ML17261A235: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
Line 16: Line 16:


=Text=
=Text=
{{#Wiki_filter:AC Sources-Operating B 3.8.1 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.1  AC Sources-Operating BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-1 Revision 5 BACKGROUND The AC sources to the Class 1E Electrical Power Distribution System consist of the offsite power sources starting at the 4.16 kV engineered safety feature (ESF) buses and the onsite diesel generators (DGs). As required by Reference 1, General Design Criteria (GDC) 17, the design of the AC electrical power system has sufficient independence and redundancy to ensure a source to the ESFs assuming a single failure.
{{#Wiki_filter:AC Sources-Operating B 3.8.1 B 3.8  ELECTRICAL POWER SYSTEMS  
The Class 1E AC Distribution System is divided into two redundant load groups so that the loss of one group does not prevent the minimum safety functions from being performed.
Each load group has connections to two offsite sources and one Class 1E DG at its 4.16 kV 1E bus.
Offsite power is supplied to the 500 kV Switchyard from the transmission network by three 500 kV transmission lines.
Two electrically and physically separated circuits supply electric power from the 500 kV Switchyard to two 13 kV buses and then to the two 4.16 kV ESF buses. A third 69 kV/
13.8 kV offsite power source that may be manually connected to either 13 kV bus is available from the Southern Maryland Electric Cooperative (SMECO). When appropriate, the Engineered Safety Feature Actuation System (ESFAS) loss of coolant incident and shutdown sequencer for the 4.16 kV bus will sequence loads on the bus after the 69 kV/13.8 kV SMECO line has been manually placed in service. The SMECO offsite power source will not be used to carry loads for an operating unit. A detailed description of the offsite power network and the circuits to the Class 1E ESF buses, is found in Reference 2, Chapter 8. The required offsite power circuits are the two 13 kV buses (Nos. 11 and 21) which can be powered by:  a. Two 500 kV lines, two 500 kV buses each of which have connections to a 500 kV line that does not pass through the other 500 kV bus and both P-13000 (500 kV/14 kV) transformers; or AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-2 Revision 12  b. One 500 kV line, one 500 kV bus, and one associated P-13000 (500 kV/13.8 kV) transformer, and the 69 kV/ 13.8 kV SMECO line. When the SMECO line is credited as one of the qualified offsite circuits, the disconnect from the SMECO line to Warehouse No. 1 must be open. In addition, each offsite circuit includes the cabling to and from a 13.8/13.8 kV voltage regulator, 13.8/4.16 kV unit service transformer, and one of the two breakers to one 4.16 kV ESF bus. Transfer capability between the two required offsite circuits is by manual means only. The required circuit breaker to each 4.16 kV ESF bus must be from different 13.8/4.16 kV unit service transformers for the two required offsite circuits. Thus, each unit is able to align one 4.16 kV bus to one required offsite circuit, and the other 4.16 kV bus to the other required offsite circuit.
In some cases, inoperable components in the electrical circuit place both units in Conditions. Examples of these are 13.8 kV bus Nos. 11 or 21, two 500 kV transmission lines, one P-13000 service transformer, or one 500 kV bus.
In other cases, inoperable components only place one unit in a Condition, such as an inoperable U-4000 and/or 13.8 kV regulator that feeds a required 4.16 kV bus.
The onsite standby power source to each 4.16 kV ESF bus is a dedicated DG. A DG starts automatically on an safety injection actuation signal or on a 4.16 kV degraded or undervoltage signal. If both 4.16 kV offsite source breakers are open, the DG, after reaching rated voltage and frequency, will automatically close onto the 4.16 kV bus. In the event of a loss of offsite power to a 4.16 kV 1E bus, if required, the ESF electrical loads will be automatically sequenced onto the DG in sufficient time to provide for safe shutdown for an anticipated operational occurrence (AOO) and to ensure that the containment integrity and other vital functions are maintained in the event of a design bases accident.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-3 Revision 2  Ratings for the No. 1A DG satisfies the requirements of Reference 3 and ratings for the Nos. 1B, 2A, and 2B DGs satisfy the requirements of Reference 4. The continuous service rating for the No. 1A DG is 5400 kW and for the Nos. 1B, 2A, and 2B DGs are 3000 kW. APPLICABLE The initial conditions of Design Basis Accident (DBA) and SAFETY ANALYSES transient analyses in Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC electrical power sources are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded. These limits are discussed in more detail in the Bases for Sections 3.2, 3.4, and 3.6.
The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This results in maintaining at least one train of the onsite or offsite AC sources OPERABLE, during accident conditions in the event of:  a. An assumed loss of all offsite power; and
: b. A single failure. The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3. LCO Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power Distribution System and separate and independent DGs for each train ensure availability of the required power to shut down the reactor and maintain it in a safe shutdown condition after an AOO or a postulated DBA.
Qualified offsite circuits are those that are described in the Updated Final Safety Analysis Report (UFSAR) and are part of the licensing basis for the unit.
Each offsite circuit must be capable of maintaining rated frequency and voltage and accepting required loads during an accident, while connected to the ESF buses. Loads are immediately connected to the ESF buses when the buses are AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-4 Revision 10  powered from the 500 kV offsite circuits and, when powered from the 69/13.8 kV SMECO offsite circuit after being manually connected, the loads are sequenced onto the ESF bus utilizing the same sequencer used to sequence the loads onto the DG. The SMECO offsite circuit will not be used to carry loads for an operating unit. The Limiting Condition for Operation (LCO) requires operability of two out of three qualified circuits between the transmission network and the onsite Class 1E AC Electrical Power Distribution System circuits. These circuits consist of two 500 kV circuits via 500 kV/14 kV and 13.8 kV/4.16 kV transformers and the 69 kV SMECO dedicated source (described in Reference 5) via 69 kV/13.8 kV and 13.8 kV/4.16 kV transformers. In addition, each offsite circuit includes one of the two breakers to one 4.16 kV ESF bus. The required circuit breaker to each 4.16 kV ESF bus must be from different 13.8/4.16 unit service transformers for the two required offsite circuits. Thus, each unit is able to align one 4.16 kV bus to one required offsite circuit, and the other 4.16 kV bus to the other required offsite circuit.
Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus on detection of bus undervoltage. This will be accomplished within 10 seconds. Each DG must also be capable of accepting required loads within the assumed loading sequence intervals, and continue to operate until offsite power can be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such as DG in standby with the engine hot and DG in standby with the engine at ambient conditions. Additional DG capabilities must be demonstrated to meet required Surveillances, e.g., capability of the DG to reject a load  500 hp without tripping.
Proper sequencing of loads, including shedding of non-essential loads, is a required function for DG OPERABILITY in MODEs 1, 2, and 3.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-5 Revision 59  The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other train. For the DGs, separation and independence are complete.
The Control Room Emergency Ventilation System (CREVS) and Control Room Emergency Temperature System (CRETS) are shared systems with one train of each system connected to an onsite Class 1E AC electrical power distribution subsystem from each unit. Limiting Condition for Operation 3.8.1.c requires one qualified circuit between the offsite transmission network and the other unit's onsite Class 1E AC electrical power distribution subsystems needed to supply power to the CREVS and CRETS to be OPERABLE and one DG from the other unit capable of supplying power to the CREVS and CRETS to be OPERABLE. The other unit may not be in MODEs 1, 2, 3, or 4. The qualified circuit in LCO 3.8.1.c must be separate and independent (to the extent possible) of the qualified circuit which provides power to the other train of the CREVS and CRETS. The OPERABLE 3.8.1.c DG may not have automatic starting or loading (sequencing) capability. In addition, the OPERABLE 3.8.1.c DG may be in the local control mode if it is capable of being returned to the automatic control mode when required and within the time assumed in the accident analysis. These requirements, in conjunction with the requirements for the unit AC electrical power sources in LCO 3.8.1.a and LCO 3.8.1.b, ensure that power is available to two trains of the CREVS and CRETS. APPLICABILITY The AC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure that:  a. Acceptable fuel design limits and reactor coolant pressure boundary limits, are not exceeded as a result of AOOs or abnormal transients; and  b. Adequate core cooling is provided and Containment OPERABILITY and other vital functions, are maintained in the event of a postulated DBA.
The AC power requirements for MODEs 5 and 6 are covered in LCO 3.8.2.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-6 Revision 59 ACTIONS A Note prohibits the application of LCO 3.0.4.b to an inoperable DG. There is an increased risk associated with entering a MODE or other specified condition in the Applicability with an inoperable DG and the provisions of LCO 3.0.4.b, which allow entry into a MODE or other specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in this circumstance.
A.1  To ensure a highly reliable power source remains with the one required LCO 3.8.1.a offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuits on a more frequent basis. Since the Required Action only specifies "perform," a failure of Surveillance Requirement (SR) 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result in a Required Action not met. However, if a second required circuit fails SR 3.8.1.1 or SR 3.8.1.2, the second offsite circuit is inoperable, and Condition D and/or G, as applicable, for the two offsite circuits inoperable, is entered.
A.2  Required Action A.2, which only applies if the train cannot be powered from an offsite source, is intended to provide assurance that an event coincident with a single failure of the associated DG will not result in a complete loss of safety function of critical redundant required features.
These features are powered from the redundant AC electrical power train(s). Single train systems may not be included.
The Completion Time for Required Action A.2 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock."  In this Required Action, the Completion Time only begins on discovery that both:  a. The train has no offsite power supplying its loads; and
: b. A required feature on another train is inoperable.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-7 Revision 59  If at any time during the existence of Condition A (one required LCO 3.8.1.a offsite circuit inoperable) a redundant required feature subsequently becomes inoperable, this Completion Time begins to be tracked.
The Completion Time must be started if it is discovered that there is no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident with one or more inoperable required support or supported features (or both) that are associated with the other train that has offsite power. Twenty-four hours is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown.
The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the onsite Class 1E Distribution System. The 24 hour Completion Time takes into account the component OPERABILITY of the redundant counterpart to the inoperable required feature.
Additionally, the 24 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
A.3  Consistent with Reference 6, operation may continue in Condition A for a period that should not exceed 72 hours.
With one offsite circuit inoperable, the reliability of the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the unit safety systems. In this Condition, however, the remaining OPERABLE offsite circuit and DGs are adequate to supply electrical power to the onsite Class 1E Distribution System.
The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-8 Revision 59  B.1 The 14 day Completion Time for Required Action B.5 is based on the OPERABILITY of both opposite-unit DGs and the availability of the 0C DG. The 0C DG is available to power the inoperable DG bus loads in the event of a station blackout or loss-of-offsite power. It is required to administratively verify both opposite-unit DGs OPERABLE and the 0C DG available within one hour and to continue this action once per 24 hours thereafter until restoration of the required DG is accomplished. This verification provides assurance that both opposite-unit DGs and the 0C DG are capable of supplying the onsite Class 1E AC Electrical Power Distribution System.


