ML17325B551: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
Line 20: Line 20:


==SUBJECT:==
==SUBJECT:==
ApplicationforamendstolicensesDPR-58&:DPR-74,revisingTS3/4.8.1.2,"ElectricalPowerSystems"8associatedbasestoprovideone-timeextensionof18-monthsurveillanceintervalforspecificSRs.DISTRIBUTIONCODE:A001DCOPIESRECEIVED:LTRENCLTITLE:ORSubmittal:GeneralDistributionTS1ZE:Q'fCATEGORYj.REGULARYINFORMATIONDISTRIBUTISYSTEM(RIDS)A</CESSIONNBR:9904230125DOC.DATE:99/04/19NOTARIZED:YESDOCKET&#xb9;dACIL:50-315DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATIONPOWERS,R.P.IndianaMichiganPowerCo.RECIP.NAMERECIPIENTAFFILIATIONRecordsManagementBranch(DocumentControl'Desk)NOTES:RECIPIENTIDCODE/NAMELPD3-1LASTANG,J-COPIESRECIPIENTLTTRENCL,IDCODE/NAME11LPD3-1PD11COPIESLTTRENCL11INTERNAL":FILECENTER0NRR/DE/EMCBNRR/DSSA/SPLBNRR/SPSBJUNG,IOGC/HDS3EXTERNAL:NOAC111111111011NRR/DE/EEIBNRR/DE/EMEBNRR/DSSA/SRXB11111111DENNOTETOALL"RIDS"RECIPIENTS:PLEASEHELPUSTOREDUCEWASTE.TOHAVEYOURNAMEORORGANIZATIONREMOVEDFROMDISTRIBUTIONLISTSORREDUCETHENUMBEROFCOPIESRECEIVEDBYYOUORYOURORGANIZATION,CONTACTTHEDOCUMENTCONTROLDESK(DCD)ONEXTENSION415-2083TOTALNUMBEROFCOPIESREQUIRED:LTTR14ENCL13 IndianaMichiga~PowerCompany~500CircleDriveBuchanan,Ml491071373INOlAMAMICHIGANPQWMApril19,1999ABP:NRC:1322DocketNos.:50-31550-316U.S.NuclearRegulatoryCommissionATTN:DocumentControlDeskMailStop0-P1-17Washington,DC20555-0001Gentlemen:DonaldC.CookNuclearPlantUnits1and2TECHNICALSPECIFICATIONSCHANGEREQUESTELECTRICALPOWERSYSTEMS,SHUTDOWNPursuantto10CFR50.90,IndianaMichiganPowerCompany(I&M),theLicenseeforDonaldC.CookNuclearPlantunits1and2,proposestoamendAppendixA,technicalspecifications(T/S),offacilityoperatinglicensesDPR-58andDPR-74.IBMproposestoreviseT/S3/4.8.1.2,"ElectricalPowerSystems,Shutdown,"anditsassociatedbasestoprovideaone-timeextensionofthe18-monthsurveillanceintervalforspecificsurveillancerequirementsforunits1and2.ThissurveillancewillbeperformedpriortothefirstentryintoMode4subsequenttoreceiptoftherequestedT/Samendment.Inaddition,forunit2only,aminoradministrativechangeisincludedtodeleteareferencetoT/S4.0.8,whichisnolongerapplicable.Forunit1only,aneditorialchangeismadetoaddtheword"or"toactionstatement3.8.1.2.Attachment1providesadetaileddescriptionandsafetyanalysisoftheproposedchanges.Attachments2Aand2BprovidemarkedupT/Spagesforunit1andunit2,respectively.Attachments3Aand3BprovidetheproposedT/Spageswiththechangesincorporatedforunit1andunit2,respectively.Attachment4describestheevaluationperformedinaccordancewith10CFR50.92(c),whichconcludesthatnosignificanthazardsconsiderationisinvolved.Attachment5providestheenvironmentalassessment.@gali'qq04230i28~~0+<+PDRADQCK08000318PDR U.S.NuclearRegulatoryCommissionPage2AEP:NRC:1322AttherequestoftheNRCstaff,wehavealsoconsideredGenericLetter(GL)98-01,"Year2000ReadinessofComputerSystemsatNuclearPowerPlants,"andSupplement1totheGL,whichrequiresaresponsebyJuly1,1999,confirmingyear2000readinessoftheCookNuclearPlants.I&M'syear2000programisintendedtoensurethatemergencydieselgeneratorcontrolcircuits,areyear2000readypertherequirementsofGL98-01.CopiesofthisletteranditsattachmentsarebeingtransmittedtotheMichiganPublicServiceCommissionandMichiganDepartmentofPublicHealth,inaccordancewiththerequirementsof10CFR50.91.Shouldyouhaveanyquestions,pleasecontactMr.DavidF.Kunsemiller,DirectorofRegulatoryAffairs,at(616)466-2405.Sincerely,gf,'(R.P.PowersVicePresidentSWORNTOANDSUBSCRIBEDBEFOREMETHIS~/DAYOFNotaryPublic1999BERNICEhLBtCKERSNowt)tPuY~o,BerrienCounty,MiIPgCommissionExpbesFeb.16,2001My'CommissionExpiresD/4'/KjaaAttachmentsc:J.A.Abramson,w/attachmentsJ.L.Caldwell,w/attachmentsMDEQ-DW&RPD,w/attachmentsNRCResidentInspector,w/attachments 1Irt ATTACHMENT1TOAEP:NRC:1322DESCRIPTIONANDSAFETYANALYSISFORPROPOSEDCHANGES Attachment1toAEP:NRC:1322Page1DescritionandSafetAnalsisfortheProosedChanesA.SummaryofProposedChangesI&Mproposesto'eviseTechnicalSpecification(T/S)3/4.8.1.2,"ElectricalPowerSystems,Shutdown,"anditsassociatedbasestoprovideaone-timeextensionofthe18-monthsurveillanceintervalforspecificsurveillancerequirements(SRs)applicableinModes5and6.Inaddition,forunit2only,aminoradministrativechangeisincludedtodeleteareferencetoT/S4.0.8,whichisnolongerapplicable.Forunit1only,aneditorialchangeismadetoaddtheword"or"toactionstatement3.8.1.2.Theamendmentrequestinvolvessixemergencydieselgenerator(EDG)surveillancesthatarenormallyperformedat18-monthintervalsduringreactorshutdowns(Modes5and6).Therequestproposestodelayperformanceofthesesixsurveillances,duringthecurrentextendedoutagesonly,untilpriortothefirstentryintoMode4toresumeoperations(Modes1-4).Thedelayisnecessarybecausemanyplantcomponentsneededforthetestingarenotrequiredtobefunctionalduringanoutage,andduetothescopeoftheoutage,arecurrentlynotfunctional.ThedelayisjustifiedbecausethesixdeferredsurveillancesdemonstratethefulldesignedfunctionalcapabilityoftheEDGstosupportmitigationofaccidentsthatmayoccurinModes1through4.ThisfulldesigncapabilityisnotnecessarytosupportEDGfunctionalrequirementsduringreactorshutdown.TheshutdownfunctionalrequirementsoftheEDGsareadequatelydemonstratedbythenondeferred18-monthsurveillances,the"required30-daysurveillancesandthespecifiedfueloilchecks.AconservativeestimateutilizingProbabilisticRiskAnalysis(PRA)techniqueshasshownthatdeferralofthesurveillanceshasaverysmallimpactonEDGunavailability.Finally,therequestisconsistentwithNUREG-1431,"(Improved)StandardTechnicalSpecifications,"(ITS)inrecognizingthechallengethistestingrepresentstothelimitedA.C.sourcesrequiredtobeoperablewhileshutdown.Whenalicenseeknowsofnoreasonthesurveillanceswouldnotbesatisfied,thedeferralisallowedbythe.NUREG.TheproposedchangesaredescribedindetailinsectionEofthisattachment.T/Spagesthataremarkedtoshowtheproposedchangesareprovidedinattachments2Aand2Bforunit1andunit2,respectively.TheproposedT/Spages,withthechangesincorporated,preprovidedinattachments3Aand3Bforunit1andunit2,respectively.B.DescriptionoftheCurrentRequirementsInModes5and6,T/SLimitingConditionforOperation(LCO)3.8.1.2requirestheoperabilityofasingleoffsitepowersupplyandasingleemergencydieselgenerator(EDG).Fortheserequiredshutdownpowersupplies,T/Ssurveillancerequirement4'.1.2invokesthesamesurveillancesasthosespecifiedinModes1through4(SRs4.8.1.1.1and4.8.1.1.2)withtheoneexceptionofSR4.8.1.1.2.a~5(parallelingtheEDGswithoffsitepowerforaone-hour,orgreater,loadtest).Table1listsanddescribesthesurveillancesrequiredinModes5and6.OnlythoseSRsinboldandparenthesesaresubjecttodeferralbythisamendmentrequest.Alsoincludedinthetable,forreference,arethecorrespondingSRsoftheITS.
Application foramendstolicensesDPR-58&:DPR-74,revising TS3/4.8.1.2, "Electrical PowerSystems"8associated basestoprovideone-timeextension of18-monthsurveillance intervalforspecificSRs.DISTRIBUTION CODE:A001DCOPIESRECEIVED:LTR ENCLTITLE:ORSubmittal:
Attachment1toAEP:NRC:1322Page2T/S4.8.1.2SRsand(frequency)4.8.1.1.1.a(7das)TABLElCorrespondingNUREG-1431SRs3.8.1.1Testdescription/commentsBreakeralignmentchecksandindicatedoweravailabilit4.8.1.1.1.b(18-months)3.8.1.84.8.1.1.2.a.1(*)3.8.1.44.8.1.1.2.a.2(*)3.8.3.14.8.1.1.2.a.3(*)3.8.1.6Offsi.tepowertransfercapability.DatankfuellevelcheckStoraetankfuellevelcheckFueltransferumtest4.8.1.1.2.a.4(*)3.8.1.2and3.8.1.7StartTestandFastStartTest(4.8.1.1.2.a.4isperformedasafaststartever184das)4.8.1.1.2.a.6(*)N/A4.8.1.1.2.b.l(**)3.8.1.54.8.1.1.2.b.2(**)3.8.3.54.8.1.1.2.c(***)3.8.3.33.8.3.34.8.1.1.2.d(*~)DieselStandbyalinmentverificationDaTankaccumulatedwaterremovalStoraeTankaccumulatedwaterremovalNewfuelsamlinStoraeTankfuelsamlin4.8.1.1~2.e.l.(18-months)4.8.1.1.2.e.2.(18-months)4.8.1.1.2.e.3.(18-months)(4.8.l.1.2.e.4.a)andb))(18-months)4.8.1.1.2.e.5.(18-months)(4.8.1.1.2.e.6.a),b)andc))(18-months)4.8.1.1.2.e.7.(18-months)(4.8.1.1.2.e.8.)(18-months)(4.8.l.l.2.e.9.a),b)andc))(18-months)(4.8.1.1.2.e.10a)andb)(18-months)(4.8.1.1.2.e.ll)(18-months)4.8.1.1.2.f.l(10ears)4.8.1.1.2.f.2(10ears)4.8.1.1.2.f.3(10ears)N/A3.8.1.93.8.1.103.8.1.113.8.1.123.8.1.19and3.8.1.133.8.1.14and3.8.1.15Intentmetby3.8.1.19.c.5.3.8.1.163.8.1.173.8.1.183.8.3.6N/A3.8.1.20Dieselengineinspectionpermanufacturer'srecommendationsSingle-LoadRejectionTestFull-LoadRejectionTestLoss-of-Offsite-Power(LOOP)Test.Includesloadsheddingandloadsequencingverifications.SafetyInjectionActuationSignal(SIAS)TestCombinedSIASandLOOPTestsincludingProtectiveTripBypassTestEnduranceandMarginTestandHotRestarttest.TheMarginTest(loadingtogreaterthanratedpower)isnotperformedatCook.MaximumAuto-ConnectedLoadTestSynchronizingTestandEmergencyLoadTransferTestTestModeChange-OverTestwithconcurrentverificationofenergizedsafetyloadsLoadsequencertimingverificationFueloilstoragetankcleaningFueloilsystemleaktestRedundantUnitStartingIndependenceTest*PerT/STable4.8-1onastaggeredtestbasis(currentlyevery31days)**Every31days***Priortoaddingfueltothestoragetanks J
GeneralDistribution TS1ZE:Q'fCATEGORYj.REGULARYINFORMATION DISTRIBUTI SYSTEM(RIDS)A</CESSION NBR:9904230125 DOC.DATE:
Attachment1toAEP:NRC:1322Page3CDBasesfortheCurrentRequirementsAsdescribedinthecurrentBasesforT/S3/4.8.1.2,theoperabilityoftheminimumspecifiedA.C.powersourcesduringshutdownandrefuel'ingprovidesassurancethat1)thefacilitycanbemaintainedintheshutdownorrefuelingconditionforextendedtimeperiodsand2)sufficientinstrumentationandcontrolcapabilityisavailableformonitori'ngandmaintainingthefacilitystatus.D.NeedforRevisionoftheRequirementBackroundThesubjectsurveillancesofthisamendmentrequestresultinplanttransientsthatcannotbesafelyperformedatpower.Therefore,thesurveillancesareperformedwhiletheplantisshutdown,typicallyforplannedrefuelingoutages.However,thenecessaryequipmenttoperformthetestingmaynotbeavailableduringextendedoutages(includingimportantnon-safetyequipmentthatisdemonstratedtoautomaticallydisconnectfromtheemergencybussesduringthetesting).Furthermore,muchofthesafetyequipmentnecessaryforthetestingisnotrequiredbytheT/SsinModes5and6orisactuallyrequiredtobeinoperableforothersafetyconsiderations(suchasthepotentialtoinadvertentlydamagetheplantfromoverpressurizationwhilecold).Fornormaldurationoutages,thesubjectsurveillancesrarelyresultinoutageconflictsbecausethe18-monthsurveillanceinterval(plusallowedextension)accommodatesperformanceofthetestingafteroutagecompletionandjustpriortoenteringMode4.Atthistimethe~necessaryequipmenttosupportthetestinghasbeenmadereadyfortheplantrestartsHoweverinthecaseofextendedoutages,particularlywhenthedurationwasnotinitiallyanticipated,thesesurveillancesmaycomedueinmid.outage.Whenthisoccurs,theonlyavailableoptionistosuspendoutageactivitiessothattheplantcanbeplacedinaconditiontoperformthetesting,or,declarethedieselsT/Sinoperableandcomplywiththeapplicableactionsuntilthetestingcanbedone.EitheroptionresultsinadelayintheoutagewithoutacompensatingincreaseinsafetybecausethedieselsmaybereliedupontoaccomplishtheirfunctioninModes5and6withoutthesubjectsurveillancesbeingcurrent(seedetailsofCookjustificationinF).Inaddition,therequiredtestingsubjectsthelimitedA.C.sourcesrequiredinModes5and6toasignificanttransient.AtestcomplicationatthistimecouldresultinlossoftherequiredA.C.supplies.Thissituation,anditsunnecessaryimpact,hasbeenanticipatedandcorrectedbytheITS.TheITSdoesnotrequire"thesubjectsurveillancestobeperformedontherequiredoperableA.C.sourceswheninModes5and6.However,thisflexibilityisnotpermittedbytheCookunit1andunit2T/Ss.CookextendedoutaesCookunits1and2havebeenshutdownsinceSeptemberof1997and p~C Attachment1toAEP:NRC:1322Page4Lcurrentlyremaininanextendedoutage.Sufficientequipmentisnotavailabletoperformtherequiredsurveillancetestingatthespecifiedsurveillanceintervals.Theunit1surveillanceintervalexpiredonMarch1and3,1999,forthe1CDand1ABEDGsrespectively,andbothunit1EDGsweredeclaredT/Sinoperable.Itisnotedthatatthistime,theunit1andunit2EDGswerealreadydeclaredinoperableduetoseismicqualificationissuesinvolvingHFArelays(hingedarmatureauxiliary)intheEDGand4KVsafetymotorcontrolcircuits(thisconditionwasreportedvialicenseeEventReport1999-001-00).Correction,oftheHFArelayproblems,andappropriatepostmaintenancetesting,willrestoreoperabilityoftheEDGswithnoadditionaloutageimpact.However,unlesstheamendmentisapproved,EDGinoperabilityduetotheexpiredsurveillanceswillcontinuetohaveanadverseimpactuntilthesurveillancescanbeperformed.Currently,unit1isinMode5withplanttemperaturemaintainedatapproximately125'F.Lowtemperatureoverpressureprotectioncontrolsareineffectwithcorrespondingtagoutsonbothsafetyinjection(SI)pumpsandonecentrifugalchargingpump(CCP).Inaddition,thecontainmentspraysystem(CTS)isundergoingconsiderablemaintenance/modificationtopipingandpumps,includinginstallationofafull-flowrecirculationline.CompletionoftheCTSworkisnecessarytosupportthetestingandcouldrequiretheunit1EDGstoremainT/Sinoperableuntilthesummerof1999.ThissameT/Sreliefwillbeneededforunit2inDecember1999whenthesurveillancesbecomeoverdue.E.DescriptionoftheProposedChanges1&MproposestoreviseT/S3/4.8.1.2topermitaone-timeextensionofthe18-monthsurveillanceintervalforSRs4.8.1.1.2.e.4.a)andb);4.8.1.1.2.e.6'),b)andc);4.8.1.1.2.e.8;4.8.1.1.2.e.9.a),b)andc);4.8.1.1.2.e.10.a)andb);and4.8.1.1.2.e.llforunit1and2.Inaddition,forunit2only,aminoradministrativechangeisincludedtodeletethereferencetoT/S4.0.8thatisnolongerapplicable.Forunit1only,aneditorialcorrectionismadetotheactionstatement3.8.1.2toaddtheword"or"betweenthewords"COREALTERATIONS"and"positivereactivitychanges."Thesurveillanceintervalextensionwillbeaccomplishedbyadditionofthefollowing,statementtoT/Ssurveillancerequirement4.8.1.2:rCommencingin1999duringtheextendedshutdowninitiatedin1997,the18-monthsurveillancerequirements4.8.1.1.2.e.4.a)andb);4.8.1.1.2.e.6.a),b)andc);4.8.1.1.2.e.8;4.8.1.1.2.e.9.a),b)andc);4.8.1.1.2.e.lO.a)andb);and4.8.1.1.2.e.llmaybedelayedonetimeuntiljustpriortothefirstentryintoMODE4followingtheshutdown.1&MproposestorevisethebasesforT/S4.,8.1.2todescribethereasonfortheextendedsurveillanceintervals.
99/04/19NOTARIZED:
Attachment1toAEP:NRC:1322Page5F.BasesoftheProposedChangesSummarofRelevantPoints~ThesurveillanceintervalextensionsproposedbythisrequestarepermittedbytheITS.~Asimilarrequestwasapprovedforanotherlicenseeduringanextendedoutage.~EachdeferredsurveillancehasbeenreviewedandisnotessentialtodemonstratedieselreliabilityinMode5and6.~RecentperformanceofthedeferredsurveillanceshasnotresultedinfailuresthatwouldchallengedieselfunctionalrequirementsinModes5and6.~APRAestimatewasperformedoftheincreaseinEDGunavailability,inModes5and6,duetodeferralofthesubjectsurveillances.TheresultsdemonstratedthatthedeferralsdonotsignificantlyincreaseEDGunavailabilityinModes5and6.~EventsanalyzedinModes5and6do'nottakecr'editforautostartingoftheEDGsandproceduresexisttomanuallystartandloadanEDGifanautostartsequencefails.~Appropriateadministrativecontrolsareinplacetoensureonsiteoutageactivitiesdonotchallengetheoffsitepowertransmissionlines.~ThesurveillancesthatwillcontinuetobeperformedprovideadequateassurancetheEDGsarecapableofsupplyingemergencypowerforthecurrentconditions.~Theamendmentrequestdoesnotreducethenumberofrequiredoperablepowersupplies.~Theamendmentrequestdoesnotmodifytheactionsrequiredforaninoperablepowersupply.~TheplantisdesignedsuchthatanalyzedaccidentscredibleinModes5and6wouldnotbeinitiatedbyaninterruptionofA.C.power.~Thegreatlyreducedfissionproductactivitiesandfissionproductdecayheatratescurrentlyexistingprovideassurancethattheconsequencesofanyaccidentorinadvertentreleaseofradioactivematerialsareboundedbytheexistinganalysis.~AlthoughthesubjectT/SrequiresonlyasingleoperableoffsitepowersupplyandasingleoperableEDGinModes5and6,administrativerequirementsforreducingshutdownrisksupplementtheT/Srequirementswhenappropriate.EffectoftheExtendedShutdownonDecaheatandFissionProduct~ActivitNUREG-1431providesthefollowingintroductiontothebasesforACSources-Shutdown:Ingeneral,whentheunitisshutdown,theTechnicalSpecificationsrequirements,ensurethattheunithasthecapabilitytomitigatetheconsequencesofpostulatedaccidents.However,assumingasinglefailureandconcurrentlossofalloffsiteorallonsitepowerisnotrequired.TherationaleforthisisbasedonthefactthatmanyDesignBasisAccidents(DBAs)thatareanalyzedinModes1,2,3,and4havenospecificanalysesinModes5and6.WorstcaseboundingeventsaredeemednotcredibleinModes5and6becausetheenergycontained Attachment1toAEP:NRC:1322Page6withinthereactorpressureboundary,reactorcoolanttemperatureandpressure,andthecorrespondingstressesresultintheprobabilitiesofoccurrencebeingsignificantlyreducedoreliminated,andinminimalconsequences.ThesedeviationsfromDBAanalysisassumptionsanddesignrequirementsduringshutdownconditionsareallowedbytheLCOforrequiredsystems.'IThisisparticularlytrueforCookunits1and2atthecurrenttimeduetothe18monthsofcontinuousshutdownprecedingthisamendmentrequest.Reduceddecayheatloadswouldprovideadditionaltime,followingdisruptionofA.C.power,torestorepowerpriortoreachingthemaximumallowabletemperatureof200'FforMode5.Currently,forunit1,theestimatedtimetoreach200'Ffrom130'Fis18hours.ForUnit2,theestimatedtimetoreach200'Ffrom130'Fis12hours.Fissionproductactivitiesinthefuelassemblypellet-to-claddinggapsaregreatlyreduced.Thefuelhandlingaccidentanalysisconsidersthethyroiddoseatthesiteboundaryandinthelowpopulationzone.Thisdoseisdominatedbytheisotopeiodine131,whichalsodecaysmoreslowlythantheotheriodinecontributorstothedose.Theactivityofiodine131decreasesbyone-halfevery8.05days.Thecurrentshutdownperiodofapproximately18-monthsrepresentsover70half-lives.DiscussionofSafetAnalsisEvents1through8,listedbelow,areanalyzedintheunit1and2UpdatedFinalSafetyAnalysisReports(UFSAR)inSection14.2,"StandbySafeguardsAnalysis":1.2.3~5.6.7.8.FuelhandlingaccidentWasteliquidreleaseWastegasreleaseSteamgeneratortuberuptureSteampipe"ruptureRuptureofcontrolrodmechanismhous'ing-rodclustercontrol(RCC)assemblyejectionEnvironmentalconsequencesfollowingsecondarysystemaccidentsRuptureofafeedline(Unit2only)OthereventsandtheirUFSARsectioninclude:9.UncontrolledRCCA(rodcontrolclusterassembly)withdrawalfromasubcriticalcondition(Section14.1.1)10.UncontrolledBoronDilution(Section14.1.5)Therelevanceoftheseeventstothisamendmentrequestisasfollows:1.FuelhandlingaccidentTheonlytimeafuelhandlingaccidentcouldoccurisduringthehandlingofafuelassembly.ThedesignoffuelhandlingequipmentissuchthataninterruptionofA.C.powerwouldnotcauseafuelelementtobeinadvertentlydropped.Therefore,aninterruptS.onorlossofA.C.power Attachment1toAEP:NRC:1322Page7couldnotinadvertentlyreleaseafuelelementandconsequently,theprobabilityofthiseventisnotincreased.Inaddition,administrativecontrolsandcraneinterlocksprecludethemovementofloadsgreaterthan2500pounds,orwiththepotentialforexcessiveimpactenergy,overthespentfuelpool.Thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurancethattheconsequencesofthiseventareboundedbytheexistinganalysis.2.AccidentalReleaseofRadioactiveLiquidsTheinadvertentreleaseofradioactiveliquidwastestotheenvironmentwasevaluatedforthewasteevaporatorcondensateandmonitortanks,condensatestoragetank,primarywaterstoragetank,refuelingwaterstoragetank(RWST),theauxiliarybuildingstoragetanksandthechemicalandvolumecontrolsystem(CVCS)holduptanks.ItwasconcludedintheChapter14evaluationthatlossofliquidfromthesetankstotheenvironmentisnotacredibleaccident.Thisconclusiondoesnotdependonoperatingmode,hence,furtherevaluationofthiseventisnotrequired.3.WasteGasReleaseRadioactivegasesareintroducedintothereactorcoolantbytheescapeoffissionproductsifdefectsexistedinthefuelcladding.Theprocessingofthereactorcoolantbyauxiliarysystemsresultsintheaccumulationofradioactivegasesinvarioustanks.Thetwomainsourcesofanysignificantgaseousradioactivitythatcouldoccurwouldbethevolumecontroltankandthegasdecaytanks.Itisassumedthatatankrupturesby'anunspecifiedmechanismafterthereactorhasbeenoperatingforonecorecyclewith1%defectsinthefuelcladding.Thereisnoidentifiedmechanismbywhichaninterruptionorlossofpowercouldresultinatankrupture.Therefore,itisconcludedthattheprobabilityofoccurrenceofatankrupturewouldnotbesignificantlyincreasedbyaninterruptionorlossofA.C.power.Furthermore,thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurancethattheconsequencesofthiseventareboundedbythecurrentanalysis.Events4through8arenotrequiredtobeanalyzedinModes5and6duetonegligiblestoredenergyintheprimaryandsecondarysystemsbelowtheMode5temperaturelimitof200'F.9.UncontrolledRCCAwithdrawalfromasubcriticalconditionThiseventcanonlyoccurwiththereactortripbreakersclosedandthecontrolroddrivemechanisms(CRDMs)energized.Withtheexceptionoftestingorspecialmaintenance,theroddrivemotorgeneratorsetremainstaggedoutuntilMode3andthisalonewouldprecluderodmovement.Iftheconditionsforrodwithdrawalaremet,twooperablesourcerangeinstrumentsandtworeactortrip
