devices has the capability for testing at power. Such testing will disclose failures or reduction in redundancy which may have occurred. Removal from service of any single channel or component does not result in loss of minimum required redundancy. For example, a two-of-three function becomes a one-of-two function when one channel is removed.

(Note that this is not true for the logic trains which are effectively a one-out-of-two logic).

Semiautomatic testers are built into each of the two logic trains in a protection system.

These testers have the capability of testing the major part of the protection system very rapidly while the reactor is at power. Between tests, a number of internal protection system points including the associated power supplies and fuses are continuously monitored. Outputs of the monitors are logically processed to provide alarms for FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-13

failures in one train and automatic reactor trip for failures in both trains. Self-testing provision is designed into each tester. Additional details can be found in Sections 7.2 and 7.3.

Criterion 22 - Protection System Independence The protection system shall be designed to assure that the effects of natural phenomena, and of normal operating, maintenance, testing, and postulated accident conditions on redundant channels do not result in loss of the protection function, or shall be demonstrated to be acceptable on some other defined basis. Design techniques, such as functional diversity or diversity in component design and principles of operation, shall be used to the extent practical to prevent loss of the protection function.

Compliance Design of protection systems includes consideration of natural phenomena, normal maintenance, testing and accident conditions such that the protection functions are always available.

Sufficient redundancy and independence is designed into the protection system to assure that no single failure, or removal from service of any component or channel of a system, will result in loss of the protection function. The minimum redundancy is exceeded in each protection function which is active with the reactor at power.

Functional diversity and consequential location diversity are designed into the system.

For example, loss of one feedwater pump would actuate one pressure reactor trip, one high-level trip, one low-level trip, and two temperature trips. The protective system is discussed in detail in Sections 7.2 and 7.3.

Criterion 23 - Protection System Failure Modes The protection system shall be designed to fail into a safe state or into a state demonstrated to be acceptable on some other defined basis if conditions such as disconnection of the system, loss of energy (e.g., electric power, instrument air), or postulated adverse environments (e.g., extreme heat or cold, fire, pressure, steam, water, and radiation) are experienced.

Compliance The protection system is designed with due consideration of the most probable failure modes of the components under various perturbations of the environment and energy sources. Each reactor trip and engineered safety features actuation channel (except for containment spray and switchover from injection to recirculation) is designed on the deenergize-to-trip principle so loss of power, disconnection, open-channel faults, and the majority of internal channel short-circuit faults cause the channel to go into its tripped mode. The protection system is discussed in Sections 7.2 and 7.3.

Criterion 24 - Separation of Protection and Control Systems The protection system shall be separated from control systems to the extent that failure of any single control system component or channel, or failure or removal from service 4 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

of any single protection system component or channel which is common to the control and protection systems leaves intact a system satisfying all reliability, redundancy, and independence requirements of the protection system. Interconnection of the protection and control systems shall be limited so as to assure that safety is not significantly impaired.

Compliance The protection system is separate and distinct from control systems. Control systems may be dependent on the protection system in that control signals are derived from protection system measurements where applicable. These signals are transferred to the control system by isolation devices which are classified as protection components.

The adequacy of system isolation has been verified by testing under conditions of postulated credible faults. The failure or removal of any single control system component or channel, or failure or removal from service of any single protection system component or channel which is common to the control and protection system leaves intact a system which satisfies the requirements of the protection system.

Distinction between channel and train is made in this discussion. The removal of a train from service is allowed only during testing of the train. For discussion of details of compliance, see Chapter 7.

Criterion 25 - Protection System Requirements for Reactivity Control Malfunctions The protection system shall be designed to assure that specified acceptable fuel design limits are not exceeded for any single malfunction of the reactivity control systems, such as accidental withdrawal (not ejection or dropout) of control rods.

Compliance The protection system is designed to limit reactivity transients so that fuel design limits are not exceeded. Reactor shutdown by full-length rod insertion is completely independent of the normal control function since the trip breakers interrupt power to the rod mechanisms regardless of existing control signals. Thus, in the postulated accidental withdrawal, (assumed to be initiated by a control malfunction) flux, temperature, pressure, level and flow signals would be generated independently. Any of these signals (trip demands) would operate the breakers to trip the reactor.

Analyses of the effects of possible malfunctions are discussed in Chapter 15. These analyses show that for postulated dilution during refueling, startup, or manual or automatic operation at power, the operator has ample time to determine the cause of dilution, terminate the source of dilution and initiate reboration before the shutdown margin is lost. The analyses show that acceptable fuel damage limits are not exceeded even in the event of a single malfunction of either system.

Criterion 26 - Reactivity Control System Redundancy and Capability Two independent reactivity control systems of different design principles shall be provided. One of the systems shall use control rods, preferably including a positive means for inserting the rods, and shall be capable of reliably controlling reactivity FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-15

changes to assure that under conditions of normal operation, including anticipated operational occurrences, and with appropriate margin for malfunctions such as stuck rods, specified acceptable fuel design limits are not exceeded. The second reactivity control system shall be capable of reliably controlling the rate of reactivity changes resulting from planned, normal power changes (including xenon burnout) to assure acceptable fuel design limits are not exceeded. One of the systems shall be capable of holding the reactor core subcritical under cold conditions.

Compliance Two reactivity control systems are provided. These are rod cluster control assemblies (RCCAs) and chemical shim (boric acid). The RCCAs are inserted into the core by the force of gravity.

During operation the shutdown rod banks are fully withdrawn. The full length control rod system automatically maintains a programmed average reactor temperature compensating for reactivity effects associated with scheduled and transient load changes. The shutdown rod banks along with the full length control banks are designed to shutdown the reactor with adequate margin under conditions of normal operation and anticipated operational occurrences thereby ensuring that specified fuel design limits are not exceeded. The most restrictive period in core life is assumed in all analyses and the most reactive rod cluster is assumed to be in the fully withdrawn position.

The boron system will maintain the reactor in the cold shutdown state independent of the position of the control rods and can compensate for xenon burnout transients.

Details of the construction of the RCCAs are presented in Chapter 4 and the operation is discussed in Chapter 7. The means of controlling the boric acid concentration is described in Chapter 9. Performance analyses under accident conditions are included in Chapter 15.

Criterion 27 - Combined Reactivity Control Systems Capability The reactivity control systems shall be designed to have a combined capability, in conjunction with poison addition by the emergency core cooling system, of reliably controlling reactivity changes to assure that under postulated accident conditions and with appropriate margin for stuck rods the capability to cool the core is maintained.

Compliance Sufficient shutdown capability is provided to maintain the core subcritical for any anticipated cooldown transient, e.g., accidental opening of a steam bypass or relief valve, or safety valve stuck open. This shutdown capability is achieved by a combination of RCCA insertion and automatic boron addition via the emergency core cooling system with the most reactive control rod assumed to be fully withdrawn.

Manually controlled boric acid addition is used to supplement the RCCA in maintaining the shutdown margin for the long-term conditions of xenon decay and plant cooldown.

For further discussion, see Sections 4.3 and 7.2.

6 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Criterion 28 - Reactivity Limits The reactivity control systems shall be designed with appropriate limits on the potential amount and rate of reactivity increase to assure that the effects of postulated reactivity accidents can neither (1) result in damage to the reactor coolant pressure boundary greater than limited local yielding nor (2) sufficiently disturb the core, its support structures or other reactor pressure vessel internals to impair significantly the capability to cool the core. These postulated reactivity accidents shall include consideration of rod ejection (unless prevented by positive means), rod dropout, steam line rupture, changes in reactor coolant temperature and pressure, and cold water addition.

Compliance The maximum reactivity worth of control rods and the maximum rate of reactivity insertion employing control rods and boron removal are limited to values that prevent rupture of the reactor coolant system boundary or disruptions of the core or vessel internals to a degree that could impair the effectiveness of emergency core cooling.

The appropriate reactivity insertion rate for the withdrawal of RCCA and the dilution of the boric acid in the reactor coolant systems are specified in the Technical Specifications for the facility. The specification includes appropriate graphs that show the permissible mutual withdrawal limits and overlap of functions of the several RCCA banks as a function of power. These data on reactivity insertion rates, dilution and withdrawal limits are also discussed in Section 4.3. The capability of the chemical and volume control system to avoid an inadvertent excessive rate of boron dilution is discussed in Chapter 9. The relationship of the reactivity insertion rates to plant safety is discussed in Chapter 15.

Criterion 29 - Protection Against Anticipated Operational Occurrences The protection and reactivity control systems shall be designed to assure an extremely high probability of accomplishing their safety functions in the event of anticipated operational occurrences.

Compliance The protection and reactivity control systems are designed to assure an extremely high probability of fulfilling their intended functions. The design principles of diversity and redundancy coupled with a rigorous Quality Assurance Program and analyses support accomplishing this probability as does operating experience in plants using the same basic design. Section 4.2.3 and Sections 7.2 and 7.7 describe design bases and system design.

.2.4 Fluid Systems Criterion 30 - Quality of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed, fabricated, erected, and tested to the highest quality standards practical.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-17

Means shall be provided for detecting and, to the extent practical, identifying the location of the source of reactor coolant leakage.

Compliance All reactor coolant system components are designed, fabricated, inspected and tested in conformance with ASME Boiler and Pressure Vessel Code,Section III.

Leakage is detected by an increase in the amount of makeup water required to maintain a normal level in the pressurizer. The reactor vessel closure joint is provided with a temperature monitored leakoff between double 0-rings.

Leakage inside the reactor containment is drained to the Reactor Building sump where the level is monitored. Leakage is also detected by measuring the airborne activity and humidity of the containment.

See Section 5.2 for compliance of reactor coolant system components with ASME Boiler and Pressure Vessel Code,Section III.

Criterion 31 - Fracture Prevention of Reactor Coolant Pressure Boundary The reactor coolant pressure boundary shall be designed with sufficient margin to assure that when stressed under operating, maintenance, testing, and postulated accident conditions (1) the boundary behaves in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the boundary material under operating, maintenance, testing, and postulated accident conditions and the uncertainties in determining (1) material properties, (2) the effects of irradiation on material properties, (3) residual, steady-state and transient stresses, and (4) size of flaws.

Compliance Close control is maintained over material selection and fabrication for the reactor coolant system to assure that the boundary behaves in a nonbrittle manner. The reactor coolant system materials which are exposed to the coolant are corrosion resistant stainless steel or Inconel. The reference temperature RTNDT of the reactor vessel material samples is established by Charpy V-Notch Tensile and 1/2 T compact tension tests. These tests also insure that materials with proper toughness properties and margins are used.

As part of the reactor vessel specification certain requirements which are not specified by the applicable ASME codes are performed, as follows:

(1) 1.A complete independent review of the supplier stress analysis is conducted by Westinghouse on the reactor vessel. Independent stress analysis is conducted in selected areas to ascertain that the design conditions imposed by the Westinghouse specification have been adequately accounted for.

8 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

(2) 2.The reactor vessel received a complete stress analysis, including analysis for cyclic pressure and temperature operation. The ASME Boiler and Pressure Vessel Code,Section III, "Nuclear Power Plant Components,"

Class 1 rules to which these components are designed generally exempt them from cyclic analysis by code Paragraph NB-3222.4 (d).

(3) 3.Welding Preheat Requirements - On the reactor vessel, the non-mandatory preheat requirements for P1 and P12 material were performed on all weldments.

(4) 4.Reactor Vessel Out-of-Roundness Requirements - To ensure uniform coolant flow, the Westinghouse out-of-roundness requirements on the cylindrical region in the area of the thermal shield are above code.Section III, Class 1 out-of-roundness requirements are stated in Paragraph NB-4221.1 of the code. This referenced paragraph states that the difference in inches between the maximum and minimum inside diameters at any cross section shall not exceed the smaller of (D + 50)/200 and D/100, where D is the nominal inside diameter in inches at the cross section under consideration. Westinghouse required the out-of-roundness to be less than O.5 percent of the diameter in the cylindrical section of the vessel in the region of the thermal shield.

Special requirements were imposed by Westinghouse on the quality control procedure for both the basic materials of construction, and on various sub-assemblies and final assembly for the reactor coolant loop components. These requirements supplemented the rules for quality assurance stated in the applicable design codes.

Examples of the special quality assurance requirements for the reactor vessel that are beyond code requirements are:

Ultrasonic Examinations (1) A 100-percent shear wave ultrasonic test of plate material.

(2) An ultrasonic test of cladding bond.

(3) Weld buildup areas to which the core support pads are attached are examined 100 percent.

(4) Selected areas of completed vessel are ultrasonically mapped after hydrotest to provide a base for future in-service inspection.

(5) Ultrasonic examination of the entire volume of all full penetration welds and heat affected zones in primary pressure boundary welds. The testing was done during fabrication upon completion of the welding and intermediate heat treatment.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-19

Dye Penetrant Testing (1) Dye penetrant test all cladding surfaces and other vessel and head internal surfaces after hydrotest.

(2) Dye penetrant examine the weld between the bottom head and instrumentation tubes, after each layer of weld is deposited.

(3) Dye penetrant examine weld between CRDM housing and closure head and vent pipe and closure head after the first layer; each 1/4 inch of weld deposited and final surface.

(4) Dye penetrant examine weld between the lower core support pad and the vessel shell, after the first layer and each 1/2 inch of weld metal are deposited.

(5) Base metal or weld metal surfaces which are exposed to mechanical operations was dye penetrant or magnetic particle inspected.

Magnetic Particle Testing (1) Magnetic particle examination of all exterior vessel and head surfaces after hydrotest.

(2) Magnetic particle examination of welds attaching the vessel supports, closure head lifting lugs, and refueling seal ledge to the reactor vessel, after the first layer and each 1/2 inch of weld metal are deposited.

(3) Magnetic particle examination of all closure stud surfaces after threading.

Continuous circular and longitudinal magnetization was used.

(4) Magnetic particle examination of I.D. surfaces of carbon and low alloy steel products that have their properties enhanced by accelerated cooling. This inspection was performed after forming and prior to cladding.

The fabrication and quality control techniques used in the fabrication of the reactor coolant system were equivalent to those for the reactor vessel. The inspections of reactor vessel, pressurizer, piping and steam generator were governed by ASME code requirements.

The permissible pressure - temperature relationships for selected heatup and cooldown rates were calculated using the methods of ASME Code Section III Non-mandatory Appendix G. The change in RTNDT due to irradiation during plant life was calculated using conservative methods and will be verified periodically by surveillance program irradiated material test data.

See Section 5.2 for further discussion of compliance.

0 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Criterion 32 - Inspection of Reactor Coolant Pressure Boundary Components which are part of the reactor coolant pressure boundary shall be designed to permit (1) periodic inspection and testing of important areas and features to assess their structural and leak-tight integrity, and (2) an appropriate material surveillance program for the reactor pressure vessel.

Compliance The design of the reactor coolant pressure boundary provides the capability for accessibility during service life to the entire internal surfaces of the reactor vessel, certain external zones of the vessel including the nozzle to reactor coolant piping welds and the top and bottom heads, and external surfaces of the reactor coolant piping except for the area of pipe within the primary shielding concrete. The inspection capability complements the leakage detection systems in assessing the pressure boundary component's integrity. The reactor coolant pressure boundary will be periodically inspected under the provision of ASME Code,Section XI.

The RTNDT properties of the reactor vessel core region forging, weldments and associated heat treated zones will be monitored by a surveillance program which is based on ASTM-E-185, Recommended Practice for Surveillance Testing on Structural Materials in Nuclear Reactors. Samples of reactor vessel plate materials will be retained and catalogued in case future engineering development shows the need for further testing.

The material properties surveillance program includes not only the conventional tensile and impact tests, but also fracture mechanics specimens. The observed shifts in RTNDT of the core region materials with irradiation will be used to confirm the calculated limits to startup and shutdown transients.

To define permissible operating conditions below RTNDT, a pressure range was established which is bounded by a lower limit for pump operation and an upper limit which satisfies reactor vessel stress criteria. To allow for thermal stresses during heatup or cooldown of the reactor vessel, an equivalent pressure limit was defined to compensate for thermal stress as a function of rate of change of coolant temperature.

Since the normal operating temperature of the reactor vessel is well above the maximum expected RTNDT, brittle fracture during normal operation is not considered to be a credible mode of failure. Additional details can be found in Section 5.2.

Criterion 33 - Reactor Coolant Makeup A system to supply reactor coolant makeup for protection against small breaks in the reactor coolant pressure boundary shall be provided. The system safety function shall be to assure that specified acceptable fuel design limits are not exceeded as a result of reactor coolant loss due to leakage from the reactor coolant pressure boundary and rupture of small piping or other small components which are part of the boundary. The system shall be designed to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-21

accomplished using the piping, pumps, and valves used to maintain coolant inventory during normal reactor operation.

Compliance The chemical and volume control system includes charging pumps and makeup paths that serve the safety function of maintaining reactor coolant inventory during normal operations and in the event of small reactor coolant leakages. The charging pumps can maintain reactor coolant pressure sufficiently high to allow orderly reactor shutdown for small tubing or small pipe breaks. Chapter 5 discusses the reactor coolant system, Section 9.3.4 discusses the chemical and volume control system, and Chapter 15 analyzes charging pump performance and fuel damage in event of postulated accidents. The offsite power system and onsite power system are discussed in Sections 8.2 and 8.3, respectively.

Criterion 34 - Residual Heat Removal (RHR)

A system to remove residual heat shall be provided. The system safety function shall be to transfer fission product decay heat and other residual heat from the reactor core at a rate such that specified acceptable fuel design limits and the design conditions of the reactor coolant pressure boundary are not exceeded.

Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.

Compliance The RHR system includes two redundant trains of pumps and heat exchangers each having sufficient heat removal capability to ensure fuel protection. The system is Seismic Category I and is provided electric power by either the preferred power system or the diesel generators of the standby power system. The normal steam and power conversion system is used for the first stage cooldown (i.e., above 350EF and 400 psig). The auxiliary feedwater system provides guaranteed backup of the steam and power conversion system in this function. The systems together accommodate the single-failure criterion.

Section 5.5.7 describes the RHR System.

Criterion 35 - Emergency Core Cooling A system to provide abundant emergency core cooling shall be provided. The system safety function shall be to transfer heat from the reactor core following any loss of reactor coolant at a rate such that (1) fuel and clad damage that could interfere with continued effective core cooling is prevented and (2) clad metal-water reaction is limited to negligible amounts.

2 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.

Compliance The Emergency Core Cooling System (ECCS) design and safety analysis is in accordance with the NRC Acceptance Criterion for Emergency Core Cooling System for Light-Water Power Reactors of December 1973 (10 CFR 50.46).

By combining the use of passive accumulators, centrifugal charging pumps, safety injection pumps, and residual heat removal pumps, emergency core cooling is provided even if there should be a failure of any component in any system. The ECCS employs passive system of accumulators which do not require any external signals or source of power. Two independent and redundant pumping systems are also provided to supplement the passive accumulator system. These systems are arranged to that the single failure of any active component does not prevent meeting the short-term cooling requirements.

The primary function of the ECCS is to deliver borated cooling water to the reactor core in the event of a LOCA. This limits the fuel-clad temperature and thereby ensures that the core will remain intact and in place and fuel damage will not exceed that stipulated as a basis in the safety analysis (Chapter 15). This protection is afforded for:

(1) All pipe break sizes up to and including the hypothetical circumferential rupture of a reactor coolant loop, (2) A loss of coolant associated with a rod ejection accident.

The ECCS is described in Section 6.3. TheLOCA, including an evaluation of consequences, is discussed in Chapter 15.

Criterion 36 - Inspection of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic inspection of important components, such as spray rings in the reactor pressure vessel, water injection nozzles, and piping, to assure the integrity and capability of the system.

Compliance Design provisions facilitate access to the critical parts of the reactor vessel internals, injection nozzles, pipes and valves for visual or nondestructive inspection.

The components outside the containment are accessible for leaktightness inspection during operation of the reactor.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-23

Details of the inspection program for the reactor vessel internals are included in Section 5.4. Inspection of the ECCS is discussed in Section 6.3.

Criterion 37 - Testing of Emergency Core Cooling System The emergency core cooling system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.

Compliance The design provides for periodic testing of both active and passive components of the ECCS.

Proof tests of the components were performed in the manufacturer's shop.

Preoperational system hydrostatic and performance tests demonstrate structural and leaktight integrity of components and proper functioning of the system. Thereafter, periodic tests demonstrate that components are functioning properly.

Design provisions include special instrumentation, testing, and sampling lines to perform the tests during plant shutdown to demonstrate proper automatic operation of the ECCS.

Each active component of the ECCS may be individually actuated on the normal power source at any time during plant operation to demonstrate operability. Components are actuated on the emergency power system during preoperational tests and subsequently during plant shutdown per Technical Specifications.

Details of the ECCS are found in Section 6.3, with periodic testing procedures identified in Section 6.3.4. Performance under accident conditions is evaluated in Chapter 15.

Criterion 38 - Containment Heat Removal A system to remove heat from the reactor containment shall be provided. The system safety function shall be to reduce rapidly, consistent with the functioning of other associated systems, the containment pressure and temperature following any LOCA and maintain them at acceptably low levels.

Suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.

4 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Compliance Systems are provided to effect post-accident containment heat removal. The systems are classified as engineered safety features and as such incorporate a large degree of redundancy as well as being provided with multiple power supplies.

Containment heat removal is provided by the ice condenser and by containment sprays. The ice condenser is a passive system consisting of energy absorbing ice on which steam is condensed during and immediately after a LOCA. The condensation of steam on the ice limits the pressure and temperature to values less than containment design.

An air return system is used to circulate the containment gaseous inventory through the upper compartment, lower compartment, and ice condenser after the initial blowdown. This maintains proper mixing of the containment air and steam with the heat removal media, spray and ice, for the necessary heat removal.

The containment spray system sprays coolant automatically into the upper compartment containment atmosphere in the event of a large LOCA, thereby removing containment heat. The recirculation mode allows for a long-term heat removal by means of two spray systems, each of which contains redundant components including spray headers. The containment spray system consists of two completely separate trains consisting of pumps, heat exchangers, valves, and headers. The containment spray system is initiated automatically upon containment high pressure and is later manually realigned for proper operation in the recirculation mode. The residual heat removal spray contains two spray headers which are supplied from separate trains of the residual heat removal system by manual diversion of a portion of the low-pressure safety injection system flow during recirculation.

The loss of a single active component was assumed in the design of these systems.

Emergency power system arrangements assure the proper functioning of the air return fan system, and the containment spray system and residual heat removal sprays.

The engineered safety features systems are discussed in Chapter 6; the electric power systems in Chapter 8; the protection systems in Chapter 7.

Criterion 39 - Inspection of Containment Heat Removal System The containment heat removal system shall be designed to permit appropriate periodic inspection of important components, such as the torus, pumps, spray nozzles, and piping to assure the integrity and capability of the system.

Compliance The ice condenser design includes provisions for visual inspections of the ice bed flow channels, doors, and cooling equipment. The air return fan system provides for visual inspection of the fans and the associated backflow dampers and for duct systems that are not embedded in concrete. The containment spray system and the RHR sprays are designed such that active and passive components can be readily inspected to demonstrate system readiness. Pressure contained systems are inspected for leaks FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-25

from pump seals, valve packing, flange joints, and relief valves. During operational testing of the containment spray pumps and RHR pumps, the portions of the systems subjected to pressure are inspected for leaks.

System design details are given in Section 6.2.

Criterion 40 - Testing of Containment Heat Removal System The containment heat removal system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the system, and (3) the operability of the system as a whole, and, under conditions as close to the design as practical, the performance of the full operational sequence that brings the system into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of the associated cooling water system.

Compliance The containment heat removal systems described in Section 6.2 are designed to permit periodic testing so that proper operation can be assured. In some cases whole systems can be operated for test purposes. In others, individual components are operated for functional tests so that plant operations are not disrupted.

The ice condenser contains no active components, other than the ice condenser doors, which are required to function during an accident condition. Samples of the ice are taken periodically and tested for boron concentration. The lower inlet door opening force is measured when the reactor is in the shutdown condition. The position of the lower inlet doors is monitored at all times. Top deck door and intermediate deck doors are tested for operability during the shutdown condition. Air return fans and their associated backflow dampers are tested for operability while the reactor is shut down for refueling.

All active components of the containment spray system and the residual heat removal spray system are tested in place after installation. These spray systems receive initial flow tests to assure proper dynamic functioning. Further testing of the active components is conducted after component maintenance and in accordance with technical specifications. Air test lines, located upstream of the spray isolation valves, are provided for testing to assure that spray nozzles are not obstructed. Testing of transfer between normal and emergency power supplies is also conducted.

Criterion 41 - Containment Atmosphere Cleanup Systems to control fission products, hydrogen, oxygen, and other substances which may be released into the reactor containment shall be provided as necessary to reduce, consistent with the functioning of other associated systems, the concentration and quality of fission products released to the environment following postulated accidents, and to control the concentration of hydrogen or oxygen and other substances in the containment atmosphere following postulated accidents to assure that containment integrity is maintained.

6 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Each system shall have suitable redundancy in components and features, and suitable interconnections, leak detection, isolation, and containment capabilities to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) its safety function can be accomplished, assuming a single failure.

Compliance The Shield Building, surrounding the primary containment, serves as a secondary containment. During accident conditions prior to containment isolation, primary and secondary containment purge exhaust is processed by the containment purge system filters prior to release to the atmosphere. The emergency gas treatment system (Section 6.2) maintains this secondary containment at a negative pressure during the entire post-accident period. The emergency gas treatment system also collects and processes the secondary containment atmosphere. After processing, the portion of this processed air necessary to assure a negative pressure is exhausted through the Shield Building exhaust vent. The remainder is recirculated and distributed in the secondary containment.

The Auxiliary Building serves to collect any equipment leakage during the recirculation of containment sump water. The Auxiliary Building ventilation system (Section 9.4) is isolated by the containment Phase A isolation signal. The AuxiliaryBuilding gas treatment system (Section 9.4) then maintains the building at a negative pressure and processes any inleakage prior to release to the environment.

Post-accident hydrogen control within the containment is provided by an electrical hydrogen recombiner (Section 6.2). Distribution of the atmosphere within the containment is provided by the air return fan system (Section 6.8). The air return fan system also takes suction from each compartment to prevent stagnation and excessive accumulation of hydrogen.

Criterion 42 - Inspection of Containment Atmosphere Cleanup Systems The containment atmosphere cleanup systems shall be designed to permit appropriate periodic inspection of important components, such as filter frames, ducts, and piping, to assure the integrity and capability of the systems.

Compliance The emergency gas treatment system (Section 6.2) filtration train and fans and the containment purge filters (Section 9.4.6) are located in the Auxiliary Building and are designed to facilitate inspections. The dampers that control recirculation and exhaust of the emergency gas treatment system effluent are located inside the Shield Building and may be inspected during reactor shutdown.

The entire Auxiliary Building gas treatment system (Section 9.4.2) is located in the Auxiliary Building and is designed to facilitate inspection. The electric hydrogen recombiners (Section 6.2.5) are located inside the containment and may he inspected during reactor shutdown.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-27

Criterion 43 - Testing of Containment Atmosphere Cleanup Systems The containment atmosphere cleanup systems shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and performance of the active components of the systems such as fans, filters, dampers, pumps, and valves, and (3) the operability of the systems as a whole and, under conditions as close to design as practical, the performance of the full operational sequence that brings the systems into operation, including operation of applicable portions of the protection system, the transfer between normal and emergency power sources, and the operation of associated systems.

Compliance The containment purge system (Section 9.4) is designed to permit testing to assure leaktightness of the filter trains; functional testing to assure operability of containment isolation valves; and performance testing to assure filter efficiency and to demonstrate the isolation valve closure in response to the accident mode isolation signal.

The emergency gas treatment system (Section 6.2) is designed to permit testing to assure leaktightness of the filtration trains; functional testing to assure operability of the fans, dampers, and instrumentation; and performance testing to assure overall operability of the system and to demonstrate the proper alignment of the system to the accident unit.

