ML20202E340: Difference between revisions

From kanterella
Jump to navigation Jump to search
(StriderTol Bot insert)
 
(StriderTol Bot change)
 
Line 18: Line 18:


=Text=
=Text=
{{#Wiki_filter:
{{#Wiki_filter:.      .-    .      - . - - _                -  - . ~ . - - _ .    - .      . . . - - - . . . .-
  .
  ..
                                                                                                          ;
                                                EliCLOSURL2                                                i
                                                                                                          :
                                  U.S. NUCLEAR REGULATORY COMMISSION
                                                  REGION IV
      -
          - Docket Nos.:      50-313;50-368
          License Nos.:      DPR-51; NPF-6
          Report No.:        50-313/97-21; 50 368/97-21
            Licensee:        Entergy Operations, Inc.
            Facility:        Arkansas Nuclear One, Units 1 and 2
]
          - Location:        Junction of Hwy,64W and Hwy.333 South
                              Russellville, Arkansas
            Dates:            October 27-31 and November 10-14,1997
,          inspectors:      M. Runyan, Team Leader
                              P. Goldberg, Reactor inspector
                              R. Bywater, Reactor Inspector
                              G. Kalman, Project Manager
'
          Accompanying      D. Denver, Consu' tant
            Personnel
4
          Approved By:      T. Stetka, Acting Chief Engineering Branch, Division of Reactor Safety
'
          Attachment 1:      Supplemental Information
l          Attachment 2:      List of Documents Reviewed for Unresolved item 50-313/97201-06
!
l
l
l
l
[
,
l
                                          '
i
      9902180126 900206
;      PDR      ADOCK 05000313
i
      G                  PDR
!
 
                                                                              _ _ _ _ _ _ - _ __ - _-_-__
.
.
                                                  -2-
                                                                                                          *
                                        EXECUTIVE SUMMARY
                                  Arkansas Nuclear One, Units 1 and 2
                            NRC Inspection Report 50-313/97-21; 50 368/97 21
  Engineerina
  -
        Within a review of selected documents, the licensee's 10 CFR 50.59 safety evaluation
        program appeared to be functioning satisfactorily, with the exception that some
        documented word searches of the Updated Safety Analysis Report for impact were
        inaccurate. However, some apparent failures to implement the program were identified
        (Sections E2,1 and E8.22).
  .
        The failure to procedurally incorporate a vendor recommended maximum emergency
        feedwater flow limit of 1500 gpm to a single steam generator into plant operating
        procedures was identified as a violation of 10 CFR Part 50, Appendix B, Criterion V
        (Section E8.7).
  *
        The failure to properly verify the piping configuration design inputs to a design calculation
        was identified as the first example of a violation of 10 CFR Patt 50, Appendix B,
        Criterion lli (Sec' ion EP.8).
  *
        Overpressure of the turbine-driven emergency feedwater pump downstream piping
        required further reviews by the licensee. The existing analysis used pump performance
        crit 6 ia that was less than the manufacturer's specified criteria (Section E8.9).
  -
        The failure to properly verify the design adequacy in four ciesign calculations was
        identified as additional examples of a violation of 10 CFR Part 50, Appendix B,
        Criterion 111 (Section E8.11).
  *
        The lack of a review by the licensee of a sample of existing design calcriations to
        determine if the types of past problems identified by the licensee existed within other
        calculations was identified as a weakness (Section E8.11).
    -
          The lack of over current trip testing of Unit 1 molded case circuit breakers required
          further review by the NRC (Section E8.16).
    -
        - Although the NRC identified five discrepancies in the Final Safety Analysis
          Report (FSAR), the licensee's ongoing review of the FSAR was considered sufficient to
          correct these specific examples and to resolve the resulting generic concern. Therefore,
          enforcement discretion was taken in accordance with the NRC Enforcement Policy
          (Section E8.18).
                          -        ___
 
                                                                                  . _ - _ _ -          - _ _ _ _ _ - _ _ _
  .
  9
                                                                  -3-
    .
            The failure to provide measures to ensure the correct translation of seismic design
            requirements to instrument tubing installations and the maintenance of this configuration
            during plant operations in Unit 1 was identified as an example of a violation of 10 CFR
            Part 50, Appendix B, Criterion lli (Section E8.20),                                                            ,
    .
            Three apparent violations were identified associated with activities involving the removal
            of the borated water storage tank vacuum relief valve for maintenance and testing on
            December 4,1996. The apparent violations involved the failure to perform proper safety
            evaluations as described in 10 CFR 50.59, the failure to perform the vacuum relief valve
            testing under the plant conditions as prescribed in the test procedure in accordance with
            10 CFR Part 50, Appendix B, Criterion V, and the failure to utilize the correct design
            control processes (temporary alterations) for the temporary cover configurations placed
            over the valve flange in accordance with 10 CFR Part 50, Appendix B, Criterion 111
            (Section E8.22).
    -
            The failure to properly check the adequacy of an engineering report that failed to account
            for instrument error in a calculation of vortexing in the borated v<ater storage tank was
            identified as an example of a violation of 10 CFR Part 50, Appendix B, Criterion 111
            (Section E8.23).
    Plant Succort
'
    =
            During a plant walkdown, the NRC identified a fire barrier deficiency and the licensee
            took prompt compensatory actions as required (Section F2).
                                                                                                                            1
                                            _        _ - _ _ _ _ _ _ _ .
 
    _ - - _ _ _ _ _ - _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ -                                -_ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _              _ - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _
  .
  .
                                                                                                                                          -4
                                                                                                                                  Report Details
                                                    Summarv of Plant Status
                                                      Units 1 and 2 were operated at 100 percent power during the inspection.
                                                                                                                              ll1. Enaineerina
                                                      E2 Engineering Support of Facilities and Equipment (37001)
                                                      E2.1    10 CFR 503,J Imolementation
                                                          a.  Insoection Scoos (37001)
                                                              The inspectors reviewed the licensee's program to change plant design, revise
                                                              procedures, and conduct tests and experiments without prior NRC approval as described
                                                              under 10 CFR 50.59. The licensee's program was reviewed for compliance with
                                                              regulatory requirements and implementation of the program was evaluated by reviewing
                                                              three 10 CFR 50.59 evaluations. The inspectors reviewed the following documents:
                                                              *
                                                                      ANO-1 10 CFR 50.59 Summary Report for 1996, deted May 22,1997
                                                              -
                                                                      ANO 210 CFR 50.59 Summary Report for 1996, dated June 19,1997
                                                                50.59 Evaluations:
                                                                *      ANO-1, Procedure Change 95-7023, " Reactor Coolant Pump Starting
                                                                      Temperature"
,
                                                              *      ANO-1, Condition Report 1-96-0667, " Reactor Coolant Pump Lift Pump Disabled"
                                                              *-      ANO-2, Design Change Package 94-2007," Replace Charging Pump              .
                                                                      Downstream Check Valves CVC-22A, B, and C"
,                                                              Procedure 1000,131, "10 CFR 50.59 Review Program," Revision 3
l
                                                          b.  Observations and Findings
                                                              -Within the review of the listed documents, the inspectors did not identify any
!-                                                            programmatic deficiencies in the licensee's 10 CFR 50.59 program. It was noted that
                                                              the licensee chose to evaluate the " margin of safety" of proposed changes by evaluating
                                                              the changes only against the basis section of the Techn! cal Specifications. This practice
L                                                              had been previously questioned by the NRC in Inspection Report 50-313:368/97-04 and
!
,
                                                                                                        . - ,                        , , -    -
 
.
.
                                                  ~5-
      found to be in compliance with 10 CFR 50.59 (however, a violation for a failure to
      perform a safety evaluation was issued). No deficiencies in the " margin of safety"
      evaluations were identified by the inspectors during review of the 10 CFR 50.59
      evaluations. Although currently in compliance, the licensee indicated that a more
      encompassing design basis for margin of safety determinations will be implemented in
                                                                                                    *
      the future.
      While review of the?e safety evaluations indicated appropriate programmatic controls,
      some apparent failures to implement the 10 CFR 50.59 program were identified as
      discussed in Section E8.22 of this report.
      The inspectors also identified problems with the licensee's search capability for the
      U) dated Final Safety Analysis Report. For example, Safety Evaluation 96-141 stated,
      "The lube oil pumps are not describad in the Technical Specifications, Safety Analysis
        Report, or operating license." The inspectors determined that this was in error. The lube
        oil pumps were discussed in Section 4.2.2.6 of the Updated Final Safety Analysis Report.
        The inspectors identified similar problems with the safety evaluatici determinations for
        the procedure changes. The inspectors discussed these findings with the licens6e and
        concluded that the automated search methodologies used to search for key words in
        licerwag basis documents were not always effective in finding relevant reference
        matenal and that the techt,ical reviewers were not ensuring that the scope of review was
        adequate. The licensee agreed with these conclusions and informed the inspectors that
        they had also identified this issue in the past year and had revised the safety evaluation
        procedure to address the deficiencies. The inspectors review of Procedure 1000,131
        indicated that improvements had been made in the Lensee's process to ensure that
        adequate automated searches were performed and that they were reviewed by a second
        individual.
  c.  Conclusions
        Within the review of selected documents, the licensee's 10 CFR 50.59 safety evaluation
        program, when implemented, appeared to be functioning satisfactorily, with the
        exception of Updated Final Safety Analysis Report key word searches. However, some
        apparent failures to implement the program were identified as discussed in
        Section E8.22 of this report.
  EB Miscellaneous Engineering issues (92903)
  E8.1  (Ocen) Unresolved item 50-313/9623-01: Consideration of Multiole Hot Short Actuations
        Backaround
        This issue addressed the unplanned energizaiion of motor-operated valves (MOVs)
        during a control room fire. This event, caused by a control cable shorting to an
          energized conductor, is known as a hot short. Under certain configurations, a hot-
          shorted MOV could stroke with the torque or limit switch removed from the control circuit,
          causing the valve to stallinto its open or closed seat. Depending on the capacity of the
                                                                                                  .
            _ _ - . - _ _ _ _ _ _ . - - _ _
 
                                        - - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ -
'
  .
  .
                                                                        3
    motor actuator and the strength of the valve, this action could damage the valve
    sufficiently such that plant operators would not be able to reposition the va!ve using the
    valve's manual handwheel. The licensee's emergency operating procedures addressing
    a control room fire and subsequent evacuation of the control r00m assumed that muual
    control of accessible valves was available The licensee interpreted existing regvations
    tu require postulation of only one hot short during a control room fire, whereas the NRC
    maintained that multiple hot shorts, which is defined as more than one MOV having a hot
    short et the same time, were within the scope of the regulations. Independent from the
    resolution of this matter, at the request of the NRC, the licensee agreed to perform a
    calculation to determine which valves would be potentially susceptible to hot short
    damage. This was the anly aspect of this issue reviewed during the current inspection.
    Insoector Followoo
    The inspectors rev.ewed Engineering Report 97-R-0004-01, "Engineenng Information
    Notice 92-18 Evaluation," Revision 1 PC-1; Calcalation 96-E-0065-01, " Unit 1 Safety
    Related Valve Survivability Evaluation Under Stall Thrust / Torque, Motor Operated
    Valves," Revision 1; and Calculation 96-E-0066-01, " Unit 2 Safety Related Valve
    Survivability Evaluation Under Stall Thrust / Torque, Motor Operated Valves," Revision 0.
    The inspectors reviewed Calculation 96-E-0065-01. The purpose of this calculation was
    to determine operability with reduced margin for a select group of safe shutdown MOVs
    under stall thrust / torque conditions. The evaluations were intended to reflect one-time
    operation under the stated conditions and were not intended for use as design input in
    other analyses or calculations. An important assumption stated that the anelvsis was
    valid only for the time it was performed since actual test data was used in soine
    evaluations. The results showed that 37 of the 66 valves evaluated would be able to be
    manually positioned to their safe position following postulated hot short conditions.
    Twenty-nino valves were susceptible to damage. The inspectors determined that the
      licensee had used a valid methodology for determining the maximum torque and thrust
      that an MOV would experience during a hot short event, with one exception For MOVs
    that did not have previous measurements of stem friction, the licensee used a plant
      averaoe stem factor correlated to a stem friction coefficient vf 0.1342. The use of a
      bounding stem friction coefficient for the untested valve population, approximately 0.08,
      would have resulted in calculated torques and thrusts as much as 50 percent higher than
      those reported in the calculation. However, based on a qualitative judgement by the
      inspectors, application of the lower stem factors would not have significantiv changed the
      number of valves determined as potentially incapable of being manually repositioned.
      Engineering Report 97-R-0004-01 addressed multiple hot shorts, but in situations where
      two or more valves were determined to be unable to be manually repositioned, the report
      stated that it wat not credible that both or all would fail at the same time in the same
      direction. The inspectors noted that this reasoning reiterated the licensee's position that
      multiple hot shorts were not required within the regulations.
        Based on the results of the calculations and engineering report listed above and in light
        of the 29 valves in Unit 1 analyzed to be susceptible to hot shorts, the inspectors
 
        -  -          -    -          - - _ .    - -    - . - -        .    _  --- - - .            - - .
  ':
;    .
,
                                                          -7-
                concluded that come safety functions could be lost if mu:tiple hot shorts occurred in a
                particular manner. This was due to the fact that some of the motor operated valves may
                be subjected to loads during a hot short that would render them incapable of being
                manually stroked to their safe shutdown position. In some cases, as in the Unit 1 high
              - pressure injection system, a total of eight valves would have to hot short in the same
                direction to defeat the safety function of the system. However, the Unit 1 shutdown
                cooling function could be lost with the hot short failure of only two vu.ves, CW1428 and        -
                CV 1429, decay heat cooler outlet valves. Both valves were catulated to be potent! ally
                incapable of being manually repositioned following a hot short event.
;              The above discussion was illustrative of the potential impact of multiple hot short events
                and was not a complete listing of all potentially affected systems. This item will remain
                open pending further reviews by the NRC program office to define the regulatory
                requirements for this matter.
          E8.2  (Closed) Violation 50-313/96027-03: Failure to Notify the NRC Within 1 Hour of
                Declaration of Notification of Unusual Event
L              Backaround
                On October 17,1996, the licensee declared a Notification of Unusual Event in
                accordance with its Emergency Plan for n fire in the Unit i reactor building that lasted
!              more than 10 minutes. The licensee notified the NRC Operations Center of a fire in the
                reactor building within 1 hour of the declaration of the Notification of Unusual Event.
'
                Howover, the licensee did not inform the Operations Center that it had made a
                declaration of one of the Emergency Classes (Notice of Unusual Event) specified in its
                Emergency Plan in accordance with 10 CFR 50.72(a)(1)(l).
                Insoector Followuo
                The licensee determined that the cause of the violation was human error. The shift -
L              engineer who made the initial contact with the NRC Operations Center provided details
l              of the fire but neglected to inform the NRC that a Notification of Unusual Event had been
'
                declared.
                The licensee conducted training with notification communicators about this event and
                NRC notification requirements. Additionally, the licensee reviewed applicable
                procedures and revised Procedure 1903.011, " Emergency Response / Notifications,"
                Revision 22, to require verbatim transmission of iaformation included on
                Form 1903.011Y, " Initial Notification Message," Revision 22, to the NRC Operations
                Center officer followed by transmitting the form to the NRC Operations Center vi-
l.              facsimile. The form explicitly identified the emergency classification for the event. The
!                inspectors verified the licensee's corrective actions had been completed and considered
                these actions adequate to prevent recurrence of this violation.
l
l
l
 
  _  , - -          ..    - . . -_- - - -            . .-            . - -    - - - . _- . -    -- -
    .
    .
*
                                                              -  8
            E8.3 (Closed) Licensee Event Report 50 313/96-009f Fire in the Reactor Buildina Durina
,
                    Heatuo Resulted from a Cracked Weld in an Oil Line on a Reactor Coolant Pumo Motor
i
'
                    Backaround
                    During a Unit i plant heatup on October 17,1996, a fire occurred in insulation around the
                    m ain feedwater nozzle ring on the Train B once through steam generator. A cracked
                    wekiin the discharge line of the Train B reactor coolant pump lube oil lift pump resulted
                    in oil spray being introduced into the insulation. The hot piping caused the oil to ignite. A
                    Notification of Unusual Event was declared, and fire brigade responders extinguished the
                    fire approximately 16 minutes after discovery The NRC conducted a specialinspection
                    to review the circumstances of the fire, continued safety of the plant, and corrective
                    actions taken by the licensee. The results of the inspection are documented in NRC
                    Inspection Report 50-313; -368/96-27. The !!censee initiated Condition Report CR-1-36-
                    0567, conducted an event evaluation, and documemed its evaluation results in a root
                    cause analysis report.
                    The licensee's event evaluation concluded that oil intrusion into the insulation caused a
                    wicking effect that lowered the auto-ignition point of the oil to a lower than expected
                    temperature.
.
                    The NRC conducted a special inspection documented by NRC Inspection
'
                    Report 50-313; -368/96-27, which identified problems with the licensee's implementation
                    of 10 CFR Part 50, Appendix R, fire protection requirements and that the licensee had
                    failed to identify and correct problems that were noted prior to the fire. These were the
                    subject of an NRC Escalated Enforcement Action (EA 96-512). The licensee developed
                    and implemented many corrective actions to correct the deficiencies in these areas.-
                    They are discussed in Sections E8.4 and E8.5 of this report.
                    Insoector Followuo
                    This item is closed based upon the followup and discussion in Sections E8.4 and E6.5 of
                    this report, which address the escalated enforcement items associated with this event.
          - E8.4 (Closed) Enforcement Action 50-313:-368/96512-01013- Inadeauate Lube Oil Collection
                    Systems for Reactor Coolant Pumos
,
                    Backaround
                    During the NRC special inspection following the October 17,1996, Unit 1 reactor building
                    fire (NRC Inspection Report 50-313; -368/96-27), t1e NRC reviewed the tube oil
                    collection systems for all of the reactor coolant purnps in both Units 1 and 2. The
4
                                              y                n  m m.e t    ~-
 
    _____--                                _ - - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ - _ - - _ _
l  .
  .
                                                                                                        .g.
            inspectors determined that the lube oil collection systems for the UnP.1, Train B reactor
            coolant pump and all of the Unit 2 reactor molant pumps had not been designed to
            collect oilleakage from all pressurized and unpressurized locations. Also, the Unit 1
            Trains A C, and D reactor coolant pumps had inadequate leakage collection from
            some unpressurized locations. The deficiencies were determined to be in violation of
              10 CFR Part 50, Appendix R, Section Ill, requirements.
            Immediately following the fire, the licc nsee placed the unit in cold shutdewn to evaluate
            the effects of the fire and water suppression on plant equipment. No significant damage
            occurred other than to some insulation. The damaged insulation was repaired or
            replaced as necessary. Other actions taken prior to restarting the unit included installing
            a new shroud around the Train B reactor coolant pump motor and extending oil collection
              drip trays for all of the reactor coolant pump motor:, to provide coveragv. af potential
              leakuge points. Due to remaining concems regarding the integrity of othar portions of
            the Unit 1, Train B motor lube oil piping, the licensee implemented administrative controls
              to prohibit operation of the associated high pressure lift oil pumps unless a fire watch
              was present. The motor manufacturer provided confirmation that the absence of tube oil
              injection following an inadvertent pump trip would not adversely affect the coastdown
              characteristics of the pump. This was used as supporting information in a 10 CFR 50.59
              safety evaluation to conclude that operation without the lube oil!!ft pump in standby did
              not constitute an unreviewed safety question.
              In Unit 2, the licensee performed tube oil collection sysiem modifications following an
              unplanned reactor shutdown in November 1996. The NRC performed walkdowns of both
'
              units and reviewed the modifications. These activities were documented in NRC
              Inspection Reports 50-313; -368/96-27, 50-313; -368/96-07, and 50-313; -368/96-08.
              The NRC concluded that with the exception of the remote lube oil ti:: aystems for both
              units, the tube oil collection system modifications es'.ablished compliance with 10 CFR
              Part 50, Appendix R, requirements.
              The Unit i remote oil fill lines (Tygon tubing) to the top of each motor were not provided
              with a leakage collection system as required by Appendix R requirements. The licensee
              provided administrative controls to prevent operation of the system until a modification
              and any necessary regulatory exemption was applied for and obtained. The Unit 2
              remote oil system was designed differently, using stainless steel tubing and stainless
                steel flexible hose, but no oil collection system was provided. The licensee described the
                Unit 2 system in detail and proposed compensatory administrative controls for its use in
                an exemption request to the NRC dated December 23,1996. The NRC approved the
                exemption request in a letter dated June 14,1937. The exemption allowed the licensee
                to use the remote oil fill system without a collection system contingent upon the
                licensee's implementation of several compensatory measures prior to each use.
                The licensee responded to the Notice of Violation in a letter to the NRC dated May 9,
                1997. Corrective actions were identified in this document, as well as the licensee event
                report associated with this event, and sevaral condition reports. Some of these were
                completed and reviewed previously as discussed above; others were reviewed during
                this inspection.
 
!
l  .
  ~
l
    .
                                                - 10-
      Insoector Followuo                                                                            0
      The inspectors reviewed documents, procedures, an'.8 interviewed personnel to
      determine the adequacy and completeness of the Sceasee's corrective actions. Also, the
      inspectors contacted the c:gnizant fire protection engineer in the NRC Office of Nuclear
      Reactor Regulation regarding the adequacy of the Unit 2 lube oil collection system.
      Documents reviewed included: portions of the Updated Final Safety Analysis Report;
      Condition Report 196-0507, its associated Root Cause Analysis Report and corrective
      action documents (including 10 CFR 50.59 safety evaluations and screenings);
      Procedure 1102.002, " Plant Startup," Revision 59; Procedure 1103.006, " Reactor
      Coolant Pump Operation," Revision 20; Procedure 1107.001, " Electrical System
      Operations," Revision 50; Procedure 1107.004, " Battery and 125V DC Distiibution,"
      Revision 8; and Procedure 1504.001, " Visual Inspection of the Unit 1 & 2 RCP's Oil            .
      Colloction System," Revision 4.
                                                                                                    {
      Modifications were made to the tube oil collection systems for all reactor coolant
      pumps in both units. These were determined by the NRC to be acceptable for meeting
      10 CFR Part 50, Appendix R, requirements. To ensure the continued operability of the
      systems, the licensee imp!*mented Procedure 1504.001, for inspection of the systems
      immediately prior to refueling outages and prior to startup.
      The licensee placed administrative controis on operation of the Unit 1 Train B reactor
      coolant pump lift oil pumps. This war, done because of uncertainty about oil system
      integrity during lift pump operation on the Jeumont Industrics motor Procedure
      1103.006 was revised to require that the Train B reactor coolant pump not be started or
      stopped during normal operations when the reactor coolant system temperature was
      greater than 350 degrees F. Operation of the lift oil system was al! owed, but only if two
      fire brigade-trained operators were present in the reactor building to identify oil leakage,
      inform the control room, and extinguish any resulting fire.
                                                                                                        '
      The norrr.al design of the oillift system provided an autostart of the lift pump when the
        reactor coolant pump tripped. The administrative controls discussed abova prevented an
        autostart from occurring. Therefore, if a reactor coolant pump trip occurred, the pump
      would coast down without injection of lubrication onto the motor thrust bearing. The
        inspectors reviewed the licensee's 10 CFR 50.59 Safety Evaluation 96-141, " Evaluation
        of Placing RCP #32B HP Lube Oil Pump (P-808 and P-638)in Pull-to-Lock," and safety
        evaluation determinations for associated procedure changes. Supporting documentation
        for the licensee's evaluation included a letter from the vendor documenting that reactor
        coolant pump coastdown time would not be adversely affected for at least 15 seconds
        without oil lift pump operation. The relevant accident analyses for consideration in the
        safety evaluation were the various sizes of loss of coolant flow accidents, and the
        evaluation determined that the lack of lift pump operation had no impact. The inspectors
        concluded that the safety evaluation provided an acceptable basis for concluding that
        reactor coolant pump operation without availability of tube oilinjection aid not constitute
        an unreviewed safety question.
)
4
                                                                                                          1
          _ _ _ _ _ _ _ _
 
!.
l
  .
                                                      -11
            The licensee initiated an evaluation of the tube oil system piping configuration to ensure
            that no additional questionable welds remained. The licensee and the motor supplier
            determined that the lube oil piping sysiem was constructed in accordance with applicable
            commercial standards with the use of qualified welders and adequate quality controls.
            No other similar weld failures were reported in more than 200 other reactor coolant pump
            motors manufactured by the motor suppiier. One difference in the subject configuration
            was the addition of a backup direct current powered lube oillift pump and associated
            piping. To evaluate this further, the licensee developed a plan to perform inservice visual
            inspections of the piping at operating pressure, collect vibration data, and perform data
            analysts. The licensee considered this option for addressing piping concerns preferable
            to others considered, which included piping replacement, weld replacement, and
            volumetric inspections with repair of rejectable welds. After discussing these options
            with the licensee, the inspectors considered the licensee's approach to evaluating the
            acceptability of the lube oil piping configuration to be adequate. Administrative controls
            on lift pump operation would remain in effect during future operating cycles pending
            completion of vibration analyses and continued visual inspections to identify any
            remaining weld failures.
            The inspectors determined that the licensee had completed corrective actions to
            ensure that its reactor coolant pump oil collection systems were in compliance with
            10 CFR Part 50, Appendix R requirements and that proposed corrective actions were
            either completed or in progress with responsive completion dates.
    E8.5 { Closed) Enforcement Actions 50-313/96512-01023 and 50-313/96512-01033: Failure to
            ldentify Sianificant Conditions Adverse to Quality and Take Promot Corrective Action
            Relatina to Oil Accumulation in Pioe Insulation.
            Backcround
'
            The NRC (and the licensee) determined that there were previous opportunities to identify
            that a problem existed with the reactor coolant pump oil lift system pr'ar to the fire event.
            These opportunities were missed, in part, because a condition report was not initiated to
            thoroughly evaluate the extent of the potential problem. Some of the opportunities to
            identify the scope of the problem included: discovery of a crack in the lift oil pump
<
            discharge line, the magnitude of the crack and inadequacy of the original weld, discovery
            of oil on the side of the steam generator during reactor building walkdowns during plant
            heatup, discovery of oil puddled under the reactor coolant pump, and identification of an
            excessive amount of smoke present in the reactor building during heatup.
            To correct these deficiencies in problem identification, communications, and
              understanding of oil-insulation interaction consequences, the licensee revised
              procedures and conducted training.
              10soector Followuo
              The inspectors reviewed documents, procedures, and interviewed personnel to
              determine the adequacy and completeness of the licensee's corrective actions.
                                - _-____
 
0
,
                                                  -12-
        Documents reviewed included: Procedure 1000.104, ' Condition Reporting and                        j
        Corrective Actions," Revision 13; Procedure 1015.036, ' Containment Building Closeout,'
                                                                                                          '
        Revision 5; Procedure 2102.002, ' Plant Heatup," Revision 10; Procedure 1102.002,
        ' Plant Startup,' Revision 61; Procedure 1102.010, 'P! ant Shutoown and Cooldown,"
        Revision 41; Procedure 2102.010, " Plant Cooldown,' Revision 30; Procedure 1203.034,              ,
        ' Smoke, Fire, or Explosion," Revision _10; Procedure 2203.034, " Fire or Explosion,"
        Revision 5; and training outlines and attendance records for Condition Report 196-567.
        The licensee's training appeared to adequately address the circumstances and causes
        of the fire and provided information on cr,uses of insulation fires; uses and limitations of
        material safety data sheets; importance of proper delivery, receipt, and accuracy of
        communications; and lessons learned in response to oil spills and observations of
        smoke.
        The condition reporting procedure _was revised to clearly address identified deficiencies
        in fire protection system components including oilleaks and spills. Items of this type that
        meet the definitions in the procedure now require the initiation of a condition report. The
        other procedures provided requirements to perform inspections for oilleakage and
        excessive sn.oke and provided actions to take in response to identified adverse
        conditions. These actions could include terminating plant heatup, posting fire watch
        personnel with fire fighting equipment, contacting the fire protection engineer, and othar
        appropriate act.ans. The procedures also contained guidance on the effects of oil
        soaked insulation on the auto-ignition temperature of the oil.
        The inspectors concluded that the licensee's corrective actions were adequate to
        improve staff understanding of the mnsequences of oilleaks, and the importance of
        communications when adverse conditions are identified, provide actions to prevent fires
        from occurring, provide additional requirements for inspections, and provide actions to
        take when adverse conditions are identified.
  E8.6 (Closed) Insoection Followuo item 50-313/97201-01: Licensee's Actions to Revise the
        Technical Soecification Bases fo,- the Minimum Water Volume in the Condensate
          Storcae Tank
          3ackaround
          The minimum water level in the Unit 1 safety-related condensate storage tank was based
          on the capability to provide a sufficient supply of water to permit the initiation of the decay
          heat removal system within 4 hours or less of an accident initiation. However, the actual
          period of time required to initiate decay heat amoval may be substantially greater than 4
          hours; The licensee acknowledged that this text was ir, accurate and proposed to revise
          the existing Technical Specification bases to eliminate (probably) reference to the decay
          heat removalinitiation and to state that the minimum condensate storage tank level was
          based on the volume that was required for 30 minutes of emergency feedwater operation
          before manual switchover of the pump suction to the service water system.
 