B.2  To ensure a highly reliable power source remains with an inoperable LCO 3.8.1.b DG, it is necessary to verify the availability of the offsite circuits on a more frequent basis. Since the Required Action only specifies "perform,"
B 3.8.1  AC Sources-Operating  
a failure of SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result in a Required Action being not met.
However, if a circuit fails to pass SR 3.8.1.1 or SR 3.8.1.2, it is inoperable. Upon offsite circuit inoperability, additional Conditions and Required Actions must then be entered.
B.3  Required Action B.3 is intended to provide assurance that a loss of offsite power, during the period that a LCO 3.8.1.b DG is inoperable, does not result in a complete loss of safety function of critical systems. These features are designed with redundant safety-related trains. Single train systems are not included. Redundant required feature failures consist of inoperable features with a train, redundant to the train that has an inoperable LCO 3.8.1.b DG.
The Completion Time for Required Action B.3 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock."  In this Required AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-9 Revision 59 Action, the Completion Time only begins on discovery that both:  a. An inoperable LCO 3.8.1.b DG exists; and
: b. A required feature on another train is inoperable.
If at any time during the existence of this Condition (one LCO 3.8.1.b DG inoperable) a required feature subsequently becomes inoperable, this Completion Time begins to be tracked.
Discovering one required LCO 3.8.1.b DG inoperable coincident with one or more inoperable required support or supported features (or both) that are associated with the OPERABLE DGs, results in starting the Completion Time for the Required Action. Four hours from the discovery of these events existing concurrently, is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown.
In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System. Thus, on a component basis, single failure protection for the required feature's function may have been lost; however, function has not been lost. The four hour Completion Time takes into account the OPERABILITY of the redundant counterpart to the inoperable required feature. Additionally, the four hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
B.4.1 and B.4.2  Required Action B.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be determined that the cause of the inoperable DG does not exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be performed. If the cause of inoperability exists on other DG(s), the other DG(s) would be declared inoperable upon discovery and Condition E and/or I of LCO 3.8.1, as applicable, would be entered. Once the failure is repaired, the common cause failure no longer exists and Required Action B.4.1 is satisfied. If the cause of the initial AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-10 Revision 59 inoperable DG cannot be confirmed not to exist on the remaining DG(s), performance of SR 3.8.1.3 suffices to provide assurance of continued OPERABILITY of the DG(s).
In the event the inoperable DG is restored to OPERABLE status prior to completing either B.4.1 or B.4.2, the corrective action program will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour constraint imposed while in Condition B.
Consistent with Reference 7, 24 hours is reasonable to confirm that the OPERABLE DG(s) is not affected by the same problem as the inoperable DG. These Conditions (B.4.1 and B.4.2) do not address the availability of the 0C DG.
B.5  Operation may continue in Condition B for a period that should not exceed 14 days. Planned entry into this Required Action requires that a risk assessment be performed in accordance with a configuration risk management program (Reference 11). This ensures that a proceduralized probabilistic risk assessment-informed process is in place that assesses the overall impact of plant maintenance on plant risk prior to entering this Required Action for planned activities.
In Condition B, the remaining OPERABLE DGs, available 0C DG, and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System. The 14 day Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period. In addition to utilizing Calvert Cliffs Nuclear Power Plant's processes for evaluating risk, Reference 11, Calvert Cliffs will administratively limit DG OOS time to 72 hours for elective maintenance unless the following actions are completed:
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-11 Revision 59 a. Weather conditions will be evaluated prior to entering the extended DG Completion Time for elective maintenance. An extended DG Completion Time will not be entered for elective maintenance purposes if official weather forecasts are predicting severe conditions (tornado or thunderstorm warnings). b. The condition of the offsite power supply will be evaluated prior to entering the extended DG Completion Time. c. No elective maintenance will be performed in the switchyard, on the 4 kV Distribution System, or on the 13 kV Distribution System. d. No maintenance or testing that affects the reliability of the train associated with the operable DG on the affected unit will be scheduled during the extended DG Completion Time. If any testing or maintenance activities, which affects the train reliability must be performed while the extended DG Completion Time is in effect, a 10 CFR 50.65(a)(4) evaluation will be performed. e. Elective maintenance will not be performed on the alternate AC power source (0C DG). Personnel will be made aware of the dedication of the alternate AC source to the affected Unit. f. Planned maintenance will not be performed on the Auxiliary Feedwater System. g. The system dispatcher (System Operations and Maintenance Department) will be contacted prior to removing the DG from service and after it has been returned to service. h. The operations crews will be briefed concerning the Unit activities, including compensatory measures established and the importance of promptly starting and aligning the alternate AC source (0C DG). i. The on-shift operations crew will discuss and review the appropriate normal and emergency operating procedures prior to or shortly after assuming the watch for the first time after having scheduled days off while the extended DG Completion Time is in effect.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-12 Revision 59 j. The condition of the grid will be evaluated prior to entering the extended DG 3.8.1 Condition B Completion Time for elective maintenance. An extended DG Completion Time will not be entered to perform elective maintenance when grid stress conditions are considered "High" per plant procedures. This will include conditions such as expected extreme summer temperatures and/or high demand. C.1.1 and C.1.2 In Condition C with an opposite-unit DG inoperable and/or the 0C DG unavailable, the remaining OPERABLE unit-specific DG and required qualified circuits are adequate to supply electrical power to the onsite Class 1E Distribution System.
Consistent with Reference 6, operation may continue in Condition C for a period that should not exceed 72 hours.
The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
D.1  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable resulting in de-energization. Therefore, the Required Actions of Condition D are modified by a Note to indicate that when Condition D is entered with no AC source to any train, the Conditions and Required Actions for LCO 3.8.9, must be immediately entered. This allows Condition D to provide requirements for the loss of the LCO 3.8.1.c offsite circuit and DG without regard to whether a train is de-energized. Limiting Condition for Operation 3.8.9 provides the appropriate restrictions for a de-energized train. To ensure a highly reliable power source remains with the one required LCO 3.8.1.c offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuits on a more frequent basis. Since the Required Action only specifies "perform," a failure of SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result in a Required Action not met. However, if a second required circuit fails SR 3.8.1.1 or SR 3.8.1.2, the second offsite AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-13 Revision 59 circuit is inoperable, and Condition A and/or G, as applicable, for the two offsite circuits inoperable, is entered.
D.2  Required Action D.2, which only applies if the train cannot be powered from an offsite source, is intended to provide assurance that an event coincident with a single failure of the associated DG will not result in a complete loss of safety function for the CREVS or CRETS. The Completion Time for Required Action D.2 is intended to allow the operator time to evaluate and repair any discovered inoperabilities.
This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock."  In this Required Action, the Completion Time only begins on discovery that both:  a. The train has no offsite power supplying its loads; and
: b. A train of CREVS or CRETS on the other train is inoperable.
If at any time during the existence of Condition D (one required LCO 3.8.1.c offsite circuit inoperable) a train of CREVS or CRETS becomes inoperable, this Completion Time begins to be tracked.
Discovering no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident with one train of CREVS or CRETS that is associated with the other train that has offsite power, results in starting the Completion Times for the Required Action. Twenty-four hours is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown. The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the onsite Class 1E Distribution System. The 24 hour Completion Time takes into account the component OPERABILITY of the redundant counterpart to the inoperable CREVS or CRETS.
Additionally, the 24 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-14 Revision 59 reasonable time for repairs, and the low probability of a DBA occurring during this period.
D.3  Consistent with the time provided in ACTION A, operation may continue in Condition D for a period that should not exceed 72 hours. With one required LCO 3.8.1.c offsite circuit inoperable, the reliability of the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the unit safety systems. In this Condition, however, the remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to the onsite Class 1E Distribution System.
If the LCO 3.8.1.c required offsite circuit cannot be restored to OPERABLE status within 72 hours, the CREVS and CRETS associated with the offsite circuit must be declared inoperable. The ACTIONS associated with the CREVS and CRETS will ensure the appropriate actions are taken. The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
E.1 The 14 day Completion Time for Required Action E.5 is based on the OPERABILITY of the other three safety-related DGs and the availability of the 0C DG. The 0C DG is available to power the inoperable DG bus loads in the event of a station blackout or loss-of-offsite power. It is required to administratively verify the three safety-related DGs OPERABLE and the 0C DG available within one hour and to continue this action once per 24 hours thereafter until restoration of the required DG is accomplished. This verification provides assurance that the three safety-related DGs and the 0C DG are capable of supplying the onsite Class 1E AC Electrical Power Distribution System. E.2  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-15 Revision 59 resulting in de-energization. Therefore, the Required Actions of Condition E are modified by a Note to indicate that when Condition E is entered with no AC source to any train, the Conditions and Required Actions for LCO 3.8.9 must be immediately entered. This allows Condition E to provide requirements for the loss of the LCO 3.8.1.c offsite circuit and DG without regard to whether a train is de-energized. Limiting Condition for Operation 3.8.9 provides the appropriate restrictions for a de-energized train.
To ensure a highly reliable power source remains with the one required LCO 3.8.1.c DG inoperable, it is necessary to verify the availability of the required offsite circuits on a more frequency basis. Since the Required Action only specifies "perform," a failure of SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result in a Required Action not met. However, if a circuit fails to pass SR 3.8.1.1 or SR 3.8.1.2, it is inoperable. Upon offsite circuit inoperability additional Conditions and Required Actions must then be entered.
E.3  Required Action E.3 is intended to provide assurance that a loss of offsite power, during the period the LCO 3.8.1.c DG is inoperable, does not result in a complete loss of safety function for the CREVS or CRETS. The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock." In this Required Action, the Completion Time only begins on discovery that both:  a. An inoperable LCO 3.8.1.c DG exists; and
: b. A train of CREVS or CRETS on the other train is inoperable.
If at any time during the existence of this Condition (the LCO 3.8.1.c DG inoperable) a train of CREVS or CRETS becomes inoperable, this Completion Time begins to be tracked.
Discovering the LCO 3.8.1.c DG inoperable coincident with one train of CREVS or CRETS that is associated with the one AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-16 Revision 59 LCO 3.8.1.b DG results in starting the Completion Time for the Required Action. Four hours from the discovery of these events existing concurrently, is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown. In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System. Thus, on a component basis, single failure protection for the CREVS or CRETS may have been lost; however, function has not been lost. The four hour Completion Time also takes into account the capacity and capability of the remaining CREVS and CRETS train, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
E.4.1 and E.4.2  Required Action E.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be determined that the cause of the inoperable DG does not exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be performed. If the cause of inoperability exists on other DG(s), the other DG(s) would be declared inoperable upon discovery and Condition B and/or I of LCO 3.8.1, as applicable, would be entered. Once the failure is repaired, the common cause failure no longer exists and Required Action E.4.1 is satisfied. If the cause of the initial inoperable DG cannot be confirmed not to exist on the remaining DG(s), performance of SR 3.8.1.3 suffices to provide assurance of continued OPERABILITY of the DG(s).
In the event the inoperable DG is restored to OPERABLE status prior to completing either E.4.1 or E.4.2, the corrective action program will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour constraint imposed while in Condition E.
Consistent with Reference 6, 24 hours is reasonable to confirm that the OPERABLE DG(s) is not affected by the same problem as the inoperable DG.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-17 Revision 59 These Conditions (E.4.1 and E.4.2) do not address the availability of the 0C DG.
E.5  Consistent with the time provided in ACTION B, operation may continue in Condition E for a period that should not exceed 14 days. In Condition E, the remaining OPERABLE DGs, available 0C DG, and offsite power circuits are adequate to supply electrical power to the Class 1E Distribution System.
If the LCO 3.8.1.c DG cannot be restored to OPERABLE status within 14 days the CREVS and CRETS associated with this DG must be declared inoperable. The Actions associated with the CREVS and CRETS will ensure the appropriate Actions are taken.
The 14 day Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period. F.1.1 and F.1.2 In Condition F, with an additional safety-related DG inoperable or the 0C DG unavailable, the remaining OPERABLE DG and required qualified circuits are adequate to supply electrical power to the onsite Class 1E Distribution System.
Consistent with Reference 6, operation may continue in Condition F for a period that should not exceed 72 hours.
The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.


F.1.3 If the LCO 3.8.1.c DG cannot be restored to OPERABLE status within 72 hours the CREVS and CRETS associated with this DG must be declared inoperable. The Required Actions associated with the CREVS and CRETS will ensure that the appropriate actions are taken.  
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-1 Revision 5 BACKGROUND The AC sources to the Class 1E Electrical Power Distribution System consist of the offsite power sources starting at the 4.16 kV engineered safety feature (ESF) buses and the onsite diesel generators (DGs). As required by Reference 1, General Design Criteria (GDC) 17, the design of the AC electrical power system has sufficient independence and
 
redundancy to ensure a source to the ESFs assuming a single
 
failure.
 
The Class 1E AC Distribution System is divided into two redundant load groups so that the loss of one group does not
 
prevent the minimum safety functions from being performed. 
 
Each load group has connections to two offsite sources and
 
one Class 1E DG at its 4.16 kV 1E bus.
 
Offsite power is supplied to the 500 kV Switchyard from the transmission network by three 500 kV transmission lines. 
 
Two electrically and physically separated circuits supply
 
electric power from the 500 kV Switchyard to two 13 kV buses
 
and then to the two 4.16 kV ESF buses. A third 69 kV/
 
13.8 kV offsite power source that may be manually connected
 
to either 13 kV bus is available from the Southern Maryland
 
Electric Cooperative (SMECO). When appropriate, the
 
Engineered Safety Feature Actuation System (ESFAS) loss of
 
coolant incident and shutdown sequencer for the 4.16 kV bus
 
will sequence loads on the bus after the 69 kV/13.8 kV SMECO
 
line has been manually placed in service. The SMECO offsite
 
power source will not be used to carry loads for an
 
operating unit. A detailed description of the offsite power
 
network and the circuits to the Class 1E ESF buses, is found
 
in Reference 2, Chapter 8.
The required offsite power circuits are the two 13 kV buses (Nos. 11 and 21) which can be powered by:  a. Two 500 kV lines, two 500 kV buses each of which have connections to a 500 kV line that does not pass
 
through the other 500 kV bus and both P-13000
 
(500 kV/14 kV) transformers; or AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-2 Revision 12  b. One 500 kV line, one 500 kV bus, and one associated P-13000 (500 kV/13.8 kV) transformer, and the 69 kV/
13.8 kV SMECO line. When the SMECO line is credited
 
as one of the qualified offsite circuits, the
 
disconnect from the SMECO line to Warehouse No. 1 must
 
be open.
In addition, each offsite circuit includes the cabling to and from a 13.8/13.8 kV voltage regulator, 13.8/4.16 kV unit service transformer, and one of the two breakers to one 4.16 kV ESF bus. Transfer capability between the two
 
required offsite circuits is by manual means only. The
 
required circuit breaker to each 4.16 kV ESF bus must be
 
from different 13.8/4.16 kV unit service transformers for the two required offsite circuits. Thus, each unit is able
 
to align one 4.16 kV bus to one required offsite circuit,
 
and the other 4.16 kV bus to the other required offsite
 
circuit.
 
In some cases, inoperable components in the electrical circuit place both units in Conditions. Examples of these
 
are 13.8 kV bus Nos. 11 or 21, two 500 kV transmission
 
lines, one P-13000 service transformer, or one 500 kV bus. 
 
In other cases, inoperable components only place one unit in
 
a Condition, such as an inoperable U-4000 and/or 13.8 kV
 
regulator that feeds a required 4.16 kV bus.
 
The onsite standby power source to each 4.16 kV ESF bus is a dedicated DG. A DG starts automatically on an safety
 
injection actuation signal or on a 4.16 kV degraded or
 
undervoltage signal. If both 4.16 kV offsite source
 
breakers are open, the DG, after reaching rated voltage and
 
frequency, will automatically close onto the 4.16 kV bus.
In the event of a loss of offsite power to a 4.16 kV 1E bus, if required, the ESF electrical loads will be automatically
 
sequenced onto the DG in sufficient time to provide for safe
 
shutdown for an anticipated operational occurrence (AOO) and
 
to ensure that the containment integrity and other vital
 
functions are maintained in the event of a design bases
 
accident.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-3 Revision 2  Ratings for the No. 1A DG satisfies the requirements of Reference 3 and ratings for the Nos. 1B, 2A, and 2B DGs satisfy the requirements of Reference 4. The continuous service rating for the No. 1A DG is 5400 kW and for the Nos. 1B, 2A, and 2B DGs are 3000 kW.
APPLICABLE The initial conditions of Design Basis Accident (DBA) and SAFETY ANALYSES transient analyses in Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC electrical power sources
 
are designed to provide sufficient capacity, capability,
 
redundancy, and reliability to ensure the availability of
 
necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded. These limits
 
are discussed in more detail in the Bases for Sections 3.2, 3.4, and 3.6.
 
The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident
 
analyses and is based upon meeting the design basis of the
 
unit. This results in maintaining at least one train of the
 
onsite or offsite AC sources OPERABLE, during accident conditions in the event of:  a. An assumed loss of all offsite power; and
: b. A single failure.
The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.
LCO Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power
 
Distribution System and separate and independent DGs for
 
each train ensure availability of the required power to shut
 
down the reactor and maintain it in a safe shutdown
 
condition after an AOO or a postulated DBA.
 
Qualified offsite circuits are those that are described in the Updated Final Safety Analysis Report (UFSAR) and are part of the licensing basis for the unit.
 
Each offsite circuit must be capable of maintaining rated frequency and voltage and accepting required loads during an
 
accident, while connected to the ESF buses. Loads are
 
immediately connected to the ESF buses when the buses are AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-4 Revision 10  powered from the 500 kV offsite circuits and, when powered from the 69/13.8 kV SMECO offsite circuit after being
 
manually connected, the loads are sequenced onto the ESF bus
 
utilizing the same sequencer used to sequence the loads onto
 
the DG. The SMECO offsite circuit will not be used to carry
 
loads for an operating unit.
The Limiting Condition for Operation (LCO) requires operability of two out of three qualified circuits between
 
the transmission network and the onsite Class 1E AC
 
Electrical Power Distribution System circuits. These
 
circuits consist of two 500 kV circuits via 500 kV/14 kV and
 
13.8 kV/4.16 kV transformers and the 69 kV SMECO dedicated
 
source (described in Reference 5) via 69 kV/13.8 kV and
 
13.8 kV/4.16 kV transformers. In addition, each offsite
 
circuit includes one of the two breakers to one 4.16 kV ESF
 
bus. The required circuit breaker to each 4.16 kV ESF bus
 
must be from different 13.8/4.16 unit service transformers
 
for the two required offsite circuits. Thus, each unit is
 
able to align one 4.16 kV bus to one required offsite
 
circuit, and the other 4.16 kV bus to the other required
 
offsite circuit.
 
Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus
 
on detection of bus undervoltage. This will be accomplished
 
within 10 seconds. Each DG must also be capable of
 
accepting required loads within the assumed loading sequence
 
intervals, and continue to operate until offsite power can
 
be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such
 
as DG in standby with the engine hot and DG in standby with
 
the engine at ambient conditions. Additional DG
 
capabilities must be demonstrated to meet required Surveillances, e.g., capability of the DG to reject a load  500 hp without tripping.
 
Proper sequencing of loads, including shedding of non-essential loads, is a required function for DG OPERABILITY
 
in MODEs 1, 2, and 3.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-5 Revision 59  The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other
 
train. For the DGs, separation and independence are
 
complete.
 
The Control Room Emergency Ventilation System (CREVS) and Control Room Emergency Temperature System (CRETS) are shared systems with one train of each system connected to an onsite
 
Class 1E AC electrical power distribution subsystem from
 
each unit. Limiting Condition for Operation 3.8.1.c
 
requires one qualified circuit between the offsite
 
transmission network and the other unit's onsite Class 1E AC
 
electrical power distribution subsystems needed to supply
 
power to the CREVS and CRETS to be OPERABLE and one DG from
 
the other unit capable of supplying power to the CREVS and
 
CRETS to be OPERABLE. The other unit may not be in MODEs 1, 2, 3, or 4. The qualified circuit in LCO 3.8.1.c must be separate and independent (to the extent possible) of the
 
qualified circuit which provides power to the other train of
 
the CREVS and CRETS. The OPERABLE 3.8.1.c DG may not have automatic starting or loading (sequencing) capability. In addition, the OPERABLE 3.8.1.c DG may be in the local control mode if it is capable of being returned to the automatic control mode when required and within the time assumed in the accident analysis. These requirements, in conjunction with the requirements for the unit AC electrical
 
power sources in LCO 3.8.1.a and LCO 3.8.1.b, ensure that power is available to two trains of the CREVS and CRETS.
APPLICABILITY The AC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure that:  a. Acceptable fuel design limits and reactor coolant pressure boundary limits, are not exceeded as a result
 
of AOOs or abnormal transients; and  b. Adequate core cooling is provided and Containment OPERABILITY and other vital functions, are maintained
 
in the event of a postulated DBA.
 