The AuxiliaryBuilding gas treatment system (section 9.4) is designed to allow testing to assure the pressure and leaktightness of the filters, adsorbers, and the filtration train housing to assure the operability of the fans and dampers; and to assure the operability of the system as a whole. The system design will permit testing of the actuation signals, the isolation of the normal ventilation system, and the proper alignment of dampers.

The hydrogen recombiner system (Section 6.2.5) and hydrogen mitigation system (Section 6.2.5A) are designed to allow testing to assure the operability of the manual controls that place the systems in operation, and to assure the power supply and the operability of the electric heaters. The systems are designed to permit, under conditions as close to design as practical, the operability of each system as a whole.

Criterion 44 - Cooling Water A system to transfer heat from structures, systems, and components important to safety, to an ultimate heat sink shall be provided. The system safety function shall be to transfer the combined heat load of these structures, systems, and components under normal operating and accident conditions.

Suitable redundancy in components and features, and suitable interconnections, leak detection, and isolation capabilities shall be provided to assure that for onsite electric power system operation (assuming offsite power is not available) and for offsite electric power system operation (assuming onsite power is not available) the system safety function can be accomplished, assuming a single failure.

8 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Compliance A Seismic Category I Component Cooling System (CCS) (Section 9.2) is provided to transfer heat from the reactor coolant system reactor support equipment and engineered safety equipment to a Seismic Category I Essential Raw Cooling Water (ERCW) system (Section 9.2).

The CCS serves as an intermediate system and thus a barrier between potentially or normally radioactive fluids and the river water which flows in the ERCW system.

The CCS consists of two independent engineered safety subsystems, each of which is capable of serving all necessary loads under normal or accident conditions.

In addition to serving as the heat sink for the CCS, the ERCW system is also used as heat sink for the containment through use of the containment spray heat exchangers, and engineered safety equipment through use of compartment and space coolers.

The ERCW system consists of two independent trains, each of which is capable of providing all necessary heat sink requirements. The ERCW system transfers heat to the ultimate heat sink (Section 9.2).

Electric power is discussed in Chapter 8.

Criterion 45 - Inspection of Cooling Water System The cooling water system shall be designed to permit appropriate periodic inspection of important components, such as heat exchangers and piping, to assure the integrity and capability of the system.

Compliance The integrity and capability of the component cooling water system (Section 9.2) and essential raw cooling water system (Section 9.2) will be monitored during normal operation by the Surveillance Instruction Program. Nonsafety related systems may be isolated temporarily for inspection. All major components will be visually inspected on a periodic basis.

The component cooling and essential raw cooling water pumps are arranged such that any pump may be isolated for inspection and maintenance while maintaining full plant operational capabilities.

Criterion 46 - Testing of Cooling Water System The cooling water system shall be designed to permit appropriate periodic pressure and functional testing to assure (1) the structural and leaktight integrity of its components, (2) the operability and the performance of the active components of the system, and (3) the operability of the system as a whole and under conditions as close to design as practical, the performance of the full operational sequence that brings the system into operation for reactor shutdown and for LOCAs, including operation of applicable portions of the protection system and the transfer between normal and emergency power sources.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-29

Compliance The cooling water systems will be pressurized during plant operations; thus, the structural and leaktight integrity of each system and the operability and performance of their active components will be continuously demonstrated. In addition, normally idle portions of the piping system and idle components will be tested during plant shutdown. The emergency functions of the systems will be periodically tested out to the final actuated device in accordance with the technical specifications.

For details, see the discussions on electric power (Chapter 8), component cooling water (Section 9.2), essential raw cooling water (Section 9.2), and instrumentation and controls (Chapter 7).

.2.5 Reactor Containment Criterion 50 - Containment Design Basis The reactor containment structure, including access openings, penetrations, and the containment heat removal system shall be designed so that the containment structure and its internal compartments can accommodate, without exceeding the design leakage rate and, with sufficient margin, the calculated pressure and temperature conditions resulting from any LOCA. This margin shall reflect consideration of (1) the effects of potential energy sources which have not been included in the determination of the peak conditions, such as energy in steam generators and energy from metal-water and other chemical reactions that may result from degraded emergency core cooling functioning, (2) the limited experience and experimental data available for defining accident phenomena and containment responses, and (3) the conservatism of the calculational model and input parameters.

Compliance The containment structure, including access openings and penetrations, is designed with sufficient conservatism to accommodate, without exceeding the design leakage rate, the transient peak pressure and temperature associated with a postulated reactor coolant piping break up to and including a double-ended rupture of the largest reactor coolant pipe.

The containment design consists of a freestanding steel containment vessel and a separate outer reinforced concrete shield wall and roof. The ice condenser concept is used for energy absorption during a LOCA. The annular space between the containment vessel and the exterior shield wall forms a double barrier to fission products and is maintained at less than atmospheric pressure. The ice condenser, which is located inside the steel containment and consists of a suitable quantity of borated ice in a cold storage compartment, provides rapid energy absorption to maintain the containment vessel design pressure at a low level and to reduce the peak duration, thus reducing the potential for escape of fission products from the primary containment vessel.

The functional design of the containment is based upon the following assumptions and conditions:

0 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

(1) A design basis blowdown energy and mass release.

(2) Secondary energy released by safety injection.

(3) Carryover energy from zirconium-water reaction.

(4) Decay heat from the reactor at rated power.

(5) The single failure criterion is accommodated.

The internal design pressure of the containment is greater than the peak pressure occurring as the result of the complete blowdown of the reactor coolant through any rupture of the reactor coolant system up to and including the hypothetical double-ended severance of the largest reactor coolant pipe. The design pressure is not exceeded during any subsequent long-term pressure transient.

Refer to Section 3.8 for a description of containment, and to Section 6.2 for design basis details.

Criterion 51 - Fracture Prevention of Containment Pressure Boundary The reactor containment boundary shall be designed with sufficient margin to assure that under operating, maintenance, testing, and postulated accident conditions (1) its ferritic materials behave in a nonbrittle manner and (2) the probability of rapidly propagating fracture is minimized. The design shall reflect consideration of service temperatures and other conditions of the containment boundary material during operation, maintenance, testing, and postulated accident conditions, and the uncertainties in determining (1) material properties, (2) residual, steady-state, and transient stresses, and (3) size of flaws.

Compliance The containment vessel and its penetration sleeves meet the material, design and technical process requirements of ASME Boiler and Pressure Vessel Code,Section III, Class B. Charpy V-notch impact tests were made of the containment vessel material (ASTM A 516, Grade 70) 5/8 inch and greater, weld deposit, and the base metal weld heat affected zone employing a test temperature at least 30E F below minimum service temperature in accordance with ASME Code, Paragraph N-1210. This test measured the ductile to brittle transition with allowable values for energy absorption given in Tables N-421 and N-422. It insures that the material used will not behave in a brittle manner and that rapidly propagating fracture is minimized. The containment boundary design considered uncertainties in material properties, residual, steady-state and transient stresses, and material flaws along with conservative allowable stress levels for all stressed elements of the containment boundary. All material was examined for flaws that would adversely affect the performance of the material in its intended location. See Section 6.2 for further details.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-31

Criterion 52 - Capability for Containment Leakage Rate Testing The reactor containment and other equipment which may be subjected to containment test conditions shall be designed so that periodic integrated leakage rate testing can be conducted at containment design pressure.

Compliance The reactor containment design permitted overpressure strength testing during construction and permits preoperational integrated leakage rate testing at containment design pressure and at reduced pressure, in accordance with Appendix J, 10 CFR 50.

The reactor containment and other equipment which may be subjected to containment test conditions are designed so that periodic integrated leakage rate testing can be conducted at containment design pressure. All equipment which may be subjected to the test pressure is either vented to the containment, removed from the containment during the test, or designed to withstand the containment design pressure without damage.

The preoperational integrated leak tests at peak pressure verify that the containment, including the isolation valves and the resilient penetration seals, leaks less than the allowable value of 0.25 weight percent per day at peak pressure.

Details concerning the conduct of periodic integrated leakage rate tests are in Section 6.2.

Criterion 53 - Provisions for Containment Testing and Inspection The reactor containment shall be designed to permit (1) appropriate periodic inspection of all important areas, such as penetrations, (2) an appropriate surveillance program, and (3) periodic testing at containment design pressure of the leaktightness of penetrations which have resilient seals and expansion bellows.

Compliance The reactor containment and the containment isolation system (Section 6.2) are designed so that:

(1) 1.Integrated leak rate tests can be run during plant lifetime (see compliance to Criterion 52).

(2) 2.Visual inspections can be made of all important areas, such as penetrations.

(3) 3.An appropriate surveillance program can be maintained (see Section 6.2).

(4) 4.Periodic testing at containment design pressure of the leaktightness of isolation valves and penetrations which have resilient seals and expansion bellows is possible.

(5) 5.The operability of the containment isolation system can be demonstrated periodically.

2 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

In testing locally the resilient seals and expansion bellows leakages, the guidelines for Type B tests in Appendix J to 10 CFR 50 will be followed.

Criterion 54 - Piping Systems Penetrating Containment Piping systems penetrating primary reactor containment shall be provided with leak detection, isolation, and containment capabilities having redundance, reliability, and performance capabilities which reflect the importance to safety of isolating these piping systems. Such piping systems shall be designed with a capability to test periodically the operability of the isolation valves and associated apparatus and to determine if valve leakage is within acceptable limits.

Compliance Containment isolation features are classified as Seismic Category I. These components required quality assurance measures which enhance reliability. The containment isolation design provides for a double barrier at the containment penetration in those fluid systems that are not required to function following a design basis event.

All piping systems penetrating the containment, in so far as practical, have been provided with test vents and test connections or have other provisions to allow periodic leak testing as required. Section 6.2.4.4 has further details on testing.

See Section 6.2.4 for general containment isolation details and Section 6.2.4.3 for exceptions to General Design Criteria 54, 55, 56, and 57.

Criterion 55 - Reactor Coolant Pressure Boundary Penetrating Containment Each line that is part of the reactor coolant pressure boundary and that penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provisions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis:

(1) One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2) One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3) One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4) One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-33

Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.

Other appropriate requirements to minimize the probability or consequences of an accidental rupture of these lines or of lines connected to them shall be provided as necessary to assure adequate safety. Determination of the appropriateness of these requirements, such as higher quality in design, fabrication, and testing, additional provisions for inservice inspection, protection against more severe natural phenomena, and additional isolation valves and containment, shall include consideration of the population density, use characteristics, and physical characteristics of the site environs.

Compliance The reactor coolant pressure boundary is defined as those piping systems and components which contain reactor coolant as design pressure and temperature. With the exception of the reactor coolant sampling lines, the entire reactor coolant pressure boundary, as defined above, is located entirely within the containment structure. All sampling lines are provided with remotely operated valves for isolation in the event of a failure. These valves also close automatically on a containment isolation signal.

All other piping and components which may contain reactor coolant are low pressure, low temperature systems which would yield minimal environmental doses in the event of failure.

The sampling system and low-pressure systems are described in Section 9.3. An analysis of malfunctions in these systems is included in Chapter 15.

Criterion 56- Primary Containment Isolation Each line that connects directly to the containment atmosphere and penetrates primary reactor containment shall be provided with containment isolation valves as follows, unless it can be demonstrated that the containment isolation provisions for a specific class of lines, such as instrument lines, are acceptable on some other defined basis:

(1) One locked closed isolation valve inside and one locked closed isolation valve outside containment; or (2) One automatic isolation valve inside and one locked closed isolation valve outside containment; or (3) One locked closed isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment; or (4) One automatic isolation valve inside and one automatic isolation valve outside containment. A simple check valve may not be used as the automatic isolation valve outside containment.

4 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Isolation valves outside containment shall be located as close to containment as practical, and automatic isolation valves shall be designed to take the position that provides greater safety upon loss of actuating power.

Compliance At least two barriers are provided between the atmosphere outside the containment and the containment atmosphere, the reactor coolant system, or closed systems which are assumed vulnerable to accident forces.

Redundant valving is provided for piping that is open to the atmosphere and to the containment atmosphere. Additional details can be found in Section 6.2.

Criterion 57 - Closed Systems Isolation Valves Each line that penetrates primary reactor containment and is neither part of the reactor coolant pressure boundary nor connected directly to the containment atmosphere shall have at least one containment isolation valve which shall be either automatic, or locked closed, or capable of remote manual operation. This valve shall be outside containment and located as close to the containment as practical. A simple check valve may not be used as the automatic isolation valve.

Compliance Those lines that penetrate the containment, that do not communicate with either the reactor coolant pressure boundary or the containment atmosphere, and that are not affected byLOCA forces, are defined as closed systems. All lines penetrating the containment are designed to meet this GDC.

See Section 6.2.4 for a discussion of containment isolation valves.

.2.6 Fuel and Radioactivity Control Criterion 60 - Control of Releases of Radioactive Materials to the Environment The nuclear power unit design shall include means to control suitably the release of radioactive materials in gaseous and liquid effluents and to handle radioactive solid wastes produced during normal reactor operation, including anticipated operational occurrences. Sufficient holdup capacity shall be provided for retention of gaseous and liquid effluents containing radioactive materials, particularly where unfavorable site environmental conditions can be expected to impose unusual operational limitations upon the release of such effluents to the environment.

Compliance Liquid, gaseous, and solid radioactive waste processing equipment is provided. The principles of filtration, demineralization, evaporation, solidification and storage for decay are utilized as described in Chapter 11. Process monitoring is provided to control this equipment and regulate releases to the environment as described in Section 11.4.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-35

Criterion 61 - Fuel Storage and Handling and Radioactivity Control The fuel storage and handling, radioactive waste, and other systems which may contain radioactivity shall be designed to assure adequate safety under normal and postulated accident conditions. These systems shall be designed (1) with a capability to permit appropriate periodic inspection and testing of components important to safety, (2) with suitable shielding for radiation protection, (3) with appropriate containment, confinement, and filtering systems, (4) with a residual heat removal capability having reliability and testability that reflects the importance to safety of decay heat and other residual heat removal, and (5) to prevent significant reduction in fuel storage coolant inventory under accident conditions.

Compliance The spent fuel pool and cooling system, fuel handling system, radioactive waste processing systems, and other systems that contain radioactivity are designed to assure adequate safety under normal and postulated accident conditions.

(1) Components are designed and located such that appropriate periodic inspection and testing may be performed.

(2) All areas of the plant are designed with suitable shielding for radiation protection based on anticipated radiation dose rates and occupancy as discussed in Section 12.1.

(3) Individual components which contain significant radioactivity are located in confined areas which are adequately ventilated through appropriate filtering systems.

(4) The spent fuel cooling systems provide cooling to remove residual heat from the fuel stored in the spent fuel pool. The system is designed for testability to permit continued heat removal.

(5) The spent fuel pool is designed such that no postulated accident could cause excessive loss of coolant inventory.

Radioactive waste treatment systems are located in the Auxiliary Building, which contains or confines leakage under normal and accident conditions.

The Auxiliary Building gas treatment system includes charcoal filtration which minimizes radioactive material release associated within a postulated spent fuel handling accident.

Fuel storage and handling is discussed in Section 9.1, and radioactive waste management in Chapter 11.

Criterion 62 - Prevention of Criticality in Fuel Storage and Handling Criticality in the fuel storage and handling system shall be prevented by physical systems or processes, preferably by use of geometrically safe configurations.

6 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

Compliance The restraints and interlocks provided for safe handling and storage of new or spent fuel are discussed in Section 9.1.

The center-to center distance between adjacent spent fuel assemblies together with the use of fixed Boral neutron absorber panels in the storage racks and burnup credit administrative controls on fuel assembly placement are sufficient to ensure subcriticality, even if unborated water is used to fill the spent fuel storage pool. Credit for borated water is permitted to maintain subcriticality for inadvertent misplacement of a fuel assembly, e.g., loading of a fresh fuel assembly in a storage cell designated for exposed fuel or placement outside of and adjacent to a rack module.

Layout of the fuel handling area is such that the spent fuel casks will never be required to traverse the spent fuel storage pool during removal of the spent fuel assemblies.

Criterion 63 - Monitoring Fuel and Waste Storage Appropriate systems shall be provided in fuel storage and radioactive waste systems and associated handling area (1) to detect conditions that may result in loss of residual heat removal capability and excessive radiation levels and (2) to initiate appropriate safety actions.

Compliance Failure in the spent fuel pool cooling system will result in control room annunciators and local temperature indication and high radiation in the spent fuel storage area will produce a local and control room alarm. The operator can then take appropriate action to alleviate the situation. High radiation in the radioactive waste area will produce a local alarm enabling notification of the operator to allow appropriate action to be taken.

See Sections 9.1 and 12.3 and Chapter 11 for further details.

Criterion 64 Monitoring Radioactivity Releases Means shall be provided for monitoring the reactor containment atmosphere, spaces containing components for recirculation of LOCA fluids, effluent discharge paths, and the plant environs for radioactivity that may be released from normal operations, including anticipated operational occurrences, and from postulated accidents.

Compliance The facility contains means for monitoring the containment atmosphere and all other important areas during both normal and accident conditions to detect and measure radioactivity which could be released under any conditions. The monitoring system includes area gamma monitors, atmospheric monitors and liquid monitors with full indication in the control room. Alarms are provided to warn of high radioactivity.

Chapter 11 discusses the process and effluent radiation monitoring systems. Chapter 12 discusses the area and airborne radiation monitoring systems.

FORMANCE WITH NRC GENERAL DESIGN CRITERIA 3.1-37

REFERENCES None 8 CONFORMANCE WITH NRC GENERAL DESIGN CRITERIA

CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

.1 Seismic Classifications The Watts Bar Nuclear Plant structures, systems, and components which perform a primary safety function have been designed to remain functional in the event of a Safe Shutdown Earthquake (SSE). These structures, systems, and components, designated as Seismic Category I, are those necessary to assure:

(1) The integrity of the reactor coolant pressure boundary.

(2) The capability to shut down the reactor and maintain it in a safe shutdown condition, or (3) The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures comparable to or in excess of the guideline exposures of 10 CFR Part 100.

These structures, systems, and components are classified in accordance with Regulatory Guide 1.29 unless exception is taken in detailed classificaition information provided in other sections of the FSAR, such as Table 3.2-2a, 3.2-6, etc.

Piping, pumps, valves, and other fluid system components which must retain limited structural integrity because their failure could jeopardize to an unacceptable extent the achievement of a primary safety function, because they form an interface between Seismic Category I and non-Seismic Category I plant features, or because they perform a secondary safety function, are designated by TVA as Seismic Category I(L)

(i.e., limited requirements). Those fluid containing elements which are included in Seismic Category I(L) are seismically qualified to meet the intent of Position 2 of Regulatory Guide 1.29.

Where portions of mechanical systems are Category I or I(L) and the remaining portions not seismically classified, the systems have been seismically qualified to a terminating anchor (or other appropriate analysis problem termination) beyond the defined boundary such as a valve, thus meeting Position 3 of Regulatory Guide 1.29.

All Category I safety-related structures, and portions of mechanical and electrical systems and components are listed in Tables 3.2-1, 3.2-2, 3.2-2a, 3.2-2b and 3.2-3.

Those Category I(L) portions of mechanical systems are also listed in Table 3.2-2.

.2 System Quality Group Classification Fluid system components for the Watts Bar Nuclear Plant that perform a primary safety function are identified by TVA Classes A, B, or C (see Section 3.2.2.7 for HVAC Safety Classifications). These piping classes are assigned to fluid systems based on the ANS Safety Classes 1, 2a, and 2b, respectively, which are assigned to nuclear power plant equipment per the August 1970 Draft of ANSI N18.2, "Nuclear Safety Criteria for the Design of Stationary Pressurized Water Reactor Plants." Fluid system components whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-1

the whole body, or its equivalent to any part of the body, are identified as TVA Class D and are based on ANSI N18.2 (Aug., 1970 draft) Safety Class 3 and Regulatory Guide 1.26. The TVA piping classification system for WBNP does not conform strictly to the guidance of Regulatory Guide 1.26 (which was not in effect on the docket date for the Construction Permit). The ANS safety classification of each component has been considered in the various aspects of design, fabrication, construction, and operation.

.2.1 Class A Class A applies to reactor coolant pressure boundary components whose failure could cause a loss of reactor coolant which would not permit an orderly reactor shutdown and cool down assuming that makeup is only provided by the normal makeup system.

Branch piping 3/8 inch inside diameter and smaller, or protected by a 3/8 inch diameter or smaller orifice, is exempted from Class A requirements. The branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller) is also exempted from Class A requirements.

The components which are within the Reactor Coolant Pressure Boundary (RCPB) and meet all the following requirements may be classified as TVA Class G:

(1) Piping and associated components in the RCPB which penetrate containment excluding the actual penetration and its associated components.

(2) Piping and associated components which perform no primary safety function.

(3) Piping and associated components which are isolated by a normally closed valve off a line in the RCPB that meets the exclusion requirements of 10 CFR Part 50.55a paragraphs (C) (1) and (C) (2). An example would be the ECCS check valve leak test lines.

.2.2 Class B Safety Class B applies to those components of safety systems necessary to fulfill a system safety function. The classification is specifically applicable to containment and to components of those safety systems, or portions thereof, through which reactor coolant water flows directly from the reactor coolant system or the containment sump.

.2.3 Class C Class C applies to components of those safety systems that are important to safe operation and shutdown of the reactor but that do not recirculate reactor coolant.

.2.4 Class D Class D applies to components not in TVA Class A, B, or C whose failure would result in release to the environment of gaseous radioactivity normally held up for radioactive decay. This is being interpreted as those portions of systems whose postulated failure would result in calculated potential offsite doses that exceed 0.5 rem to the whole body or its equivalent to any part of the body.

CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

.2.5 Relationship of Applicable Codes to Safety Classification for Mechanical Components The applicable codes used for the design, material selection, and inspection of components for the various safety classes are shown in Table 3.2-4. The applicable TVA classification and ANS Safety Classification for each of the fluid systems are tabulated in Table 3.2-2. TVA classifications are also delineated on flow diagrams which have been included as figures in those sections of the FSAR where the systems are discussed in detail.

.2.6 Nonnuclear Safety Class (NNS)

Components that are used in Seismic Category I structures whose failure would not result in a release of radioactive products and are not required to function during an accident or malfunction within the reactor coolant pressure boundary have been assigned TVA Classifications G or K. Since these components complement components having a primary safety function during normal operation and may be in close proximity to them, they are seismically qualified as Seismic Category I(L) to the extent necessary to prevent an unacceptable influence on Safety Class equipment during a seismic event. Thus the minimum capability of primary system components is not compromised by the failure of a Class G or K component during a seismic event.

Components which are assigned to TVA Class H or L, located inside Seismic Category I structures, are also designed as Seismic Category I(L). The applicable codes, along with the seismic classifications used for the design of the components covered by these classifications, are shown in Table 3.2-5. TVA Class P is assigned to specific sense lines located (in part or totally) in a non-seismic area.

.2.7 Heating, Ventilation and Air Conditioning (HVAC) Safety Classification Those portions of the HVAC Systems which are safety related have been assigned TVA classifications and have been designed to Seismic Category I and I(L) specifications as applicable. All equipment, components, duct work, etc., in the August 1970 Draft ANSI N18.2 Safety Classes 2a and 2b perform primary safety functions and are designed to Seismic Category I requirements, except as exempted in Table 3.2-6.

Portions of systems not performing a safety function may need a degree of seismic qualification because their failure could produce an unacceptable influence on the performance of safety functions. These are designed to Seismic Category I(L) requirements. The applicable codes along with the seismic qualifications used for the design of the HVAC ducting are shown in Table 3.2-6 . See Sections 3.7.3.17 and 3.7.3.18 for details of seismic analysis and design of HVAC duct and duct support systems.

.3 Code Cases and Code Editions and Addenda

.3.1 TVA Design and Fabrication The Code of Record of Section III of the ASME Code applied to systems within TVA's scope is the 1971 Edition with Addenda through Summer 1973. The use of later SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-3

Edition and Addenda, as permitted by paragraph NA-1140 of the ASME Code, is controlled to ensure the following:

(a) Later Edition and Addenda used has been accepted by the NRC through incorporation by reference in 10 CFR 50.55a.

(b) Related requirements necessary to support use of later Edition and Addenda are implemented in accordance with NA-1140.

(c) Code Cases used have been accepted by the NRC through incorporation by reference in either Regulatory Guide 1.84 or Regulatory Guide 1.85.

(d) Additional requirements added by either Regulatory Guide 1.84 or Regulatory Guide 1.85 are implemented.

A listing of Code Cases and provisions of later Code editions and addenda which have been used for design and fabrication is given in Table 3.2-7. A similar listing of Code Cases and provisions of later Code editions and addenda used in analysis of fluid systems is given in Section 3.7.3.8.1. Another similar listing for the RCS is given in Section 5.2.1.4. Code cases and provisions of later Code Editions and Addenda associated with Section XI are found in the Section XI programs. Exceptions to the system classification Code requirements associated with Generic Letter 89-09 may be found in notes on the flow diagrams.

.3.2 Purchased Materials and Components The Code of Record for components ordered by TVA is determined in accordance with 10 CFR 50.55a, footnote 5. Material ordered by TVA and supplied with certification to a later Edition and Addenda is controlled by a comparison of the Edition and Addenda to which it is certified to the Code of Record applicable to the application in which it is used. Deviations from the applicable Code of Record are reconciled prior to use of the material.

Material procured prior to the initiation of the Acceptable Suppliers List (ASL) program (approximately May 1978) has been addressed through an NRC approved alternative to the ASME Code paragraph NA-3451(a)[1]. Material procured as ASTM material, installed or to be installed in an ASME system, whose proof of survey or qualification by TVA of the manufacturer's quality assurance program at the time of procurement cannot be retrieved, and whose material specification is identical to the requirements of ASME Section II as stated by the ASME material specification, is acceptable for use assuming all other attributes of the material and the documentation conform to ASME Code requirements.

CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

FERENCES etter from B.D. Liaw, NRC, to O. D. Kingsley, TVA, dated March 15, 1990, NRC Inspection eport Nos. 50-390/90-02 and 50-391/90-02.

etter from Frederick J. Hebdon, NRR, to Mark O. Medford, TVA, dated February 22, 1993.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-5

Table 3.2-1 Category I Structures Reactor Building (Shield Building, Steel Containment Vessel, and Interior Concrete)

Auxiliary - Control Building

a. Auxiliary Building portion
b. Additional Equipment Building portion
c. Control bay portion
d. Waste packaging area Condensate Demineralizer Waste Evaporator Building Class 1E Electrical Systems Structures (Manholes, Handholes, and Conduit Banks)

Diesel Generator Building ERCW Pipe Tunnels and RWST Foundations ERCW Structures North Steam Valve Room Intake Pumping Station and Retaining Walls Additional Diesel Generator Building Refueling Water Storage Tank (RWST).

Underground Barrier.

ERCW Standpipe Structures I and II and ERCW Discharge Overflow Structure.

CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

TTS BAR (Page 1 of 17)

TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Vessel W A (13) X C X I th CRDM Housing W A III-1 X C X I ead Adapter Plugs W A III-1 X C X I enerators (Tube Side) W A III-1 X C X I (Shell Side) W A(17) III-1 X C X I zer W A III-1 X C X I Coolant Pipe W A III-1 X C X I Coolant Fittings W A III-1 X C X I Coolant Fabricated W A III-1 X C X I Coolant Crossover W A III-1 X C X I Coolant Thermowell W A III-1 X C X I Guide Tubing W A III-1 X C X I Guide Couplings W A III-1 X C X I mble Assembly W B III-2 X C X I pass Line W A III-1 X C X I zer Safety Valves W A III-1 X C X I perated Relief W A III-1 X C X I zer Relief Tank W G VIII X C P I(L)

WBNP-79

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Coolant Pump W A III-1 X C X I asing W A III-1 X C X I ange W A III-1 X C X I l Barrier W A III-1 X C X I l Barrier Heat nger W C (14) X C X I eal Housing W A III-1 X C X I Seal Housing W B III-1 X C X I e Retaining g W A III-1 X C X I tor W 2b NEMA-MG1 X C - I otor W 2b NA X C - I haft W 2b NA X C - I oupling W 2b NA X C - I iece W 2b NA X C - I el W 2b NA X C - I (Motor Upper

) W 2b NA X C - I olting W 2b NA X C - I WBNP-79 tand W 2b NA X C - I rame W 2b NA X C - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) il Reservoir W 2b NA X C P I Oil Cooler W 2b (14) X C P I il Piping W 2b (14) X C P I Oil Reservoir W 2b NA X C P I ooling Coil -

upports only) W 2b NA X C P I ir Coolers W - - X C - I(L) jection System njection Pumps W B III-2 X AB X I ulators (9) W B III-2 X C P I njection Tank W B III-2 X AB X I ng Water Storage Tank T B III-2 X O P I Heat Removal System umps W B III-2 X AB X I eat Exchangers (Tube) W B III-2 X AB X I (Shell) W C III-3 X AB P I WBNP-79

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) ent Spray System ps t Exchangers (Tube) T B III-2 X AB X I (Shell) W B III-2 X AB X I zles W C III-3 X AB P I T B - X C P I Water Make-Up System T G ANSI B31.1 X AB - I(L)

T G(22) VIII X O - I(L) l and Volume Control System ing, Reciprocating ing, Centrifugal W B P&V-II X AB X I Acid Transfer W B P&V-II X AB X I W C P&V-III X AB - I changers erative wn (Tube) W B III-2 X C X I Shell) W B III-2 X AB X I s Letdown (Tube) W C III-3 X AB P I (Shell) W B III-2 X C X I ater (Tube) W B III-2 X C P I (Shell) W B III-2 X AB X I WBNP-79 W C III-3 X AB P I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Control W B III-2 X AB X I d W C III-3 X AB P I d Batching W G VIII X AB - I(L) l Mixing W G VIII X AB - I(L) l W G VIII X AB - I(L) enerator Blowdown System down Isolation Valves T B III-2 X AB P I down Heat Exchangers T - VIII - TB P -

nk T - VIII - TB P -

nk Pumps T - HIS - TB P -

sed Air System

& Control Air Subsystem ressors T H - - TB - -

Tanks T H VIII - TB - -

s T H VIII - TB - -

Control Air Subsystem sors T (19) - X AB - I Tanks T (19) VIII X AB - I s T C (14) X AB - I enser WBNP-79 ets W C - X C - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) let Doors W C - X C - I rames W C - X C - I rame Columns W C - X C - I upport Structure W C - X C - I iate Deck Doors W C - X C - I els W C - X C - I uctures W,T C - X C - I k Doors W C - X C - I ling Unit Supports W C - X C - I k Beams W C - X C - I tion System W - - X C,AB - I(L) ine W - - X AB - I(L) enser Bridge Crane W - - X C - I(L) ain Gate W C - X C - I ent Isolation System T B III-2 X C,AB X,P I n Fans T (11) AMCA X C - I IEEE ent Cooling System T C III-3 X AB P I WBNP-79 changers (Tube) T C III-3 X AB - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

(Shell) T C III-3 X AB P I ank T C III-3 X AB P I Containment Isolation) T B III-2 X C - I T C III-3 X AB,C - I T G B31.1 X AB - I(L)

T H B31.1 - CDWEB -

akage Return Unit T L - X AB - I(L) ive Waste Disposal System ry & Hot Shower W G VIII X AB X I(L) ical Drain W G VIII X AB X I(L) or Coolant Drain W G VIII X C X I(L) ed Drain Collector W G VIII X AB X I(L)

Condensate W H VIII X AB X I(L)

Resin Storage W D III-3 X AB X I ecay W D III-3 X AB X I Drain Collector W G VIII X AB X I(L)

Monitor W G III X AB P I(L)

Decontamination Collector T G ---- X AB P I(L)

WBNP-79 or Coolant Drain Tank Pumps W G B31.1 X C X I(L)

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) ical Drain Tank Pump W G B31.1 X AB X I(L) ry & Hot Shower Tank Pump W G B31.1 X AB X I(L) ed Equipment Drain Sump Pumps W G B31.1 X AB X I(L)

Condensate Pumps W H B31.1 X AB X I(L) ed Drain Collector Tank harge Pump W G B31.1 X AB X I(L)

Drain Collector Tank Discharge W G B31.1 X AB X I(L) ondensate Demin Waste Evap W G B31.1 X AB X I(L) mp Monitor Tank Pump W G B31.1 X AB P I(L)

Decon Collector Tank Pump T G B31.1 X AB P I(L) ment Pit Sump Pumps W G B31.1 X C X I(L) r & Equip Drain Sump Pumps W G B31.1 X AB P I(L) or & Equip. Drain Sump Pump T G B31.1 X C X I(L) or & Equip Drain Pocket Sump T G B31.1 X C X I(L) oor & Equip. Drain Sump Pump T G B31.1 X AEB P I(L) neous WBNP-79 as Compressor Pkg. W D III-3 X AB X I as Filter T G VIII X AB X I(L)

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Manifold T G - X AB - I(L) c Compactor W - - - SB P -

Tank Basket Strainer W G VIII X AB P I(L) min Waste Evaporator T H III-3 X CDWEB P -

ection System

- Flood Mode & CI T C III-3 X C,AB,O,B,P - I

- Balance of System T G B31.1, UL/FM X - I(L)

C,AB,O,B,P,CB DB,SB,CDWE B

ps (vertical turbine) T C III-3 X O - I entilation System ent Ventilation ent Purge xcluding Inst. Rm. Fan) T (11) AMCA X AB - I(L)

T (11) - X AB X I WBNP-79 rs T (11) - X AB X I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) rk T (11) SMACNA X C,AB X I/I(L)(See Note 20) ompartment T (11) C I(L)

Instrument Room Cooling T (11) C I(L) il Units T - AMCA X C P I(L)(See Note 12)

Air Filters T (11) - X AB - I(L) ompartment Cooling Units T (11) AMCA X C - I T (11) IEEE X C I T - ARI X C P I(L)(See Note 12) aft Dampers T (11) ASME X C - I entation/Controls T (11) IEEE X C/CB - I rk/Accessories T (11) SMACNA X C P I Bldg. Ventilation Units T (11) AMCA X AB - I(L)

T (11) - X AB - I(L) m Coolers T (11) - X AB P I Board Rooms WBNP-79 ditioning System T (11) AMCA,ARI X AB - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) n Board Rooms ditioning System T (11) AMCA,ARI X AB - I Conditioning Systems T (11) AMCA,ARI X AB - I(L) ldg. Ventilation T (11) - X CB - I T (11) - X CB X I itioning Unit (MCR) T (11) AMCA,ARI X CB - I itioning Unit

d. Rm.) T (11) AMCA,ARI X CB - I Rm Air Conditioning System T (11) AMCA,ARI X RB - I(L)(See Note 21) dg. Ventilation System T (11) AMCA X DB - I ood Exhaust System T (11) AMCA X DB - I rd Room Exhaust System Fans T (11) AMCA X DB - I am System ves T B III-2 X AB - I Bypass Valves T B III-2 X AB - I er System WBNP-79 ves T B III-2 X AB - I Feedwater System

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Feedwater Pumps riven T C III-3 X AB - I Turbine Drive T C III-3 X AB - I ump Systems Bypass W - - - TB - -

lves T B III-2 X AB - I alves T B III-2 X AB - I Fuel Pit el Pit Heat Exch.

W C III-3 X AB X I W C III-3 X AB X I el Pit Pump W C III-3 X AB X I el Pit Filter W G VIII X AB X I(L) el Pit Demineralizer W G VIII X AB X I(L) el Pit Strainer W G - X AB X I(L) el Pit Skimmer Pump W G - X AB X I(L) el Pit Skimmer r Assembly W G - X AB X I(L) el Pit Skimmer Filter W G VIII X AB X I(L) dling System WBNP-79

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) tor Crane, Reactor W - - X C - I(L)

Vessel Head Lifting W - - X C - -

Internals Lifting W - - X C - -

el Pit Bridge & Hoist W - - X AB - I(L) ter Cont. Handling W - - X - - -

Vessel Stud Tensioner W - - X - - -

el Handling Tool W - - X - - -

nsfer System nsfer Tube & Flange W B - X C,AB P I r System & Controls W - - X C,AB P -

l Storage Racks W - - X AB - I el Storage Racks T - - X AB X I cy Diesel Fuel Oil System ay Tanks WBNP-79 Pumps T G B31.1 X DB - I(L)

Tanks (7 Day) T I VIII X DB - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) ling Water System T - - - O - -

T - - - TB - -

g System Heat Exchanger T - VIII - AB X -

Vessel T - VIII - AB X -

il T B III-2 X C X I nt Decontamination System W - - - AB - -

T - D100 - AB - -

alizers ed W D III-3 X AB X I W D III-3 X AB X I Coolant W B III-2 X AB X I ter Return W B III-2 X AB X I ter Injection W B III-2 X AB X I d W C III-3 X AB - I WBNP-79 neous

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7)

Orifices W B III-2 X C X I d Blender W C III-3 X AB - I ecovery System Tank Recirc. W D P&V-III X AB X I ipper Feed W D P&V-III X AB X I Tank W G VIII X AB P I(L)

T D III-3 X AB X I T G VIII X AB P I(L) alizers or Feed Ion Exch W G VIII X AB X I(L) or Condensate W G VIII X AB X I(L) or Feed Ion Exch W G VIII X AB X I(L)

WBNP-79 or Condensate W G VIII X AB X I(L) rates W G VIII X AB X I(L)

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) neous pper & Boric Acid kg. W (16) (16) X AB X I(L) cy Gas Treatment System T (11) AMCA X AB P I T (11) - X AB P I Separator T (11) - X AB P I T (11) - X AB,C P I T (11) - X AB,C P I Bldg. Gas Treatment System T (11) AMCA X AB P I T (11) - X AB P I Separator T (11) - X AB P I T (11) - X AB,C P I T (11) - X AB,C P I l Raw Cooling Water System T C III-3 X P - I WBNP-79 ump Motor Bearing Coils T (18) - X P - I

TTS BAR TVA/ANS ent Scope Safety Class Code QA Required Location Rad Source Seismic (1) (2) (3) (4) (5) (6) (7) ent Isolation Valves T B III-2 X C - I T C III-3 X AB - I ard) T C III-3 X B - I Station Air Compressor) T H B31.1 - TB -

Auxiliary Air Compressor) T C III-3 X AB - I Screen Wash Supply) T (15) B31.1 X P - I(L)(15)

Wash Pumps T (15) B58.1 X P - I(15) c Backwashing Strainers T C III-3 X P - I ode Boration Makeup System ation Makeup Tank T C III-3 X AB X I rging Booster Pumps T H B31.1 X AB X I ode Boration Demineralizer T H B31.1 X AB X IL) ode Boration Filters T H B31.1 X AB X I(L) rging Pump T H B31.1 X AB X I(L)

T H B31.1 X AB X I(L)

T B III-2 X AB X I(L)

T C III-3 X AB X I WBNP-79

Notes:

(1) T = Tennessee Valley Authority W = Westinghouse (2) A = TVA Safety Class A B = TVA Safety Class B C = TVA Safety Class C D = TVA Safety Class D G = TVA Safety Class G H = TVA Safety Class H 1, 2a, 2b, or 3 = ANS N18.2 Safety Class I = Seismic Category I, part of structure (3) The code class listed for an item is the minimum required. An item may have been obtained to a higher code level than that listed.

III=ASME Boiler and Pressure Vessel Code - Section III III-1=ASME Boiler and Pressure Vessel Code - Section III, Class 1 III-2=ASME Boiler and Pressure Vessel Code - Section III, Class 2 III-3=ASME Boiler and Pressure Vessel Code - Section III, Class 3 IIIa9=ASME Boiler and Pressure Vessel Code - Section III, Article 9 "Protection Against Overpressure" VIII=ASME Boiler and Pressure Vessel Code - Section VIII P&V-I=ASME Code for Pumps and Valves for Nuclear Power, Class I P&V-II= ASME Code for Pumps and Valves for Nuclear Power, Class II P&V-III=ASME Code for Pumps and Valves for Nuclear Power, Class III 4 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

D100=American Waterworks Association, Standard for Steel Tanks, Standpipes, Reservoirs, and Elevated Tanks for Water Storage, AWWA, D100 B31.1=ANSI B31.1 1973 Edition through summer 1973 Addenda ACI=American Concrete Institute AMCA=Air Moving and Conditioning Association P=TVA Safety Class P ARI=Air Conditioning and Refrigeration Institute HIS=Hydraulic Institute Standards IEEE= Institute of Electrical and Electronics Engineers NFPA=National Fire Protection Association B58.1=ANSI B58.1 Vertical Turbine Pumps B73.1=ANSI B73.1M Horizontal end Suction Centrifugal Pumps UL/FM=Underwriters Laboratory or Factory Mutual (4) Quality assurance required:

X = Yes, - = No (5) C=Containment AB=Auxiliary Building AEB=Additional Equipment Bldg.

CB=Control Building DB=Diesel Generator Building SB=Service Building CDWEB=Condensate Demineralizer Waste Evaporator Building O=Outdoors above ground B=Buried in ground SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-25

P=ERCW Pumping Station TB=Turbine Building (6) X=Source of radiation

-=No source of radiation P=Possible source of radiation (7) I=Seismically qualified I(L)=Limited seismic qualification

-=Not seismically qualified (8) AMCA Class III and performance tested in accordance with AMCA Standard air moving devices.

(9) Performance test required.

(10) Deleted by FSAR Amendment 79 (11) Those components of the heating, ventilating, and air conditioning system (HVAC), which are not covered directly by the TVA piping classifications of Subsection 3.2.2, have been designed and constructed to standards and specifications which are equivalent to ANS Safety Class 2b.

(12) The lower compartment coolers are Seismic Category I except for the cooling coils which are Seismic Category I(L). The upper compartment, CRDM and instrument room coolers are Seismic Category I(L). None of the Reactor Building ventilation coolers are qualified to maintain ERCW pressure boundary integrity.

(13) Vessel was built to the requirements of ASME code but does not have code stamp.

(14) Acceptable for use within Regulatory Guide 1.26 Quality Group C system (ASME Section III, Class 3.) For the auxiliary air system, see also Note 1 of Table 3.2-2a.

(15) Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C.

6 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

(16) This component is actually a system containing many components. Those parts of the system that contain component cooling water are Safety Class C with design code of ASME III, Class 3. The remainder of the system is Safety Class G with design codes as identified in Table 3.2-5.

(17) The secondary chamber of the steam generators (shell side) are built to the ASME B&PV Code Section III, Division 1, Class 1, and applicable code interpretations and/or rulings. Although the shell side of the steam generator functions only dictate a TVA Class B, they were procured to comply with ASME Section III, Class 1. Therefore, repairs, modifications and/or additions shall be in accordance with the original contract specifications and drawing requirements.

(18) The ERCW pump motor bearing cooling coils, required for plant safety, were not purchased to TVA Class C standards. The vendor-supplied cooling coils have been seismically qualified and are considered safety-related and suitable for the intended service. For their application, the level of qualification meets the intent of TVA Class C* at the motor interface.

(19) Although not purchased and stamped in accordance with ASME Section III Code Requirements, this equipment meets the highest available commercial quality standards.

(20) All purge air ductwork (supply and exhaust) inside the annulus and exhaust air ductwork from the Shield Building isolation valves 1-FCV-30-61 and -62 to 1-FCV-30-213 and -216 is Seismic Category I. Supply air ductwork from the ABSCE isolation valves 1-FCV-30-294 and -295 to the Shield Building isolation valves 1-FCV-30-2 and -5 and all purge air ductwork (supply and exhaust) inside primary containment up to the inboard containment isolation valves is Seismic Category I(L).

(21) All piping between the containment isolation valves is Seismic Category I. The piping up to the containment isolation valves on each side is Seismic Category I(L).

(22) This tank was procured to ASME Section III-3 requirements.

(23) Not used for Unit 1 operation.

(24) The boron recycle (recovery) system is not required for the operation of Unit 1.

See FSAR Section 9.3.7. The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.

(25) The Primary Water Storage Tank (PWST) meets the ASME Section III, Class 3, design by analysis requirements with Seismic Class I(L) Forcing Functions for atmosphere tanks.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-27

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category xiliary Control Air Portions of the System 2a B I necessary for containment isolation.

(See Note 5)

Balance of system. 2b C I (See Note 1 and Note 5). System boundary is considered to exist to the upstream side of the filters which tie the non-essential control air systems to the auxiliary control air lines.

ron Recycle Equipment used to 2b C (See I (See Note ee Note 12) provide a ready Note 11) 11) supply of con-centrated boric acid (boric acid tanks, boric acid transfer pumps, boric acid filters, and associated pipes and valves).

Processing and Waste 3 D I Holdup Equipment whose failure could result in a site boundary dose of 0.5 rem or more. (See Note 8) (gas stripper feed pumps, holdup tanks and holdup tank recirculation pumps, and associated piping and valves).

8 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Other equipment which - G I(L) carries minimal or no radioactive wastes and/or has no safety function to perform (monitor tank and pumps, evaporator condensate deminera-lizers, batching tank, gas stripper and boric acid evaporator packages, evaporator feed ion exchangers, condensate filters, concentrate filters, evaporator feed ion exchange filters, and associated pipes and valving).

emical and Equipment that cir- 2a B I lume Control culates reactor coolant normally or during an accident (charging, letdown, excess letdown, seal water return lines; positive displacement and centrifugal charging pumps; volume control tank; and, miscellaneous associated lines and valves). (See Note 8)

Equipment necessary for 2b C I boric acid addition (boric acid (See Note (See Note tanks, boric acid blender, lines 11) 11) and valves).

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-29

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Equipment associated 3 D I with radwaste cleanup whose failure could result in a 0.5 rem offsite dose (Mixed bed and cation demineralizers, associated piping and valves).

Balance of equipment - G I(L)

(resin fill and chemi-cal mixing tanks, piping and valves).

mponent Portions of the system 2a B I oling necessary for con-tainment isolation.

Major pressure 2b C I boundary components.

Equipment inside the - H -

CDWE Building. (See Note 13)

Sample heat exchangers, - G or L I(L) drains, and vents.

ntainment Major pressure boundary 2a B I ray components.

sential Raw Portions of the system 2a B I oling Water piping necessary for containment isolation.

Portions of the system 2b C I piping required for plant safety. (See Note 4, 10).

Portions of the system piping not G I(L) required for plant safety, but in Seismic Category I structures.

0 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Portions of the system - H -

piping not required for safety and/or not in Seismic Category I structures.

Auxiliary control air - C I compressors (see Note 1).

HVAC equipment - - I required for plant safety (see Note 2).

HVAC equipment not - - I(L) required for plant safety (see Note 3)

Portions of the strainer - G I(L) backwash/backflush piping (see Note 6).

dwater Downstream of and 2a B I including the anchors in the valve room exterior walls.

Flow transmitter - P -

sensing lines Upstream of the - H -

anchors.

dwater, Downstream of and 2a B I iliary including the first anchor which is immediately up-stream of the check valve closest to and outside of contain-ment.

Portions of the system not in 2b C I SC-2a but required after a seismic event.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-31

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Condensate supply - G I(L) and other piping not required after a seismic event but in Seismic Category I structures.

Balance of system. - H -

Protection Piping necessary to 2b C I h Pressure provide water to FP) AFW system in the event of a flood above plant grade.

Equipment necessary to provide makeup to the primary and spent fuel cooling systems in the event of a flood above plant grade.

Balance of equipment - G I(L) within Seismic Category I structures.

Remainder - H -

od Mode Portion of the 2a B I ation and system necessary keup for containment xiliary isolation.

rging)

Piping essential for 2b C I makeup and boration in the event of a flood above plant grade.

Balance of system. H I(L) 2 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category l Oil Equipment necessary 2b C I to assure continuous, full power operation of the emergency diesel-generator sets for seven days following a loss of offsite power.

Balance of equipment - G or H I(L) in Seismic Category I structures which performs no safety function but needs to maintain pressure boundary.

Remainder - H -

l Pool Portions of the 2a B I aning and system required ling for containment isolation.

Portions of the 2b C I system required to cool the spent fuel (heat exchangers, pumps, associated piping and valves).

Makeup water loop from - G I(L) the RWST through RWP (See Note pumps to isolation valve 7) downstream of pumps SFP skimmer piping.

Line from isolation valve 2b C I downstream of RWP pumps to the SFPC loop Balance of system. G I(L)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-33

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category ting, System containment 2a B I tilation, isolation valves Air Con- and piping between ning valves.

AC)

HVAC components, duct- 2b M,Q, I work, and piping or S located in the Reactor, Auxiliary, Control, and Diesel Generator Buildings that perform safety related air cooling and heating opera-tions or essential air filtration and purification pro-cesses or that supply life sup-porting air (see Note 2).

Balance of system - M,Q,S, I(L)

(see Note 3). U,V rogen Portion of H2 Analyzer system - - I lyzer which supplies pure O2 as reagent gas to H2 Analyzer Panels and Vacuum Trap Assemblies located on sample tubing low points for H2 Analyzer System. (see Note 9).

Condenser Portions of the 2b C I system required to function during a DBA.

Portions of the 2a B I system that provide a containment isolation function 4 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category System refrigeration - N I(L) piping Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category System refrigeration - M I(L) piping in Reactor Building.

Balance of system not - G or H I(L) classified as refrigeration piping (i.e. drains).

n Steam Upstream of, and 2a B I including the flued-head anchors in the valve room exterior walls.

Turbine impulse pressure - P -

transmitter sensing lines Downstream of the - H -

flued-head anchors.

ctor Coolant Equipment within the 1 A I reactor coolant system boundary, failure of which could cause a Condition III or IV loss-of-coolant accident. (Com-ponents downstream of a 3/8 inch or smaller orifice are excluded).

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-35

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Portions of the system 2a B I protected from reactor coolant pressure by a 3/8 inch or smaller orifice, reactor vent head ventilation system, and branch piping for the pressurizer steam space instrumentation nozzles (0.83 inch inside diameter, or smaller).

Portions of the system 2a B I that provide a contain-ment isolation function.

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Safety and relief valve - G I(L) discharge piping.

Equipment that does not - G I(L) provide a safety function (pressurizer relief tank (PRT), primary water supply inside containment, nitrogen supply and vent headers to the PRT).

idual Heat Major pressure boundary 2a B I moval (RHR) components.

ety In- Balance of system that 2a B I ion (SI) recirculates reactor coolant after an accident or prevents leakage of reactor coolant to points external to the system. (See Note 8).

Refueling water 2a B I storage tank and SIS accumulators.

6 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Piping from the SIS 2a B I accumulators to the accumulator isolation valves, and from the RWST to SC-2a valves in the safety injection, RHR, charging pump, and containment spray pump suction lines.

Piping to CVCS holdup 2b C I tanks.

Accumulators N2 fill - G I(L) line.

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category am Generator Piping and valves from the steam 2a B I wdown generators to and including the containment isolation valves Piping and valves down stream of - G I(L) the containment isolation valves to Column U Piping and valves down stream of - H -

Column U.

ste Disposal Portions of system 2a B I that provide a containment isolation function.

Equipment whose failure could 3 D I cause a site boundary dose of 0.5 rem or more (per RG 1.26). (See Note 8).

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-37

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category Balance of system in - G I(L)

Seismic Category I structures for which a component failure may cause damage to safety-related equipment.

Equipment not within - H -

Seismic Category I structures.

e 1: Although not purchased and stamped in accordance with ASME Code Section III requirements, the auxiliary control air system compressors and dryers meet the highest commercial quality standards.

e 2: Although not purchased under ASME Section III requirements, the HVAC equipment is required for plant safety and does meet the highest commercial quality standards. Safety Class 2b round flexible and triangular duct board ducting installed as part of the ceiling air delivery system in the main control room above the suspended ceiling is qualified to limited seismic requirements, analyzed to ensure that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, and the ducting pressure boundary will not be lost, and the ducting is constructed of standard commercial grade materials.

e 3: Although not purchased under ASME Section III requirements, this HVAC equipment (except for the Reactor Building coolers) maintains the pressure boundary integrity of the ERCW system. Inside containment, the lower compartment coolers are Seismic Category I except for the cooling coils which are Seismic Category I(L). The upper compartment coolers, CRDM and instrument room coolers are Seismic Category I(L).

e 4: Although the screen wash pumps, piping and valves are required for plant safety, they were not purchased to TVA Class C standards. The pumps are seismically qualified, have limited QA, and were the best commercially available product for the service. The piping and valves are designed to TVA Class G and Seismic Category I(L) for pressure boundary integrity. For this application, this level of qualification meets the intent of TVA Class C. Criteria requires that any future modifications or repair to the ERCW screen wash pumps, piping or valves are made to the requirements of TVA Class C.

8 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category NRC Bulletin 83-06 "Nonconforming Materials Supplied By Tube-Line Corporation" has been evaluated for this system; Carbon Steel and Stainless Steel Program Plans were developed, presented to the NRC, verbally approved, initiated, completed, and reported to the NRC in the NRC Bulletin 83-06 report. The NRC Bulletin 83-06 and NCR GENMEB 8301 were closed and approved by the NRC Inspection Reports 50-390/84-03 and 50-391/84-03. The fittings that were installed and found to be acceptable are identified in Tables 3.1-6 and 3.1-7 of WB-DC-40-36 (Reference DIM WB-DC-40-36-18). The potential effect of unacceptable indications in radiographs of Tube-Line fittings welded with filler material has also been evaluated. The radiographs were supplied by Tube-Line as required by the material specification (ASME SA-403). Piping stress analysis was reviewed for Condition Adverse to Quality Report WBP890546. The review showed that stresses in the fittings are within ASME Section III allowable stresses even if the worst radiographic indications for each size fitting were to be transposed to the highest-stressed fitting. Authorization to use an alternative to the testing requirements of Section III Subsection ND-2000 of the ASME Code was provided by the NRC through a SER dated September 23, 1991.

e 5 Portions of the control air system were not pneumatic tested to the correct pressure. NRC Inspection Report Nos. 50-390/90-04 and 50-391/90-04 has approved an alternate acceptance to pneumatic test criterion.

e 6 The strainer backwash/backflush piping has been upgraded from Class G to Class G Seismic Category I(L) for pressure boundary integrity.

e 7 Class G piping labeled with PBQA is analyzed for Seismic Category I(L) pressure boundary retention and is within the scope of the hydrostatic QA program (the valve seat terminates the PBQA boundary). All remaining Class G piping is seismically supported for position retention only.

e 8 Manual block valves exist in the discharge piping of the relief valves which provide overpressure protection for the volume control tank, the boron injection tank, and the waste gas compressors. ASME Code,Section III, Subsection NC/ND, Paragraph 7153 prohibits the placement of a block valve in the discharge of pressure relief devices unless the block valve is installed with positive controls and interlocks and means are provided such that the operation of the controls and interlocks can be verified. The following design and administrative features, evaluated and approved by NRC,[2] are an acceptable alternative to the ASME code requirements because they provide reasonable assurance that both stop valves would not be left closed during plant operation. Redundant flowpaths exist in the relief valve discharge piping, the locked-open block valves are installed in a controlled access location, and administrative procedures are in place to assure the locked-open position of the block valves.

e 9 Although not purchased under ASME Section III requirements, the O2 supply bottles, related manifolds and vacuum trap assemblies are required for post-LOCA conditions and meet the highest commercial quality standards, and are qualified to WBNP Seismic Category I classification.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-39

Table 3.2-2a Classification of Systems Having Major Design Concerns Related to a Primary Safety Function (Cont'd)

Safety Class TVA Seismic tem System Subsection ANS, N-18.2 Class Category e 10 Some welds in the buried portion of the ERCW System did not receive a Section III hydrostatic test visual examination. They did, however, receive a vacuum box examination after welding and the code required NDE. Additionally, a pressure test was performed and held for 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, then a Section XI VT-2 test was performed using 1 psi/min pressure drop or a 2 gal/min loss for 10 min. This was approved by the NRC in Safety Evaluation Report, Supplement 12.

e 11 Although not originally purchased to ASME Section III and Seismic Category I requirements, the replacement immersion heater assemblies for boric acid tank A have been non-destructive tested and evaluated to be acceptable for the classification.

e 12 The boron recycle system is not required for operation of Unit 1. See FSAR Section 9.3.7.