                                                                                                __
*
.
                                                        13-
      Insoector Followuo
      The licensee stated that they were in the process of neveloping the improved Standard
      Technical Specifications and that the appropriate condensate storage tank bases would
      be included in the initial submittal. The licensee stated that they planned to submit the
      revised Technical Specification design base along with the revised Technical
      Specifications by the end of 1998. The inspectors verified that there was no safety
      concern related to the minimum condensate storage tank water level and that there was
      no need on the part of tne licensee to revise this level. However, a clarification of the
      Technical Specification basis for the level was appropriate.
  E8.7 (Closed) Unresolved item 50-313/97201-02: Licensee's Failure to incoroorste Maximum
      Emergency Feedwater Flow limits into Plant Procedures to Monitor and Preclude
      Exceedina Recommended Limits
        Backaround
      A 1991 Babcock and Wilcox Company engineering report (92-R-1019-01) identified that
      the maximum emergency feedwater flow rate to preclude damage to the Unit 1 steam
        generator tubes was 1500 gpm. The NRC determined that the licensee had not revised
        plant procedures to incorporate this upper flow limit. Specifically, Procedure 1010.002,
        "hansient History / Transient Cycle Logging,"in effect at the time was not revised. The
        NRC reviewed operator logs and identified two occurrences where the emergency
        feedwater flow exceeded the 1500 gpm limit.
        Insoector Followuo
        The inspectors reviewed Condition Report CR-1-97-0081, dated March 27,1997. which
        the licensee generated to resolve the maximum emergency feedwater flow issue. A
        licensee contractor prepared an analysis which determined that the maximum feedwater
        flow rate to prevent steam generator tube damage was 2214 gpm. The inspectors
        reviewed the calculation and determined that the higher flow limit was adequately
        justified.
        The licensee stated that the upper flow limit was not included in operating procedures
        because high emergency feedwater flows would cause a cooldown, during which
        operators would take procedural actions to correct the high flow rate problem. However,
        the inspectors determined that the licensee had not previously evaluated the effects of
        the high flow on the steam generator tubes for the periods of time before operator actions
        would restore an acceptable flow rate.
          The inspectors reviewed Procedure 1010.010, " Unit One Transient Cycle Logging and
          Reporting," Revision 1, which was issued to provide guidance for determining excessive
          emergency feedwater flow and provide specifications for initiation of a condition report.
          This procedure superseded Procedure 1010.002. The inspectors determined that the
          Procedure 1010.010 required an engineering evaluation if the upper limit of the          '
          emergency feedwater flow was exceeded.
        .
                    ..  .
                                        _ _ _ _ _ - _ _
 
                                          -                - _ _ _ - _ - _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ ___
*
.
                                                  -14-
        During the inspection, the inspectors reviewed in detail Framatome Technologies final
        draft calculation 321229968-00 and Framatome Technologies Calculation 32-5000450-
        00,"ANO Auxiliary Feedwater Capacity - Phase 2." The purpose of these calculations
        was to determine the limit for emergency feedwater flow to preclude unacceptable steam
        generator tube damage or wear. The results showed that a flow rate of 2214 gpm
        resulted in less turbulence induced vibration than at full power conditions. As part of this
        review, a conference call was held with Framatome Technologies and licensee
        personnel during which they responded to questions from tM inspectors. Based on their
        review and the information presented during the conference call, the inspectors
        determined that the analysis provided in these calculations demonstrated that
        emergency feedwater .peration at flow rates up to 2214 gpm for limited periods of time
        would have no significant effect on steam generator performance. The inspectors
        verified that design of the emergency feedwater system would not resun la flow rates in
        excess of this amount.
        The inspectors determined that the licensee failed to procedurally incorporate a vendor
        recommended maximum emergency feedwater flow limit of 1500 gpm to a single steam
        generator. As a result, flow rates in excess of this amount were permitted to occur for
        short periods of time. Later, in response to the NRC's questions, these excess flow rates
        were shown to be acceptable.
        10 CFR Part 50, Appendix B, Criterion V, requires that activities affecting quality be
        prescribed by and performed in accorJance with instructions, procedures, or drawings.
        The licensee's failure to incorporate vendor recommended flow rate limits into
        procedures was identified as a violation of 10 CFR Part 50, Appendix B, Criterion V
        (50-313/9721-01),
        Conclusions
        The licensee failed to incorporate a vendor specified emergency feedwater flow limit into
        plant procedures, resulting in the failure to evalus'e the effects of exceeding the vendor
        recommended flow limit during two previous periw of plant operation. Concerns
        related to possible damage to the steam generator tunes were adequately resolved by a
        subsequent arialysis demonstrating the acceptability of higher flow limits.
  E8.8 (Closed) Unresolved item 50-313/97201-03: EFW Pioina Confiauration aifferences
        Backaround
          in review of Calculation 82-D-2086-02, which evaluated net positive suction head
        requirements for the motor-driven and turbine-driven emergency feedwater pumps, the
          NRC identified that the suction piping configuration used in the calculation to determine
          pressure drops was not consistent with the piping configuration identified in the piping
          isometric drawings. The pressure drops in the piping were negligible and the effect on
          the results of the calculation due to the differences was small. This item was opened
          pending action to revise the calculation and take any appropriate generic actions.
                                                                                                                                    _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _
 
                                                                                                          '<
  .
I
  ..
                                                        15 -
            Inspector Followup
            The licensee initiated Action item Requests L97-0198 and L97-0285 to revise
            Calculation 82-D-2086-02 to address the as-built configuration. The inspectors verified
            that these action items had been assigned to the appropriate engineering organization
            for completion. The licensee established a Uue date for completion of the calculation
            revision of March 1,1998. Based on the minhal impact on the results of the calculation -
            expected by incorporating the as-built piping configuration differences.in the calculation,
            the inspectors considered the licensee's schedule for completion adequate. The broader
                                                                                                            3
            issue of identified deficiencies in the licensee's maintenance of calculations is addressed
            in the inspectors' followup of Unresolved item 50 313/97201-06 (Section E8.11).-
              10 CFR Part 50, Appendix B, Criterion Ill, " Design Control," states, in part, that design
            control measurss, such as design reviews, shall provide for verifying or checking the
            adequacy of design. The licensee's failure to properly verify that the design inputs for
            Calculation 82 D-2086-02 were consistent with the installed piping configuration was
            considered as the first example of a violation of 10 CFR Part 50, Criterion lli (50-
            313/9721-02).
            Conclusion
            The licensee's failure to properly verify the design inputs to Calcu;ation 82-D-2086-02    ^i
          - was identified as a violation of 10 CFR Part 50, Appendix B, Criterion Ill.
    E8.g (Ocen) Unresolved item 50-313/97201-04f 1: *n=*a Pinino Pr===nre.ggi .
              Temperature Specifications
                                                                                                            ,
              Background
              During review of Calculation 88-E-0100-16, which evaluated pressure and temperature
          ; limitations of emergency feedwater system piping, the inspectors identified several
              discrepancies. For example, in the determination of maximum emergency feedwater
              discharge pressure limitations, the calculation used a pump suction alignment from the
              condensate storage tank instead of the service water system as input. The use of the
              service water system as a source would result in a higher emergency feedwater system
              discharge pressure than if suction were taken from the condensate storage tank.-
              The licensee initiated Engineering Request 973848 for the design engineering staff to
              review and revise Calculation 88-E-0100-16. The rrque'st was assioned a completion
              date of December 31,1997.'
            - _ _ _ _ - _ _ _.                                                                                l
 
                                                                                              ___
  .
  .
i
                                                13
      Insoector Followup
      The inspectors reviewed the licensee's followup action item response to the original
      inspection concern. The response identified that the design pressure of the emergency
      feedwater system discharge piping was 1850 psig. At rated speed of the turbine-driven
      emergency feedwater pump (3795 rpm) and with the suction aligned to the condensate
      storage tank, the calculated discharge pressure at shuto# head was 1732 psig. When
      the system was aligned to the service water system, the calculated discharge pressure at
      shutoff head was 1842 psig, resulting in a margin from the design pressure of only 8 psi.
      However, the ca!culation did not account for speed controller tolerances, nor did the
      calculation assume a failure of the speed controller. If a failure of the speed controller
      occurred, procedural guidance was provided for an operator to take manual control of the
      turbine-driven emergency feedwater pump. This procedure instructed the oper; tor to not
      exceed a pump speed of 3900 rpm to avoid overpressurization of the discharge piping.
      The licensee determined that at a pump speed of 3900 rpm, the resulting maximum
      discharge pressure was 1844 psig when suction was aligned to the condensate storage
      tank and was 1932 psig when suction was aligned to the service water system.
      Therefore, manual operation of the turbine-driven emergency feedwater pump at the
      maximum procedurally-allowed speed would result in a maximum discharge pressure            >
      that exceeded the design pressure of the piping.
      The licensee's response stated that the utilization of the 1932 psig maximum ressure as
      a basis for discharge piping design pressure was not considered because manual pumr>
      control while aligned to the service water source would require an equipment failure in an
      already infrequent emergency plant condition.
      The inspectors had a concern with this position. The condensate storage tank was
      designed to provide a tomado-protected 30-minute supply of water to the emergency
      feedwater system. The 30 minutes allowed the operations staff time to transfer the
      emergency feedwater supply to the service water system. However, if the turbine-driven
      speed control was out of tolerance or failed and the pump was operated manually per
      procedure, the maximum discharge pressure could exceed the design pressure of the
      turbine-driven pump discharge piping.
      The licensee's response also addressed historical mp performance during testing at a
      pump speed of 3920 rpm. Analysis of the test results in Calculation 80-D-10838-102A
      concluded that the discharge pressure would not have exceeded the 1850 psig design
        pressure, even if suction were aligned to the service water system at maximum pressure,
        because the pump was not operating at full potential. However, the pump had sufficient
        capacity to meet minimum specifications and, therefore, was operable.
        The inspectors discussed these issues further with the licensee and were informed that
        the original calculation would be reviewed to determine the extent that higher-than
        nominal pump speeds need to be considered, both from a speed controller tolerance
        perspective and a manual operation perspective. Additionally, since the pump appeared
        to be under performing with respect to its certified pump curve, using the pump curve for
    ,                                                        _ _ _ _ ___
                                                                      _ _ _
 
  .
f
  .
                                                  -17
          piping design pressure determination may be overly conservative. The inspectors were
          unable during this inspection to evaluate this issue further to determine whether the
          pump was performing in an acceptable manner with respect to the pump curve.
          However, the inspectors noted that the pump was meeting its Technical Specification
          limits. The licensee'e due date for completion of this review and revision to the
          calculation was December 31,1997. During the exit meeting conducted January 6,
          1998, the licensee indicated that the due date for this effort had been extended to
          January 15,1998.
          The inspectors considered this item open pending further NRC review of the licensee's
          ongoing evaluation and review of the performance of the turbine-driven emergency
          feedwater pump.
    E8.10 (C10MLUDIggived item 50-313/97201-05: Evaluation of EFW Pumo Room
          Environmerd
          Backaround
          The licensee identified an environmental qualification problem in the Unit 1 EFW pump
          room, which houses the turbine-driven and motor-driven EFW pumps, Steam traps
          located in the steam supply lines to the turoine-driven pump, which were not designed for
          seismic loads, were vented to the atmosphere of the room. A failure of one these traps
            (two in the high pressure piping and two in the low pressure piping) would cause a
            continuous b!owdown of hot steam in the room, raising the ambient temperature and
            humidity, and possibly challenging the operability of environmentally-sensttive equipment
            in the room. The licensee took interim measures to leave one steam trap isolated and to
            permanently open a door to the room. The licensee then calculated the impact of a
            steam trap failure under this configuration assuming that operators could isolat; the
            steam blowdown within 1 hour. The calculation (87-E-0026-09, Revision 0) co%ded
            that temperature in the room wouid peak at 149.5 degrees F for a brief time, but that the
c          steady state temperature would be 134 degrees F. Since the limiting long-term
            temperature for the room was 148 degrees F, the licensee concluded that the EFW
            system remained operable. The inspectors agreed with the licensee that humidity
            resulting from the event would not adversely affect equipment critical to the function of
            the EFW system.
            This item was opened to track licensee efforts to make modifications to resolve this issue
            permanently and to make necessary revisions to related design basis documents. The
            licensee also indicated that an assessment of past operability of the EFW room would be
            performed.
      --
 
    .
!  *
                                                -18-
      Insoector Followuo
      in review of this finding, the licensee determined that the original design of the EFW
      steam traps was inadequate for both Units 1 and 2. The safety implications for Unit 2
      were mitigated because the steam traps exhausted outside the EFW room. The licensee
      decided to modify EFW steam traps on both units: Unit 1 during Refueling Outage 1R14
      (Spring 1998) and Unit 2 during Refueling Outage 2R13 (first quarter 1999).
      The licensee performed a past operabmty assessment and concluded that the EFW
      system was operable in the past considering the room door closed, all traps in operation,
      and a 1 hour operator response to isolate the failed trap.
                                                                                                        ,
      The inspectors reviewed Root Cause Aralysis Report CR C-97-0048, " Unqualified
      Steam Trap Lines in the EFW Turbines' Steam Supply Lines." In this document, the
      licensee determined that the architect / engineer (A/E) for the design of the plant assumed
      that failure of the steam trap lines would not reduce the functional capability of the EFW
      systems. However, the A/E had evidently focused on sufficiency of the resulting supply
      of steam to the turbine and not on the environmental consequences of the failure.
      The inspectors questioned the assumption that operator action to isolate steam would
      occur within 1 hour of a steam trap failure, an assumption essential to the past operability
      status of the system. The licensee stated that an operator surveillance of the room
      (checking lube oil flows) occurs by procedure soon after each automatic start of the EFW
      system, which would presumably result in identification of the steam trap failure.
      However, since no time parameter was specified for this surveillance, it could be                  '
      indefinitely delayed if other complications were to occur. The inspectors asked about the
      effect of a response if the failure occurred after this surveillance effort. In this case, since
      no remote indication of temperature in the room is available, it did not seem reasonable
      to assume that steam isolation within one hour would occur. The licensee stated that the
      fire detection system would probably alarm given the amount of steam that would exist in
      the room. On one previous occasion, in 1992 (CR 1-92 0361), the deluge valve tripped
      open due to an excess amount of steam from the steam trap drain lines. However, on
      further discussion with the fire control engineer, the inspectors learned that the fire
      detection device in the EFW room is not sensitive to steam and would only possibly
      alarm in the event of a condensation buildup on the device. The inspectors determined
e
      that the fire detectors were not a reliable indication of a steam leak.
r
      The evaluation cf past operability indicated that, with the room door closed, the room
      temperature would reach 164 degrees F 1 hour after the steam trap failed, it seemed
        questionable whether an ooerator could enter an anwonment this harsh to pen ~orm the
        required valve isolation. In response to the inspectors' concern, the licensee generated
        a new action item (Item Number 9) for CR C-97-0048 to address the issue of accessibility
        as it pertained to the past operability determination. The licensee recalculated the room
        temperature profile using more realistic assumptions, including condensing heat transfer,
        and found that the room condition at 1 hour would be 133 degrees F at a relative
        humidity of 57 percent. This corresponded to a wet bulb globe temperature (WBGT) of
        121.5 degrees F. At this WBGT, the licensee, based on US Navy
  i
                                                                                                          1
                      ~                                          .    _ _ _ _ - _ _ _ _ - _ _ _ _ .
 
                                                                                                _ _ _ _ _ _ _ _ - _ _ _ _ _ _
    ,
    .
                                                19-
      Document OPNAVINST 5100.19C, Changa 1, dated May 15,1990, determined that
      strenuous work at a maximum duration of 30 minutes could occur in this environment.
      The amount of time needed to isolate a failed steam trap would be only several minutes.
      The inspectors noted that the shapa of the temperature profile suggested that the
      temperature would peak out at something less than 140 degrees F at a relative humidity
      of less than 60 percent. This suggested that the room would be fit for the necessary
      operntor's actions to take olace and that equipment operability would not be threatened.
      Dunng the inspection, the inspectors reviewed Calculation 87 E-0026-09, ''EFW Pump
      Ruom Tempaniture Profiles." This calculation provided an analysis of the heat up of the
      EFW puu : u sum!ng various failed op9n steam traps in addition to the normal thermal
      load proviued by the EFW pumps and other equipment. The analysis was carried out
      with an ANO developad and maintained software package,"RHUR," which calculates
      roora heat up from art >ltrary sources. RHUR was p ogrammed in a ' macro' language
      executed in a spreadsheet program, SYMPHONY. It was documented as a software
      package and was controlled and maintained under the software control program. The
      RHUR model devebped for thlS analysis was constructed by substantially modifying the
      " macro" statements that make up the RHUR software package.
'
      The inspector reviewed the analysis provided in the calculation and determ!ned that the
      results of the four cases presented seemed reasonable and conservative for the given
      configurations, in response to the NRC concern, the licensee provided additional
      supporting analysis in the form of an alternate calculation using the GOTHIC software
      program that substantially verified the results presented in Calculation 87-E 0026-09.                                  (
      The inspectors considered that the licensee had adequately established thJ past
      operability of the EFW room equipment. Based on the less severe conditions of having
      the room door removed, the insoectors also considered this in9rmation to support the
      licensee'e assessment of current operability However, the inspectors identified a
      weakness in the licensee's original response to this issue in that it frJted to document
      consideration of the ability of an operator to perform an assumed operation in a harsh
      environment. A tecond weakness was the lack of verification of the software model
      used to calculate the postulated EFW room thermal transient. Although considered good
      enginee% practice, licensee procedt,res did not specifically address this validation.
      The licensee was in the process of developing a modification for both units to mitigate
      the effects of pressure boundary failures and the blowdown of live steam from steam
      traps in the EFW rooms, while preserving adequate condensato removal. Through
      discussions, the inspectors learned that the modification w jd reroute steam trap piping
      to exhaust outside the EFW room and upgrade the re          a be safety related and
        seismically qualified. The inspectors determinM 'N          modification would resolvo the
        hardware concerns associated with this issue.
  4
        .__ _ _ _ _ _ _ - _ _ _ _ _
 
  0
  .
                                                      20-
    E8.11 (Cloand) Unresolved item 50-313/9720106: Desion Control Weakness
          Bsckaround
          This issue involved several calculation deficiencies. The examples included calculations
          containing plant configuration discrepancies as well as calcult.tions that required
          enhancement, updating, or to be superseded. The specific examples were as follows:
          *        Calculation 88 E-0086 01,"lE Bulletin 88 04 Review for P7A and P7B Minimum
                    Flow Evaluation," did not adequately document the effect of two parallel EFW
                    pumps operating on minimum recirculation.
          *        Calculation 92 E 0077-04, " Unit 1 EFW System Pump Performance
                    Requirements," used an incorrect level in tank T-418 for EFW actuation due to a
                    loss of offsite power following a tornado.
          *
                    Calculation 92 E 0021-01," Emergency Nty Cycle and Battery Sizing
                    Calculation," was not revised to reflect plant modifications that resulted in
                    changes in the continuous and locked rotor current for EFW Valves CV 2620 and
                    CV 2627, and a modification that resulted in an additional load due to the reactor
                    building spray puinps close and trip circuits.
          *        Calculation 80-D-1083A42, "EFIC DC Valve Torque Calculation Under Reduced
                    Voltage Condition," was not superseded as required.
          The actions implemented or planned by the licensee included those to correct the
          specific examples and to improve design control programs to prevent recurrence.
          Insoector Followuo
          The inspectors reviewed Licensee information Requests (LIRs) L97 0289 and 0290 as
          well as Condition Reports CR C-97-0058 and CR-C 97-0059.
'
            LIR L97 289 addressed the failure to updato Battery Loading Calculation 92 E-0021-01,
            following iniplementation of Design Change Packages (DCPs) 92-1003 and 93-008. The
            licensees's response to the inspection report (letter 1CAN099703, dated September 22,
            1997), indicated that this calculation would be superseded before January 15,1998.
            F sever, at the time of this inspection, this calculation had already been updated and
              (as reviewed by the inspectors and found acceptable, in discussions regarding this
            inconsistency, the licensee explained that the oversight resulted from the existence of a
            large backlog of dats that had not been entered into the Design Configuration
            Information Management System (DCIMS). This condition resulted in a failure to identify
            affected calculations when engineers accessed the DCIMS system to perform searches
 
                                _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ . _ _            _ _ - _ - _ - _ _ _ _ - _ _ _ _ _ __
  .
  .
                                                                                              21-
    based on key words related to a particular modification or calculation revision. The
    licensee indicated that this backlog had been eliminated and that current practice would
    preclude new backlog formation. The inspectors confirmed that no backlog existed and
    that the DCIMS was up to-date at the time of this inspection. In additia, the inspectors
    reviewed Memorandum ANO 97 00225 issued to the engineering staff that reinforced the
    existing procedures and guidance related to calculation updates for load changes.
    The second issue within LIR L97 289 dealt with Calculation 80-D 1083A 02, *EFIC DC
    Valve Torque Calculation Under Reduced Voltage Condition" which should have been
    identified as superseded. The licensees's response to the inspection report indicated
    that this calculation will be superseded before January 15,1998. Discussions with
    licensee personnel and review of the applicable procedure, OP 5010-015, " Engineering
    Calculations," indicated that clear direction existed to ensure that superseded
    calculations are identified, The cause of the specific instance was attributed to a backlog
    of data to be entered in the primary tracking tool, DCIMS, that had previously existed. As
    discussed above, the inspectors confirmed that no backlog existed at this time of this
    inspection.
    LIR L9/ 290 addressed Calculations 88 E-0086-01 and 92 E-0077-04, both of which
    needed enhancement for various reasons. The licensees's response to the inspection
    ecport indicated that these calculations would be revised before March 1,1998.
    10 CFR Part 50, Criterion lil, * Design Control," states that measures shall be established
    to ensure that applicable requirements and the design basis are correctly translated into
    specifications, drawings, procedures, and instructions.
    The licensee's failure to properly account for design information in the
    Calculations 88 E-0086 01,92 E 0077-04,92 E-002101, and 80-D-1083A-02 was
    considered as additional examples of a violation of 10 CFR Part 50, Appendix B,
    Criterion 111 (50-313/9721.~1).
    The inspectors review of Condition Report CR C 97-0058 indicated that the condition
    report dealt with prioritization and completion of the Upper Level Documents (ULD) and
    ULD-related discrepancies. The actions taken as a result of the condition report included
;  determining completion priority and establishing and communicating to the engineering
'  organization the philosophy for use of the ULDs. The inspector reviewed the actions
    taken on these issues and confirmed that they were appropriate.
    The inspectors review of Condition Report CR-C 97 0059 !ndicated that this condition
    report dealt with completion of the Design Configuration Documentation (DCD) Project
I  and resolution of discrepancies identified during this project. The project was completed
l  in December 1994; however, approximately 100 discrepancies remained unresolved.
    The discrepancies were originally screened for significance and operability, but this CR
    recognized that recently there was greater interest in and higher standards being applied
    to design configuration issues, in addition, several other recent CRs have been initiated
    to reexamine previously closed discrepancies that were found to have inadequate
    resolution by current expectations. The CR-C 97-0059 evaluation established an action
!
                _  _                                                                            _____,
 
  .
  *
                                                                                                            :
                                                    22
        to priontize review of the remaining open discrepancies. This action was completed. In
        addition, previously closed discrepancies have been reviewed to ensure that they are
        adequate. This completed action led to further actions to evaluate 44 previously closed            l
        items. These subsequent actions were not available for review at the time of this                  )
        inspection.                                                                                        '
        In addition to the specific observations and related corrective actions reviewed above,
        the inspectors reviewed other condition reports, procedures, guidelines, and
        programmatic evaluations that impact the control of calculations. These are listed as
        Attachment 2 to this report. Several recent calculations and design change packages
        were reviewed to assess the results of ongoing improvement efforts on current
        calculation practices. These actions addressed broader issues associated with
        calculation processes and control.
        The licensee initially identified a concem regarding the adequacy of their calculation
        processes in Condition Report CR C 96-0060 initiated in March 1996. The most
        significant outgrowth of efforts to resolve this concern led to the formation of a Quality
        Action Team (QAT) to study calculation process issues. The team's final report,
        published in September 199d, identified a large number of concerns (56) organized into            ,
        the following broad categories:                                                                    l
        *        Calculation in processing time was too long creating backlogs and delays for
                  engineering personnel.
        *        The DCIMS data base contained inaccurate, incomplete, not up-to-date or
                  erroneous information.
        *        The calculation preparation, revision, and approval process requirements were
                  not clearly and consistently defined, documented, or understood by engineering
                  personnel.
t
        *        Retrieval of existing calculations was sometimes difficult.
!        +        Inconsistent interpretation of standards for legibility of calculation documents
l                resulted in delays for processing calculations through quality assurance records
l                storage.
l
        *        Data may be buried within a calculation with its relationship to other processes
                  not defined,
        *        Program engineers were not alwa ys aware when other engineers were revising
,
l                calculations that impact their program.
;                                                                                                          -
        In reviewing the QAT action plan, the intpectors determined that the proposed corrective
        actions were appropriate and that they r hould provide significant calculation process
        improvements when fully implemented in addition, the interim compensatory actions
    . .-              -          - - _ - . - .          - - . - - - . -                ,          - - . .
 