The AC power requirements for MODEs 5 and 6 are covered in LCO 3.8.2.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-6 Revision 59 ACTIONS A Note prohibits the application of LCO 3.0.4.b to an inoperable DG. There is an increased risk associated with
 
entering a MODE or other specified condition in the
 
Applicability with an inoperable DG and the provisions of
 
LCO 3.0.4.b, which allow entry into a MODE or other
 
specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in
 
this circumstance.
 
A.1  To ensure a highly reliable power source remains with the one required LCO 3.8.1.a offsite circuit inoperable, it is
 
necessary to verify the OPERABILITY of the remaining
 
required offsite circuits on a more frequent basis. Since
 
the Required Action only specifies "perform," a failure of
 
Surveillance Requirement (SR) 3.8.1.1 or SR 3.8.1.2
 
acceptance criteria does not result in a Required Action not
 
met. However, if a second required circuit fails SR 3.8.1.1
 
or SR 3.8.1.2, the second offsite circuit is inoperable, and
 
Condition D and/or G, as applicable, for the two offsite
 
circuits inoperable, is entered.
 
A.2  Required Action A.2, which only applies if the train cannot be powered from an offsite source, is intended to provide
 
assurance that an event coincident with a single failure of
 
the associated DG will not result in a complete loss of
 
safety function of critical redundant required features. 
 
These features are powered from the redundant AC electrical
 
power train(s). Single train systems may not be included.
 
The Completion Time for Required Action A.2 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for
 
beginning the allowed outage time "clock."  In this Required
 
Action, the Completion Time only begins on discovery that
 
both:  a. The train has no offsite power supplying its loads; and
: b. A required feature on another train is inoperable.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-7 Revision 59  If at any time during the existence of Condition A (one required LCO 3.8.1.a offsite circuit inoperable) a redundant
 
required feature subsequently becomes inoperable, this
 
Completion Time begins to be tracked.
 
The Completion Time must be started if it is discovered that there is no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident
 
with one or more inoperable required support or supported
 
features (or both) that are associated with the other train
 
that has offsite power. Twenty-four hours is acceptable
 
because it minimizes risk while allowing time for
 
restoration before subjecting the unit to transients
 
associated with shutdown.
 
The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the
 
onsite Class 1E Distribution System. The 24 hour Completion
 
Time takes into account the component OPERABILITY of the
 
redundant counterpart to the inoperable required feature. 
 
Additionally, the 24 hour Completion Time takes into account
 
the capacity and capability of the remaining AC sources, a
 
reasonable time for repairs, and the low probability of a
 
DBA occurring during this period.
 
A.3  Consistent with Reference 6, operation may continue in Condition A for a period that should not exceed 72 hours. 
 
With one offsite circuit inoperable, the reliability of the
 
offsite system is degraded, and the potential for a loss of
 
offsite power is increased, with attendant potential for a
 
challenge to the unit safety systems. In this Condition,
 
however, the remaining OPERABLE offsite circuit and DGs are
 
adequate to supply electrical power to the onsite Class 1E Distribution System.
 
The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable
 
time for repairs, and the low probability of a DBA occurring
 
during this period.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-8 Revision 59  B.1 The 14 day Completion Time for Required Action B.5 is based on the OPERABILITY of both opposite-unit DGs and the
 
availability of the 0C DG. The 0C DG is available to power
 
the inoperable DG bus loads in the event of a station
 
blackout or loss-of-offsite power. It is required to administratively verify both opposite-unit DGs OPERABLE and the 0C DG available within one hour and to continue this
 
action once per 24 hours thereafter until restoration of the
 
required DG is accomplished. This verification provides
 
assurance that both opposite-unit DGs and the 0C DG are
 
capable of supplying the onsite Class 1E AC Electrical Power
 
Distribution System.
 
B.2  To ensure a highly reliable power source remains with an inoperable LCO 3.8.1.b DG, it is necessary to verify the
 
availability of the offsite circuits on a more frequent
 
basis. Since the Required Action only specifies "perform,"
 
a failure of SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria
 
does not result in a Required Action being not met. 
 
However, if a circuit fails to pass SR 3.8.1.1 or
 
SR 3.8.1.2, it is inoperable. Upon offsite circuit
 
inoperability, additional Conditions and Required Actions
 
must then be entered.
 
B.3  Required Action B.3 is intended to provide assurance that a loss of offsite power, during the period that a LCO 3.8.1.b
 
DG is inoperable, does not result in a complete loss of
 
safety function of critical systems. These features are
 
designed with redundant safety-related trains. Single train
 
systems are not included. Redundant required feature
 
failures consist of inoperable features with a train, redundant to the train that has an inoperable LCO 3.8.1.b DG.
The Completion Time for Required Action B.3 is intended to allow the operator time to evaluate and repair any
 
discovered inoperabilities. This Completion Time also
 
allows for an exception to the normal "time zero" for
 
beginning the allowed outage time "clock."  In this Required AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-9 Revision 59 Action, the Completion Time only begins on discovery that both:  a. An inoperable LCO 3.8.1.b DG exists; and
: b. A required feature on another train is inoperable.
 
If at any time during the existence of this Condition (one LCO 3.8.1.b DG inoperable) a required feature subsequently becomes inoperable, this Completion Time begins to be
 
tracked.
 
Discovering one required LCO 3.8.1.b DG inoperable coincident with one or more inoperable required support or
 
supported features (or both) that are associated with the
 
OPERABLE DGs, results in starting the Completion Time for
 
the Required Action. Four hours from the discovery of these
 
events existing concurrently, is acceptable because it
 
minimizes risk while allowing time for restoration before
 
subjecting the unit to transients associated with shutdown.
 
In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the
 
onsite Class 1E Distribution System. Thus, on a component
 
basis, single failure protection for the required feature's
 
function may have been lost; however, function has not been
 
lost. The four hour Completion Time takes into account the
 
OPERABILITY of the redundant counterpart to the inoperable
 
required feature. Additionally, the four hour Completion
 
Time takes into account the capacity and capability of the
 
remaining AC sources, a reasonable time for repairs, and the
 
low probability of a DBA occurring during this period.
 
B.4.1 and B.4.2  Required Action B.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be determined that the cause of the inoperable DG does not exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be
 
performed. If the cause of inoperability exists on other
 
DG(s), the other DG(s) would be declared inoperable upon
 
discovery and Condition E and/or I of LCO 3.8.1, as
 
applicable, would be entered. Once the failure is repaired,
 
the common cause failure no longer exists and Required
 
Action B.4.1 is satisfied. If the cause of the initial AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-10 Revision 59 inoperable DG cannot be confirmed not to exist on the remaining DG(s), performance of SR 3.8.1.3 suffices to
 
provide assurance of continued OPERABILITY of the DG(s).
 
In the event the inoperable DG is restored to OPERABLE status prior to completing either B.4.1 or B.4.2, the corrective action program will continue to evaluate the common cause possibility. This continued evaluation,
 
however, is no longer under the 24 hour constraint imposed
 
while in Condition B.
 
Consistent with Reference 7, 24 hours is reasonable to confirm that the OPERABLE DG(s) is not affected by the same
 
problem as the inoperable DG.
These Conditions (B.4.1 and B.4.2) do not address the
 
availability of the 0C DG.
 
B.5  Operation may continue in Condition B for a period that should not exceed 14 days.
Planned entry into this Required Action requires that a risk
 
assessment be performed in accordance with a configuration
 
risk management program (Reference 11). This ensures that a
 
proceduralized probabilistic risk assessment-informed
 
process is in place that assesses the overall impact of
 
plant maintenance on plant risk prior to entering this
 
Required Action for planned activities.
 
In Condition B, the remaining OPERABLE DGs, available 0C DG, and offsite circuits are adequate to supply electrical power
 
to the onsite Class 1E Distribution System. The 14 day
 
Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring
 
during this period.
In addition to utilizing Calvert Cliffs Nuclear Power
 
Plant's processes for evaluating risk, Reference 11, Calvert
 
Cliffs will administratively limit DG OOS time to 72 hours
 
for elective maintenance unless the following actions are
 
completed:
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-11 Revision 59 a. Weather conditions will be evaluated prior to entering the extended DG Completion Time for elective
 
maintenance. An extended DG Completion Time will not
 
be entered for elective maintenance purposes if
 
official weather forecasts are predicting severe
 
conditions (tornado or thunderstorm warnings). b. The condition of the offsite power supply will be evaluated prior to entering the extended DG Completion
 
Time. c. No elective maintenance will be performed in the switchyard, on the 4 kV Distribution System, or on the
 
13 kV Distribution System. d. No maintenance or testing that affects the reliability of the train associated with the operable DG on the
 
affected unit will be scheduled during the extended DG
 
Completion Time. If any testing or maintenance
 
activities, which affects the train reliability must be
 
performed while the extended DG Completion Time is in
 
effect, a 10 CFR 50.65(a)(4) evaluation will be
 
performed. e. Elective maintenance will not be performed on the alternate AC power source (0C DG). Personnel will be
 
made aware of the dedication of the alternate AC source
 
to the affected Unit. f. Planned maintenance will not be performed on the Auxiliary Feedwater System. g. The system dispatcher (System Operations and Maintenance Department) will be contacted prior to
 
removing the DG from service and after it has been
 
returned to service. h. The operations crews will be briefed concerning the Unit activities, including compensatory measures
 
established and the importance of promptly starting and
 
aligning the alternate AC source (0C DG). i. The on-shift operations crew will discuss and review the appropriate normal and emergency operating
 
procedures prior to or shortly after assuming the watch
 
for the first time after having scheduled days off
 
while the extended DG Completion Time is in effect.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-12 Revision 59 j. The condition of the grid will be evaluated prior to entering the extended DG 3.8.1 Condition B Completion
 
Time for elective maintenance. An extended DG
 
Completion Time will not be entered to perform elective
 
maintenance when grid stress conditions are considered
 
"High" per plant procedures. This will include conditions such as expected extreme summer temperatures and/or high demand.
C.1.1 and C.1.2 In Condition C with an opposite-unit DG inoperable and/or
 
the 0C DG unavailable, the remaining OPERABLE unit-specific
 
DG and required qualified circuits are adequate to supply
 
electrical power to the onsite Class 1E Distribution System. 
 
Consistent with Reference 6, operation may continue in
 
Condition C for a period that should not exceed 72 hours. 
 
The 72 hour Completion Time takes into account the capacity
 
and capability of the remaining AC sources, a reasonable
 
time for repairs, and the low probability of a DBA occurring
 
during this period.
 
D.1  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable
 
resulting in de-energization. Therefore, the Required
 
Actions of Condition D are modified by a Note to indicate
 
that when Condition D is entered with no AC source to any
 
train, the Conditions and Required Actions for LCO 3.8.9,
 
must be immediately entered. This allows Condition D to
 
provide requirements for the loss of the LCO 3.8.1.c offsite
 
circuit and DG without regard to whether a train is de-
 
energized. Limiting Condition for Operation 3.8.9 provides
 
the appropriate restrictions for a de-energized train.
To ensure a highly reliable power source remains with the one required LCO 3.8.1.c offsite circuit inoperable, it is
 
necessary to verify the OPERABILITY of the remaining
 
required offsite circuits on a more frequent basis. Since
 
the Required Action only specifies "perform," a failure of
 
SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result
 
in a Required Action not met. However, if a second required
 
circuit fails SR 3.8.1.1 or SR 3.8.1.2, the second offsite AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-13 Revision 59 circuit is inoperable, and Condition A and/or G, as applicable, for the two offsite circuits inoperable, is
 
entered.
 
D.2  Required Action D.2, which only applies if the train cannot be powered from an offsite source, is intended to provide assurance that an event coincident with a single failure of
 
the associated DG will not result in a complete loss of
 
safety function for the CREVS or CRETS. The Completion Time
 
for Required Action D.2 is intended to allow the operator
 
time to evaluate and repair any discovered inoperabilities. 
 
This Completion Time also allows for an exception to the
 
normal "time zero" for beginning the allowed outage time
 
"clock."  In this Required Action, the Completion Time only
 
begins on discovery that both:  a. The train has no offsite power supplying its loads; and
: b. A train of CREVS or CRETS on the other train is inoperable.
 
If at any time during the existence of Condition D (one required LCO 3.8.1.c offsite circuit inoperable) a train of
 
CREVS or CRETS becomes inoperable, this Completion Time
 
begins to be tracked.
 
Discovering no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident
 
with one train of CREVS or CRETS that is associated with the
 
other train that has offsite power, results in starting the
 
Completion Times for the Required Action. Twenty-four hours
 
is acceptable because it minimizes risk while allowing time
 
for restoration before subjecting the unit to transients
 
associated with shutdown.
The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the
 
onsite Class 1E Distribution System. The 24 hour Completion
 
Time takes into account the component OPERABILITY of the
 
redundant counterpart to the inoperable CREVS or CRETS. 
 
Additionally, the 24 hour Completion Time takes into account
 
the capacity and capability of the remaining AC sources, a AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-14 Revision 59 reasonable time for repairs, and the low probability of a DBA occurring during this period.
 
D.3  Consistent with the time provided in ACTION A, operation may continue in Condition D for a period that should not exceed 72 hours. With one required LCO 3.8.1.c offsite circuit inoperable, the reliability of the offsite system is
 
degraded, and the potential for a loss of offsite power is
 
increased, with attendant potential for a challenge to the
 
unit safety systems. In this Condition, however, the
 
remaining OPERABLE offsite circuits and DGs are adequate to
 
supply electrical power to the onsite Class 1E Distribution
 
System.
If the LCO 3.8.1.c required offsite circuit cannot be restored to OPERABLE status within 72 hours, the CREVS and
 
CRETS associated with the offsite circuit must be declared
 
inoperable. The ACTIONS associated with the CREVS and CRETS
 
will ensure the appropriate actions are taken. The 72 hour
 
Completion Time takes into account the capacity and
 
capability of the remaining AC sources, a reasonable time
 
for repairs, and the low probability of a DBA occurring
 
during this period.
 
E.1 The 14 day Completion Time for Required Action E.5 is based
 
on the OPERABILITY of the other three safety-related DGs and
 
the availability of the 0C DG. The 0C DG is available to
 
power the inoperable DG bus loads in the event of a station
 
blackout or loss-of-offsite power. It is required to
 
administratively verify the three safety-related DGs
 
OPERABLE and the 0C DG available within one hour and to
 
continue this action once per 24 hours thereafter until restoration of the required DG is accomplished. This verification provides assurance that the three safety-
 
related DGs and the 0C DG are capable of supplying the
 
onsite Class 1E AC Electrical Power Distribution System.
E.2  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-15 Revision 59 resulting in de-energization. Therefore, the Required Actions of Condition E are modified by a Note to indicate
 
that when Condition E is entered with no AC source to any
 
train, the Conditions and Required Actions for LCO 3.8.9
 
must be immediately entered. This allows Condition E to
 
provide requirements for the loss of the LCO 3.8.1.c offsite circuit and DG without regard to whether a train is de-energized. Limiting Condition for Operation 3.8.9 provides
 
the appropriate restrictions for a de-energized train.
 