YESDOCKET&#xb9;dACIL:50-315 DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATION POWERS,R.P.
IndianaMichiganPowerCo.RECIP.NAME RECIPIENT AFFILIATION RecordsManagement Branch(Document Control'Desk)NOTES:RECIPIENT IDCODE/NAME LPD3-1LASTANG,J-COPIESRECIPIENT LTTRENCL,IDCODE/NAME 11LPD3-1PD11COPIESLTTRENCL11INTERNAL":
FILECENTER0NRR/DE/EMCB NRR/DSSA/SPLB NRR/SPSBJUNG,IOGC/HDS3EXTERNAL:
NOAC111111111011NRR/DE/EEIB NRR/DE/EMEB NRR/DSSA/SRXB 11111111DENNOTETOALL"RIDS"RECIPIENTS:
PLEASEHELPUSTOREDUCEWASTE.TOHAVEYOURNAMEORORGANIZATION REMOVEDFROMDISTRIBUTION LISTSORREDUCETHENUMBEROFCOPIESRECEIVEDBYYOUORYOURORGANIZATION, CONTACTTHEDOCUMENTCONTROLDESK(DCD)ONEXTENSION 415-2083TOTALNUMBEROFCOPIESREQUIRED:
LTTR14ENCL13 IndianaMichiga~PowerCompany~500CircleDriveBuchanan, Ml491071373 INOlAMAMICHIGANPQWMApril19,1999ABP:NRC:1322 DocketNos.:50-31550-316U.S.NuclearRegulatory Commission ATTN:DocumentControlDeskMailStop0-P1-17Washington, DC20555-0001 Gentlemen:
DonaldC.CookNuclearPlantUnits1and2TECHNICAL SPECIFICATIONS CHANGEREQUESTELECTRICAL POWERSYSTEMS,SHUTDOWNPursuantto10CFR50.90,IndianaMichiganPowerCompany(I&M),theLicenseeforDonaldC.CookNuclearPlantunits1and2,proposestoamendAppendixA,technical specifications (T/S),offacilityoperating licensesDPR-58andDPR-74.IBMproposestoreviseT/S3/4.8.1.2, "Electrical PowerSystems,Shutdown,"
anditsassociated basestoprovideaone-timeextension ofthe18-monthsurveillance intervalforspecificsurveillance requirements forunits1and2.Thissurveillance willbeperformed priortothefirstentryintoMode4subsequent toreceiptoftherequested T/Samendment.
Inaddition, forunit2only,aminoradministrative changeisincludedtodeleteareference toT/S4.0.8,whichisnolongerapplicable.
Forunit1only,aneditorial changeismadetoaddtheword"or"toactionstatement 3.8.1.2.Attachment 1providesadetaileddescription andsafetyanalysisoftheproposedchanges.Attachments 2Aand2BprovidemarkedupT/Spagesforunit1andunit2,respectively.
Attachments 3Aand3BprovidetheproposedT/Spageswiththechangesincorporated forunit1andunit2,respectively.
Attachment 4describes theevaluation performed inaccordance with10CFR50.92(c),
whichconcludes thatnosignificant hazardsconsideration isinvolved.
Attachment 5providestheenvironmental assessment.
@gali'qq04230i28
~~0+<+PDRADQCK08000318PDR U.S.NuclearRegulatory Commission Page2AEP:NRC:1322 AttherequestoftheNRCstaff,wehavealsoconsidered GenericLetter(GL)98-01,"Year2000Readiness ofComputerSystemsatNuclearPowerPlants,"andSupplement 1totheGL,whichrequiresaresponsebyJuly1,1999,confirming year2000readiness oftheCookNuclearPlants.I&M'syear2000programisintendedtoensurethatemergency dieselgenerator controlcircuits, areyear2000readypertherequirements ofGL98-01.Copiesofthisletteranditsattachments arebeingtransmitted totheMichiganPublicServiceCommission andMichiganDepartment ofPublicHealth,inaccordance withtherequirements of10CFR50.91.Shouldyouhaveanyquestions, pleasecontactMr.DavidF.Kunsemiller, DirectorofRegulatory Affairs,at(616)466-2405.
Sincerely, gf,'(R.P.PowersVicePresident SWORNTOANDSUBSCRIBED BEFOREMETHIS~/DAYOFNotaryPublic1999BERNICEhLBtCKERSNowt)tPuY~o,BerrienCounty,MiIPgCommission ExpbesFeb.16,2001My'Commission ExpiresD/4'/KjaaAttachments c:J.A.Abramson, w/attachments J.L.Caldwell, w/attachments MDEQ-DW&RPD,w/attachments NRCResidentInspector, w/attachments 1Irt ATTACHMENT 1TOAEP:NRC:1322 DESCRIPTION ANDSAFETYANALYSISFORPROPOSEDCHANGES Attachment 1toAEP:NRC:1322 Page1DescritionandSafetAnalsisfortheProosedChanesA.SummaryofProposedChangesI&Mproposesto'eviseTechnical Specification (T/S)3/4.8.1.2, "Electrical PowerSystems,Shutdown,"
anditsassociated basestoprovideaone-timeextension ofthe18-monthsurveillance intervalforspecificsurveillance requirements (SRs)applicable inModes5and6.Inaddition, forunit2only,aminoradministrative changeisincludedtodeleteareference toT/S4.0.8,whichisnolongerapplicable.
Forunit1only,aneditorial changeismadetoaddtheword"or"toactionstatement 3.8.1.2.Theamendment requestinvolvessixemergency dieselgenerator (EDG)surveillances thatarenormallyperformed at18-monthintervals duringreactorshutdowns (Modes5and6).Therequestproposestodelayperformance ofthesesixsurveillances, duringthecurrentextendedoutagesonly,untilpriortothefirstentryintoMode4toresumeoperations (Modes1-4).Thedelayisnecessary becausemanyplantcomponents neededforthetestingarenotrequiredtobefunctional duringanoutage,andduetothescopeoftheoutage,arecurrently notfunctional.
Thedelayisjustified becausethesixdeferredsurveillances demonstrate thefulldesignedfunctional capability oftheEDGstosupportmitigation ofaccidents thatmayoccurinModes1through4.Thisfulldesigncapability isnotnecessary tosupportEDGfunctional requirements duringreactorshutdown.
Theshutdownfunctional requirements oftheEDGsareadequately demonstrated bythenondeferred 18-monthsurveillances, the"required 30-daysurveillances andthespecified fueloilchecks.Aconservative estimateutilizing Probabilistic RiskAnalysis(PRA)techniques hasshownthatdeferralofthesurveillances hasaverysmallimpactonEDGunavailability.
Finally,therequestisconsistent withNUREG-1431,
"(Improved)
StandardTechnical Specifications,"
(ITS)inrecognizing thechallenge thistestingrepresents tothelimitedA.C.sourcesrequiredtobeoperablewhileshutdown.
Whenalicenseeknowsofnoreasonthesurveillances wouldnotbesatisfied, thedeferralisallowedbythe.NUREG.Theproposedchangesaredescribed indetailinsectionEofthisattachment.
T/Spagesthataremarkedtoshowtheproposedchangesareprovidedinattachments 2Aand2Bforunit1andunit2,respectively.
TheproposedT/Spages,withthechangesincorporated, preprovidedinattachments 3Aand3Bforunit1andunit2,respectively.
B.Description oftheCurrentRequirements InModes5and6,T/SLimitingCondition forOperation (LCO)3.8.1.2requirestheoperability ofasingleoffsitepowersupplyandasingleemergency dieselgenerator (EDG).Fortheserequiredshutdownpowersupplies, T/Ssurveillance requirement 4'.1.2invokesthesamesurveillances asthosespecified inModes1through4(SRs4.8.1.1.1 and4.8.1.1.2) withtheoneexception ofSR4.8.1.1.2.a
~5(paralleling theEDGswithoffsitepowerforaone-hour, orgreater,loadtest).Table1listsanddescribes thesurveillances requiredinModes5and6.OnlythoseSRsinboldandparentheses aresubjecttodeferralbythisamendment request.Alsoincludedinthetable,forreference, arethecorresponding SRsoftheITS.
Attachment 1toAEP:NRC:1322 Page2T/S4.8.1.2SRsand(frequency) 4.8.1.1.1.a (7das)TABLElCorresponding NUREG-1431 SRs3.8.1.1Testdescription/comments Breakeralignment checksandindicated oweravailabilit 4.8.1.1.1.b (18-months) 3.8.1.84.8.1.1.2.a.1
(*)3.8.1.44.8.1.1.2.a.2
(*)3.8.3.14.8.1.1.2.a.3
(*)3.8.1.6Offsi.tepowertransfercapability.
DatankfuellevelcheckStoraetankfuellevelcheckFueltransferumtest4.8.1.1.2.a.4
(*)3.8.1.2and3.8.1.7StartTestandFastStartTest(4.8.1.1.2.a.4 isperformed asafaststartever184das)4.8.1.1.2.a.6
(*)N/A4.8.1.1.2.b.l
(**)3.8.1.54.8.1.1.2.b.2
(**)3.8.3.54.8.1.1.2.c
(***)3.8.3.33.8.3.34.8.1.1.2.d
(*~)DieselStandbyalinmentverification DaTankaccumulated waterremovalStoraeTankaccumulated waterremovalNewfuelsamlinStoraeTankfuelsamlin4.8.1.1~2.e.l.(18-months) 4.8.1.1.2.e.2.
(18-months) 4.8.1.1.2.e.3.
(18-months)
(4.8.l.1.2.e.4.a)andb))(18-months) 4.8.1.1.2.e.5.
(18-months)
(4.8.1.1.2.e.6.a),
b)andc))(18-months) 4.8.1.1.2.e.7.
(18-months)
(4.8.1.1.2.e.8.)
(18-months)
(4.8.l.l.2.e.9.a),b)andc))(18-months)
(4.8.1.1.2.e.10 a)andb)(18-months)
(4.8.1.1.2.e.ll)
(18-months) 4.8.1.1.2.
f.l(10ears)4.8.1.1.2.f.2 (10ears)4.8.1.1.2.f.3 (10ears)N/A3.8.1.93.8.1.103.8.1.113.8.1.123.8.1.19and3.8.1.133.8.1.14and3.8.1.15Intentmetby3.8.1.19.c.5.
3.8.1.163.8.1.173.8.1.183.8.3.6N/A3.8.1.20Dieselengineinspection permanufacturer's recommendations Single-Load Rejection TestFull-Load Rejection TestLoss-of-Offsite-Power (LOOP)Test.Includesloadsheddingandloadsequencing verifications.
SafetyInjection Actuation Signal(SIAS)Test CombinedSIASandLOOPTestsincluding Protective TripBypassTestEndurance andMarginTestandHotRestarttest.TheMarginTest(loadingtogreaterthanratedpower)isnotperformed atCook.MaximumAuto-Connected LoadTestSynchronizing TestandEmergency LoadTransferTestTestModeChange-Over Testwithconcurrent verification ofenergized safetyloadsLoadsequencer timingverification FueloilstoragetankcleaningFueloilsystemleaktestRedundant UnitStartingIndependence Test*PerT/STable4.8-1onastaggered testbasis(currently every31days)**Every31days***Priortoaddingfueltothestoragetanks J
Attachment 1toAEP:NRC:1322 Page3CDBasesfortheCurrentRequirements Asdescribed inthecurrentBasesforT/S3/4.8.1.2, theoperability oftheminimumspecified A.C.powersourcesduringshutdownandrefuel'ing providesassurance that1)thefacilitycanbemaintained intheshutdownorrefueling condition forextendedtimeperiodsand2)sufficient instrumentation andcontrolcapability isavailable formonitori'ng andmaintaining thefacilitystatus.D.NeedforRevisionoftheRequirement BackroundThesubjectsurveillances ofthisamendment requestresultinplanttransients thatcannotbesafelyperformed atpower.Therefore, thesurveillances areperformed whiletheplantisshutdown, typically forplannedrefueling outages.However,thenecessary equipment toperformthetestingmaynotbeavailable duringextendedoutages(including important non-safety equipment thatisdemonstrated toautomatically disconnect fromtheemergency bussesduringthetesting).
Furthermore, muchofthesafetyequipment necessary forthetestingisnotrequiredbytheT/SsinModes5and6orisactuallyrequiredtobeinoperable forothersafetyconsiderations (suchasthepotential toinadvertently damagetheplantfromoverpressurization whilecold).Fornormaldurationoutages,thesubjectsurveillances rarelyresultinoutageconflicts becausethe18-monthsurveillance interval(plusallowedextension) accommodates performance ofthetestingafteroutagecompletion andjustpriortoenteringMode4.Atthistimethe~necessary equipment tosupportthetestinghasbeenmadereadyfortheplantrestartsHoweverinthecaseofextendedoutages,particularly whenthedurationwasnotinitially anticipated, thesesurveillances maycomedueinmid.outage.Whenthisoccurs,theonlyavailable optionistosuspendoutageactivities sothattheplantcanbeplacedinacondition toperformthetesting,or,declarethedieselsT/Sinoperable andcomplywiththeapplicable actionsuntilthetestingcanbedone.Eitheroptionresultsinadelayintheoutagewithoutacompensating increaseinsafetybecausethedieselsmaybereliedupontoaccomplish theirfunctioninModes5and6withoutthesubjectsurveillances beingcurrent(seedetailsofCookjustification inF).Inaddition, therequiredtestingsubjectsthelimitedA.C.sourcesrequiredinModes5and6toasignificant transient.
Atestcomplication atthistimecouldresultinlossoftherequiredA.C.supplies.
Thissituation, anditsunnecessary impact,hasbeenanticipated andcorrected bytheITS.TheITSdoesnotrequire"thesubjectsurveillances tobeperformed ontherequiredoperableA.C.sourceswheninModes5and6.However,thisflexibility isnotpermitted bytheCookunit1andunit2T/Ss.CookextendedoutaesCookunits1and2havebeenshutdownsinceSeptember of1997and p~C Attachment 1toAEP:NRC:1322 Page4Lcurrently remaininanextendedoutage.Sufficient equipment isnotavailable toperformtherequiredsurveillance testingatthespecified surveillance intervals.
Theunit1surveillance intervalexpiredonMarch1and3,1999,forthe1CDand1ABEDGsrespectively, andbothunit1EDGsweredeclaredT/Sinoperable.
Itisnotedthatatthistime,theunit1andunit2EDGswerealreadydeclaredinoperable duetoseismicqualification issuesinvolving HFArelays(hingedarmatureauxiliary) intheEDGand4KVsafetymotorcontrolcircuits(thiscondition wasreportedvialicenseeEventReport1999-001-00).
Correction, oftheHFArelayproblems, andappropriate postmaintenance testing,willrestoreoperability oftheEDGswithnoadditional outageimpact.However,unlesstheamendment isapproved, EDGinoperability duetotheexpiredsurveillances willcontinuetohaveanadverseimpactuntilthesurveillances canbeperformed.
Currently, unit1isinMode5withplanttemperature maintained atapproximately 125'F.Lowtemperature overpressure protection controlsareineffectwithcorresponding tagoutsonbothsafetyinjection (SI)pumpsandonecentrifugal chargingpump(CCP).Inaddition, thecontainment spraysystem(CTS)isundergoing considerable maintenance/modification topipingandpumps,including installation ofafull-flow recirculation line.Completion oftheCTSworkisnecessary tosupportthetestingandcouldrequiretheunit1EDGstoremainT/Sinoperable untilthesummerof1999.ThissameT/Sreliefwillbeneededforunit2inDecember1999whenthesurveillances becomeoverdue.E.Description oftheProposedChanges1&MproposestoreviseT/S3/4.8.1.2 topermitaone-timeextension ofthe18-monthsurveillance intervalforSRs4.8.1.1.2.e.4.a) andb);4.8.1.1.2.e.6
'),b)andc);4.8.1.1.2.e.8; 4.8.1.1.2.e.9.a),
b)andc);4.8.1.1.2.e.10.a) andb);and4.8.1.1.2.e.ll forunit1and2.Inaddition, forunit2only,aminoradministrative changeisincludedtodeletethereference toT/S4.0.8thatisnolongerapplicable.
Forunit1only,aneditorial correction ismadetotheactionstatement 3.8.1.2toaddtheword"or"betweenthewords"COREALTERATIONS" and"positive reactivity changes."
Thesurveillance intervalextension willbeaccomplished byadditionofthefollowing, statement toT/Ssurveillance requirement 4.8.1.2:rCommencing in1999duringtheextendedshutdowninitiated in1997,the18-monthsurveillance requirements 4.8.1.1.2.e.4.a) andb);4.8.1.1.2.e.6.a),
b)andc);4.8.1.1.2.e.8; 4.8.1.1.2.e.9.a),
b)andc);4.8.1.1.2.e.lO.a) andb);and4.8.1.1.2.e.ll maybedelayedonetimeuntiljustpriortothefirstentryintoMODE4following theshutdown.
1&MproposestorevisethebasesforT/S4.,8.1.2todescribethereasonfortheextendedsurveillance intervals.
Attachment 1toAEP:NRC:1322 Page5F.BasesoftheProposedChangesSummarofRelevantPoints~Thesurveillance intervalextensions proposedbythisrequestarepermitted bytheITS.~Asimilarrequestwasapprovedforanotherlicenseeduringanextendedoutage.~Eachdeferredsurveillance hasbeenreviewedandisnotessential todemonstrate dieselreliability inMode5and6.~Recentperformance ofthedeferredsurveillances hasnotresultedinfailuresthatwouldchallenge dieselfunctional requirements inModes5and6.~APRAestimatewasperformed oftheincreaseinEDGunavailability, inModes5and6,duetodeferralofthesubjectsurveillances.
Theresultsdemonstrated thatthedeferrals donotsignificantly increaseEDGunavailability inModes5and6.~EventsanalyzedinModes5and6do'nottakecr'editforautostartingoftheEDGsandprocedures existtomanuallystartandloadanEDGifanautostartsequencefails.~Appropriate administrative controlsareinplacetoensureonsiteoutageactivities donotchallenge theoffsitepowertransmission lines.~Thesurveillances thatwillcontinuetobeperformed provideadequateassurance theEDGsarecapableofsupplying emergency powerforthecurrentconditions.
~Theamendment requestdoesnotreducethenumberofrequiredoperablepowersupplies.
~Theamendment requestdoesnotmodifytheactionsrequiredforaninoperable powersupply.~Theplantisdesignedsuchthatanalyzedaccidents credibleinModes5and6wouldnotbeinitiated byaninterruption ofA.C.power.~Thegreatlyreducedfissionproductactivities andfissionproductdecayheatratescurrently existingprovideassurance thattheconsequences ofanyaccidentorinadvertent releaseofradioactive materials areboundedbytheexistinganalysis.
~AlthoughthesubjectT/SrequiresonlyasingleoperableoffsitepowersupplyandasingleoperableEDGinModes5and6,administrative requirements forreducingshutdownrisksupplement theT/Srequirements whenappropriate.
EffectoftheExtendedShutdownonDecaheatandFissionProduct~ActivitNUREG-1431 providesthefollowing introduction tothebasesforACSources-Shutdown:
Ingeneral,whentheunitisshutdown,theTechnical Specifications requirements, ensurethattheunithasthecapability tomitigatetheconsequences ofpostulated accidents.
However,assumingasinglefailureandconcurrent lossofalloffsiteorallonsitepowerisnotrequired.
Therationale forthisisbasedonthefactthatmanyDesignBasisAccidents (DBAs)thatareanalyzedinModes1,2,3,and4havenospecificanalysesinModes5and6.WorstcaseboundingeventsaredeemednotcredibleinModes5and6becausetheenergycontained Attachment 1toAEP:NRC:1322 Page6withinthereactorpressureboundary, reactorcoolanttemperature andpressure, andthecorresponding stressesresultintheprobabilities ofoccurrence beingsignificantly reducedoreliminated, andinminimalconsequences.
Thesedeviations fromDBAanalysisassumptions anddesignrequirements duringshutdownconditions areallowedbytheLCOforrequiredsystems.'IThisisparticularly trueforCookunits1and2atthecurrenttimeduetothe18monthsofcontinuous shutdownpreceding thisamendment request.Reduceddecayheatloadswouldprovideadditional time,following disruption ofA.C.power,torestorepowerpriortoreachingthemaximumallowable temperature of200'FforMode5.Currently, forunit1,theestimated timetoreach200'Ffrom130'Fis18hours.ForUnit2,theestimated timetoreach200'Ffrom130'Fis12hours.Fissionproductactivities inthefuelassemblypellet-to-claddinggapsaregreatlyreduced.Thefuelhandlingaccidentanalysisconsiders thethyroiddoseatthesiteboundaryandinthelowpopulation zone.Thisdoseisdominated bytheisotopeiodine131,whichalsodecaysmoreslowlythantheotheriodinecontributors tothedose.Theactivityofiodine131decreases byone-halfevery8.05days.Thecurrentshutdownperiodofapproximately 18-months represents over70half-lives.
Discussion ofSafetAnalsisEvents1through8,listedbelow,areanalyzedintheunit1and2UpdatedFinalSafetyAnalysisReports(UFSAR)inSection14.2,"StandbySafeguards Analysis":
1.2.3~5.6.7.8.FuelhandlingaccidentWasteliquidreleaseWastegasreleaseSteamgenerator tuberuptureSteampipe"rupture Ruptureofcontrolrodmechanism hous'ing-rodclustercontrol(RCC)assemblyejectionEnvironmental consequences following secondary systemaccidents Ruptureofafeedline(Unit2only)OthereventsandtheirUFSARsectioninclude:9.Uncontrolled RCCA(rodcontrolclusterassembly) withdrawal fromasubcritical condition (Section14.1.1)10.Uncontrolled BoronDilution(Section14.1.5)Therelevance oftheseeventstothisamendment requestisasfollows:1.FuelhandlingaccidentTheonlytimeafuelhandlingaccidentcouldoccurisduringthehandlingofafuelassembly.
Thedesignoffuelhandlingequipment issuchthataninterruption ofA.C.powerwouldnotcauseafuelelementtobeinadvertently dropped.Therefore, aninterruptS.
onorlossofA.C.power Attachment 1toAEP:NRC:1322 Page7couldnotinadvertently releaseafuelelementandconsequently, theprobability ofthiseventisnotincreased.
Inaddition, administrative controlsandcraneinterlocks precludethemovementofloadsgreaterthan2500pounds,orwiththepotential forexcessive impactenergy,overthespentfuelpool.Thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurance thattheconsequences ofthiseventareboundedbytheexistinganalysis.
2.Accidental ReleaseofRadioactive LiquidsTheinadvertent releaseofradioactive liquidwastestotheenvironment wasevaluated forthewasteevaporator condensate andmonitortanks,condensate storagetank,primarywaterstoragetank,refueling waterstoragetank(RWST),theauxiliary buildingstoragetanksandthechemicalandvolumecontrolsystem(CVCS)holduptanks.Itwasconcluded intheChapter14evaluation thatlossofliquidfromthesetankstotheenvironment isnotacredibleaccident.
Thisconclusion doesnotdependonoperating mode,hence,furtherevaluation ofthiseventisnotrequired.
3.WasteGasReleaseRadioactive gasesareintroduced intothereactorcoolantbytheescapeoffissionproductsifdefectsexistedinthefuelcladding.
Theprocessing ofthereactorcoolantbyauxiliary systemsresultsintheaccumulation ofradioactive gasesinvarioustanks.Thetwomainsourcesofanysignificant gaseousradioactivity thatcouldoccurwouldbethevolumecontroltankandthegasdecaytanks.Itisassumedthatatankrupturesby'anunspecified mechanism afterthereactorhasbeenoperating foronecorecyclewith1%defectsinthefuelcladding.
Thereisnoidentified mechanism bywhichaninterruption orlossofpowercouldresultinatankrupture.Therefore, itisconcluded thattheprobability ofoccurrence ofatankrupturewouldnotbesignificantly increased byaninterruption orlossofA.C.power.Furthermore, thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurance thattheconsequences ofthiseventareboundedbythecurrentanalysis.
Events4through8arenotrequiredtobeanalyzedinModes5and6duetonegligible storedenergyintheprimaryandsecondary systemsbelowtheMode5temperature limitof200'F.9.Uncontrolled RCCAwithdrawal fromasubcritical condition Thiseventcanonlyoccurwiththereactortripbreakersclosedandthecontrolroddrivemechanisms (CRDMs)energized.
Withtheexception oftestingorspecialmaintenance, theroddrivemotorgenerator setremainstaggedoutuntilMode3andthisalonewouldprecluderodmovement.
Iftheconditions forrodwithdrawal aremet,twooperablesourcerangeinstruments andtworeactortrip