The portions of this system which are used for the operation of Unit 1 are discussed in FSAR Section 9.3.4.

e 13 Not used for Unit 1 operation.

0 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

able 3.2-2b Classification of Systems Not Having Major Design Concerns Related to a Primary Safety Function (See Note 2 below)

Safety Class TVA Seismic System Subsection ANS. N-18.2 Class Category tion of system necessary for primary 2a B I tainment isolation.

tion of system in Seismic Category I - G, H or L I(L) ctures and not in a higher safety class (See Note 1) cept refrigeration piping).

ance of system (except refrigeration - H, J, or L -

ng).

e 1:In special applications, where the code requirements for Class G are not appropriate, Class K y be used.

e 2: All Entries Above Apply to the Following Systems:

iliary Boiler Hydrogen Cooling bon Dioxide Storage, Fire Protection, Layup Water Treatment Purge Lube Oil emical Cleaning Makeup Water ndensate Potable Water ndenser Circulating Water Primary Water ndenser Tube Cleaning Raw Cooling Water mineralized Water Raw Service Water raction Steam Reheat Steam dwater Treatment and Secondary emical Feed Roof and Floor Drains nd Seal Insulating Oil Service Air and Non-Essential Control Air nd Seal Water Station Drainage ater Drains and Vents Turbine Drains and Misc. Piping, Vacuum primer.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-41

ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 1 of 4)

Qualified in Number Number Conformance (1)

Equipment Per Unit / In Plant with IEEE 344-1971

-kV Auxiliary Power tem 6.9-kV Shutdown Boards 2/4 Yes (2)

(Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B 6.9-kV Shutdown Logic Relay Panels 2/4 Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B 6.9-kV/480V Shutdown Board Transformers 6/12 Yes (2000 kVA)

(Unit 1) 1A1-A, 1A-A, 1A2-A, 1B1-B, 1B-B, 1B2-B (Unit 2) 2A1-A, 2A-A, 2A2-A, 2B1-B, 2B-B, 2B2-B 6.9-kV/480V Pressurizer Heater Backup Group 2/4 Yes (3)

Transformers (500 kVA)

(Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B (Not required for Unit 1 operation)

V Auxiliary Power System 480V Shutdown Boards 4/8 Yes (4)

(Unit 1) 1A1-A, 1A2-A, 1B1-B, 1B2-B (Unit 2) 2A1-A, 2A2-A, 2B1-B, 2B2-B V Reactor MOV Boards 4/8 Yes (Unit 1) 1A1-A, 1A2-A, 1B1-B, 1B2-B (Unit 2) 2A1-A, 2A2-A, 2B1-B, 2B2-B V Reactor Vent Boards 2/4 Yes 2 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 2 of 4)

Qualified in Number Number Conformance (1)

Equipment Per Unit / In Plant with IEEE 344-1971 (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B V Control and Auxiliary

g. Vent Boards 4/8 Yes (Unit 1) 1A1-A, 1B1-B, 1A2-A, 1B2-B (Unit 2) 2A1-A, 2B1-B, 2A2-A, 2B2-B V Diesel Auxiliary Boards 4/8 Yes (Unit 1) 1A1-A, 1B1-B, 1A2-A, 1B2-B (Unit 2) 2A1-A, 2B1-B, 2A2-A, 2B2-B V Distribution Panelboards Pressurizer Heater kup Groups 2/4 Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B (Not required for Unit 1 Operation)

V Transfer Switch for mponent Cooling System mp C-S -/1 Yes V AC Vital Plant Control Power System Static Inverter System Components 4/8 Yes a.Auctioneer unit b.A transformer rectifier power supply c.A single phase static inverter with associated equipment for control, voltage, regulation, filtering, and instrumentation

d. Regulated transformer bypass source with static and manual bypass switches (Unit 1) 1-I, 1-II, 1-III, 1-IV (Unit 2) 2-I, 2-II, 2-III, 2-IV (Spare) 0-I, 0-II, 0-III, 0-IV SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-43

ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 3 of 4)

Qualified in Number Number Conformance (1)

Equipment Per Unit / In Plant with IEEE 344-1971 120V AC Vital Instrument 4/8 Yes Power Boards (Unit 1) 1-I, 1-II, 1-III, 1-IV (Unit 2) 2-I, 2-II, 2-III, 2-IV V DC Vital Plant Control Power System 480V AC Vital Transfer Switches -/4 Note (4) Yes Transfer SW I, II, III, IV 125V DC Vital Battery Chargers -/6 Note (4) Yes Chgrs I, II, III, IV, Spare Chgr 6-S and 7-S Transfer Devices for Spare 125V DC Vital Battery Chargers -/4 Note (4) Yes DC Transfer Switch 6DC-8 DC Transfer Switch 7DC-S AC Transfer Switch 6AC-S AC Transfer Switch 7AC-S V AC Vital Disconnect Panels -/4 Note (4) Yes Panel I, II, III, IV V DC Vital Batteries -/4 Note (4)

Batteries I & II Batteries III & IV V DC Vital Battery Boards -/4 Note (4) Yes I, II, III, IV ctrical Penetrations High Voltage Power Penetrations 4/8 Yes Nuclear Instrument System Penetrations 4/8 Yes Control Rod Position Indication Penetrations 1/2 Yes 4 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

ble 3.2-3 Electrical Power System Equipment Designed to Operate During and After a "Safe Shutdown Earthquake" (Page 4 of 4)

Qualified in Number Number Conformance (1)

Equipment Per Unit / In Plant with IEEE 344-1971 Low Voltage, Power, Control, and Indication Penetrations 41/82 Yes Thermocouple Penetrations 3/6 Yes site Electrical Power rce Components Diesel Generator Protective Relay Panels 2/4 Yes (Unit 1) 1A, 1B (Unit 2) 2A, 2B Diesel Control Panels 2/4 Yes 125V Diesel Generator Batteries and Battery Racks 2/4 Yes Distribution Panels 2/4 Yes V DC Battery Chargers 2/4 Yes ndby Diesel Generators 2/4 Yes (Unit 1) 1A-A, 1B-B (Unit 2) 2A-A, 2B-B

1. Those equipment items procured prior to publication of IEEE 344-1971 were purchased under specifications which TVA believes conform to the intent of that document.

Equipment procurement, modification, and evaluation activities after September 1, 1974 applied the IEEE 344-1975 standard for seismic qualification.

2. The 6.9-kV shutdown boards are qualified under Section 3.2.2.4.3 of IEEE 344-1971. The test unit withstood higher accelerations than shown on the frequency response spectrum for resonance at 1 percent damping.
3. The 500-kVA transformers were shown analytically to have lower stress under seismic loading conditions than the 2000-kVA transformers which were tested. The 500-kVA transformers are similar in design and construction to the 2000-kVA transformers.
4. The 125-V DC Vital Control Power System is not unitized therefore, numbers shown are on a per plant basis.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-45

Table 3.2-4 Summary of Codes and Standards Safety Class Components of The Watts Bar Nuclear Plant Code Requirements Safety Code Classification Class TVA Seismic Piping, Pumps, Valves, S N-18.2 Class Category and Vessels Remarks 1 A I ASME Code, Note 1 Sec. III, Class 1 2a B I ASME Code, Note 1 Sec. III, Class 2 2b C I ASME Code, Notes 1,2,3 Sec. III, Class 3 3 D I ASME Code, Notes 1 & 3 III, Class 3 TE:1) Equipment designated "Vendor-Supplied Safety-Related Equipment Packages" on the drawing meet the following requirements:

a. The vendor-supplied equipment packages (component and piping) contained within TVA piping systems classified as A, B, C, or D which do not meet the requirements of ASME Section III are installed and documented using the rules of ASME Section III, and manufacturer's instruction manuals, as requirements, except that the materials and equipment are not certified to Section III, and N-5 data report is not required. 10 CFR 50 Appendix B applies. In some cases there may be portions of these packages which are not safety-related (i.e., drains and vents past the first normally closed isolation valve) and do not require installation to these requirements.
b. Any substitute material used or repairs performed by construction shall be in accordance with the original contract specification and drawing requirements.
c. TVA Class D components are those whose postulated failure would result in potential offsite doses that exceed 0.5 Rem to the whole body, or its equivalent. Class D components do not perform a primary safety function.
d. Exception is taken to Note 1.a above for the auxiliary systems supplied on the diesel generator skid. The fuel oil, engine cooling water (except the ASME Section III, Class 3 heat exchangers), starting air and lubricating oil systems are designed per ANSI B31.1. They are designed to Seismic Category I and are within the 10CFR50 Appendix B QA program. Criteria requires that any modifications to this piping are performed to meet the intent of ASME Section III Class 3 (TVA Class C).

6 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-4 Summary of Codes and Standards Safety Class Components of The Watts Bar Nuclear Plant Code Requirements Safety Code Classification Class TVA Seismic Piping, Pumps, Valves, S N-18.2 Class Category and Vessels Remarks ANSI B31.1 code is an acceptable substitute for the ASME code for installation of piping and valves on Class C instrument lines attached to TVA Class M, Q, and S systems. 10 CFR 50 Appendix B applies.

Condition Adverse to Quality Report WBP 900336SCA and NRC Violation 390/90-15-02 identified lack of penetration and/or lack of fusion in ASME Code Section III, Class 3 butt welds made prior to September 26, 1990.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-47

Table 3.2-5 Non-Nuclear Safety Classifications A Seismic Code Classification ss Category Piping PumpsValves Vessels I(L) ANSI B31.1 Manufac- ANSI B31.1 ASME Code, turers B16.5, or Sec. VIII, Standards MSS-SP-66 Div. 1 1

Note 1 ANSI B31.1

  • B16.5, or MSS-SP-66 N/A * * *
  • I(L) * * *
  • Note 1 * * *
  • Note 2 * * *
  • 1 Code used is determined by the design requirements of the equipment.

Note 1:Those portions of TVA Class H and L systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading.

Note 2:This class applies to specific sensing lines which meet ASME Code Section III, Class 3 requirements except that inertia effects need not be used for design of lines in non seismic areas and independent verification by an Authorized Nuclear Inspector is not required for fabrication and installation. 10 CFR 50 Appendix B applies. N-5 data report is not required.

Portions of sensing lines in Seismic Category I structures meet Seismic Category I(L) pressure boundary requirements.

8 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Table 3.2-6 TVA Heating, Ventilation, and Air Conditioning Classifications VA ANS Seismic ass Safety Class Code Jurisdiction Category M 2b* ANSI B31.5 I or I(L)

N None ANSI B31.5 Note 1 Q 2b* Round Duct, Steel, Spiral I or I(L) or Longitudinal Seam, Locked Seam or Welded (ASTM A211) and SMACNA High Velocity Duct Con-struction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/

ASME N509 (see Note 2).

S 2b* Rect. Duct, Steel, Locked Seam or I or (L)

Welded, SMACNA High Velocity Note 4 Duct Construction Standards, 2nd Edition, 1969. Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3). ANSI/ASME N509 (see Note 2).

U None Round Duct, Steel, SMACNA Low I(L)

Velocity Duct Construction Standards, 4th Edition, 1969.

Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).

V None Rect. Duct, Steel, SMACNA Low I(L)

Velocity Duct Construction Standards, 4th Edition, 1969.

Criteria requires that future duct constructions after December 21, 1990, are performed in accordance with Specifications G-95, N3M-914, N3C-942 and Design Criteria WB-DC-40-31.8 (see Note 3).

  • TVA Class M, Q, and S designations are also used on heating, ventilation, and air-conditioning systems which have no ANS safety class requirements if seismic requirements are invoked.

SSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS 3.2-49

Table 3.2-6 TVA Heating, Ventilation, and Air Conditioning Classifications VA ANS Seismic ass Safety Class Code Jurisdiction Category e 1: Those portions of TVA Class N systems located inside Seismic Category I structures are Seismic Category I(L). The balance of these systems are not designed for seismic loading.

e 2: Those portions of TVA Classes Q and S Category I duct which are of welded construction, that are fabricated or repaired after January 12, 1987, meet the welding requirements of ANSI/ASME N509 1976. The workmanship samples are not required to have Penetrant Testing (PT) or Magnetic Testing (MT).

e 3: All duct installations prior to December 21, 1990, were evaluated and qualified to meet the requirements of WB-DC-40-31.8.

All duct installations after December 21, 1990, shall be in accordance with specifications G-95, N3M-914, N3C-942, and Design Criteria WB-DC-40-31.8.

e 4 Safety Class 2b round flexible and triangular duct board ducting installed as part of this ceiling air delivery system in the main control room above the suspended ceiling is qualified to Seismic I(L) requirements, analyzed to ensue that the ducting will remain in place, the physical configuration will be maintained such that flow will not be impeded, the ducting pressure boundary will not be lost, and is constructed of standard commercial grade materials.

0 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used CASES GN/MATERIAL RELATED N-192 Provides rules for use of flexible metal hose Regulatory Guide 1.84, Rev 26 imposes the Referenced in data report for following addition to the requirements of some of the flexible metal hose Code Case N-192: The applicant should assemblies.

indicate system application, design and operating pressure/temperature rating of the flexible hose. Data to demonstrate compliance of the flexible hose with NC/ND-3649 particularly NC/ND-3649.4(e), are required to be furnished with the application.

1 N/A Provides rules for the use of ASTM A-500 Grade B and ASTM A-501 as integrally welded attachments.

N-304 Provides for use of other materials not None Code Case N-304 was listed in the appendices. originally approved by the NRC in Regulatory Guide 1.84, Rev.

20 dated November 1982.

Subsequent revisions of the Code Case have continued to retain unrestricted approval.

0 N-188-1 Provides rules for using alloy 625 or 825 None Materials to be used for flexible tubing that is welded without filler metal. metal hose assemblies N-514 Provides alternate analysis for None Pressure and Temperature pressure/temperature curves and low Limits Report (PTLR) temperature overpressure protection (LTOP) system.

ICATION/EXAMINATION/TESTING RELATED WBNP-90

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used NA Provides for alternative testing of Regulatory Guide 1.84, Rev. 26, accepts Used in G-29 Process inaccessible or embedded welded joints in Code Case N-32-4 based on the following Specification 3.M.9.1 piping. clarification and interpretation. Code Case N-32-4 does not replace paragraph NC/ND-6129, "Provisions For Embedded Or Inaccessible Welded Joints In Piping," of the Code. The intent of the Code Case is to provide additional testing above code requirements and permit liquid penetrant or magnetic particle testing in place of radiographic testing for Class 3 piping with 3/8 inch nominal wall or less. Paragraph 1 contains an additional requirement to the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.

Paragraph 2 is a variation in the volumetric examination technique and was acceptable as written. Paragraph 3 contains an additional requirement and is not a relaxation of the Code. It was, therefore, acceptable but unnecessary to include in the Code Case.

NA Provides for an alternative examination None Used on the 47B333 drawings.

requirement for Class 1 and 2 welds made by an automatic welding process.

2 NA Permits acceptance of open ended Class 2 None Used in G-29 Process or 3 piping within Class 2 or 3 vessels or Specification 3.M.9.1. Also tanks or into the gaseous atmosphere of invoked by NC/ND-6000.

Class MC vessels without hydrostatic testing WBNP-90

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used NA Permits acceptance of open ended piping None Used in G-29 Process without hydrostatic testing. Specification 3.M.9.1. Also invoked by NC/ND-6000.

NA Safety and safety relief valve piping None Used in G-29 Process submerged in a suppression pool inside a Specification 3.M.9.1. Also Class MC or CC vessel may be exempted invoked by from hydrostatic testing. NC/ND-6000.

NA Provides rules for addition of weld metal at Regulatory Guide 1.84, Rev. 26 imposes the Used to disposition NCR W weld end prep to meet dimensional and following requirement in addition to the P.

minimum wall considerations. requirements in Code Case N-292: Class 3 piping that is longitudinally welded and that has a weld efficiency factor of 1.0 as selected from Table ND-3613.4-1 should receive a 100% volumetric examination (RT or UT) of the deposited weld metal in accordance with the requirements of ND-5000.

NA Provides for socket weld sizes <1.09 TNOM. None Used to disposition NCRs 3702R R0, W-427-P R0, 3555R R0, 4135R R0, 4345R R1, 4739-0, 2217R, 4114, 5305-0, and 5833 R0.

N-341 Provides for a five year period of None certification of Level III NDE personnel.

LITY ASSURANCE RELATED NA Allows information to be cross referenced or depicted on an attached drawing rather than physically attached to the data report.

WBNP-92 NA Provides alternatives when Code data None Used in disposition of NCRs plates are removed. 1464R R1 and 3750.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used E EDITION AND ADDENDA GN/MATERIAL RELATED SA-36 74S76 Bend testing made an optional None See Interpretation III-1-83-275.

(supplemental) requirement Used in G-62.

SA-515 74W74 Bend testing made an optional None See Interpretation III-1-83-275.

(supplemental) requirement Used in G-62.

SA-516 74W74 Bend testing made an optional None See Interpretation III-1-83-275.

(supplemental) requirement Used in G-62.

SA-283 74S76 Bend testing made an optional None See Interpretation III-1-83-275.

(supplemental) requirement Used in G-62.

SA-479 74S76 Decreased the required elongation to 30% None Used in G-62.

and reduction in area to 40%.

40(e) 80W81 Permits the use of material certified to None Used in G-62 editions and addenda earlier than the Code of Record providing certain requirements are met.

0 77W78 Deletes the minimum size of attachment None Used in disposition of NCR pads 3723R 5 74ED Provides for certain minor permanent None Used to disposition NCR 5409 attachments to be made of uncertified R1 material 80S81 Deleted the paragraph limiting instrument None Used to disposition NCR WBNP-92 take off size 2001R. Also involved in change number NC/ND3676-1

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 3.10 74ED Provides for acceptance of locally over- None Used to disposition NCR 3250 stressed conditions R1

- 74W76 Provides for use of intervening isolation None A valves 80S81 Deletes requirements formerly in None This request has been paragraph NC/ND-3676 affecting lagging of generated to cover situations in steam instrument lines. which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.

-3643.1 77S77 Adds provisions for making branch None This request has been connections by means of complete generated to cover situations in penetration pipe to pipe welds. which it is not possible to state with certainty that some provisions of later Codes have or have not been used at WBN.

-2311 74W76 Lists materials exempted from impact None Requirements of later Code testing. This provision exists in Section NB exempting certain materials 2311 Summer 1972 Addenda which is from impact test for Class 2 referenced in Section NC/ND. and Class 3 systems.

WBNP-92

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used II, 80ED Bolting material allowable stress of non- None For the analysis of non-ix XVII, pressure retention parts (i.e., motor pressure retention parts of 1-actuator mounting screws). FCV-72-13 and -34 for Sect.

increased valve closure thrust loops. SQN calc. SCG-4M-00786 was reviewed for WBN application. Since the 1971 ASME III NC Codes do not contain stress allowables for non-pressure retention parts, thus ASME III NC and Appendix XVII of 1980 Codes, Sect. 2461.1 rules will be used for the analysis. Ref. DCN-S-33722-A and MEB Calc. EPM-CDM-071092 and -071192.

ICATION/EXAMINATION/TESTING RELATED 6 80W81 Permits limited welding of attachments to a None Used in G-29 Process piping system after it has been Specification 3.M.9.1.

hydrostatically tested providing certain conditions are met.

9 77W78 Provides for alternative testing of None Used in G-29 Process inaccessible or embedded welding joints in Specification 3.M.9.1.

piping.

8 77S78 Piping systems which serve as spray None Used in G-29 Process systems shall be hydrostatically tested to Specification 3.M.9.1. Also the rules of this section, except that the invoked by NC/ND-6000.

test may be performed with the spray nozzle attachment connections plugged.

The spray nozzles and any connection WBNP-92 beyond the run connections need not be hydrostatically tested.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 1 80S80 Air pockets in components or systems shall None Used in G-29 Process be minimized during the conduct of the Specification 3.M.9.1. Also hydrostatic test by providing vents at high invoked by NC/ND-6000.

points, or by flushing the system or by providing calculations to show that the entrapped air is dissolved at the pressure/temperature conditions existing during the test.

2.1-1 74ED PWHT holding time is specified to be: For T None Used in G-29 Process less than or equal to 1/2 inch, 30 minutes; Specification 2.M.1.1.

For T greater than 1/2 inch but less than or equal to 2 inches (P number 1 & 3), 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> per inch; For T greater than 2 inches (P number 1 & 3), 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> plus 15 minutes per inch over 2 inches; For T greater than 1/2 inch but less than or equal to 5 inches (P number 4,5,6,7,11,11A), 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> per inch; For T greater than 5 inches (P number 4,5,6,7), 5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> plus 15 minutes per inch over 5 inches. For T greater than 5-inches (P Number 11, 11A) one hour per inch.

3 74ED For PWHT above 800°F, the rate of heating None Used in G-29 Process

& cooling shall not exceed a rate of 400° Specification 2.M.1.1.

per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400°F per hour.

4.3 74ED For PWHT, the minimum width of controlled None Used in G-29 Process band at each side of the weld on the face of specification 2.M.1.1. G-29 the greatest weld width shall be the uses 2 times the thickness or 2 thickness of the weld or 2 inches whichever inches whichever is less. This is less. (2.M.1.1 uses the minimum from is more conservative than the WBNP-92 71S73 and the maximum from 74). Code requires.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 3 74ED For PWHT above 800°F, the rate of heating None Used in G-29 Process

& cooling shall not exceed a rate of 400° Specification 2.M.1.1.

per hour divided by the maximum thickness in inches of the material being heat treated but in no case more than 400°F per hour.

74ED Deleted requirement of Code of Record None Used in G-29 Process Paragraph 4623.1 that furnace temperature Specification 2.M.1.1.

be less than 400°F when the component is placed in it for PWHT.

3.1 83S83 Relative to examination of defect removal None Used in G-29 Process area (adds the following) this examination Specification 1.M.1.2.

is not required where defect removal removes the full thickness of the weld and where the backside of the weld is not accessible for removal of examination materials.

1.2 74ED Deletes Code of Record requirements for None Used in G-29 Process MT/PT examination of temporary Specification 1.M.1.2.

attachment removal sites on Class 3 components. Permits temporary attachments but deletes the NDE examinations of removal areas.

-6322 80S81 (By reference to NC/ND-6222) If the NC/ND-6221(a) Used in G-29 Process minimum test pressure of NC/ND-6221(a) NC/ND-6221(d) Specification 3.M.12.1 or (d) is exceeded by 6% at any location, the upper limit shall be established by analysis using all loadings that may exist during the test.

WBNP-90

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 0 74ED (By reference to Section V T-732.2(B) T-733.2 Used in G-29 Process which refers to T-733.2) Direct or rectified Specification 3.M.2.1.

current shall be used at 700/N to 900/N amperes per inch OD up to 5 inches and 500/N to 700/N amperes per inch OD from 5 to 10 inches and 300/N to 500/N amperes per inch OD over 10 inches where N = # of turns.

0 74ED (By reference to Section V T-733.2.) Direct None Used in G-29 Process or rectified current shall be used at 700 to Specification 3.M.2.1.

900 amperes per inch OD up to 5 inches and 500 to 700 amperes per inch OD from 5 to 10 inches and 300 to 500 amperes per inch OD over 10 inches.

7-1 80S80 Minimum size for socket weld fitting fillet None Used in G-29 Process 80W81 weld (CX) = 1.09 T nominal. Specification 3.M.5.1.

Errata 0 74S75 (By Reference to Section V T-732.2) For T-732.2(A) Used in G-29 Process encircling coils, direct or rectified current at T-732.2(B) Specification 3.M.2.1.

35,000 ampere-turns divided by the sum of 2 plus the L/D ratio of the test part shall be used for magnetization.

0 74ED (By reference to Section V T-731.3) Direct None Used in G-29 Process or rectified magnetizing current shall be Specification 3.M.2.1.

used at a minimum of 100 and a maximum of 125 amperes per inch of prod spacing for sections greater than or equal to 3/4 inch.

For sections less than 3/4 inch, amperage shall be 90-110 ampere per inch of prod spacing.

WBNP-90

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 2 74ED All NDE performed under this section shall None Used in G-29 Process be executed in accordance with detailed Specification 3.M.2.1.

written procedures which have been proven by actual demonstration to the satisfaction of the inspector.

0 74W74 (By reference to Section V T-630(B)). The None Used in G-29 Process penetrant materials are acceptable if the Specification 3.M.1.1.

residue does not exceed 0.005 grams or the total sulfur or halogen content shall not exceed 1% of the residue by weight.

0 74ED (By reference to Section V T-662). A None Used in G-29 Process groove may be machined across the center Specification 3.M.1.1.

of each face approximately 1/16 inch deep and 3/64 inch wide, or some other means should be provided to permit side by side comparison without interfering cross contamination between sides.

0 77W79 (By reference to Section V T-660) Permits None Used in G-29 Process qualification to be performed by the entire Specification 3.M.1.1.

block at each temperature, photographing the results and comparing the photographs.

2 74ED All non-destructive examinations shall be None Used in G-29 Process executed in accordance with detailed Specification 3.M.1.1.

written procedures which have been proven by actual demonstration to the satisfaction of the inspector.

2 74ED All non-destructive examinations shall be None Used in G-29 Process executed in accordance with detailed Specification 3.M.7.1.

written procedures which have been proven by actual demonstration to the WBNP-92 satisfaction of the inspector.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used IX, 74ED Allows welding procedure qualification in QW-405.2 which requires qualification in the Used in G-29 Process 3 any position to qualify for all position vertical position with upward progression if Specification 1.M.1.2.

production welds except as noted. fracture toughness (impact testing) is a requirement.

-2578 74ED Unacceptable surface defects may be None Used in G-29 Process removed by grinding or machining Specification 4.M.5.1.

provided: The remaining thickness is not reduced below the minimum required; the depression after defect elimination, is blended uniformly.

0 74W76 Radiography is not required for welded None Used in G-29 Process repairs in material used in components Specification 4.M.5.1.

provided that the welds joining these materials are not required to be radiographed, the extent of the welded repair does not exceed 10 square inches of surface area and the magnetic particle or liquid penetrant examination of the repair is made as required by ND-2539.4.

1 74W74 The time of examination of the weld repairs Since NB/NC-5130d did not exist in summer Used in G-29 Process 0 to weld edge preparations shall be in 1973, these two paragraphs from winter Specification 4.M.5.1.

accordance with NB-5130. (NC-5130). 1974 must be added.

0 74ED (By reference to Section VT-535.1) The None Used in G-29 Process primary reference shall be equalized at Specification 3.M.7.1.

50% full screen height.

0 74ED Ferritic alloy steel pipe that has been None Used in G-29 Process 1 heated for bending shall receive a heat Specification 4.M.2.1.

treatment in accordance with NB-4620.

Exemptions are listed in Table NB-4622.3-1.

WBNP-92

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used T-263.3 83W83 Provides for not using shims if the None Used in G-29 Process radiographic density requirements can be Specification 3.M.3.1.

met.

2 74ED All nondestructive examinations shall be None Used in G-29 Process executed in accordance with detailed Specification 3.M.3.1.

written procedures which have been proven by actual demonstration to the satisfaction of the inspector.

- 71W73 Revise the definition of certain terms in Used in the following a) Equation 3 and 4 to permit other means Calculations and NCRs:

than pipe wall thickness to provide for B26850423089, mechanical strength. B26850508012, B26850710009, B26850710010, B26850808014, B26860611003, MEB850228009, WBP850211062, NCR4145RRO, NCR2217R.