                          . _ _ -
                                    _ _ . _ . . _ _                        _ _ _      _      _
.
.
                                            23-
  that were implemented in the short term appeared to be of sufficient quality to reduce the
  occurrence of calculation deficiencies.
  In addition to reviewing the licensee's action plan, the inspectors reviewed a sample of
  approximately 30 calculations generally chosen at random. These are listed in
  Attachment 2. The inspectors found that the calculations were thorough, generally clear,
  and well documented. Assumptions and other data sources were clearly identified e7d
  referenced. The few exceptions were found in some older calculations performed during
  original plant design and construction, approximately 20 years ago.
  The inspectors focused on the licensee's process for assigning status to calculations.
  This included the use of new, pending, as installed, amending, and superseded status
  levels. Although the inspectors found the use of the amending status somewhat
  confusing and cumbersome, no erroneous cross references were found in the sample
  reviewed. For example, there are m limits to the number of calculations that can amend
  a given calculation. Nor is there a time limit beyond which amending calculations would
  require incorporation. In practice, however, the only calculations found with a large
  number of amending calculations were the electricalloading calculations. In this case,
  the licensee's practice was to assign a coordinator or owner for these calculations. The
  coordinator was responsible for incorporating all amending calculations once each cycle.
  The incorporated calculations were then assigned a status of superseded. The
  inspectors reviewed and found this to be correctly performed for a recently issued
  revision to Calculation 92 E 0021-01. " Emergency Duty Cycle and Battery Sizing
  Calculations." In addition, as mentioned above, the licensee instituted a Calculation
  Revision Notice (CRN) process that allows minor changes to calculations to be issued
  and more easily tracked. This process was designed to reduce the number of amending
  calculations to no more than nine in practice, based on a sample review, the inspectors
  found no examples with more than two CRNs.
  In spite of an apparently comprehensive effort to improve the calculation process, the
  inspectors recognized a potential inconsistency in the way the licensee handled the
  issue. The licensee's quality assurance team identified a concern related to the
  preexistent backt0g in the DCIMS data base that had apparently been the cause of
  several NRC-identified discrepancies. In addition, other persistent problems within the
  calculation process were identified by the team. However, the licensee did not perform a
  sample review of existing calculations to determine whether the DCIMS problem, in
  addition to the other identified problems listed above, had created a situation where a
  large number of calculations currently in effect may contain technical errors as a result of
  these problems. The inspectors considered the lack of review of a sample of
  calculations to represent a weakness in the licensee's overall response to the issue.
  The inspectors reviewed the capability and use of the DCIMS database. It was a very
  useful and powerful tool for searching for needed information concerning calculations,
  evaluations, and reports.
            _    _
 
  ,.  .                _            _                                    ._      .__
    ,
;
L
    .
                                                          24
                Conclusips
                A violation of 10 CFR Part 50, Appendix B, Criteilon lil, was identified conceming
                discrepancies identified with four licensee calculations. The lack of a review of existing
                calculations to determine if past problems identified by the licensee affected other
                calculations of record was identified as a weakness.
        E8.12 (CJosed) Insoection Followeo item 50-382/9720107: Licensee's Actions for Revising
                the Modification Procedure to Address Field Routed Installations
                Background
                The NRC identified that the layout configuration of certain installed conduits was different
                from that shown on the conduit and cable tray layout drawings. The NRC also identified
                that there were no drawings or records of the seismic support details for the installed
                conduit and cable tray supports. The licensee stated that this was due to conduits being
                field routed.
                The NRC noted that conduits attached to the wall of the emergency feedwater pump
                room contained redundant cables supported on the same unistrut support. The licensee
                stated that the supports were designed to withstand seismic design loads and were
                passive. In addition, the licensee stated that redundant trains could be supported from a
                common support from a seismic standpoint provided Appendix R and other criteria were
                addressed.
                The licensee's modification procedure discussed a constructability walkdown involving
                the modification engineer, modification supervisor, craft supervisor, and quality engineer,
                During discussions, the licensee stated that they would document the decisions arrived
                at during the walkdown by including these in the form of work steps in the controlled work
                package. The licensee stated that this would include conduit routing and seismic support
                details that would be documented as sign-off steps. The need to revise the modification
                procedure to address field routed installations was identified as Inspection Followup
                Item 50 313/9720107.
                Insoector Followuo
                The inspectors reviewed the licensee's response to the inspection followup item
                documented in Letter 1CAN099703, dated September 22,1997 (response letter to NRC
                Inspection Report 50-313/97-201). The inspectors also interviewed licensee personnel.
                The inspectors requested that the licensee supply details concerning how the Appendix
                R requirements were met for the redundant cables supported on the same unistrut in the
                emergency feedwater pump room.
                The inspectors rewewed draft Calculation 85-E-0086-1, " Safe Shutdown Capability
                Assessment," Revision 3, and found that the turbine driven emergency feedwater pump
                cable and the motor driven emergency feedwater pump cable had a 1 hour fire barrier
                installed. In addition, the inspectors found that an NRC exemption was granted for
 
                                                                      .-            - . - - .
  .
  .
                                                    25-
          configurations having less than 20 feet of separation. The inspectors reviewed licensee
          Letters 1CAN068706, dated June 24,1987, and 1CAN048708, dated April 22,1987,
          which requested the exemption for the cables. The exemption, granted in an NRC letter
          dated October 26,1988, contained a stipulation that a 1 hour fire wrap was necessary in
          addition to a fire suppression system. During a walkdown, the inspectors determine)
          that there was a fire suppression system in the pump room and that the cable was
          wrapped with fire wrap.
          The inspectors reviewed the revised Procedure 6030.005, " Control of Modification
          Work," Revision 3, Change PC-1. The inspectors noted that the procedure was revised
          to include instructions for the development of a single line drawing depleting the types of
          supports used, the support spacing, and the conduit layout. The procedure required that
          the draw!ag be included with the controlled work package.
    E8.13 Ogied) Insoection Followuo item 50 313/97201-08: Licentee's Actions to Perform a
          Revised Cable Pullina Calculation Usino Additional Desian Information Obtained from
          the Cable Vendor
          flitCMIQMDd
          The NRC identified that Procedure / Work Plan 6030.112, " Installation of Raceway
          Systems," used for the installation of raceways, included a table of conduit bend radil for
          manufacturers' standard bends but not for long radius bends. The NRC asked the
          licensee which cables required long radius bends as a result of the minimum bending
          radius and maximum sidewall pressure restrictions during pulling. The licensee provided
          a calculation that compared the cable minimum bending radil to the bend radil of the
          conduit that was appropriate for a single cable. The NRC questioned the values for the
          redil on the inside surface of the conduit bends as well as the accuracy of the cable
          diameters and maximum cable bend radii. The licensee stated that they would obtain
          updated cable vendor data to verify the conduit bend dimensions and would revise the
          calculation accordingly. The NRC reviewed the preliminary calculation and noted that a
          few largo diameter cables would require long radius bends. This item was opened
          pending licensee actions to obtain additional design information from the cable vendor in
          order to perform a revised cable pulling calculation,
          insoector Followuo
          The inspectors reviewed the licensee's response to the inspection followup item in
          Letter 1CAN099703, dated September 22,1997, and interviewed licensee personnel.
          The inspectors also requested a listing of condition reports involving damage to cables
          that resulted from cable pulling; however, no such conditions were found.
-                                                                          -
 
      . - . - - - . -        . - .- .- - - - - . -                                            _ -.- --. - . - -                  - - - -
    .
                                                                                                                                            !
                                                                                                                                            '
;  .
                                                                                  26
                            The licensee stated that updated cable information would be obtained from cable                                '
                            vendors for approximately 10 percent of the cable codes listed in the cable minimum
                            bend radius review table. The licensee expected to receive this information by mid.
                            January,1998. The licensee also stated that the updated cable information obtained
                            would be used to revise the calculation for each of the applicable cable codes. The                            e
                            licens*a stated that the cable calculations would be revised by March 1998.
                            The inspectors determined that the licensee's corrective actions were adequate for the
                            current closure of this item based on the fact that the condition report search had not            _
                            found any cables damaged by cable pulling and that the actions necessary to revise the
                            cable code calculations were being tracked and had acceptable completion dates.
                      E8.14 (Closed) Insoection Followun item 50-313/97201 11: Verification of Calculation Changes
                            Associated with DC Batteries
                            Backaround
                            The NRC identified that Calculation 92 E 0021-04," Battery DOS and 007 Recharge
                            Time," Revision 0, was not revised to show the reduced charging time resulting from a
                            change out of the Unit 1200 amp battery chargers with new 400 amp chargers. An
                            amending calculation,93 D 1010-04, " Recharge Time for D06 and D07 with Changes
                            per DCP 931010," Revision 0, calculated the revised charging time. This item was
                            opened pending incorporation of the amending calculation information into the parent
                            calculation,
                            insoector Followuo
                            The inspectors determined that this condition did not represent an actual prob'sm
                            because the battery recharge times were not required by license conditions and did not
                            affect battery capacity. In addition, as discussed in Section E8.11 of this report, thers
                            were no licensee procedures requiring incorporation of amending calculations into the
                            parent calculation within a specific time period. Based on discussions with the licensee,
                            the inspectors determined that information provided in amending calculations, but
                            missing from the parent calculation, should not result in a quality concern because
                            annotations provided in the parent calculation positively identified the existence of the
                            amending calculations.
                            The inspectors verified that amending Calculation 93 D 1010-04 had been incorporated
                            into Calculation 92 E 002104. The inspectors observed that the revised recharge times
                            were based on the updated 400 amp recharge capacity.
I '
d
                                          m_ _ - - _ _ . _ . . , ..,,_,_--m =--. - . , _ , _ ,            -      ---,--r-- -- - m.        -
 
                                                      -__.                  .__      . ..      .  ._      _
.
.
                                                          27
      E8.15 (Closed) Insoection Followuo item 50 313/97201 12: Review of Current Desion BM!s for
              Bvoassina Emergency Diesel Generator (EDG) Protective Trio
              Background
              For emergency starts of the Unit 1 EDGs, the licensee did not bypass those protective
              functions delineated by Regulatory Guide 1.9, " Selection, Design, and Qualification of
              Diesel-Generator Units Used as Standby Onsite Electrical Power Systems at Nuclear
              Power Plants," to be bypassed under accident conditions. This was because the
              licensee was committed to Safety Guide 9, " Selection of Diesel Generator Set Capacity
              for Standby Power Supplies," which does not specify protective functions to be
              bypassed. The concern was that the licensee's setup could result in a higher probability
              of EDG loss during accident conditions. This item was left open pending review by the
              NRC program office,
              insoector Fougsp
              Based on discussions with the NRC program office, the inspectors determined that the
              licensee's adherence to Regulatory Guide 1.9 was satisfactory.
      E8.16 (Ooen) U.Q[esolved item 50-313/97201 14: Lack of Testina Unit 1 Molded Case Circuit
              Breakers
              Background
              The Updated Final Safety Analysis Report identified in Section 8.3 that the Class 1E
              electrical distribution system was designed to meet the requirements of IEEE Standard
              3081971, *lEEE Standard Criteria for Class 1E Electric Systems for Nuclear Power
              Generating Stations ' Section 6.3 of this standard required periodic testing at scheduled
              intervals to demonstrate that components that were not exercised during normal
              operation of the station were operable. The standard further stated,'The specific tests
              and the frequency at which they are performed depend upon the specific components
              installed, their function, their environment, and the fact that they are in the maintenance
              program of the unit (s). Illustrative examples of tests are given in Table 2." Table 2 of the
              standard identified switchgear and one of the tests identified for illustrative purposes for
              that type of component was an overcurrent trip test.
                In contrast to these requirements, the licensee did not have a program to perform
                periodic overcurrent trip testing of its Unit 1, Class 1E, molded-case circuit breakers.
                The licensee developed a position paper that concluded that IEEE 308-1971 was not
                applicable to molded-case circuit breakers. This conclusion was based on an
                interpretation that Table 2 of the standard identified four tests for 600 V and below
                switchgear: operation test, mechanical inspection, overhaul, and overcurrent trip test.
  _ __                                                                                                  _
                                                                _ - . - - .
 
- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _                            _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ______________ _ ___
                                                                                                                                                                                                                              i
                    .                                                                                                                                                                                                        :
                    .
                                                                                                                                                                                                                          28-
                                                                                    Due to the physical construction of molded caso circuit breakers, mechanicalinspection
                                                                                    and circuit breaker overhaul were not possible. Therefore, the licensee concluded that
                                                                                    the perindic tests in Table 2 were not applicoble to molded-case circuit breakers but were
                                                                                    rather intended for load center switchgear.
                                                                                    The inspectors considered the licensee's interpretation of Table 2 of IEEE 3081971 to
                                                                                    be in error, based on the following points:
                                                                                    *      Table 2 identified illustrative periodic tests for Class 1E components.
                                                                                    .
                                                                                            The identified tests were not an exhaustive or restrictive lists nor was Table 2                                                  i
                                                                                            intended to exclude components for which it was not physically possible to                                                        l
                                                                                            perform all of the identified tests.
                                                                                                                                                                                                                              )
                                                                                    *      The user of the standard was expected to evaluate which of the identified tests
                                                                                            (or others) were appropriate for each component.
                                                                                    As a result of its operating experience assessments for NRC's Information Notices 92 51,
                                                                                    * Misapplication and inadequate Testing of Molded-Case Circuit Breakers" and 93-64,
                                                                                    * Periodic Testing and Preventive Maintenance of Molded-Case Circuit Breakers," the
                                                                                    licent,ee initiated a practice of performing electrical testing of molded case circuit
                                                                                    breakers in the receipt inspection process and performing mechanical exercising of the
                                                                                    breakers on a periodic basis. However, they did not implement the practice of periodic                                                    ;
                                                                                    electrical testing. Information Notice 93-64 referred to Electrical Power Research
                                                                                    Institute Report NP 7410," Breaker Maintenance." Volume 3 of this document," Molded
                                                                                    Case Circuit Breakers," recommended electrical testing of molded case circuit breakers
                                                                                    on a 4 to 6 year periodicity.
                                                                                    Prior to the inspection documented in NRC Inspection Report 50-313/97 201, the
                                                                                    licensee performed a self assessment that identified that periodic electrical testing of
                                                                                    molded-case circuit breakers was not performed. The licensee established a task group
                                                                                    to determine if a testing program, replacement program, or a combination of both should
                                                                                    be adopted.
                                                                                    Insoector Followuo
                                                                                    The inspectors conducted interviews with personnel and reviewed the licensee's position
                                                                                    paper on molded-case circuit breaker testing and plans for developing a periodic testing
                                                                                    program for molded-case circuit breakers.
                                                                                    The licensee identified that they performed several activities related to safety related
                                                                                    molded-case circuit breakers to venfy that they will function under design basis
                                                                                    conditions and that the breakers are maintained accordhg to vendor requirements.
 
  ,
  *                                                                                                      F
>
                                                      2g.
          These activities included: testing Unit 2 electrical penetration breakers in accordance
          with the Technical Specifications, tet, ting all new breakers prior to installation, preventive
          maintenance inspection and cleaning of breakers and panels, manual cycling of some
          breakers, and performing periodic thermography inspections of 480 V molded case
          circuit breakers. The licensee stated that these testing activities have historically
          resulted in very low failure rates.
          The licensee informed the inspectors that they had undertaken a project to develop a
          periodic electrical testing program for molded case circuit breakers. Specifically, the
          licensee stated that a program would be developed to test the Unit 1 containment
          electrical penetration breakers and the program would be implemented in the refueling
          outage scheduled for the spring of 1998. At the time of the inspection, the licensee had
          identified a sample population of 64 molded-case circuit breakers for inclusion in the
          program, of which, approximately 12 wcre scheduled for testing in the next refueling
          outage. Additionally, the licensee stated that it would categorize the remaining
          safety related Unit i breakers by risk significance and develop and begin implementation
          of a testing program by the end of 1998. With respect to Unit 2, the licensee identified
          that safety related molded-case circuit breakers that were not included in the Technical-
          Specification-required testing program would be evaluated for risk significance and a
          testing program would be developed and implemented by the Unit 2 refueling outage
          scheduled in 1999.
          Based upon the previous record of satisfactory Technical Specification-required electrical
          testing experience of Unit 2 molded-case circuit breakers and other maintenance and
          testing activities the licensee has implemented, the inspectors did not consider the
          licensee's lack of a periodic testing program for Unit 1 molded-case circuit breakers an
          immediate safety concern. However, the licensee's practices will be reviewed further
          with the NRC's program office to determine if the licensee's reference to IEEE 308-1971
          in its Updated Final Safety Analysis Report imposed a regulatory requirement to
          implement an electrical testing program for molded-case circuit breakers. This
          unresolved item was left open pending review of this issue by the NRC program office.
    E8.17 (Closed) Unresolved item 50-313/97202-15: Lack of includino all Safetv-Related Fuses
          in Proce&dC
            BacharWad
            The NRC identified that the licensee had not adequately resolved previous concerns
            re;ated to incorrect electrical fuse installations. The licensee had established a like for-
            like replacement policy for installed fuses but had physically verified only 4 percent of the
            fuses in Unit 1 to be correct in all aspects. The fuse control procedure required an
            engineering evaluation only for blown fuses or when replacement fuses were different
            from those installed. All other 3pplications involved a like for like replacement without an
            engineering review. Under these conditions, an existing incorrect fuse would be
            replaced with a like fuse. The NRC considered the like-for like fuse replacement policy
            to be inappropriate considering the small percentage of fuses validated.
                                                          _                          _
 
    -  .          _ _ _. _ _ _ _ _._ _ _ _ _ _ _ _ _ . ._ _ _ _ _                                                                    _ _ ._ _
  .
  *
;                                                                                                                                                ,
                                                                                -  30-
                    Insoector Followup
                    In response to the NRC finding, the licensee proposed to add the following DC
                    distribution equipment to the fuse control program by June 30,1998: D01, D02, D15,
                    D16, and D17 for Unit i and 2001,2002,2D26,2D27,2D41,2D42,2D51, and 2D52 for
                    Unit 2. Also, as a long term corrective action, the licensee stated that whenever a design
                    change was r ade to a safety related circuit protected by a fuse, a review of tha fuse list
                    would be performed by engineering to verify, correct, or add fuses to the procedure as
;                  necessary.
>
                    The licensee reviewed their condition report database for fuse-related discrepancies
                    occurring since January 1,1993. Seven condition reports during this period addressed
                    wrong size or type of fuse. Only one of these condition reports affected Unit 1, and this
,                    fuse was installed in a nonsafety related circuit. One was in a nonsafety circuit common
                    to both units and five affected Unit 2. Of these five, only three affected safety related
                    circuits. None affected circuit operability. Based on these facts, the licensee concluded
                    that the fuse control program was being effectively managed. The inspectors determined
                    that it was unlikely that a pervasive fuse control problem existed and, therefore, did not
                    consider the matter to represent a safety concern.
        E8.18 (Closed) Unresolved item 50-313/97201-16: FSAR Disneoancies
                    Backaround
                    The NRC identified five discrepancies in the license's FSAR, mostly involving
,                    Table 7-11 A, "R.G.1.97 Post Accident Monitoring Variables." The discrepancies                                              ~
                    involved inconsistencies between the table and design documents concerning instrument
                    ranges and display configurations. One additional discrepancy concerned a note in
                    FSAR Section 14.2.2.1.3.1 stating that both steam generators would be isolated in the
,                    event of a steamline break; whereas, in actuality, only one steam generator would be
                    isolated.                                                                                                                  i
                    Insoector Followun
!                    Prior to the identification of these discrepancies the licensee was in the midst of a
                    comprehensive FSAR review for both units. This program was described to the NRC in
                    Letter CNRO 97/00010 "EOl Licensing Basis Assessment and UFSAR Review
                    Initiatives," dated May 7,1997. The licensee stated that this effort would resolve the
,                  generic concerns iaised by this item since this review effort would identify the same
                    types of errors discovered by the NRC. The specific errors were to be reviewed and
                                                                        _
                    corrected using the ticensing document change process. These corrections were to be                                        ,
                    made effective in the 1998 submittal of the ANO Unit 1 FSAR.
                    The inspectors reviewed Letter CNRO-97/00010 and noted that it referred to a generic
                    review of the Unit 1 and Unit 2 FSAR for accuracy. The inspectors reviewed a document
                    entitled, " Safety Analysis Report Upgrade Project," that explained the scope of this effort,
                    currently scheduled for completion in July 1998. Based on review of this material and
;
                                                                                                                                                ,
    ,,      ,-,s.v          .,                                    ,_r.-  --
                                                                              ..,y,  ,-- -y , . w, - - - ,, -, -- - - , - __. , , ,,--- ---,-
 
  .
  .
                                                      -31-
          discussions with licensee personnel, the inspectors concluded that the project as
          pirnned would resolve the generic concerns related to this issue. At the time of this
          inswa ine licensee was approximately 50 percent complete with this project and had
          identified 895 potential discrepancies. Of these,391 vea strictly editorial, leaving 504
          items having potential significance. However, the licensee stated that many items may
          subsequently be deterrnined not to be FSAR errors since the reviewers have been
          instructed to docuinent everything that might be a discrepancy.
          The inspectors reviewed licensing Information Requests L97-0213, L97 0326, and
          L97 0310 and confirmed that the specific errors identified by the NRC were scheduled to
          be corrected in the next FSAR update.
          The inspectors determined that the licensee's efforts were sufficient to correct the
          specific and generic concerns associated with this inspection finding.
            10 CFR 50.71(e) states that the updated FSAR shall be revised to include the effects of
          all changes made to the facility or procedures as described in the FSAR. The licensee's
          failure to properly update the FSAR regarding the five discrepancies described above
          was considered a violation of 10 CFR 50.71(e). However, because of the favorable
            progress being made by the licensee's FSAR review team and the fact that a description
          of this project has been placed on the docket, and the NRC's view that the discrepancies
            identified by the NRC likely woule. have been identified by the licensee's program, the
            NRC is exercising discretion in accordance with Section Vll.B.3 of the Enforcement
            Policy and is not taking formal enforcement action for this finding.
    E8.19 (Closed) Unresolvnd item 50-313/97201-17: Ineffective Resolution of Previous
            Corrective Actions
            Backaround
            During a plant walkdown, the NRC noted that two in-parallel check valves located in the
            steam supply piping to the turbine-driven emergency feedwater pump (P7A) were
            continually chattering because of steam leakage through downstream solenoid valves.
            The NRC's concern was that wear from this mechanical action could eventually result in
            failure of the check valves to perform their reverse seating function,
            insoector FollQEuD
            The Wspectors were informed that leakage through the solenoid valves had been a
            problem at ANO since at least 1988 when CR 1-88 0015 identified this problem. The
            licensee had performed maint3 nance on the valves on several occasions, but the
            leakage problem persisted. At some point, the licensee determined that the small
            amount of leakage was not detrimental to the system, since the check valves were not
            experiencing abnormal wear and the heating of the downstream piping was considered
              beneficial in reducing the potential for condensate-induced turbine overspeed events.
1            Then, the licensee deferred any plan for modification. However, in October 1996,
              the licensee identified accelerated wearing of elastomeric surfaces on one of the
 
.
.
                                                    32-
      two solenoid valves in the EFW steam lines. As documented in Condition
        Report CR 196 0569, electricians found the O-ring on the operator of Solenoid
      Valve SV 2663 to be hard and brittle following its installation on July 14,1992. The
        licensee's equipment qualification program stated that this 0 ring was qualified for
        60 years of service but did not consider seat leakage to be a normal condition for the
        establishment of qualified life. The licensee determined that the solenoid valve remained
        operable with the damaged 0-ring. Based on the O ring failure, the qualified life of the
        O rings was being revised to be from 2 to 8 years depending on the service condition.
        While the licensee considered a modification to the solenoid valves, they were also
        considering installation of motor-operated globe valves and relecating the valveb closer
        to the turbine.
        The check valves performed a safety related function by isolating the piping from a
        faulted steam generator. The licensee stated that one of these valves would be
        disassembled and inspected during the next refueling outage in the Spring of 1998. In
        February 1995, the other check valve was inspected and found structurally sound with            ,
        slight indications of scoring. During past tests of the check valve's reverse seating
        capability, the results have been acceptable.
        The inspectors were informed that the check valves had chattered since their installation
        in 1986, even before the solenoid valves began to leak, because of the presence of a
        drain / strainer orifice that creates a constant steam demand of 1600 pounds-mass per
        hour. Since the check valves require iOOO pounds-mass per hour to remain constantly
        open, the solenoid valve leakage couid actually reduce the chattering if it were of
        sufficient magnitude. However, the current chatter rate of the check valves was 10 taps
        per second, indicating that the solenoid leakage was well less than 3400 pounds mass
        per hour.
        The inspectors determined that the licensee had adequately ensured that EFW system
        operabililty had not been compromised by the solenoid leakage problem. The inspectors
          recognized that the check valve chattering was partNily independent of the leakage
          problem and that the leakage had been observed tc to beneficial for preventing
          condensation in the EFW turbine steam supply line Gese facts mitigated any safety
          concerns re' < ed to this condition.
  E8.20 (Closed) Unresolved item 50-313/97201-18: Lack of Seismic Sucoort of OTSG Pressure
          Transmitters
          (Closed) Unresolved item 50-313/97201-19: Lack of Desian Basis for Sucoort of Steam
          Generator Instrument Sensina Lines
          Backaround
          The NRC observed that a clip designed to restrain the isolation valve and sensing line for
          Steam Generator Pressure Transmitter PT 2667B was missing. The concern was that
          the line could fail during a seismic event, potentially affecting the operability of the steam
                  _ _ _ _ _ _ _ _ _ .
 
.
.
                                            33-
  generator pressure controlloop. The NRC also observed that the corresponding clips on
  the three other redundant pressure instrument channels in the same vicinity were loose.
  The licensee initiated Condition Report CR 197-0058 to determine the operability status
  and potential generic concerns. Before the end of the inspection, the licensee reported
  to the NRC that the as found configuration was operable and that a walkdown of other
  instrument tubing restraints indicated that the mounting clip problem was not widespread.
  In the Unit 1 EFW pump room, the NRC found a 10-foot unsupported span of instrument
  tubing for a pressure tranomitter (PT/PI 2811). This is a safety related sensing line that
  monitors the discharge pressure of the turbine driven emergency feedwater pump. A
    m. mum unsupported span of 2.5 feet was generally specified in the seismic drawing
  details. The licensee issued Condition Report CR 107-0074 and, subsequently,
  determined that the as-found configuration was operable. The licensee determined that
  a generic issue existed and elevated CR 197-0074 to a significant condition, requiring a
  root cause determination. The licensee performed a detailed walkdown of the EFW,
  Decay Heat / Low Pressure injection, and High Pressure injection systems and identified
  the following conditions;
  *
          Several installations were undocumented or unanalyzed, such as tubing supports
          exceeding the 30-inch unsupported span and use of nonstandard instrument
          supports.
  *
          Lack of design bases or criteria for determining instrument line slopes.
  *
          Drawing discrepancies between drawings and the as built condition.
  *
          Missing or incorrect tags on instrument valves.
  Based on these findings, the licensee expanded the scope to include other nystems. For
  example, Condition Report CR-197 0087 was later opened to document insidequately
  supported emergency diesel generator instrument lines. In all,37 instrument
  installations were found in Unit 1 that did not conform to either seismic or instrument
  installation requirements as defined in the standard drawing details. Design engineering
  deiermined that none of the 37 discrepancies created an inoperable condition.
  Insoector Followuo
  The inspectors reviewed Root Cause Analysis Report CR 197-0074," Instrument Tubing
  not Mounted in Accordance with Seismic Design Requirements," dated March 24,1997.
  The licensee identified the following root causes for this event:
  (1)    Inadeouate_trainina: Personnel involved in the installation and maintenance of
          instrument tubing were not adequately trained or sensitized to seismic and
          configurations requirements.
                                                                                _ _ _ _ - _ _ _ _
 
                    . _ .      . .    ._.          -      -  -- ..              .      ..      -
  .
  .
                                            34-
    (2)      Work oractics Personnelinstalling and maintaining instrument tubing either did
            not use required configuration documentation during work activities or did not
            follow these documents correctly.
    (3)      Desian confiaura@n and analygls: Design documentation and prints were
            inadequate or not easily accessible.
    The licensee walked down 40 instrument installations in Unit 2 and found that the quality
    of the installations was much better than in Unit 1. Only four of the installations
    inspected had notable deficiencies involving damaged mounting clips or brackets
    resulting from removal and reinstallation to support work on nearby equipment.
    The licensee performed the following corrective actions: (1) the individual discrepancies
    were repaired as necessary, (2) a letter was issued on April 4,1997, to site groups
    reiterating instrument tubing requirements, and (3) design engineering reconfirmed the
    initial operability assessments fiom the tubing walkdowns. Additionallong term actions
    included the following: (1) develop a scope for additional walkdowns, (2) determine
    whether existing seismic tubing mounting requirements can be relaxed, (3) evaluate
    enhancements to design drawings associated with tubing, (4) evaluate the work planning
    processes that involve instrument tubing or the removal of tubing for interference
    purposes, and (5) provide training on seismic and configuration requirements for
    instrument tubing.
    The inspectors discussed the status of the proposed long term actions discussed above
    with the licensee. A calculation was in the final stages of review that redefined the
    acceptable support span lengths for various configurations. Once this calculation was
    complete, the licensee was planning to perform additional walkdowns of those safety-
    related components in Unit 1 that were potentially susceptible to instrument tubing
    discrepancies. This effort was to be completed by May 1998. The licensee was also
    planning to provide personnel training and to clarify drawings that contained confusing
    tubing support information.
l  The inspectors determined that the licensee's completed and proposed corrective
    actions (each of which were assigned completion due dates) were sufficient to address
    the issues raised by this item and considered the overall response to be strong,
    particularly considering that none of the identified discrepancies had been evaluated to
    affect operability.
    10 CFR Part 50, Appendix B, Criterion 111, " Design Control," states that the design control
    measures shall provide for verifying or checking the adequacy of the design.
    The licensee's failure to provide measures to ensure the correct translation of seismic
    design requirements to instrument tubing installations and the maintenance of this
    configuration during plant operations in Unit 1 was identified as a third example of a
    violation of 10 CFR Part 50, Appendix B, Criterion ill (50-313/9721-02).
!
1                                              -.    _-.                            _              _
 
      .
      *
i
                                                              35-
                    Conclusions
                    The licensee's failure to provide measures to ensure the correct translation of seismic
                    design requirements to instrument tubing installations and the maintenance of this
                    configuration during plant operations in Unit 1 was identified as a violation.
              E8.21 (Gosed) Unresolygd item 50-313/9720120: Inadeauate Work Plan for the Controlof
                    Post-maintenance Testina
                    Backomund
                    The NRC identified a misaligned limit switch on Valve CV-4804, rector building vent.
                    The misalignment caused the actuator cam to drag on the limit switch arm toward the
                    end of the valve stroke instead of riding on the roller bearing. Repeated operation in this
                    configuration could have resulted in a faulty valve position indication. Although this
                    particular application was not safety related, there existed a concern that other safety-
                    related applications may have a similar misalignment problem.
                    The licensee recognized that the post modification plan and job order for this valve
                    (00954697) did not include a post maintenance test to verify proper operation of the limit
                    switch cam assembly. The licensee reopened this job order and accompanying work
                    plan with the intent to add steps to reconfigure and test the assembly. One other valve in
                    Unit 1 (CV-1845, quench tank sample valve) had a similar mounting design, and a similar
                    revision was scheduled for its work plan. The licensee performed a review for other
                    similar limit switch configurations but did not identify any other of these configurations in
                    either Units 1 or 2.
                    Insoector Followup
                    The inspectors reviewed the work plan revisions discussed above and observed that
                    steps were added to verify that the limit switch rollers were in proper contact with the
                    cams. The licensee considered that this verification in the work plan coupled with the
                    existing post maintenance test that ver;fies smooth motion and proper valve position light
                      sequencing would be sufficient to ensure that the condition would not recur (i.e., no
                      revision to the post modification plan was considered necessary). The inspectors
                      observed that the post maintenance testing problem,in this instance, did not affect
                      safety related equipment and determined that the licensee had adequately addressed
                      the specific and generic implications of this finding.
              E8.22 (Closed) Unresolved item 50-313/972121: Inadeauate 50.59 Review Associated v@
                      the Removal of the Unit 1 BWST Vacuum Breaker and Followuo Corrective Action
  ,
                      Backaround
                      This item hvolved an inadequate 10 CFR 50.59 safety evaluation performed by the
                      licensee for a temporary covering placed over the borated water storage tank vacuum
                      relief valve flange. The evaluation was inadequate, because it did not consider the air
                                            _
                                                                                                                  '
    ..  .. .    ..        ..
                                                            .
                                                                      . .  .
                                                                                ______ ____________
 