Attachment1toAEP:NRC:1322Page8channelsandtripbreakersmustbeoperable.An'interruptionorlossofpowerwouldprecludeCRDMmovementandreleasethecontrolrods.Thesourcerangeinstrumentswouldremainavailable.Therefore,itisconcludedthattheprobabilityofoccurrenceof~anuncontrolledRCCAwithdrawalwouldnotbeincreasedbyaninterruptionorlossofA.C.powerinModes5or6.I10.UncontrolledBoronDilutionThesourceofwaterforthiseventisprimarygradewaterviathereactormakeupportionoftheCVCS.TheCVCSisdesignedtolimit,evenundervariouspostulatedfailuremodes,thepotentialrateofdilutiontoavaluethatprovidestheoperatorsufficienttimetocorrectthesituationinasafeandorderlymanner.Therateofadditionofunboratedwatermakeuptothereactorcoolantsystemislimitedbythecapacityoftheprimarywaterpumps.Themaximumadditionrateinthiscaseis225gpmwithbothprimarywaterpumpsrunning.AninterruptionorlossofA.C.powerwouldprecludepumpoperationandaccidentaldilution.AcceptableconsequencesforthiseventrelyonprecludingitsoccurrenceandbydetectionwiththesourcerangenuclearinstrumentationrequiredbytheT/SinModes5and6.PDuringcertaintypesofoperation,itisplausiblethattheRWSTisatalowerboricacidconcentrationthanthereactorcoolantsystemwater.DuetothelargereactivitymarginsinherentinthedesignbasisfortheRWSTboronconcentrationandslowdilutionprocess,ithasbeendeterminedthatthisneednotbeconsideredasadilutionsource(thisconclusionisrecognizedbyanexistingfootnotetoT/S3/4.8.1.2).Therefore,itisconcludedthattheprobabilityofoccurrenceofanuncontrolledborondilutionfromtheRWSTwouldnotbeincreasedbyaninterruptionorlossofA.C.power.DiscussionofStationBlackout(SBO)Stationblackout(lossofallA.C.power)wasevaluatedforCookunits1and2inaccordancewiththeNuclearManagementandResourceCouncil(NUMARC)87-00,"GuidelinesandTechnicalBasisforNUMARCInitiativesAddressingStationBlackoutatLightWaterReactors,"Rev.1.TheNUMARCguidelinesassumeaSBOoccursatpowerandisevaluatedbasedoncopingwiththeeventandmaintainingtheplantinhotstandbyforaspecifiedduration.ThebasisforthisassumptionisprovidedinNUMARC87-00,paragraph2.'2.2:(1)Thepotentialforcoredamagefromastationblackoutisboundedbyeventsinitiatedfrom100%powerduetothepresenceofsubstantialdecayheat.(2)Transientsinitiatedfromnormaloperatingconditionsareconsideredmostprobable.Therefore,anSBOwasnotrequiredtobeevaluatedinModes5and6.Nevertheless,SBOsinModes5and6haveoccurredintheindustryandhavebeenthesubjectofgenericcorrespondence.Forexample,IEN90-25,Supplement1,"LossOfVitalACPower Attachment1toAEP:NRC:1322Page9WithSubsequentReactorCoolantSystemHeat-Up",describestheVogtlenuclearplanteventinwhichatruckcauseddamageintheelectricalswitchyardandinitiatedaSBO.OccurrenceofasimilareventatCookisunlikelyduetoadministrativecontrolsoveraccessandworkintheswitchyardareasduringoutages.ThefollowingdiscussionisprovidedtodemonstratethattheprobabilityofanSBOinModes5and6willnotbesignificantlyincreasedbydeferralofthesubjectsurveillances.AspartoftheNUMARC87-00guidelines,1&McommittedtoimplementandmaintainanEDGreliabilityprogram.ThisprogramisimplementedbyprocedurePMI6080,Rev.2,"EmergencyDieselGenerator(EDG)ReliabilityMonitoringProgram."Theprogramisapplicableatalltimes,includingModes5and6.Aspartofthisprogram,CookNuclearPlantisrequiredtomaintaintheEDGscreditedintheSBOcopingassessmentatorabovespecifiedtargetreliabilitylevels.1&McommittedtomaintainanEDGtargetreliabilityofgreaterthan0.975,asdescribedbytheNUMARCguidelines.-Ifthetargetisnotmet,specificremedialactionsarerequiredtorestoretheEDGstoabovethetargetreliabilitylevel.TheCookNuclearPlantunit1and2EDGscurrentlymeettheirtargetreliabilitylevels.TheSBOprogramwasthesubjectofsafetyevaluationreportsdatedOctober31,1991andApril23,1992'ieselReliabilitInadditiontotheNUMARCprogramdescribedaboveforSBO,EDGreliabilityistrackedaspartof10CFR50.65"Requirementsformonitoringtheeffectivenessofmaintenanceatnuclearpowerplants,"(i.e.,theMaintenanceRule)andbyT/Ssurveillancetesting.WhenrequiredbyT/STable4.8-1,theEDGsareplacedonanacceleratedtestfrequency.Theunit1CDEDGandtheunit2ABEDGhaveeachbeenonanacceleratedtestfrequencyononeoccasionsincethe1997shutdowns.The1CDEDGwasonanacceleratedtestfrequencyduetoconsecutivetestfailuresfromfueloilleaksatindividualinjectors.The2ABEDGwasonanacceleratedtestfrequencyduetoconsecutivetestfailuresfromabrokenbracketontheexhaustmanifoldononeoccasionandbrokenorleakinginjectorlinesonthreeoccasions.Thesefailuresareindividualmechanicalfailuresnotdirectlyrelatedtotheloadshedding,loadsequencing,andemergencystartingcontxolcircuitsoftheEDGs.Individualmechanicalfailuressuchasthesearetypically(andinthiscasewere)detectedandcorrectedduringmonthlytestingactivitiesnotinvolvingthesubjectdeferredsurveillances.Currently,allfourEDGsareonnormalT/Ssurveillanceschedules.TheT/Stestfailuresdescribedabove,forthe2ABEDG,alsocontributedtothismachinebeingplacedinaMaintenanceRule"(a)(1)"statusundertheMaintenanceRuletrendingprogram.Othercontributorstothe(a)(1)statusinvolvedafailedvoltageregulatorandafailedstartingaircheckvalve(thesetwofailuresoccurredpriortothe1997unit2shutdown).Noneofthesefailuresinvolvedadieselloadshedorloadsequencingcontrolcircuitmalfunctionandwerenotidentifiedduringperformanceofanyofthesubjectsurveillances.The(a)(1) 1ItE Attachment1toAEP:NRC:1322Page10statusundertheMaintenanceruleisaclassificationindicatingthatestablishedperformancecriteriaarenotbeingmet.Specificactionsarerequiredtocorrecttheconditions,andmonitorperformance,untiltheestablishedgoalsaremet.Thismonitoringiscurrentlyinprogressanditisanticipatedthatthe2ABEDGwillbeoutofthe(a)(1)statuspriortothesubjectsurveillancesbecomingdue(seeadditionaldiscussionbelowunder"EstimateofEDGunavailabilitduetotheextendedsurveillances").EstimateofEDGunavailabilitduetotheextendedsurveillancesAnassessmentoftheloadsheddingandsequencingcontrolcircuitswasmadetodetermineaboundingincreaseindieselunavailabilityduetodeferringthesubjectsurveillances.TheassessmentwasperformedusingPRAtechniques.ThestartingpointfortheassessmentwastheMode1PRAEDGunavailabilitymodel.EDGfailureduetooverloadwasconsideredintheMode1PRAEDGmodelandwasimplicitlyincludedinthe"FailtoRun"failuremode.TheMode1EDGmodelalsoincludesunavailability.oftheEDGscausedbytheunavailabilityofrequiredsupportsystems,suchasEssentialServiceWater,250VDC,androomcooling.TheoverallMode1EDGaverageunavailabilityduetoallcauseswasdeterminedasapproximately13.2daysperyear.Forthepurposesofthisassessment,itwasdecidedtoaddasimplifiedrepresentationofloadsheddingandsequencingcontrolcircuitsintheMode1EDGunavailabilitymodeltoallowanexplicitestimateoftheimpactofthesecircuits.OnekeyassumptionofthePRAmodeladditionisthatthefailureofanysingleload-shedrelaywillresultinanEDGoverload.ThisconservativeassumptionismadetosimplifythemodeledEDGresponse;itisrecognizedthatanEDGoverloadconditionisnotacertaintyifasingleload-sheddingrelayfailstocloseandthatmanyoftheloadsrequiredtobeshedarealreadysecuredinModes5and6.AnotherkeysimplifyingassumptionofthePRAmodeladditionisthat,giventheoccurrenceofanSIsignal,thefailureofanysingleSIload-conservationrelaywillresultinanEDGoverload.Finally,themodelalsoconsidersrelayfailuresthatcouldresultinsimultaneousstartsofsequencedloadstocauseanEDGoverload;inthiscase,simultaneousBlack-outandSIsignalsarerequired.TheaveragecontributiontoEDGunavailabilityduetothefailureofanyoftheserelayswasdeterminedusingElectricPowerResearchInstitute(EPRI)data.TheadditionoftheloadsheddingandsequencingcontrolcircuitmodeljustdescribedtotheMode1EDGunavailabilitymodelcontributed2.8%toEDGunavailability.Thus,forMode5EDGunavailabilitywasestimatedas13.6daysperyear.Theeffectofincreasingthetimeintervalbetweenperformanceofthesubjectsurveillanceswasestimatedasfollows.ThefailuredatafortherelaysweremodifiedbylinearlyscalingthenominaldatabytheratiooftheassumedsurveillanceintervaltothenominalsurveillanceintervalbasedonguidancecontainedinNUREG/CR-4550(Volume1,Revision1,page8-7).Inotherwords,foranassumedsurveillanceintervalof30months,thenominalfailuredatawasmultipliedbyafactorof30/18or1.67.Similarly,foran,assumedsurveillanceintervalof42months,thenominalfailuredatawasmultipliedbyafactorof42/18or2.33.TheresultofthisapproachwasanestimatedincreaseinEDG
Attachment 1toAEP:NRC:1322 Page8channelsandtripbreakersmustbeoperable.
An'interruption orlossofpowerwouldprecludeCRDMmovementandreleasethecontrolrods.Thesourcerangeinstruments wouldremainavailable.
Therefore, itisconcluded thattheprobability ofoccurrence of~anuncontrolled RCCAwithdrawal wouldnotbeincreased byaninterruption orlossofA.C.powerinModes5or6.I10.Uncontrolled BoronDilutionThesourceofwaterforthiseventisprimarygradewaterviathereactormakeupportionoftheCVCS.TheCVCSisdesignedtolimit,evenundervariouspostulated failuremodes,thepotential rateofdilutiontoavaluethatprovidestheoperatorsufficient timetocorrectthesituation inasafeandorderlymanner.Therateofadditionofunborated watermakeuptothereactorcoolantsystemislimitedbythecapacityoftheprimarywaterpumps.Themaximumadditionrateinthiscaseis225gpmwithbothprimarywaterpumpsrunning.Aninterruption orlossofA.C.powerwouldprecludepumpoperation andaccidental dilution.
Acceptable consequences forthiseventrelyonprecluding itsoccurrence andbydetection withthesourcerangenuclearinstrumentation requiredbytheT/SinModes5and6.PDuringcertaintypesofoperation, itisplausible thattheRWSTisatalowerboricacidconcentration thanthereactorcoolantsystemwater.Duetothelargereactivity marginsinherentinthedesignbasisfortheRWSTboronconcentration andslowdilutionprocess,ithasbeendetermined thatthisneednotbeconsidered asadilutionsource(thisconclusion isrecognized byanexistingfootnotetoT/S3/4.8.1.2).
Therefore, itisconcluded thattheprobability ofoccurrence ofanuncontrolled borondilutionfromtheRWSTwouldnotbeincreased byaninterruption orlossofA.C.power.Discussion ofStationBlackout(SBO)Stationblackout(lossofallA.C.power)wasevaluated forCookunits1and2inaccordance withtheNuclearManagement andResourceCouncil(NUMARC)87-00,"Guidelines andTechnical BasisforNUMARCInitiatives Addressing StationBlackoutatLightWaterReactors,"
Rev.1.TheNUMARCguidelines assumeaSBOoccursatpowerandisevaluated basedoncopingwiththeeventandmaintaining theplantinhotstandbyforaspecified duration.
Thebasisforthisassumption isprovidedinNUMARC87-00,paragraph 2.'2.2:(1)Thepotential forcoredamagefromastationblackoutisboundedbyeventsinitiated from100%powerduetothepresenceofsubstantial decayheat.(2)Transients initiated fromnormaloperating conditions areconsidered mostprobable.
Therefore, anSBOwasnotrequiredtobeevaluated inModes5and6.Nevertheless, SBOsinModes5and6haveoccurredintheindustryandhavebeenthesubjectofgenericcorrespondence.
Forexample,IEN90-25,Supplement 1,"LossOfVitalACPower Attachment 1toAEP:NRC:1322 Page9WithSubsequent ReactorCoolantSystemHeat-Up",
describes theVogtlenuclearplanteventinwhichatruckcauseddamageintheelectrical switchyard andinitiated aSBO.Occurrence ofasimilareventatCookisunlikelyduetoadministrative controlsoveraccessandworkintheswitchyard areasduringoutages.Thefollowing discussion isprovidedtodemonstrate thattheprobability ofanSBOinModes5and6willnotbesignificantly increased bydeferralofthesubjectsurveillances.
AspartoftheNUMARC87-00guidelines, 1&Mcommitted toimplement andmaintainanEDGreliability program.Thisprogramisimplemented byprocedure PMI6080,Rev.2,"Emergency DieselGenerator (EDG)Reliability Monitoring Program."
Theprogramisapplicable atalltimes,including Modes5and6.Aspartofthisprogram,CookNuclearPlantisrequiredtomaintaintheEDGscreditedintheSBOcopingassessment atorabovespecified targetreliability levels.1&Mcommitted tomaintainanEDGtargetreliability ofgreaterthan0.975,asdescribed bytheNUMARCguidelines.
-Ifthetargetisnotmet,specificremedialactionsarerequiredtorestoretheEDGstoabovethetargetreliability level.TheCookNuclearPlantunit1and2EDGscurrently meettheirtargetreliability levels.TheSBOprogramwasthesubjectofsafetyevaluation reportsdatedOctober31,1991andApril23,1992'ieselReliabilit InadditiontotheNUMARCprogramdescribed aboveforSBO,EDGreliability istrackedaspartof10CFR50.65"Requirements formonitoring theeffectiveness ofmaintenance atnuclearpowerplants,"(i.e.,theMaintenance Rule)andbyT/Ssurveillance testing.WhenrequiredbyT/STable4.8-1,theEDGsareplacedonanaccelerated testfrequency.
Theunit1CDEDGandtheunit2ABEDGhaveeachbeenonanaccelerated testfrequency ononeoccasionsincethe1997shutdowns.
The1CDEDGwasonanaccelerated testfrequency duetoconsecutive testfailuresfromfueloilleaksatindividual injectors.
The2ABEDGwasonanaccelerated testfrequency duetoconsecutive testfailuresfromabrokenbracketontheexhaustmanifoldononeoccasionandbrokenorleakinginjectorlinesonthreeoccasions.
Thesefailuresareindividual mechanical failuresnotdirectlyrelatedtotheloadshedding, loadsequencing, andemergency startingcontxolcircuitsoftheEDGs.Individual mechanical failuressuchasthesearetypically (andinthiscasewere)detectedandcorrected duringmonthlytestingactivities notinvolving thesubjectdeferredsurveillances.
Currently, allfourEDGsareonnormalT/Ssurveillance schedules.
TheT/Stestfailuresdescribed above,forthe2ABEDG,alsocontributed tothismachinebeingplacedinaMaintenance Rule"(a)(1)"statusundertheMaintenance Ruletrendingprogram.Othercontributors tothe(a)(1)statusinvolvedafailedvoltageregulator andafailedstartingaircheckvalve(thesetwofailuresoccurredpriortothe1997unit2shutdown).
Noneofthesefailuresinvolvedadieselloadshedorloadsequencing controlcircuitmalfunction andwerenotidentified duringperformance ofanyofthesubjectsurveillances.
The(a)(1) 1ItE Attachment 1toAEP:NRC:1322 Page10statusundertheMaintenance ruleisaclassification indicating thatestablished performance criteriaarenotbeingmet.Specificactionsarerequiredtocorrecttheconditions, andmonitorperformance, untiltheestablished goalsaremet.Thismonitoring iscurrently inprogressanditisanticipated thatthe2ABEDGwillbeoutofthe(a)(1)statuspriortothesubjectsurveillances becomingdue(seeadditional discussion belowunder"Estimate ofEDGunavailabilit duetotheextendedsurveillances").
EstimateofEDGunavailabilit duetotheextendedsurveillances Anassessment oftheloadsheddingandsequencing controlcircuitswasmadetodetermine aboundingincreaseindieselunavailability duetodeferring thesubjectsurveillances.
Theassessment wasperformed usingPRAtechniques.
Thestartingpointfortheassessment wastheMode1PRAEDGunavailability model.EDGfailureduetooverloadwasconsidered intheMode1PRAEDGmodelandwasimplicitly includedinthe"FailtoRun"failuremode.TheMode1EDGmodelalsoincludesunavailability.
oftheEDGscausedbytheunavailability ofrequiredsupportsystems,suchasEssential ServiceWater,250VDC,androomcooling.TheoverallMode1EDGaverageunavailability duetoallcauseswasdetermined asapproximately 13.2daysperyear.Forthepurposesofthisassessment, itwasdecidedtoaddasimplified representation ofloadsheddingandsequencing controlcircuitsintheMode1EDGunavailability modeltoallowanexplicitestimateoftheimpactofthesecircuits.
Onekeyassumption ofthePRAmodeladditionisthatthefailureofanysingleload-shed relaywillresultinanEDGoverload.
Thisconservative assumption ismadetosimplifythemodeledEDGresponse; itisrecognized thatanEDGoverloadcondition isnotacertainty ifasingleload-shedding relayfailstocloseandthatmanyoftheloadsrequiredtobeshedarealreadysecuredinModes5and6.Anotherkeysimplifying assumption ofthePRAmodeladditionisthat,giventheoccurrence ofanSIsignal,thefailureofanysingleSIload-conservation relaywillresultinanEDGoverload.
Finally,themodelalsoconsiders relayfailuresthatcouldresultinsimultaneous startsofsequenced loadstocauseanEDGoverload; inthiscase,simultaneous Black-outandSIsignalsarerequired.
Theaveragecontribution toEDGunavailability duetothefailureofanyoftheserelayswasdetermined usingElectricPowerResearchInstitute (EPRI)data.Theadditionoftheloadsheddingandsequencing controlcircuitmodeljustdescribed totheMode1EDGunavailability modelcontributed 2.8%toEDGunavailability.
Thus,forMode5EDGunavailability wasestimated as13.6daysperyear.Theeffectofincreasing thetimeintervalbetweenperformance ofthesubjectsurveillances wasestimated asfollows.Thefailuredatafortherelaysweremodifiedbylinearlyscalingthenominaldatabytheratiooftheassumedsurveillance intervaltothenominalsurveillance intervalbasedonguidancecontained inNUREG/CR-4550 (Volume1,Revision1,page8-7).Inotherwords,foranassumedsurveillance intervalof30months,thenominalfailuredatawasmultiplied byafactorof30/18or1.67.Similarly, foran,assumedsurveillance intervalof42months,thenominalfailuredatawasmultiplied byafactorof42/18or2.33.Theresultofthisapproachwasanestimated increaseinEDG