Also involved in Code changes NC-3641(A)-1-3, NC-3641(A)-

1-4, NC-3641(A)-1-5, ND-3641(A)-1-3, ND-3641(A)-1-4, and ND-3641(A)-1-6.

1.3 80W81 Provides for use of capacitor discharge None Used in G-29 Process welding of thermocouples and strain Specification 1.M.4.3.

gauges.

4(e) 74ED Provides alternative for attachment of None Used in Calculation internally threaded bosses. B26850613072.

1 77W77 (By reference to Appendix VI, VI-1132) None Used to disposition CAQR WBNP-90 Provides minimum size for relevant RT WBP890600.

indications.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 2 77ED Defines nonrelevant condition as any None indication with a major dimension of less than 1/16 of an inch. (MT examination).

2.7 74ED Provides for exemptions to otherwise None Also invoked by NC/ND-4000.

mandatory post weld heat treatment based on P number, size, carbon content, and preheat.

- 74S76 Provides for substitution of 200EF preheat None Used in disposition of NCR 1 for PWHT when carbon >0.30% and/or 1146R and in the 47B333 tensile strength >70 ksi for certain material drawings.

applications.

2.3-1 74ED Provides additional exemptions to PWHT New Paragraph NX-4622.3 - defines term Used on the 47B333 Drawings.

under conditions as described in Table. "nominal thickness" as used in Table NX-4622.3-1.

0 & NC- 77W77 (By reference to Appendix IV) Provides None Provides acceptance criteria relevant size and spacing clarification for for rounded indications for RT rounded indications for RT.

0 and 77W78 Exempts welds of non-structural None WBPER910208 1 attachments from liquid penetrant or magnetic particle examination. Does not exempt the removal area of non-structural or temporary attachments.

ND 80S81 Provides exemption to requirement to re- None Used in G-29 process hydro following repair by welding if repair specification 3.M.9.1 weld is not required to be radiographed per NB/NC/ND-4453.4.

WBNP-92

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 0(a) 83S83 Seamless pipe, tube, and fittings 1"NPS None Use of examination and less need not be examined by the rules requirements for ASME of this subarticle. Section III, Class 1, 1" nominal pipe and smaller from a later edition. Invoke for 1" NPS and less, only.

C- 74S76 Exempts PWHT in Pl materials less than 1 None Used to disposition WBP 1 1/2" thick provided 200 degrees F preheat 900419PER is used.

7 80W82 Allows fillet welds to be undersize 1/16 inch None Weld Project for 10% of length of weld.

73 80S80 Exempts orifice plates not exceeding 1/2" None Orifice Plates nominal thickness which are clamped between flanges and used for flow measuring service only from the code.

8(a)4 77ED Areas ground to remove oxide scale or None Provisions for not NDE other mechanically caused examining impressions caused depressions...need not be PT or MT by mechanical means.

examined.

2.9 89ED Increases the area which can be repaird by None Steam generator manway temper bead to 100 in2 and up to 1/3 of repair or other locations as base material thickness. required.

LITY ASSURANCE RELATED 00 80W81 Provided more detailed QA program None Used in the NCM requirements.

40 83S83 Provides alternatives when code data None Used in disposition of plates are removed. WBP880052, NCR 5577R0, NCR 5611R0, and NCR WBNP-92 5619R0.

TTS BAR New Related Requirements and Regulatory ent Source Provisions of Later Code Guide Requirements Examples When Used 40(b) 80S81 Provides alternatives when code data None Use in disposition of NCR plates are removed. 3951R.

0b and 77ED Makes provision to exempt manufacturers None Used in Disposition NCR of small products from certain QA program GENMEB8402, NCR 5146-0, requirements. WBP880431, WBP889432, WBP880433, WBP880437, and WBP880438.

00 89ED Metallic material manufacturers and None QA programmatic material suppliers Quality System program requirements for vendors provides for non certificate holders QA supplying materials and Manual revision and date to be placed on components.

the documentation and also provides documentation requirements for 1" bar stock.

WBNP-92

THIS PAGE INTENTIONALLY BLANK 6 CLASSIFICATION OF STRUCTURES, SYSTEMS, AND COMPONENTS

Wind and Tornado Loading

.1 Wind Loadings

.1.1 Design Wind Velocity The Seismic Category I structures are designed for a 95-mile per hour wind, 30 feet above grade, with a 100 year recurrence interval. The wind was determined from Figure 1, ASCE paper 3269, "Wind Forces on Structures."[3] ANSI A58.1-1972,

'Building Code Requirements for Minimum Design Loads in Building and Other Structures'[4] is an acceptable alternative for determining design wind velocities and forces. The wind was applied for the full height of the structure. A gust factor of 1.1 is included for all wind loads and combinations of loads where wind is involved as recommended in ASCE paper 3269.[3]

.1.2 Determination of Applied Force The pressure and pressure distribution of wind loads on structures were determined by the methods described in ASCE Paper 3269.[3] The dynamic wind pressure, q, is defined as q = 0.00256V2, where q is in psf and V is in mph. A gust factor of 1.1 is applied which redefines q as q = 0.00256 (1.1V)2 = 0.0031OV2. The wind pressure, p, in psf, is defined as p = Cq, where C is the pressure distribution coefficient (Cpe or Cpi) or the shape coefficient (CD) determined from Table 4 in ASCE Paper 3269.[3]

For the analysis of box-shaped structures, a shape coefficient (CD) of 1.3 is used which defines the wind pressure as p = 1.3q. Of the total pressure (p = 1.3q), 0.8q is applied to the windward wall, and 0.5q is applied to the leeward wall. Concurrently the end walls receive 0.7q negative pressure and the roof receives 0.5q uplift.

For the analysis of cylindrical structures, such as the Shield Buildings and storage tanks, the shape coefficients and pressure distribution coefficients are obtained from Table 4(f) of ASCE Paper 3269.[3]

.2 Tornado Loadings

.2.1 Applicable Design Parameters All Category I structures except for the additional Diesel Generator Building are designed for a "funnel" of wind moving with a translational velocity of 60 miles per hour and having a rotational velocity of 300 miles per hour. Category I structures are also designed for an external depressurization of 3 psi occurring in 3 seconds.

The tornado loading for the Additional Diesel Generator Building and structures initiated after July 1979 is discussed in Section 2.3.1.

Information about the spectrum and pertinent characteristics of tornado-generated missiles is in Section 3.5.1.4.

and Tornado Loading 3.3-1

.2.2 Determination of Forces on Structures The pressures and pressure distribution of wind forces on Category I structures due to tornado wind loadings were determined by following the recommendations of ASCE Paper 3269, 'Wind Forces on Structures'.[3] ANSI A.58.1-1972, 'Building Code Requirements for Minimum Design Loads in Building and Other Structures'[4] is used to provide an alternate method to determine tornado wind loads. The provisions for gust factors and variations of wind velocity with height are not applied. The dynamic wind pressure, q, is defined as q = 0.00256V2, where q is in psf and V is in mph. The wind pressure, p, in psf, is defined as p = Cq, where C is the shape coefficient (CD).

A 1.3 shape coefficient is included for box-shaped structures with vertical walls normal to the wind direction. The dynamic pressure load, p = 1.3q, due to tornadoes is applied to the structure walls and roof in the same manner as the wind loads in Section 3.3.1.

Cylindrical structures and tanks have the same shape coefficients applied as for wind loads in Section 3.3.1. The pressures are applied over the structures as shown in Table 4(f) of ASCE Paper 3269.[3]

The loadings of the wind force and the depressurization are considered to act concurrently. Coincident wind velocities and pressure drops for the design tornado are shown in Figure 3.3-1. The relationship between wind velocity and pressure in the design tornado shown in Figure 3.3-1 was developed based on Hoecker's studies of the Dallas tornado of 1957.[1,2]

Venting, when used as a design procedure for reducing the tornado-generated differential pressure, is accomplished by using blowoff panels that fail at a lower differential pressure. Upon relief of the differential pressure by the blowoff panel from the exterior wall of a room, the interior walls and slabs of these rooms are designed for the 3 psi pressure differential.

The effective loads on Category I structures due to tornado-generated missiles were determined using the procedures described in Section 3.5.3.

The effect of various combinations of tornado loadings were studied with respect to each Category I structure. The most adverse combination was selected individually for the design basis of each structure.

The tornado loadings are not considered to be coincident with accident or earthquake loadings.

Venting is utilized to reduce the effective tornado-generated differential pressure in portions of the Auxiliary Building. Four hundred square feet of relief panel area are provided in the roof over the spent fuel pool room and cask loading room at Elevation 814.75 for venting purposes during the tornado. The relief panels are held in place by gravity. An upward pressure of 0.25 psi is sufficient to offset the weight of the panels and cause them to be lifted from their nominal positions. Two corners of each panel are chained to the roof to prevent the panel from becoming a missile after it relieves.

Wind and Tornado Loading

The shutdown board room and, in general, the area between columns q and u at Elevation 757.0 is not part of that portion of the Auxiliary Building vented by design; however, the remainder of the building is considered to depressurize due to the vent area provided by the air intake openings and through ventilation penetrations. In addition, the Diesel Generator Building and the Intake Pumping Station are designed to depressurize due to the vent areas provided by the ventilation openings in those buildings.

The roof and exterior walls of the spent fuel pool room and cask loading area were evaluated for the effective tornado-generated pressure differential and were found to be within allowable stress limits. Air velocity induced by venting is expected to be high at the vent opening, but decrease rapidly within a few feet of the opening. No hazard to equipment is foreseen since the vents are located in the Auxiliary Building roof, well away from any essential equipment.

No hazard to equipment in these areas is foreseen due to the small pressure differential and low air velocities. Walls, ceilings, and floors separating areas experiencing depressurization during a tornado from areas not experiencing depressurization are designed to withstand the total tornado-generated pressure differential of 3 psi.

The analytical model employed in determining the effective differential pressures utilizes isentropic, perfect gas relations in a step-wise, steady-state first law analysis.

The analysis determined pressure and temperature variations within the structure induced by the design base tornado defined in Section 3.3.2.1.

Pressure differentials and assorted air velocities are expected in all areas which depressurize due to the vented design of the building. In these areas, the partition walls have been checked for the differential pressure from depressurization. In the room(s) where the differential pressure exceeds the wall design, administrative operating instructions ensure that the doors will remain open during a tornado event to reduce the differential pressure to an acceptable value.

.2.3 Ability of Category I Structures to Perform Despite Failure of Structures Not Designed for Tornado Loads An investigation of the effect of tornado loading on the Turbine Building was made to determine the extent of failure of the structure as to collapse or to the possibility of generating missiles that could damage Category I structures and impair their ability to perform their intended design function.

The following information was determined:

(1) The metal siding panels will fail at loads considerably below the design tornado loading and will become missiles that could affect the Control Building. The siding will fail before the main girts are overloaded enough to cause failure. The failure of the parapet girts is likely, resulting in the release of 6WF15.5 in 4-foot lengths, 8C11.5 in 8-foot lengths, 18-inch x 3/8-inch plate in varying lengths, and 4ST8.5 in 7-foot lengths.

and Tornado Loading 3.3-3

The roof of the Control Building was investigated for the above missiles and found to be adequately designed to resist the missiles.

(2) Following the failure of the siding, the structural steel framing of the building will be exposed to tornado forces acting upon the steel structure, equipment, piping, and other items of wind resistance. The resistance of the structure at this point will be sufficient to prevent collapse onto the Control Building.

(3) The turbine room cranes, if not anchored, could possibly be blown from the crane girders, either falling on the operating floor or out the end of the building onto the Control Building roof.

To preclude the occurrence of this event, the cranes will be anchored to stops at one end of the runway during tornado alerts, watches, and tornadoes.

(4) The potable water tanks and gland seal water tanks at Elevation 796.0 floor could be blown to the Control Building roof along with air intake hoods, auxiliary boiler stack, and heating and vent equipment on the Elevation 796.0 floor.

The Control Building roof was determined to be adequately designed to resist the described events.

The methods used to convert the tornado wind loadings into loads acting on the structures, as well as their distributions across the structures, were determined by following the recommendations of ASCE Paper 3269.[3]

REFERENCES (1) Hoecker, W. H., 'Wind Speed and Air Flow Patterns in the Dallas Tornado and Some Resultant Implications', Monthly Weather Review, May 1960.

(2) Hoecker, W. H., 'Three Dimensional Pressure Pattern of the Dallas Tornado and Some Resultant Implications,' Monthly Weather Review, December 1961.

(3) Wind Forces on Structures, Final Report, Task Committee On Wind Forces, Committee on Loads and Stresses, Structural Division, Transactions, American Society of Civil Engineers, Publication Number 3269, Volume 126, Part II, (1961).

(4) ANSI A58.1-1972, "Building Code Requirements for Minimum Design Loads in Building and Other Structures," Committee A58.1, American National Standards Institute, 1972.

Wind and Tornado Loading

WATTS BAR WBNP-86 Figure 3.3-1 Variations of Differential Pressure and Tangential Plus Translational Velocity as a Function of the Distance from the Center of a Tornado WIND AND TORNADO LOADING 3.3-5

WATTS BAR WBNP-86 THIS PAGE INTENTIONALLY BLANK 3.3-6 WIND AND TORNADO LOADING

WATER LEVEL (FLOOD) DESIGN

.1 Flood Protection The flood protection requirements and provisions for Category I structures are discussed in Sections 2.4.1.1, 2.4.2.2, 2.4.2.3, and 2.4.10.

.2 Analysis Procedure The methods and procedures by which the static and dynamic effects of the design basis flood conditions are applied to Category I structures are discussed in Sections 2.4.3.6 and 2.4.13.5.

FERENCES e.

ER LEVEL (FLOOD) DESIGN 3.4-1

THIS PAGE INTENTIONALLY BLANK WATER LEVEL (FLOOD) DESIGN

MISSILE PROTECTION Category I structures have been analyzed and designed to be protected against a wide spectrum of credible missiles. Failure of certain rotating or pressurized components of equipment is credible and would presumably lead to generation of missiles. In addition, noncredible missiles are identified and justification is given for their not being a credible source of missiles. Tornado-generated missiles and missiles resulting from activities peculiar to the site are also discussed in this section. It is shown that the missile protection criteria to which the plant has been analyzed and protected comply with the intent of Criterion 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.

A very basic premise for protection is to design components and equipment so that they will have a low potential for generation of missiles. In general, the design that results in reduction of missile generation potential promotes the long life and usability of a component, and is well within permissible limits of accepted codes and standards.

The following general methods are used in the design, manufacture, and inspection of equipment:

(1) Pressurized equipment and sections of piping that from time to time may become isolated under pressure have been provided with pressure relief valves. (Relief valves are in accordance with ASME Section III or the appropriate industry standards.) These valves are present to ensure that no pressure buildup in equipment or piping sections will exceed the design limits of the materials involved.

(2) Components and equipment of the various systems have been designed and built to the standards established by the ASME or other equivalent industrial standard. A stringent quality control program has been enforced during manufacture, testing, and installation.

(3) Volumetric and ultrasonic testing where required by code, coupled with periodic inservice inspections of materials used in components and equipment, adds further assurance that any material flaws that could permit the generation of missiles will be detected.

The design bases to which the plant has been designed in order to meet the intent of the criterion are listed below.

Design Bases (1) Protection shall be provided against potential missiles that could cause a loss-of-coolant accident (LOCA).

(2) Protection shall be provided against potential missiles that could result in the loss of ability to control the consequences of a LOCA, including both the necessity for core cooling and for retention of containment integrity.

ILE PROTECTION 3.5-1

(3) Protection shall be provided against potential missiles that could jeopardize functions necessary to bring the reactor to a safe shutdown condition during normal or abnormal conditions.

.1 Missile Selection and Description

.1.1 Internally Generated Missiles (Outside Containment)

The structures that are to be protected against damage from internally-generated missiles outside containment are listed in Table 3.2-1. The systems and components that are to be protected against damage from internally generated missiles outside containment include the ANS Safety Class equipment listed in Tables 3.2-2a, 3.2-2b, and 3.2-3.

A discussion of the individual structures and the systems and components inside these structures is provided below. In general, the systems and components important to safety located in the structures of Table 3.2-1 rely on redundancy and separation for protection from internal missiles generated by failure of high pressure system components. Missiles which result from pipe breaks are not considered. Missiles that are associated with overspeed failures of rotating components are considered a greater safety hazard than those generated by failure of high-pressure system components and are evaluated in more detail.

.1.1.1 Shield Building No rotating components which might generate missiles are installed between the primary containment and the Shield Building. No high-pressure system components whose failure could generate missiles are located in this area.

.1.1.2 North and South Steam Valve Rooms No rotating components are installed in these rooms. The barriers provided to limit pipe whip and jet impingement in these rooms also provide protection from any potential missiles generated by failure of any high-pressure system components. The main steam isolation valve stems and the main feedwater isolation valve stems are not postulated as credible missiles in these rooms as explained below.

Numerous features of the main steam isolation valve (MSIV) design and construction serve to prevent the valve stem from being ejected as a missile. The MSIV's are 32 inch wye, bi-directional globe valves that are air-opened, spring-closed, and qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the valve stem could be ejected. First, the pilot poppet is fastened onto the bottom end of the valve stem and backseated against the poppet cap. The lower segment of the valve stem has a larger diameter than the opening provided in the bonnet, the bottom spring seat, and the bottom bead of the air cylinder that the upper segment of the valve stem and the piston rod normally operate through.

The worst case failure tending to cause MSIV stem ejection would be the complete severance of the valve stem itself at the valve bonnet. This failure would eliminate the components and design features described thus far as barriers to valve stem ejection.

The internal area of the stem, tending to eject it. However, the valve operator is MISSILE PROTECTION

designed to withstand the transmitted forces acting through the stem during the normal operation of the valve. These thrust forces are at least as great as those that would act on a broken stem. Thus, several additional components of the valve and operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the top of the valve stem is fastened into the bottom spring seat cap which is in turn bolted to the bottom spring seat. The air cylinder piston rod is located directly over the valve on the same axis and is inserted through the opening in the air cylinder bottom bead. The air cylinder piston and top head (each 3 inch plate) are also located over the valve stem, perpendicular to its axis. The combination of these valve and operator features precludes the MSIV stem (or a segment of it) from being postulated as a credible missile.

Similarly, various features of the main feedwater isolation valve (MFWIV) design and construction serve to prevent its valve stem from being ejected as a missile. The MFWIV's are 16 inch bolted bonnet, wedge gate valves with motor operators and are qualified to ASME Section III, Class 2. Several components of the valve and operator would have to fail concurrently before the stem could be ejected. First, the wedge gate holds the bottom end of the valve stem in a close-fitting ball-and-socket type arrangement. The lower segment of the valve stem itself is backseated against the valve bonnet. This segment has a larger diameter than the openings provided in the bonnet, the upper and lower yoke plates, and the motor operator that the upper segment of the valve stem normally operates through. The worst case failure tending to cause MFWIV stem ejection would be the severance of the stem itself above the backseat segment just described. For the same reasons as given previously for the MSIV, additional components of the MFWIV operator would still have to fail before even this fractured segment of the valve stem could be ejected. First, the upper stem segment is geared into the motor-driven worm shaft of the operator. Then, a pipe cap is bolted on top of the operator unit over the valve stem and perpendicular to its axis.

This combination of valve and operator features precludes the MFWIV stem (or a segment of it) from being postulated as a credible missile.

.1.1.3 Auxiliary Building The only rotating component which was considered for overspeed condition is the auxiliary feedwater steam-driven pump. All other pumps are electrically driven and incapable of achieving an overspeed condition. The manufacturer of the steam turbine (Terry Turbine) has indicated that they have tested their solid wheel turbine under overspeed conditions and no missiles are generated. The pump itself (manufactured by Ingersoll-Rand) may develop missiles under overspeed conditions but its potential for damage is small because of the small size of any missiles postulated. The room containing the pump is oriented in such a manner as to minimize the potential for damage caused by postulated pump missiles.

Consideration of missiles associated with failure of high-pressure system components is handled by redundancy and separation of safety-related systems.

The internal walls and floors of the Auxiliary Building are constructed of reinforced concrete which limit the range of any potential internal missiles. In particular, the spent ILE PROTECTION 3.5-3

fuel pool is protected by at least one wall or floor of reinforced concrete from internal missiles generated in other parts of the Auxiliary Building. The portions of the CVCS and SIS outside of containment are physically separated and protected by concrete barriers of sufficient strength to contain any postulated internally generated missiles.

.1.1.4 Control Building There are no credible potential internal missiles in this building. There are no rotating components which could have an overspeed failure and no high-pressure systems.

The carbon dioxide fire protection system inside the Control Building is not pressurized until it is actuated.

.1.1.5 ERCW Structures At the Intake Pumping Station the essential raw cooling water (ERCW) pump motors are exposed to the atmosphere. A structural steel grillage system, discussed in Section 3.8.4, provides protection to the pumps from tornado missiles. A concrete shield wall separates the four motors of Train A from those of Train B. These components are arranged in a straight line over a distance of about 100 feet. An overspeed failure is not postulated for these pumps. Even if a failure were postulated, no credible trajectory of any resultant missile could damage enough components to reduce the number available to less than four. No credible failure of any high-pressure component could create a missile which could reduce the availability of pumps on the opposite power train.

No credible, potential internal missile sources are installed in the remainder of the ERCW structure.

.1.1.6 ERCW Pipe Tunnels and RWST Foundations No credible potential internal missile sources are installed in these structures.

.1.1.7 Diesel Generator Building Four emergency diesel generators, which are required to supply emergency power to certain engineered safety features, are each located inside a separate room in the Diesel Generator Building. Interior walls of reinforced concrete separate these generators. Additionally, a diesel generator C-S which may be substituted for any one of the normally aligned diesel generators is located within the separate Additional Diesel Generator Building.

There is a mechanical governor on the diesel engine of each diesel-generator unit which is designed to assume control of the engine when there is a tendency to overspeed. In addition, the diesel generators have an overspeed trip which cuts off fuel to the diesel engine upon an overspeed condition. Consequently, no missiles are postulated for overspeed conditions of the generator. The diesel generator units are protected from the effects of a postulated failure of the carbon dioxide storage tank by an 18-inch thick reinforced concrete wall. Therefore, any missiles or pressure build-up generated by a rupture of the carbon dioxide storage tank would not damage essential equipment.

MISSILE PROTECTION

The vent path for the carbon dioxide storage tank compartment is through one set of standard double doors into a stairwell. If additional pressure relief is required, the vent path is through another set of standard double doors which open to the atmosphere from the stairwell.

.1.2 Internally Generated Missiles (Inside Containment)

.1.2.1 Missile Selection Catastrophic failure of the reactor vessel, steam generators, pressurizer, reactor coolant pump casings, and piping leading to generation of missiles is not considered credible. Massive and rapid failure of these components is not postulated because of the material characteristics and inspections; quality control during fabrication, erection, and operation; conservative design; and prudent operation as applied to the particular component. The reactor coolant pump flywheel is not considered as a source of missiles for the reasons discussed in Section 5.2.6.

Nuclear steam supply components, which nevertheless are considered to have a potential for missile generation inside the reactor containment, are the following:

(1) Control rod drive mechanism housing plug, drive shaft, and the drive shaft and drive mechanisms latched together.

(2) Certain valves.

(3) Temperature sensor assemblies.

(4) Pressurizer instrument well and heaters.

Gross failure of a control rod mechanism housing sufficient to allow a control rod to be rapidly ejected from the core is not considered credible for the following reasons:

(1) Full length control rod drive mechanisms are shop tested at 4105 psig.

(2) The mechanism housings are individually hydro-tested to 3107 psig as they are installed on the head adapters of the reactor vessel and they are checked during the hydro-test of the completed reactor coolant system.

(3) Stress levels in the mechanism are not affected by system transients at power, or by thermal movement of the coolant loops.

(4) The mechanism housings are made of type 304 stainless steel. This material exhibits excellent notch toughness at all temperatures that will be encountered.

However, it is postulated that the top plug on the control rod drive mechanism will become loose and be forced upward by the water jet. The following sequence of events is assumed: The drive shaft and control rod cluster are forced out of the core by the differential pressure of 2500 psi across the drive shaft; the drive shaft and control rod cluster, latched together, are assumed fully inserted when the accident ILE PROTECTION 3.5-5

starts; after approximately 12 feet of travel, the rod cluster control spider hits the underside of the upper support plate; upon impact, the flexure arms in the coupling joining the drive shaft and control cluster fracture, completely freeing the drive shaft from the control rod cluster. The control cluster would be completely stopped by the upper support plate; however, the drive shaft would continue to be accelerated upward to hit the missile shield provided. This analysis is summarized in Table 3.5-1. For a description of the missile shield see Section 3.5.1.2.6.

Valve stems are considered to be extremely unlikely sources of missiles because of the design, construction qualifications, and testing of the valves. The isolation valves installed in the reactor coolant system have stems with a back seat. This effectively eliminates the possibility of ejecting valve stems even if the stem threads fail. Analysis shows that the back seat or the upset end would not penetrate the bonnet. Additional interference is encountered with air and motor operated valves.

Valves with nominal diameter larger than 2 inches have been designed against bonnet body connection failure and subsequent bonnet ejection by means of:

(1) Using the design practice of ASME Section VIII which limits the allowable stress of bolting material to less than 20% of its yield strength; (2) Using the design practice of ASME Section VIII for flange design; and (3) By controlling the load during the bonnet body connection stud tightening process.

The pressure containing parts are designed per code Class 1 requirements established by the ASME Section III Code.

The proper stud torquing procedures and the use of a torque wrench, with indication of the applied torque, limit the stress of the studs to the allowable limits established in the ASME Code. This stress level is far below the material yield. The complete valves are hydrotested per the ASME Section III Code. The stainless steel bodies and bonnets are volumetrically and surface tested to verify soundness.

Valves with a nominal pipe size of 2 inches or smaller are forged and have screwed bonnet with canopy seal. The canopy seal is the pressure boundary while the bonnet threads are designed to withstand the hydrostatic end force. The pressure containing parts are designed per criteria established by the ASME III Code specification.

Whereas valve missiles are not generally postulated as outlined in the above discussion, it was decided to conservatively review valves as though their bonnets or stems could become missiles. Representative of these are the valves in the region where the pressurizer extends above the operating deck. Valves in this region are the pressurizer safety valves, the motor-operated isolation valves in the relief line, the air-operated relief valves, and the air-operated spray valves. Although failure of these valves is unlikely, provisions are made to assure protection of safety-related equipment, including the containment liner, from hypothetical missiles from these valves (see Table 3.5-2).

MISSILE PROTECTION

The potential for other valve missiles in the lower compartment to damage safety equipment is assessed to be extremely limited. The same measures taken to prevent damage from other postulated non-valve missiles will be effective against damage from these hypothetical valve missiles. These measures include layout of the basic plant arrangement utilizing the design philosophy of physical separation of equipment and components through distance or by barriers. In consideration of the postulation that valve bonnet fragmentation may occur resulting in the ejection of a valve stem, valves are oriented such that any missile will strike such a barrier.

The only other postulated jet-propelled missiles from the reactor coolant piping and piping systems connected to the reactor coolant system is that represented by the temperature sensor assemblies, as listed in Table 3.5-3. The resistance temperature sensor assemblies are of two types: 'with well' and 'without well'. Two rupture locations have been postulated: around the weld (or thread) between the temperature element assembly and the boss for the 'without well' element, and the weld (or thread) between the well and the boss for the 'with well' element.

A temperature sensor is installed on the reactor coolant pumps close to the radial bearing assembly. A hole is drilled in the gasket and sealed on the internal end of a steel plate. In evaluating missile potential, it is assumed that this plate could break and the pipe plug on the external end of the hole could become a missile.

In addition, it is assumed that the weld between the instrumentation well and the pressurizer wall could fail and the well and sensor assembly could become a jet-propelled missile.

Finally, it is assumed that the pressurizer heaters could become loose and become jet-propelled missiles. Adequate barriers are provided for the missiles above to protect safety-related equipment.