To ensure a highly reliable power source remains with the one required LCO 3.8.1.c DG inoperable, it is necessary to
 
verify the availability of the required offsite circuits on
 
a more frequency basis. Since the Required Action only
 
specifies "perform," a failure of SR 3.8.1.1 or SR 3.8.1.2
 
acceptance criteria does not result in a Required Action not
 
met. However, if a circuit fails to pass SR 3.8.1.1 or
 
SR 3.8.1.2, it is inoperable. Upon offsite circuit
 
inoperability additional Conditions and Required Actions
 
must then be entered.
 
E.3  Required Action E.3 is intended to provide assurance that a loss of offsite power, during the period the LCO 3.8.1.c DG
 
is inoperable, does not result in a complete loss of safety
 
function for the CREVS or CRETS. The Completion Time is
 
intended to allow the operator time to evaluate and repair
 
any discovered inoperabilities. This Completion Time also
 
allows for an exception to the normal "time zero" for
 
beginning the allowed outage time "clock."  In this Required
 
Action, the Completion Time only begins on discovery that
 
both:  a. An inoperable LCO 3.8.1.c DG exists; and
: b. A train of CREVS or CRETS on the other train is inoperable.
 
If at any time during the existence of this Condition (the LCO 3.8.1.c DG inoperable) a train of CREVS or CRETS becomes
 
inoperable, this Completion Time begins to be tracked.
 
Discovering the LCO 3.8.1.c DG inoperable coincident with one train of CREVS or CRETS that is associated with the one AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-16 Revision 59 LCO 3.8.1.b DG results in starting the Completion Time for the Required Action. Four hours from the discovery of these
 
events existing concurrently, is acceptable because it
 
minimizes risk while allowing time for restoration before
 
subjecting the unit to transients associated with shutdown.
In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the
 
onsite Class 1E Distribution System. Thus, on a component
 
basis, single failure protection for the CREVS or CRETS may
 
have been lost; however, function has not been lost. The
 
four hour Completion Time also takes into account the
 
capacity and capability of the remaining CREVS and CRETS
 
train, a reasonable time for repairs, and the low
 
probability of a DBA occurring during this period.
 
E.4.1 and E.4.2  Required Action E.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be
 
determined that the cause of the inoperable DG does not
 
exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be
 
performed. If the cause of inoperability exists on other
 
DG(s), the other DG(s) would be declared inoperable upon
 
discovery and Condition B and/or I of LCO 3.8.1, as
 
applicable, would be entered. Once the failure is repaired,
 
the common cause failure no longer exists and Required
 
Action E.4.1 is satisfied. If the cause of the initial
 
inoperable DG cannot be confirmed not to exist on the
 
remaining DG(s), performance of SR 3.8.1.3 suffices to
 
provide assurance of continued OPERABILITY of the DG(s).
 
In the event the inoperable DG is restored to OPERABLE status prior to completing either E.4.1 or E.4.2, the
 
corrective action program will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour constraint imposed
 
while in Condition E.
 
Consistent with Reference 6, 24 hours is reasonable to confirm that the OPERABLE DG(s) is not affected by the same
 
problem as the inoperable DG.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-17 Revision 59 These Conditions (E.4.1 and E.4.2) do not address the availability of the 0C DG.
 
E.5  Consistent with the time provided in ACTION B, operation may continue in Condition E for a period that should not exceed 14 days. In Condition E, the remaining OPERABLE DGs, available 0C DG, and offsite power circuits are adequate to
 
supply electrical power to the Class 1E Distribution System.
 
If the LCO 3.8.1.c DG cannot be restored to OPERABLE status within 14 days the CREVS and CRETS associated with this DG
 
must be declared inoperable. The Actions associated with
 
the CREVS and CRETS will ensure the appropriate Actions are
 
taken.
The 14 day Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable
 
time for repairs, and the low probability of a DBA occurring
 
during this period.
F.1.1 and F.1.2 In Condition F, with an additional safety-related DG
 
inoperable or the 0C DG unavailable, the remaining OPERABLE
 
DG and required qualified circuits are adequate to supply
 
electrical power to the onsite Class 1E Distribution System. 
 
Consistent with Reference 6, operation may continue in
 
Condition F for a period that should not exceed 72 hours. 
 
The 72 hour Completion Time takes into account the capacity
 
and capability of the remaining AC sources, a reasonable
 
time for repairs, and the low probability of a DBA occurring
 
during this period.
 
F.1.3 If the LCO 3.8.1.c DG cannot be restored to OPERABLE status  
 
within 72 hours the CREVS and CRETS associated with this DG  
 
must be declared inoperable. The Required Actions  
 
associated with the CREVS and CRETS will ensure that the  
 
appropriate actions are taken.
 
The 72 hour Completion Time takes into account the capacity
 
and capability of the remaining AC sources, a reasonable AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-18 Revision 59 time for repairs, and the low probability of a DBA occurring during this period.
 
G.1 and G.2  Condition G is entered when both offsite circuits required by LCO 3.8.1.a are inoperable, or when the offsite circuit required by LCO 3.8.1.c and one offsite circuit required by LCO 3.8.1.a are concurrently inoperable, if the LCO 3.8.1.a
 
offsite circuit is credited with providing power to the
 
CREVS and CRETS.
 
Required Action G.1 is intended to provide assurance that an event with a coincident single failure will not result in a
 
complete loss of redundant required safety functions. The
 
Completion Time for this failure of redundant required
 
features is reduced to 12 hours from that allowed for one
 
train without offsite power (Required Action A.2). The
 
rationale for the reduction to 12 hours is that Reference 6
 
allows a Completion Time of 24 hours for two required
 
offsite circuits inoperable, based upon the assumption that
 
two complete safety trains are OPERABLE. When a concurrent
 
redundant required feature failure exists, this assumption
 
is not the case, and a shorter Completion Time of 12 hours
 
is appropriate. These features are powered from redundant
 
AC safety trains. Single train features are not included in
 
the list.
 
The Completion Time for Required Action G.1 is intended to allow the operator time to evaluate and repair any
 
discovered inoperabilities. This Completion Time also
 
allows for an exception to the normal "time zero" for
 
beginning the allowed outage time "clock."  In this Required
 
Action, the Completion Time only begins on discovery that
 
both:  a. Two required offsite circuits are inoperable; and  b. A required feature is inoperable.
 
If at any time during the existence of Condition G (e.g., two required LCO 3.8.1.a offsite circuits inoperable)
 
and a required feature becomes inoperable, this Completion
 
Time begins to be tracked.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-19 Revision 59  Consistent with Reference 6, operation may continue in Condition G for a period that should not exceed 24 hours. 
 
This level of degradation means that the offsite electrical
 
power system does not have the capability to effect a safe
 
shutdown and to mitigate the effects of an accident;
 
however, the onsite AC sources have not been degraded. This level of degradation could correspond to a total loss of the immediately accessible offsite power sources.
 
Because of the normally high availability of the offsite sources, this level of degradation may appear to be more
 
severe than other combinations of two AC sources inoperable
 
that involve one or more DGs inoperable. However, two
 
factors tend to decrease the severity of this level of
 
degradation:  a. The configuration of the redundant AC electrical power system that remains available is not susceptible to a
 
single bus or switching failure; and  b. The time required to detect and restore an unavailable offsite power source is generally much less than that
 
required to detect and restore an unavailable onsite AC
 
source.
With two of the required offsite circuits inoperable, sufficient onsite AC sources are available to maintain the
 
unit in a safe shutdown condition in the event of a DBA or
 
transient. In fact, a simultaneous loss of offsite AC
 
sources, a loss of coolant accident, and a worst case single
 
failure were postulated as a part of the design basis in the
 
safety analysis. Thus, the 24 hour Completion Time provides
 
a period of time to effect restoration of one of the offsite
 
circuits commensurate with the importance of maintaining an
 
AC electrical power system capable of meeting its design
 
criteria.
Consistent with Reference 6, with the available offsite AC sources two less than required by the LCO, operation may
 
continue for 24 hours. If two offsite sources are restored
 
within 24 hours, unrestricted operation may continue. If
 
only one offsite source is restored within 24 hours, power
 
operation continues in accordance with Condition A or D, as
 
applicable.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-20 Revision 48  H.1 and H.2  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it were inoperable
 
resulting in de-energization. Therefore, the Required
 
Actions of Condition H are modified by a Note to indicate
 
that when Condition H is entered with no AC source to any train, the Conditions and Required Actions for LCO 3.8.9, must be immediately entered. This allows Condition H to
 
provide requirements for the loss of one required
 
LCO 3.8.1.a offsite circuit and one LCO 3.8.1.b DG without
 
regard to whether a train is de-energized. Limiting
 
Condition for Operation 3.8.9 provides the appropriate
 
restrictions for a de-energized train.
 
Consistent with Reference 6, operation may continue in Condition H for a period that should not exceed 12 hours.
 
In Condition H, individual redundancy is lost in both the offsite electrical power system and the onsite AC electrical
 
power system. Since power system redundancy is provided by
 
two diverse sources of power, however, the reliability of
 
the power systems in this Condition may appear higher than
 
that in Condition G (loss of two required offsite circuits). 
 
This difference in reliability is offset by the
 
susceptibility of this power system configuration to a
 
single bus or switching failure. The 12 hour Completion
 
Time takes into account the capacity and capability of the
 
remaining AC sources, a reasonable time for repairs, and the
 
low probability of a DBA occurring during this period.
 
I.1  With two LCO 3.8.1.b DGs inoperable, there are no remaining standby AC sources to provide power to most of the ESF
 
systems. With one LCO 3.8.1.c DG inoperable and the LCO 3.8.1.b DG that provides power to the CREVS and CRETS inoperable, there are no remaining standby AC sources to the
 
CREVS and CRETS. Thus, with an assumed loss of offsite
 
electrical power, insufficient standby AC sources are
 
available to power the minimum required ESF functions. 
 
Since the offsite electrical power system is the only source
 
of AC power for this level of degradation, the risk
 
associated with continued operation for a short time could AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-21 Revision 48 be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid
 
instability, which could result in a total loss of AC
 
power). Since any inadvertent generator trip could also
 
result in a total loss of offsite AC power, however, the
 
time allowed for continued operation is severely restricted.
The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk
 
associated with this level of degradation.
 
Consistent with Reference 6, with both LCO 3.8.1.b DGs inoperable, or with the LCO 3.8.1.b DG that provides power
 
to the CREVS and CRETS and the LCO 3.8.1.c DG inoperable,
 
operation may continue for a period that should not exceed
 
2 hours.
 
J.1 and J.2  If any Required Action and associated Completion Time of Conditions A, B.2, B.3, B.4.1, B.4.2, B.5, C, E.2, E.3,
 
E.4.1, E.4.2, E.5, F, G, H, or I are not met, the unit must
 
be brought to a MODE in which the LCO does not apply. To
 
achieve this status, the unit must be brought to at least
 
MODE 3 within six hours and to MODE 5 within 36 hours. The
 
allowed Completion Times are reasonable, based on operating
 
experience, to reach the required unit conditions from full
 
power conditions in an orderly manner and without
 
challenging unit systems.
 
K.1  Condition K corresponds to a level of degradation in which all redundancy in LCO 3.8.1.a and LCO 3.8.1.b AC electrical
 
power supplies has been lost. At this severely degraded
 
level, any further losses in the AC electrical power system
 
will cause a loss of function. Therefore, no additional time is justified for continued operation. The unit is
 
required by LCO 3.0.3 to commence a controlled shutdown.
SURVEILLANCE The AC sources are designed to permit inspection and REQUIREMENTS testing of all important areas and features, especially those that have a standby function, in accordance with
 
Reference 1, GDC 18. Periodic component tests are
 
supplemented by extensive functional tests during refueling AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-22 Revision 55  outages (under simulated accident conditions). The SRs for demonstrating the OPERABILITY of the DGs are consistent with
 
the recommendations of Reference 3, or Reference 4, and
 
Reference 8.
 
When the SRs discussed herein specify voltage and frequency tolerances, the following is applicable. The minimum transient output voltage of 3740 V is 90% of the nominal
 
4160 V output voltage. This value allows for voltage drop
 
to the terminals of 4000 V motors whose minimum operating
 
voltage is specified as 90% or 3600 V. The specified
 
maximum output voltage of 4400 V is equal to the maximum
 
operating voltage specified for 4000 V motors. It ensures
 
that for a lightly loaded distribution system, the voltage
 
at the terminals of 4000 V is no more than the maximum rated
 
operating voltages. The specified minimum and maximum
 
frequencies of the DG are 58.8 Hz and 61.2 Hz, respectively. 
 
These values are equal to +/- 2% of the 60 Hz nominal
 
frequency and are the recommendations given in Reference 3.
 
The SRs are modified by a Note which states that SR 3.8.1.1 through SR 3.8.1.15 are applicable to LCO 3.8.1.a and
 
LCO 3.8.1.b AC Sources. The Note also states that
 
SR 3.8.1.16 is applicable to LCO 3.8.1.c AC sources. This
 
Note clarifies that not all of the SRs are applicable to all
 
the components described in the LCO.
 
SR 3.8.1.1 and SR 3.8.1.2  These SRs assure proper circuit continuity for the offsite AC electrical power supply to the onsite distribution
 
network and availability of offsite AC electrical power. 
 
The breaker alignment verifies that each breaker is in its
 
correct position to ensure that distribution buses and loads
 
are connected to their preferred power source, and that appropriate independence of offsite circuits is maintained.
The Frequency of once within one hour after substitution for
 
a 500 kV circuit and periodically thereafter, for SR 3.8.1.1 was established to ensure that the breaker alignment for the
 
SMECO circuit (which does not have Control Room indication)
 
is in its correct position although breaker position is
 
unlikely to change. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-23 Revision 55  Surveillance Requirement 3.8.1.1 is modified by a Note which states that this SR is only required when SMECO is being
 
credited for an offsite source. This SR will prevent
 
unnecessary testing on an uncredited circuit.
 
SR 3.8.1.3 and SR 3.8.1.9  These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and
 
to maintain the unit in a safe shutdown condition.
 
To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs are
 
modified by a Note (Note 2 for SR 3.8.1.3) to indicate that
 
all DG starts for these surveillance tests may be preceded
 
by an engine prelube period and followed by a warmup period
 
prior to loading by an engine prelube period.
 
For the purposes of SR 3.8.1.9 testing, the DGs are required to start from standby conditions only for SR 3.8.1.9. 
 
Standby conditions for a DG mean the diesel engine coolant
 
and oil are being continuously circulated and temperature is
 
being maintained consistent with manufacturer
 
recommendations.
 
In order to reduce stress and mechanical wear on diesel engines, the DG manufacturers recommend a modified start in
 
which the starting speed of DGs is limited, warmup is
 
limited to this lower speed, and the DGs are gradually
 
accelerated to synchronous speed prior to loading. This is
 
the intent of Note 3, which is only applicable when such
 
modified start procedures are recommended by the
 
manufacturer.
 
Surveillance Requirement 3.8.1.9 requires that the DG starts from standby conditions and achieves required voltage and
 
frequency within 10 seconds. The minimum voltage and
 
frequency stated in the SR are those necessary to ensure the
 
DG can accept DBA loading while maintaining acceptable
 
voltage and frequency levels. The 10 second start
 
requirement supports the assumptions of the design basis
 
loss of coolant accident analysis in Reference 2,
 
Chapter 14.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-24 Revision 55  Since SR 3.8.1.9 requires a 10 second start, it is more restrictive than SR 3.8.1.3, and it may be performed in lieu
 
of SR 3.8.1.3.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.1.4  This SR verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads
 
greater than or equal to 4000 kW for No. 1A DG and greater
 
than or equal to 90% of the continuous duty rating for the
 
remaining DGs. The 90% minimum load limit is consistent
 
with Reference 3 and is acceptable because testing of these
 
DGs at post-accident load values is performed by
 
SR 3.8.1.11. A minimum run time of 60 minutes is required
 
to stabilize engine temperatures, while minimizing the time
 
that the DG is connected to the offsite source.
 