Attachment1toAEP:NRC:1322Page11unavailabilityof2.2%to13.9daysperyear,ifthesurveillanceintervalwasincreasedfrom18monthsto30months.TheestimatedincreaseinEDGunavailabilitywas4.0%to14.1daysperyear,ifthesurveillanceintervalwasincreasedfrom18monthsto42months.ThesenumbersshowthatincreasingtheEDGsurveillancetestintervalleadstoverysmallincreasesinEDGunavailability.Theimpactwouldbeexpectedtobesignificantlylowerifamoredetailedrepiesentationoftheload-sheddingcircuitrywasdevelopedorcreditwastakenforthepossibilityofoperatorrecoveryactions.PlantShutdownSafetandRiskManaementT/S3.8.1.2requiresasingleoffsitepowersupplyandasingleEDGtobeoperableinModes5and6.Thisrequirementisobservedbyadministrativepoliciesforreducingshutdownrisk(whennotpossibletheT/SActionstatementsarecompliedwith).AdministrativepoliciesrequiretheT/SrequirementstobesupplementedinMode5and6whenRCSinventoryisbelowspecifiedminimums~Whenthesespecifiedminimumsarenotmet,T/SrequirementsaresupplementedbyrequiringanadditionaloffsitesourceoranadditionalEDGtobeavailable.WheninMode5andMode6withreducedRCSinventory,anadditionaloffsitesourceandanadditionalEDGarerequiredtobeavailable.I&M'spoliciesforplantshutdownsafetyandriskmanagementhavebeenreviewedrelativetothesubjectdeferralsandarenotimpacted.SinificanceoftheDeferredSurveillanceReuirementsThefollowingisarestatementofeachdeferredsurveillancerequirementandadiscussionofitssignificanceinModes5and6:4.8.1.1.2.e.4.Simulatingalossofoffsitepowerbyitself,and:a)Verifyingde-energizationoftheemergencybussesandloadsheddingfromtheemergencybusses,b)Verifyingthatthedieselstartsontheauto-startsignal,energizestheemergencybusseswithpermanentlyconnectedloadswithin10seconds,energizestheauto-connectedshutdownloadsthroughtheloadsequencerandoperatesforgreaterthanorequalto5minuteswhileitsgeneratorisloadedwiththeshutdownloads.Afterloadsequencingiscompleted,thesteadystatevoltageandfrequencyoftheemergencybussesshallbemaintainedat4160+420voltsand60+1.2.Hzduringthetest.Thissurveillancetestsimulatesalossofoffsitepower(LOOP).FollowingthisLOOPsimulation,theEDGwouldautomaticallystartandload.lfproperloadsheddingdidnottakeplace,anEDGcouldbeoverloadedassoonasitenergizedtheemergencybusses.Improperloadsequencingcouldcauseamomentaryoverload.ThelikelihoodofeitheroftheseoccurrencesisconsideredverylowbasedonPRAassessmentoftherelayfailurerates,periodiccalibrationoftherelaysandtheresultsofthelasttwo4'.1.1.2.e~4surveillancetestsforeachEDG.Reviewofthetestsindicatedthatloadsheddingofnon-safetyloadsorsequencingofsafetyloadshadnotresultedinanEDGtest Attachment1toAEP:NRC:1322Page12failure.Inoneinstance,fortheunit2CDEDG,theGroupC4pressurizerheatersfailedtoloadshed.Thefaultwasdeterminedtobeinthebreakerandnotintheloadshedrelay.TheadditionalloadrepresentedbytheseheatersdidnotresultinexceedingtheavailablecapacityonthismachineandwouldnothaveresultedinlossoftheEDGduringanactualLOOP.IntheunlikelyeventthatanautostartofanEDGwasunsuccessful,approvedproceduresexisttomanuallystarttheEDGsandmanuallystartrequiredloads.Basedonreviewofthetestingandavailabilityofappropriateprocedures,I&MconcludedthatalossofoffsitepowerinModes5and6wouldresultinasuccessfulautomaticormanualstartandloadoftheEDGs.4.8.1.1.2.e.6.SimulatingalossofoffsitepowerinconjunctionwithaSafetyInjectionactuationtestsignal,andby:a)Verifyingde-energizationoftheemergencybussesand'oadsheddingfromtheemergencybuses,b)Verifyingthatthedieselstartsontheauto-startsignal,energizestheemergencybusseswithpermanentlyconnectedloadswithin10seconds,energizestheauto-connectedemergency(accident)loadsthroughtheloadsequencerandoperatesforgreaterthanorequalto5minuteswhileitsgeneratorisloadedwiththeemergencyloads.Afterloadsequencingiscompleted,thesteadystatevoltageandfrequencyoftheemergencybussesshallbemaintainedat4160+420voltsand60+1.2.Hz.Thevoltageandfrequencyshallbemaintainedwithintheselimitsfortheremainderofthistest,andc)Verifyingthatallautomaticdieselgeneratortrips,exceptengineoverspeedandgeneratordifferential,areautomaticallybypasseduponlossofvoltageontheemergencybusandlorSafetyInjectionactuationsignal.Thistestissimilarto4.8.1.1.2.e.4,above,inthattheloadsheddingfunctionisrepeatedandsafetyloadsaresequencedon.However,intheloadsequencingwithaconcurrentsafetyinjectionactuationsignal(SIAS),moreloadsarepickedupandtheCTSpumpsarestarted.ThisresultsinthemaximumEDGload.InModes5and6,startingoftheCTSpumpsisnotrequiredorpermitted.Additionally,inModes5and6,avalidSIASisnotcredibleandtheSIASactuationlogicisnotrequiredtobeoperable.Therefore,thefullloadsequencedemonstratedbythistestisunlikelytooccurinModes5and6.OnaLOOP,inModes5and6,theEDGwouldrespondasdescribedinsurveillance4.8.1.1.2.e.4above.4.8.1.1.2.e.8.Determinethattheauto-connectedloadstoeachdieselgeneratordonotexceed3500kw.ThistestconfirmsthatallsafetyrelatedloadsautomaticallyconnectedtotheEDGsunderemergencyconditionsdonotexceedthecontinuousdutyratingoftheEDG.Theimportanceofthis Attachment1toAEP:NRC:1322Page13testinginModes5and6isgreatlyreduced.WhileinModes5and6below200'F,mostoftheemergencycorecoolingsystempumpsandtheCTSaremaintainedinaconfigurationtoprecludeautomaticactuation.'herefore,duetothelimitednumberofsafetyloadsrequiredtobeoperableinModes5and6,thereisadequateassurancethatEDGcapacitywouldnotbeexceededbytheauto-connectedloads.4.8.1.1.2.e.9.Verifyingthedieselgenerator'scapabilityto:a)Synchronizewiththeoffsitepowersourcewhilethegeneratorisloadedwithitsemergencyloadsuponasimulatedrestorationofoffsitepower.b)Transferitsloadstotheoffsitepowersource,andc)Berestoredtoitsstandbystatus.TheoffsitepowersupplyisconsideredtobethepreferredpowersourceduringaccidentmitigationwiththeEDGsactingasthebackupemergencysupply.IncaseofanEngineeredSafetyFeaturesactuationinwhichtheoffsitepowersourcewasnotavailable,theEDGwouldbesupplyingtheemergencyloads.Uponrestorationoftheoffsitepowersupply,itisrequiredthattheemergencyloadscanbetransferredbacktothepreferredsupply,whilerunning,topermitplacingtheEDGbackinastandbylineup.Basedonpastexperienceandthecompletedtestprocedurereviewsforthistest,I&MdoesnotanticipateaproblemwithparallelingtheEDGsunderanyconditions.Additionally,thesignificanceofthiscapabilityunderthecurrentplantconditionsisgreatlyreduced.Coolingcapabilityforremovalofdecayheatisanimportantsafetyfunctioninmodes5and6.However,interruptionsindecayheatremovalcoolingarerecognizedbyT/S3/4.4.1.4and3/4.4.1.5(ColdShutdown-LoopsFilledandColdShutdown-LoopsNotFilled,respectively)foruptoonehour.Iftheoffsitepowersupplywaslostforasustainedperiodand'ecayheatremovalwasinprogressusinganEDG,itwouldnotbeessential(uponrestorationofoffsitepower)thatarunningresidualheatremoval(RHR)pumpbetransferredbacktotheoffsitepowersupplywithoutinterruption.Ifnecessary,thepumpcouldbesecuredwhiletheEDGwasplacedbackinastandbylineupandthenreenergizedfromoffsitepower.DecayheatremovalduringrefuelingoperationsisaddressedbyT/S3/4.9.F1(ResidualHeatRemovalandCoolantCirculation),whichrequiresatleastoneresidualheatremoval(RHR)loopinoperationatalltimes.Typically,theconditionsforarefuelingaresetverysoonafterplantshutdown,withdecayheatloadsatdesignmaximumvaluesandreducedtimetoreach200'Fifcoolingwaslost.Forthecurrentsituationof18-monthsofshutdown,T/S3/4.9.8.1isextremelyconservative.IfalossofoffsitepowerrequiredaperiodofdecayheatremovalusingtheEDGforpower,andthenoffsitepowerwasrestored,itwouldbetechnicallyacceptable,ifnecessary,tointerruptRHRforashorttimewhiletheEDGwasplacedbackinstandby.AtemporaryinterruptionofRHRisrecognized,forupto1hourper8hourperiod,whenmovingfuelnearthereactorpressurevesselhotlegs.AlthoughitistechnicallyacceptableandpermittedbytheT/Sstointerruptcoolingforashorttimeinmodes5and6,I&Mhas Attachment1toAEP:NRC:1322Page14concluded,basedonprevioustesting,thatRHRcouldbetransferredbacktooffsitepowerwithoutinterruption.Basedontheabove,thebenefitfromperformingsurveillance4'.1.1.2.e.9istoensurethespecificcapabilitiesoftheEDGareverifiedpriortothenextentryintoMode4.4.8.1.1.2.e.10.Verifyingthatwiththedieselgeneratoroperatinginatestmodewhileconnectedtoitstestload,asimulatedSafetyInjectionsignaloverridesthetestmodeby:a)Returningthedieselgeneratortostandbyoperation,andb)Verifyingtheemergencyloadsareservicedbyoffsitepower.ThebenefitofperformingthistestingatthecurrenttimeisgreatlyminimizedbecausethereceiptofavalidSIASactuationsignalinModes5and6isnotcredible,andtheSIASactuationlogicisnotrequiredtobeenergizedinModes5and6.4.8.1.1.2.e.ll.VerifyingthattheautomaticsequencetimingrelaysareOPERABLEwitheachloadsequencetimewithinplusorminus5%ofitsrequiredvalueandthateachloadissequencedonwithinthedesignallowabletimelimit.Inthecurrentconditions,theonlyloadsthatautomaticallystartonaLOOParethenonessentialservicewater(NESW),auxiliaryfeedwater(AFW),essentialservicewater(ESW),andcomponentcoolingwater(CCW)pumps(AFWwouldtypicallybeprecludedfromstartingwhenRHRisusedfordecayheatremoval).StartingoftheseloadsoutofsequencecouldresultinatemporaryoverloadoftheEDGbutthisisveryunlikelyduetothenumberofloadsthatwouldnotstartinthecurrentcondition.Inaddition,pastperformanceofthissurveillancehasnotdisclosedsignificantproblemswiththeloadsequencingrelays.Aspreviouslydiscussed,theserelaysarewithintheircurrentcalibrationintervals,andtheHFArelayswillbeappropriatelytestedpriortodeclaringtheEDGsoperable.Basedonthis,I&MisconfidentthattheEDGswouldnotbechallengedbyloadsequencingproblems.ReulatorPrecedenceGenericLetter(GL)91-04,"ChangesinTechnicalSpecificationsSurveillanceIntervalstoAccommodatea24-MonthFuelCycle,"waspublishedApril2,1991.ThepurposeoftheGLwastoprovideguidancetolicenseeswishingtotakeadvantageofimprovementsinreactorfuelstoincreasethedurationofthefuelcyclefortheirfacilities.ThestaffincludedinitsguidanceinGL91-04thefollowingstatement:TheNRCstaffhasreviewedanumberofrequeststoextend18-monthsurveillancestotheendofafuelcycleandafewrequestsforchangesinsurveillanceintervalstoaccommodatea24-monthfuelcycle.Thestaffhasfoundthattheeffectonsafetyissmallbecausesafetysystemsuseredundantelectricalandmechanicalcomponentsandbecauselicenseesperformothersurveillancesduringplantoperationthatconfirmthatthesesystemsandcomponentscanperformtheirsafetyfunctions.Nevertheless, Attachment1toAEP:NRC:1322Page15licenseesshouldevaluatetheeffectonsafetyofanincreasein18-monthsurveillanceintervalstoaccommodatea24-monthcycle.Thisevaluationshouldsupportaconclusionthattheeffectonsafetyissmall.Licenseesshouldconfirmthathistoricalplantmaintenanceandsurveillancedatasupportthisconclusion.The24-monthintervaldescribedbyGL91-04involvespermanentextensionsofthe18-monthintervalduringperiodsofreactoroperationwhentheimportanceofthesurveillancesisincreased.ThespecificEDGsurveillancesaddressedbythisT/Schangerequestwill,ifgranted,besuspendedduringtheoutagebutwillbeperformedpriortoentryintomode4.AdditionalregulatoryprecedenceisestablishedinNUREG-1431.T/SSR3.8.2.1ofNUREG-1431includesanotestatingthatthesubjectSRsneednotbeperformedonanoperabledieselinModes5and6.ThereasonforthisisdescribedinthebasesandisgenerallytoprecludetheoperabledieselfrombeingrenderedinoperableduringperformanceofSRs,andprecludedeenergizingarequired4160VESFbusordisconnectingarequiredoffsi:tecircuitduringperformanceofSRs.WithlimitedA.C.sourcesavailable,asingleeventcouldcompromiseboththerequiredcircuitandtheEDG.TheSalemGeneratingStationUnitNos.1and2(DPR-70andDPR-75),wereinvolvedinanextendedoutagesimilartothecurrentoutagesforCookunits1and2.ThisresultedinanamendmentrequesttopermanentlyextendthesurveillanceintervalsforallMode5and6EDGsurveillancesthatarepermittedtobeextendedbytheITS(thisincludeseachofthesurveillancesinthisamendmentrequest).ThejustificationprovidedfortheamendmentreliedprimarilyontheITSBasesforthedeferrals.TheamendmentwasapprovedasAmendmentNos.212and192.AdministrativeandEditorialChanesPrevioussubmittalAEP:NRC:0433Qinvolvedanadministrativechangethataffectsunit2T/Spage3/4.8-9.BecauseI&MexpectsthatthecurrentrequestwillbeapprovedpriortoAEP:NRC:0433Q,thisadministrativechangeisduplicatedinthissubmittal.ThechangeinvolvesdeletionofreferencetoT/S4.0.8.T/S4.0.8allowedextensionsforcertainsurveillancesrequiredtobeperformedonorbeforeAugust13,1994,anddesignatedas18-monthor36-monthsurveillances(orrequiredasoutage-relatedsurveillancesundertheprovisionsofT/S4.0.5).T/S4.0.8alsoaffectedtheinitiationdateestablishedduringtheunit21994refuelingoutage.EachaffectedsurveillanceismodifiedbyanotestatingthattheprovisionsofT/S4.0.8areapplicable.Theseextensionsweregrantedtoaccommodatescheduledworkatthetime.Unit2surveillancesarenowscheduledinaccordancewiththeapplicableT/Ss.Therefore,forunit2,T/S4.0.8isdeletedfromSR4.8.1.2becauseitnolongerapplies.Forunit1only,aneditorialcorrectionismadetotheactionstatementtoaddamissing"or".betweenthewords"COREALTERATIONS"and"positivereactivitychanges."The"or"isproperlyincludedintheunit2T/Sandthiseditorialcorrection Attachment1toAEP:NRC:1322Page16willmaketheunit1andunit2T/SSR4.8.1.2identical.Thecorrectionisnotintendedtochangethemeaning.ConclusionsTheproposedamendmentinvolvesdeferralofcertainsurveillancerequirementswhenshutdown.ItdoesnotreducetherequiredoperablepowersourcesoftheLCO,doesnotincreasetheallowedoutagetimeofanyrequiredoperablepowersupplies,anddoesnotreducetherequirementtoknowthatthedeferredSRscouldbemetatalltimes.DeferralofthetestingdoesnotbyitselfintroduceapotentialfailuremechanismorsignificantlyincreasetheprobabilityofEDGfailureondemand.ThemonthlyEDGstarts,fuellevelchecks,andfueltransferpumpcheckswillcontinuetobeperformedtoprovideadequateassurancethattheEDGswillbeavailableifneeded.ThesingleandfullloadrejectiontestsofT/SSR4.8.1.1.2.e.2and4.8.1.1.2.e.3willbeperformedpriortodeclaringtheEDGsoperable.ThistestingdemonstratespropergovernorresponseandprovidesassurancethatadroppedloadduringamanualorautomaticloadingsequencedoesnotresultinlossoftheEDG.'herefore,itisconcludedthattherequiredA.C.sourceswillremainavailableifneeded,andrisktopublichealthandsafetyinModes5and6isnotincreased.Basedontheabove,theA.C.electricalpowersystemswouldcontinuetoperformtheirfunctionfollowinganaccidentasdeterminedpreviously.Therefore,therewouldbenochangeinthetypesorsignificantincreaseintheamountsofanyeffluentsreleasedoffsite.Further,becausetherequestisfordeferringnormallyperformedSRs,itwasconcludedthatthechangeshavenoimpactonindividualorcumulativeoccupationalradar.ationexposure.G.ImpactoftheProposedChangesBothunit1EDGsareinoperableduetoexpirationofthesurveillanceinterval,plusextension,ofthesubjectsurveillancesofT/SSR4.8.1.1.2.e.1&Misperformingtherequiredactionsand,ithasbeenshownthatsafetyisnotsignificantlyreducedbydeferralofthesubjectSRs.Iftheamendmentisnotapproved,theEDGsmustremaininoperableuntilplantconditionscansupporttherequiredtesting.InoperabilityoftheEDGswillseverelyimpactoutageflexibilityandprolongthedurationofmaintenanceactivitieswithoutacompensatingincreaseinsafety.Reductioninthedurationofmaintenanceactivitiesisacomponentofminimizingshutdownrisk.Thepotentialoutagedurationandscopeforunit2,includingthepossibilityofemergentwork,mayresultinasimilarimpacttoUnit2.Thechangeisrequestedforunit2inanticipationofthispotentialimpact.IthasbeenshownthatsafetyisnotsignificantlyreducedbydeferralofthesubjectSRs.Theadministrativechangetounit2andtheeditorialcorrectiontounit1havenoimpact.
Attachment 1toAEP:NRC:1322 Page11unavailability of2.2%to13.9daysperyear,ifthesurveillance intervalwasincreased from18monthsto30months.Theestimated increaseinEDGunavailability was4.0%to14.1daysperyear,ifthesurveillance intervalwasincreased from18monthsto42months.Thesenumbersshowthatincreasing theEDGsurveillance testintervalleadstoverysmallincreases inEDGunavailability.