.1.2.2 Missile Description The postulated control rod drive mechanism (CRDM) missiles are summarized in Table 3.5-1. The velocities of the missiles have been calculated using the method shown in Appendix 3.5A. The reactor coolant discharge rate from the break has been calculated using the Burnell equation.[1] The coolant pressure has been assumed constant at the initial value. No spreading of the water jet has been assumed.

The missile characteristics of the bonnets of the typical valves in the region where the pressurizer extends above the operating deck are given in Table 3.5-2.

The missile characteristics of the postulated piping temperature sensor assemblies are given in Table 3.5-3. A 10-degree expansion half-angle water jet has been assumed.

The missile characteristics of the piping pressure element assemblies are less severe than those of Table 3.5-3.

The characteristics of other missiles postulated within reactor containment are given in Table 3.5-4. A 10-degree expansion half-angle water jet has been assumed.

ILE PROTECTION 3.5-7

.1.2.3 Electrical Cables Electrical cables are not protected against damage from internal missiles. However, separation and redundancy of vital cables are such that any single failure within the protection system will not prevent proper protective action at the system level when required.

.1.2.4 Upper Compartment The generation of internal missiles inside the upper compartment is not postulated.

Piping in this area is not used during normal operation. The upper compartment is protected from missiles generated in the lower compartment by the steel reinforced divider deck and missile shield and by the reinforced concrete walls of the upper portions of the steam generator and pressurizer compartments.

.1.2.5 Ice Condenser Compartment The generation of internal missiles inside the ice condenser is not postulated. Low energy refrigeration piping is not considered to be a potential missile source. Missiles generated in portions of the lower compartment will be prevented from entering the ice condenser compartment by the crane wall. The trajectory of missiles generated within the bottom regions of the lower compartment is such that the missiles will not pass through the inlet door openings in the lower crane wall except by ricochet. The potential for damage of such a ricocheting missile is considered negligible. This situation is shown in Figure 3.5-1. As can be seen in the figure, the location of the main portions of the reactor coolant system and of the other systems which connect to it are below Elevation 718 feet-0 inches, whereas the openings for the ice condenser lower inlet doors are between Elevation 746 feet-5inchesand Elevation 753 feet-9 inches.

.1.2.6 Lower Compartment The spectrum of missiles generated within the lower compartment is discussed in Sections 3.5.1.2.1 and 3.5.1.2.2. These missiles will not cause failure of vital systems inside the lower compartment. Particular attention was paid to the potential missile damage to the steel containment structure, the emergency core cooling system, and the containment isolation system.

Any missile generated within the lower compartment will not impair the integrity of the steel containment structure. Protection against the postulated missiles in the lower compartment was accomplished by locating a reinforced concrete wall (crane wall), a steel-reinforced concrete slab (divider deck), and steel-reinforced concrete removable blocks (control rod drive mechanism missile shield) between the primary reactor coolant system and the containment structure. Additionally, since there are openings in the crane wall, protection for the containment structure is enhanced by orienting potential missile sources, especially valve components, so that their anticipated trajectory will not permit them to pass through these openings.

The control rod drive mechanism missile shield has been located above the reactor vessel and will prevent the postulated missiles of the control rod drive system from MISSILE PROTECTION

striking the inside surface of the containment structure or the containment spray headers (see Table 3.5-1).

The accumulator tanks and associated check valves and piping are not credible sources of missiles for the containment structure. Components are prevented from becoming a source of damaging missiles by orienting the components so that anticipated missile trajectories are away from the containment structure. Some other high-pressure system components are located in the space between the crane wall and the steel containment structure. Protection is accomplished by orienting components so that the anticipated missile trajectories are away from the containment structure.

The emergency core cooling system (Section 6.3) includes four accumulator tanks which are located in separate rooms between the crane wall and the containment structure. The crane wall protects these tanks and their associated valves and piping from the postulated missiles generated within the lower compartment, and the Shield Building protects them from external missiles. The active components of the system (pumps, motors, and heat exchangers) are located in separate rooms in the Auxiliary Building. Therefore, these active components are protected from the postulated missiles generated within the lower compartment.

Isolation valves of the containment isolation system (Section 6.2.4) are located in three regions: 1) inside the containment structure, 2) between the containment structure and the Shield Building, and 3) outside the Shield Building. The isolation valves which are located inside the containment structure are protected from the postulated missiles generated in the lower compartment by the crane wall, and are protected from tornado-generated missiles by the Shield Building.

Even though the preceding methods have been used to protect the containment structure, emergency core cooling system, and the containment isolation system from potential internal missiles, the basic approach was to assure design adequacy against generation of missiles rather than to allow a missile to be generated and then try to contain the effects.

.1.3 Turbine Missiles

.1.3.1 Introduction The Watts Bar turbine-generator unitwas manufactured by Westinghouse Electric Corporation. The Watts Bar turbine-generator unit consists of a double-flow high pressure turbine and three double-flow low pressure turbines with extraction nozzles arranged for seven stages of feedwater heating. The turbine utilizes a Westinghouse designed electrohydraulic control (EHC) system for control of both speed and load.

The EHC system, composed of solid state electronic devices coupled through suitable electrohydraulic transducers to a high-pressure hydraulic fluid system, provides control of the main stop, governing, intercept, and reheat stop valves of the turbine.

Emergency speed protection is provided by a mechanical overspeed trip mechanism, backed up by an electrical overspeed trip circuit.

ILE PROTECTION 3.5-9

Additional turbine protection is provided that will trip the turbine on evidence of low condenser vacuum, excessive shaft vibration, abnormal thrust bearing wear, or low oil pressure. The turbine trip system is also equipped with solenoid-operated trip devices, which provide a means to initiate direct tripping of the turbine upon receipt of appropriate electrical signals, as shown In Figure 10.2-1. Also, when a turbine trip is initiated, the extraction system nonreturn valves are tripped to close by means of a pilot dump valve connected to the turbine trip system. For overpressure protection of the turbine exhaust hoods and the condenser, four rupture diaphragms which rupture at approximately 5 psig are provided on each turbine exhaust hood. Additional protective devices include exhaust hood high temperature alarm and manual trip.

Each stop, governing, reheating stop, and intercept valve is spring closed; therefore, it is necessary only to dump the high pressure fluid from under the servoactuators to close the valves.

For additional details on the turbine, see Section 10.2.

.1.3.2 Potential Missile Sources and Missile Characteristics To evaluate the missile containing ability of its steam turbines, Westinghouse conducted a test program at its Research Laboratories. The tests involved spinning alloy steel discs to failure within various carbon steel containments. The discs were notched to ensure failure in a given number of segments at the desired speed. Tests results were correlated with various parameters descriptive of the missile momentum and energy and the geometry of the missile and containment.

The containments were of varying geometry but all were axisymmetric and concentric with the rotation axis of the disc. They ranged in complexity from a circular cylinder to containments which approximated actual turbine construction.

From these tests, logical criteria were evolved for predicting the missile containing ability of various turbine structures. In addition, the tests also served to determine the mode of failure which certain structural shapes common to turbine construction undergo when impacted by a missile. This is important since the mode of failure has a great influence on the amount of energy absorbed by the turbine structure.

In 1979, a Westinghouse test program was initiated to develop guidelines for evaluating nonsymmetric impacts. Earlier tests had concentrated primarily on symmetric impacts whereas most disc collisions with the typical cylinder structure were of a nonsymmetrical type. Also in 1979, stress corrosion cracking was found in the keyway areas of several discs on low-pressure rotors being refurbished by Westinghouse. Consequently, in 1980 and 1981, Westinghouse reevaluated their turbine missile energies and probability analyses and developed a revised methodology to include the above failure mechanisms, the effects of an ultrasonic low-pressure turbine disc inspection and other miscellaneous changes resulting from the reevaluation. The results of Westinghouse's latest analyses are included in this section. These latest analyses were considered in conjunction with the original FSAR hazard analyses and the missile energies are such that no appreciable change in the 0 MISSILE PROTECTION

strike probabilities will occur.[11][12] Consequently, the original FSAR hazard analyses are still valid.

Criteria Considered in Selecting Number of Disc Segments Fracture of the discs into 90°, 120°, and 180° segments was considered. Calculations show that the 90° fragments pose the greatest threat as external missiles.[13]

A 120° segment has an initial translational kinetic energy 12.5% greater than that of a 90° segment; however, it also has a 33% greater rim periphery resulting in greater energy loss while penetrating the turbine casing. This results in nearly equal kinetic energy of 90° and 120° segments leaving the turbine casing. However, since the 90° segments have the smaller impact areas they represent a more severe missile.

The initial translational kinetic energy of a half disc is equal to that of a quarter disc.

Because of kinematic considerations a half disc segment will always impact with the rotor after fracture. The 180° segment, due to its larger size, will subject the stationary parts to greater deformation. As a result the 180° segment will leave the turbine casing with lower energy than the 90° segment.

For the purpose of evaluating the missile containing ability of the turbine structure, the shrunk on discs have been postulated to fail in four quarters.

Before failure, a disc has a total energy which is purely rotational of 1/2(I2), where I is the mass moment of inertia of the disc about its axis of rotation and is the angular velocity of the turbine at the postulated failure speed. After failure the mass center of each fragment translates at a velocity of r, r being the distance from the rotation axis of the disc to the mass center of the fragment. In addition the fragment rotates about its center of mass with an angular velocity of . The initial rotational energy of the disc is partitioned into both the translational and rotational kinetic energy of the fragments.

Test results and analytical considerations indicate that the translational kinetic energy of a fragment is of much greater importance than the rotational kinetic energy in predicting the ability of the fragment to penetrate the turbine casing. Rotational kinetic energy tends to be dissipated as a result of blade crushing, friction forces developed between the fragment surface, and stationary parts.

These principles apply to fragments which would be generated by failure of either the high pressure turbine rotor or the low pressure turbine discs.

High-Pressure Turbine High-Pressure Turbine Construction and Design The high-pressure turbine element is of a double flow design, thus it is inherently thrust balanced. Steam from the four control valves enters at the center of the turbine element through four inlet pipes, two in the base and two in the cover. These pipes feed four double flow nozzle chambers flexibly connected to the turbine casing. Steam leaving the nozzle chambers passes through the rate control stage and flows through ILE PROTECTION 3.5-11

the reaction blading. The reaction blading is mounted in the blade rings which in turn are mounted in the turbine casing.

The high-pressure rotor is made of NiCrMoV alloy steel. The specified minimum mechanical properties are found in Section 10.2.3.1.

The main body of the rotor weighs approximately 100,000 lb. The approximate values of the transverse centerline diameter, the maximum diameter, and the main body length are 36 inch, 66 inch, and 138 inch, respectively.

The blade rings and the casing cover and base are made of carbon steel castings. The specified minimum mechanical properties are found in Section 10.2.3.1.

The bend test specimen shall be capable of being bent cold through an angle of 90° and around a pin 1 inch in diameter without cracking on the outside of the bent portion.

The approximate weights of the four blade rings, the casing cover, and the casing base are 80,000 lb., 115,000 lb., and 115,000 lb., respectively.

The casing cover and base are tied together by means of more than 100 studs. The stud material is an alloy steel having the following mechanical properties found in Section 10.2.3.1.

The studs have lengths ranging from 28 to 59 inches and diameters ranging from 2.50 in. to 3.5 in. About 90% of them have diameters ranging between 2.75 and 4 inches.

The total stud cross-sectional area is approximately 620 in2 and the total stud free-length volume is approximately 31,500 in3.

Effects on HP Element of Turbine-Generator Unit Over-Speeding Due to the very large margin between the high-pressure, spindlebursting speed and the maximum speed at which the steam can drive the unit with all the admission valves fully open, the probability of spindle failure is practically zero. Therefore, no missile will be developed during turbine runaway.

The maximum speed at which the unit may run is 190% of rated speed. (Note that this is slightly less than the burst speed of 193% of rated speed used in the analysis). At this speed the highest stressed low-pressure turbine (LP) disc will fracture. Upon failure, these LP disc fragments will damage the turbine to the extent that additional overspeed will not be possible. Therefore, only one disc failure per overspeed turbine accident is realistic.

The minimum bursting speed of the HP rotor, based on minimum specified mechanical properties of the rotor material, is 270% of rated speed. The actual bursting speed is closer to 300% of rated speed. Hence, the actual margin between the bursting speed and the maximum running speed is of the order of 110% of nominal. No failure of the HP rotor is anticipated as a consequence of a 51 unit runaway; therefore, no missiles are expected to be generated.

2 MISSILE PROTECTION

Low-Pressure Turbine Low-Pressure Turbine Construction and Design The double flow low pressure turbine incorporates high efficiency blading, diffuser type exhaust and liberal exhaust hood design. The low pressure turbine cylinder is fabricated from steel plate to provide uniform wall thickness thus reducing thermal distortion to a minimum. The entire outer casing is subjected to low temperature exhaust steam.

The temperature drop of the steam from its inlet to the LP turbine to its exhaust from the last rotating blades is taken across three walls: an inner cylinder No. 1, a thermal shield, and an inner cylinder No. 2. This precludes a large temperature drop across any one wall, except the thermal shield which is not a structural element, thereby virtually eliminating thermal distortion. The fabricated inner cylinder No. 2 is supported by the outer casing at the horizontal centerline and is fixed transversely at the top and bottom and axially at the centerline of the steam inlets, thus allowing freedom of expansion independent of the outer casing. Inner cylinder No. 1 is, in turn, supported by inner cylinder No. 2 at the horizontal centerline and fixed transversely at the top and bottom and axially at the centerline of the steam inlets, thus allowing freedom of expansion independent of inner cylinder No. 2. Inner cylinder No. 1 is surrounded by the thermal shield. The steam leaving the last row of blades flows into the diffuser where the velocity energy is converted to pressure energy.

Material Properties The outer cylinder and the two inner cylinders are fabricated mainly of ASTM 515-GR65 material. The minimum specified properties can be found in Section 10.2.3.1. table 20 1 4 2 The low-pressure rotors are made of NiCrMoV alloy steel. The specified minimum mechanical properties can be found in Section 10.2.3.1.

The shrunk-on discs are made of NiCrMoV alloy steel. There are ten discs shrunk on the shaft with five per flow. These discs experience different degrees of stress when in operation. Disc No. 2, starting from the transverse centerline, experiences the highest stress, while Disc No. 5 experiences the lowest. The minimum specified mechanical properties for the discs are shown in Section 10.2.3.1.

Effects on Low-Pressure Element of Turbine-Generator Unit Overspeeding The bursting speed of each of the shrunk-on discs is calculated under the assumption that the disc will fail when the average tangential stress equals the maximum temperature corrected tensile strength of the disc materials. (No disc cracks are assumed. The effects of stress corrosion cracking on the low-pressure elements are discussed later in this section.) Disc No. 2 is the most highly stressed disc with a calculated failure speed of 190% of rated speed. Upon failure of Disc No. 2 (or any other disc), further acceleration of the unit is assumed to halt because of extensive internal damage to the turbine.

ILE PROTECTION 3.5-13

For the purpose of analysis, all discs were assumed to fail at 193% of rated speed which corresponds to the destructive overspeed provided by Westinghouse in their original analysis. As previously stated, using the original destructive overspeed has not invalidated the hazard analysis.

Calculated initial translational velocity and initial translational kinetic energies of disc quadrants leaving the turbine rotor based on disc fractures at 190% rated speed are as follows:

Weight Velocity c.g. Kinetic Energy Disc No (lb) (ft/s) (106 ft-lb) 1 2,700 1,096 50.4 2 2,965 1,143 60.2 3 2,775 1,071 49.4 4 3,210 1,072 57.3 5 3,710 927 49.5 Summary of Individual Disc Results at Destructive Over-speed (190% of Rated Speed)

Based on Westinghouse's Reanalysis Disc No. 1 Disc No. 1 is assumed to fail at 190% of rated speed. At this speed the translational kinetic energy of a disc quadrant is 50.4 x 106 ft-lbs. The initial collision of the quadrant of disc No. 1 is with the concentric blade ring. Secondary collisions occur with inner cylinder No. 1, inner cylinder No. 2, and the outer cylinder. As a result, four external missiles are generated by the failure of disc No. 1. One missile, the disc quadrant, has energy of 0.49 x 106 ft-lbs. The other missiles, blade ring and cylinder fragments have energies of 0.63 x 106 ft-lbs, 0.42 x 106 ft-lbs, and 0.35 x 106 ft-lbs, respectively.

Disc No. 2 Disc No. 2 is assumed to fail at 190% of rated speed. The initial kinetic energy of a quadrant of disc No. 2 is 60.2 x 106 ft-lbs.

An initial collision occurs between the disc No. 2 quadrants and the concentric blade ring. Secondary collisions also occur between the disc and blade ring fragments and inner cylinders No. 1, No. 2, and the outer cylinder. As a result, three external missiles are generated. The largest missile, the disc fragment, has energy of 8.96 x 106 ft-lbs.

The other missiles (blade ring and cylinder fragments) have energies of 8.64 x 106 ft-lbs and 0.39 x 106 ft-lbs, respectively.

4 MISSILE PROTECTION

Disc No. 3 Disc No. 3 is assumed to fail at 190% of rated speed. A quadrant of disc No. 3 has an initial kinetic energy of 49.4 x 106 ft-lbs. The center plane of disc No. 3 is located axially between two concentric blade rings. The result is that fragments of disc No. 3 do not enter into a square collision with either blade ring. Consequently, as tests indicate, there is a high probability that the disc fragments in following the path of least resistance, will merely wedge between the rings pushing them aside with relatively little loss in translational kinetic energy. There will be subsequent collisions with and perforations of inner cylinder No. 2, and the outer cylinder. The calculated ejection energy for a quadrant of disc No. 3 is 15.35 x 106 ft-lbs. Two other external missile fragments are also generated with energies of 5.92 x 106 ft-lbs and 6.08 x 106 ft-lbs, respectively.

Disc No. 4 Disc No. 4 is assumed to fail at 190% of rated speed. The initial kinetic energy of a quadrant of disc No. 4 is 57.3 x 106 ft-lbs. The initial collision occurs between fragments of disc No. 4 and the surrounding blade rings and supporting structure.

Inner cylinder No. 2 is perforated and subsequent collision with and perforation of the outer cylinder occurs. As a result, quadrants of disc No. 4 are ejected with a kinetic energy of 30.17 x 106 ft-lbs. Two other external missile fragments are also generated with energies of 4.51 x 106 ft-lbs and 5.70 x 106 ft-lbs, respectively.

Disc No. 5 Disc No. 5 is assumed to fail at 190% of rated speed (blades are lost prior to reaching 190% of rated speed). A quadrant of disc No. 5 has a translational kinetic energy of 49.5 x 106 ft-lbs. The initial collision occurs between the disc fragments and the diffuser ring and adjacent blade ring. As a result, disc No. 5 is ejected through the end section of the outer cylinder with a translational kinetic energy of 32.6 x 106 ft-lbs. Two other external missile fragments are also generated with energies of 2.99 x 106 ft-lbs and 2.54 x 106 ft-lbs, respectively.

Table 3.5-15 tabulates the exit missile properties as calculated by Westinghouse during their reanalysis for all discs at 100% and 120% of rated speed, in addition to summarizing the information provided above for 190% of rated speed (destructive over-speed). The disc failures at 100% and 120% of rated speed would be similar to those described for the 190% speed except for considerably lower missile energies and different representative postulated fragments as indicated in Table 3.5-15. As previously noted, the slight decrease in destructive over-speed does not invalidate the original hazards analysis.

Effects on Low-Pressure Element Corrosion Cracking Prior to 1980, the Westinghouse missile probabilities and energies analyses were directed primarily at missile generation due to destructive over-speed. Fatigue of the rotating elements due to speed cycling was also considered as a missile generation mechanism in these earlier analyses. These earlier Westinghouse analyses indicated that the probabilities of missile generation due to fatigue and destructive over-speed ILE PROTECTION 3.5-15

were very low in comparison to the probability estimated by Bush (1 X 10-4 missile producing disintegrations per turbine operating year). A low pressure turbine disintegration probability of 7 x 10-5 per year was determined to conservatively represent state-of-the-art turbine installed in 1977 and was thus chosen for the original Watts Bar missile hazard evaluation in order to provide a very liberal margin of safety.

When stress corrosion cracks were discovered in some of the Westinghouse low-pressure turbine rotor discs keyways and bores in late 1979 and early 1980, new Westinghouse analyses which were concerned primarily with the probabilities of low-pressure disc failure and missile generation due to stress corrosion cracking (SCC) were developed to reflect this newly discovered and relevant missile producing mechanism. The results of the missile energies portion of the new Westinghouse analyses are shown in Tables 3.5-15 and 3.5-16, and Figures 3.5-10 and 3.5-11.

These new Westinghouse analyses also reevaluated the missile generation probabilities for fatigue of the rotating low-pressure turbine rotor discs. These new fatigue missile generation probabilities are six to seven orders of magnitude lower than the maximum allowable turbine missile generation probability and thus are insignificant. The probabilities of disc failure and missile generation due to destructive overspeed are not affected by these new analyses, and thus remain the same as stated in the earlier Westinghouse analyses. (Several orders of magnitude lower than the maximum allowable turbine missile generation probability.) The probability of missile generation due to a SCC at design overspeed conditions (120% of rated speed) is two orders of magnitude lower than the probability of missile generation due to SCC at rated speed. Consequently, the probability of missile generation at Watts Bar (due to all failure mechanisms) is, for analysis purposes, approximately equal to the probability of missile generation due to SCC at rated speed. Thus, the following discussion is mostly concerned with the probability of missile generation due to SCC at rated speed.

The probability of a missile generation from stress corrosion of a low-pressure turbine rotor disc is a function of the disc inspection interval, the disc critical crack size, the disc maximum crack growth rate, the maximum crack sizes present initially (if any), and the ability of the turbine's cylinders and castings to contain the ruptured disc and associated fragments. Initially, the disc characteristics and properties such as the location and size of any cracks, the material toughness, the tangential bore stress, the normal operating temperature of the disc, the disc yield strength, and other similar parameters are known. With this given information and that in Table 3.5-15, and the methodologies used in the latest Westinghouse analyses, critical crack sizes, the maximum growth rates, and a matrix of missile generation probabilities verses inspection intervals (based on turbine operating time) can be calculated for each disc.

An alternate to the above probabilistic approach for turbine missile analysis and the effects of SCC is a deterministic approach which utilizes fracture mechanics, material properties, and turbine operating history to determine critical crack sizes, maximum crack growth rates, and other suitable information which are used to establish low pressure nuclear turbine rotor disc inspection intervals. This deterministic approach for low pressure turbine disc inspection intervals was proposed by NRC and has been 6 MISSILE PROTECTION

used for Watts Bar. Note that both of the above approaches provide approximately the same level of protection (or risk) with regard to turbine disc missile generation.

Figure 3.5-10 shows the overall width and projected impact areas of a disc quadrant from the latest Westinghouse analysis. The dimensions and areas for each of the five disc quadrants are as follows Disc No. 1 2 3 4 5 A1, ft2 4.94 4.28 2.03 2.45 3.10 A1, ft2 2.40 2.23 1.77 2.03 2.60 A3, ft2 3.33 3.09 3.09 3.33 4.00 A4, ft2 1.27 1.26 1.28 1.46 1.89 W, ft 6.08 6.08 6.08 5.88 5.32 L, ft 2.64 2.72 2.80 2.74 2.43 A1:Disc rim projected impact area A2:Disc end projected impact area A3:Disc hub projected impact area A4:Disc end impact area W :Maximum dimension of disc quadrant L :Radial dimension of disc quadrant Table 3.5-16 and Figure 3.5-11 show the overall dimensions and shapes of the blade ring and cylinder fragments. (This information was also provided with Westinghouse's latest analysis).

Missile Impact Areas and Dimensions Figure 3.5-2 shows the overall width and projected impact areas of a disc quadrant.

The dimensions and areas for each of the five disc quadrants are as follows ILE PROTECTION 3.5-17

Disc No. 1 2 3 4 5 (2)

A1, ft 5.39 4.77 2.00 2.40 3.03 A2, ft(2) 2.78 2.55 1.74 1.96 2.52 (2)

A3, ft 3.63 3.28 3.30 3.60 4.00 W, ft 6.08 6.08 6.00 5.80 5.19 L, ft 2.64 2.72 2.80 2.70 2.33 A1:Disc rim projected impact area A2:Disc end projected impact area A3:Disc hub projected impact area W :Maximum dimension of disc quadrant L :Radial dimension of disc quadrant Ejection Angles of Disc Quadrants Based on test results we calculate the ejection angles for disc quadrants leaving the turbine casing to be as follows:

(1) Disc Nos. 1, 2, 3, and 4: +5° measured from the vertical radial plane passing through the disc.

(2) Disc No. 5; 5° to 25° measured from the vertical radial plane passing through the disc. The disc quadrant will eject only towards the adjacent coupling on the rotor shaft. However, for conservatism in the analysis, the end disc was assumed to be ejected with an equal probability from 0° to 25° measured from the vertical radial plane.

Watts Bar Steam Plant In addition to the two turbine generator sets at Watts Bar Nuclear Plant, there are four 3,600 rpm steam turbines at Watts Bar Steam Plant located approximately 3,600 feet from thenuclear plant (See Figure 3.5-3); however, these are not currently in operation.

Therefore, they do not currently pose a hazard to the Watts Bar Nuclear Plant due to turbine missiles. In the event that the steam plant is reactivated, the turbine missile hazard analysis will be updated at that time. Potential missiles originating from any of these turbines will be considered in this analysis.

.1.3.3 Primary Safety-Related Equipment Installations and Structures The primary safety-related equipment installations and structures at the plant are those whose loss could lead to conditions in excess of the guidelines specified in 10 CFR 100. Items in this category are those in which a single strike by a potential turbine 8 MISSILE PROTECTION

missile could result in a loss of the capability to function in the manner needed to meet these guidelines. At the Watts Bar Nuclear Plant, these are the a) Reactor Building, b) main control room, c) spent fuel pool, d) main steam valve rooms, and e) ERCW electrical conduits from manhole Nos. 1-3.

The Diesel Generator Building and Additional Diesel Generator Building were considered in the determination of unacceptable damage probability but are not listed in the previous paragraph because only a small portion of these structures must be considered. The redundancy of the diesel-generators and the separation between each diesel-generator make the buildings nearly invulnerable to a turbine missile strike. A turbine missile striking the barrier between trains A & B of the diesel generators could theoretically incapacitate both trains of emergency ac power; therefore, an area larger in section that the barrier is included in the analyses. The contribution of this area to the total probability of unacceptable damage is negligible.

The locations of these essential safety-related equipment installations and structures as well as their relationship to the potential turbine missile sources are shown in Figure 3.5-4.

Those safety-related equipment installations and structures not considered essential for the preservation of safety if struck by a dangerous turbine missile were those that are redundant.

Included in this group are the:

(1) Essential raw cooling water (ERCW) Intake Pumping Station - This station is considered to have sufficient redundance that a single turbine missile strike cannot cause unacceptable damage. The addition of a missile-resistant roof on this structure has further reduced the chance for any damage to this area from turbine missiles.

(2) Heating and ventilating equipment installations needed for temperature control of engineered safety features equipment. All installations of this kind are redundant and adequately separated to prevent a loss by single turbine missiles.

.1.3.4 Turbine Missile Protection Criterion The turbine missile protection criterion utilized in the design of the Watts Bar Nuclear Plant was that the probability of unacceptable damage should not be significant. In this instance, an event having a probability of causing unacceptable damage on the order of about 10-7 per year per reactor unit at the plant is not considered significant.

Therefore, for the two-unit Watts Bar Nuclear Plant, an event having a probability of occurrence on the order of 2 x 10-7 will fulfill this criterion.

The turbine placement and orientation are shown in Figure 3.5-4. The orientation of the turbine axis is parallel with the containment. With the exception of the ERCW conduit, there are no essential systems or structures located inside the low trajectory missile zones defined in NRC Regulatory Guide 1.115.

ILE PROTECTION 3.5-19

For the ERCW conduit target, the strike probability due to a low trajectory turbine missile is considered to be zero since the rotation of the turbine will preclude a tangential missile from directly impacting the ERCW conduit as the turbine pedestal and Turbine Building structure provide barriers to the trajectory.