.
.
                                            36-
  flow restricting effects of a mesh screen that was an integral part of the temporary
  covering. The following is a summary of key events:
  *      On December 4,1996, while Unit 1 was at full power, the iicensee removed the
          8-inch diameter vacuum relief valve from the borated water storage tank for a
          surveillance test. When the valve was removed, the licensee installed a white
          plastic bag over the 8 inch diameter open tank flange to act as a foreign material
          exclusion (FME) cover. Two slits, each approximately 8 inches long, were cut in
          the plastic cover to allow air flow. This work was done using Job Order
          00952943. The job order stated that if suction for the tank was necessary, a
          supplemental vent path was provided by a 4 inch tank overflow line that was
          always open during plant operations.
  *      On December 5,1996, the system engineer observed that the tank flange was
          covered with what he believed to be a solid FME cover and initiated Condition
          Report 106 0663 to document the potentialinoperability of the borated water
          storage tank. Subsequently, the system engineer determined that the tank was
          operable since the FME cover contained two slits that would permit tank pressure
          and vacuum relief. The plastic bag was installed for approximately 30 hours.
          The licensee subsequently ter*ved the plastic bag and installed a blank flange
          on the tank flange with a 1 inch gap between the flange and tank flange to permit
          pressure and vacuum relief. Around the 1 inch opening, a mesh screen was
          placed to prevent foreign material introduction into the tank.
  *      Condition Report 196-0663 also documented the discovery of a through wall
          crack on the inlet flange of the removed vacuum relief valve and assessed the
          operability of the tank. The operability assessment did not address tank
          operability while the plastic bag was installed as an FME cover. The assessment
          only addressed the flange and 1 inch gap and stated that the blank flange with
          the 1 inch air gap installed over the tank flange would provide sufficient air
          movement to vent the tank during rapid drain downs. At this time, any air flow
          restriction from the installed mesh screen was not considered,
                                                                                              .
    *      On December 12,1996, the gap dimension was changed from 1 to 3-inches
          under Job Order 00952943. This was done to increase the venting capacity
          based on engineering judgement that the 1 inch gap may have been marginal.
    *      On January 22,1997, Significant Condition Report 197-0019 was initiated and
            identified that a safety evaluation was not performed for se plastic bag installed
            over the tank flange for approximately 30 hours. In addition, the condition report
            identified that the procedure for testing the valve (Procedure 1306.034, " Testing
            of Unit 1 Pressure Vacuum Relief Valve PSV 1617, PSV 2423, and PSV 1412,"
            Revision 2) did not allow removal of the vacuum relief valve during power
 
  ._ _ __ __ _ __- _ _ _ _.. _ __ _ _ _ _ _ _ _ . _ . . _ . _                                                                                        _ _ _
      *                                                                                                                                                            -
      .
.
                                                                                                      37                                                            -
.                                              operations and that the safety evaluallon for the procedure did not include
l                                              consideration for valve removal at powcr. The condition report included an                              _
                                                                                                                                                                    >
                                              operability assessment for the tank when the plastic t sg was installed on the tank
i                                            flange. The licensee sta;ed that the tank was operable based on engineering
                                              judgerrent that the plastic bag would break before an internal vacuum would
                                                                                                                                                                    '
,
                                              cause damage to the tank.
                                                                                                                                                                    '
                                    +        On February 3,1997, the licensee issued Condition Report CR 197-0031 to
                                              address the previously made assumption that the 4-inch overflow line would, by
                                              itself, provide sufficient vacuum relief. The conclusion of this effort was that,
<                                              contrary to prior judgement, the 4 inch line was not large enough to prevent the
                                              formation of an internal vacuum in the tank during rapid draindown.                                                  .
                                    *        On February 11,1997, the licensee prepared Temporary Alteration 971-001 that
                                              documented the removal of the vacuum relief valve and the installation of the
i                                              blank flange with a 3 inch gap over the tank flange. The temporary alteration was
                                              prepared approximately 2 months after the actualinstallation. Temporary
                                              alterations were not issued for the previous two temporary coverings (plastic bag
                                              and 1 inch gap flange connection). Temporary Alteration 971001, which                                                >
                                              contained the first 10 CFR 50.59 evaluation performed in association with these                                      .
                                              events, concluded that the borated water storage tank was operable with the                                          ;
                                              3 inch gap blank flange installation.                                                                                j
'
                                    *        On March 4,1997, in response to concerns from the NRC, Condition Report 1
,
                                              96-0663 was amended to incluc's a discussion of the air flow blockage caused by
                                              the mesh screen over the 1 inch gap. After considering the screen restriction, the -
                                              licensee concluded that the borated water storage tank was still operable under
                                              this configuration.
,
                                    insoector FolloWMD
                                    The inspectors reviewed the documents referenced above and had discussions with
                                    licensee personnel, in review of the facts, the inspectors identified several concerns in
                                    addition to those addressed in the previous inspection, as discussed below.                                                    <
                                    Procedure issu_es
'
                                    The inspectors found, in agreement with Significant Condition Report CR-197 0019, that
                                                                                                                                                                    '
                                    the licensee's use of Procedure 1306.034 during power operations was improper. This
                                    procedure was originally written for use during refueling outage conditions as indicated                                      ;
                                      by paragraph 4.3.1 of the procedure, which stated that inspection of the valve would be
                                      performed each refueling outage. The 10 CFR 50.59 evaluation for the procedure did
4
                                      not address performing maintenance or testing of the vacuum relief valve while the plant
                                    was at power. Also, the procedure did not address temporary provWons for vacuum
                                      relief, which would be an essential element for online maintenance of the vacuum relief
                                      valve. Although one of the corrective actions from the condition report was for the
                                                                                                                                                                    ,
            ,--v--e    -    - ,,,,,                y      ,-e , , , . ,-, ~ . ~ , - , ., , - ,,-r ,    - , , - , , - - , ,yw --e , ,e~ n.- -,--a, n-      -rm.,.
 
  .
  .
                                              38-
    licensee to revise Procedure 1300.034 to allow valve removal and maintenance of the
    VMye while at power, this revision had not been corr,pleted at the time of this inspection.
    10 CFR Pr.rt 50, Appendix B, C6terion V, require', thst activities affecting quality.shall be
    oresenbod by docum6ntsd procedures of a type appropriate to the circumstances and
    shall be accomplished !,1 accordance with these procedures. The licensee's failure to
    comply with the plant condition prerequisites of Procedure 1306.034 was identified as an
    apparchtTiolent.,n (50 341iW21-03).
    Desian Controlinna
    The inspectors determined that the licensee had performed temporary changes to the
    borated water storage tank without the use of proper design control measures. The
    licensee removed the tank vacuum relief valve and sequentially installed three temporary
    covering configurations, each of which constituted a change to a safety related
    con'oonent, without use of the temporary alteration procedure (a temporary alteration
    wat eventually prepared for t,1e third configuration, but this was issut j approximately 2
    months after installation).
    The inspectors reviewed Procedure 1000.028," Control of Temporary Alterations,"
    Revision 20. Attachment i to this procedure listed the criteria for requiring a temporary
    alteration, which included a situation where a design change was made to safety-related
    equipment without the removal of the equipment from service. Using this criteria, the -
    inspectors concluded that, because the borated water storage tank was not taken out of
    service for these evolutions, a temporary alteration was required. The use of a
    temporary alteration was intended to ensure that plant changes were subjected to design
    control measures commensurate with the original design.
      10 CFR Part 50, Appendix B, Criterion til, requires those design changes, including field
    changes, shall be subject to design control measures commensurate with those applied
    to the original design. The licensee's failure to provide design control measures
<
    commensurate with initial design for three temporary changes made to the borated water
    storage tank vacuum relief valve was identified as an apparent violation
    (50-313/9721 04).
      Operability issues
      The plastic bag was attached to the tank flange in a manner such that the 8-inch
'
      ventilation slits may not have been pulled into the opening during an event (e.g., a safety
      injection event due to a large nreak loss of coolant accident that would cause a rapid
      tank draindow). Therefore, the venting function of the line could have been defeated.
      This would have left the 4-inch overflow line as the only venting source for the tank,
      which, according to the licensee's calculations, was not adequately sized to prevent a
      vacuum from forming in the tank during a rapid tank draindown. Consequently, the
      inspectors questioned the operability of the borated water storage tank during the 30
                            -__-
 
  .
  .
t                                              39
    hours that the plastic bag was attached to the vent flange. Because of a lack of
    redundancy, an inoperable borated water storage tank would render the entire
    emergency core cooling system inoperable. The licensee performed several tests and
    calculations in an attempt to support the original engineering judgement that the tank
    was operable in this configuration. Following the onsite inspection period; the licensee
    provided the following evaluations and calculations for NRC review;
    *        *BWST (borated water storage tank) Past Operability," internal memorandum
              from Don Phillips to Charles Tyrone, dated November 25,1997.
    *        Calculation 97 E-02100 01, "BWST Venting Capability Through 4 inch Overflow,"
              Revision 0, December 3,1997.
    *        Calculation 97 E 021101, "BWST Level Analysis," Revision 1, December 4,
              1997.
    .
              Calculation 97 E-0209-01," Evaluation of BWST Tank T 3 for Potential Vacuum
              Load in Support of Operability Determination associated with CR-196-0663,"
              Revision 0, December 8,1997.
    The licensee concluded that borated water storage tank was operable during the period
      of time the plastic bag was attached to the vacuum relief valve flanga. However, the
      analyses clearly demonstrated that the borated water storage tank was in a degraded    I
      condition and could have plastically deformed above the water level in the tank in the
      event of a large or medium break loss of coolant accident. This deformation, according
      to the licensee's evaluation, would not have prevented the operation of the emergency
      core cooling system as designed. Also, the effect of the internal vacuum on the tank
      level instrumentation could have caused an early transfer of emergency core cooling
      water system suction from the borated water storage tank to the reactor building sump.
      This early transfer would have reduced the net positive suction head margins for the
      emergency core cooling system pumps. The licensee determined that this would not
      have rendered any of these pumps inoperable.
'
      10_CFR 50 59 Issues
      The inspectors determined that the licer,see had failed to evaluate whether temporary
      changes made to the borated water storage tank had created an unreviewed safety
    - question.
      10 CFR 60.59, " Changes, Tests and Experiments," permits the licensee to make
      changes to the facility and to procedures as described in the Safety Analysis Report
      without prior Commission approval provided the change does not involve a change to the
      Technical Specification and does not involve an unreviewed safety question. A
                                                                                                !
 
  .
  .
                                                    -4 0-
    proposed change, test, or experiment shall be deemed to involve an unreviewed safety
    question if a possibility for an accident or malfunction of a different type than any
    evaluated previously in the safety analysis report may be created. The licensee shall
    maintain records of changes in the facility, and these records must include a written
    safety evaluation that provid6s the bases for the determination that the change does not
I  involve an unreviewed safety question.
    The inspectors identified the following two examples where the licensee made changes
    to the borated water atorage tarik vacuum relief line without adequately eva!uating
    whether an unreview6d safety question existed:
    *        The licensee reinoved the existing vacuum relief valve and covered the tank
              flange with a plaatic bag taped to the tank. In the absence of a safety evaluation,
              the licensee used engineering judgement to consider the tank operable under this
              configuration. However, when questioned, the licensee had to perform extensive
              testing and analysis beicte concluding that the original engineering assumption
              was correct and that the tank was operable. The installation of the plastic bag
              appeared to create the possibility for an accident or a malfunction of a different
              type than any evaluated previously in the Safety Analysis Report and may have
              created an unreviewed safety question.
    *        The licensee installed a blind flange separated by a 1 inch gap from the tank
              flange and installed a foreign material exclusion screen over the gap. The
              unreviewed safety question evaluation of this configuration failed to consider the
              air flow restriction created by the foreign material exclusion screen.
    The failure to properly determine whether an unreviewed safety question existed as
t
    required by 10 CFR 50.59 was identified as an apparent violation (50-313/9721-05).
    Conclusion
    Three apparent violations were identified associated with temporary coverings placed
      over the borated water storage tank vacuum relief valve flange, when this valve was
      removed on December 4,1996, for testing and maintenance. The apparent violations
      involved the failure to perform proper safety evaluations as described in 10 CFR 50.b9,
      the failure to perform the vacuum relief valve testing under the plant conditions as
      prescribed in the test procedure in accordance with the requirements of 10 CFR Part 50,
      Appendix B, Criterion V, and the failure to utilize the correct design control processes
      (temporary alterations) for the temporary cover configurations placed over the valve
      flange in accordance with 10 CFR Part 50, Appendix B, Criterion Ill.
                      ,.        ..      . . .  .. .
                                                                  .
                                                                                      ..
                                                                                                  .
                                                                                                    -o
 
    -_.    . _.    -          .                . _ - . ---- - -      -
  0
  0
                                                          41-
    E8.23 (Cloigd) Unresglyed item 50-313/9720122: Revised Calculations Associated with
          BWST Vonexing and Pumo NPSH
          Background
          The licensee prepared an engineering report,93 R 1002-01, "ANO-1 BWST Outlet
          Vortex Suppressor," dated February 5,1993, to examine the potential for vortexing in the
          BWST resulting in a loss of net positive suction head (NPSH) for the emergency core
          cooling pumps. The conclusion of the report was that the ECCS pumps would have
          sufficient NPSH. Within this report, the licensee identified that it had failed to consider
          the effect of instrument error in the vortexing calculation. This meant that the actual level
          in the tank at the time of switchover from the BWST injection mode to the recirculation
          mode may have been less than the nominal value, bringing the hydrodynamic system
          closer to a state of cavitation and air entrainment than had been originally assumed. The
          licensee issued Condition Report CR 197-0039 to investigate this condition. Within this
          report, the licensee concluded that the ECCS system would have remained operable.
          The licensee concluded that only the high pressure injection pumps would be susceptible
          to an NPSH problem but only at low tank levels near the switchover point to the
          recirculation mode. At this time in the accident, the high pressure injection (HPI) pumps
          could be shut down because the low pressure injection pumps alone could provide
          adequate core cooling. Within CR 197-0039, the licensee also was to complete
          Revision 1 to Engineering Report 93 R 1002 01 and to determine whether other
          calculations may have been affected by a similar failure to consider instrument error.
          Insoector Followup
          The inspectors reviewed the documents listed above and discussed the issue with
          licensee engineers. The inspectors determin. d that this instrument error was only
          reflected in the vortexing calculation and did not affect actualinstrument readings.
          10 CFR Part 50, Criterion lil, " Design Control," states that the design control measures
,        shall provide for verifying or checking the adequacy of design, such as by the
l        performance of design reviews.
          The licensee's failure to check properly the adequacy of Engineering
          Report 93 R 1002-01 was identified as a fourth example of a violation of 10 CFR Part 50,
          Appendix B, Criterion lli (50 313/972102).
          Conclusioni
          The licensee's failure to check the adequacy of an engineering report properly that failed
          to account for instrument error in a calculation of vortexing in the borated water storage
          tank was identified as a violation.
1
                                                                            _ _ -.
 
  .
  .
l                                                    -4 2-
    E8.24 [Gosed) Unresolved item 50 313/97202 23: InadtSuate 10 CFR 50.59 Evaluation
          6110 dated With BWST Releastts
          Background
          This issue involved a problem witi        10 CFR 50.59 safety evaluation performed for
          Temporary Alteration 97-1001, whi n is discussed in Section E8.23 of this report. In
          assessing the potential post loss of coolant accident (LOCA) radioactive release through
          the 3 inch gap foreign material exclusion (FME) covedag on the flange of the borated
          water storage tank (BWST) vent, the licensee addressed only offsite exposure and did
          not address control room exposure, which could ba considerably more significant. Also,
          the safety evaluation did not refer to the licensee's response to information Notice 9156,
          * Potential Radioactivity Leakage to Tank Vented to Atmosphere "
          Insoector Fe20Wup
          The licensee revised the 10 CFR 50.59 evaluation for Temporary Alteration 971-001 to
          include a discussion of control room dose resulting from potential backleakage to the
          BWST. In the evaluation, the licensee stated that no accident consequence analysis
          takes credit for holdup or filtering of radioactive releases to the BWST, and, therefore,
          back leakage to the BWST is beyond the licensing basis. Based on recent test results of
          the BWST supply and return valves, the licensee stated (in the revised safety evaluation)
          that little or no backleakage would be expected to occur post LOCA. Consequently, the
          licensee determined that there would be no change to the estimated control room
          dosage as a result of the temporary alteration.
          The licensee reviewed its response to information Notice 9156 and determined that the
          conclusions reached as a result of Temporary Alteration 97-1001 were not affected by
          this iirmation notice.
          The inspectors considered the lack of reference to control room dose in the original
            10 CFR 50.59 evaluation to be an oversight, but observed that two mitigating factors
            existed. First, the original evaluation did not quantify a release rate based on the
            assumption that the release would be negligible. Had the release been quantifiable, an
            assessment of control room dose would have been necessary. Also, the fact ' hat no
            credit was taken in the licensee's accident analysis for containment of BWST radioactive
            leakage relegated the issue to a beyond-licensing basis status, The inspectors
            considered the licensee's response to this issue to be adequato.
                                                                                                      .
 
  .
  .
                                                  -43
                                          IV. PlanLSunpart
1
    F2  Status of Fire Protection Facilities and Equipment
(
    a. Insoection Scooe (92903)
        During a walkdown of the Unit i emergency feedwater system pump room, which was
        performed in support of the review of various items discussed in Section E, the
        inspectors inspected the condition of the electrical cable fire barrier material,
    b. Qhstryations and Findings
        The inspectors identified a deficiency in the fire wrap for Conduit EJ2029, which provided
        protection for the control circuitry for the turbine-driven emergency feedwater pump. On
        a vertical run of the conduit, a collar joining two sections of fire wrap had loosened and
        slid down. This resulted in about a 2 inch portion of the conduit being exposed.
        The inspectors reported the condition to the licensee and showed the deficiency to a fire
        protection engineer and an operator. The licensee agreed that the as-found condition
        was unacceptable and immediately declared the fire barrier inoperable. In accordance
        with the requirements of its fire protection program, the licensee verified the operability of
        smoke detection equipment and control room alarm capability and established an hourly
        fire watch. Condition Report 197-0313 was initiated to document the item and Job
        Request 928623 was initiated to repair the fire wrap.
        The inspectors asked the licensee whether there was a program for inspecting fire
        barriers and whether the fire wrap in the emergency feedwater pump room was included
        within the scope of the program. The licendee provided the inspectors with
        Procedure 1307.062, * Unit 1,1 Hour Cable Fire Wrap Inspection," Revision 0. The
        inspectors reviewed the procedure, discussed fire wrap inspection techniques and the
        process of dispositioning inspection observations with licensee personnel, and verified
        that inspection of the pump room was included within the scope of the procedure. The
        inspection of the sub; set ' ire wrap was last performed with satisfactory results in July
        1997. The procedure was required to be performed every 6 months. At the time of the
        inspection, no explanation was available for the cause of the deficiency. The licensee
        determined that a noncompliance did not exist, because the surveillance interval had not
        been exceeded and the damage could reasonably be assumed to have occurred
        following the most recent inspection.
        The inspectors considered the licensee's actons on this matter to have been
        appropriate,
 
                                                                                                                      I
  O
  e                                                                                                                  i
                                                            +44 *                                                    r
'
          c.  Conclusions
                The inspectors identified a fire barrier deficiency and the licensee took prompt
                compensatory actions as required.
                                              V. ManSment Meetings
          XI    Exit Meeting Summary
                The inspectors presented the inspection resu'ts to members of licensee management by
                telephone on January 6,1998. -The licensee acknowledged the findings presented.
                During this meeting, the licensee stated that it will expand its definition of margin of
                safety as it pertains to the performance of safety evaluations performed under
                10 CFR 50.59. This issue is further discussed in Section E2.1 of this report.                        i
                The inspectors asked the licensee whether any materials examined during the inspection                !
                should be considered proprietary. The licensee sta..J that one document reviewed by
                the inspectors contained proprietary information. The proprietary information from this
;              document was not discussed within this inspection report.
                                                                                                                      ,
4
                                                                                                                      1
    . -..    ,                    -              , . . , .              ._ ._                        . . - ,m.._,
 
  .
i
l
  .
                                            ATTACHMEliT 1
                                    SUPPLEMENTAL INFORMATION
                              PARTIAL LIST OF PERSONS CONTACTED
    Licemen
    G. Ashley, Licensing SupeMsor
    E. Blackard, Design Engineer
    M. Cooper, Licensing Specialist
    G. Dobbs, Electrical and instrumentation and Control Supervisor
    J. Howell, Design Engineer
    R. Hutchinson, Vice President, Arkanshs Nuclear One
    R. Lane, Director, Design Engineering
    D. Mims, Licensing Director
    D. Phillips, Nuclear Steam Supply Syatem Supervisor
    J. Richardson, Design Engineer
    C. Tyrone, Director of Design Engineering
    T. Waldo, Supervisor, Modifications
    C. Zimmerman, Plant Manager, Unit i
    Nf1C
    J. Melfi, Resident inspector
                                  INSPECTIQfiERQCIQUEES USED
      37001            10 CFR 50.59 Safety Evaluations
      92903            Followup of Engineering issues
                              ITEMS OPENED. CLOSED. AND DISCUSSED
    Ooened
    50-313/9721-01                VIO    Failure to incorporate EFW Flow Limits into Procedures
                                          (Section E8.7)
    50-313/9721-02                VIO    Design Calculation Deficiencies (Sections E8.8, E8.11,
                                          E8.20, and E8.23)
    50-313/9721-03                APV    Failure to Perform BWST Vacuum Relief Valve Testing
                                          Procedure Under Proper Plant Conditions (Section EB.22)
    50-313/9721 04                APV    Failure to implement Temporary Alterations for BWST
                                          Vacuum Relief Valve Removal (Section E8.22)
                                                                                                  l
                                                                                                  '
                                                                                  _ _ _ _
 
.
.4
                                              2-
    50-313/9721 05          APV  Failure to Perform 10 CFR 50.59 Evaluations for BWST
                                  Vacuum Relief Valve Removal (Section E8.22)
    Closed
    50-313/9627-03          VIO  Failure to Notify NRC Within 1 hour of Declaration of NUE
    50 313/96-009          LER  Fire in Reactor Building During Heatup Resulted from
                                  Cracked Weld in Oil Line
    50-313; 368/96512-01013 EA    inadequate Lube Oil Collection Systems for Reactor
                                  Coolant Pumps
    50 313/96512-01023, and EA    Failure to identify and Take Prompt Action to Lube Oil
    01033                        Leakage
    50-313/97201 01        IFl  Licensee's Actions to Revise the Technical Specification
                                  Bases for the Minimum Water Vo!ume in the Condensate
                                  Storage Tank
    50 313/97201 02        URI  EFW Flow Rates Exceeding B&W Flow Rates
    50 313/97201-03        URI  EFW Piping Configuration Differences
    50 313/97201-05        URI  Evaluation of EFWP Pump Room Environment
    50 313/97201 06        URI  Drawing and Calculation Revisions
    50-313/97201-07        IFl  Modification Work Procedure Revisions
    50 313/97201 08        IFl  Add;tional Vendor infonnation Necessary for Revised
                                  Caole Pulling Calculation
    50-313/97201 11        IFl  Verification of Calculation Changes Associated With DC -
                                  Batteries
    50 313/97201 12        IFl  Review of Current Design Basis for Bypassing EDG
                                  Protective Trip
    50-313/97201 15        URI  Lack of including all Safety Related Fuses in Procedure-
    50 313/97201 16        URI  FSAR Discrepancies
    50-313/97201 17        URI  Ineffective Resolution of Previous Corrective Actions
    50 313/97201-18        URI . Lack of Seismic Support of OTSG Pressure Transmitters
    50-313/97201 19        URI  Lack of Design Basis for Support of OTSG Instrument
                                  Sensing Lines
    50 313/97201 20        URI  Inadequate Work Plan for the Control of Post-
                                  Maintenance Testing
  .50 313/97201 21        URI  Inadequate 50.59 Review Associated with BWST Breaker
                                            .
                                                                                            /
 
  .
                  .            .        .
                                                              .
                                                                                                          _ _ _ _ _ _ _ _ _ _
                                                                                                                              ,
o
D
                                                                3-
  50-313/97201 22                        URI      Revised Calculations Associated with Vortexing and
                                                  Pump NPSH
  50 313/97201-23                        URI      Inadoquate 50.59 Evaluation Associated with BWST
                                                  Releases
  Discussed
  50-313/97201-04                          URI    Inadequate Piping Pressure and Temperature
                                                  Specifications
  50-313;                                  URI    Consideration of Multiple Hot Short Actuations
  -368/9623-01
                                                                                                                                1
  50-313/97201 14                          URI    Lack of Testing of Unit 1 Molded Case Circuit Breakers
                                                LIST OF ACRONYMS USED
    A/E                  Architect / Engineer
    BWST                  Borated Water Storage Tank
    CR                    Condition Report
    CRN                  Calculation Revision Notice
    DC                    Direct Current
    DCD                  Design Configuration Documentation
    DCIMS                Design Configuration Information Management System
    EDG                  Emergency Diesel Generator
    EFW                  Emergency Feedwater
    FME                  Fore;gn Material Exclusion
    FSAR                  Final Sa'ety Analysis Report
    MOV                  Motor-operated valve
    NPSH                  Net Positive Suction Head
    QAT                  Quality Assurance Team
    SIMS                  Safety Information Management System
      ULD                Upper Level Document
    WBGT                  Wet Bulb Globe Temperature
                                                                                                                                  :
    ._    _ _ _ _ _ _ . -
 
                                                  .-__ - __ -__-___ -_-_                            _ _ _ _ _ - _
e
o
                                              AIIACHMENT 2
                      LIST OF DOCUMENTS REVIEWED FOR ITEM 50 313/97-201-06
      CALCULATIONS
      Lalculation A-86," Items Discussed with Daleas R.S. of CE MSLB, ECCS and LOCA,"
      Revision O.
      Calculation Quality Action Team Final Reput, September,1996.
      Calculation 32-1229968-00, " Final Draft, ANO AFW Capacity - Phase 1".
      Calculation 32 5000450-G0, "ANO AFW Capacity, Phase 2," Revision 0.
      Calculation 80-D-1083A-02, "EFIC DC Valve Torque Calculation Under Reduced Voltage
      Condition," Revision 1.
      Calculation 80-D-2085-01, " Correlation of Teletector to Activity Release," Revision 0.
      Calculation 80-D-2085-02, " Provide Correlation Between MR/hr Reading Detector Activity Steam
      Line Result Table Method," Revision 0
      Calculation 85-D-1042-03, "AMSAC Instr Loop Errors & Setpoints," Revish15.
      Calculation 85-E-0053-20, " Combustible Loading Calc for Fire Area G," Revision 29.
                                                                                                                    '
      Calculation 86-E-0002-01, "EDG 1 & 2 Load Study," Revision 8.
      - Calculation 86-E-0020-01, "lE Station Battery 2D11 Duty Cycle'& Sizing Calc," Revision 7.
      Calculation 87 E-0026-09, "ErM Pump Room Temperature Profile," Revision 0.
      Calculation 88 E-0086-01, "lE Bulletin 88-04 Review for P7A and P78 Minimum Flow
      Evaluation," Revision 0.
      Calculation 89-E-0029-02, " Cal Factor Calc ANO-2 MS Line Rad Monitor," Revision 0.
      Calculation 89-E-OiO2-01, " Terminal Voltage Calc for DC MOV," Revision 8.
      Calculation 89-E-0144-01, "EDG Loading for 2A3 & 2A4 Bus," Revision 3.
      Calculation 90-E-0116-01, "ANO-2 EOP Setpoint Document," Re.wision 4.
      Calculation 91 E-0090-06, " Heat Load Determination for Post Accident for Rooms 95 98 99100
        104109110 & 149 for Post Accident Cooling," Revision 2.
        Calculation 92-E-0021-01, " Emergency Duty Cycle and Battery Sizing Calculations," Revision 4
                                                                                                                  :
  .mu                          _ __ ___-___
 
                                                                                                              _ _ _ _ _ _ _ _
                                                                                                                                !
,,
  9
                                                                    2-
                  Calculation 92-E-0077-04, " Unit 1 EFW System Pump Performance Requirements,' Revision 0,
                  - Calculation 93-D-1008-05, 'MOV Sizing Calc for CV-2620,* Revision O.
                  Calculation 93-R-1029-30,'ANO-1 SRR for Auxiliary Building HVAC System ABH V,'
                  Revision O.
                  Calculation 94-D-5033-01, * Removal of Local Fire Trouble Horns from D21 Breaker 34,"
                  Revision 0.
                  Calculation 94-E-006101," Tech Spec Allowable Outage Time (AOT) Utilizing Attemate AC                          ,
                  EDG," Revision O.
                  Calculation 95-D-1004-03, 'DCP 95-1004 Load Addition to RC1," Revision O.
                  Calculation 95-D-1011-01,"EDG Load Add for DCP 95-1011," Revision 1.
                    Calculation 95-D 7064-01, " Vital AC Panels & Instrument AC Panels," Revision 0.
                    Calculation 95-D-7072-01,"D01 Battery Loading Amendment," Revision O.
                    Calculation 96-E-0065-01, " Unit i Safety Survivability Eval Under Stall Thrust / Torque,"
                    Revision 1.
                                                                                                                                    ,
                    Calculation 96-R 0002-02, " Generic Letter 89-10 Program Valves Limit Switch Setpoint,"
                    Revision 1
                                                                                                                                    j
                    CONDITION REPORTS
                    CR-C-96-0060, re Calculation Room Control and Discrepancies, March 22,1997.
-                  CR-C-97-0053, re Calculation 92-D-2001-49 Approval, February 11,1997.
                    CR-C-97-0058, re Upper Level Document Discrepancies, February 13,1997.
                    CR-C-97-0059, re Design Configuration Documentation Discrepancies, February 13,1997.
                    CR-1-96-0184, re Seismic Qualification Calculations, May 23,1996.
                    CR-1-97-0017, re Accuracy Analysis Calculations for EFW Flow Transmitters, January 21,1997.
                    CR 2-97-0304, re Discrepancy in Instrument Setpoint Calculations 2LT-5659-1 and 2LT-5668-2,
                    May 28,1997
    ..
      .. . . . .                                                                                                              .
 