Attachment1toAEP:NRC:1322Page17H.ScheduleRequirementsI&Mrequestsapprovalofthisrequestassoonaspossibletopermitreturningtheunit1EDGstoanoperablestatus.}}
Theimpactwouldbeexpectedtobesignificantly lowerifamoredetailedrepiesentation oftheload-shedding circuitry wasdeveloped orcreditwastakenforthepossibility ofoperatorrecoveryactions.PlantShutdownSafetandRiskManaementT/S3.8.1.2requiresasingleoffsitepowersupplyandasingleEDGtobeoperableinModes5and6.Thisrequirement isobservedbyadministrative policiesforreducingshutdownrisk(whennotpossibletheT/SActionstatements arecompliedwith).Administrative policiesrequiretheT/Srequirements tobesupplemented inMode5and6whenRCSinventory isbelowspecified minimums~Whenthesespecified minimumsarenotmet,T/Srequirements aresupplemented byrequiring anadditional offsitesourceoranadditional EDGtobeavailable.
WheninMode5andMode6withreducedRCSinventory, anadditional offsitesourceandanadditional EDGarerequiredtobeavailable.
I&M'spoliciesforplantshutdownsafetyandriskmanagement havebeenreviewedrelativetothesubjectdeferrals andarenotimpacted.
Sinificance oftheDeferredSurveillance Reuirements Thefollowing isarestatement ofeachdeferredsurveillance requirement andadiscussion ofitssignificance inModes5and6:4.8.1.1.2.e.4.
Simulating alossofoffsitepowerbyitself,and:a)Verifying de-energization oftheemergency bussesandloadsheddingfromtheemergency busses,b)Verifying thatthedieselstartsontheauto-start signal,energizes theemergency busseswithpermanently connected loadswithin10seconds,energizes theauto-connected shutdownloadsthroughtheloadsequencer andoperatesforgreaterthanorequalto5minuteswhileitsgenerator isloadedwiththeshutdownloads.Afterloadsequencing iscompleted, thesteadystatevoltageandfrequency oftheemergency bussesshallbemaintained at4160+420voltsand60+1.2.Hzduringthetest.Thissurveillance testsimulates alossofoffsitepower(LOOP).Following thisLOOPsimulation, theEDGwouldautomatically startandload.lfproperloadsheddingdidnottakeplace,anEDGcouldbeoverloaded assoonasitenergized theemergency busses.Improperloadsequencing couldcauseamomentary overload.
Thelikelihood ofeitheroftheseoccurrences isconsidered verylowbasedonPRAassessment oftherelayfailurerates,periodiccalibration oftherelaysandtheresultsofthelasttwo4'.1.1.2.e
~4surveillance testsforeachEDG.Reviewofthetestsindicated thatloadsheddingofnon-safety loadsorsequencing ofsafetyloadshadnotresultedinanEDGtest Attachment 1toAEP:NRC:1322 Page12failure.Inoneinstance, fortheunit2CDEDG,theGroupC4pressurizer heatersfailedtoloadshed.Thefaultwasdetermined tobeinthebreakerandnotintheloadshedrelay.Theadditional loadrepresented bytheseheatersdidnotresultinexceeding theavailable capacityonthismachineandwouldnothaveresultedinlossoftheEDGduringanactualLOOP.IntheunlikelyeventthatanautostartofanEDGwasunsuccessful, approvedprocedures existtomanuallystarttheEDGsandmanuallystartrequiredloads.Basedonreviewofthetestingandavailability ofappropriate procedures, I&Mconcluded thatalossofoffsitepowerinModes5and6wouldresultinasuccessful automatic ormanualstartandloadoftheEDGs.4.8.1.1.2.e.6.
Simulating alossofoffsitepowerinconjunction withaSafetyInjection actuation testsignal,andby:a)Verifying de-energization oftheemergency bussesand'oadsheddingfromtheemergency buses,b)Verifying thatthedieselstartsontheauto-start signal,energizes theemergency busseswithpermanently connected loadswithin10seconds,energizes theauto-connected emergency (accident) loadsthroughtheloadsequencer andoperatesforgreaterthanorequalto5minuteswhileitsgenerator isloadedwiththeemergency loads.Afterloadsequencing iscompleted, thesteadystatevoltageandfrequency oftheemergency bussesshallbemaintained at4160+420voltsand60+1.2.Hz.Thevoltageandfrequency shallbemaintained withintheselimitsfortheremainder ofthistest,andc)Verifying thatallautomatic dieselgenerator trips,exceptengineoverspeed andgenerator differential, areautomatically bypasseduponlossofvoltageontheemergency busandlorSafetyInjection actuation signal.Thistestissimilarto4.8.1.1.2.e.4, above,inthattheloadsheddingfunctionisrepeatedandsafetyloadsaresequenced on.However,intheloadsequencing withaconcurrent safetyinjection actuation signal(SIAS),moreloadsarepickedupandtheCTSpumpsarestarted.ThisresultsinthemaximumEDGload.InModes5and6,startingoftheCTSpumpsisnotrequiredorpermitted.
Additionally, inModes5and6,avalidSIASisnotcredibleandtheSIASactuation logicisnotrequiredtobeoperable.
Therefore, thefullloadsequencedemonstrated bythistestisunlikelytooccurinModes5and6.OnaLOOP,inModes5and6,theEDGwouldrespondasdescribed insurveillance 4.8.1.1.2.e.4 above.4.8.1.1.2.e.8.
Determine thattheauto-connected loadstoeachdieselgenerator donotexceed3500kw.Thistestconfirmsthatallsafetyrelatedloadsautomatically connected totheEDGsunderemergency conditions donotexceedthecontinuous dutyratingoftheEDG.Theimportance ofthis Attachment 1toAEP:NRC:1322 Page13testinginModes5and6isgreatlyreduced.WhileinModes5and6below200'F,mostoftheemergency corecoolingsystempumpsandtheCTSaremaintained inaconfiguration toprecludeautomatic actuation.'herefore, duetothelimitednumberofsafetyloadsrequiredtobeoperableinModes5and6,thereisadequateassurance thatEDGcapacitywouldnotbeexceededbytheauto-connected loads.4.8.1.1.2.e.9.
Verifying thedieselgenerator's capability to:a)Synchronize withtheoffsitepowersourcewhilethegenerator isloadedwithitsemergency loadsuponasimulated restoration ofoffsitepower.b)Transferitsloadstotheoffsitepowersource,andc)Berestoredtoitsstandbystatus.Theoffsitepowersupplyisconsidered tobethepreferred powersourceduringaccidentmitigation withtheEDGsactingasthebackupemergency supply.IncaseofanEngineered SafetyFeaturesactuation inwhichtheoffsitepowersourcewasnotavailable, theEDGwouldbesupplying theemergency loads.Uponrestoration oftheoffsitepowersupply,itisrequiredthattheemergency loadscanbetransferred backtothepreferred supply,whilerunning,topermitplacingtheEDGbackinastandbylineup.Basedonpastexperience andthecompleted testprocedure reviewsforthistest,I&Mdoesnotanticipate aproblemwithparalleling theEDGsunderanyconditions.
Additionally, thesignificance ofthiscapability underthecurrentplantconditions isgreatlyreduced.Coolingcapability forremovalofdecayheatisanimportant safetyfunctioninmodes5and6.However,interruptions indecayheatremovalcoolingarerecognized byT/S3/4.4.1.4 and3/4.4.1.5 (ColdShutdown-Loops FilledandColdShutdown-Loops NotFilled,respectively) foruptoonehour.Iftheoffsitepowersupplywaslostforasustained periodand'ecayheatremovalwasinprogressusinganEDG,itwouldnotbeessential (uponrestoration ofoffsitepower)thatarunningresidualheatremoval(RHR)pumpbetransferred backtotheoffsitepowersupplywithoutinterruption.
Ifnecessary, thepumpcouldbesecuredwhiletheEDGwasplacedbackinastandbylineupandthenreenergized fromoffsitepower.Decayheatremovalduringrefueling operations isaddressed byT/S3/4.9.F1(Residual HeatRemovalandCoolantCirculation),
whichrequiresatleastoneresidualheatremoval(RHR)loopinoperation atalltimes.Typically, theconditions forarefueling aresetverysoonafterplantshutdown, withdecayheatloadsatdesignmaximumvaluesandreducedtimetoreach200'Fifcoolingwaslost.Forthecurrentsituation of18-months ofshutdown, T/S3/4.9.8.1 isextremely conservative.
IfalossofoffsitepowerrequiredaperiodofdecayheatremovalusingtheEDGforpower,andthenoffsitepowerwasrestored, itwouldbetechnically acceptable, ifnecessary, tointerrupt RHRforashorttimewhiletheEDGwasplacedbackinstandby.Atemporary interruption ofRHRisrecognized, forupto1hourper8hourperiod,whenmovingfuelnearthereactorpressurevesselhotlegs.Althoughitistechnically acceptable andpermitted bytheT/Sstointerrupt coolingforashorttimeinmodes5and6,I&Mhas Attachment 1toAEP:NRC:1322 Page14concluded, basedonprevioustesting,thatRHRcouldbetransferred backtooffsitepowerwithoutinterruption.
Basedontheabove,thebenefitfromperforming surveillance 4'.1.1.2.e.9 istoensurethespecificcapabilities oftheEDGareverifiedpriortothenextentryintoMode4.4.8.1.1.2.e.10.
Verifying thatwiththedieselgenerator operating inatestmodewhileconnected toitstestload,asimulated SafetyInjection signaloverrides thetestmodeby:a)Returning thedieselgenerator tostandbyoperation
,andb)Verifying theemergency loadsareservicedbyoffsitepower.Thebenefitofperforming thistestingatthecurrenttimeisgreatlyminimized becausethereceiptofavalidSIASactuation signalinModes5and6isnotcredible, andtheSIASactuation logicisnotrequiredtobeenergized inModes5and6.4.8.1.1.2.e.ll.
Verifying thattheautomatic sequencetimingrelaysareOPERABLEwitheachloadsequencetimewithinplusorminus5%ofitsrequiredvalueandthateachloadissequenced onwithinthedesignallowable timelimit.Inthecurrentconditions, theonlyloadsthatautomatically startonaLOOParethenonessential servicewater(NESW),auxiliary feedwater (AFW),essential servicewater(ESW),andcomponent coolingwater(CCW)pumps(AFWwouldtypically beprecluded fromstartingwhenRHRisusedfordecayheatremoval).
Startingoftheseloadsoutofsequencecouldresultinatemporary overloadoftheEDGbutthisisveryunlikelyduetothenumberofloadsthatwouldnotstartinthecurrentcondition.
Inaddition, pastperformance ofthissurveillance hasnotdisclosed significant problemswiththeloadsequencing relays.Aspreviously discussed, theserelaysarewithintheircurrentcalibration intervals, andtheHFArelayswillbeappropriately testedpriortodeclaring theEDGsoperable.
Basedonthis,I&Misconfident thattheEDGswouldnotbechallenged byloadsequencing problems.
ReulatorPrecedence GenericLetter(GL)91-04,"ChangesinTechnical Specifications Surveillance Intervals toAccommodate a24-MonthFuelCycle,"waspublished April2,1991.ThepurposeoftheGLwastoprovideguidancetolicensees wishingtotakeadvantage ofimprovements inreactorfuelstoincreasethedurationofthefuelcyclefortheirfacilities.
ThestaffincludedinitsguidanceinGL91-04thefollowing statement:
TheNRCstaffhasreviewedanumberofrequeststoextend18-monthsurveillances totheendofafuelcycleandafewrequestsforchangesinsurveillance intervals toaccommodate a24-monthfuelcycle.Thestaffhasfoundthattheeffectonsafetyissmallbecausesafetysystemsuseredundant electrical andmechanical components andbecauselicensees performothersurveillances duringplantoperation thatconfirmthatthesesystemsandcomponents canperformtheirsafetyfunctions.
Nevertheless, Attachment 1toAEP:NRC:1322 Page15licensees shouldevaluatetheeffectonsafetyofanincreasein18-monthsurveillance intervals toaccommodate a24-monthcycle.Thisevaluation shouldsupportaconclusion thattheeffectonsafetyissmall.Licensees shouldconfirmthathistorical plantmaintenance andsurveillance datasupportthisconclusion.
The24-monthintervaldescribed byGL91-04involvespermanent extensions ofthe18-monthintervalduringperiodsofreactoroperation whentheimportance ofthesurveillances isincreased.
ThespecificEDGsurveillances addressed bythisT/Schangerequestwill,ifgranted,besuspended duringtheoutagebutwillbeperformed priortoentryintomode4.Additional regulatory precedence isestablished inNUREG-1431.
T/SSR3.8.2.1ofNUREG-1431 includesanotestatingthatthesubjectSRsneednotbeperformed onanoperabledieselinModes5and6.Thereasonforthisisdescribed inthebasesandisgenerally toprecludetheoperabledieselfrombeingrenderedinoperable duringperformance ofSRs,andprecludedeenergizing arequired4160VESFbusordisconnecting arequiredoffsi:tecircuitduringperformance ofSRs.WithlimitedA.C.sourcesavailable, asingleeventcouldcompromise boththerequiredcircuitandtheEDG.TheSalemGenerating StationUnitNos.1and2(DPR-70andDPR-75),wereinvolvedinanextendedoutagesimilartothecurrentoutagesforCookunits1and2.Thisresultedinanamendment requesttopermanently extendthesurveillance intervals forallMode5and6EDGsurveillances thatarepermitted tobeextendedbytheITS(thisincludeseachofthesurveillances inthisamendment request).
Thejustification providedfortheamendment reliedprimarily ontheITSBasesforthedeferrals.
Theamendment wasapprovedasAmendment Nos.212and192.Administrative andEditorial ChanesPrevioussubmittal AEP:NRC:0433Q involvedanadministrative changethataffectsunit2T/Spage3/4.8-9.BecauseI&MexpectsthatthecurrentrequestwillbeapprovedpriortoAEP:NRC:0433Q, thisadministrative changeisduplicated inthissubmittal.
Thechangeinvolvesdeletionofreference toT/S4.0.8.T/S4.0.8allowedextensions forcertainsurveillances requiredtobeperformed onorbeforeAugust13,1994,anddesignated as18-monthor36-monthsurveillances (orrequiredasoutage-related surveillances undertheprovisions ofT/S4.0.5).T/S4.0.8alsoaffectedtheinitiation dateestablished duringtheunit21994refueling outage.Eachaffectedsurveillance ismodifiedbyanotestatingthattheprovisions ofT/S4.0.8areapplicable.
Theseextensions weregrantedtoaccommodate scheduled workatthetime.Unit2surveillances arenowscheduled inaccordance withtheapplicable T/Ss.Therefore, forunit2,T/S4.0.8isdeletedfromSR4.8.1.2becauseitnolongerapplies.Forunit1only,aneditorial correction ismadetotheactionstatement toaddamissing"or".betweenthewords"COREALTERATIONS" and"positive reactivity changes."
The"or"isproperlyincludedintheunit2T/Sandthiseditorial correction Attachment 1toAEP:NRC:1322 Page16willmaketheunit1andunit2T/SSR4.8.1.2identical.
Thecorrection isnotintendedtochangethemeaning.Conclusions Theproposedamendment involvesdeferralofcertainsurveillance requirements whenshutdown.ItdoesnotreducetherequiredoperablepowersourcesoftheLCO,doesnotincreasetheallowedoutagetimeofanyrequiredoperablepowersupplies, anddoesnotreducetherequirement toknowthatthedeferredSRscouldbemetatalltimes.Deferralofthetestingdoesnotbyitselfintroduce apotential failuremechanism orsignificantly increasetheprobability ofEDGfailureondemand.ThemonthlyEDGstarts,fuellevelchecks,andfueltransferpumpcheckswillcontinuetobeperformed toprovideadequateassurance thattheEDGswillbeavailable ifneeded.Thesingleandfullloadrejection testsofT/SSR4.8.1.1.2.e.2 and4.8.1.1.2.e.3 willbeperformed priortodeclaring theEDGsoperable.
Thistestingdemonstrates propergovernorresponseandprovidesassurance thatadroppedloadduringamanualorautomatic loadingsequencedoesnotresultinlossoftheEDG.'herefore, itisconcluded thattherequiredA.C.sourceswillremainavailable ifneeded,andrisktopublichealthandsafetyinModes5and6isnotincreased.
Basedontheabove,theA.C.electrical powersystemswouldcontinuetoperformtheirfunctionfollowing anaccidentasdetermined previously.
Therefore, therewouldbenochangeinthetypesorsignificant increaseintheamountsofanyeffluents releasedoffsite.Further,becausetherequestisfordeferring normallyperformed SRs,itwasconcluded thatthechangeshavenoimpactonindividual orcumulative occupational radar.ation exposure.
G.ImpactoftheProposedChangesBothunit1EDGsareinoperable duetoexpiration ofthesurveillance
: interval, plusextension, ofthesubjectsurveillances ofT/SSR4.8.1.1.2.e.
1&Misperforming therequiredactionsand,ithasbeenshownthatsafetyisnotsignificantly reducedbydeferralofthesubjectSRs.Iftheamendment isnotapproved, theEDGsmustremaininoperable untilplantconditions cansupporttherequiredtesting.Inoperability oftheEDGswillseverelyimpactoutageflexibility andprolongthedurationofmaintenance activities withoutacompensating increaseinsafety.Reduction inthedurationofmaintenance activities isacomponent ofminimizing shutdownrisk.Thepotential outagedurationandscopeforunit2,including thepossibility ofemergentwork,mayresultinasimilarimpacttoUnit2.Thechangeisrequested forunit2inanticipation ofthispotential impact.Ithasbeenshownthatsafetyisnotsignificantly reducedbydeferralofthesubjectSRs.Theadministrative changetounit2andtheeditorial correction tounit1havenoimpact.
Attachment 1toAEP:NRC:1322Page17H.ScheduleRequirements I&Mrequestsapprovalofthisrequestassoonaspossibletopermitreturning theunit1EDGstoanoperablestatus.}}