Although low trajectory missiles are excluded from plant design considerations, a probabilistic analysis has been performed for both low and high trajectory missiles.

.1.3.5 Turbine Missile Hazard Evaluation The turbine missile hazard evaluation made for the Watts Bar Nuclear Plant considers missiles produced during accidents at or near rated speed and at destructive overspeed. The evaluation also took into account different missile dispersions that are likely to occur for center disc missiles and for end disc missiles. This was done using the expression:

0 MISSILE PROTECTION

Pr(H) = The probability of event H. Event H is the receipt of unacceptable damage.

Pr(H) = N1xPr(A1)[Pr(B1)Pr(C1)Pr(D1)Pr(F1)Pr(G1)

+Pr(B1)Pr(C1)Pr(D2)Pr(E)Pr(F2)Pr(G1)

+Pr(B2)Pr(C1)Pr(D1)Pr(F3)Pr(G2)

+Pr(B2)Pr(C1)Pr(D2)Pr(E)Pr(F4)Pr(G2)

+Pr(B3)Pr(C2)Pr(D1)Pr(F5)Pr(G3)

+Pr(B3)Pr(C2)Pr(D2)Pr(E)Pr(F6)Pr(G3)]

+N2xPr(A2)[Pr(B1)Pr(C1)Pr(D1)Pr(F7)Pr(G4)

+Pr(B1)Pr(C1)Pr(D2)Pr(E)Pr(F8)Pr(G4)

+Pr(B2)Pr(C1)Pr(D1)Pr(F9)Pr(G5)

+Pr(B2)Pr(C1)Pr(D2)Pr(E)Pr(F10)Pr(G5)

+Pr(B3)Pr(C2)Pr(D1)Pr(F11)Pr(G6)

+Pr(B3)Pr(C2)Pr(D2)Pr(E)Pr(F12)Pr(G6)]

where:

N1 = The number of turbogenerator sets at Watts Bar Nuclear Plant. In this instance, N1=2.

N2 = The number of turbogenerator sets at Watts Bar Steam Plant. In this instance, N2=4.

Pr(Al) = The probability of event A1 occurring per turbine year, Event A1 is the disintegration of a low-pressure turbine at the nuclear plant.

Pr(A2) = The probability of event A2 occurring per turbine year. Event A2 is the disintegration of a 3,600 rpm turbine at Watts Bar Steam Plant.

Pr(B1) = The probability of event B1. Event B1 is the fraction of the turbine disintegrations that will generate missiles with exit velocities in the lower portion of the rated speed missile spectrum.

Pr(B2) = The probability of event B2. Event B2 is the fraction of the turbine disintegrations that will generate missiles with exit velocities in the upper portion of the rated speed missile spectrum.

Pr(B3) = The probability of event B3. Event B3 is the fraction of over-speed turbine disintegrations occurring per turbine disintegration.

Pr(C1) = The probability of event C1. Event C1 is the fraction of rated speed turbine disintegrations that produce dangerous missiles.

Pr(C2) = The probability of event C2. Event C2 is the fraction of over-speed turbine disintegrations that produce dangerous missiles.

ILE PROTECTION 3.5-21

Pr(D1) = The probability of event D1. Event D1 is the fraction of times that center disc missiles will be produced per dangerous missile producing turbine disintegration.

Pr(D2) = The probability or event D2. Event D2 is the fraction of times that end disc missiles will be produced per dangerous missile producing turbine disintegration.

Pr(E) = The probability of event E. Event E is the fraction of times end disc missiles will be deflected towards essential plant equipment per end disc missile produced.

Pr(Fl) = The probability of event Fl. Event Fl is the fraction of times a center, disc missile from Watts Bar Nuclear Plant (WBNP) having an exit velocity in the lower portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F2) = The probability of event F2. Event F2 is the fraction of times an end disc missile from WBNP having an exit velocity in the lower portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F3) = The probability of event F3. Event F3 is the fraction of times a center disc missile from WBNP having an exit velocity in the upper portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F4) = The probability of event F4. Event F4 is the fraction of times an end disc missile from WBNP having an exit velocity in the upper portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F5) = The probability of event F5. Event F5 is the fraction of times an over-speed center disc missile from WBNP will strike essential equipment or structures.

Pr(F6) = The probability of event F6. Event F6 is the fraction of times an over-speed end disc missile from WBNP will strike essential equipment or structures.

Pr(F7) = The probability of event F7. Event F7 is the fraction of times a center disc missile from Watts Bar Steam Plant (WBSP) having an exit velocity in the lower portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F8) = The probability of event F8. Event F8 is the fraction of times an end disc, missile from WBSP having an exit velocity in the lower portion of the rated speed velocity spectrum will strike essential equipment or structures.

Pr(F9) = The probability of event F9. Event F9 is the fraction of times a center disc missile from WBSP having an exit velocity in the upper portion of the rated speed missile velocity spectrum will strike essential equipment or, structures.

2 MISSILE PROTECTION

Pr(Fl0) = The probability of event F10. Event F10 is the fraction of times an end disc missile from WBSP having an exit velocity in the scooper portion of the rated speed missile velocity spectrum will strike essential equipment or structures.

Pr(F11) = The probability of event F11. Event F11 is the fraction of times an over-speed center disc missile from WBSP will strike essential equipment or structures.

Pr(F12) = The probability of event F12. Event F12 is the fraction of times an over-speed end disc missile from WBSP will strike essential equipment or structures.

Pr(G1) = The probability of event G1. Event G1 is the fraction of times that a strike by a rated speed missile with an exit velocity in the lower portion of the rated speed missile velocity spectrum from WBNP will result in the elimination of the capability provided by that safety-related equipment installation or structure.

Pr(G2) = The probability of event G2. Event G2 is the fraction of times that a strike by a rated speed missile with an exit velocity in the upper portion of the rated speed missile velocity spectrum from WBNP will result in the elimination of the capability provided by that safety-related equipment installation or structure.

Pr(G3) = The probability of event G3. Event G3 is the fraction of times that a strike by an over-speed missile from WBNP will result in the elimination of the safety-related equipment or structure.

Pr(G4) = The probability of event G4. Event G4 is the fraction of times that a strike by a rated speed missile with an exit velocity in the lower portion of the rated speed missile velocity spectrum from WBSP will result in the elimination of the capability provided by that safety-related equipment installation or structure.

Pr(G5) = The probability of event G5. Event G5 is the fraction of times that a strike by a rated speed missile with an exit velocity in the upper portion of the rated speed missile velocity spectrum from WBSP will result in the elimination of the capability provided by that safety-related equipment installation or structure.

Pr(G6) = The probability of event G6. Event G6 is the fraction of times that a strike by an overspeed missile from WBSP will result in the elimination of the safety-related equipment or structure.

Additional factors and interpretations utilized to make this expression represent conditions at Watts Bar Nuclear Plant are:

(1) The low-pressure turbine disintegration rate, Pr(A1), will be 7x10-5/year.

Such a value is conservatively determined to represent state-of-the-art in References [2] and [10] for turbines.

ILE PROTECTION 3.5-23

(2) The 3,600 rpm turbine disintegration rate, Pr(A2), will be 1x10-4/year. This value represents current data failure rates, and does not consider less than 100% plant utilization or planned unit phase-out.

(3) The center of each turbine assembly was assumed to be the origin of the turbine missiles.

(4) Only one turbine disc from one turbine assembly was assumed to disintegrate in a turbine accident producing dangerous turbine missiles.

(5) The fraction of turbine disintegrations that will occur in the rated speed accident realm was assumed to be 0.8 and the fraction of turbine disintegrations that will occur in the overspeed accident realm was assumed to be 0.2. Such values were judged to be appropriate based on data provided in References [2] and [10]. This data source indicated that 14 known failures since 1951 occurred at or close to rated speed, and seven overspeed incidents occurred in that general span of time. This reference also indicated that the incidents of overspeed, with or without failure, have decreased markedly since 1961 due to organized programs of checking all valves by load change tests. Consequently, the values 0.8 and 0.2 are considered to be appropriately weighted fractions.

(6) The rated speed accident missile speed spectrum was assumed to contain two domains and the overspeed accident missile speed spectrum was assumed to contain one domain. The first rated speed missile domain was created to represent missiles in the lower exit speed portion of the rated speed missile spectrum, while the second domain was created to represent missiles in the upper exit speed portion of the rated speed missile spectrum.

It was then assumed that half of the rated speed spectrum fell in each of the two domains. Therefore, Pr(B1)=O.4, Pr(B2)=O.4, and for over-speed missiles, Pr(B3)=O.2. From these determinations, consideration is given to both the high terminal speed missiles that are most likely to eliminate essential ESF functional capabilities in the event of impact and the higher likelihood of the lesser speed missiles to impact upon the essential equipment or structures in the two unit complex.

(7) The fraction of dangerous missiles produced per rated speed turbine disintegration was assumed to be 0.7, thus making Pr(C1) equal to 0.7. This is considered appropriate and quite conservative because 1) seven of the ten turbine disintegrations listed in Table 3 of Reference [1] for the 70,280 turbine years of operation produced missiles, and 2) all of the missiles under consideration were assumed to possess mass characteristics appropriate to causing maximum destruction potential. See item (11), below. The fraction of dangerous missiles produced per over-speed accident was assumed to be 1.0, thereby making Pr(C2)=1.0.

4 MISSILE PROTECTION

(8) The fraction of missile-producing turbine accidents generating center disc missiles was assumed to be 0.9 while those generating end disc missiles was assumed to be 0.1. Therefore, Pr(D1) and Pr(D2) were set equal to 0.9 and 0.1, respectively.

(9) Half of the end disc missiles produced will be deflected away from safety-related components and structures. The basis for this judgment comes from the deflection range established for end disc missiles in Reference [4]. This reference indicates that end disc missile deflections during the turbine casing penetration process will most likely fall between 0° to 25°. Such a deflection pattern in the plant arrangements at Watts Bar Nuclear and Steam Plants, where all potential safety-related equipment lies on one side of a 180° sector defined by the disc plane of rotation indicates that half of the end disc missiles will be deflected away from any essential plant items. Therefore, Pr(E) is set equal to 0.5. It should be noted that the same reference indicates that center disc missiles can be deflected plus or minus 5° to the disc plane of rotation; therefore, any center disc missile may be deflected towards essential safety equipment or structures. For this reason, the angular bias function is not applicable to center disc missiles.

(10) A representative lumped missile speed value in each of the three exit speed domains defined in (6), above, was assumed. For the turbines at both power plants, exit speeds of 250 ft/sec and 350 ft/sec were assumed for missiles in the lower and upper portion of the rated speed accident missile domain, respectively. An exit speed of 550 ft/sec was assumed for missiles in the overspeed domain.

These assumptions appear very conservative. Evidence obtained from an analysis of the Gallatin turbine accident[3], shows that the most energetic missile had a speed not greater than 300 ft/sec. All the other 22 missiles produced in this accident weighing more than 100 pounds had exit speeds well below this value. Further support for this claim comes from References

[2] and [10] where it is stated that the more probable missile velocities are between 200 and 500 ft/sec. An additional degree of conservatism is applied in this analysis by using an uncertainty function of +10% on all the turbine exit velocities.

(11) All dangerous missiles produced in turbine disintegrations are those having the highest kinetic energy after completion of the turbine penetration process.

As indicated previously, these are disc fragments having about 1/4 of the disc mass. One fragment is assumed emitted per quadrant in the disc plane of rotation. Two of the fragments are therefore deflected into the ground around the turbine and cause no damage. Conservation of momentum principles indicate that the other two missiles in this worst case situation would emerge with upward directed trajectory on each side of the turbine axis of rotation.

Because these missiles will be moving in opposite horizontal directions from each other, only one can present a threat to any given piece of equipment.

ILE PROTECTION 3.5-25

(12) A disablement factor of 0.5 was utilized to make the transformation from 250 ft/sec missile impact probabilities to unacceptable damage probabilities.

Therefore, Pr(G1) = 0.5. The basis for this is presented in Reference [2]. On page 195 it states that "With the cited concrete thickness (4.5 ft wall, 3.5 ft dome) a missile velocity of 300 ft/sec is not high enough to penetrate either a wall or a dome." On page 192, in the same reference, it is stated that "The kinetic energy may be reduced as much as 20% for high velocity, irregularly shaped missiles" to account for the effect of drag forces in air. In this instance, a 20% reduction in kinetic energy if utilized, would reduce the 250 ft/sec expected impact speed to approximately 225 ft/sec. However, for conservatism, the unreduced velocity of 250 ft/sec was used. At such a speed, a 0.5 disablement factor is judged to be appropriate. However, the disablement factor for strikes by all faster missiles was set equal to 1.0. Such a factor takes all impacts by other than 250 ft/sec missiles upon essential equipment installations or structures to be certain loss of service of the item struck.

Consequently, Pr(G2), Pr(G3), Pr(G4), Pr(G5), and Pr(G6) in the analytical model are equal to 1.0.

Strike probabilities upon the essential safety-related components and structures identified in Section 3.5.1.3.3 were calculated by the methodology described in Reference [4] and Item (10), above. Both two and three dimensional analyses were conducted.

The three dimensional analysis of the strike probability was an investigation to determine the probability that a missile will emerge from the turbine casing with the velocity vector directed toward essential safety-related items. In this analysis, only Unit 2 containment and the Control Building appear to be prominent enough to be threatened. The results obtained indicate that no missiles can emerge from any of the low-pressure turbines at a sufficiently low trajectory to strike these structures. (See Figure 3.5-5). Such findings indicate that there is no hazard to essential safety-related components or structures from missiles on the upward part of their trajectories.

The two dimensional analysis of the strike probability upon the safety-related components listed in Section 3.5.1.3.3 was an analysis to find the impact probabilities on these items during the downward part of the missile trajectory. Such analyses for rated speed and over-speed center disc and end disc missiles provided values for the only undefined factors in the turbine hazard evaluation equation given previously

[Pr(Fl), Pr(F2) ... Pr(F12)]. The results obtained from this analysis are presented in Table 3.5-6. This table shows the probability of unacceptable damage calculated in the manner described in the analytical model given previously. From this tabulation, it can be seen that the probability for unacceptable damage at the site totals 2.79 x 10-7 events/year.[14]

6 MISSILE PROTECTION

.1.3.6 Turbine Missile Selection Analyses described above indicate that the hazard from turbine missiles at the Watts Bar Nuclear Plant is not significant. A three dimensional analysis of the hazard showed that the probability of unacceptable damage due to turbine missiles on the upward portion of their flight was zero. A two dimensional analysis of the hazard from turbine missiles on their downward flight path showed that the probability of unacceptable damage was about 2.79 x 10-7 events/year at the nuclear plant site.

Since each step in the development of the analytical model described in Section 3.5.1.3.5 contains one or more conservative assumptions, all aspects associated with these two analyses support the contention that the turbine missile hazard at this plant is not significant.

In addition, the plant uses turbines designed, manufactured, installed, and operated in accordance with standards that minimize the possibility of an accident that may produce dangerous missiles. The unit has its essential, safety-related equipment installations and structures positioned to minimize the strike probability on these items.

Probability of unacceptable damage for critical structure are presented in Table 3.5-10.

Such findings indicate that the potential for turbine generated missiles at the Watts Bar Nuclear Plant is credible, but not significant. Therefore, turbine missile hazards need not be considered in the design of the Watts Bar Plant.

.1.4 Missiles Generated By Natural Phenomena Category I structures at Watts Bar Nuclear Plant are designed for tornado- generated missiles based on the following:

(1) Spectrum A (see Table 3.5-7) was used in the design of:

(a) Manholes and protective slabs over manholes for Class 1E electric systems.

(b) Protection for Class 1E conduit duct runs.

(c) Hatch assemblies for personnel access openings to pipe tunnels A & B.

(d) Slabs supporting the ERCW piping at the Intake Pumping Station.

(e) Pipe encasement at the Diesel Generator Building.

(f) Refueling Water Storage Tank foundation.

(g) Roofs and walls of Category I structures except as noted for Spectrums B, C & D.

(h) Protection for diesel generator exhaust stacks.

(i) Protection for fuel oil storage tank vent lines in Diesel Generator Building.

ILE PROTECTION 3.5-27

(2) Spectrum B (see Table 3.5-8) was used in the design of the equipment doors and bulkheads on the Diesel Generator Building.

(3) Spectrum C (see Table 3.5-9) was used in the design of the structures not covered by Items 1, 2 or 4 (Intake pumping station structural steel roof, ERCW standpipe encasement, ERCW discharge overflow structure, and ERCW valve covers).

(4) Spectrum D (See Table 3.5-17) was used in the design of the Additional Diesel Generator Building and any additional Category I Structures after July 1979.

.1.5 Missiles Generated by Events Near the Site.

There are no postulated accidental explosions in the vicinity of the site (See Section 2.2.3). The only significant nearby industrial activity is the Watts Bar Steam Plant.

Turbine missiles from this plant are treated in Section 3.5.1.3. No other missiles are considered significant. Therefore, the Watts Bar Nuclear Plant need not be designed for protection against missiles generated by explosions of trucks, trains, ships, barges, industrial facilities, hydrogen storage tanks, pipelines and military facilities.

.1.6 Aircraft Hazards There is one federal airway passing within two miles of the nuclear facility. The probability per year of an aircraft crashing into the plant (PFA)[17] is estimated in the following manner:

PFA = C x N x A/w where:

C = inflight crash rate per mile for aircraft using airway.

w = width of airway (plus twice the distance from the airway edge to the site when the site is outside the airway) in miles.

N = number of flights per year along the airway, and A = effective area of plant in square miles.

For the Watts Bar site, C = 4.0 x 10-10, w = 8 miles, N = 2 x 2200/year, A = 0.01 mi2.

The value for N, per Section 2.2.2.5, was doubled to account for increases in aircraft traffic. Therefore, PFA = 2.2 x 10-9/year. This conservative upper bound probability is less than the Standard Review Plan range of "1 x 10-7" and indicates that further consideration of hazard from this federal airway is unnecessary.

There are no airports located within five miles of the site. There are no airports with projected operations greater than 500 d2 movements per year located within 10 miles of the site or greater than 1,000 d2 outside 10 miles, where d is the distance in miles from the site.

8 MISSILE PROTECTION

There are no military installations or any airspace use that might present a hazard to the site. Therefore, aircraft hazards need not be considered in the design of the Watts Bar Nuclear Plant.

.2 Systems To Be Protected Systems whose failure could lead to offsite radiological consequences or which are required for reactor shutdown and cooldown under normal and/or design basis conditions are listed in Table 3.2-1.

These include 1) the fluid handling equipment in ANS Safety Classes 1, 2a, 2b or 3 listed by system in Tables 3.2-2a and 3.2-2b, 2) Class 1E electrical systems and components listed in Table 3.2-3, and 3) the Heating, Ventilating, and Air Conditioning components in TVA Classes B, M, Q, and S as described in Table 3.2-2a. A more detailed discussion of required equipment and its safety-related implications may be found in the FSAR sections covering individual system.

It is important to note that all of the equipment referenced above is required for some safety-related function but not all at once. The list of required equipment for a particular missile event depends on the nature of the missile (whether it is associated with or can cause a LOCA, whether or not the missile is being generated from a safety-related piece of equipment, etc). Hence, much of the missile damage consideration outside containment can be reduced to looking at those systems and components required for reactor shutdown, coolant system makeup, and for decay heat removal to the ultimate heat sink.

Table 3.5-14 lists outdoor features, including air intakes and exhausts, which may be required to perform a safety-related function coincident with or following the occurrence of a tornado.

For the Watts Bar Nuclear Plant the layout of structures and equipment is such that there are no systems or components which rely upon redundancy and separation alone for protection against externally generated missiles. There are however certain systems and components which, due to their location and/or separation of trains, are inherently protected against specific types of missiles. This protection by separation and location concept has been addressed where applicable in the missile analyses of Section 3.5.1.

.3 Barrier Design Procedures To arrive at a formula to use in computing penetration into concrete walls, a comparison was made of formulas listed in ORNL-NSIC-22, "Missile Generation and Protection in Lightwater-Cooled Power Reactor Plants." Four equations were studied in ORNL-NSIC-22 in connection with penetration in concrete. Two of these, the Army Corps of Engineers formula and the National Defense Research Committee formula, do not apply for impact velocities under 500 ft/sec and thus are not applicable here (velocity of 300 mph = 440 ft/sec). The remaining two equations are the modified Petry formula and the Ballistic Research Laboratory formula. These two formulas were compared for a 6-inch diameter missile of 100 pounds and a 16-inch diameter missile ILE PROTECTION 3.5-29

of 2,500 pounds with velocities in the range from 0 to 500 ft/sec. As seen in Figures 3.5-6 and 3.5-7, the Petry formula is the most conservative for velocities greater than 150 to 200 mph.

The following describes the barrier procedures utilized for concrete barriers. The depth to which a missile penetrated a concrete wall was estimated by use of the modified Petry formula.[6]

D' = 12 KAV' [1 + e-4(a - 2)]

where D' = depth of penetration V = impact velocity K = A material constant A = weight of missile/

impact area of missile 2 T V' = log 10 V a = --------------------

1 + ---------------------

215,000 12KAV' T = wall thickness The results are given in Figures 3.5-8 and 3.5-9. According to C. V. Moore,[7] spalling on the inside face of a wall does not occur for penetrations less than two-thirds the wall thickness.

Conservatism was assured by assuming nondeformable missiles in the penetration analysis using the modified Petry formula.

None of the postulated missiles described in Section 3.5.1, internal or external, will impair the capability of the engineered safety features to shut down the reactor or to maintain the reactor in a safe shutdown mode indefinitely. For portions of the engineered safety features located within the containment structure, protection against missiles generated inside containment is accomplished with the basic approach of assuring design adequacy against generation of credible missiles rather than to allow missile formation and try to contain the subsequent effects. Further, valves are oriented so that the trajectory of missiles will not likely pass through openings in the crane wall and the valve bonnets and stems will not penetrate the containment shell should they strike it. For these same engineered safety features, protection against tornado-generated missiles is provided by the Shield Building. If one of the pressurizer heaters in the bottom of the pressurizer should become loose and become a jet-propelled missile, it would move downward and could strike the pressurizer surge line beneath the pressurizer. The line will not be perforated and will not jeopardize the capability to bring the nuclear facility to a safe shutdown.

For those portions of the engineered safety features located outside the Shield Building and required for shutdown of the reactor and/or indefinite maintenance of the reactor in the safe shutdown mode, protection is provided against tornado-generated 0 MISSILE PROTECTION

missiles. Protection is provided by locating these features within structures which have been designed to withstand damage by the spectrum of credible tornado-generated missiles.

The postulated missiles inside the containment as defined in Tables 3.5-1, 3.5-2, 3.5-3, and 3.5-4 have been investigated to determine their penetration characteristics.

Penetration depths, or minimum thickness to just perforate, have been calculated based upon three commonly used equations. They are:

(1) The Stanford Equation.

(2) The Ballistics Research Laboratory Equation.

(3) The Recht and Ipson Equation.

The minimum thicknesses to just perforate a plate having the characteristics of SA-516-GR70 carbon steel represent the largest values obtained from the three above-mentioned equations. The worst case involves a penetration depth that is 45%

of the actual containment thickness. Based upon the analysis, it is reasoned that none of the postulated missiles pose a threat to the integrity of the containment.

Tornado missile impact loads, where required, were calculated based upon several applicable techniques. Impact loads for all missiles of Spectrum A (Table 3.5-7) except missile A3, the 4,000-pound automobile at 50 miles per hour, were determined by the relationships presented in Reference [9].

Missile A3 loads were based on actual test results and analysis technique. Time histories of decelerations were obtained from the National Highway Safety Bureau for automobile crash tests early in a crash safety program. Their time histories were converted to shock spectra by the usual methods and dynamic load factors were plotted against period of structures or elements of structures. An envelope was then constructed enveloping all spectra.

To determine the automobile impact load on a structure or element of a structure, the natural period of the item was determined and the appropriate loading obtained from the shock spectra. This technique yields the maximum load irrespective of time.

Values obtained from this technique have been corroborated with subsequent reports by the National Highway Safety Bureau. In Reference [5], time histories of forces are presented for several automobile crash tests which are closely confirmatory. The impact loads obtained by the previously described methods were then applied to the structures and the structures were analyzed for the effect of the loads by conventional analytical methods. Impact loads from the missiles of Spectrum C (Table 3.5-9) were calculated using the procedures of Reference [8]. See Section 3.5.1.4 for a discussion of structures designed for Spectrum C.

Tornado missile protection for all safety-related buried piping is provided by one of the four protective schemes described below.

ILE PROTECTION 3.5-31

(1) 10 feet of compacted fine-grained soil.

(2) 7 feet of compacted crushed stone.

(3) 18 inches of conventional unreinforced concrete.

(4) 18 inches of roller-compacted unreinforced concrete.

In each scheme, a 12-inch cushion of either compacted sand or fine-grained earthfill is required over the top of the pipe.

The acceptability of each scheme has been verified by a full-scale test program[16] in which missiles from the NRC spectrum were dropped from a helicopter into test pits of crushed stone or earthfill and onto concrete slabs. The missiles used in the testing were:

(1.a) 1,500-pound utility pole, (2.a) 12-inch diameter schedule 40 steel pipe, (3.a) 1-inch diameter steel rod, (4.a) 3-inch diameter schedule 40 steel pipe, and (5.a) 6-inch diameter schedule 40 steel pipe.

Of these missiles, the 12-inch pipe and utility pole caused the greatest penetration depths. Impact velocities of 200-215 ft/s were achieved for both the utility pole and 12-inch pipe which equals or exceeds the design velocities for those missiles as listed in Tables 3.5-7 and 3.5-9. The protective thicknesses listed above are based on the maximum thicknesses observed in the test program and are, therefore, conservatively chosen.

It is concluded that the missile protection criteria to which the plant has been analyzed and protected against comply with Criteria 2 and 4 of 10 CFR 50, Appendix A, General Design Criteria for Nuclear Power Plants.

.3.1 Additional Diesel Generator Building (And Other Category I Structures Added After July 1979)

The openings in the walls and roof for access, ventilation, air intakes, and exhaust discharge, are designed to withstand the effects from the tornado missiles listed in Spectrum D of Table 3.5-17. The 480V auxiliary board room (ABR) ventilation air intake vent is the only primary safety-related equipment located outside the Additional Diesel Generator Building not protected against tornado missiles. The roof opening for the ABR vent is protected against tornado missile entry by a missile shield installed inside the roof structure. In-lieu of protecting the ABR vent from tornado missiles, operator actions are specified in the event of a tornado warning to restore ventilation cooling to the ABR. Overall structural response evaluation of concrete barriers to tornado missile impact was performed using the general requirements of Appendix C, 2 MISSILE PROTECTION

ACI 349-76, "Code Requirements For Nuclear Safety-Related Concrete Structures."

Minimum concrete thickness required to resist penetration, perforation or backface scabbing from these tornado missiles are given in Table 3.5-18.

REFERENCES (1) Burnell, J., 'The Flow of Boiling Water Through Nozzles, Orifices, and Pipes.'

The Institute of Engineers, Australia, March 1946.

(2) Bush, Spencer H., 'Probability of Damage to Nuclear Components Due to Turbine Failures.' Nuclear Safety Magazine, Volume 14, No. 3, May-June 1973, pages 187-201.

(3) Proctor, L. D. 'Gallatin Turbine Disintegration Study,' TVA Document No.

TI-275-4 RO, October 9, 1974.

(4) Semendares, S. N., 'Topical Report-Methods of Determining the Probability of a Turbine Missile Hitting a Particular Plant Region,' WCAP-7861, February 1972.

(5) DeLeys, Norman J., et al., 'Full Scale Crash Tests of Rigid Simulated Heavy Vehicle Underride Guard,' Cornell Aeronautical Laboratory, Inc., Buffalo, New York, March 1970. Report prepared for Department of Transportation, Federal Highway Administration, National Highway Safety Bureau, Washington, DC.