                                                  -      _--_ ___-_-__                    _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ -
  %l
'
  o
                                                    3-
    DESIGN CHANGES
    Design Change Package 94-1003, "Feedwater (MFW Venturi Replacement)," Revision 2
    Design Change Package 95-2001, " Control Room Emergency Chiller Installation - Air
    Conditioning Modification," Revision 1
    ENGINEERING STANDARDS
                                                                                                                                      '
    Engineering Standard GES-39, " Calculation Numbering Schemes and Codes," Revision 2
    LICENSING INFORMATION REQUESTS
    LIR L97-0035, ' Action items from ANO 50.54(f) Design Bases Assessment: Maintenance of
    Calculations [1.1,1.2),",
    LIR L97-0037, " Action items from ANO 50.54(f) Design Bases Assessment: DCIMS
    Improvements [1.6],",
    LIR L97-0201,"NRC AE Design Basis inspection," July 31,1997
    LIR L97 0202,'NRC AE Design Basis inspection," July 31,1997.
    LIR L97-0289, " Response to IR 97-202 AE Design Basis inspection," September 28,1997
    LIR L97-0290, " Response to IR 97-201 AE Design Basis Inspection," September 26,1997
    PROCEDURES-
    Procedure OP-5010-015," Engineering Calculations," Revision 1 PC1,
    Procedure OP-5010-019, " Computer Software Control," Revision 1 PC1
    MISCELLANEOUS
    Memorandum ANO-97-00225, M. Stroud to ANO Engineering Personnel," Reminder of Design
      Considerations for Possible Impact to Battery and EDG Lording Calculations," March 3,1997
      Design Configuration Documentation Discrepancies 2M7-07-01,02,03,07,08,09,12,14.
      Design Configuration Documentation Discrepancies RBS 02-05,06
                                                                                                                                        d
                                                            _ --__-_-_ _                                                            a
}}
}}

Latest revision as of 23:05, 1 January 2021

Insp Repts 50-313/97-21 & 50-368/97-21 on 971027-31 & 1110- 14.Violations Noted.Major Areas Inspected:Engineering & Plant Support.Nrc Identified Fire Barrier Deficiency & Licensee Took Promp Compensatory Actions as Required
ML20202E340
Person / Time
Site: Arkansas Nuclear  Entergy icon.png
Issue date: 02/06/1998
From:
NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION IV)
To:
Shared Package
ML20202E294 List:
References
50-313-97-21, 50-368-97-21, NUDOCS 9802180126
Download: ML20202E340 (50)


See also: IR 05000313/1997021

Text

. .- . - . - - _ - - . ~ . - - _ . - . . . . - - - . . . .-

.

..

EliCLOSURL2 i

U.S. NUCLEAR REGULATORY COMMISSION

REGION IV

-

- Docket Nos.: 50-313;50-368

License Nos.: DPR-51; NPF-6

Report No.: 50-313/97-21; 50 368/97-21

Licensee: Entergy Operations, Inc.

Facility: Arkansas Nuclear One, Units 1 and 2

]

- Location: Junction of Hwy,64W and Hwy.333 South

Russellville, Arkansas

Dates: October 27-31 and November 10-14,1997

, inspectors: M. Runyan, Team Leader

P. Goldberg, Reactor inspector

R. Bywater, Reactor Inspector

G. Kalman, Project Manager

'

Accompanying D. Denver, Consu' tant

Personnel

4

Approved By: T. Stetka, Acting Chief Engineering Branch, Division of Reactor Safety

'

Attachment 1: Supplemental Information

l Attachment 2: List of Documents Reviewed for Unresolved item 50-313/97201-06

!

l

l

l

l

[

,

l

'

i

9902180126 900206

PDR ADOCK 05000313

i

G PDR

!

_ _ _ _ _ _ - _ __ - _-_-__

.

.

-2-

EXECUTIVE SUMMARY

Arkansas Nuclear One, Units 1 and 2

NRC Inspection Report 50-313/97-21; 50 368/97 21

Engineerina

-

Within a review of selected documents, the licensee's 10 CFR 50.59 safety evaluation

program appeared to be functioning satisfactorily, with the exception that some

documented word searches of the Updated Safety Analysis Report for impact were

inaccurate. However, some apparent failures to implement the program were identified

(Sections E2,1 and E8.22).

.

The failure to procedurally incorporate a vendor recommended maximum emergency

feedwater flow limit of 1500 gpm to a single steam generator into plant operating

procedures was identified as a violation of 10 CFR Part 50, Appendix B, Criterion V

(Section E8.7).

The failure to properly verify the piping configuration design inputs to a design calculation

was identified as the first example of a violation of 10 CFR Patt 50, Appendix B,

Criterion lli (Sec' ion EP.8).

Overpressure of the turbine-driven emergency feedwater pump downstream piping

required further reviews by the licensee. The existing analysis used pump performance

crit 6 ia that was less than the manufacturer's specified criteria (Section E8.9).

-

The failure to properly verify the design adequacy in four ciesign calculations was

identified as additional examples of a violation of 10 CFR Part 50, Appendix B,

Criterion 111 (Section E8.11).

The lack of a review by the licensee of a sample of existing design calcriations to

determine if the types of past problems identified by the licensee existed within other

calculations was identified as a weakness (Section E8.11).

-

The lack of over current trip testing of Unit 1 molded case circuit breakers required

further review by the NRC (Section E8.16).

-

- Although the NRC identified five discrepancies in the Final Safety Analysis

Report (FSAR), the licensee's ongoing review of the FSAR was considered sufficient to

correct these specific examples and to resolve the resulting generic concern. Therefore,

enforcement discretion was taken in accordance with the NRC Enforcement Policy

(Section E8.18).

- ___

. _ - _ _ - - _ _ _ _ _ - _ _ _

.

9

-3-

.

The failure to provide measures to ensure the correct translation of seismic design

requirements to instrument tubing installations and the maintenance of this configuration

during plant operations in Unit 1 was identified as an example of a violation of 10 CFR

Part 50, Appendix B, Criterion lli (Section E8.20), ,

.

Three apparent violations were identified associated with activities involving the removal

of the borated water storage tank vacuum relief valve for maintenance and testing on

December 4,1996. The apparent violations involved the failure to perform proper safety

evaluations as described in 10 CFR 50.59, the failure to perform the vacuum relief valve

testing under the plant conditions as prescribed in the test procedure in accordance with

10 CFR Part 50, Appendix B, Criterion V, and the failure to utilize the correct design

control processes (temporary alterations) for the temporary cover configurations placed

over the valve flange in accordance with 10 CFR Part 50, Appendix B, Criterion 111

(Section E8.22).

-

The failure to properly check the adequacy of an engineering report that failed to account

for instrument error in a calculation of vortexing in the borated v<ater storage tank was

identified as an example of a violation of 10 CFR Part 50, Appendix B, Criterion 111

(Section E8.23).

Plant Succort

'

=

During a plant walkdown, the NRC identified a fire barrier deficiency and the licensee

took prompt compensatory actions as required (Section F2).

1

_ _ - _ _ _ _ _ _ _ .

_ - - _ _ _ _ _ - _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ - -_ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _

.

.

-4

Report Details

Summarv of Plant Status

Units 1 and 2 were operated at 100 percent power during the inspection.

ll1. Enaineerina

E2 Engineering Support of Facilities and Equipment (37001)

E2.1 10 CFR 503,J Imolementation

a. Insoection Scoos (37001)

The inspectors reviewed the licensee's program to change plant design, revise

procedures, and conduct tests and experiments without prior NRC approval as described

under 10 CFR 50.59. The licensee's program was reviewed for compliance with

regulatory requirements and implementation of the program was evaluated by reviewing

three 10 CFR 50.59 evaluations. The inspectors reviewed the following documents:

ANO-1 10 CFR 50.59 Summary Report for 1996, deted May 22,1997

-

ANO 210 CFR 50.59 Summary Report for 1996, dated June 19,1997

50.59 Evaluations:

Temperature"

,

  • ANO-1, Condition Report 1-96-0667, " Reactor Coolant Pump Lift Pump Disabled"
  • - ANO-2, Design Change Package 94-2007," Replace Charging Pump .

Downstream Check Valves CVC-22A, B, and C"

, Procedure 1000,131, "10 CFR 50.59 Review Program," Revision 3

l

b. Observations and Findings

-Within the review of the listed documents, the inspectors did not identify any

!- programmatic deficiencies in the licensee's 10 CFR 50.59 program. It was noted that

the licensee chose to evaluate the " margin of safety" of proposed changes by evaluating

the changes only against the basis section of the Techn! cal Specifications. This practice

L had been previously questioned by the NRC in Inspection Report 50-313:368/97-04 and

!

,

. - , , , - -

.

.

~5-

found to be in compliance with 10 CFR 50.59 (however, a violation for a failure to

perform a safety evaluation was issued). No deficiencies in the " margin of safety"

evaluations were identified by the inspectors during review of the 10 CFR 50.59

evaluations. Although currently in compliance, the licensee indicated that a more

encompassing design basis for margin of safety determinations will be implemented in

the future.

While review of the?e safety evaluations indicated appropriate programmatic controls,

some apparent failures to implement the 10 CFR 50.59 program were identified as

discussed in Section E8.22 of this report.

The inspectors also identified problems with the licensee's search capability for the

U) dated Final Safety Analysis Report. For example, Safety Evaluation 96-141 stated,

"The lube oil pumps are not describad in the Technical Specifications, Safety Analysis

Report, or operating license." The inspectors determined that this was in error. The lube

oil pumps were discussed in Section 4.2.2.6 of the Updated Final Safety Analysis Report.

The inspectors identified similar problems with the safety evaluatici determinations for

the procedure changes. The inspectors discussed these findings with the licens6e and

concluded that the automated search methodologies used to search for key words in

licerwag basis documents were not always effective in finding relevant reference

matenal and that the techt,ical reviewers were not ensuring that the scope of review was

adequate. The licensee agreed with these conclusions and informed the inspectors that

they had also identified this issue in the past year and had revised the safety evaluation

procedure to address the deficiencies. The inspectors review of Procedure 1000,131

indicated that improvements had been made in the Lensee's process to ensure that

adequate automated searches were performed and that they were reviewed by a second

individual.

c. Conclusions

Within the review of selected documents, the licensee's 10 CFR 50.59 safety evaluation

program, when implemented, appeared to be functioning satisfactorily, with the

exception of Updated Final Safety Analysis Report key word searches. However, some

apparent failures to implement the program were identified as discussed in

Section E8.22 of this report.

EB Miscellaneous Engineering issues (92903)

E8.1 (Ocen) Unresolved item 50-313/9623-01: Consideration of Multiole Hot Short Actuations

Backaround

This issue addressed the unplanned energizaiion of motor-operated valves (MOVs)

during a control room fire. This event, caused by a control cable shorting to an

energized conductor, is known as a hot short. Under certain configurations, a hot-

shorted MOV could stroke with the torque or limit switch removed from the control circuit,

causing the valve to stallinto its open or closed seat. Depending on the capacity of the

.

_ _ - . - _ _ _ _ _ _ . - - _ _

- - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ -

'

.

.

3

motor actuator and the strength of the valve, this action could damage the valve

sufficiently such that plant operators would not be able to reposition the va!ve using the

valve's manual handwheel. The licensee's emergency operating procedures addressing

a control room fire and subsequent evacuation of the control r00m assumed that muual

control of accessible valves was available The licensee interpreted existing regvations

tu require postulation of only one hot short during a control room fire, whereas the NRC

maintained that multiple hot shorts, which is defined as more than one MOV having a hot

short et the same time, were within the scope of the regulations. Independent from the

resolution of this matter, at the request of the NRC, the licensee agreed to perform a

calculation to determine which valves would be potentially susceptible to hot short

damage. This was the anly aspect of this issue reviewed during the current inspection.

Insoector Followoo

The inspectors rev.ewed Engineering Report 97-R-0004-01, "Engineenng Information

Notice 92-18 Evaluation," Revision 1 PC-1; Calcalation 96-E-0065-01, " Unit 1 Safety

Related Valve Survivability Evaluation Under Stall Thrust / Torque, Motor Operated

Valves," Revision 1; and Calculation 96-E-0066-01, " Unit 2 Safety Related Valve

Survivability Evaluation Under Stall Thrust / Torque, Motor Operated Valves," Revision 0.

The inspectors reviewed Calculation 96-E-0065-01. The purpose of this calculation was

to determine operability with reduced margin for a select group of safe shutdown MOVs

under stall thrust / torque conditions. The evaluations were intended to reflect one-time

operation under the stated conditions and were not intended for use as design input in

other analyses or calculations. An important assumption stated that the anelvsis was

valid only for the time it was performed since actual test data was used in soine

evaluations. The results showed that 37 of the 66 valves evaluated would be able to be

manually positioned to their safe position following postulated hot short conditions.

Twenty-nino valves were susceptible to damage. The inspectors determined that the

licensee had used a valid methodology for determining the maximum torque and thrust

that an MOV would experience during a hot short event, with one exception For MOVs

that did not have previous measurements of stem friction, the licensee used a plant

averaoe stem factor correlated to a stem friction coefficient vf 0.1342. The use of a

bounding stem friction coefficient for the untested valve population, approximately 0.08,

would have resulted in calculated torques and thrusts as much as 50 percent higher than

those reported in the calculation. However, based on a qualitative judgement by the

inspectors, application of the lower stem factors would not have significantiv changed the

number of valves determined as potentially incapable of being manually repositioned.

Engineering Report 97-R-0004-01 addressed multiple hot shorts, but in situations where

two or more valves were determined to be unable to be manually repositioned, the report

stated that it wat not credible that both or all would fail at the same time in the same

direction. The inspectors noted that this reasoning reiterated the licensee's position that

multiple hot shorts were not required within the regulations.

Based on the results of the calculations and engineering report listed above and in light

of the 29 valves in Unit 1 analyzed to be susceptible to hot shorts, the inspectors

- - - - - - _ . - - - . - - . _ --- - - . - - .

':

.

,

-7-

concluded that come safety functions could be lost if mu:tiple hot shorts occurred in a

particular manner. This was due to the fact that some of the motor operated valves may

be subjected to loads during a hot short that would render them incapable of being

manually stroked to their safe shutdown position. In some cases, as in the Unit 1 high

- pressure injection system, a total of eight valves would have to hot short in the same

direction to defeat the safety function of the system. However, the Unit 1 shutdown

cooling function could be lost with the hot short failure of only two vu.ves, CW1428 and -

CV 1429, decay heat cooler outlet valves. Both valves were catulated to be potent! ally

incapable of being manually repositioned following a hot short event.

The above discussion was illustrative of the potential impact of multiple hot short events

and was not a complete listing of all potentially affected systems. This item will remain

open pending further reviews by the NRC program office to define the regulatory

requirements for this matter.

E8.2 (Closed) Violation 50-313/96027-03: Failure to Notify the NRC Within 1 Hour of

Declaration of Notification of Unusual Event

L Backaround

On October 17,1996, the licensee declared a Notification of Unusual Event in

accordance with its Emergency Plan for n fire in the Unit i reactor building that lasted

! more than 10 minutes. The licensee notified the NRC Operations Center of a fire in the

reactor building within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of the declaration of the Notification of Unusual Event.

'

Howover, the licensee did not inform the Operations Center that it had made a

declaration of one of the Emergency Classes (Notice of Unusual Event) specified in its

Emergency Plan in accordance with 10 CFR 50.72(a)(1)(l).

Insoector Followuo

The licensee determined that the cause of the violation was human error. The shift -

L engineer who made the initial contact with the NRC Operations Center provided details

l of the fire but neglected to inform the NRC that a Notification of Unusual Event had been

'

declared.

The licensee conducted training with notification communicators about this event and

NRC notification requirements. Additionally, the licensee reviewed applicable

procedures and revised Procedure 1903.011, " Emergency Response / Notifications,"

Revision 22, to require verbatim transmission of iaformation included on

Form 1903.011Y, " Initial Notification Message," Revision 22, to the NRC Operations

Center officer followed by transmitting the form to the NRC Operations Center vi-

l. facsimile. The form explicitly identified the emergency classification for the event. The

! inspectors verified the licensee's corrective actions had been completed and considered

these actions adequate to prevent recurrence of this violation.

l

l

l

_ , - - .. - . . -_- - - - . .- . - - - - - . _- . - -- -

.

.

- 8

E8.3 (Closed) Licensee Event Report 50 313/96-009f Fire in the Reactor Buildina Durina

,

Heatuo Resulted from a Cracked Weld in an Oil Line on a Reactor Coolant Pumo Motor

i

'

Backaround

During a Unit i plant heatup on October 17,1996, a fire occurred in insulation around the

m ain feedwater nozzle ring on the Train B once through steam generator. A cracked

wekiin the discharge line of the Train B reactor coolant pump lube oil lift pump resulted

in oil spray being introduced into the insulation. The hot piping caused the oil to ignite. A

Notification of Unusual Event was declared, and fire brigade responders extinguished the

fire approximately 16 minutes after discovery The NRC conducted a specialinspection

to review the circumstances of the fire, continued safety of the plant, and corrective

actions taken by the licensee. The results of the inspection are documented in NRC

Inspection Report 50-313; -368/96-27. The !!censee initiated Condition Report CR-1-36-

0567, conducted an event evaluation, and documemed its evaluation results in a root

cause analysis report.

The licensee's event evaluation concluded that oil intrusion into the insulation caused a

wicking effect that lowered the auto-ignition point of the oil to a lower than expected

temperature.

.

The NRC conducted a special inspection documented by NRC Inspection

'

Report 50-313; -368/96-27, which identified problems with the licensee's implementation

of 10 CFR Part 50, Appendix R, fire protection requirements and that the licensee had

failed to identify and correct problems that were noted prior to the fire. These were the

subject of an NRC Escalated Enforcement Action (EA 96-512). The licensee developed

and implemented many corrective actions to correct the deficiencies in these areas.-

They are discussed in Sections E8.4 and E8.5 of this report.

Insoector Followuo

This item is closed based upon the followup and discussion in Sections E8.4 and E6.5 of

this report, which address the escalated enforcement items associated with this event.

- E8.4 (Closed) Enforcement Action 50-313:-368/96512-01013- Inadeauate Lube Oil Collection

Systems for Reactor Coolant Pumos

,

Backaround

During the NRC special inspection following the October 17,1996, Unit 1 reactor building

fire (NRC Inspection Report 50-313; -368/96-27), t1e NRC reviewed the tube oil

collection systems for all of the reactor coolant purnps in both Units 1 and 2. The

4

y n m m.e t ~-

_____-- _ - - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ - _ - - _ _

l .

.

.g.

inspectors determined that the lube oil collection systems for the UnP.1, Train B reactor

coolant pump and all of the Unit 2 reactor molant pumps had not been designed to

collect oilleakage from all pressurized and unpressurized locations. Also, the Unit 1

Trains A C, and D reactor coolant pumps had inadequate leakage collection from

some unpressurized locations. The deficiencies were determined to be in violation of

10 CFR Part 50, Appendix R, Section Ill, requirements.

Immediately following the fire, the licc nsee placed the unit in cold shutdewn to evaluate

the effects of the fire and water suppression on plant equipment. No significant damage

occurred other than to some insulation. The damaged insulation was repaired or

replaced as necessary. Other actions taken prior to restarting the unit included installing

a new shroud around the Train B reactor coolant pump motor and extending oil collection

drip trays for all of the reactor coolant pump motor:, to provide coveragv. af potential

leakuge points. Due to remaining concems regarding the integrity of othar portions of

the Unit 1, Train B motor lube oil piping, the licensee implemented administrative controls

to prohibit operation of the associated high pressure lift oil pumps unless a fire watch

was present. The motor manufacturer provided confirmation that the absence of tube oil

injection following an inadvertent pump trip would not adversely affect the coastdown

characteristics of the pump. This was used as supporting information in a 10 CFR 50.59

safety evaluation to conclude that operation without the lube oil!!ft pump in standby did

not constitute an unreviewed safety question.

In Unit 2, the licensee performed tube oil collection sysiem modifications following an

unplanned reactor shutdown in November 1996. The NRC performed walkdowns of both

'

units and reviewed the modifications. These activities were documented in NRC

Inspection Reports 50-313; -368/96-27, 50-313; -368/96-07, and 50-313; -368/96-08.

The NRC concluded that with the exception of the remote lube oil ti:: aystems for both

units, the tube oil collection system modifications es'.ablished compliance with 10 CFR

Part 50, Appendix R, requirements.

The Unit i remote oil fill lines (Tygon tubing) to the top of each motor were not provided

with a leakage collection system as required by Appendix R requirements. The licensee

provided administrative controls to prevent operation of the system until a modification

and any necessary regulatory exemption was applied for and obtained. The Unit 2

remote oil system was designed differently, using stainless steel tubing and stainless

steel flexible hose, but no oil collection system was provided. The licensee described the

Unit 2 system in detail and proposed compensatory administrative controls for its use in

an exemption request to the NRC dated December 23,1996. The NRC approved the

exemption request in a letter dated June 14,1937. The exemption allowed the licensee

to use the remote oil fill system without a collection system contingent upon the

licensee's implementation of several compensatory measures prior to each use.

The licensee responded to the Notice of Violation in a letter to the NRC dated May 9,

1997. Corrective actions were identified in this document, as well as the licensee event

report associated with this event, and sevaral condition reports. Some of these were

completed and reviewed previously as discussed above; others were reviewed during

this inspection.

!

l .

~

l

.

- 10-

Insoector Followuo 0

The inspectors reviewed documents, procedures, an'.8 interviewed personnel to

determine the adequacy and completeness of the Sceasee's corrective actions. Also, the

inspectors contacted the c:gnizant fire protection engineer in the NRC Office of Nuclear

Reactor Regulation regarding the adequacy of the Unit 2 lube oil collection system.

Documents reviewed included: portions of the Updated Final Safety Analysis Report;

Condition Report 196-0507, its associated Root Cause Analysis Report and corrective

action documents (including 10 CFR 50.59 safety evaluations and screenings);

Procedure 1102.002, " Plant Startup," Revision 59; Procedure 1103.006, " Reactor

Coolant Pump Operation," Revision 20; Procedure 1107.001, " Electrical System

Operations," Revision 50; Procedure 1107.004, " Battery and 125V DC Distiibution,"

Revision 8; and Procedure 1504.001, " Visual Inspection of the Unit 1 & 2 RCP's Oil .

Colloction System," Revision 4.

{

Modifications were made to the tube oil collection systems for all reactor coolant

pumps in both units. These were determined by the NRC to be acceptable for meeting

10 CFR Part 50, Appendix R, requirements. To ensure the continued operability of the

systems, the licensee imp!*mented Procedure 1504.001, for inspection of the systems

immediately prior to refueling outages and prior to startup.

The licensee placed administrative controis on operation of the Unit 1 Train B reactor

coolant pump lift oil pumps. This war, done because of uncertainty about oil system

integrity during lift pump operation on the Jeumont Industrics motor Procedure

1103.006 was revised to require that the Train B reactor coolant pump not be started or

stopped during normal operations when the reactor coolant system temperature was

greater than 350 degrees F. Operation of the lift oil system was al! owed, but only if two

fire brigade-trained operators were present in the reactor building to identify oil leakage,

inform the control room, and extinguish any resulting fire.

'

The norrr.al design of the oillift system provided an autostart of the lift pump when the

reactor coolant pump tripped. The administrative controls discussed abova prevented an

autostart from occurring. Therefore, if a reactor coolant pump trip occurred, the pump

would coast down without injection of lubrication onto the motor thrust bearing. The

inspectors reviewed the licensee's 10 CFR 50.59 Safety Evaluation 96-141, " Evaluation

of Placing RCP #32B HP Lube Oil Pump (P-808 and P-638)in Pull-to-Lock," and safety

evaluation determinations for associated procedure changes. Supporting documentation

for the licensee's evaluation included a letter from the vendor documenting that reactor

coolant pump coastdown time would not be adversely affected for at least 15 seconds

without oil lift pump operation. The relevant accident analyses for consideration in the

safety evaluation were the various sizes of loss of coolant flow accidents, and the

evaluation determined that the lack of lift pump operation had no impact. The inspectors

concluded that the safety evaluation provided an acceptable basis for concluding that

reactor coolant pump operation without availability of tube oilinjection aid not constitute

an unreviewed safety question.

)

4

1

_ _ _ _ _ _ _ _

!.

l

.

-11

The licensee initiated an evaluation of the tube oil system piping configuration to ensure

that no additional questionable welds remained. The licensee and the motor supplier

determined that the lube oil piping sysiem was constructed in accordance with applicable

commercial standards with the use of qualified welders and adequate quality controls.

No other similar weld failures were reported in more than 200 other reactor coolant pump

motors manufactured by the motor suppiier. One difference in the subject configuration

was the addition of a backup direct current powered lube oillift pump and associated

piping. To evaluate this further, the licensee developed a plan to perform inservice visual

inspections of the piping at operating pressure, collect vibration data, and perform data

analysts. The licensee considered this option for addressing piping concerns preferable

to others considered, which included piping replacement, weld replacement, and

volumetric inspections with repair of rejectable welds. After discussing these options

with the licensee, the inspectors considered the licensee's approach to evaluating the

acceptability of the lube oil piping configuration to be adequate. Administrative controls

on lift pump operation would remain in effect during future operating cycles pending

completion of vibration analyses and continued visual inspections to identify any

remaining weld failures.

The inspectors determined that the licensee had completed corrective actions to

ensure that its reactor coolant pump oil collection systems were in compliance with

10 CFR Part 50, Appendix R requirements and that proposed corrective actions were

either completed or in progress with responsive completion dates.

E8.5 { Closed) Enforcement Actions 50-313/96512-01023 and 50-313/96512-01033: Failure to

ldentify Sianificant Conditions Adverse to Quality and Take Promot Corrective Action

Relatina to Oil Accumulation in Pioe Insulation.

Backcround

'

The NRC (and the licensee) determined that there were previous opportunities to identify

that a problem existed with the reactor coolant pump oil lift system pr'ar to the fire event.