Revision as of 09:14, 29 June 2018

Application for Amends to Licenses DPR-58 & DPR-74,revising TS 3/4.8.1.2, Electrical Power Systems & Associated Bases to Provide one-time Extension of 18-month Surveillance Interval for Specific SRs
ML17325B551
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 04/19/1999
From: POWERS R P
INDIANA MICHIGAN POWER CO.
To:
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
Shared Package
ML17325B553 List:
References
AEP:NRC:1322, NUDOCS 9904230125
Download: ML17325B551 (27)


Text

SUBJECT:

Application foramendstolicensesDPR-58&:DPR-74,revising TS3/4.8.1.2, "Electrical PowerSystems"8associated basestoprovideone-timeextension of18-monthsurveillance intervalforspecificSRs.DISTRIBUTION CODE:A001DCOPIESRECEIVED:LTR ENCLTITLE:ORSubmittal:

GeneralDistribution TS1ZE:Q'fCATEGORYj.REGULARYINFORMATION DISTRIBUTI SYSTEM(RIDS)A</CESSION NBR:9904230125 DOC.DATE:

99/04/19NOTARIZED:

YESDOCKET¹dACIL:50-315 DonaldC.CookNuclearPowerPlant,Unit1,IndianaM0500031550-316DonaldC.CookNuclearPowerPlant,Unit2,IndianaM05000316AUTH.NAMEAUTHORAFFILIATION POWERS,R.P.

IndianaMichiganPowerCo.RECIP.NAME RECIPIENT AFFILIATION RecordsManagement Branch(Document Control'Desk)NOTES:RECIPIENT IDCODE/NAME LPD3-1LASTANG,J-COPIESRECIPIENT LTTRENCL,IDCODE/NAME 11LPD3-1PD11COPIESLTTRENCL11INTERNAL":

FILECENTER0NRR/DE/EMCB NRR/DSSA/SPLB NRR/SPSBJUNG,IOGC/HDS3EXTERNAL:

NOAC111111111011NRR/DE/EEIB NRR/DE/EMEB NRR/DSSA/SRXB 11111111DENNOTETOALL"RIDS"RECIPIENTS:

PLEASEHELPUSTOREDUCEWASTE.TOHAVEYOURNAMEORORGANIZATION REMOVEDFROMDISTRIBUTION LISTSORREDUCETHENUMBEROFCOPIESRECEIVEDBYYOUORYOURORGANIZATION, CONTACTTHEDOCUMENTCONTROLDESK(DCD)ONEXTENSION 415-2083TOTALNUMBEROFCOPIESREQUIRED:

LTTR14ENCL13 IndianaMichiga~PowerCompany~500CircleDriveBuchanan, Ml491071373 INOlAMAMICHIGANPQWMApril19,1999ABP:NRC:1322 DocketNos.:50-31550-316U.S.NuclearRegulatory Commission ATTN:DocumentControlDeskMailStop0-P1-17Washington, DC20555-0001 Gentlemen:

DonaldC.CookNuclearPlantUnits1and2TECHNICAL SPECIFICATIONS CHANGEREQUESTELECTRICAL POWERSYSTEMS,SHUTDOWNPursuantto10CFR50.90,IndianaMichiganPowerCompany(I&M),theLicenseeforDonaldC.CookNuclearPlantunits1and2,proposestoamendAppendixA,technical specifications (T/S),offacilityoperating licensesDPR-58andDPR-74.IBMproposestoreviseT/S3/4.8.1.2, "Electrical PowerSystems,Shutdown,"

anditsassociated basestoprovideaone-timeextension ofthe18-monthsurveillance intervalforspecificsurveillance requirements forunits1and2.Thissurveillance willbeperformed priortothefirstentryintoMode4subsequent toreceiptoftherequested T/Samendment.

Inaddition, forunit2only,aminoradministrative changeisincludedtodeleteareference toT/S4.0.8,whichisnolongerapplicable.

Forunit1only,aneditorial changeismadetoaddtheword"or"toactionstatement 3.8.1.2.Attachment 1providesadetaileddescription andsafetyanalysisoftheproposedchanges.Attachments 2Aand2BprovidemarkedupT/Spagesforunit1andunit2,respectively.

Attachments 3Aand3BprovidetheproposedT/Spageswiththechangesincorporated forunit1andunit2,respectively.

Attachment 4describes theevaluation performed inaccordance with10CFR50.92(c),

whichconcludes thatnosignificant hazardsconsideration isinvolved.

Attachment 5providestheenvironmental assessment.

@gali'qq04230i28

~~0+<+PDRADQCK08000318PDR U.S.NuclearRegulatory Commission Page2AEP:NRC:1322 AttherequestoftheNRCstaff,wehavealsoconsidered GenericLetter(GL)98-01,"Year2000Readiness ofComputerSystemsatNuclearPowerPlants,"andSupplement 1totheGL,whichrequiresaresponsebyJuly1,1999,confirming year2000readiness oftheCookNuclearPlants.I&M'syear2000programisintendedtoensurethatemergency dieselgenerator controlcircuits, areyear2000readypertherequirements ofGL98-01.Copiesofthisletteranditsattachments arebeingtransmitted totheMichiganPublicServiceCommission andMichiganDepartment ofPublicHealth,inaccordance withtherequirements of10CFR50.91.Shouldyouhaveanyquestions, pleasecontactMr.DavidF.Kunsemiller, DirectorofRegulatory Affairs,at(616)466-2405.

Sincerely, gf,'(R.P.PowersVicePresident SWORNTOANDSUBSCRIBED BEFOREMETHIS~/DAYOFNotaryPublic1999BERNICEhLBtCKERSNowt)tPuY~o,BerrienCounty,MiIPgCommission ExpbesFeb.16,2001My'Commission ExpiresD/4'/KjaaAttachments c:J.A.Abramson, w/attachments J.L.Caldwell, w/attachments MDEQ-DW&RPD,w/attachments NRCResidentInspector, w/attachments 1Irt ATTACHMENT 1TOAEP:NRC:1322 DESCRIPTION ANDSAFETYANALYSISFORPROPOSEDCHANGES Attachment 1toAEP:NRC:1322 Page1DescritionandSafetAnalsisfortheProosedChanesA.SummaryofProposedChangesI&Mproposesto'eviseTechnical Specification (T/S)3/4.8.1.2, "Electrical PowerSystems,Shutdown,"

anditsassociated basestoprovideaone-timeextension ofthe18-monthsurveillance intervalforspecificsurveillance requirements (SRs)applicable inModes5and6.Inaddition, forunit2only,aminoradministrative changeisincludedtodeleteareference toT/S4.0.8,whichisnolongerapplicable.

Forunit1only,aneditorial changeismadetoaddtheword"or"toactionstatement 3.8.1.2.Theamendment requestinvolvessixemergency dieselgenerator (EDG)surveillances thatarenormallyperformed at18-monthintervals duringreactorshutdowns (Modes5and6).Therequestproposestodelayperformance ofthesesixsurveillances, duringthecurrentextendedoutagesonly,untilpriortothefirstentryintoMode4toresumeoperations (Modes1-4).Thedelayisnecessary becausemanyplantcomponents neededforthetestingarenotrequiredtobefunctional duringanoutage,andduetothescopeoftheoutage,arecurrently notfunctional.

Thedelayisjustified becausethesixdeferredsurveillances demonstrate thefulldesignedfunctional capability oftheEDGstosupportmitigation ofaccidents thatmayoccurinModes1through4.Thisfulldesigncapability isnotnecessary tosupportEDGfunctional requirements duringreactorshutdown.

Theshutdownfunctional requirements oftheEDGsareadequately demonstrated bythenondeferred 18-monthsurveillances, the"required 30-daysurveillances andthespecified fueloilchecks.Aconservative estimateutilizing Probabilistic RiskAnalysis(PRA)techniques hasshownthatdeferralofthesurveillances hasaverysmallimpactonEDGunavailability.

Finally,therequestisconsistent withNUREG-1431,

"(Improved)

StandardTechnical Specifications,"

(ITS)inrecognizing thechallenge thistestingrepresents tothelimitedA.C.sourcesrequiredtobeoperablewhileshutdown.

Whenalicenseeknowsofnoreasonthesurveillances wouldnotbesatisfied, thedeferralisallowedbythe.NUREG.Theproposedchangesaredescribed indetailinsectionEofthisattachment.

T/Spagesthataremarkedtoshowtheproposedchangesareprovidedinattachments 2Aand2Bforunit1andunit2,respectively.

TheproposedT/Spages,withthechangesincorporated, preprovidedinattachments 3Aand3Bforunit1andunit2,respectively.

B.Description oftheCurrentRequirements InModes5and6,T/SLimitingCondition forOperation (LCO)3.8.1.2requirestheoperability ofasingleoffsitepowersupplyandasingleemergency dieselgenerator (EDG).Fortheserequiredshutdownpowersupplies, T/Ssurveillance requirement 4'.1.2invokesthesamesurveillances asthosespecified inModes1through4(SRs4.8.1.1.1 and4.8.1.1.2) withtheoneexception ofSR4.8.1.1.2.a

~5(paralleling theEDGswithoffsitepowerforaone-hour, orgreater,loadtest).Table1listsanddescribes thesurveillances requiredinModes5and6.OnlythoseSRsinboldandparentheses aresubjecttodeferralbythisamendment request.Alsoincludedinthetable,forreference, arethecorresponding SRsoftheITS.

Attachment 1toAEP:NRC:1322 Page2T/S4.8.1.2SRsand(frequency) 4.8.1.1.1.a (7das)TABLElCorresponding NUREG-1431 SRs3.8.1.1Testdescription/comments Breakeralignment checksandindicated oweravailabilit 4.8.1.1.1.b (18-months) 3.8.1.84.8.1.1.2.a.1

(*)3.8.1.44.8.1.1.2.a.2

(*)3.8.3.14.8.1.1.2.a.3

(*)3.8.1.6Offsi.tepowertransfercapability.

DatankfuellevelcheckStoraetankfuellevelcheckFueltransferumtest4.8.1.1.2.a.4

(*)3.8.1.2and3.8.1.7StartTestandFastStartTest(4.8.1.1.2.a.4 isperformed asafaststartever184das)4.8.1.1.2.a.6

(*)N/A4.8.1.1.2.b.l

(**)3.8.1.54.8.1.1.2.b.2

(**)3.8.3.54.8.1.1.2.c

(***)3.8.3.33.8.3.34.8.1.1.2.d

(*~)DieselStandbyalinmentverification DaTankaccumulated waterremovalStoraeTankaccumulated waterremovalNewfuelsamlinStoraeTankfuelsamlin4.8.1.1~2.e.l.(18-months) 4.8.1.1.2.e.2.

(18-months) 4.8.1.1.2.e.3.

(18-months)

(4.8.l.1.2.e.4.a)andb))(18-months) 4.8.1.1.2.e.5.

(18-months)

(4.8.1.1.2.e.6.a),

b)andc))(18-months) 4.8.1.1.2.e.7.

(18-months)

(4.8.1.1.2.e.8.)

(18-months)

(4.8.l.l.2.e.9.a),b)andc))(18-months)

(4.8.1.1.2.e.10 a)andb)(18-months)

(4.8.1.1.2.e.ll)

(18-months) 4.8.1.1.2.

f.l(10ears)4.8.1.1.2.f.2 (10ears)4.8.1.1.2.f.3 (10ears)N/A3.8.1.93.8.1.103.8.1.113.8.1.123.8.1.19and3.8.1.133.8.1.14and3.8.1.15Intentmetby3.8.1.19.c.5.

3.8.1.163.8.1.173.8.1.183.8.3.6N/A3.8.1.20Dieselengineinspection permanufacturer's recommendations Single-Load Rejection TestFull-Load Rejection TestLoss-of-Offsite-Power (LOOP)Test.Includesloadsheddingandloadsequencing verifications.

SafetyInjection Actuation Signal(SIAS)Test CombinedSIASandLOOPTestsincluding Protective TripBypassTestEndurance andMarginTestandHotRestarttest.TheMarginTest(loadingtogreaterthanratedpower)isnotperformed atCook.MaximumAuto-Connected LoadTestSynchronizing TestandEmergency LoadTransferTestTestModeChange-Over Testwithconcurrent verification ofenergized safetyloadsLoadsequencer timingverification FueloilstoragetankcleaningFueloilsystemleaktestRedundant UnitStartingIndependence Test*PerT/STable4.8-1onastaggered testbasis(currently every31days)**Every31days***Priortoaddingfueltothestoragetanks J

Attachment 1toAEP:NRC:1322 Page3CDBasesfortheCurrentRequirements Asdescribed inthecurrentBasesforT/S3/4.8.1.2, theoperability oftheminimumspecified A.C.powersourcesduringshutdownandrefuel'ing providesassurance that1)thefacilitycanbemaintained intheshutdownorrefueling condition forextendedtimeperiodsand2)sufficient instrumentation andcontrolcapability isavailable formonitori'ng andmaintaining thefacilitystatus.D.NeedforRevisionoftheRequirement BackroundThesubjectsurveillances ofthisamendment requestresultinplanttransients thatcannotbesafelyperformed atpower.Therefore, thesurveillances areperformed whiletheplantisshutdown, typically forplannedrefueling outages.However,thenecessary equipment toperformthetestingmaynotbeavailable duringextendedoutages(including important non-safety equipment thatisdemonstrated toautomatically disconnect fromtheemergency bussesduringthetesting).