Although no power factor requirements are established by this SR, the DG is normally operated at a power factor
 
between 0.8 lagging and 1.0. The 0.8 value is the design
 
rating of the machine, while 1.0 is an operational
 
limitation. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
This SR is modified by four Notes. Note 1 indicates that the diesel engine runs for this surveillance test may
 
include gradual loading, as recommended by the manufacturer,
 
so that mechanical stress and wear on the diesel engine are
 
minimized. Note 2 states that momentary transients because
 
of changing bus loads do not invalidate this test. Note 3
 
indicates that this surveillance test shall be conducted on
 
only one DG at a time in order to prevent routinely paralleling multiple DGs and to minimize the potential for effects from offsite circuit or grid perturbations. Note 4
 
stipulates a prerequisite requirement for performance of
 
this SR. A successful DG start must precede this test to
 
credit satisfactory performance.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-25 Revision 55  SR 3.8.1.5  This SR provides verification that the level of fuel oil in the day tank is at or above the level at which fuel oil is
 
automatically added. The level required by the SR is
 
selected to ensure adequate fuel oil for a minimum of
 
one hour of DG operation at full load plus 10%. The fuel oil level ensuring a one hour supply is 325 gallons for DG 1A and 275 gallons for DGs 1B, 2A, and 2B when calculated
 
in accordance with References 8 and 12.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.1.6  Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in
 
fuel oil and cause fouling, but all must have a water
 
environment in order to survive. Removal of water from the
 
fuel oil day tanks eliminates the necessary environment for bacterial survival. This is the most effective means of
 
controlling microbiological fouling. In addition, it
 
eliminates the potential for water entrainment in the fuel
 
oil during DG operation. Water may come from any of several
 
sources, including condensation, ground water, rain water,
 
contaminated fuel oil, and from breakdown of the fuel oil by
 
bacteria. Frequent checking for and removal of accumulated
 
water minimizes fouling and provides data regarding the
 
watertight integrity of the fuel oil system. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR provided the
 
accumulated water is removed during the performance of this
 
surveillance test.
SR 3.8.1.7  This SR demonstrates that one fuel oil transfer pump operates and transfers fuel oil from its associated storage
 
tank to its associated day tank. This is required to
 
support continuous operation of standby power sources. This
 
SR provides assurance that the fuel oil transfer pump is
 
OPERABLE, the fuel oil piping system is intact, the fuel
 
delivery piping is not obstructed, and the controls and AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-26 Revision 55 control systems for automatic fuel transfer systems are OPERABLE.  


The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-18 Revision 59 time for repairs, and the low probability of a DBA occurring during this period.
G.1 and G.2  Condition G is entered when both offsite circuits required by LCO 3.8.1.a are inoperable, or when the offsite circuit required by LCO 3.8.1.c and one offsite circuit required by LCO 3.8.1.a are concurrently inoperable, if the LCO 3.8.1.a offsite circuit is credited with providing power to the CREVS and CRETS.
Required Action G.1 is intended to provide assurance that an event with a coincident single failure will not result in a complete loss of redundant required safety functions. The Completion Time for this failure of redundant required features is reduced to 12 hours from that allowed for one train without offsite power (Required Action A.2). The rationale for the reduction to 12 hours is that Reference 6 allows a Completion Time of 24 hours for two required offsite circuits inoperable, based upon the assumption that two complete safety trains are OPERABLE. When a concurrent redundant required feature failure exists, this assumption is not the case, and a shorter Completion Time of 12 hours is appropriate. These features are powered from redundant AC safety trains. Single train features are not included in the list.
The Completion Time for Required Action G.1 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock."  In this Required Action, the Completion Time only begins on discovery that both:  a. Two required offsite circuits are inoperable; and  b. A required feature is inoperable.
If at any time during the existence of Condition G (e.g., two required LCO 3.8.1.a offsite circuits inoperable) and a required feature becomes inoperable, this Completion Time begins to be tracked.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-19 Revision 59  Consistent with Reference 6, operation may continue in Condition G for a period that should not exceed 24 hours.
This level of degradation means that the offsite electrical power system does not have the capability to effect a safe shutdown and to mitigate the effects of an accident; however, the onsite AC sources have not been degraded. This level of degradation could correspond to a total loss of the immediately accessible offsite power sources.
Because of the normally high availability of the offsite sources, this level of degradation may appear to be more severe than other combinations of two AC sources inoperable that involve one or more DGs inoperable. However, two factors tend to decrease the severity of this level of degradation:  a. The configuration of the redundant AC electrical power system that remains available is not susceptible to a single bus or switching failure; and  b. The time required to detect and restore an unavailable offsite power source is generally much less than that required to detect and restore an unavailable onsite AC source.
With two of the required offsite circuits inoperable, sufficient onsite AC sources are available to maintain the unit in a safe shutdown condition in the event of a DBA or transient. In fact, a simultaneous loss of offsite AC sources, a loss of coolant accident, and a worst case single failure were postulated as a part of the design basis in the safety analysis. Thus, the 24 hour Completion Time provides a period of time to effect restoration of one of the offsite circuits commensurate with the importance of maintaining an AC electrical power system capable of meeting its design criteria. Consistent with Reference 6, with the available offsite AC sources two less than required by the LCO, operation may continue for 24 hours. If two offsite sources are restored within 24 hours, unrestricted operation may continue. If only one offsite source is restored within 24 hours, power operation continues in accordance with Condition A or D, as applicable.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-20 Revision 48  H.1 and H.2  Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it were inoperable resulting in de-energization. Therefore, the Required Actions of Condition H are modified by a Note to indicate that when Condition H is entered with no AC source to any train, the Conditions and Required Actions for LCO 3.8.9, must be immediately entered. This allows Condition H to provide requirements for the loss of one required LCO 3.8.1.a offsite circuit and one LCO 3.8.1.b DG without regard to whether a train is de-energized. Limiting Condition for Operation 3.8.9 provides the appropriate restrictions for a de-energized train.
Consistent with Reference 6, operation may continue in Condition H for a period that should not exceed 12 hours.
In Condition H, individual redundancy is lost in both the offsite electrical power system and the onsite AC electrical power system. Since power system redundancy is provided by two diverse sources of power, however, the reliability of the power systems in this Condition may appear higher than that in Condition G (loss of two required offsite circuits).
This difference in reliability is offset by the susceptibility of this power system configuration to a single bus or switching failure. The 12 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
I.1  With two LCO 3.8.1.b DGs inoperable, there are no remaining standby AC sources to provide power to most of the ESF systems. With one LCO 3.8.1.c DG inoperable and the LCO 3.8.1.b DG that provides power to the CREVS and CRETS inoperable, there are no remaining standby AC sources to the CREVS and CRETS. Thus, with an assumed loss of offsite electrical power, insufficient standby AC sources are available to power the minimum required ESF functions.
Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a short time could AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-21 Revision 48 be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid instability, which could result in a total loss of AC power). Since any inadvertent generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.
Consistent with Reference 6, with both LCO 3.8.1.b DGs inoperable, or with the LCO 3.8.1.b DG that provides power to the CREVS and CRETS and the LCO 3.8.1.c DG inoperable, operation may continue for a period that should not exceed 2 hours.
J.1 and J.2  If any Required Action and associated Completion Time of Conditions A, B.2, B.3, B.4.1, B.4.2, B.5, C, E.2, E.3, E.4.1, E.4.2, E.5, F, G, H, or I are not met, the unit must be brought to a MODE in which the LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within six hours and to MODE 5 within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.
K.1  Condition K corresponds to a level of degradation in which all redundancy in LCO 3.8.1.a and LCO 3.8.1.b AC electrical power supplies has been lost. At this severely degraded level, any further losses in the AC electrical power system will cause a loss of function. Therefore, no additional time is justified for continued operation. The unit is required by LCO 3.0.3 to commence a controlled shutdown. SURVEILLANCE The AC sources are designed to permit inspection and REQUIREMENTS testing of all important areas and features, especially those that have a standby function, in accordance with Reference 1, GDC 18. Periodic component tests are supplemented by extensive functional tests during refueling AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-22 Revision 55  outages (under simulated accident conditions). The SRs for demonstrating the OPERABILITY of the DGs are consistent with the recommendations of Reference 3, or Reference 4, and Reference 8.
When the SRs discussed herein specify voltage and frequency tolerances, the following is applicable. The minimum transient output voltage of 3740 V is 90% of the nominal 4160 V output voltage. This value allows for voltage drop to the terminals of 4000 V motors whose minimum operating voltage is specified as 90% or 3600 V. The specified maximum output voltage of 4400 V is equal to the maximum operating voltage specified for 4000 V motors. It ensures that for a lightly loaded distribution system, the voltage at the terminals of 4000 V is no more than the maximum rated operating voltages. The specified minimum and maximum frequencies of the DG are 58.8 Hz and 61.2 Hz, respectively.
These values are equal to +/- 2% of the 60 Hz nominal frequency and are the recommendations given in Reference 3.
The SRs are modified by a Note which states that SR 3.8.1.1 through SR 3.8.1.15 are applicable to LCO 3.8.1.a and LCO 3.8.1.b AC Sources. The Note also states that SR 3.8.1.16 is applicable to LCO 3.8.1.c AC sources. This Note clarifies that not all of the SRs are applicable to all the components described in the LCO.
SR 3.8.1.1 and SR 3.8.1.2  These SRs assure proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power.
The breaker alignment verifies that each breaker is in its correct position to ensure that distribution buses and loads are connected to their preferred power source, and that appropriate independence of offsite circuits is maintained. The Frequency of once within one hour after substitution for a 500 kV circuit and periodically thereafter, for SR 3.8.1.1 was established to ensure that the breaker alignment for the SMECO circuit (which does not have Control Room indication) is in its correct position although breaker position is unlikely to change. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-23 Revision 55  Surveillance Requirement 3.8.1.1 is modified by a Note which states that this SR is only required when SMECO is being credited for an offsite source. This SR will prevent unnecessary testing on an uncredited circuit.
SR 3.8.1.3 and SR 3.8.1.9  These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the unit in a safe shutdown condition.
To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs are modified by a Note (Note 2 for SR 3.8.1.3) to indicate that all DG starts for these surveillance tests may be preceded by an engine prelube period and followed by a warmup period prior to loading by an engine prelube period.
For the purposes of SR 3.8.1.9 testing, the DGs are required to start from standby conditions only for SR 3.8.1.9.
Standby conditions for a DG mean the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations.
In order to reduce stress and mechanical wear on diesel engines, the DG manufacturers recommend a modified start in which the starting speed of DGs is limited, warmup is limited to this lower speed, and the DGs are gradually accelerated to synchronous speed prior to loading. This is the intent of Note 3, which is only applicable when such modified start procedures are recommended by the manufacturer.
Surveillance Requirement 3.8.1.9 requires that the DG starts from standby conditions and achieves required voltage and frequency within 10 seconds. The minimum voltage and frequency stated in the SR are those necessary to ensure the DG can accept DBA loading while maintaining acceptable voltage and frequency levels. The 10 second start requirement supports the assumptions of the design basis loss of coolant accident analysis in Reference 2, Chapter 14.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-24 Revision 55  Since SR 3.8.1.9 requires a 10 second start, it is more restrictive than SR 3.8.1.3, and it may be performed in lieu of SR 3.8.1.3.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.4  This SR verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to 4000 kW for No. 1A DG and greater than or equal to 90% of the continuous duty rating for the remaining DGs. The 90% minimum load limit is consistent with Reference 3 and is acceptable because testing of these DGs at post-accident load values is performed by SR 3.8.1.11. A minimum run time of 60 minutes is required to stabilize engine temperatures, while minimizing the time that the DG is connected to the offsite source.
Although no power factor requirements are established by this SR, the DG is normally operated at a power factor between 0.8 lagging and 1.0. The 0.8 value is the design rating of the machine, while 1.0 is an operational limitation. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
This SR is modified by four Notes. Note 1 indicates that the diesel engine runs for this surveillance test may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized. Note 2 states that momentary transients because of changing bus loads do not invalidate this test. Note 3 indicates that this surveillance test shall be conducted on only one DG at a time in order to prevent routinely paralleling multiple DGs and to minimize the potential for effects from offsite circuit or grid perturbations. Note 4 stipulates a prerequisite requirement for performance of this SR. A successful DG start must precede this test to credit satisfactory performance.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-25 Revision 55  SR 3.8.1.5  This SR provides verification that the level of fuel oil in the day tank is at or above the level at which fuel oil is automatically added. The level required by the SR is selected to ensure adequate fuel oil for a minimum of one hour of DG operation at full load plus 10%. The fuel oil level ensuring a one hour supply is 325 gallons for DG 1A and 275 gallons for DGs 1B, 2A, and 2B when calculated in accordance with References 8 and 12.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.6  Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in fuel oil and cause fouling, but all must have a water environment in order to survive. Removal of water from the fuel oil day tanks eliminates the necessary environment for bacterial survival. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, contaminated fuel oil, and from breakdown of the fuel oil by bacteria. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR provided the accumulated water is removed during the performance of this surveillance test. SR 3.8.1.7  This SR demonstrates that one fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank. This is required to support continuous operation of standby power sources. This SR provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, the fuel delivery piping is not obstructed, and the controls and AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-26 Revision 55 control systems for automatic fuel transfer systems are OPERABLE.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. SR 3.8.1.8  Under accident and loss of offsite power conditions loads are sequentially connected to the bus by the automatic load sequencer (this SR verifies steps 1 through 5 for the emergency load sequencer and verifies steps 1 through 3 for the shutdown load sequencer). The sequencing logic controls the permissive and closing signals to breakers to prevent overloading of the DGs due to high motor starting currents.
The 10% load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load, and that safety analysis assumptions regarding ESF equipment time delays are not violated. The UFSAR provides a summary of the automatic loading of ESF buses.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.8  Under accident and loss of offsite power conditions loads are sequentially connected to the bus by the automatic load
sequencer (this SR verifies steps 1 through 5 for the
emergency load sequencer and verifies steps 1 through 3 for
the shutdown load sequencer). The sequencing logic controls
the permissive and closing signals to breakers to prevent
overloading of the DGs due to high motor starting currents. 
The 10% load sequence time interval tolerance ensures that
sufficient time exists for the DG to restore frequency and
voltage prior to applying the next load, and that safety
analysis assumptions regarding ESF equipment time delays are
not violated. The UFSAR provides a summary of the automatic
loading of ESF buses.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.9  See SR 3.8.1.3.  
SR 3.8.1.9  See SR 3.8.1.3.  


SR 3.8.1.10  Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate circuit distribution network to power the shutdown loads. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.10  Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit  
SR 3.8.1.11  This SR provides verification that the DG can be operated at a load greater than predicted accident loads for at least 4 hours. Operation at the greater than calculated accident loads will clearly demonstrate the ability of the DGs to perform their safety function. In order to ensure that the DG is tested under load conditions that are as close to AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-27 Revision 55 design conditions as possible, testing must be performed using a DG load greater than or equal to calculated accident load and using a power factor  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are chosen based on the calculated highest kW value of DG loads during the postulated design basis accidents. In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG.
 
To ensure No. 1A DG performance is not degraded, routine monitoring of engine parameters should be performed during the performance of this SR for No. 1A DG (Reference 9).
demonstrates the OPERABILITY of the alternate circuit  
This SR is modified by two Notes, Note 1 states that momentary transients due to changing bus loads do not invalidate this test. Similarly, momentary power factor transients above the limit will not invalidate the test.
 