These opportunities were missed, in part, because a condition report was not initiated to

thoroughly evaluate the extent of the potential problem. Some of the opportunities to

identify the scope of the problem included: discovery of a crack in the lift oil pump

<

discharge line, the magnitude of the crack and inadequacy of the original weld, discovery

of oil on the side of the steam generator during reactor building walkdowns during plant

heatup, discovery of oil puddled under the reactor coolant pump, and identification of an

excessive amount of smoke present in the reactor building during heatup.

To correct these deficiencies in problem identification, communications, and

understanding of oil-insulation interaction consequences, the licensee revised

procedures and conducted training.

10soector Followuo

The inspectors reviewed documents, procedures, and interviewed personnel to

determine the adequacy and completeness of the licensee's corrective actions.

- _-____

0

,

-12-

Documents reviewed included: Procedure 1000.104, ' Condition Reporting and j

Corrective Actions," Revision 13; Procedure 1015.036, ' Containment Building Closeout,'

'

Revision 5; Procedure 2102.002, ' Plant Heatup," Revision 10; Procedure 1102.002,

' Plant Startup,' Revision 61; Procedure 1102.010, 'P! ant Shutoown and Cooldown,"

Revision 41; Procedure 2102.010, " Plant Cooldown,' Revision 30; Procedure 1203.034, ,

' Smoke, Fire, or Explosion," Revision _10; Procedure 2203.034, " Fire or Explosion,"

Revision 5; and training outlines and attendance records for Condition Report 196-567.

The licensee's training appeared to adequately address the circumstances and causes

of the fire and provided information on cr,uses of insulation fires; uses and limitations of

material safety data sheets; importance of proper delivery, receipt, and accuracy of

communications; and lessons learned in response to oil spills and observations of

smoke.

The condition reporting procedure _was revised to clearly address identified deficiencies

in fire protection system components including oilleaks and spills. Items of this type that

meet the definitions in the procedure now require the initiation of a condition report. The

other procedures provided requirements to perform inspections for oilleakage and

excessive sn.oke and provided actions to take in response to identified adverse

conditions. These actions could include terminating plant heatup, posting fire watch

personnel with fire fighting equipment, contacting the fire protection engineer, and othar

appropriate act.ans. The procedures also contained guidance on the effects of oil

soaked insulation on the auto-ignition temperature of the oil.

The inspectors concluded that the licensee's corrective actions were adequate to

improve staff understanding of the mnsequences of oilleaks, and the importance of

communications when adverse conditions are identified, provide actions to prevent fires

from occurring, provide additional requirements for inspections, and provide actions to

take when adverse conditions are identified.

E8.6 (Closed) Insoection Followuo item 50-313/97201-01: Licensee's Actions to Revise the

Technical Soecification Bases fo,- the Minimum Water Volume in the Condensate

Storcae Tank

3ackaround

The minimum water level in the Unit 1 safety-related condensate storage tank was based

on the capability to provide a sufficient supply of water to permit the initiation of the decay

heat removal system within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> or less of an accident initiation. However, the actual

period of time required to initiate decay heat amoval may be substantially greater than 4

hours; The licensee acknowledged that this text was ir, accurate and proposed to revise

the existing Technical Specification bases to eliminate (probably) reference to the decay

heat removalinitiation and to state that the minimum condensate storage tank level was

based on the volume that was required for 30 minutes of emergency feedwater operation

before manual switchover of the pump suction to the service water system.

__

.

13-

Insoector Followuo

The licensee stated that they were in the process of neveloping the improved Standard

Technical Specifications and that the appropriate condensate storage tank bases would

be included in the initial submittal. The licensee stated that they planned to submit the

revised Technical Specification design base along with the revised Technical

Specifications by the end of 1998. The inspectors verified that there was no safety

concern related to the minimum condensate storage tank water level and that there was

no need on the part of tne licensee to revise this level. However, a clarification of the

Technical Specification basis for the level was appropriate.

E8.7 (Closed) Unresolved item 50-313/97201-02: Licensee's Failure to incoroorste Maximum

Emergency Feedwater Flow limits into Plant Procedures to Monitor and Preclude

Exceedina Recommended Limits

Backaround

A 1991 Babcock and Wilcox Company engineering report (92-R-1019-01) identified that

the maximum emergency feedwater flow rate to preclude damage to the Unit 1 steam

generator tubes was 1500 gpm. The NRC determined that the licensee had not revised

plant procedures to incorporate this upper flow limit. Specifically, Procedure 1010.002,

"hansient History / Transient Cycle Logging,"in effect at the time was not revised. The

NRC reviewed operator logs and identified two occurrences where the emergency

feedwater flow exceeded the 1500 gpm limit.

Insoector Followuo

The inspectors reviewed Condition Report CR-1-97-0081, dated March 27,1997. which

the licensee generated to resolve the maximum emergency feedwater flow issue. A

licensee contractor prepared an analysis which determined that the maximum feedwater

flow rate to prevent steam generator tube damage was 2214 gpm. The inspectors

reviewed the calculation and determined that the higher flow limit was adequately

justified.

The licensee stated that the upper flow limit was not included in operating procedures

because high emergency feedwater flows would cause a cooldown, during which

operators would take procedural actions to correct the high flow rate problem. However,

the inspectors determined that the licensee had not previously evaluated the effects of

the high flow on the steam generator tubes for the periods of time before operator actions

would restore an acceptable flow rate.

The inspectors reviewed Procedure 1010.010, " Unit One Transient Cycle Logging and

Reporting," Revision 1, which was issued to provide guidance for determining excessive

emergency feedwater flow and provide specifications for initiation of a condition report.

This procedure superseded Procedure 1010.002. The inspectors determined that the

Procedure 1010.010 required an engineering evaluation if the upper limit of the '

emergency feedwater flow was exceeded.

.

.. .

_ _ _ _ _ - _ _

- - _ _ _ - _ - _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ ___

.

-14-

During the inspection, the inspectors reviewed in detail Framatome Technologies final

draft calculation 321229968-00 and Framatome Technologies Calculation 32-5000450-

00,"ANO Auxiliary Feedwater Capacity - Phase 2." The purpose of these calculations

was to determine the limit for emergency feedwater flow to preclude unacceptable steam

generator tube damage or wear. The results showed that a flow rate of 2214 gpm

resulted in less turbulence induced vibration than at full power conditions. As part of this

review, a conference call was held with Framatome Technologies and licensee

personnel during which they responded to questions from tM inspectors. Based on their

review and the information presented during the conference call, the inspectors

determined that the analysis provided in these calculations demonstrated that

emergency feedwater .peration at flow rates up to 2214 gpm for limited periods of time

would have no significant effect on steam generator performance. The inspectors

verified that design of the emergency feedwater system would not resun la flow rates in

excess of this amount.

The inspectors determined that the licensee failed to procedurally incorporate a vendor

recommended maximum emergency feedwater flow limit of 1500 gpm to a single steam

generator. As a result, flow rates in excess of this amount were permitted to occur for

short periods of time. Later, in response to the NRC's questions, these excess flow rates

were shown to be acceptable.

10 CFR Part 50, Appendix B, Criterion V, requires that activities affecting quality be

prescribed by and performed in accorJance with instructions, procedures, or drawings.

The licensee's failure to incorporate vendor recommended flow rate limits into

procedures was identified as a violation of 10 CFR Part 50, Appendix B, Criterion V

(50-313/9721-01),

Conclusions

The licensee failed to incorporate a vendor specified emergency feedwater flow limit into

plant procedures, resulting in the failure to evalus'e the effects of exceeding the vendor

recommended flow limit during two previous periw of plant operation. Concerns

related to possible damage to the steam generator tunes were adequately resolved by a

subsequent arialysis demonstrating the acceptability of higher flow limits.

E8.8 (Closed) Unresolved item 50-313/97201-03: EFW Pioina Confiauration aifferences

Backaround

in review of Calculation 82-D-2086-02, which evaluated net positive suction head

requirements for the motor-driven and turbine-driven emergency feedwater pumps, the

NRC identified that the suction piping configuration used in the calculation to determine

pressure drops was not consistent with the piping configuration identified in the piping

isometric drawings. The pressure drops in the piping were negligible and the effect on

the results of the calculation due to the differences was small. This item was opened

pending action to revise the calculation and take any appropriate generic actions.

_ _ _ _ _ _ - _ _ _ _ _ _ _ _ _

'<

.

I

..

15 -

Inspector Followup

The licensee initiated Action item Requests L97-0198 and L97-0285 to revise

Calculation 82-D-2086-02 to address the as-built configuration. The inspectors verified

that these action items had been assigned to the appropriate engineering organization

for completion. The licensee established a Uue date for completion of the calculation

revision of March 1,1998. Based on the minhal impact on the results of the calculation -

expected by incorporating the as-built piping configuration differences.in the calculation,

the inspectors considered the licensee's schedule for completion adequate. The broader

3

issue of identified deficiencies in the licensee's maintenance of calculations is addressed

in the inspectors' followup of Unresolved item 50 313/97201-06 (Section E8.11).-

10 CFR Part 50, Appendix B, Criterion Ill, " Design Control," states, in part, that design

control measurss, such as design reviews, shall provide for verifying or checking the

adequacy of design. The licensee's failure to properly verify that the design inputs for

Calculation 82 D-2086-02 were consistent with the installed piping configuration was

considered as the first example of a violation of 10 CFR Part 50, Criterion lli (50-

313/9721-02).

Conclusion

The licensee's failure to properly verify the design inputs to Calcu;ation 82-D-2086-02 ^i

- was identified as a violation of 10 CFR Part 50, Appendix B, Criterion Ill.

E8.g (Ocen) Unresolved item 50-313/97201-04f 1: *n=*a Pinino Pr===nre.ggi .

Temperature Specifications

,

Background

During review of Calculation 88-E-0100-16, which evaluated pressure and temperature

limitations of emergency feedwater system piping, the inspectors identified several

discrepancies. For example, in the determination of maximum emergency feedwater

discharge pressure limitations, the calculation used a pump suction alignment from the

condensate storage tank instead of the service water system as input. The use of the

service water system as a source would result in a higher emergency feedwater system

discharge pressure than if suction were taken from the condensate storage tank.-

The licensee initiated Engineering Request 973848 for the design engineering staff to

review and revise Calculation 88-E-0100-16. The rrque'st was assioned a completion

date of December 31,1997.'

- _ _ _ _ - _ _ _. l

___

.

.

i

13

Insoector Followup

The inspectors reviewed the licensee's followup action item response to the original

inspection concern. The response identified that the design pressure of the emergency

feedwater system discharge piping was 1850 psig. At rated speed of the turbine-driven

emergency feedwater pump (3795 rpm) and with the suction aligned to the condensate

storage tank, the calculated discharge pressure at shuto# head was 1732 psig. When

the system was aligned to the service water system, the calculated discharge pressure at

shutoff head was 1842 psig, resulting in a margin from the design pressure of only 8 psi.

However, the ca!culation did not account for speed controller tolerances, nor did the

calculation assume a failure of the speed controller. If a failure of the speed controller

occurred, procedural guidance was provided for an operator to take manual control of the

turbine-driven emergency feedwater pump. This procedure instructed the oper; tor to not

exceed a pump speed of 3900 rpm to avoid overpressurization of the discharge piping.

The licensee determined that at a pump speed of 3900 rpm, the resulting maximum

discharge pressure was 1844 psig when suction was aligned to the condensate storage

tank and was 1932 psig when suction was aligned to the service water system.

Therefore, manual operation of the turbine-driven emergency feedwater pump at the

maximum procedurally-allowed speed would result in a maximum discharge pressure >

that exceeded the design pressure of the piping.

The licensee's response stated that the utilization of the 1932 psig maximum ressure as

a basis for discharge piping design pressure was not considered because manual pumr>

control while aligned to the service water source would require an equipment failure in an

already infrequent emergency plant condition.

The inspectors had a concern with this position. The condensate storage tank was

designed to provide a tomado-protected 30-minute supply of water to the emergency

feedwater system. The 30 minutes allowed the operations staff time to transfer the

emergency feedwater supply to the service water system. However, if the turbine-driven

speed control was out of tolerance or failed and the pump was operated manually per

procedure, the maximum discharge pressure could exceed the design pressure of the

turbine-driven pump discharge piping.

The licensee's response also addressed historical mp performance during testing at a

pump speed of 3920 rpm. Analysis of the test results in Calculation 80-D-10838-102A

concluded that the discharge pressure would not have exceeded the 1850 psig design

pressure, even if suction were aligned to the service water system at maximum pressure,

because the pump was not operating at full potential. However, the pump had sufficient

capacity to meet minimum specifications and, therefore, was operable.

The inspectors discussed these issues further with the licensee and were informed that

the original calculation would be reviewed to determine the extent that higher-than

nominal pump speeds need to be considered, both from a speed controller tolerance

perspective and a manual operation perspective. Additionally, since the pump appeared

to be under performing with respect to its certified pump curve, using the pump curve for

, _ _ _ _ ___

_ _ _

.

f

.

-17

piping design pressure determination may be overly conservative. The inspectors were

unable during this inspection to evaluate this issue further to determine whether the

pump was performing in an acceptable manner with respect to the pump curve.

However, the inspectors noted that the pump was meeting its Technical Specification

limits. The licensee'e due date for completion of this review and revision to the

calculation was December 31,1997. During the exit meeting conducted January 6,

1998, the licensee indicated that the due date for this effort had been extended to

January 15,1998.

The inspectors considered this item open pending further NRC review of the licensee's

ongoing evaluation and review of the performance of the turbine-driven emergency

feedwater pump.

E8.10 (C10MLUDIggived item 50-313/97201-05: Evaluation of EFW Pumo Room

Environmerd

Backaround

The licensee identified an environmental qualification problem in the Unit 1 EFW pump

room, which houses the turbine-driven and motor-driven EFW pumps, Steam traps

located in the steam supply lines to the turoine-driven pump, which were not designed for

seismic loads, were vented to the atmosphere of the room. A failure of one these traps

(two in the high pressure piping and two in the low pressure piping) would cause a

continuous b!owdown of hot steam in the room, raising the ambient temperature and

humidity, and possibly challenging the operability of environmentally-sensttive equipment

in the room. The licensee took interim measures to leave one steam trap isolated and to

permanently open a door to the room. The licensee then calculated the impact of a

steam trap failure under this configuration assuming that operators could isolat; the

steam blowdown within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. The calculation (87-E-0026-09, Revision 0) co%ded

that temperature in the room wouid peak at 149.5 degrees F for a brief time, but that the

c steady state temperature would be 134 degrees F. Since the limiting long-term

temperature for the room was 148 degrees F, the licensee concluded that the EFW

system remained operable. The inspectors agreed with the licensee that humidity

resulting from the event would not adversely affect equipment critical to the function of

the EFW system.

This item was opened to track licensee efforts to make modifications to resolve this issue

permanently and to make necessary revisions to related design basis documents. The

licensee also indicated that an assessment of past operability of the EFW room would be

performed.

--

.

! *

-18-

Insoector Followuo

in review of this finding, the licensee determined that the original design of the EFW

steam traps was inadequate for both Units 1 and 2. The safety implications for Unit 2

were mitigated because the steam traps exhausted outside the EFW room. The licensee

decided to modify EFW steam traps on both units: Unit 1 during Refueling Outage 1R14

(Spring 1998) and Unit 2 during Refueling Outage 2R13 (first quarter 1999).

The licensee performed a past operabmty assessment and concluded that the EFW

system was operable in the past considering the room door closed, all traps in operation,

and a 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> operator response to isolate the failed trap.

,

The inspectors reviewed Root Cause Aralysis Report CR C-97-0048, " Unqualified

Steam Trap Lines in the EFW Turbines' Steam Supply Lines." In this document, the

licensee determined that the architect / engineer (A/E) for the design of the plant assumed

that failure of the steam trap lines would not reduce the functional capability of the EFW

systems. However, the A/E had evidently focused on sufficiency of the resulting supply

of steam to the turbine and not on the environmental consequences of the failure.

The inspectors questioned the assumption that operator action to isolate steam would

occur within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of a steam trap failure, an assumption essential to the past operability

status of the system. The licensee stated that an operator surveillance of the room

(checking lube oil flows) occurs by procedure soon after each automatic start of the EFW

system, which would presumably result in identification of the steam trap failure.

However, since no time parameter was specified for this surveillance, it could be '

indefinitely delayed if other complications were to occur. The inspectors asked about the

effect of a response if the failure occurred after this surveillance effort. In this case, since

no remote indication of temperature in the room is available, it did not seem reasonable

to assume that steam isolation within one hour would occur. The licensee stated that the

fire detection system would probably alarm given the amount of steam that would exist in

the room. On one previous occasion, in 1992 (CR 1-92 0361), the deluge valve tripped

open due to an excess amount of steam from the steam trap drain lines. However, on

further discussion with the fire control engineer, the inspectors learned that the fire

detection device in the EFW room is not sensitive to steam and would only possibly

alarm in the event of a condensation buildup on the device. The inspectors determined

e

that the fire detectors were not a reliable indication of a steam leak.

r

The evaluation cf past operability indicated that, with the room door closed, the room

temperature would reach 164 degrees F 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> after the steam trap failed, it seemed

questionable whether an ooerator could enter an anwonment this harsh to pen ~orm the

required valve isolation. In response to the inspectors' concern, the licensee generated

a new action item (Item Number 9) for CR C-97-0048 to address the issue of accessibility

as it pertained to the past operability determination. The licensee recalculated the room

temperature profile using more realistic assumptions, including condensing heat transfer,

and found that the room condition at 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> would be 133 degrees F at a relative

humidity of 57 percent. This corresponded to a wet bulb globe temperature (WBGT) of

121.5 degrees F. At this WBGT, the licensee, based on US Navy

i

1

~ . _ _ _ _ - _ _ _ _ - _ _ _ _ .

_ _ _ _ _ _ _ _ - _ _ _ _ _ _

,

.

19-

Document OPNAVINST 5100.19C, Changa 1, dated May 15,1990, determined that

strenuous work at a maximum duration of 30 minutes could occur in this environment.

The amount of time needed to isolate a failed steam trap would be only several minutes.

The inspectors noted that the shapa of the temperature profile suggested that the

temperature would peak out at something less than 140 degrees F at a relative humidity

of less than 60 percent. This suggested that the room would be fit for the necessary

operntor's actions to take olace and that equipment operability would not be threatened.

Dunng the inspection, the inspectors reviewed Calculation 87 E-0026-09, EFW Pump

Ruom Tempaniture Profiles." This calculation provided an analysis of the heat up of the

EFW puu : u sum!ng various failed op9n steam traps in addition to the normal thermal

load proviued by the EFW pumps and other equipment. The analysis was carried out

with an ANO developad and maintained software package,"RHUR," which calculates

roora heat up from art >ltrary sources. RHUR was p ogrammed in a ' macro' language

executed in a spreadsheet program, SYMPHONY. It was documented as a software

package and was controlled and maintained under the software control program. The

RHUR model devebped for thlS analysis was constructed by substantially modifying the

" macro" statements that make up the RHUR software package.

'

The inspector reviewed the analysis provided in the calculation and determ!ned that the

results of the four cases presented seemed reasonable and conservative for the given

configurations, in response to the NRC concern, the licensee provided additional

supporting analysis in the form of an alternate calculation using the GOTHIC software

program that substantially verified the results presented in Calculation 87-E 0026-09. (

The inspectors considered that the licensee had adequately established thJ past

operability of the EFW room equipment. Based on the less severe conditions of having

the room door removed, the insoectors also considered this in9rmation to support the

licensee'e assessment of current operability However, the inspectors identified a

weakness in the licensee's original response to this issue in that it frJted to document

consideration of the ability of an operator to perform an assumed operation in a harsh

environment. A tecond weakness was the lack of verification of the software model

used to calculate the postulated EFW room thermal transient. Although considered good

enginee% practice, licensee procedt,res did not specifically address this validation.

The licensee was in the process of developing a modification for both units to mitigate

the effects of pressure boundary failures and the blowdown of live steam from steam

traps in the EFW rooms, while preserving adequate condensato removal. Through

discussions, the inspectors learned that the modification w jd reroute steam trap piping

to exhaust outside the EFW room and upgrade the re a be safety related and

seismically qualified. The inspectors determinM 'N modification would resolvo the

hardware concerns associated with this issue.

4

.__ _ _ _ _ _ _ - _ _ _ _ _

0

.

20-

E8.11 (Cloand) Unresolved item 50-313/9720106: Desion Control Weakness

Bsckaround

This issue involved several calculation deficiencies. The examples included calculations

containing plant configuration discrepancies as well as calcult.tions that required

enhancement, updating, or to be superseded. The specific examples were as follows:

  • Calculation 88 E-0086 01,"lE Bulletin 88 04 Review for P7A and P7B Minimum

Flow Evaluation," did not adequately document the effect of two parallel EFW

pumps operating on minimum recirculation.

  • Calculation 92 E 0077-04, " Unit 1 EFW System Pump Performance

Requirements," used an incorrect level in tank T-418 for EFW actuation due to a

loss of offsite power following a tornado.

Calculation 92 E 0021-01," Emergency Nty Cycle and Battery Sizing

Calculation," was not revised to reflect plant modifications that resulted in

changes in the continuous and locked rotor current for EFW Valves CV 2620 and

CV 2627, and a modification that resulted in an additional load due to the reactor

building spray puinps close and trip circuits.

  • Calculation 80-D-1083A42, "EFIC DC Valve Torque Calculation Under Reduced

Voltage Condition," was not superseded as required.

The actions implemented or planned by the licensee included those to correct the

specific examples and to improve design control programs to prevent recurrence.

Insoector Followuo

The inspectors reviewed Licensee information Requests (LIRs) L97 0289 and 0290 as

well as Condition Reports CR C-97-0058 and CR-C 97-0059.

'

LIR L97 289 addressed the failure to updato Battery Loading Calculation 92 E-0021-01,

following iniplementation of Design Change Packages (DCPs) 92-1003 and 93-008. The

licensees's response to the inspection report (letter 1CAN099703, dated September 22,

1997), indicated that this calculation would be superseded before January 15,1998.

F sever, at the time of this inspection, this calculation had already been updated and

(as reviewed by the inspectors and found acceptable, in discussions regarding this

inconsistency, the licensee explained that the oversight resulted from the existence of a

large backlog of dats that had not been entered into the Design Configuration

Information Management System (DCIMS). This condition resulted in a failure to identify

affected calculations when engineers accessed the DCIMS system to perform searches

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ - _ - _ - _ _ _ _ - _ _ _ _ _ __

.

.

21-

based on key words related to a particular modification or calculation revision. The

licensee indicated that this backlog had been eliminated and that current practice would

preclude new backlog formation. The inspectors confirmed that no backlog existed and

that the DCIMS was up to-date at the time of this inspection. In additia, the inspectors

reviewed Memorandum ANO 97 00225 issued to the engineering staff that reinforced the

existing procedures and guidance related to calculation updates for load changes.

The second issue within LIR L97 289 dealt with Calculation 80-D 1083A 02, *EFIC DC

Valve Torque Calculation Under Reduced Voltage Condition" which should have been

identified as superseded. The licensees's response to the inspection report indicated

that this calculation will be superseded before January 15,1998. Discussions with

licensee personnel and review of the applicable procedure, OP 5010-015, " Engineering

Calculations," indicated that clear direction existed to ensure that superseded

calculations are identified, The cause of the specific instance was attributed to a backlog

of data to be entered in the primary tracking tool, DCIMS, that had previously existed. As

discussed above, the inspectors confirmed that no backlog existed at this time of this

inspection.

LIR L9/ 290 addressed Calculations 88 E-0086-01 and 92 E-0077-04, both of which

needed enhancement for various reasons. The licensees's response to the inspection

ecport indicated that these calculations would be revised before March 1,1998.

10 CFR Part 50, Criterion lil, * Design Control," states that measures shall be established

to ensure that applicable requirements and the design basis are correctly translated into

specifications, drawings, procedures, and instructions.

The licensee's failure to properly account for design information in the

Calculations 88 E-0086 01,92 E 0077-04,92 E-002101, and 80-D-1083A-02 was

considered as additional examples of a violation of 10 CFR Part 50, Appendix B,

Criterion 111 (50-313/9721.~1).

The inspectors review of Condition Report CR C 97-0058 indicated that the condition

report dealt with prioritization and completion of the Upper Level Documents (ULD) and

ULD-related discrepancies. The actions taken as a result of the condition report included

determining completion priority and establishing and communicating to the engineering

' organization the philosophy for use of the ULDs. The inspector reviewed the actions

taken on these issues and confirmed that they were appropriate.

The inspectors review of Condition Report CR-C 97 0059 !ndicated that this condition

report dealt with completion of the Design Configuration Documentation (DCD) Project

I and resolution of discrepancies identified during this project. The project was completed

l in December 1994; however, approximately 100 discrepancies remained unresolved.

The discrepancies were originally screened for significance and operability, but this CR

recognized that recently there was greater interest in and higher standards being applied

to design configuration issues, in addition, several other recent CRs have been initiated

to reexamine previously closed discrepancies that were found to have inadequate

resolution by current expectations. The CR-C 97-0059 evaluation established an action

!

_ _ _____,

.

22

to priontize review of the remaining open discrepancies. This action was completed. In

addition, previously closed discrepancies have been reviewed to ensure that they are

adequate. This completed action led to further actions to evaluate 44 previously closed l

items. These subsequent actions were not available for review at the time of this )

inspection. '

In addition to the specific observations and related corrective actions reviewed above,

the inspectors reviewed other condition reports, procedures, guidelines, and

programmatic evaluations that impact the control of calculations. These are listed as

Attachment 2 to this report. Several recent calculations and design change packages

were reviewed to assess the results of ongoing improvement efforts on current

calculation practices. These actions addressed broader issues associated with

calculation processes and control.

The licensee initially identified a concem regarding the adequacy of their calculation

processes in Condition Report CR C 96-0060 initiated in March 1996. The most

significant outgrowth of efforts to resolve this concern led to the formation of a Quality

Action Team (QAT) to study calculation process issues. The team's final report,

published in September 199d, identified a large number of concerns (56) organized into ,

the following broad categories: l

  • Calculation in processing time was too long creating backlogs and delays for

engineering personnel.

  • The DCIMS data base contained inaccurate, incomplete, not up-to-date or

erroneous information.

  • The calculation preparation, revision, and approval process requirements were

not clearly and consistently defined, documented, or understood by engineering

personnel.

t

  • Retrieval of existing calculations was sometimes difficult.

! + Inconsistent interpretation of standards for legibility of calculation documents

l resulted in delays for processing calculations through quality assurance records

l storage.

l

  • Data may be buried within a calculation with its relationship to other processes

not defined,

  • Program engineers were not alwa ys aware when other engineers were revising

,

l calculations that impact their program.

-

In reviewing the QAT action plan, the intpectors determined that the proposed corrective

actions were appropriate and that they r hould provide significant calculation process

improvements when fully implemented in addition, the interim compensatory actions

. .- - - - _ - . - . - - . - - - . - , - - . .

. _ _ -

_ _ . _ . . _ _ _ _ _ _ _

.

.

23-

that were implemented in the short term appeared to be of sufficient quality to reduce the

occurrence of calculation deficiencies.

In addition to reviewing the licensee's action plan, the inspectors reviewed a sample of

approximately 30 calculations generally chosen at random. These are listed in

Attachment 2. The inspectors found that the calculations were thorough, generally clear,

and well documented. Assumptions and other data sources were clearly identified e7d

referenced. The few exceptions were found in some older calculations performed during

original plant design and construction, approximately 20 years ago.

The inspectors focused on the licensee's process for assigning status to calculations.

This included the use of new, pending, as installed, amending, and superseded status

levels. Although the inspectors found the use of the amending status somewhat

confusing and cumbersome, no erroneous cross references were found in the sample

reviewed. For example, there are m limits to the number of calculations that can amend

a given calculation. Nor is there a time limit beyond which amending calculations would

require incorporation. In practice, however, the only calculations found with a large

number of amending calculations were the electricalloading calculations. In this case,

the licensee's practice was to assign a coordinator or owner for these calculations. The

coordinator was responsible for incorporating all amending calculations once each cycle.

The incorporated calculations were then assigned a status of superseded. The

inspectors reviewed and found this to be correctly performed for a recently issued

revision to Calculation 92 E 0021-01. " Emergency Duty Cycle and Battery Sizing

Calculations." In addition, as mentioned above, the licensee instituted a Calculation

Revision Notice (CRN) process that allows minor changes to calculations to be issued

and more easily tracked. This process was designed to reduce the number of amending

calculations to no more than nine in practice, based on a sample review, the inspectors

found no examples with more than two CRNs.