Furthermore, muchofthesafetyequipment necessary forthetestingisnotrequiredbytheT/SsinModes5and6orisactuallyrequiredtobeinoperable forothersafetyconsiderations (suchasthepotential toinadvertently damagetheplantfromoverpressurization whilecold).Fornormaldurationoutages,thesubjectsurveillances rarelyresultinoutageconflicts becausethe18-monthsurveillance interval(plusallowedextension) accommodates performance ofthetestingafteroutagecompletion andjustpriortoenteringMode4.Atthistimethe~necessary equipment tosupportthetestinghasbeenmadereadyfortheplantrestartsHoweverinthecaseofextendedoutages,particularly whenthedurationwasnotinitially anticipated, thesesurveillances maycomedueinmid.outage.Whenthisoccurs,theonlyavailable optionistosuspendoutageactivities sothattheplantcanbeplacedinacondition toperformthetesting,or,declarethedieselsT/Sinoperable andcomplywiththeapplicable actionsuntilthetestingcanbedone.Eitheroptionresultsinadelayintheoutagewithoutacompensating increaseinsafetybecausethedieselsmaybereliedupontoaccomplish theirfunctioninModes5and6withoutthesubjectsurveillances beingcurrent(seedetailsofCookjustification inF).Inaddition, therequiredtestingsubjectsthelimitedA.C.sourcesrequiredinModes5and6toasignificant transient.

Atestcomplication atthistimecouldresultinlossoftherequiredA.C.supplies.

Thissituation, anditsunnecessary impact,hasbeenanticipated andcorrected bytheITS.TheITSdoesnotrequire"thesubjectsurveillances tobeperformed ontherequiredoperableA.C.sourceswheninModes5and6.However,thisflexibility isnotpermitted bytheCookunit1andunit2T/Ss.CookextendedoutaesCookunits1and2havebeenshutdownsinceSeptember of1997and p~C Attachment 1toAEP:NRC:1322 Page4Lcurrently remaininanextendedoutage.Sufficient equipment isnotavailable toperformtherequiredsurveillance testingatthespecified surveillance intervals.

Theunit1surveillance intervalexpiredonMarch1and3,1999,forthe1CDand1ABEDGsrespectively, andbothunit1EDGsweredeclaredT/Sinoperable.

Itisnotedthatatthistime,theunit1andunit2EDGswerealreadydeclaredinoperable duetoseismicqualification issuesinvolving HFArelays(hingedarmatureauxiliary) intheEDGand4KVsafetymotorcontrolcircuits(thiscondition wasreportedvialicenseeEventReport1999-001-00).

Correction, oftheHFArelayproblems, andappropriate postmaintenance testing,willrestoreoperability oftheEDGswithnoadditional outageimpact.However,unlesstheamendment isapproved, EDGinoperability duetotheexpiredsurveillances willcontinuetohaveanadverseimpactuntilthesurveillances canbeperformed.

Currently, unit1isinMode5withplanttemperature maintained atapproximately 125'F.Lowtemperature overpressure protection controlsareineffectwithcorresponding tagoutsonbothsafetyinjection (SI)pumpsandonecentrifugal chargingpump(CCP).Inaddition, thecontainment spraysystem(CTS)isundergoing considerable maintenance/modification topipingandpumps,including installation ofafull-flow recirculation line.Completion oftheCTSworkisnecessary tosupportthetestingandcouldrequiretheunit1EDGstoremainT/Sinoperable untilthesummerof1999.ThissameT/Sreliefwillbeneededforunit2inDecember1999whenthesurveillances becomeoverdue.E.Description oftheProposedChanges1&MproposestoreviseT/S3/4.8.1.2 topermitaone-timeextension ofthe18-monthsurveillance intervalforSRs4.8.1.1.2.e.4.a) andb);4.8.1.1.2.e.6

'),b)andc);4.8.1.1.2.e.8; 4.8.1.1.2.e.9.a),

b)andc);4.8.1.1.2.e.10.a) andb);and4.8.1.1.2.e.ll forunit1and2.Inaddition, forunit2only,aminoradministrative changeisincludedtodeletethereference toT/S4.0.8thatisnolongerapplicable.

Forunit1only,aneditorial correction ismadetotheactionstatement 3.8.1.2toaddtheword"or"betweenthewords"COREALTERATIONS" and"positive reactivity changes."

Thesurveillance intervalextension willbeaccomplished byadditionofthefollowing, statement toT/Ssurveillance requirement 4.8.1.2:rCommencing in1999duringtheextendedshutdowninitiated in1997,the18-monthsurveillance requirements 4.8.1.1.2.e.4.a) andb);4.8.1.1.2.e.6.a),

b)andc);4.8.1.1.2.e.8; 4.8.1.1.2.e.9.a),

b)andc);4.8.1.1.2.e.lO.a) andb);and4.8.1.1.2.e.ll maybedelayedonetimeuntiljustpriortothefirstentryintoMODE4following theshutdown.

1&MproposestorevisethebasesforT/S4.,8.1.2todescribethereasonfortheextendedsurveillance intervals.

Attachment 1toAEP:NRC:1322 Page5F.BasesoftheProposedChangesSummarofRelevantPoints~Thesurveillance intervalextensions proposedbythisrequestarepermitted bytheITS.~Asimilarrequestwasapprovedforanotherlicenseeduringanextendedoutage.~Eachdeferredsurveillance hasbeenreviewedandisnotessential todemonstrate dieselreliability inMode5and6.~Recentperformance ofthedeferredsurveillances hasnotresultedinfailuresthatwouldchallenge dieselfunctional requirements inModes5and6.~APRAestimatewasperformed oftheincreaseinEDGunavailability, inModes5and6,duetodeferralofthesubjectsurveillances.

Theresultsdemonstrated thatthedeferrals donotsignificantly increaseEDGunavailability inModes5and6.~EventsanalyzedinModes5and6do'nottakecr'editforautostartingoftheEDGsandprocedures existtomanuallystartandloadanEDGifanautostartsequencefails.~Appropriate administrative controlsareinplacetoensureonsiteoutageactivities donotchallenge theoffsitepowertransmission lines.~Thesurveillances thatwillcontinuetobeperformed provideadequateassurance theEDGsarecapableofsupplying emergency powerforthecurrentconditions.

~Theamendment requestdoesnotreducethenumberofrequiredoperablepowersupplies.

~Theamendment requestdoesnotmodifytheactionsrequiredforaninoperable powersupply.~Theplantisdesignedsuchthatanalyzedaccidents credibleinModes5and6wouldnotbeinitiated byaninterruption ofA.C.power.~Thegreatlyreducedfissionproductactivities andfissionproductdecayheatratescurrently existingprovideassurance thattheconsequences ofanyaccidentorinadvertent releaseofradioactive materials areboundedbytheexistinganalysis.

~AlthoughthesubjectT/SrequiresonlyasingleoperableoffsitepowersupplyandasingleoperableEDGinModes5and6,administrative requirements forreducingshutdownrisksupplement theT/Srequirements whenappropriate.

EffectoftheExtendedShutdownonDecaheatandFissionProduct~ActivitNUREG-1431 providesthefollowing introduction tothebasesforACSources-Shutdown:

Ingeneral,whentheunitisshutdown,theTechnical Specifications requirements, ensurethattheunithasthecapability tomitigatetheconsequences ofpostulated accidents.

However,assumingasinglefailureandconcurrent lossofalloffsiteorallonsitepowerisnotrequired.

Therationale forthisisbasedonthefactthatmanyDesignBasisAccidents (DBAs)thatareanalyzedinModes1,2,3,and4havenospecificanalysesinModes5and6.WorstcaseboundingeventsaredeemednotcredibleinModes5and6becausetheenergycontained Attachment 1toAEP:NRC:1322 Page6withinthereactorpressureboundary, reactorcoolanttemperature andpressure, andthecorresponding stressesresultintheprobabilities ofoccurrence beingsignificantly reducedoreliminated, andinminimalconsequences.

Thesedeviations fromDBAanalysisassumptions anddesignrequirements duringshutdownconditions areallowedbytheLCOforrequiredsystems.'IThisisparticularly trueforCookunits1and2atthecurrenttimeduetothe18monthsofcontinuous shutdownpreceding thisamendment request.Reduceddecayheatloadswouldprovideadditional time,following disruption ofA.C.power,torestorepowerpriortoreachingthemaximumallowable temperature of200'FforMode5.Currently, forunit1,theestimated timetoreach200'Ffrom130'Fis18hours.ForUnit2,theestimated timetoreach200'Ffrom130'Fis12hours.Fissionproductactivities inthefuelassemblypellet-to-claddinggapsaregreatlyreduced.Thefuelhandlingaccidentanalysisconsiders thethyroiddoseatthesiteboundaryandinthelowpopulation zone.Thisdoseisdominated bytheisotopeiodine131,whichalsodecaysmoreslowlythantheotheriodinecontributors tothedose.Theactivityofiodine131decreases byone-halfevery8.05days.Thecurrentshutdownperiodofapproximately 18-months represents over70half-lives.

Discussion ofSafetAnalsisEvents1through8,listedbelow,areanalyzedintheunit1and2UpdatedFinalSafetyAnalysisReports(UFSAR)inSection14.2,"StandbySafeguards Analysis":

1.2.3~5.6.7.8.FuelhandlingaccidentWasteliquidreleaseWastegasreleaseSteamgenerator tuberuptureSteampipe"rupture Ruptureofcontrolrodmechanism hous'ing-rodclustercontrol(RCC)assemblyejectionEnvironmental consequences following secondary systemaccidents Ruptureofafeedline(Unit2only)OthereventsandtheirUFSARsectioninclude:9.Uncontrolled RCCA(rodcontrolclusterassembly) withdrawal fromasubcritical condition (Section14.1.1)10.Uncontrolled BoronDilution(Section14.1.5)Therelevance oftheseeventstothisamendment requestisasfollows:1.FuelhandlingaccidentTheonlytimeafuelhandlingaccidentcouldoccurisduringthehandlingofafuelassembly.

Thedesignoffuelhandlingequipment issuchthataninterruption ofA.C.powerwouldnotcauseafuelelementtobeinadvertently dropped.Therefore, aninterruptS.

onorlossofA.C.power Attachment 1toAEP:NRC:1322 Page7couldnotinadvertently releaseafuelelementandconsequently, theprobability ofthiseventisnotincreased.

Inaddition, administrative controlsandcraneinterlocks precludethemovementofloadsgreaterthan2500pounds,orwiththepotential forexcessive impactenergy,overthespentfuelpool.Thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurance thattheconsequences ofthiseventareboundedbytheexistinganalysis.

2.Accidental ReleaseofRadioactive LiquidsTheinadvertent releaseofradioactive liquidwastestotheenvironment wasevaluated forthewasteevaporator condensate andmonitortanks,condensate storagetank,primarywaterstoragetank,refueling waterstoragetank(RWST),theauxiliary buildingstoragetanksandthechemicalandvolumecontrolsystem(CVCS)holduptanks.Itwasconcluded intheChapter14evaluation thatlossofliquidfromthesetankstotheenvironment isnotacredibleaccident.

Thisconclusion doesnotdependonoperating mode,hence,furtherevaluation ofthiseventisnotrequired.

3.WasteGasReleaseRadioactive gasesareintroduced intothereactorcoolantbytheescapeoffissionproductsifdefectsexistedinthefuelcladding.

Theprocessing ofthereactorcoolantbyauxiliary systemsresultsintheaccumulation ofradioactive gasesinvarioustanks.Thetwomainsourcesofanysignificant gaseousradioactivity thatcouldoccurwouldbethevolumecontroltankandthegasdecaytanks.Itisassumedthatatankrupturesby'anunspecified mechanism afterthereactorhasbeenoperating foronecorecyclewith1%defectsinthefuelcladding.

Thereisnoidentified mechanism bywhichaninterruption orlossofpowercouldresultinatankrupture.Therefore, itisconcluded thattheprobability ofoccurrence ofatankrupturewouldnotbesignificantly increased byaninterruption orlossofA.C.power.Furthermore, thegreatlyreducedfissionproductactivityatthecurrenttimeprovidesassurance thattheconsequences ofthiseventareboundedbythecurrentanalysis.

Events4through8arenotrequiredtobeanalyzedinModes5and6duetonegligible storedenergyintheprimaryandsecondary systemsbelowtheMode5temperature limitof200'F.9.Uncontrolled RCCAwithdrawal fromasubcritical condition Thiseventcanonlyoccurwiththereactortripbreakersclosedandthecontrolroddrivemechanisms (CRDMs)energized.

Withtheexception oftestingorspecialmaintenance, theroddrivemotorgenerator setremainstaggedoutuntilMode3andthisalonewouldprecluderodmovement.

Iftheconditions forrodwithdrawal aremet,twooperablesourcerangeinstruments andtworeactortrip

Attachment 1toAEP:NRC:1322 Page8channelsandtripbreakersmustbeoperable.

An'interruption orlossofpowerwouldprecludeCRDMmovementandreleasethecontrolrods.Thesourcerangeinstruments wouldremainavailable.

Therefore, itisconcluded thattheprobability ofoccurrence of~anuncontrolled RCCAwithdrawal wouldnotbeincreased byaninterruption orlossofA.C.powerinModes5or6.I10.Uncontrolled BoronDilutionThesourceofwaterforthiseventisprimarygradewaterviathereactormakeupportionoftheCVCS.TheCVCSisdesignedtolimit,evenundervariouspostulated failuremodes,thepotential rateofdilutiontoavaluethatprovidestheoperatorsufficient timetocorrectthesituation inasafeandorderlymanner.Therateofadditionofunborated watermakeuptothereactorcoolantsystemislimitedbythecapacityoftheprimarywaterpumps.Themaximumadditionrateinthiscaseis225gpmwithbothprimarywaterpumpsrunning.Aninterruption orlossofA.C.powerwouldprecludepumpoperation andaccidental dilution.

Acceptable consequences forthiseventrelyonprecluding itsoccurrence andbydetection withthesourcerangenuclearinstrumentation requiredbytheT/SinModes5and6.PDuringcertaintypesofoperation, itisplausible thattheRWSTisatalowerboricacidconcentration thanthereactorcoolantsystemwater.Duetothelargereactivity marginsinherentinthedesignbasisfortheRWSTboronconcentration andslowdilutionprocess,ithasbeendetermined thatthisneednotbeconsidered asadilutionsource(thisconclusion isrecognized byanexistingfootnotetoT/S3/4.8.1.2).

Therefore, itisconcluded thattheprobability ofoccurrence ofanuncontrolled borondilutionfromtheRWSTwouldnotbeincreased byaninterruption orlossofA.C.power.Discussion ofStationBlackout(SBO)Stationblackout(lossofallA.C.power)wasevaluated forCookunits1and2inaccordance withtheNuclearManagement andResourceCouncil(NUMARC)87-00,"Guidelines andTechnical BasisforNUMARCInitiatives Addressing StationBlackoutatLightWaterReactors,"

Rev.1.TheNUMARCguidelines assumeaSBOoccursatpowerandisevaluated basedoncopingwiththeeventandmaintaining theplantinhotstandbyforaspecified duration.

Thebasisforthisassumption isprovidedinNUMARC87-00,paragraph 2.'2.2:(1)Thepotential forcoredamagefromastationblackoutisboundedbyeventsinitiated from100%powerduetothepresenceofsubstantial decayheat.(2)Transients initiated fromnormaloperating conditions areconsidered mostprobable.

Therefore, anSBOwasnotrequiredtobeevaluated inModes5and6.Nevertheless, SBOsinModes5and6haveoccurredintheindustryandhavebeenthesubjectofgenericcorrespondence.

Forexample,IEN90-25,Supplement 1,"LossOfVitalACPower Attachment 1toAEP:NRC:1322 Page9WithSubsequent ReactorCoolantSystemHeat-Up",

describes theVogtlenuclearplanteventinwhichatruckcauseddamageintheelectrical switchyard andinitiated aSBO.Occurrence ofasimilareventatCookisunlikelyduetoadministrative controlsoveraccessandworkintheswitchyard areasduringoutages.Thefollowing discussion isprovidedtodemonstrate thattheprobability ofanSBOinModes5and6willnotbesignificantly increased bydeferralofthesubjectsurveillances.

AspartoftheNUMARC87-00guidelines, 1&Mcommitted toimplement andmaintainanEDGreliability program.Thisprogramisimplemented byprocedure PMI6080,Rev.2,"Emergency DieselGenerator (EDG)Reliability Monitoring Program."

Theprogramisapplicable atalltimes,including Modes5and6.Aspartofthisprogram,CookNuclearPlantisrequiredtomaintaintheEDGscreditedintheSBOcopingassessment atorabovespecified targetreliability levels.1&Mcommitted tomaintainanEDGtargetreliability ofgreaterthan0.975,asdescribed bytheNUMARCguidelines.

-Ifthetargetisnotmet,specificremedialactionsarerequiredtorestoretheEDGstoabovethetargetreliability level.TheCookNuclearPlantunit1and2EDGscurrently meettheirtargetreliability levels.TheSBOprogramwasthesubjectofsafetyevaluation reportsdatedOctober31,1991andApril23,1992'ieselReliabilit InadditiontotheNUMARCprogramdescribed aboveforSBO,EDGreliability istrackedaspartof10CFR50.65"Requirements formonitoring theeffectiveness ofmaintenance atnuclearpowerplants,"(i.e.,theMaintenance Rule)andbyT/Ssurveillance testing.WhenrequiredbyT/STable4.8-1,theEDGsareplacedonanaccelerated testfrequency.

Theunit1CDEDGandtheunit2ABEDGhaveeachbeenonanaccelerated testfrequency ononeoccasionsincethe1997shutdowns.

The1CDEDGwasonanaccelerated testfrequency duetoconsecutive testfailuresfromfueloilleaksatindividual injectors.

The2ABEDGwasonanaccelerated testfrequency duetoconsecutive testfailuresfromabrokenbracketontheexhaustmanifoldononeoccasionandbrokenorleakinginjectorlinesonthreeoccasions.

Thesefailuresareindividual mechanical failuresnotdirectlyrelatedtotheloadshedding, loadsequencing, andemergency startingcontxolcircuitsoftheEDGs.Individual mechanical failuressuchasthesearetypically (andinthiscasewere)detectedandcorrected duringmonthlytestingactivities notinvolving thesubjectdeferredsurveillances.

Currently, allfourEDGsareonnormalT/Ssurveillance schedules.

TheT/Stestfailuresdescribed above,forthe2ABEDG,alsocontributed tothismachinebeingplacedinaMaintenance Rule"(a)(1)"statusundertheMaintenance Ruletrendingprogram.Othercontributors tothe(a)(1)statusinvolvedafailedvoltageregulator andafailedstartingaircheckvalve(thesetwofailuresoccurredpriortothe1997unit2shutdown).

Noneofthesefailuresinvolvedadieselloadshedorloadsequencing controlcircuitmalfunction andwerenotidentified duringperformance ofanyofthesubjectsurveillances.

The(a)(1) 1ItE Attachment 1toAEP:NRC:1322 Page10statusundertheMaintenance ruleisaclassification indicating thatestablished performance criteriaarenotbeingmet.Specificactionsarerequiredtocorrecttheconditions, andmonitorperformance, untiltheestablished goalsaremet.Thismonitoring iscurrently inprogressanditisanticipated thatthe2ABEDGwillbeoutofthe(a)(1)statuspriortothesubjectsurveillances becomingdue(seeadditional discussion belowunder"Estimate ofEDGunavailabilit duetotheextendedsurveillances").

EstimateofEDGunavailabilit duetotheextendedsurveillances Anassessment oftheloadsheddingandsequencing controlcircuitswasmadetodetermine aboundingincreaseindieselunavailability duetodeferring thesubjectsurveillances.

Theassessment wasperformed usingPRAtechniques.

Thestartingpointfortheassessment wastheMode1PRAEDGunavailability model.EDGfailureduetooverloadwasconsidered intheMode1PRAEDGmodelandwasimplicitly includedinthe"FailtoRun"failuremode.TheMode1EDGmodelalsoincludesunavailability.

oftheEDGscausedbytheunavailability ofrequiredsupportsystems,suchasEssential ServiceWater,250VDC,androomcooling.TheoverallMode1EDGaverageunavailability duetoallcauseswasdetermined asapproximately 13.2daysperyear.Forthepurposesofthisassessment, itwasdecidedtoaddasimplified representation ofloadsheddingandsequencing controlcircuitsintheMode1EDGunavailability modeltoallowanexplicitestimateoftheimpactofthesecircuits.