Note 2 ensures that the DG is tested under load conditions that are as close to design basis conditions as practicable.
distribution network to power the shutdown loads. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.  
When synchronized with offsite power, testing should be performed at a power factor of  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are representative of the actual inductive loading a DG would see under design basis accident conditions. Under certain conditions, however, Note 2 allows the surveillance to be conducted at a power factor other than  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These conditions occur when grid voltage is high, and the additional field excitation needed to get the power factor to  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs results in voltages on the emergency busses that are too high. Conditions can also occur that could result in emergency bus voltages which are too low. Under these conditions, the power factor shall be maintained as close a practicable to 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs while maintaining acceptable voltages on the emergency busses.
 
SR 3.8.1.11  This SR provides verification that the DG can be operated at a load greater than predicted accident loads for at least  
 
4 hours. Operation at the greater than calculated accident loads will clearly demonstrate the ability of the DGs to  
 
perform their safety function. In order to ensure that the  
 
DG is tested under load conditions that are as close to AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-27 Revision 55 design conditions as possible, testing must be performed using a DG load greater than or equal to calculated accident load and using a power factor  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are  
 
chosen based on the calculated highest kW value of DG loads  
 
during the postulated design basis accidents.
In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG.
 
To ensure No. 1A DG performance is not degraded, routine  
 
monitoring of engine parameters should be performed during  
 
the performance of this SR for No. 1A DG (Reference 9).  
 
This SR is modified by two Notes, Note 1 states that momentary transients due to changing bus loads do not  
 
invalidate this test. Similarly, momentary power factor  
 
transients above the limit will not invalidate the test.
 
Note 2 ensures that the DG is tested under load conditions  
 
that are as close to design basis conditions as practicable.
 
When synchronized with offsite power, testing should be performed at a power factor of  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are representative of the actual inductive loading a DG  
 
would see under design basis accident conditions. Under  
 
certain conditions, however, Note 2 allows the surveillance to be conducted at a power factor other than  0.84 for No.
1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs. These conditions occur when grid voltage is high, and the  
 
additional field excitation needed to get the power factor to  0.84 for No. 1A DG and  0.83 for Nos. 1B, 2A, and 2B DGs results in voltages on the emergency busses that are too  
 
high. Conditions can also occur that could result in  
 
emergency bus voltages which are too low. Under these  
 
conditions, the power factor shall be maintained as close a  
 
practicable to 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs while maintaining acceptable voltages on the emergency busses.  
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-28 Revision 55  SR 3.8.1.12  Each DG is provided with an engine overspeed trip to prevent damage to the engine. Recovery from the transient caused by
 
the loss of a large load could cause diesel engine
 
overspeed, which, if excessive, might result in a trip of
 
the engine. This SR demonstrates the DG load response characteristics. This SR is accomplished by tripping the DG output breaker with the DG carrying greater than or equal to
 
its associated single largest post-accident load while
 
paralleled to offsite power.
 
Consistent with References 10, 3, and 4, the load rejection test is acceptable if the increase in diesel speed does not
 
exceed 75% of the difference between synchronous speed and
 
the overspeed trip setpoint, or 15% above synchronous speed,
 
whichever is lower.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.1.13  This SR demonstrates that DG non-critical protective functions are bypassed on a required actuation signal. This
 
SR is accomplished by verifying the bypass contact changes
 
to the correct state which prevents actuation of the non-
 
critical function. The non-critical protective functions
 
are consistent with References 3 and 4, and Institute of
 
Electrical and Electronic Engineers (IEEE)-387 and are
 
listed in Reference 2, Chapter 8. Verifying the non-
 
critical trips are bypassed will ensure DG operation during
 
a required actuation. The non-critical trips are bypassed
 
during DBAs and provide an alarm on an abnormal engine
 
condition. A failure of the electronic governor results in
 
the diesel generator operating in hydraulic mode. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is
 
more critical than protecting the engine against minor
 
problems that are not immediately detrimental to emergency
 
operation of the DG.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-28 Revision 55  SR 3.8.1.12  Each DG is provided with an engine overspeed trip to prevent damage to the engine. Recovery from the transient caused by the loss of a large load could cause diesel engine overspeed, which, if excessive, might result in a trip of the engine. This SR demonstrates the DG load response characteristics. This SR is accomplished by tripping the DG output breaker with the DG carrying greater than or equal to its associated single largest post-accident load while paralleled to offsite power.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-29 Revision 55 SR 3.8.1.14  This SR ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and
Consistent with References 10, 3, and 4, the load rejection test is acceptable if the increase in diesel speed does not exceed 75% of the difference between synchronous speed and the overspeed trip setpoint, or 15% above synchronous speed, whichever is lower.
 
that the DG can be returned to ready-to-load status when
 
offsite power is restored. The DG is considered to be in ready-to-load status when the DG is at rated speed and voltage, the output breaker is open and can receive an auto-
 
close signal on bus undervoltage, and the load sequence
 
timers are reset.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.1.15  In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to
 
ESF systems so that the fuel, RCS, and containment design
 
limits are not exceeded.
 
This SR demonstrates the DG operation during a loss of offsite power actuation test signal in conjunction with an
 
ESF (i.e., safety injection) actuation signal. In lieu of
 
actual demonstration of connection and loading of loads,
 
testing that adequately shows the capability of the DG
 
system to perform these functions is acceptable. This
 
testing may include any series of sequential, overlapping,
 
or total steps so that the entire connection and loading
 
sequence is verified.
 
It is not necessary to energize loads which are dependent on temperature to load (i.e., heat tracing, switchgear HVAC
 
compressor, computer room HVAC compressor). Also, it is
 
acceptable to transfer the instrument AC bus to the non tested train to maintain safe operation of the plant during testing. Loads (both permanent and auto connect) < 15 kW do
 
not require loading onto the diesel since these are
 
insignificant loads for the DG.
 
Permanently- and auto-connected loads to the emergency diesel generators are defined as follows:
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-30 Revision 55  Permanently-Connected Load - Equipment that is not shed by an undervoltage or safety injection actuation signal and is
 
normally operating, i.e., loads that are manually started,
 
selected, or process signal controlled are not considered
 
permanently-connected loads.
Auto-Connected Loads - Emergency equipment required for mitigating the events described in UFSAR Chapter 14 that are
 
energized by loss-of-coolant incident sequencer actions
 
after step zero and within the first minute of emergency
 
diesel generator operation after the initiation of an
 
undervoltage signal.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
This SR is modified by a Note. The reason for the Note is to minimize mechanical wear and stress on the DGs during
 
testing. For the purpose of this testing, the DGs must be
 
started from standby conditions, that is, with the engine
 
coolant and oil continuously circulated and temperature
 
maintained consistent with manufacturer recommendations for
 
DGs.
SR 3.8.1.16  This SR lists the SRs that are applicable to the LCO 3.8.1.c (SRs 3.8.1.1, 3.8.1.2, 3.8.1.3, 3.8.1.5, 3.8.1.6, and
 
3.8.1.7). Performance of any SR for the LCO 3.8.1.c will
 
satisfy both Unit 1 and Unit 2 requirements for those SRs.  
 
Surveillance Requirements 3.8.1.4, 3.8.1.8, 3.8.1.9,
 
3.8.1.10, 3.8.1.11, 3.8.1.12, 3.8.1.13, 3.8.1.14, 3.8.1.15,
 
and 3.8.1.17 are not required to be performed for the
 
LCO 3.8.1.c. Surveillance Requirement 3.8.1.10 is not
 
required because this SR verifies manual transfer of AC power sources from the normal offsite circuit to the alternate offsite circuit, but only one qualified offsite
 
circuit is necessary for the LCO 3.8.1.c. Surveillance
 
Requirements 3.8.1.4, 3.8.1.11, 3.1.8.12, and 3.8.1.17 are
 
not required because they are tests that deal with loads. 
 
Surveillance Requirement 3.8.1.8 verifies the interval
 
between sequenced loads. Surveillance Requirement 3.8.1.14
 
verifies the proper sequencing with offsite power. 
 
Surveillance Requirement 3.8.1.9 verifies that the DG starts AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-31 Revision 55 within 10 seconds. These SRs are not required because they do not support the function of the LCO 3.8.1.c to provide
 
power to the CREVS and CRETS. Surveillance Requirements
 
3.8.1.13 and 3.8.1.15 are not required to be performed
 
because these SRs verify the emergency loads are actuated on
 
an ESFAS signal for the Unit in which the test is being performed. The LCO 3.8.1.c DG will not start on an ESFAS signal for this Unit.
 
SR 3.8.1.17 Reference 13 requires demonstration that the DGs can start
 
and run continuously at full load capability for an interval of not less than 24 hours, 2 hours of which is at a load equivalent to 105-110% of the continuous service rating and
 
the remainder of the time at a load equivalent to 90-100% of
 
the continuous service rating. For the Nos. 1B, 2A, and 2B
 
DGs the SR reflects these loading ranges. For the No. 1A
 
DG, since the post accident loading is significantly less
 
than the continuous service rating, the post accident loading (
<4000 kW) is used instead of the continuous service rating. Actual testing is performed at a load
 
higher than the post accident loading.
 
The DG starts for this Surveillance can be performed either
 
from standby or hot conditions. The provisions for
 
prelubricating and warmup, discussed in SR 3.8.1.3 and for
 
gradual loading, discussed in SR 3.8.1.4 are applicable to
 
this SR.
 
The load band is provided to avoid routine overloading of
 
the DG. Routine overloading may result in more frequent
 
teardown inspections in accordance with vendor
 
recommendations in order to maintain DG OPERABILITY.
 
In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG.
To ensure No. 1A DG performance is not degraded, routine
 
monitoring of engine parameters should be performed during
 
the performance of this SR for No. 1A DG (Reference 9).
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-32 Revision 55 This SR is modified by a Note. Note 1 states that momentary transients due to changing bus loads do not invalidate this
 
test. Similarly, momentary power factor transients above the
 
limit will not invalidate the test.
REFERENCES 1. 10 CFR Part 50, Appendix A, "General Design Criteria for Nuclear Power Plants"  2. UFSAR
: 3. Regulatory Guide 1.9, Revision 3, "Selection, Design, Qualification, and Testing of Emergency Diesel
 
Generator Units Used as Class 1E Onsite Electric Power
 
Systems at Nuclear Power Plants," July 1993  4. Safety Guide 9, Revision 0, March 1971
: 5. NRC Safety Evaluation for Amendment Nos. 19 and 5 for Calvert Cliffs Nuclear Power Plant Unit Nos. 1 and 2,
 
dated January 14, 1977  6. Regulatory Guide 1.93, Revision 0, "Availability of Electric Power Sources," December 1974  7. Generic Letter 84-15, Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability, July 2, 1984  8. Regulatory Guide 1.137, Revision 1, "Fuel-Oil Systems for Standby Diesel Generators," October 1979  9. Letter from Mr. D. G. McDonald, Jr. (NRC) to Mr. C. H. Cruse (BGE), dated April 2, 1996, Issuance of
 
Amendments for Calvert Cliffs Nuclear Power Plant,
 
Unit 1 (TAC No. M94030) and Unit 2 (TAC No. M94031)
: 10. IEEE Standard 308-1991, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating
 
Stations" 11. NO-1-117, Integrated Risk Management
: 12. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4 13. Regulatory Guide 1.9, Revision 4, "Application and Testing of Safety Related Diesel Generators in Nuclear Power Plants," March 2007
 
AC Sources-Shutdown B 3.8.2 B 3.8  ELECTRICAL POWER SYSTEMS
 
B 3.8.2  AC Sources-Shutdown
 
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-1 Revision 2 BACKGROUND A description of the AC sources is provided in the Bases for LCO 3.8.1.
APPLICABLE The OPERABILITY of the minimum AC sources during MODEs 5 SAFETY ANALYSES and 6 and during movement of irradiated fuel assemblies ensures that:  a. The unit can be maintained in the shutdown or refueling condition for extended periods;  b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit
 
status; and  c. Adequate AC electrical power is provided to mitigate events postulated during shutdown, such as a fuel
 
handling accident.
 
In general, when the unit is shut down, the Technical Specifications requirements ensure that the unit has the
 
capability to mitigate the consequences of postulated
 
accidents. However, assuming a single failure and
 
concurrent loss of all offsite or all onsite power is not
 
required. The rationale for this is based on the fact that
 
many DBAs that are analyzed in MODEs 1, 2, 3, and 4 have no specific analyses in MODEs 5 and 6. Worst case bounding events are deemed not credible in MODEs 5 and 6 because the energy contained within the reactor pressure boundary,
 
reactor coolant temperature and pressure, and the
 
corresponding stresses result in the probabilities of
 
occurrence being significantly reduced or eliminated, and in minimal consequences. These deviations from DBA analysis assumptions and design requirements during shutdown
 
conditions are allowed by the LCO for required systems.
 
During MODEs 1, 2, 3, and 4, various deviations from the analysis assumptions and design requirements are allowed
 
within the Required Actions. This allowance is in
 
recognition that certain testing and maintenance activities
 
must be conducted provided an acceptable level of risk is
 
not exceeded. During MODEs 5 and 6, performance of a significant number of required testing and maintenance AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-2 Revision 2 activities is also required. In MODEs 5 and 6, the activities are generally planned and administratively controlled. Relaxations from MODEs 1, 2, 3, and 4 LCO requirements are acceptable during shutdown MODEs based on:  a. The fact that time in an outage is limited. This is a risk prudent goal as well as a utility economic consideration. b. Requiring appropriate compensatory measures for certain conditions. These may include administrative controls,
 
reliance on systems that do not necessarily meet
 
typical design requirements applied to systems credited
 
in operating MODE analyses, or both. c. Prudent utility consideration of the risk associated with multiple activities that could affect multiple
 
systems. d. Maintaining, to the extent practical, the ability to perform required functions (even if not meeting
 
MODEs 1, 2, 3, and 4 OPERABILITY requirements) with systems assumed to function during an event.
 
In the event of an accident during shutdown, this LCO ensures the capability to support systems necessary to avoid
 
immediate difficulty, assuming either a loss of all offsite
 
power or a loss of all onsite DG power.
The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.
LCO One offsite circuit capable of supplying the onsite Class 1E power distribution subsystem(s) of LCO 3.8.10, ensures that all required loads are powered from offsite power. An OPERABLE DG, associated with a distribution system train required to be OPERABLE by LCO 3.8.10, ensures a diverse
 
power source is available to provide electrical power
 
support, assuming a loss of the offsite circuit. Together,
 
OPERABILITY of the required offsite circuit and DG ensures
 
the availability of sufficient AC sources to operate the
 
unit in a safe manner and to mitigate the consequences of
 
postulated events during shutdown (e.g., fuel handling
 
accidents).
 
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-3 Revision 59  The qualified offsite circuit must be capable of maintaining rated frequency and voltage, and accepting required loads
 
during an accident, while connected to the ESF bus(es). 
 
Qualified offsite circuits are those that are described in
 
the UFSAR and are part of the licensing basis for the unit.
The DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective ESF bus, and
 
accepting required loads. The DG must continue to operate
 
until offsite power can be restored to the ESF buses. These
 
capabilities are required to be met from a variety of
 
initial conditions such as DG in standby with the engine hot
 
and DG in standby at ambient conditions. Automatic start and loading of a DG is not required in MODEs 5 and 6. A DG is OPERABLE when it is in local control mode if it is capable of being returned to automatic control mode when required, and within the time assumed in the accident analysis.
 
It is acceptable for trains to be cross-tied during shutdown conditions, allowing a single offsite power circuit to
 
supply all required trains.
 