In spite of an apparently comprehensive effort to improve the calculation process, the

inspectors recognized a potential inconsistency in the way the licensee handled the

issue. The licensee's quality assurance team identified a concern related to the

preexistent backt0g in the DCIMS data base that had apparently been the cause of

several NRC-identified discrepancies. In addition, other persistent problems within the

calculation process were identified by the team. However, the licensee did not perform a

sample review of existing calculations to determine whether the DCIMS problem, in

addition to the other identified problems listed above, had created a situation where a

large number of calculations currently in effect may contain technical errors as a result of

these problems. The inspectors considered the lack of review of a sample of

calculations to represent a weakness in the licensee's overall response to the issue.

The inspectors reviewed the capability and use of the DCIMS database. It was a very

useful and powerful tool for searching for needed information concerning calculations,

evaluations, and reports.

_ _

,. . _ _ ._ .__

,

L

.

24

Conclusips

A violation of 10 CFR Part 50, Appendix B, Criteilon lil, was identified conceming

discrepancies identified with four licensee calculations. The lack of a review of existing

calculations to determine if past problems identified by the licensee affected other

calculations of record was identified as a weakness.

E8.12 (CJosed) Insoection Followeo item 50-382/9720107: Licensee's Actions for Revising

the Modification Procedure to Address Field Routed Installations

Background

The NRC identified that the layout configuration of certain installed conduits was different

from that shown on the conduit and cable tray layout drawings. The NRC also identified

that there were no drawings or records of the seismic support details for the installed

conduit and cable tray supports. The licensee stated that this was due to conduits being

field routed.

The NRC noted that conduits attached to the wall of the emergency feedwater pump

room contained redundant cables supported on the same unistrut support. The licensee

stated that the supports were designed to withstand seismic design loads and were

passive. In addition, the licensee stated that redundant trains could be supported from a

common support from a seismic standpoint provided Appendix R and other criteria were

addressed.

The licensee's modification procedure discussed a constructability walkdown involving

the modification engineer, modification supervisor, craft supervisor, and quality engineer,

During discussions, the licensee stated that they would document the decisions arrived

at during the walkdown by including these in the form of work steps in the controlled work

package. The licensee stated that this would include conduit routing and seismic support

details that would be documented as sign-off steps. The need to revise the modification

procedure to address field routed installations was identified as Inspection Followup

Item 50 313/9720107.

Insoector Followuo

The inspectors reviewed the licensee's response to the inspection followup item

documented in Letter 1CAN099703, dated September 22,1997 (response letter to NRC

Inspection Report 50-313/97-201). The inspectors also interviewed licensee personnel.

The inspectors requested that the licensee supply details concerning how the Appendix

R requirements were met for the redundant cables supported on the same unistrut in the

emergency feedwater pump room.

The inspectors rewewed draft Calculation 85-E-0086-1, " Safe Shutdown Capability

Assessment," Revision 3, and found that the turbine driven emergency feedwater pump

cable and the motor driven emergency feedwater pump cable had a 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> fire barrier

installed. In addition, the inspectors found that an NRC exemption was granted for

.- - . - - .

.

.

25-

configurations having less than 20 feet of separation. The inspectors reviewed licensee

Letters 1CAN068706, dated June 24,1987, and 1CAN048708, dated April 22,1987,

which requested the exemption for the cables. The exemption, granted in an NRC letter

dated October 26,1988, contained a stipulation that a 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> fire wrap was necessary in

addition to a fire suppression system. During a walkdown, the inspectors determine)

that there was a fire suppression system in the pump room and that the cable was

wrapped with fire wrap.

The inspectors reviewed the revised Procedure 6030.005, " Control of Modification

Work," Revision 3, Change PC-1. The inspectors noted that the procedure was revised

to include instructions for the development of a single line drawing depleting the types of

supports used, the support spacing, and the conduit layout. The procedure required that

the draw!ag be included with the controlled work package.

E8.13 Ogied) Insoection Followuo item 50 313/97201-08: Licentee's Actions to Perform a

Revised Cable Pullina Calculation Usino Additional Desian Information Obtained from

the Cable Vendor

flitCMIQMDd

The NRC identified that Procedure / Work Plan 6030.112, " Installation of Raceway

Systems," used for the installation of raceways, included a table of conduit bend radil for

manufacturers' standard bends but not for long radius bends. The NRC asked the

licensee which cables required long radius bends as a result of the minimum bending

radius and maximum sidewall pressure restrictions during pulling. The licensee provided

a calculation that compared the cable minimum bending radil to the bend radil of the

conduit that was appropriate for a single cable. The NRC questioned the values for the

redil on the inside surface of the conduit bends as well as the accuracy of the cable

diameters and maximum cable bend radii. The licensee stated that they would obtain

updated cable vendor data to verify the conduit bend dimensions and would revise the

calculation accordingly. The NRC reviewed the preliminary calculation and noted that a

few largo diameter cables would require long radius bends. This item was opened

pending licensee actions to obtain additional design information from the cable vendor in

order to perform a revised cable pulling calculation,

insoector Followuo

The inspectors reviewed the licensee's response to the inspection followup item in

Letter 1CAN099703, dated September 22,1997, and interviewed licensee personnel.

The inspectors also requested a listing of condition reports involving damage to cables

that resulted from cable pulling; however, no such conditions were found.

- -

. - . - - - . - . - .- .- - - - - . - _ -.- --. - . - - - - - -

.

!

'

.

26

The licensee stated that updated cable information would be obtained from cable '

vendors for approximately 10 percent of the cable codes listed in the cable minimum

bend radius review table. The licensee expected to receive this information by mid.

January,1998. The licensee also stated that the updated cable information obtained

would be used to revise the calculation for each of the applicable cable codes. The e

licens*a stated that the cable calculations would be revised by March 1998.

The inspectors determined that the licensee's corrective actions were adequate for the

current closure of this item based on the fact that the condition report search had not _

found any cables damaged by cable pulling and that the actions necessary to revise the

cable code calculations were being tracked and had acceptable completion dates.

E8.14 (Closed) Insoection Followun item 50-313/97201 11: Verification of Calculation Changes

Associated with DC Batteries

Backaround

The NRC identified that Calculation 92 E 0021-04," Battery DOS and 007 Recharge

Time," Revision 0, was not revised to show the reduced charging time resulting from a

change out of the Unit 1200 amp battery chargers with new 400 amp chargers. An

amending calculation,93 D 1010-04, " Recharge Time for D06 and D07 with Changes

per DCP 931010," Revision 0, calculated the revised charging time. This item was

opened pending incorporation of the amending calculation information into the parent

calculation,

insoector Followuo

The inspectors determined that this condition did not represent an actual prob'sm

because the battery recharge times were not required by license conditions and did not

affect battery capacity. In addition, as discussed in Section E8.11 of this report, thers

were no licensee procedures requiring incorporation of amending calculations into the

parent calculation within a specific time period. Based on discussions with the licensee,

the inspectors determined that information provided in amending calculations, but

missing from the parent calculation, should not result in a quality concern because

annotations provided in the parent calculation positively identified the existence of the

amending calculations.

The inspectors verified that amending Calculation 93 D 1010-04 had been incorporated

into Calculation 92 E 002104. The inspectors observed that the revised recharge times

were based on the updated 400 amp recharge capacity.

I '

d

m_ _ - - _ _ . _ . . , ..,,_,_--m =--. - . , _ , _ , - ---,--r-- -- - m. -

-__. .__ . .. . ._ _

.

.

27

E8.15 (Closed) Insoection Followuo item 50 313/97201 12: Review of Current Desion BM!s for

Bvoassina Emergency Diesel Generator (EDG) Protective Trio

Background

For emergency starts of the Unit 1 EDGs, the licensee did not bypass those protective

functions delineated by Regulatory Guide 1.9, " Selection, Design, and Qualification of

Diesel-Generator Units Used as Standby Onsite Electrical Power Systems at Nuclear

Power Plants," to be bypassed under accident conditions. This was because the

licensee was committed to Safety Guide 9, " Selection of Diesel Generator Set Capacity

for Standby Power Supplies," which does not specify protective functions to be

bypassed. The concern was that the licensee's setup could result in a higher probability

of EDG loss during accident conditions. This item was left open pending review by the

NRC program office,

insoector Fougsp

Based on discussions with the NRC program office, the inspectors determined that the

licensee's adherence to Regulatory Guide 1.9 was satisfactory.

E8.16 (Ooen) U.Q[esolved item 50-313/97201 14: Lack of Testina Unit 1 Molded Case Circuit

Breakers

Background

The Updated Final Safety Analysis Report identified in Section 8.3 that the Class 1E

electrical distribution system was designed to meet the requirements of IEEE Standard

3081971, *lEEE Standard Criteria for Class 1E Electric Systems for Nuclear Power

Generating Stations ' Section 6.3 of this standard required periodic testing at scheduled

intervals to demonstrate that components that were not exercised during normal

operation of the station were operable. The standard further stated,'The specific tests

and the frequency at which they are performed depend upon the specific components

installed, their function, their environment, and the fact that they are in the maintenance

program of the unit (s). Illustrative examples of tests are given in Table 2." Table 2 of the

standard identified switchgear and one of the tests identified for illustrative purposes for

that type of component was an overcurrent trip test.

In contrast to these requirements, the licensee did not have a program to perform

periodic overcurrent trip testing of its Unit 1, Class 1E, molded-case circuit breakers.

The licensee developed a position paper that concluded that IEEE 308-1971 was not

applicable to molded-case circuit breakers. This conclusion was based on an

interpretation that Table 2 of the standard identified four tests for 600 V and below

switchgear: operation test, mechanical inspection, overhaul, and overcurrent trip test.

_ __ _

_ - . - - .

- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ______________ _ ___

i

.  :

.

28-

Due to the physical construction of molded caso circuit breakers, mechanicalinspection

and circuit breaker overhaul were not possible. Therefore, the licensee concluded that

the perindic tests in Table 2 were not applicoble to molded-case circuit breakers but were

rather intended for load center switchgear.

The inspectors considered the licensee's interpretation of Table 2 of IEEE 3081971 to

be in error, based on the following points:

  • Table 2 identified illustrative periodic tests for Class 1E components.

.

The identified tests were not an exhaustive or restrictive lists nor was Table 2 i

intended to exclude components for which it was not physically possible to l

perform all of the identified tests.

)

  • The user of the standard was expected to evaluate which of the identified tests

(or others) were appropriate for each component.

As a result of its operating experience assessments for NRC's Information Notices 92 51,

  • Misapplication and inadequate Testing of Molded-Case Circuit Breakers" and 93-64,
  • Periodic Testing and Preventive Maintenance of Molded-Case Circuit Breakers," the

licent,ee initiated a practice of performing electrical testing of molded case circuit

breakers in the receipt inspection process and performing mechanical exercising of the

breakers on a periodic basis. However, they did not implement the practice of periodic  ;

electrical testing. Information Notice 93-64 referred to Electrical Power Research

Institute Report NP 7410," Breaker Maintenance." Volume 3 of this document," Molded

Case Circuit Breakers," recommended electrical testing of molded case circuit breakers

on a 4 to 6 year periodicity.

Prior to the inspection documented in NRC Inspection Report 50-313/97 201, the

licensee performed a self assessment that identified that periodic electrical testing of

molded-case circuit breakers was not performed. The licensee established a task group

to determine if a testing program, replacement program, or a combination of both should

be adopted.

Insoector Followuo

The inspectors conducted interviews with personnel and reviewed the licensee's position

paper on molded-case circuit breaker testing and plans for developing a periodic testing

program for molded-case circuit breakers.

The licensee identified that they performed several activities related to safety related

molded-case circuit breakers to venfy that they will function under design basis

conditions and that the breakers are maintained accordhg to vendor requirements.

,

  • F

>

2g.

These activities included: testing Unit 2 electrical penetration breakers in accordance

with the Technical Specifications, tet, ting all new breakers prior to installation, preventive

maintenance inspection and cleaning of breakers and panels, manual cycling of some

breakers, and performing periodic thermography inspections of 480 V molded case

circuit breakers. The licensee stated that these testing activities have historically

resulted in very low failure rates.

The licensee informed the inspectors that they had undertaken a project to develop a

periodic electrical testing program for molded case circuit breakers. Specifically, the

licensee stated that a program would be developed to test the Unit 1 containment

electrical penetration breakers and the program would be implemented in the refueling

outage scheduled for the spring of 1998. At the time of the inspection, the licensee had

identified a sample population of 64 molded-case circuit breakers for inclusion in the

program, of which, approximately 12 wcre scheduled for testing in the next refueling

outage. Additionally, the licensee stated that it would categorize the remaining

safety related Unit i breakers by risk significance and develop and begin implementation

of a testing program by the end of 1998. With respect to Unit 2, the licensee identified

that safety related molded-case circuit breakers that were not included in the Technical-

Specification-required testing program would be evaluated for risk significance and a

testing program would be developed and implemented by the Unit 2 refueling outage

scheduled in 1999.

Based upon the previous record of satisfactory Technical Specification-required electrical

testing experience of Unit 2 molded-case circuit breakers and other maintenance and

testing activities the licensee has implemented, the inspectors did not consider the

licensee's lack of a periodic testing program for Unit 1 molded-case circuit breakers an

immediate safety concern. However, the licensee's practices will be reviewed further

with the NRC's program office to determine if the licensee's reference to IEEE 308-1971

in its Updated Final Safety Analysis Report imposed a regulatory requirement to

implement an electrical testing program for molded-case circuit breakers. This

unresolved item was left open pending review of this issue by the NRC program office.

E8.17 (Closed) Unresolved item 50-313/97202-15: Lack of includino all Safetv-Related Fuses

in Proce&dC

BacharWad

The NRC identified that the licensee had not adequately resolved previous concerns

re;ated to incorrect electrical fuse installations. The licensee had established a like for-

like replacement policy for installed fuses but had physically verified only 4 percent of the

fuses in Unit 1 to be correct in all aspects. The fuse control procedure required an

engineering evaluation only for blown fuses or when replacement fuses were different

from those installed. All other 3pplications involved a like for like replacement without an

engineering review. Under these conditions, an existing incorrect fuse would be

replaced with a like fuse. The NRC considered the like-for like fuse replacement policy

to be inappropriate considering the small percentage of fuses validated.

_ _

- . _ _ _. _ _ _ _ _._ _ _ _ _ _ _ _ _ . ._ _ _ _ _ _ _ ._ _

.

,

- 30-

Insoector Followup

In response to the NRC finding, the licensee proposed to add the following DC

distribution equipment to the fuse control program by June 30,1998: D01, D02, D15,

D16, and D17 for Unit i and 2001,2002,2D26,2D27,2D41,2D42,2D51, and 2D52 for

Unit 2. Also, as a long term corrective action, the licensee stated that whenever a design

change was r ade to a safety related circuit protected by a fuse, a review of tha fuse list

would be performed by engineering to verify, correct, or add fuses to the procedure as

necessary.

>

The licensee reviewed their condition report database for fuse-related discrepancies

occurring since January 1,1993. Seven condition reports during this period addressed

wrong size or type of fuse. Only one of these condition reports affected Unit 1, and this

, fuse was installed in a nonsafety related circuit. One was in a nonsafety circuit common

to both units and five affected Unit 2. Of these five, only three affected safety related

circuits. None affected circuit operability. Based on these facts, the licensee concluded

that the fuse control program was being effectively managed. The inspectors determined

that it was unlikely that a pervasive fuse control problem existed and, therefore, did not

consider the matter to represent a safety concern.

E8.18 (Closed) Unresolved item 50-313/97201-16: FSAR Disneoancies

Backaround

The NRC identified five discrepancies in the license's FSAR, mostly involving

, Table 7-11 A, "R.G.1.97 Post Accident Monitoring Variables." The discrepancies ~

involved inconsistencies between the table and design documents concerning instrument

ranges and display configurations. One additional discrepancy concerned a note in

FSAR Section 14.2.2.1.3.1 stating that both steam generators would be isolated in the

, event of a steamline break; whereas, in actuality, only one steam generator would be

isolated. i

Insoector Followun

! Prior to the identification of these discrepancies the licensee was in the midst of a

comprehensive FSAR review for both units. This program was described to the NRC in

Letter CNRO 97/00010 "EOl Licensing Basis Assessment and UFSAR Review

Initiatives," dated May 7,1997. The licensee stated that this effort would resolve the

, generic concerns iaised by this item since this review effort would identify the same

types of errors discovered by the NRC. The specific errors were to be reviewed and

_

corrected using the ticensing document change process. These corrections were to be ,

made effective in the 1998 submittal of the ANO Unit 1 FSAR.

The inspectors reviewed Letter CNRO-97/00010 and noted that it referred to a generic

review of the Unit 1 and Unit 2 FSAR for accuracy. The inspectors reviewed a document

entitled, " Safety Analysis Report Upgrade Project," that explained the scope of this effort,

currently scheduled for completion in July 1998. Based on review of this material and

,

,, ,-,s.v ., ,_r.- --

..,y, ,-- -y , . w, - - - ,, -, -- - - , - __. , , ,,--- ---,-

.

.

-31-

discussions with licensee personnel, the inspectors concluded that the project as

pirnned would resolve the generic concerns related to this issue. At the time of this

inswa ine licensee was approximately 50 percent complete with this project and had

identified 895 potential discrepancies. Of these,391 vea strictly editorial, leaving 504

items having potential significance. However, the licensee stated that many items may

subsequently be deterrnined not to be FSAR errors since the reviewers have been

instructed to docuinent everything that might be a discrepancy.

The inspectors reviewed licensing Information Requests L97-0213, L97 0326, and

L97 0310 and confirmed that the specific errors identified by the NRC were scheduled to

be corrected in the next FSAR update.

The inspectors determined that the licensee's efforts were sufficient to correct the

specific and generic concerns associated with this inspection finding.

10 CFR 50.71(e) states that the updated FSAR shall be revised to include the effects of

all changes made to the facility or procedures as described in the FSAR. The licensee's

failure to properly update the FSAR regarding the five discrepancies described above

was considered a violation of 10 CFR 50.71(e). However, because of the favorable

progress being made by the licensee's FSAR review team and the fact that a description

of this project has been placed on the docket, and the NRC's view that the discrepancies

identified by the NRC likely woule. have been identified by the licensee's program, the

NRC is exercising discretion in accordance with Section Vll.B.3 of the Enforcement

Policy and is not taking formal enforcement action for this finding.

E8.19 (Closed) Unresolvnd item 50-313/97201-17: Ineffective Resolution of Previous

Corrective Actions

Backaround

During a plant walkdown, the NRC noted that two in-parallel check valves located in the

steam supply piping to the turbine-driven emergency feedwater pump (P7A) were

continually chattering because of steam leakage through downstream solenoid valves.

The NRC's concern was that wear from this mechanical action could eventually result in

failure of the check valves to perform their reverse seating function,

insoector FollQEuD

The Wspectors were informed that leakage through the solenoid valves had been a

problem at ANO since at least 1988 when CR 1-88 0015 identified this problem. The

licensee had performed maint3 nance on the valves on several occasions, but the

leakage problem persisted. At some point, the licensee determined that the small

amount of leakage was not detrimental to the system, since the check valves were not

experiencing abnormal wear and the heating of the downstream piping was considered

beneficial in reducing the potential for condensate-induced turbine overspeed events.

1 Then, the licensee deferred any plan for modification. However, in October 1996,

the licensee identified accelerated wearing of elastomeric surfaces on one of the

.

.

32-

two solenoid valves in the EFW steam lines. As documented in Condition

Report CR 196 0569, electricians found the O-ring on the operator of Solenoid

Valve SV 2663 to be hard and brittle following its installation on July 14,1992. The

licensee's equipment qualification program stated that this 0 ring was qualified for

60 years of service but did not consider seat leakage to be a normal condition for the

establishment of qualified life. The licensee determined that the solenoid valve remained

operable with the damaged 0-ring. Based on the O ring failure, the qualified life of the

O rings was being revised to be from 2 to 8 years depending on the service condition.

While the licensee considered a modification to the solenoid valves, they were also

considering installation of motor-operated globe valves and relecating the valveb closer

to the turbine.

The check valves performed a safety related function by isolating the piping from a

faulted steam generator. The licensee stated that one of these valves would be

disassembled and inspected during the next refueling outage in the Spring of 1998. In

February 1995, the other check valve was inspected and found structurally sound with ,

slight indications of scoring. During past tests of the check valve's reverse seating

capability, the results have been acceptable.

The inspectors were informed that the check valves had chattered since their installation

in 1986, even before the solenoid valves began to leak, because of the presence of a

drain / strainer orifice that creates a constant steam demand of 1600 pounds-mass per

hour. Since the check valves require iOOO pounds-mass per hour to remain constantly

open, the solenoid valve leakage couid actually reduce the chattering if it were of

sufficient magnitude. However, the current chatter rate of the check valves was 10 taps

per second, indicating that the solenoid leakage was well less than 3400 pounds mass

per hour.

The inspectors determined that the licensee had adequately ensured that EFW system

operabililty had not been compromised by the solenoid leakage problem. The inspectors

recognized that the check valve chattering was partNily independent of the leakage

problem and that the leakage had been observed tc to beneficial for preventing

condensation in the EFW turbine steam supply line Gese facts mitigated any safety

concerns re' < ed to this condition.

E8.20 (Closed) Unresolved item 50-313/97201-18: Lack of Seismic Sucoort of OTSG Pressure

Transmitters

(Closed) Unresolved item 50-313/97201-19: Lack of Desian Basis for Sucoort of Steam

Generator Instrument Sensina Lines

Backaround

The NRC observed that a clip designed to restrain the isolation valve and sensing line for

Steam Generator Pressure Transmitter PT 2667B was missing. The concern was that

the line could fail during a seismic event, potentially affecting the operability of the steam

_ _ _ _ _ _ _ _ _ .

.

.

33-

generator pressure controlloop. The NRC also observed that the corresponding clips on

the three other redundant pressure instrument channels in the same vicinity were loose.

The licensee initiated Condition Report CR 197-0058 to determine the operability status

and potential generic concerns. Before the end of the inspection, the licensee reported

to the NRC that the as found configuration was operable and that a walkdown of other

instrument tubing restraints indicated that the mounting clip problem was not widespread.

In the Unit 1 EFW pump room, the NRC found a 10-foot unsupported span of instrument

tubing for a pressure tranomitter (PT/PI 2811). This is a safety related sensing line that

monitors the discharge pressure of the turbine driven emergency feedwater pump. A

m. mum unsupported span of 2.5 feet was generally specified in the seismic drawing

details. The licensee issued Condition Report CR 107-0074 and, subsequently,

determined that the as-found configuration was operable. The licensee determined that

a generic issue existed and elevated CR 197-0074 to a significant condition, requiring a

root cause determination. The licensee performed a detailed walkdown of the EFW,

Decay Heat / Low Pressure injection, and High Pressure injection systems and identified

the following conditions;

Several installations were undocumented or unanalyzed, such as tubing supports

exceeding the 30-inch unsupported span and use of nonstandard instrument

supports.

Lack of design bases or criteria for determining instrument line slopes.

Drawing discrepancies between drawings and the as built condition.

Missing or incorrect tags on instrument valves.

Based on these findings, the licensee expanded the scope to include other nystems. For

example, Condition Report CR-197 0087 was later opened to document insidequately

supported emergency diesel generator instrument lines. In all,37 instrument

installations were found in Unit 1 that did not conform to either seismic or instrument

installation requirements as defined in the standard drawing details. Design engineering

deiermined that none of the 37 discrepancies created an inoperable condition.

Insoector Followuo

The inspectors reviewed Root Cause Analysis Report CR 197-0074," Instrument Tubing

not Mounted in Accordance with Seismic Design Requirements," dated March 24,1997.

The licensee identified the following root causes for this event:

(1) Inadeouate_trainina: Personnel involved in the installation and maintenance of

instrument tubing were not adequately trained or sensitized to seismic and

configurations requirements.

_ _ _ _ - _ _ _ _

. _ . . . ._. - - -- .. . .. -

.

.

34-

(2) Work oractics Personnelinstalling and maintaining instrument tubing either did

not use required configuration documentation during work activities or did not

follow these documents correctly.

(3) Desian confiaura@n and analygls: Design documentation and prints were

inadequate or not easily accessible.

The licensee walked down 40 instrument installations in Unit 2 and found that the quality

of the installations was much better than in Unit 1. Only four of the installations

inspected had notable deficiencies involving damaged mounting clips or brackets

resulting from removal and reinstallation to support work on nearby equipment.

The licensee performed the following corrective actions: (1) the individual discrepancies

were repaired as necessary, (2) a letter was issued on April 4,1997, to site groups

reiterating instrument tubing requirements, and (3) design engineering reconfirmed the

initial operability assessments fiom the tubing walkdowns. Additionallong term actions

included the following: (1) develop a scope for additional walkdowns, (2) determine

whether existing seismic tubing mounting requirements can be relaxed, (3) evaluate

enhancements to design drawings associated with tubing, (4) evaluate the work planning

processes that involve instrument tubing or the removal of tubing for interference

purposes, and (5) provide training on seismic and configuration requirements for

instrument tubing.

The inspectors discussed the status of the proposed long term actions discussed above

with the licensee. A calculation was in the final stages of review that redefined the

acceptable support span lengths for various configurations. Once this calculation was

complete, the licensee was planning to perform additional walkdowns of those safety-

related components in Unit 1 that were potentially susceptible to instrument tubing

discrepancies. This effort was to be completed by May 1998. The licensee was also

planning to provide personnel training and to clarify drawings that contained confusing

tubing support information.

l The inspectors determined that the licensee's completed and proposed corrective

actions (each of which were assigned completion due dates) were sufficient to address

the issues raised by this item and considered the overall response to be strong,

particularly considering that none of the identified discrepancies had been evaluated to

affect operability.

10 CFR Part 50, Appendix B, Criterion 111, " Design Control," states that the design control

measures shall provide for verifying or checking the adequacy of the design.

The licensee's failure to provide measures to ensure the correct translation of seismic

design requirements to instrument tubing installations and the maintenance of this

configuration during plant operations in Unit 1 was identified as a third example of a

violation of 10 CFR Part 50, Appendix B, Criterion ill (50-313/9721-02).

!

1 -. _-. _ _

.

i

35-

Conclusions

The licensee's failure to provide measures to ensure the correct translation of seismic

design requirements to instrument tubing installations and the maintenance of this

configuration during plant operations in Unit 1 was identified as a violation.

E8.21 (Gosed) Unresolygd item 50-313/9720120: Inadeauate Work Plan for the Controlof

Post-maintenance Testina

Backomund

The NRC identified a misaligned limit switch on Valve CV-4804, rector building vent.

The misalignment caused the actuator cam to drag on the limit switch arm toward the

end of the valve stroke instead of riding on the roller bearing. Repeated operation in this

configuration could have resulted in a faulty valve position indication. Although this

particular application was not safety related, there existed a concern that other safety-

related applications may have a similar misalignment problem.

The licensee recognized that the post modification plan and job order for this valve

(00954697) did not include a post maintenance test to verify proper operation of the limit

switch cam assembly. The licensee reopened this job order and accompanying work

plan with the intent to add steps to reconfigure and test the assembly. One other valve in

Unit 1 (CV-1845, quench tank sample valve) had a similar mounting design, and a similar

revision was scheduled for its work plan. The licensee performed a review for other

similar limit switch configurations but did not identify any other of these configurations in

either Units 1 or 2.

Insoector Followup

The inspectors reviewed the work plan revisions discussed above and observed that

steps were added to verify that the limit switch rollers were in proper contact with the

cams. The licensee considered that this verification in the work plan coupled with the

existing post maintenance test that ver;fies smooth motion and proper valve position light

sequencing would be sufficient to ensure that the condition would not recur (i.e., no

revision to the post modification plan was considered necessary). The inspectors

observed that the post maintenance testing problem,in this instance, did not affect

safety related equipment and determined that the licensee had adequately addressed

the specific and generic implications of this finding.

E8.22 (Closed) Unresolved item 50-313/972121: Inadeauate 50.59 Review Associated v@

the Removal of the Unit 1 BWST Vacuum Breaker and Followuo Corrective Action

,

Backaround

This item hvolved an inadequate 10 CFR 50.59 safety evaluation performed by the

licensee for a temporary covering placed over the borated water storage tank vacuum

relief valve flange. The evaluation was inadequate, because it did not consider the air

_

'

.. .. . .. ..

.

. . .

______ ____________

.

.

36-

flow restricting effects of a mesh screen that was an integral part of the temporary

covering. The following is a summary of key events:

  • On December 4,1996, while Unit 1 was at full power, the iicensee removed the

8-inch diameter vacuum relief valve from the borated water storage tank for a

surveillance test. When the valve was removed, the licensee installed a white

plastic bag over the 8 inch diameter open tank flange to act as a foreign material

exclusion (FME) cover. Two slits, each approximately 8 inches long, were cut in

the plastic cover to allow air flow. This work was done using Job Order

00952943. The job order stated that if suction for the tank was necessary, a

supplemental vent path was provided by a 4 inch tank overflow line that was

always open during plant operations.