Onekeyassumption ofthePRAmodeladditionisthatthefailureofanysingleload-shed relaywillresultinanEDGoverload.

Thisconservative assumption ismadetosimplifythemodeledEDGresponse; itisrecognized thatanEDGoverloadcondition isnotacertainty ifasingleload-shedding relayfailstocloseandthatmanyoftheloadsrequiredtobeshedarealreadysecuredinModes5and6.Anotherkeysimplifying assumption ofthePRAmodeladditionisthat,giventheoccurrence ofanSIsignal,thefailureofanysingleSIload-conservation relaywillresultinanEDGoverload.

Finally,themodelalsoconsiders relayfailuresthatcouldresultinsimultaneous startsofsequenced loadstocauseanEDGoverload; inthiscase,simultaneous Black-outandSIsignalsarerequired.

Theaveragecontribution toEDGunavailability duetothefailureofanyoftheserelayswasdetermined usingElectricPowerResearchInstitute (EPRI)data.Theadditionoftheloadsheddingandsequencing controlcircuitmodeljustdescribed totheMode1EDGunavailability modelcontributed 2.8%toEDGunavailability.

Thus,forMode5EDGunavailability wasestimated as13.6daysperyear.Theeffectofincreasing thetimeintervalbetweenperformance ofthesubjectsurveillances wasestimated asfollows.Thefailuredatafortherelaysweremodifiedbylinearlyscalingthenominaldatabytheratiooftheassumedsurveillance intervaltothenominalsurveillance intervalbasedonguidancecontained inNUREG/CR-4550 (Volume1,Revision1,page8-7).Inotherwords,foranassumedsurveillance intervalof30months,thenominalfailuredatawasmultiplied byafactorof30/18or1.67.Similarly, foran,assumedsurveillance intervalof42months,thenominalfailuredatawasmultiplied byafactorof42/18or2.33.Theresultofthisapproachwasanestimated increaseinEDG

Attachment 1toAEP:NRC:1322 Page11unavailability of2.2%to13.9daysperyear,ifthesurveillance intervalwasincreased from18monthsto30months.Theestimated increaseinEDGunavailability was4.0%to14.1daysperyear,ifthesurveillance intervalwasincreased from18monthsto42months.Thesenumbersshowthatincreasing theEDGsurveillance testintervalleadstoverysmallincreases inEDGunavailability.

Theimpactwouldbeexpectedtobesignificantly lowerifamoredetailedrepiesentation oftheload-shedding circuitry wasdeveloped orcreditwastakenforthepossibility ofoperatorrecoveryactions.PlantShutdownSafetandRiskManaementT/S3.8.1.2requiresasingleoffsitepowersupplyandasingleEDGtobeoperableinModes5and6.Thisrequirement isobservedbyadministrative policiesforreducingshutdownrisk(whennotpossibletheT/SActionstatements arecompliedwith).Administrative policiesrequiretheT/Srequirements tobesupplemented inMode5and6whenRCSinventory isbelowspecified minimums~Whenthesespecified minimumsarenotmet,T/Srequirements aresupplemented byrequiring anadditional offsitesourceoranadditional EDGtobeavailable.

WheninMode5andMode6withreducedRCSinventory, anadditional offsitesourceandanadditional EDGarerequiredtobeavailable.

I&M'spoliciesforplantshutdownsafetyandriskmanagement havebeenreviewedrelativetothesubjectdeferrals andarenotimpacted.

Sinificance oftheDeferredSurveillance Reuirements Thefollowing isarestatement ofeachdeferredsurveillance requirement andadiscussion ofitssignificance inModes5and6:4.8.1.1.2.e.4.

Simulating alossofoffsitepowerbyitself,and:a)Verifying de-energization oftheemergency bussesandloadsheddingfromtheemergency busses,b)Verifying thatthedieselstartsontheauto-start signal,energizes theemergency busseswithpermanently connected loadswithin10seconds,energizes theauto-connected shutdownloadsthroughtheloadsequencer andoperatesforgreaterthanorequalto5minuteswhileitsgenerator isloadedwiththeshutdownloads.Afterloadsequencing iscompleted, thesteadystatevoltageandfrequency oftheemergency bussesshallbemaintained at4160+420voltsand60+1.2.Hzduringthetest.Thissurveillance testsimulates alossofoffsitepower(LOOP).Following thisLOOPsimulation, theEDGwouldautomatically startandload.lfproperloadsheddingdidnottakeplace,anEDGcouldbeoverloaded assoonasitenergized theemergency busses.Improperloadsequencing couldcauseamomentary overload.

Thelikelihood ofeitheroftheseoccurrences isconsidered verylowbasedonPRAassessment oftherelayfailurerates,periodiccalibration oftherelaysandtheresultsofthelasttwo4'.1.1.2.e

~4surveillance testsforeachEDG.Reviewofthetestsindicated thatloadsheddingofnon-safety loadsorsequencing ofsafetyloadshadnotresultedinanEDGtest Attachment 1toAEP:NRC:1322 Page12failure.Inoneinstance, fortheunit2CDEDG,theGroupC4pressurizer heatersfailedtoloadshed.Thefaultwasdetermined tobeinthebreakerandnotintheloadshedrelay.Theadditional loadrepresented bytheseheatersdidnotresultinexceeding theavailable capacityonthismachineandwouldnothaveresultedinlossoftheEDGduringanactualLOOP.IntheunlikelyeventthatanautostartofanEDGwasunsuccessful, approvedprocedures existtomanuallystarttheEDGsandmanuallystartrequiredloads.Basedonreviewofthetestingandavailability ofappropriate procedures, I&Mconcluded thatalossofoffsitepowerinModes5and6wouldresultinasuccessful automatic ormanualstartandloadoftheEDGs.4.8.1.1.2.e.6.

Simulating alossofoffsitepowerinconjunction withaSafetyInjection actuation testsignal,andby:a)Verifying de-energization oftheemergency bussesand'oadsheddingfromtheemergency buses,b)Verifying thatthedieselstartsontheauto-start signal,energizes theemergency busseswithpermanently connected loadswithin10seconds,energizes theauto-connected emergency (accident) loadsthroughtheloadsequencer andoperatesforgreaterthanorequalto5minuteswhileitsgenerator isloadedwiththeemergency loads.Afterloadsequencing iscompleted, thesteadystatevoltageandfrequency oftheemergency bussesshallbemaintained at4160+420voltsand60+1.2.Hz.Thevoltageandfrequency shallbemaintained withintheselimitsfortheremainder ofthistest,andc)Verifying thatallautomatic dieselgenerator trips,exceptengineoverspeed andgenerator differential, areautomatically bypasseduponlossofvoltageontheemergency busandlorSafetyInjection actuation signal.Thistestissimilarto4.8.1.1.2.e.4, above,inthattheloadsheddingfunctionisrepeatedandsafetyloadsaresequenced on.However,intheloadsequencing withaconcurrent safetyinjection actuation signal(SIAS),moreloadsarepickedupandtheCTSpumpsarestarted.ThisresultsinthemaximumEDGload.InModes5and6,startingoftheCTSpumpsisnotrequiredorpermitted.

Additionally, inModes5and6,avalidSIASisnotcredibleandtheSIASactuation logicisnotrequiredtobeoperable.

Therefore, thefullloadsequencedemonstrated bythistestisunlikelytooccurinModes5and6.OnaLOOP,inModes5and6,theEDGwouldrespondasdescribed insurveillance 4.8.1.1.2.e.4 above.4.8.1.1.2.e.8.

Determine thattheauto-connected loadstoeachdieselgenerator donotexceed3500kw.Thistestconfirmsthatallsafetyrelatedloadsautomatically connected totheEDGsunderemergency conditions donotexceedthecontinuous dutyratingoftheEDG.Theimportance ofthis Attachment 1toAEP:NRC:1322 Page13testinginModes5and6isgreatlyreduced.WhileinModes5and6below200'F,mostoftheemergency corecoolingsystempumpsandtheCTSaremaintained inaconfiguration toprecludeautomatic actuation.'herefore, duetothelimitednumberofsafetyloadsrequiredtobeoperableinModes5and6,thereisadequateassurance thatEDGcapacitywouldnotbeexceededbytheauto-connected loads.4.8.1.1.2.e.9.

Verifying thedieselgenerator's capability to:a)Synchronize withtheoffsitepowersourcewhilethegenerator isloadedwithitsemergency loadsuponasimulated restoration ofoffsitepower.b)Transferitsloadstotheoffsitepowersource,andc)Berestoredtoitsstandbystatus.Theoffsitepowersupplyisconsidered tobethepreferred powersourceduringaccidentmitigation withtheEDGsactingasthebackupemergency supply.IncaseofanEngineered SafetyFeaturesactuation inwhichtheoffsitepowersourcewasnotavailable, theEDGwouldbesupplying theemergency loads.Uponrestoration oftheoffsitepowersupply,itisrequiredthattheemergency loadscanbetransferred backtothepreferred supply,whilerunning,topermitplacingtheEDGbackinastandbylineup.Basedonpastexperience andthecompleted testprocedure reviewsforthistest,I&Mdoesnotanticipate aproblemwithparalleling theEDGsunderanyconditions.

Additionally, thesignificance ofthiscapability underthecurrentplantconditions isgreatlyreduced.Coolingcapability forremovalofdecayheatisanimportant safetyfunctioninmodes5and6.However,interruptions indecayheatremovalcoolingarerecognized byT/S3/4.4.1.4 and3/4.4.1.5 (ColdShutdown-Loops FilledandColdShutdown-Loops NotFilled,respectively) foruptoonehour.Iftheoffsitepowersupplywaslostforasustained periodand'ecayheatremovalwasinprogressusinganEDG,itwouldnotbeessential (uponrestoration ofoffsitepower)thatarunningresidualheatremoval(RHR)pumpbetransferred backtotheoffsitepowersupplywithoutinterruption.

Ifnecessary, thepumpcouldbesecuredwhiletheEDGwasplacedbackinastandbylineupandthenreenergized fromoffsitepower.Decayheatremovalduringrefueling operations isaddressed byT/S3/4.9.F1(Residual HeatRemovalandCoolantCirculation),

whichrequiresatleastoneresidualheatremoval(RHR)loopinoperation atalltimes.Typically, theconditions forarefueling aresetverysoonafterplantshutdown, withdecayheatloadsatdesignmaximumvaluesandreducedtimetoreach200'Fifcoolingwaslost.Forthecurrentsituation of18-months ofshutdown, T/S3/4.9.8.1 isextremely conservative.

IfalossofoffsitepowerrequiredaperiodofdecayheatremovalusingtheEDGforpower,andthenoffsitepowerwasrestored, itwouldbetechnically acceptable, ifnecessary, tointerrupt RHRforashorttimewhiletheEDGwasplacedbackinstandby.Atemporary interruption ofRHRisrecognized, forupto1hourper8hourperiod,whenmovingfuelnearthereactorpressurevesselhotlegs.Althoughitistechnically acceptable andpermitted bytheT/Sstointerrupt coolingforashorttimeinmodes5and6,I&Mhas Attachment 1toAEP:NRC:1322 Page14concluded, basedonprevioustesting,thatRHRcouldbetransferred backtooffsitepowerwithoutinterruption.

Basedontheabove,thebenefitfromperforming surveillance 4'.1.1.2.e.9 istoensurethespecificcapabilities oftheEDGareverifiedpriortothenextentryintoMode4.4.8.1.1.2.e.10.

Verifying thatwiththedieselgenerator operating inatestmodewhileconnected toitstestload,asimulated SafetyInjection signaloverrides thetestmodeby:a)Returning thedieselgenerator tostandbyoperation

,andb)Verifying theemergency loadsareservicedbyoffsitepower.Thebenefitofperforming thistestingatthecurrenttimeisgreatlyminimized becausethereceiptofavalidSIASactuation signalinModes5and6isnotcredible, andtheSIASactuation logicisnotrequiredtobeenergized inModes5and6.4.8.1.1.2.e.ll.

Verifying thattheautomatic sequencetimingrelaysareOPERABLEwitheachloadsequencetimewithinplusorminus5%ofitsrequiredvalueandthateachloadissequenced onwithinthedesignallowable timelimit.Inthecurrentconditions, theonlyloadsthatautomatically startonaLOOParethenonessential servicewater(NESW),auxiliary feedwater (AFW),essential servicewater(ESW),andcomponent coolingwater(CCW)pumps(AFWwouldtypically beprecluded fromstartingwhenRHRisusedfordecayheatremoval).

Startingoftheseloadsoutofsequencecouldresultinatemporary overloadoftheEDGbutthisisveryunlikelyduetothenumberofloadsthatwouldnotstartinthecurrentcondition.

Inaddition, pastperformance ofthissurveillance hasnotdisclosed significant problemswiththeloadsequencing relays.Aspreviously discussed, theserelaysarewithintheircurrentcalibration intervals, andtheHFArelayswillbeappropriately testedpriortodeclaring theEDGsoperable.

Basedonthis,I&Misconfident thattheEDGswouldnotbechallenged byloadsequencing problems.

ReulatorPrecedence GenericLetter(GL)91-04,"ChangesinTechnical Specifications Surveillance Intervals toAccommodate a24-MonthFuelCycle,"waspublished April2,1991.ThepurposeoftheGLwastoprovideguidancetolicensees wishingtotakeadvantage ofimprovements inreactorfuelstoincreasethedurationofthefuelcyclefortheirfacilities.

ThestaffincludedinitsguidanceinGL91-04thefollowing statement:

TheNRCstaffhasreviewedanumberofrequeststoextend18-monthsurveillances totheendofafuelcycleandafewrequestsforchangesinsurveillance intervals toaccommodate a24-monthfuelcycle.Thestaffhasfoundthattheeffectonsafetyissmallbecausesafetysystemsuseredundant electrical andmechanical components andbecauselicensees performothersurveillances duringplantoperation thatconfirmthatthesesystemsandcomponents canperformtheirsafetyfunctions.

Nevertheless, Attachment 1toAEP:NRC:1322 Page15licensees shouldevaluatetheeffectonsafetyofanincreasein18-monthsurveillance intervals toaccommodate a24-monthcycle.Thisevaluation shouldsupportaconclusion thattheeffectonsafetyissmall.Licensees shouldconfirmthathistorical plantmaintenance andsurveillance datasupportthisconclusion.

The24-monthintervaldescribed byGL91-04involvespermanent extensions ofthe18-monthintervalduringperiodsofreactoroperation whentheimportance ofthesurveillances isincreased.

ThespecificEDGsurveillances addressed bythisT/Schangerequestwill,ifgranted,besuspended duringtheoutagebutwillbeperformed priortoentryintomode4.Additional regulatory precedence isestablished inNUREG-1431.

T/SSR3.8.2.1ofNUREG-1431 includesanotestatingthatthesubjectSRsneednotbeperformed onanoperabledieselinModes5and6.Thereasonforthisisdescribed inthebasesandisgenerally toprecludetheoperabledieselfrombeingrenderedinoperable duringperformance ofSRs,andprecludedeenergizing arequired4160VESFbusordisconnecting arequiredoffsi:tecircuitduringperformance ofSRs.WithlimitedA.C.sourcesavailable, asingleeventcouldcompromise boththerequiredcircuitandtheEDG.TheSalemGenerating StationUnitNos.1and2(DPR-70andDPR-75),wereinvolvedinanextendedoutagesimilartothecurrentoutagesforCookunits1and2.Thisresultedinanamendment requesttopermanently extendthesurveillance intervals forallMode5and6EDGsurveillances thatarepermitted tobeextendedbytheITS(thisincludeseachofthesurveillances inthisamendment request).

Thejustification providedfortheamendment reliedprimarily ontheITSBasesforthedeferrals.

Theamendment wasapprovedasAmendment Nos.212and192.Administrative andEditorial ChanesPrevioussubmittal AEP:NRC:0433Q involvedanadministrative changethataffectsunit2T/Spage3/4.8-9.BecauseI&MexpectsthatthecurrentrequestwillbeapprovedpriortoAEP:NRC:0433Q, thisadministrative changeisduplicated inthissubmittal.

Thechangeinvolvesdeletionofreference toT/S4.0.8.T/S4.0.8allowedextensions forcertainsurveillances requiredtobeperformed onorbeforeAugust13,1994,anddesignated as18-monthor36-monthsurveillances (orrequiredasoutage-related surveillances undertheprovisions ofT/S4.0.5).T/S4.0.8alsoaffectedtheinitiation dateestablished duringtheunit21994refueling outage.Eachaffectedsurveillance ismodifiedbyanotestatingthattheprovisions ofT/S4.0.8areapplicable.

Theseextensions weregrantedtoaccommodate scheduled workatthetime.Unit2surveillances arenowscheduled inaccordance withtheapplicable T/Ss.Therefore, forunit2,T/S4.0.8isdeletedfromSR4.8.1.2becauseitnolongerapplies.Forunit1only,aneditorial correction ismadetotheactionstatement toaddamissing"or".betweenthewords"COREALTERATIONS" and"positive reactivity changes."

The"or"isproperlyincludedintheunit2T/Sandthiseditorial correction Attachment 1toAEP:NRC:1322 Page16willmaketheunit1andunit2T/SSR4.8.1.2identical.

Thecorrection isnotintendedtochangethemeaning.Conclusions Theproposedamendment involvesdeferralofcertainsurveillance requirements whenshutdown.ItdoesnotreducetherequiredoperablepowersourcesoftheLCO,doesnotincreasetheallowedoutagetimeofanyrequiredoperablepowersupplies, anddoesnotreducetherequirement toknowthatthedeferredSRscouldbemetatalltimes.Deferralofthetestingdoesnotbyitselfintroduce apotential failuremechanism orsignificantly increasetheprobability ofEDGfailureondemand.ThemonthlyEDGstarts,fuellevelchecks,andfueltransferpumpcheckswillcontinuetobeperformed toprovideadequateassurance thattheEDGswillbeavailable ifneeded.Thesingleandfullloadrejection testsofT/SSR4.8.1.1.2.e.2 and4.8.1.1.2.e.3 willbeperformed priortodeclaring theEDGsoperable.

Thistestingdemonstrates propergovernorresponseandprovidesassurance thatadroppedloadduringamanualorautomatic loadingsequencedoesnotresultinlossoftheEDG.'herefore, itisconcluded thattherequiredA.C.sourceswillremainavailable ifneeded,andrisktopublichealthandsafetyinModes5and6isnotincreased.

Basedontheabove,theA.C.electrical powersystemswouldcontinuetoperformtheirfunctionfollowing anaccidentasdetermined previously.

Therefore, therewouldbenochangeinthetypesorsignificant increaseintheamountsofanyeffluents releasedoffsite.Further,becausetherequestisfordeferring normallyperformed SRs,itwasconcluded thatthechangeshavenoimpactonindividual orcumulative occupational radar.ation exposure.

G.ImpactoftheProposedChangesBothunit1EDGsareinoperable duetoexpiration ofthesurveillance

interval, plusextension, ofthesubjectsurveillances ofT/SSR4.8.1.1.2.e.

1&Misperforming therequiredactionsand,ithasbeenshownthatsafetyisnotsignificantly reducedbydeferralofthesubjectSRs.Iftheamendment isnotapproved, theEDGsmustremaininoperable untilplantconditions cansupporttherequiredtesting.Inoperability oftheEDGswillseverelyimpactoutageflexibility andprolongthedurationofmaintenance activities withoutacompensating increaseinsafety.Reduction inthedurationofmaintenance activities isacomponent ofminimizing shutdownrisk.Thepotential outagedurationandscopeforunit2,including thepossibility ofemergentwork,mayresultinasimilarimpacttoUnit2.Thechangeisrequested forunit2inanticipation ofthispotential impact.Ithasbeenshownthatsafetyisnotsignificantly reducedbydeferralofthesubjectSRs.Theadministrative changetounit2andtheeditorial correction tounit1havenoimpact.

Attachment 1toAEP:NRC:1322Page17H.ScheduleRequirements I&Mrequestsapprovalofthisrequestassoonaspossibletopermitreturning theunit1EDGstoanoperablestatus.