The CREVS and CRETS are shared systems with one train of each system connected to an onsite Class 1E AC electrical
 
power distribution subsystem from each unit. Limiting
 
Condition for Operation 3.8.2.c requires one qualified
 
circuit between the offsite transmission network and the
 
other unit's onsite Class 1E AC electrical power
 
distribution subsystems needed to supply power to the CREVS
 
and CRETS to be OPERABLE. Limiting Condition for
 
Operation 3.8.2.d requires one DG from the other unit
 
capable of supplying power to the required CREVS and CRETS
 
to be OPERABLE, if the DG required by LCO 3.8.2.b is not capable of supplying power to the required CREVS and CRETS.
These requirements, in conjunction with the requirements for
 
the unit AC electrical power sources in LCO 3.8.2.a and
 
LCO 3.8.2.b, ensure that offsite power is available to both
 
trains and onsite power is available to one train of the
 
CREVS and CRETS, when they are required to be OPERABLE by their respective LCOs (LCOs 3.7.8 and 3.7.9).
 
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-4 Revision 5 APPLICABILITY The AC sources required to be OPERABLE in MODEs 5 and 6 and during movement of irradiated fuel assemblies provide
 
assurance that:  a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel assemblies;  b. Systems needed to mitigate a fuel handling accident are available;  c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are
 
available; and  d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown
 
condition or refueling condition.
 
The AC power requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.1.
ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel
 
assembly movement can occur in MODEs 1, 2, 3, or 4, the
 
ACTIONS have been modified by a Note stating that LCO 3.0.3
 
is not applicable. If moving irradiated fuel assemblies
 
while in MODEs 5 or 6, LCO 3.0.3 would not specify any
 
action. If moving irradiated fuel assemblies while in
 
MODEs 1, 2, 3, or 4, the fuel movement is independent of
 
reactor operations. Therefore, in either case, inability to
 
suspend movement of irradiated fuel assemblies would not be
 
sufficient reason to require a reactor shutdown.
 
The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude completion of actions to establish a safe conservative
 
position. This clarification is provided to avoid stopping
 
movement of irradiated fuel assemblies while in a non-
 
conservative position based on compliance with the Required
 
Actions.
 
A.1  An offsite circuit would be considered inoperable, if it was unavailable to one required ESF train. Although two trains
 
may be required by LCO 3.8.10, the remaining train with AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-5 Revision 29  offsite power available may be capable of supporting sufficient required features to allow continuation of fuel movement. By the allowance of the option to declare
 
required features inoperable, with no offsite power
 
available, appropriate restrictions will be implemented in
 
accordance with the affected required features LCO's ACTIONS.
 
A.2.1, A.2.2, A.2.3, B.1, B.2, and B.3  With the offsite circuit not available to all required trains, the option would still exist to declare all required
 
features inoperable. Since this option may involve
 
undesired administrative efforts, the allowance for
 
sufficiently conservative actions is made. With the
 
required DG inoperable, the minimum required diversity of AC
 
power sources is not available. It is, therefore, required
 
to suspend movement of irradiated fuel assemblies, and operations involving positive reactivity additions that
 
could result in loss of the required SHUTDOWN MARGIN (SDM)
 
(MODE 5) or boron concentration (MODE 6). Suspending
 
positive reactivity additions that could result in failure
 
to meet the minimum SDM or boron concentration limit is
 
required to assure continued safe operation. Introduction
 
of coolant inventory must be from sources that have a boron
 
concentration greater than that required in the RCS for the
 
minimum SDM or refueling boron concentration. This may
 
result in an overall reduction in RCS boron concentration,
 
but provides an acceptable margin to maintaining subcritical
 
operation. Introduction of temperature changes including
 
temperature increases when operating with a positive
 
moderator temperature coefficient (MTC) must also be
 
evaluated to ensure they do not result in a loss of the
 
required SDM.
Suspension of these activities does not preclude completion of actions to establish a safe conservative condition. 
 
These actions minimize the probability or the occurrence of
 
postulated events. It is further required, to immediately
 
initiate action to restore the required AC sources and to
 
continue this action until restoration is accomplished in
 
order to provide the necessary AC power to the unit safety
 
systems.
 
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-6 Revision 19  The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The
 
restoration of the required AC electrical power sources
 
should be completed as quickly as possible in order to
 
minimize the time during which the unit safety systems may
 
be without sufficient power.
Pursuant to LCO 3.0.6, the Electrical Distribution System's ACTIONS are not entered even if all AC sources to it are
 
inoperable, resulting in de-energization. Therefore, the
 
Required Actions of Condition A are modified by a Note to
 
indicate that when Condition A is entered with no AC power
 
to any required ESF bus, the ACTIONS for LCO 3.8.10 must be
 
immediately entered. This Note allows Condition A to
 
provide requirements for the loss of the offsite circuit,
 
whether or not a train is de-energized. Limiting Condition
 
for Operation 3.8.10 provides the appropriate restrictions for the situation involving a de-energized train.
SURVEILLANCE SR 3.8.2.1 and SR 3.8.2.2 REQUIREMENTS Surveillance Requirements 3.8.2.1 and 3.8.2.2 require the performance of SRs from LCO 3.8.1 that are necessary for
 
ensuring the OPERABILITY of the AC sources in other than
 
MODEs 1, 2, 3, and 4. Surveillance Requirement 3.8.1.10 is
 
not required to be met, since only one offsite circuit is
 
required to be OPERABLE. Surveillance Requirements 3.8.1.4,
 
3.8.1.8, 3.8.1.13, and 3.8.1.15 are related to automatic
 
starting of the DGs for an operating unit, which is not
 
applicable for a shutdown unit. Surveillance Requirement 3.8.1.16 is related to LCO 3.8.2.c and 3.8.2.d AC sources, and is addressed by SR 3.8.2.2.
 
Surveillance Requirement 3.8.2.1 is modified by a Note. The Note lists SRs not required to be performed in order to
 
preclude de-energizing a required 4.16 kV ESF bus or
 
disconnecting a required offsite circuit during performance
 
of SRs. With limited AC Sources available, a single event
 
could compromise both the required circuit and the DG. It
 
is the intent that these SRs must still be capable of being
 
met, but actual performance is not required during periods
 
when the DG and offsite circuit are required to be OPERABLE.
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-7 Revision 19 Refer to the corresponding Bases for LCO 3.8.1 for a discussion of each SR.
REFERENCES None
 
Diesel Fuel Oil B 3.8.3 B 3.8  ELECTRICAL POWER SYSTEMS
 
B 3.8.3  Diesel Fuel Oil
 
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-1 Revision 47 BACKGROUND The fuel oil storage tanks (FOSTs) contain sufficient capability for the DGs to operate one unit on accident loads
 
and one unit on shutdown loads for seven days. This is
 
discussed in Reference 1, Chapter 8. This onsite fuel oil capacity is sufficient to operate the DGs for longer than the time to replenish the onsite supply from outside
 
sources.
 
Fuel oil is transferred from the storage tanks to the day tank by transfer pumps associated with each DG.
 
For proper operation of the standby DGs, it is necessary to ensure the proper quality of the fuel oil. Testing to check
 
for water and sediment content, the kinematic viscosity,
 
specific gravity (or API gravity), and impurity level
 
(i.e., total particulates) ensures this quality.
 
The DG fuel oil system design at Calvert Cliffs supports four emergency DGs and other non-safety DGs. Three of the
 
four emergency DGs, i.e., Nos. 1B, 2A, and 2B, are fueled
 
from two FOSTs, i.e., FOST Nos. 11 and 21, and DG No. 1A is
 
fueled from FOST No. 1A. Fuel Oil Storage Tank Nos. 1A and
 
21 are enclosed such as to be considered "tornado protected"
 
but FOST No. 11 is not protected. As such, FOST No. 11 is
 
not used as the primary source for the emergency DGs, but
 
rather is used as a backup to support FOST No. 21, if it or
 
the fuel oil it contains becomes degraded.
 
The operability of FOST No. 21 ensures that at least seven days of fuel oil will be available for operation of one DG on each unit, assuming one unit under accident conditions
 
with a DG load of 3500 kW, and the opposite unit under normal shutdown conditions with a DG load of 3000 kW.
Additionally, the operability of FOST No. 21 ensures that in
 
the event of a loss of offsite power, concurrent with a loss
 
of the non-bunkered FOST (tornado/missile event), at least
 
seven days of fuel oil will be available for operation of
 
one DG on each unit, assuming both DGs are loaded to
 
3000 kW. The operability of the FOST No. 1A ensures that at Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-2 Revision 47 least seven days of fuel oil is available to support operation of DG No. 1A at 4000 kW.
 
The operability of the fuel oil day tanks ensures that at least one hour of DG operation is available without makeup
 
to the day tanks, assuming DG No. 1A is loaded to 4000 kW and DG Nos. 1B, 2A, and 2B are loaded to 3500 kW.
APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, and Chapters 6 and 14, assume ESF systems are OPERABLE. The DGs are designed to provide sufficient
 
capacity, capability, redundancy, and reliability to ensure
 
the availability of necessary power to ESF systems so that
 
fuel, RCS, and containment design limits are not exceeded. 
 
These limits are discussed in more detail in the Bases for
 
LCO Section 3.2, 3.4, and 3.6.
 
Since diesel fuel oil supports the operation of the standby AC power sources, they satisfy 10 CFR 50.36(c)(2)(ii),
Criterion 3.
LCO Fuel Oil Storage Tank No. 1A is required to contain a minimum of 49,500 gallons of available diesel fuel oil which
 
is a sufficient supply to operate DG No. 1A with accident
 
loads for seven days. Fuel Oil Storage Tank No. 21 is required to contain a minimum of 85,000 gallons of available diesel fuel oil which is a sufficient supply to operate one
 
unit with accident loads and one unit with shutdown loads
 
for seven days. It is also required to meet specific
 
standards for quality. This requirement, in conjunction
 
with an ability to obtain replacement supplies within
 
seven days, supports the availability of DGs required to
 
shut down the reactor and to maintain it in a safe condition
 
for an AOO or a postulated DBA with loss of offsite power. 
 
Diesel generator day tank fuel requirements, as well as
 
transfer capability from the FOST to the day tank, are addressed in LCO 3.8.1 and LCO 3.8.2.
APPLICABILITY The AC sources (LCO 3.8.1 and LCO 3.8.2) are required to ensure the availability of the required power to shut down
 
the reactor and maintain it in a safe shutdown condition
 
after an AOO or a postulated DBA. Since stored diesel fuel
 
oil supports LCO 3.8.1 and LCO 3.8.2, stored diesel fuel oil Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-3 Revision 49  is required to be within limits when the associated DG is required to be OPERABLE.
 
For both Unit 1 and Unit 2, the FOST No. 1A associated DG is only DG No. 1A. For Unit 1, the FOST No. 21 associated DGs
 
are DG Nos. 1B and 2B. For Unit 2, the FOST No. 21 associated DGs are DG Nos. 2A and 2B. Alignment does not affect the association of DG and FOST since the individual
 
DG fuel oil day tank provides sufficient volume for the DG
 
to perform its safety function while re-alignment is accomplished, if necessary.
ACTIONS The ACTIONS Table is modified by a Note indicating that separate Condition entry is allowed for each DG. This is
 
acceptable, since the Required Actions for each Condition
 
provide appropriate compensatory actions for each inoperable
 
DG subsystem. Complying with the Required Actions for one
 
inoperable DG subsystem may allow for continued operation,
 
and subsequent inoperable DG subsystem(s) are governed by
 
separate Condition entry and application of associated  
 
Required Actions.
 
A.1, B.1, B.2, C.1, C.2, and C.3  In this Condition, the seven day fuel oil supply for a DG is not available. However, fuel oil volume reduction is
 
limited to 6/7 of the required volume which will provide
 
sufficient capacity to operate one DG on one unit on
 
accident loads, and one DG on the other unit on shutdown
 
loads for approximately six days. The fuel oil level ensuring a six day supply is 42,430 gallons (FOST No. 1A) and 72,860 gallons (FOST No. 11, FOST No. 21). These circumstances may be caused by events such as full load  
 
operation required after an inadvertent start while at
 
minimum required level; or feed and bleed operations, which
 
may be necessitated by increasing particulate levels or any
 
number of other oil quality degradations. This restriction
 
allows sufficient time for obtaining the requisite
 
replacement volume and performing the analyses required
 
prior to addition of fuel oil to the tank. A period of
 
48 hours is considered sufficient to complete restoration of
 
the required level prior to declaring the DG inoperable. 
 
This period is acceptable based on the remaining capacity
 
(approximately six days), the fact that procedures will be Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-4 Revision 49 initiated to obtain replenishment, and the low probability of an event during this brief period.
 
Condition A addresses only FOST No. 1A which is "tornado protected" and which contains sufficient fuel for seven days
 
of required operation of DG No. 1A. It supports both Unit 1 and Unit 2 equipment since DG No. 1A provides power for equipment which is shared by both units, e.g., the CREVS.
 
Condition B addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for seven days
 
of required operation of two DGs. Fuel Oil Storage Tank
 
No. 21 supports both Unit 1 and Unit 2 equipment, but
 
Condition B is written for Unit 1 only to reflect the Unit 1
 
requirements for DG Nos. 1B and 2B. For an accident, Unit 1
 
requires either DG No. 1A or both DG Nos. 1B and 2B (since
 
DG No. 2B powers equipment which is redundant to some
 
equipment powered by DG No. 1A, e.g., CREVS). Since DG
 
No. 1A is supported by FOST No. 1A and the redundant
 
required equipment is powered by DG Nos. 1B and 2B which are
 
supported by FOST No. 21, at least one full train of
 
required equipment is supported by a "tornado protected"
 
FOST even with an inoperable FOST or DG. Therefore, low
 
fuel oil volume in FOST No. 21 can be supplemented by the
 
fuel oil volume of an OPERABLE FOST No. 11 to assure the
 
necessary volume. Required Action B.1 requires the combined
 
volume of FOST No. 21 and an OPERABLE FOST No. 11 to be
 
verified to be greater than 6/7 of the required volume
 
within one hour. The Completion Time of one hour is
 
consistent with the time needed to verify through
 
administrative means that the backup FOST is OPERABLE. 
 
Required Action B.2 requires the combined volume of FOST No. 21 and an OPERABLE FOST No. 11 to be  85,000 gallons within 48 hours. In addition, if FOST No. 21 is not
 
restored and FOST No. 11 continues to be relied upon, Required Action B.2 must be repeated every 31 days. This effectively replaces the SR 3.8.3.1 periodic surveillance of
 
available DG fuel oil volume for the inoperable FOST No. 21. 
 
Since FOST No. 11 is not required by the LCO, FOST No. 11
 
may be considered OPERABLE only when the stored fuel oil
 
meets SR 3.8.3.2 and SR 3.8.3.3, and is capable of being
 
delivered to the required DG, i.e., the necessary piping and
 
valves are capable of performing their safety function.
Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-5 Revision 2  Specific alignment to a particular FOST is not required since the individual DG fuel oil day tank provides
 
sufficient volume for the DG to perform its safety function
 
while re-alignment is accomplished, if necessary. Further,
 
if any fuel oil in FOST No. 11 above the 33,000 gallons reserved for emergency DG use is credited for DG use, appropriate administrative controls must be in place to assure its retention for this purpose.
 