(6) Amirikan, A., 'Design of Protective Structures,' NP-3726, Bureau of Yards and Docks, Department of the Navy, Washington, DC, August 1950.

(7) Moore, C. V., 'The Design and Barricades for Hazardous Pressure Systems,'

Nuclear Engineering and Design, Vol. 5, 1967, pp. 85-86.

(8) Design of Structures for Missile Impact', BC-TOP-9A, Revision 2 Topical Report, Bechtel Power Corporation, San Francisco, California, September 1974.

(9) Westinghouse Systems Standard Design Criteria, "Protection Criteria Against Dynamic Effects Resulting from Pipe Rupture" (Identification No.

1.19).

(10) Bush, S.H., "Probability of Damage to Nuclear Components Due to Turbine Failure." CONF-730304, Topical Meeting on Water Reactor Safety, Salt Lake City, Utah, March 26-28, 1973, pp.84-104.

(11) Topical Report: "Procedures for Estimating the Probability of Steam Turbine Disc Rupture from Stress Corrosion Cracking," submitted to the NRC May 1981, by Westinghouse Steam Turbine Generator Division, WSTG-1-NP.

ILE PROTECTION 3.5-33

(12) Topical Report: "Missile Energy Analysis Methods for Nuclear Steam Turbines," submitted to the NRC May 1981, by the Westinghouse Steam Turbine Generator Division, WSTG-2-NP.

(13) Memorandum from L. W. Boyd to C. A. Chandley dated September 27, 1988 (B44 88 0927 005) transmitting copies of Turbine Missile Reports as listed below:

(a) 1974 Analysis for Turbine Missiles.

(b) CT-24076 - SQN Methodology for Analyzing Turbine Missiles.

(c) CT-24832, R1 - Results of Turbine Missile Analysis for SQN U-1.

(d) CT-24873 - Report of Turbine Missile Analysis for SQN U-2.

(e) LT-24831, R1 - Report of Turbine Missile Analysis for SQN U-1.

(14) Calculation TI-858, "Probability of Unacceptable Damage to the Diesel Generator Building from Turbine Missiles."

(15) Calculation TI-521, "Probability for Turbine Missile Strike Damage at Watts Bar Nuclear Plant."

(16) CEB Report CEB-81-20, "Testing of Protective Cover for Essential Buried Structures."

(17) U.S. Nuclear Regulatory Commission NUREG-0800, "Standard Review Plan," Section 3.5.1.6.III.2.

4 MISSILE PROTECTION

TTS BAR THRUST IMPACT IMPACT(1) KINETIC(1)

WEIGHT AREA AREA VELOCITY(4) ENERGY LATED MISSILES (LB) (IN2) (IN2) (Ft/SEC) (Ft-Lbs) anism Housing Plug 11 5.94(2) 7.07 450 34,600 Shaft Assembly 140 2.41 2.41 179 69,800 anism Housing(3) Plug And - - - - -

Drive Shaft Impacting On Same Missile Shield Spot Shaft Latched To Mechanism 1500 2.41 11.04 34 26,400 TES:

Velocities and kinetic energies for a distance of 4.389(ft) between top of CRDM Housing and Missile Shield.

Flow discharge area (equal to thrust area-no expansion of jet assumed).

Assume drive shaft further pushes housing plug into shield.

For the calculational methods, see Appendix 3.5A.

WBNP-92

TTS BAR Flow Weight to Terminal(1)

Weight Discharge Thrust Impact Impact Area velocity Missile Description (lb) Area (in2) Area (in2) Area (in2) Ratio (psi) (fps)

Relief Valve Bonnet (3" x 6" or 6" 350 2.86 80 24 14.5 110 Motor Operated Isolation Valve 400 5.5 113 28 14.1 135 (plus motor and stem) (3")

ir Operated Relief Valve Bonnet 75 1.8 20 20 3.75 115 em) ir Operated Spray Valve Bonnet 120 5.5 50 50 2.4 190 em)

Air Operated Spray Valve 200 9.3 50 50 4 190 TES:

or the calculational methods, see Appendix 3.5A WBNP-79

able 3.5-3 Postulated Piping Temperature Element Assembly Missile Characteristics For a tear around the weld between the boss and the pipe:

Characteristics "without well" "with well" Flow Discharge Area 0.11 in2 0.60 in2 Thrust Area 7.1 in2 9.6 in2 Missile Weight 11.0 lb 15.2 lb Area of Impact 3.14 in2 3.14 in2 Missile Weight 3.5 psi 4.84 psi Impact Area Velocity (1) 20 ft/sec 120 ft/sec For a tear at the junction between the temperature element assembly and the boss for the "without well" element and at the junction between the boss and the well for the "with well" element.

Characteristics "without well" "with well" Flow Discharge Area 0.11 in2 0.60 in2 Thrust Area 3.14 in2 3.14 in2 Missile Weight 4.0 lb 6.1 lb Area of Impact 3.14 in2 3.14 in2 Missile Weight 1.27 psi 1.94 psi Impact Area Velocity 75 ft/sec 120 ft/sec NOTES:

1.For the calculational methods, see Appendix 3.5A ILE PROTECTION 3.5-37

able 3.5-4 Characteristics of Other Missiles Postulated Within Reactor Containment Reactor Coolant Instrument Pump Temperature Well of Pressurizer Element Pressurizer Heaters ight 0.25 lb 5.5 lb 15 lb charge Area 0.50 in2 0.442 in2 0.80 in2 ust Area 0.50 in2 1.35 in2 2.4 in2 act Area 0.50 in2 1.35 in2 2.4 in2 issile Weight 0.5 psi 4.1 psi 6.25 psi pact Area ocity(1) 260 ft/sec 100 ft/sec 55 ft/sec NOTES:

1. For the calculational procedures, see Appendix 3.5A 8 MISSILE PROTECTION

Table 3.5-5 Deleted by Amendment 71; See Section 10.2.3.1 ILE PROTECTION 3.5-39

TTS BAR NUCLEAR PLANT TURBINES STEAM PLANT TURBINES t Rated Speed Missiles Overspeed Rated Speed Missiles Overspeed 250 fps + 10% 350 fps + 10% 550 fps + 10% 310 fps + 10% 500 fps + 10% 865 fps + 10%

Center End Center End Center End Center End Center End Center End 7X10-5 7X10-5 7X10-5 7X10-5 7X10-5 7X10-5 1X10-4 1X10-4 1X10-4 1X10-4 1X10-4 1X10-4 0.4 0.4 0.4 0.4 0.2 0.2 0.4 0.4 0.4 0.4 0.2 0.2 0.7 0.7 0.7 0.7 1.0 1.0 0.7 0.7 0.7 0.7 1.0 1.0 0.9 0.1 0.9 0.1 0.9 0.1 0.9 0.1 0.9 0.1 0.9 0.1

- 0.5 - 0.5 - 0.5 - 0.5 - 0.5 - 0.5 6.72X10-3 7.89X10-3 3.42X10-3 2.81X10-3 7.67X10-4 8.79X10-4 0 2.91X10-5 0 8.77X10-4 3.32X10-6 2.23X10-4 0.5 0.5 1.0 1.0 1.0 1.0 1.0 1.0 1.0 1.0 1.0 1.0

-8 3.86x10-9 6.04x10-8 2.75x10-9 9.66x10-9 6.15x10-10 4.07x10-11 1.23x10-9 5.98x10-11 2.23x10-10 5.93x10 0 0 1.37x10-7 1.49x10-9 (2 1800 rpm Turbines)x(1.37x10-7)+(4 3600 rpm Turbines)x(1.49x10-9) = 2.79x10-7 events per year WBNP-86

Table 3.5-7 Tornado Missile Spectrum A for Category I Structures(1)

Design Velocity Exterior Roof Wall System issile(2) Description ft/s (mi/h) ft/s (mi/h)

Wood plank, 2 in. x 4 in. x 440 (300) --

12-ft long, weight 27 lbs Cross tie, 7 in. x 9 in. x 440 (300) --

8.5 ft long, weight 186 lbs Automobile, weight 4000 lbs, 73 (50) --

up to 25 ft above grade at structure Steel pipe, 2-in. diameter, 147 (100) --

7-ft long, weight 26 lbs Steel rod, 1-in. diameter x 210 (143) 168 (115) 3-ft long, weight 8 lbs Utility pole, 13.5 in. 200 (136) 160 (109) diameter x 35-ft long, weight 1490 lbs, up to 30 feet above grade Notes:

(1) See Section 3.5.1.4.

(2) Missiles A1 through A4 were considered in original design. Missiles A5 and A6 were based on the structural adequacy of as-designed structures.

ILE PROTECTION 3.5-41

ble 3.5-8 Tornado Missile Spectrum B Diesel Generator Building Equipment Doors(1)

Design Velocity Missile Description ft/sec (mph)

B1 100-lb missile with 4-in. diameter for impact area 147 (100)

B2 10-ft length of 2 in. standard pipe impact endwise 147 (100)

(weight = 36.5 lbs.)

B3 10-ft length of 1/2-in. standard pipe impacting endwise 147 (100)

(weight 8.5 lbs.)

B4 Wood plank, 2 in. x 4 in. x 12 ft long, weight 27 lbs. 440 (300)

B5 Cross tie, 7 in. x 9 in. x 8.5 ft long, weight 186 lbs. 440 (300)

B6 Steel pipe, 2-in. diameter by 7 ft long, weight 26 lbs. 147 (100) siles B1, B2, and B3 were considered in the design of the equipment doors. Additional protection is vided for missiles B4, B5, and B6.

Note:

1. See Section 3.5.1.4.

2 MISSILE PROTECTION

Table 3.5-9 Tornado Missile Spectrum C for Category I Structures(1)

Design Velocity Exterior Roof Wall System ft/s (mi/h) ft/s (mi/h)

C1 Wood plank, 4 in. x 12 in. x 12 ft., weight 200 368 (251) 294 (200) lbs.

C2 Steel pipe, 3-in. diameter, 268 (183) 215 (147) 10-ft long, weight 78 lbs C3 Steel rod, 1-in. diameter, 259 (177) 207 (141) 3-ft long, weight 8 lbs C4 Steel pipe, 6-in. diameter, 230 (157) 184 (125) 15-ft long, weight 285 lbs C5 Steel pipe, 12-in. diameter, 205 (140) 165 (112) 15-ft long, weight 743 lbs C6 Utility Pole, 13-1/2-in. diameter, 35-ft long, 241 (164) 205 (140) weight 1490 lbs.

C7 Automobile, frontal area 20 ft2, 4000 lbs, up to 100 (70) 80 (56) 30 ft above grade NOTE:

(1) See Section 3.5.1.4.

ILE PROTECTION 3.5-43

TTS BAR Rated Speed Missiles Overspeed Missiles 250fps+ 10% 350 fps + 10% 550 fps + 10%

Structure Center End Center End Center End

-8 -9 -8 -10 -9 actor Building #1 2.28 x 10 1.35 x 10 3.13 x 10 7.04 x 10 2.87 x 10 7.59 x 10-11 actor Building #2 2.38 x 10-8 1.49 x 10-9 2.88 x 10-8 6.35 x 10-10 2.67 x 10-9 5.78 x 10-11 Control Room 2.59 x 10-8 5.61 x 10-10 8.82 x 10-9 2.04 x 10-10 2.55 x 10-9 5.85 x 10-11 pent Fuel Pool 6.17 x 10-10 1.88 x 10-10 3.34 x 10-9 7.72 x 10-11 3.18 x 10-10 7.46 x 10-12 Valve Room 1A 2.36 x 109 6.96 x 10-11 1.95 x 10-9 4.78 x 10-11 1.96 x 10-10 4.40 x 10-12 Valve Room 1B 4.22 x 10-10 1.48 x 10-10 2.90 x 10-9 6.70 x 10-11 2.72 x 10-10 7.11 x 10-12 Valve Room 2A 2.61 x 10-9 5.72 x 10-11 1.50 x 10-9 3.14 x 10-11 1.32 x 10-10 3.25 x 10-12 Valve Room 2B 5.72 x 10-10 1.72 x 10-10 3.88 x 10-9 9.86 x 10-11 2.55 x 10-10 5.85 x 10-12 CW Conduit Run 3.95 x 10-8 3.58 x 10-9 3.56 x 10-8 3.57 x 10-9 9.02 x 10-9 1.00 x 10-9 sel Generator Bldg 0 1.14 x 10-10 2.55 x 10-9 7.03 x 10-11 1.03 x 10-9 1.15 x 10-11 TOTALS 1.19 x 10-7 7.73 x 10-9 1.21 x 10-7 5.51 x 10-9 1.93 x 10-8 1.23 x 10-9 WBNP-92

Table 3.5-11 Postulated CRDM Missile Characteristics Thrust Impact(1)

Weight Area Impact Velocity Kinetic(1)Ene Postulated Missiles (lb) (in2) Area (in2) (ft/sec) rgy (ft-lb) echanism Housing Plug 11 5.94(2) 7.07 450 34,600 rive Shaft Assembly 140 2.41 2.41 179 69,800 Mechanism Housing(3) Plug and - - - - -

Drive Shaft Impacting on Same Missile Shield Spot rive Shaft Latched to Mechanism 1500 2.41 11.04 34 26,400 Notes:

(1)Velocities and kinetic energies for a distance of 4.389 (ft) between top of CRDM housing and missile shield.

(2)Flow discharge area (equal to thrust area - no expansion of jet assumed).

(3)Assume drive shaft further pushes housing plug into shield.

ILE PROTECTION 3.5-45

Table 3.5-12 Typical Postulated Valve Missile Characteristics Flow Thrust Weight to sile Wgt Discharge Area Impact Impact Area Terminal scription (lb) Area (in2) (in2) Area(in2) Ratio (psi) Velocity (fps) ety Relief Valve net (3"x 6" or 6") 350 2.86 80 24 14.5 110 ch Motor erated Isolation ve Bonnet (plus tor and stem) 400 5.5 113 28 14.1 135 ch Air Operated ief Valve Bonnet s stem) 75 1.8 20 20 3.75 115 ch Air Operated ay Valve Bonnet s stem) 120 5.5 50 50 2.4 190 ch Air Operated ay Valve 200 9.3 50 50 4 190 Characteristics Of Other Missiles Postulated Within Reactor Containment Reactor Coolant Pump Instrument Well of Pressurizer Heater Temperature Element Pressurizer ight 0.25 lb 5.5 lb 15 lb charge Area 0.50 in2 0.442 in2 0.80 in2 ust Area 0.50 in2 1.35 in2 2.4 in2 act Area 0.50 in2 1.35 in2 2.4 in2 sile Weight 0.5 psi 4.1 psi 6.25 psi act Area ocity 260 ft/sec 100 ft/sec 55 ft/sec 6 MISSILE PROTECTION

ble 3.5-13 Postulated Piping Temperature Element Assembly Missile Characteristics or a tear around the weld between the boss and the pipe:

aracteristics "Without Well" "With Well" w Discharge Area 0.11 in2 0.60 in2 ust Area 7.1 in2 9.6 in2 sile Weight 11.0 lb 15.2 lb act Area 3.14 in2 3.14 in2 sile Weight 3.5 psi 4.84 psi pact Area ocity 20 ft/sec 120 ft/sec or a tear at the junction between the temperature element assembly and the boss for the "without ell" element and at the junction between the boss and the well for the "with well" element.

aracteristics "Without Well" "With Well" w Discharge Area 0.11 in2 0.60 in2 ust Area 3.14 in2 3.14 in2 sile Weight 4.0 lb 6.1 lb act Area 3.14 in2 3.14 in2 sile Weight 1.27 psi 1.94 psi pact Area ocity 75 ft/sec 120 ft/sec ILE PROTECTION 3.5-47

TTS BAR FSAR Feature Figure Tornado Protection CW pumps, traveling screens, and ancillary 3.8.4-50 Steel grillage roof system consisting of a series of wide flange tures located on the deck of the intake beams (W21 x 49) spaced 9 inches on center and rotated 45 mping station. degrees. Walls of 15 inch reinforced concrete.

CW Standpipes 2.5-225 Reinforced concrete enclosure (15-inch clear cover)

CW Overflow Box 3.8.4-46a Reinforced concrete cover (2-feet thickness)

CW yard piping 9.2-40 Buried with one of the following minimum covers: 18 inches of concrete, 7 feet of crushed stone, or 11 feet of earthfill.

ST 3.8.4-35 3-1/2 feet high concrete wall with earth backfill surrounding tank to preserve necessary volume of water e tunnels 3.8.4-35 Buried reinforced concrete cover (2-feet thickness) sel generator ventilation intakes and exhausts 3.8.4-26 Reinforced concrete canopy (1-foot thickness) sel generator engine combustion air exhausts 3.8.4-26 Reinforced concrete curb, 3 feet high and 18 inches thick around the exhaust sel generator electric board room air intakes 3.8.4-26 Steel canopy with barrier protection (steel frame with 1 inch cover otal) plate).

V transformer room, ventilation intakes and 1.2-1 Suspended steel grating (2-1/2 inch x 3/8 inch main bars and 1/2 in austs diameter connecting bars).

l battery room exhausts 1.2-1 Same as for Item 10 except the fifth Vital Battery Room is same as Item 9.

V board room condensing unit air intake and 1.2-1 Reinforced concrete roof parapet (a minimum of 12 inches thick and aust (train A) 3 feet high)

V board room condensing unit air intake 1.2-1 Reinforced concrete canopy (18 inches thick) in B) s tabulation consists of these outdoor features which are safety-related in the event of a tornado and as defined in Branch Technical Position WBNP-86 B3-2 of the Standard Review Plan for Section 3.5.1-4 "Missiles Generated by Natural Phenomena."

TTS BAR FSAR Feature Figure Tornado Protection V board room condensing unit air exhaust 1.2-1 On roof of mechanical equipment rooms.

in B) ss 1E duct banks and manholes 3.8.4-37 Buried with concrete protection (9 inch clear concrete cover for conduits; 12 inches total concrete thickness of manholes).

l oil 7-day tank vent line (portion above roof) 3.8.4-50 Encased in reinforced concrete.

El. 728' terrace roof openings which expose 3.8.4-27 Steel grating 4'-10" x 4' -10" Borden type C Style 18 size C A36,

. I electrical cable trays structural steel shroud (3/4" thickness), 18" thick precast concrete panels.

B & ADGB fuel oil 1-day tank vent lines 1.2-1 Steel plate shrouds (2" cover plate thickness) rtions protruding from exterior walls) uum Relief Ducts in Aux. Bldg. Roof, Units 3.8.4-26 Steel plate canopy (1/2" thickness) over existing duct opening 2

sel Generator Bldg. roof access hatches (two) 3.8.4-26 Structural steel plate shrouds under DGB roof. Steel plate thickness varies from 1/4" to 1/2", as required ergency Pressurizer Fan opening on Cont. 1.2-1 Steel plate canopy (1/2" min. thick.) over opening

g. roof, column lines C10-C11 & n-q et and locker room exhaust fan opening on 1.2-1 Steel plate canopy (1/2" min. thick.) over opening nt. Bldg. roof, column lines C2-C3 & n-q tery room exhaust vent in Cont. Bldg. roof, 1.2-1 Steel plate canopy (1/2" min. thick.) over opening umn lines C3-C4 & n-q WBNP-86

TTS BAR No.1 Low-Pressure Disc And Fragments (Low Pressure's 1, 2, And 3) (Sheet 1 of 2)

Rated Speed Design Overspeed Destructive Overspeed (100% Speed) 20% Speed 100% Speed Weight Velocity Energy Velocity Energy Velocity Energy (lb) (ft/s) (106 ft-lb) (ft/s) (106 ft-lb) (ft/s) (106 ft-lb) c Burst

.1 2700 Contained Contained 108 0.49 nt No. 1.1 3465 Contained Contained 108 0.63 nt No. 1.2 2350 Contained Contained 108 0.42 nt No. 1.3 1920 Contained Contained 108 0.35 c Burst

. 2 2965 185 1.57 240 2.66 441 8.96 nt No. 2.1 2860 185 1/52 240 2/56 441 8/64 nt No. 2.2 545 *

  • 120 0.12 - -

nt No. 2.3 130 - - - - 441 0.39 ssile energies of less than 100,000 ft-lb are not reported.

c Burst

. 3 2775 166 1.19 292 3.67 597 15.35 nt No. 3.1 1265 219 0.94 - - - -

nt No. 3.1 765 - - 377 1.69 706 5.92 nt No. 3.1 970 177 0.47 311 1.45 635 6.08 c Burst WBNP-86

. 4 3210 369 6.78 460 10.54 778 30.17

TTS BAR Rated Speed Design Overspeed Destructive Overspeed (100% Speed) 20% Speed 100% Speed Weight Velocity Energy Velocity Energy Velocity Energy (lb) (ft/s) (106 ft-lb) (ft/s) (106 ft-lb) (ft/s) (106 ft-lb) nt No. 4.1 480 369 1.01 460 1.57 778 4.51 nt No. 4.2 2380 186 1/28 232 1.99 393 5.70 c Burst

. 5 3980 408 10.39 499 15.35 - -

. 5* 3710 - - - - 752 32.59 nt No. 5.1 340 408 0.89 499 1.31 752 2.99 nt No. 5.2 1290 193 0.74 235 1.11 356 2.54 t change due to loss of blades prior to reaching destructive overspeed.

y Amendment 51 WBNP-86

ble 3.5-16 LP Cylinder and Blade Ring Fragment Dimensions (Refer to Figure 3.5-11)

Fragment L (in) B (in) H (in) Notes Number 90E Segment 1.1* 87.8 18.1 7.7 (a) 1.2 103.8 8.5 9.4 (c) 1.3 117.1 3.0 19.3 (c) 2.1 95.7 12.0 8.8 2.2 36.6 9.4 5.6 (a,b) 2.2 - 9.4 5.6 2.2 37.0 1.9 6.5 (c) 3.1 85.0 9.4 5.6 (a) 3.1 85.2 6.1 5.2 (b,c) 3.1 - 9.4 5.6 (b) 3.1 - 6.1 5.2 (c) 3.1 87.4 4.0 9.8 4.1 81.9 4.5 4.6 4.2 90.0 18.5 5.0 5.1 72.8 2.5 6.6 5.2 74.0 14.0 4.4

  • Except as indicated by the following notes, dimensions apply to 100% and 120% speed and destructive overspeed.

Notes:

(a)100% speed (b) 120% speed (c)Destructive overspeed (190% speed) 2 MISSILE PROTECTION

Table 3.5-17 Tornado Missile Spectrum D(1)

Horizontal Missile Cross Velocity(2)

Description Weight (lb) Section Length (ft) (ft/sec) oden Plank 115 4" x 12" 12 272 el Rod 9 1" dia 3 167 Schedule 40 287 6" dia 15 171 e

Schedule 40 743 12" dia 15 154 e

ity Pole 1124 13-1/2" dia 35 180 omobile 4000 6.5' x 4.3' 16.5 194 Notes:

(1)For Additional Diesel Generator Building and additional Category I structures after July 1979 (2)Vertical velocities of 70% of the postulated horizontal velocities are acceptable except for the 1 inch steel rod which shall have a vertical velocity equal to its horizontal velocity (167 ft/sec).

These missiles are capable of striking in any horizontal or downward direction and at all elevations.

ILE PROTECTION 3.5-53

Table 3.5-18 Minimum Wall and Roof Thickness Requirements To Resist the Effects of Tornado Missile Impact(1) 28-Day Concrete Roof Tornado Intensity Strength Wall Thickness Thickness Region (PSI) (Inches) (Inches) gion I 3000 23 18 4000 20 16 5000 18 14 Note:

(1)For the Additional Diesel Generator Building and additional Category I structures added after July 1979.

4 MISSILE PROTECTION

WATTS BAR WBNP-79 Figure 3.5-1 Ice Condenser Lower Inlet Door Opening, Typical Missile Trajectory Orientation MISSILE PROTECTION 3.5-55

WATTS BAR WBNP-79 Figure 3.5-2 Physical Dimensions of Important Potential Turbine Missiles MISSILE PROTECTION 3.5-56

Security Information Withheld under 10CFR 2.390(d)(1)

WATTS BAR WBNP-79

[e5]

Figure 3.5-3 Turbine Generation Locations SECURITY SENSITIVE

[s5]

MISSILE PROTECTION 3.5-57

Security Information Withheld under 10CFR 2.390(d)(1)

WATTS BAR WBNP-41

[e5]

Figure 3.5-4 Watts Bar Nuclear Plant Layout SECURITY SENSITIVE

[s5]

MISSILE PROTECTION 3.5-58

WATTS BAR WBNP-41 Figure 3.5-5 Cross-Sectional Analysis of Susceptibility of Critical Components to Upward Turbine Missile Trajectories MISSILE PROTECTION 3.5-59

WATTS BAR WBNP-41 Figure 3.5-6 Comparison of Missile Formulas (6-in Cylindrical Missile)

MISSILE PROTECTION 3.5-60

WATTS BAR WBNP-41 Figure 3.5-7 Comparison of Missile Formulas (l6-in Cylindrical Missile)

MISSILE PROTECTION 3.5-61

WATTS BAR WBNP-41 Figure 3.5-8 Depth of Missile Penetration for Tornado (2-in Diameter Pipe)

MISSILE PROTECTION 3.5-62

WATTS BAR WBNP-41 Figure 3.5-9 Depth of Missile Penetration for Tornado (2X4)

MISSILE PROTECTION 3.5-63

WATTS BAR WBNP-51 Figure 3.5-10 LP Disc Missiles MISSILE PROTECTION 3.5-64

WATTS BAR WBNP-51 Figure 3.5-11 LP Cylinder & Blade Ring Fragments MISSILE PROTECTION 3.5-65

WATTS BAR WBNP-51 THIS PAGE INTENTIONALLY BLANK MISSILE PROTECTION 3.5-66

A ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES A. Jet Stream Relations For steady flow, assuming bulk properties across a cross section of a "free jet," the following conservation relations hold between the orifice and any downstream position.

Continuity in axial direction:

(1)

  • W = G o A o = GA = PV zA From conservation of axial momentum:
  • G o V o W

(2) Tj = Po Ao + W----- V o = PA + ----- V z = P o + -------------- A g g g o Where, W = mass discharge rate A = area of jet stream Vz = axial fluid velocity P = fluid pressure G = mass flux rate

= fluid density Tj = total jet thrust G o = 0.61 2pg ( P r - P o )

MATES OF VELOCITIES OF JET PROPELLED MISSILES 3.5A-1

2g ( P r - P o )

Vo = ------------------------------

Po = orifice pressure Pr = reservoir pressure Subscript o refers to orifice conditions.

These relations indicate that mass flow rate and axial jet force are constant at any downstream plane even though pressure, area, density, and fluid velocity change from one downstream position to another.

B. Missile Acceleration Assuming that fluid impinging on missile imparts all of its axial momentum to the missile and splashes radially out of the stream, the force balance on the missile is:

W dV m G

------------ = f ( z ) P + ---- ( V z - V m ) A3 g dt g Where, f(z) = represents the fraction of the jet impinging W = missile weight Vm = missile velocity For no expansion of jet, f(z) = 1, A = Ao (Am Ao is assumed)

-2 ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES

C. Effect on Jet Radial Expansion For the general case, the missile would not receive the full thrust of the jet throughout its travel, and an estimate of f(z) with downstream distance is needed. For a first approximation, it is assumed that the jet expands with a constant half angle and that the thrust fraction, f(z), impinging on the missile is:

f( z) = 1 forA m A ( z )

f ( z ) = Am A ( z ) forA m A ( z )

Where, A(z)= (Ro + Z tan )2 MATES OF VELOCITIES OF JET PROPELLED MISSILES 3.5A-3

THIS PAGE INTENTIONALLY BLANK ection_3_A.book

-4 ESTIMATES OF VELOCITIES OF JET PROPELLED MISSILES

Retrieved from "https://kanterella.com/w/index.php?title=ML090340707&oldid=2565050"