  • On December 5,1996, the system engineer observed that the tank flange was

covered with what he believed to be a solid FME cover and initiated Condition

Report 106 0663 to document the potentialinoperability of the borated water

storage tank. Subsequently, the system engineer determined that the tank was

operable since the FME cover contained two slits that would permit tank pressure

and vacuum relief. The plastic bag was installed for approximately 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

The licensee subsequently ter*ved the plastic bag and installed a blank flange

on the tank flange with a 1 inch gap between the flange and tank flange to permit

pressure and vacuum relief. Around the 1 inch opening, a mesh screen was

placed to prevent foreign material introduction into the tank.

  • Condition Report 196-0663 also documented the discovery of a through wall

crack on the inlet flange of the removed vacuum relief valve and assessed the

operability of the tank. The operability assessment did not address tank

operability while the plastic bag was installed as an FME cover. The assessment

only addressed the flange and 1 inch gap and stated that the blank flange with

the 1 inch air gap installed over the tank flange would provide sufficient air

movement to vent the tank during rapid drain downs. At this time, any air flow

restriction from the installed mesh screen was not considered,

.

  • On December 12,1996, the gap dimension was changed from 1 to 3-inches

under Job Order 00952943. This was done to increase the venting capacity

based on engineering judgement that the 1 inch gap may have been marginal.

  • On January 22,1997, Significant Condition Report 197-0019 was initiated and

identified that a safety evaluation was not performed for se plastic bag installed

over the tank flange for approximately 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. In addition, the condition report

identified that the procedure for testing the valve (Procedure 1306.034, " Testing

of Unit 1 Pressure Vacuum Relief Valve PSV 1617, PSV 2423, and PSV 1412,"

Revision 2) did not allow removal of the vacuum relief valve during power

._ _ __ __ _ __- _ _ _ _.. _ __ _ _ _ _ _ _ _ . _ . . _ . _ _ _ _

  • -

.

.

37 -

. operations and that the safety evaluallon for the procedure did not include

l consideration for valve removal at powcr. The condition report included an _

>

operability assessment for the tank when the plastic t sg was installed on the tank

i flange. The licensee sta;ed that the tank was operable based on engineering

judgerrent that the plastic bag would break before an internal vacuum would

'

,

cause damage to the tank.

'

+ On February 3,1997, the licensee issued Condition Report CR 197-0031 to

address the previously made assumption that the 4-inch overflow line would, by

itself, provide sufficient vacuum relief. The conclusion of this effort was that,

< contrary to prior judgement, the 4 inch line was not large enough to prevent the

formation of an internal vacuum in the tank during rapid draindown. .

  • On February 11,1997, the licensee prepared Temporary Alteration 971-001 that

documented the removal of the vacuum relief valve and the installation of the

i blank flange with a 3 inch gap over the tank flange. The temporary alteration was

prepared approximately 2 months after the actualinstallation. Temporary

alterations were not issued for the previous two temporary coverings (plastic bag

and 1 inch gap flange connection). Temporary Alteration 971001, which >

contained the first 10 CFR 50.59 evaluation performed in association with these .

events, concluded that the borated water storage tank was operable with the  ;

3 inch gap blank flange installation. j

'

  • On March 4,1997, in response to concerns from the NRC, Condition Report 1

,

96-0663 was amended to incluc's a discussion of the air flow blockage caused by

the mesh screen over the 1 inch gap. After considering the screen restriction, the -

licensee concluded that the borated water storage tank was still operable under

this configuration.

,

insoector FolloWMD

The inspectors reviewed the documents referenced above and had discussions with

licensee personnel, in review of the facts, the inspectors identified several concerns in

addition to those addressed in the previous inspection, as discussed below. <

Procedure issu_es

'

The inspectors found, in agreement with Significant Condition Report CR-197 0019, that

'

the licensee's use of Procedure 1306.034 during power operations was improper. This

procedure was originally written for use during refueling outage conditions as indicated  ;

by paragraph 4.3.1 of the procedure, which stated that inspection of the valve would be

performed each refueling outage. The 10 CFR 50.59 evaluation for the procedure did

4

not address performing maintenance or testing of the vacuum relief valve while the plant

was at power. Also, the procedure did not address temporary provWons for vacuum

relief, which would be an essential element for online maintenance of the vacuum relief

valve. Although one of the corrective actions from the condition report was for the

,

,--v--e - - ,,,,, y ,-e , , , . ,-, ~ . ~ , - , ., , - ,,-r , - , , - , , - - , ,yw --e , ,e~ n.- -,--a, n- -rm.,.

.

.

38-

licensee to revise Procedure 1300.034 to allow valve removal and maintenance of the

VMye while at power, this revision had not been corr,pleted at the time of this inspection.

10 CFR Pr.rt 50, Appendix B, C6terion V, require', thst activities affecting quality.shall be

oresenbod by docum6ntsd procedures of a type appropriate to the circumstances and

shall be accomplished !,1 accordance with these procedures. The licensee's failure to

comply with the plant condition prerequisites of Procedure 1306.034 was identified as an

apparchtTiolent.,n (50 341iW21-03).

Desian Controlinna

The inspectors determined that the licensee had performed temporary changes to the

borated water storage tank without the use of proper design control measures. The

licensee removed the tank vacuum relief valve and sequentially installed three temporary

covering configurations, each of which constituted a change to a safety related

con'oonent, without use of the temporary alteration procedure (a temporary alteration

wat eventually prepared for t,1e third configuration, but this was issut j approximately 2

months after installation).

The inspectors reviewed Procedure 1000.028," Control of Temporary Alterations,"

Revision 20. Attachment i to this procedure listed the criteria for requiring a temporary

alteration, which included a situation where a design change was made to safety-related

equipment without the removal of the equipment from service. Using this criteria, the -

inspectors concluded that, because the borated water storage tank was not taken out of

service for these evolutions, a temporary alteration was required. The use of a

temporary alteration was intended to ensure that plant changes were subjected to design

control measures commensurate with the original design.

10 CFR Part 50, Appendix B, Criterion til, requires those design changes, including field

changes, shall be subject to design control measures commensurate with those applied

to the original design. The licensee's failure to provide design control measures

<

commensurate with initial design for three temporary changes made to the borated water

storage tank vacuum relief valve was identified as an apparent violation

(50-313/9721 04).

Operability issues

The plastic bag was attached to the tank flange in a manner such that the 8-inch

'

ventilation slits may not have been pulled into the opening during an event (e.g., a safety

injection event due to a large nreak loss of coolant accident that would cause a rapid

tank draindow). Therefore, the venting function of the line could have been defeated.

This would have left the 4-inch overflow line as the only venting source for the tank,

which, according to the licensee's calculations, was not adequately sized to prevent a

vacuum from forming in the tank during a rapid tank draindown. Consequently, the

inspectors questioned the operability of the borated water storage tank during the 30

-__-

.

.

t 39

hours that the plastic bag was attached to the vent flange. Because of a lack of

redundancy, an inoperable borated water storage tank would render the entire

emergency core cooling system inoperable. The licensee performed several tests and

calculations in an attempt to support the original engineering judgement that the tank

was operable in this configuration. Following the onsite inspection period; the licensee

provided the following evaluations and calculations for NRC review;

from Don Phillips to Charles Tyrone, dated November 25,1997.

  • Calculation 97 E-02100 01, "BWST Venting Capability Through 4 inch Overflow,"

Revision 0, December 3,1997.

  • Calculation 97 E 021101, "BWST Level Analysis," Revision 1, December 4,

1997.

.

Calculation 97 E-0209-01," Evaluation of BWST Tank T 3 for Potential Vacuum

Load in Support of Operability Determination associated with CR-196-0663,"

Revision 0, December 8,1997.

The licensee concluded that borated water storage tank was operable during the period

of time the plastic bag was attached to the vacuum relief valve flanga. However, the

analyses clearly demonstrated that the borated water storage tank was in a degraded I

condition and could have plastically deformed above the water level in the tank in the

event of a large or medium break loss of coolant accident. This deformation, according

to the licensee's evaluation, would not have prevented the operation of the emergency

core cooling system as designed. Also, the effect of the internal vacuum on the tank

level instrumentation could have caused an early transfer of emergency core cooling

water system suction from the borated water storage tank to the reactor building sump.

This early transfer would have reduced the net positive suction head margins for the

emergency core cooling system pumps. The licensee determined that this would not

have rendered any of these pumps inoperable.

'

10_CFR 50 59 Issues

The inspectors determined that the licer,see had failed to evaluate whether temporary

changes made to the borated water storage tank had created an unreviewed safety

- question.

10 CFR 60.59, " Changes, Tests and Experiments," permits the licensee to make

changes to the facility and to procedures as described in the Safety Analysis Report

without prior Commission approval provided the change does not involve a change to the

Technical Specification and does not involve an unreviewed safety question. A

!

.

.

-4 0-

proposed change, test, or experiment shall be deemed to involve an unreviewed safety

question if a possibility for an accident or malfunction of a different type than any

evaluated previously in the safety analysis report may be created. The licensee shall

maintain records of changes in the facility, and these records must include a written

safety evaluation that provid6s the bases for the determination that the change does not

I involve an unreviewed safety question.

The inspectors identified the following two examples where the licensee made changes

to the borated water atorage tarik vacuum relief line without adequately eva!uating

whether an unreview6d safety question existed:

  • The licensee reinoved the existing vacuum relief valve and covered the tank

flange with a plaatic bag taped to the tank. In the absence of a safety evaluation,

the licensee used engineering judgement to consider the tank operable under this

configuration. However, when questioned, the licensee had to perform extensive

testing and analysis beicte concluding that the original engineering assumption

was correct and that the tank was operable. The installation of the plastic bag

appeared to create the possibility for an accident or a malfunction of a different

type than any evaluated previously in the Safety Analysis Report and may have

created an unreviewed safety question.

  • The licensee installed a blind flange separated by a 1 inch gap from the tank

flange and installed a foreign material exclusion screen over the gap. The

unreviewed safety question evaluation of this configuration failed to consider the

air flow restriction created by the foreign material exclusion screen.

The failure to properly determine whether an unreviewed safety question existed as

t

required by 10 CFR 50.59 was identified as an apparent violation (50-313/9721-05).

Conclusion

Three apparent violations were identified associated with temporary coverings placed

over the borated water storage tank vacuum relief valve flange, when this valve was

removed on December 4,1996, for testing and maintenance. The apparent violations

involved the failure to perform proper safety evaluations as described in 10 CFR 50.b9,

the failure to perform the vacuum relief valve testing under the plant conditions as

prescribed in the test procedure in accordance with the requirements of 10 CFR Part 50,

Appendix B, Criterion V, and the failure to utilize the correct design control processes

(temporary alterations) for the temporary cover configurations placed over the valve

flange in accordance with 10 CFR Part 50, Appendix B, Criterion Ill.

,. .. . . . .. .

.

..

.

-o

-_. . _. - . . _ - . ---- - - -

0

0

41-

E8.23 (Cloigd) Unresglyed item 50-313/9720122: Revised Calculations Associated with

BWST Vonexing and Pumo NPSH

Background

The licensee prepared an engineering report,93 R 1002-01, "ANO-1 BWST Outlet

Vortex Suppressor," dated February 5,1993, to examine the potential for vortexing in the

BWST resulting in a loss of net positive suction head (NPSH) for the emergency core

cooling pumps. The conclusion of the report was that the ECCS pumps would have

sufficient NPSH. Within this report, the licensee identified that it had failed to consider

the effect of instrument error in the vortexing calculation. This meant that the actual level

in the tank at the time of switchover from the BWST injection mode to the recirculation

mode may have been less than the nominal value, bringing the hydrodynamic system

closer to a state of cavitation and air entrainment than had been originally assumed. The

licensee issued Condition Report CR 197-0039 to investigate this condition. Within this

report, the licensee concluded that the ECCS system would have remained operable.

The licensee concluded that only the high pressure injection pumps would be susceptible

to an NPSH problem but only at low tank levels near the switchover point to the

recirculation mode. At this time in the accident, the high pressure injection (HPI) pumps

could be shut down because the low pressure injection pumps alone could provide

adequate core cooling. Within CR 197-0039, the licensee also was to complete

Revision 1 to Engineering Report 93 R 1002 01 and to determine whether other

calculations may have been affected by a similar failure to consider instrument error.

Insoector Followup

The inspectors reviewed the documents listed above and discussed the issue with

licensee engineers. The inspectors determin. d that this instrument error was only

reflected in the vortexing calculation and did not affect actualinstrument readings.

10 CFR Part 50, Criterion lil, " Design Control," states that the design control measures

, shall provide for verifying or checking the adequacy of design, such as by the

l performance of design reviews.

The licensee's failure to check properly the adequacy of Engineering

Report 93 R 1002-01 was identified as a fourth example of a violation of 10 CFR Part 50,

Appendix B, Criterion lli (50 313/972102).

Conclusioni

The licensee's failure to check the adequacy of an engineering report properly that failed

to account for instrument error in a calculation of vortexing in the borated water storage

tank was identified as a violation.

1

_ _ -.

.

.

l -4 2-

E8.24 [Gosed) Unresolved item 50 313/97202 23: InadtSuate 10 CFR 50.59 Evaluation

6110 dated With BWST Releastts

Background

This issue involved a problem witi 10 CFR 50.59 safety evaluation performed for

Temporary Alteration 97-1001, whi n is discussed in Section E8.23 of this report. In

assessing the potential post loss of coolant accident (LOCA) radioactive release through

the 3 inch gap foreign material exclusion (FME) covedag on the flange of the borated

water storage tank (BWST) vent, the licensee addressed only offsite exposure and did

not address control room exposure, which could ba considerably more significant. Also,

the safety evaluation did not refer to the licensee's response to information Notice 9156,

  • Potential Radioactivity Leakage to Tank Vented to Atmosphere "

Insoector Fe20Wup

The licensee revised the 10 CFR 50.59 evaluation for Temporary Alteration 971-001 to

include a discussion of control room dose resulting from potential backleakage to the

BWST. In the evaluation, the licensee stated that no accident consequence analysis

takes credit for holdup or filtering of radioactive releases to the BWST, and, therefore,

back leakage to the BWST is beyond the licensing basis. Based on recent test results of

the BWST supply and return valves, the licensee stated (in the revised safety evaluation)

that little or no backleakage would be expected to occur post LOCA. Consequently, the

licensee determined that there would be no change to the estimated control room

dosage as a result of the temporary alteration.

The licensee reviewed its response to information Notice 9156 and determined that the

conclusions reached as a result of Temporary Alteration 97-1001 were not affected by

this iirmation notice.

The inspectors considered the lack of reference to control room dose in the original

10 CFR 50.59 evaluation to be an oversight, but observed that two mitigating factors

existed. First, the original evaluation did not quantify a release rate based on the

assumption that the release would be negligible. Had the release been quantifiable, an

assessment of control room dose would have been necessary. Also, the fact ' hat no

credit was taken in the licensee's accident analysis for containment of BWST radioactive

leakage relegated the issue to a beyond-licensing basis status, The inspectors

considered the licensee's response to this issue to be adequato.

.

.

.

-43

IV. PlanLSunpart

1

F2 Status of Fire Protection Facilities and Equipment

(

a. Insoection Scooe (92903)

During a walkdown of the Unit i emergency feedwater system pump room, which was

performed in support of the review of various items discussed in Section E, the

inspectors inspected the condition of the electrical cable fire barrier material,

b. Qhstryations and Findings

The inspectors identified a deficiency in the fire wrap for Conduit EJ2029, which provided

protection for the control circuitry for the turbine-driven emergency feedwater pump. On

a vertical run of the conduit, a collar joining two sections of fire wrap had loosened and

slid down. This resulted in about a 2 inch portion of the conduit being exposed.

The inspectors reported the condition to the licensee and showed the deficiency to a fire

protection engineer and an operator. The licensee agreed that the as-found condition

was unacceptable and immediately declared the fire barrier inoperable. In accordance

with the requirements of its fire protection program, the licensee verified the operability of

smoke detection equipment and control room alarm capability and established an hourly

fire watch. Condition Report 197-0313 was initiated to document the item and Job

Request 928623 was initiated to repair the fire wrap.

The inspectors asked the licensee whether there was a program for inspecting fire

barriers and whether the fire wrap in the emergency feedwater pump room was included

within the scope of the program. The licendee provided the inspectors with

Procedure 1307.062, * Unit 1,1 Hour Cable Fire Wrap Inspection," Revision 0. The

inspectors reviewed the procedure, discussed fire wrap inspection techniques and the

process of dispositioning inspection observations with licensee personnel, and verified

that inspection of the pump room was included within the scope of the procedure. The

inspection of the sub; set ' ire wrap was last performed with satisfactory results in July

1997. The procedure was required to be performed every 6 months. At the time of the

inspection, no explanation was available for the cause of the deficiency. The licensee

determined that a noncompliance did not exist, because the surveillance interval had not

been exceeded and the damage could reasonably be assumed to have occurred

following the most recent inspection.

The inspectors considered the licensee's actons on this matter to have been

appropriate,

I

O

e i

+44 * r

'

c. Conclusions

The inspectors identified a fire barrier deficiency and the licensee took prompt

compensatory actions as required.

V. ManSment Meetings

XI Exit Meeting Summary

The inspectors presented the inspection resu'ts to members of licensee management by

telephone on January 6,1998. -The licensee acknowledged the findings presented.

During this meeting, the licensee stated that it will expand its definition of margin of

safety as it pertains to the performance of safety evaluations performed under

10 CFR 50.59. This issue is further discussed in Section E2.1 of this report. i

The inspectors asked the licensee whether any materials examined during the inspection  !

should be considered proprietary. The licensee sta..J that one document reviewed by

the inspectors contained proprietary information. The proprietary information from this

document was not discussed within this inspection report.

,

4

1

. -.. , - , . . , . ._ ._ . . - ,m.._,

.

i

l

.

ATTACHMEliT 1

SUPPLEMENTAL INFORMATION

PARTIAL LIST OF PERSONS CONTACTED

Licemen

G. Ashley, Licensing SupeMsor

E. Blackard, Design Engineer

M. Cooper, Licensing Specialist

G. Dobbs, Electrical and instrumentation and Control Supervisor

J. Howell, Design Engineer

R. Hutchinson, Vice President, Arkanshs Nuclear One

R. Lane, Director, Design Engineering

D. Mims, Licensing Director

D. Phillips, Nuclear Steam Supply Syatem Supervisor

J. Richardson, Design Engineer

C. Tyrone, Director of Design Engineering

T. Waldo, Supervisor, Modifications

C. Zimmerman, Plant Manager, Unit i

Nf1C

J. Melfi, Resident inspector

INSPECTIQfiERQCIQUEES USED

37001 10 CFR 50.59 Safety Evaluations

92903 Followup of Engineering issues

ITEMS OPENED. CLOSED. AND DISCUSSED

Ooened

50-313/9721-01 VIO Failure to incorporate EFW Flow Limits into Procedures

(Section E8.7)

50-313/9721-02 VIO Design Calculation Deficiencies (Sections E8.8, E8.11,

E8.20, and E8.23)

50-313/9721-03 APV Failure to Perform BWST Vacuum Relief Valve Testing

Procedure Under Proper Plant Conditions (Section EB.22)

50-313/9721 04 APV Failure to implement Temporary Alterations for BWST

Vacuum Relief Valve Removal (Section E8.22)

l

'

_ _ _ _

.

.4

2-

50-313/9721 05 APV Failure to Perform 10 CFR 50.59 Evaluations for BWST

Vacuum Relief Valve Removal (Section E8.22)

Closed

50-313/9627-03 VIO Failure to Notify NRC Within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of Declaration of NUE

50 313/96-009 LER Fire in Reactor Building During Heatup Resulted from

Cracked Weld in Oil Line

50-313; 368/96512-01013 EA inadequate Lube Oil Collection Systems for Reactor

Coolant Pumps

50 313/96512-01023, and EA Failure to identify and Take Prompt Action to Lube Oil

01033 Leakage

50-313/97201 01 IFl Licensee's Actions to Revise the Technical Specification

Bases for the Minimum Water Vo!ume in the Condensate

Storage Tank

50 313/97201 02 URI EFW Flow Rates Exceeding B&W Flow Rates

50 313/97201-03 URI EFW Piping Configuration Differences

50 313/97201-05 URI Evaluation of EFWP Pump Room Environment

50 313/97201 06 URI Drawing and Calculation Revisions

50-313/97201-07 IFl Modification Work Procedure Revisions

50 313/97201 08 IFl Add;tional Vendor infonnation Necessary for Revised

Caole Pulling Calculation

50-313/97201 11 IFl Verification of Calculation Changes Associated With DC -

Batteries

50 313/97201 12 IFl Review of Current Design Basis for Bypassing EDG

Protective Trip

50-313/97201 15 URI Lack of including all Safety Related Fuses in Procedure-

50 313/97201 16 URI FSAR Discrepancies

50-313/97201 17 URI Ineffective Resolution of Previous Corrective Actions

50 313/97201-18 URI . Lack of Seismic Support of OTSG Pressure Transmitters

50-313/97201 19 URI Lack of Design Basis for Support of OTSG Instrument

Sensing Lines

50 313/97201 20 URI Inadequate Work Plan for the Control of Post-

Maintenance Testing

.50 313/97201 21 URI Inadequate 50.59 Review Associated with BWST Breaker

.

/

.

. . .

.

_ _ _ _ _ _ _ _ _ _

,

o

D

3-

50-313/97201 22 URI Revised Calculations Associated with Vortexing and

Pump NPSH

50 313/97201-23 URI Inadoquate 50.59 Evaluation Associated with BWST

Releases

Discussed

50-313/97201-04 URI Inadequate Piping Pressure and Temperature

Specifications

50-313; URI Consideration of Multiple Hot Short Actuations

-368/9623-01

1

50-313/97201 14 URI Lack of Testing of Unit 1 Molded Case Circuit Breakers

LIST OF ACRONYMS USED

A/E Architect / Engineer

BWST Borated Water Storage Tank

CR Condition Report

CRN Calculation Revision Notice

DC Direct Current

DCD Design Configuration Documentation

DCIMS Design Configuration Information Management System

EDG Emergency Diesel Generator

EFW Emergency Feedwater

FME Fore;gn Material Exclusion

FSAR Final Sa'ety Analysis Report

MOV Motor-operated valve

NPSH Net Positive Suction Head

QAT Quality Assurance Team

SIMS Safety Information Management System

ULD Upper Level Document

WBGT Wet Bulb Globe Temperature

._ _ _ _ _ _ _ . -

.-__ - __ -__-___ -_-_ _ _ _ _ _ - _

e

o

AIIACHMENT 2

LIST OF DOCUMENTS REVIEWED FOR ITEM 50 313/97-201-06

CALCULATIONS

Lalculation A-86," Items Discussed with Daleas R.S. of CE MSLB, ECCS and LOCA,"

Revision O.

Calculation Quality Action Team Final Reput, September,1996.

Calculation 32-1229968-00, " Final Draft, ANO AFW Capacity - Phase 1".

Calculation 32 5000450-G0, "ANO AFW Capacity, Phase 2," Revision 0.

Calculation 80-D-1083A-02, "EFIC DC Valve Torque Calculation Under Reduced Voltage

Condition," Revision 1.

Calculation 80-D-2085-01, " Correlation of Teletector to Activity Release," Revision 0.

Calculation 80-D-2085-02, " Provide Correlation Between MR/hr Reading Detector Activity Steam

Line Result Table Method," Revision 0

Calculation 85-D-1042-03, "AMSAC Instr Loop Errors & Setpoints," Revish15.

Calculation 85-E-0053-20, " Combustible Loading Calc for Fire Area G," Revision 29.

'

Calculation 86-E-0002-01, "EDG 1 & 2 Load Study," Revision 8.

- Calculation 86-E-0020-01, "lE Station Battery 2D11 Duty Cycle'& Sizing Calc," Revision 7.

Calculation 87 E-0026-09, "ErM Pump Room Temperature Profile," Revision 0.

Calculation 88 E-0086-01, "lE Bulletin 88-04 Review for P7A and P78 Minimum Flow

Evaluation," Revision 0.

Calculation 89-E-0029-02, " Cal Factor Calc ANO-2 MS Line Rad Monitor," Revision 0.

Calculation 89-E-OiO2-01, " Terminal Voltage Calc for DC MOV," Revision 8.

Calculation 89-E-0144-01, "EDG Loading for 2A3 & 2A4 Bus," Revision 3.

Calculation 90-E-0116-01, "ANO-2 EOP Setpoint Document," Re.wision 4.

Calculation 91 E-0090-06, " Heat Load Determination for Post Accident for Rooms 95 98 99100

104109110 & 149 for Post Accident Cooling," Revision 2.

Calculation 92-E-0021-01, " Emergency Duty Cycle and Battery Sizing Calculations," Revision 4

.mu _ __ ___-___

_ _ _ _ _ _ _ _

!

,,

9

2-

Calculation 92-E-0077-04, " Unit 1 EFW System Pump Performance Requirements,' Revision 0,

- Calculation 93-D-1008-05, 'MOV Sizing Calc for CV-2620,* Revision O.

Calculation 93-R-1029-30,'ANO-1 SRR for Auxiliary Building HVAC System ABH V,'

Revision O.

Calculation 94-D-5033-01, * Removal of Local Fire Trouble Horns from D21 Breaker 34,"

Revision 0.

Calculation 94-E-006101," Tech Spec Allowable Outage Time (AOT) Utilizing Attemate AC ,

EDG," Revision O.

Calculation 95-D-1004-03, 'DCP 95-1004 Load Addition to RC1," Revision O.

Calculation 95-D-1011-01,"EDG Load Add for DCP 95-1011," Revision 1.

Calculation 95-D 7064-01, " Vital AC Panels & Instrument AC Panels," Revision 0.

Calculation 95-D-7072-01,"D01 Battery Loading Amendment," Revision O.

Calculation 96-E-0065-01, " Unit i Safety Survivability Eval Under Stall Thrust / Torque,"

Revision 1.

,

Calculation 96-R 0002-02, " Generic Letter 89-10 Program Valves Limit Switch Setpoint,"

Revision 1

j

CONDITION REPORTS

CR-C-96-0060, re Calculation Room Control and Discrepancies, March 22,1997.

- CR-C-97-0053, re Calculation 92-D-2001-49 Approval, February 11,1997.

CR-C-97-0058, re Upper Level Document Discrepancies, February 13,1997.

CR-C-97-0059, re Design Configuration Documentation Discrepancies, February 13,1997.

CR-1-96-0184, re Seismic Qualification Calculations, May 23,1996.

CR-1-97-0017, re Accuracy Analysis Calculations for EFW Flow Transmitters, January 21,1997.

CR 2-97-0304, re Discrepancy in Instrument Setpoint Calculations 2LT-5659-1 and 2LT-5668-2,

May 28,1997

..

.. . . . . .

- _--_ ___-_-__ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ -

%l

'

o

3-

DESIGN CHANGES

Design Change Package 94-1003, "Feedwater (MFW Venturi Replacement)," Revision 2

Design Change Package 95-2001, " Control Room Emergency Chiller Installation - Air

Conditioning Modification," Revision 1

ENGINEERING STANDARDS

'

Engineering Standard GES-39, " Calculation Numbering Schemes and Codes," Revision 2

LICENSING INFORMATION REQUESTS

LIR L97-0035, ' Action items from ANO 50.54(f) Design Bases Assessment: Maintenance of

Calculations [1.1,1.2),",

LIR L97-0037, " Action items from ANO 50.54(f) Design Bases Assessment: DCIMS

Improvements [1.6],",

LIR L97-0201,"NRC AE Design Basis inspection," July 31,1997

LIR L97 0202,'NRC AE Design Basis inspection," July 31,1997.

LIR L97-0289, " Response to IR 97-202 AE Design Basis inspection," September 28,1997

LIR L97-0290, " Response to IR 97-201 AE Design Basis Inspection," September 26,1997

PROCEDURES-

Procedure OP-5010-015," Engineering Calculations," Revision 1 PC1,

Procedure OP-5010-019, " Computer Software Control," Revision 1 PC1

MISCELLANEOUS

Memorandum ANO-97-00225, M. Stroud to ANO Engineering Personnel," Reminder of Design

Considerations for Possible Impact to Battery and EDG Lording Calculations," March 3,1997

Design Configuration Documentation Discrepancies 2M7-07-01,02,03,07,08,09,12,14.

Design Configuration Documentation Discrepancies RBS 02-05,06

d

_ --__-_-_ _ a