Condition C also addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for
 
seven days of required operation of two DGs. Fuel Oil Storage Tank No. 21 supports both Unit 1 and Unit 2 equipment, but Condition C is written for Unit 2 only to
 
reflect the Unit 2 requirements for DG Nos. 2A and 2B. For an accident, Unit 2 requires either DG No. 2B or both DG Nos. 1A and 2A (since DG No. 1A powers equipment which is redundant to some equipment powered by DG No. 2B, e.g., CREVS). Unlike Unit 1, at least one full train of
 
required equipment is not supported by a "tornado protected"
 
FOST with an inoperable FOST or DG since most of the
 
redundant required equipment is powered by DG Nos. 2A and 2B which are both supported by FOST No. 21. Therefore, low fuel oil volume in FOST No. 21 can only be supplemented by the fuel oil volume of an OPERABLE FOST No. 11 to assure the necessary volume when the probability for a tornado is
 
sufficiently low. This is reflected in Note 2 for Required
 
Action C.2 which addresses the inoperability of FOST No. 21 from April 1 to September 30. During the time of low
 
tornado probability, the Unit 2 requirements for the
 
inoperability of FOST No. 21 are very similar to the Unit 1 requirements for inoperability of FOST No. 21. It is acceptable for the combined volume of FOST No. 11 and FOST No. 21 to be considered in providing 6/7 of the required volume for the 48 hours allowed by Required Action C.3. 
 
Required Action C.1 requires the combined volume of FOST
 
No. 21 and an OPERABLE FOST No. 11 to be verified to be greater than 6/7 of the required volume within one hour.
Required Action C.3 then requires the volume of FOST No. 21 to be restored to within volume limits within 48 hours. 
 
However, during tornado season, i.e., from April 1 to
 
September 30, the fuel oil volume of FOST No. 11 is not allowed to be credited and the fuel oil seven day volume of Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-6 Revision 2 FOST No. 21 must be restored within two hours as indicated in Required Action C.2. Required Action C.2 is also modified by a Note such that it is only required during the
 
operation of Unit 2 in MODEs 1, 2, 3, or 4 since the unit is already shutdown if it is in another MODE or condition. An
 
OPERABLE FOST No. 11 is determined as described above in the discussion for Condition B.
 
D.1  This Condition is entered as a result of a failure to meet the acceptance criterion of SR 3.8.3.2. Normally, trending
 
of particulate levels allows sufficient time to correct high
 
particulate levels prior to reaching the limit of
 
acceptability. Poor sample procedures (bottom sampling),
 
contaminated sampling equipment, and errors in laboratory
 
analysis can produce failures that do not follow a trend. 
 
Since the presence of particulates does not mean failure of  
 
the fuel oil to burn properly in the diesel engine, and
 
particulate concentration is unlikely to change
 
significantly between SR Frequency intervals, and proper engine performance has been recently demonstrated (within
 
31 days), it is prudent to allow a brief period prior to
 
declaring the associated DG inoperable. The seven day Completion Time allows for further evaluation, resampling,
 
and re-analysis of the DG fuel oil.
 
E.1  With the new fuel oil properties defined in the Bases for SR 3.8.3.2 not within the required limits, a period of
 
30 days is allowed for restoring the stored fuel oil
 
properties to within the new fuel oil limits. This period
 
provides sufficient time to test the stored fuel oil to
 
determine that the new fuel oil, when mixed with previously
 
stored fuel oil, remains acceptable, or restore the stored fuel oil properties to within the new fuel oil limits. This restoration may involve feed and bleed procedures,
 
filtering, or combinations of these procedures. Even if a
 
DG start and load was required during this time interval, and the fuel oil properties were outside limits, there is a
 
high likelihood that the DG would still be capable of
 
performing its intended function.
 
Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-7 Revision 55  F.1  With a Required Action and associated Completion Time not met, or one or more DGs with diesel fuel oil not within
 
limits for reasons other than addressed by Conditions A
 
through E, the associated DG may be incapable of performing
 
its intended function and must be immediately declared inoperable.  "Associated DG(s)" are identified in the
 
Applicability Bases.
SURVEILLANCE SR 3.8.3.1 REQUIREMENTS This SR provides verification that there is an adequate inventory of fuel oil in the DG FOSTs to support one unit on
 
accident loads and one unit on shutdown loads for
 
seven days. The fuel oil level ensuring a seven day supply
 
is 49,500 gallons (FOST No. 1A) and 85,000 gallons (FOST
 
No. 21) when calculated in accordance with References 3 and
: 4. The required fuel oil storage volume is determined using
 
the most limiting energy content of the stored fuel. Using
 
the limiting energy content, the required diesel generator
 
output and the corresponding fuel oil consumption rate, the
 
onsite fuel oil storage volume required for seven days of
 
operation can be determined. Surveillance
 
Requirement 3.8.3.2 requires new fuel to be tested to verify
 
that the energy content is within the range assumed in the
 
diesel fuel oil consumption calculations. The seven day
 
period is sufficient time to place the unit in a safe
 
shutdown condition and to bring in replenishment fuel from
 
an offsite location.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.1.13 This SR demonstrates that DG non-critical protective functions are bypassed on a required actuation signal. This SR is accomplished by verifying the bypass contact changes to the correct state which prevents actuation of the non-critical function. The non-critical protective functions are consistent with References 3 and 4, and Institute of Electrical and Electronic Engineers (IEEE)-387 and are listed in Reference 2, Chapter 8. Verifying the non-critical trips are bypassed will ensure DG operation during a required actuation. The non-critical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition. A failure of the electronic governor results in the diesel generator operating in hydraulic mode. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is more critical than protecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.
SR 3.8.3.2  The tests listed below are a means of determining whether new fuel oil is of the appropriate grade (i.e., 2D and 2D
 
low sulfur) and has not been contaminated with substances
 
that would have an immediate, detrimental impact on diesel
 
engine combustion. Note that further references to American
 
Society for Testing Materials (ASTM) 2D fuel oil include
 
both 2D and 2D low sulfur. If results from these tests are
 
within acceptable limits, the fuel oil may be added to the Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-8 Revision 55 storage tanks without concern for contaminating the entire volume of fuel oil in the storage tanks. These tests are to
 
be conducted prior to adding the new fuel to the storage
 
tank(s), but in no case is the time between receipt of new
 
fuel and conducting the tests to exceed 31 days. The tests,
 
limits, and applicable ASTM Standards are as follows:  a. Sample the new fuel oil in accordance with Reference 3, ASTM D4057-1995;  b. Verify in accordance with the tests specified in Reference 3, ASTM D975-1996, that the sample has an absolute specific gravity at 60/60&deg;F of  0.8155 and  0.8871, or an American Petroleum Institute gravity at 60&deg;F of  28&deg; and  42&deg;, a kinematic viscosity at 40&deg;C of  1.9 centistokes and  4.1 centistokes, and a flash point  125&deg;F; and  c. Verify that the new fuel oil has 0.05% water and sediment (Reference 3, ASTM D975-1996).
 
Failure to meet any of the above limits is cause for rejecting the new fuel oil, but does not represent a failure
 
to meet the LCO concern since the fuel oil is not added to
 
the storage tanks.
 
Within 31 days following the initial new fuel oil sample, the fuel oil is analyzed to establish that the other
 
properties specified in Reference 2, ASTM D975-1996,
 
Table 1, are met for new fuel oil. The 31 day period is
 
acceptable because the fuel oil properties of interest, even
 
if they were not within stated limits, would not have an
 
immediate effect on DG operation. This SR ensures the
 
availability of high quality fuel oil for the DGs.
 
Fuel oil degradation during long-term storage shows up as an increase in particulate, due mostly to oxidation. The
 
presence of particulate does not mean the fuel oil will not burn properly in a diesel engine. The particulate can cause fouling of filters and fuel oil injection equipment,
 
however, that can cause engine failure.
 
Particulate concentrations should be determined by gravimetric analysis (based on ASTM D2276-1989) of total Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-9 Revision 55 particulate concentration in the fuel oil and has a limit of 10 mg/l. It is acceptable to obtain a field sample for
 
subsequent laboratory testing in lieu of field testing. 
 
Because the total stored fuel oil volume for DG Nos. 1B, 2A,
 
and 2B is contained in two interconnected tanks, each tank
 
must be considered and tested separately. There is a separate FOST for DG No. 1A.
 
The Frequency of this test takes into consideration fuel oil degradation trends that indicate that particulate
 
concentration is unlikely to change significantly between
 
Frequency intervals.
 
SR 3.8.3.3  Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in
 
fuel oil and cause fouling, but all must have a water
 
environment in order to survive. Removal of water from the
 
fuel storage tanks eliminates the necessary environment for bacterial survival. This is the most effective means of
 
controlling microbiological fouling. In addition, it
 
eliminates the potential for water entrainment in the fuel
 
oil during DG operation. Water may come from any of several
 
sources, including condensation, ground water, rain water,
 
and contaminated fuel oil, and from breakdown of the fuel
 
oil by bacteria. Frequent checking for and removal of
 
accumulated water minimizes fouling and provides data
 
regarding the watertight integrity of the fuel oil system. 
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR  
 
provided the accumulated water is removed during performance of the surveillance test.
REFERENCES 1. UFSAR  2. ASTM Standards
: 3. Regulatory Guide 1.137, "Fuel-Oil Systems for Standby Diesel Generators," October 1979  4. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4
 
DC Sources-Operating B 3.8.4 B 3.8  ELECTRICAL POWER SYSTEMS
 
B 3.8.4  DC Sources-Operating
 
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-1 Revision 48 BACKGROUND The station DC sources provide the AC emergency power system with control power. It also provides both motive and
 
control power to selected safety related equipment and
 
preferred AC vital bus power (via inverters). As required by Reference 1, Appendix 1C, Criterion 39, the DC electrical power sources are designed to have sufficient independence,
 
redundancy, and testability to perform their safety
 
functions, assuming a single failure. The DC sources also
 
conform to the recommendations of References 2 and 3.
 
The 125 VDC electrical power sources consist of four independent and redundant safety related Class 1E DC
 
channels. Each channel consists of one 125 VDC battery, two associated battery charger for each battery, and all the
 
associated control equipment and interconnecting cabling.
 
During normal operation, the 125 VDC load is powered from the battery chargers with the batteries floating on the
 
system. In cases where momentary loads are greater than the
 
charger capability, or a loss of normal power to the battery
 
charger, the DC load is automatically powered from the
 
station batteries.
 
The DC channels provide the control power for its associated Class 1E AC power load group, 4.16 kV switchgear, and 480 V
 
load centers. The DC channels also provide a DC source to
 
the inverters, which in turn power the AC vital buses.
 
The DC sources are described in more detail in the Bases for LCO 3.8.9 and for LCO 3.8.10.
 
Each battery has adequate storage capacity to carry the required load continuously for at least 2 hours and to carry load duty cycle as discussed in Reference 1, Chapter 8.
 
Each 125 VDC battery is separately housed in a ventilated room apart from its charger and distribution centers. Each
 
channel is separated physically and electrically from the  
 
other channel to ensure that a single failure in one channel
 
does not cause a failure in a redundant channel. There is DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-2 Revision 48 no sharing between redundant Class 1E channels, such as batteries, battery chargers, or distribution panels.  
 
The batteries for DC channels are sized to produce required capacity at 80% of nameplate rating, corresponding to
 
warranted capacity at end of life cycles and the 100% design demand. Battery size is based on 125% of required capacity.
An average voltage of 2.13 V per cell, corresponds to a
 
total minimum voltage output of 125 V per battery (128 V for
 
the reserve battery) as discussed in Reference 1, Chapter 8. 
 
The criteria for sizing large lead storage batteries are
 
defined in Reference 4.
 
Each DC channel has ample power output capacity for the steady state operation of connected loads required during
 
normal operation, while at the same time maintaining its
 
battery bank fully charged. Each battery charger also has
 
sufficient capacity to restore the battery from the design
 
minimum charge to 95% of its fully charged state within
 
24 hours while supplying normal steady state loads discussed in Reference 1, Chapter 8.
APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC channels provide a normal and emergency DC
 
sources for the DGs, emergency auxiliaries, and control and  
 
switching during all MODEs of operation.
 
The OPERABILITY of the DC sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This includes maintaining the DC sources OPERABLE during accident
 
conditions in the event of:  a. An assumed loss of all offsite AC power or all onsite AC power; and b. A worst case single failure.
The DC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.
LCO The DC channels, each channel consisting of one battery, two battery chargers, and the corresponding control equipment and interconnecting cabling supplying power to the DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-3 Revision 48 associated bus, are required to be OPERABLE to ensure the availability of the required power to shut down the reactor
 
and maintain it in a safe condition after an AOO or a
 
postulated DBA. Loss of any DC channel does not prevent the
 
minimum safety function from being performed (Reference 1,  
 
Chapter 8).
An OPERABLE DC channel requires the battery and one OPERABLE charger to be operating and connected to the associated DC bus(es).
APPLICABILITY The DC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure safe unit operation and to ensure that:  a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result
 
of AOOs or abnormal transients; and  b. Adequate core cooling is provided, and containment integrity and other vital functions are maintained in
 
the event of a postulated DBA.
 
The DC sources requirement for MODEs 5 and 6 are addressed in the Bases for LCO 3.8.5.
ACTIONS A.1  Required Action A.1 requires the inoperable battery to be replaced by the reserve battery within four hours when one
 
DC channel is inoperable due to an inoperable battery and
 
the reserve battery is available. The reserve battery is a  
 
qualified battery that can replace and perform the required  
 
function of any inoperable battery. The four hour Completion Time is acceptable based on the capability of the reserve battery and the time it takes to replace the
 
inoperable battery with the reserve battery while minimizing
 
the time in this degraded condition.
 
B.1  Condition B represents one channel with a loss of ability to completely respond to an event, and a potential loss of
 
ability to remain energized during normal operation. 
 
Therefore, it is imperative that the operator's attention
 
focus on stabilizing the unit, minimizing the potential for DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-4 Revision 48 complete loss of DC power to the affected channel. The 2 hour limit is consistent with the allowed time for an
 
inoperable DC channel.
 
If one of the required DC channels is inoperable for reasons other than Condition A (e.g., inoperable battery, inoperable battery charger(s), or inoperable battery charger and associated inoperable battery), the remaining DC channels
 
have the capacity to support a safe shutdown and to mitigate
 
an accident condition. Since a subsequent worst case single
 
failure would, however, result in the further loss of the
 
125 VDC channels with attendant loss of ESF functions,
 
continued power operation should not exceed 2 hours. The
 
2 hour Completion Time is based on Reference 5 and reflects
 
a reasonable time to assess unit status as a function of the  
 
inoperable DC channel and, if the DC channel is not restored
 
to OPERABLE status, to prepare to effect an orderly and safe
 
unit shutdown.
 
C.1 and C.2  If the inoperable DC channel cannot be restored to OPERABLE status within the required Completion Time, the unit must be
 
brought to a MODE in which the LCO does not apply. To
 
achieve this status, the unit must be brought to at least
 
MODE 3 within 6 hours and to MODE 5 within 36 hours. The
 
allowed Completion Times are reasonable, based on operating  
 
experience, to reach the required unit conditions from full
 
power conditions in an orderly manner and without
 
challenging unit systems. The Completion Time to bring the  
 
unit to MODE 5 is consistent with the time required in Reference 5.
SURVEILLANCE SR 3.8.4.1 REQUIREMENTS Verifying battery terminal voltage while on float charge helps to ensure the effectiveness of the charging system and
 
the ability of the batteries to perform their intended
 
function. Float charge is the condition in which the
 
charger is supplying connected loads and the continuous
 
charge required to overcome the internal losses of a battery
 
and maintain the battery in a fully charged state. The  
 
voltage requirements are based on the nominal design voltage
 
of the battery (2.13 V per cell average) and are consistent DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-5 Revision 55  with Reference 6 and the initial state of charge conditions assumed in the battery sizing calculations. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.4.2  Visual inspection to detect corrosion of the battery cells and connections, or measurement of the resistance of each
 
cell to cell and terminal connection, provides an indication
 
of physical damage or abnormal deterioration that could
 
potentially degrade battery performance.
 
The limits established for this SR must be no more than 20%
above the resistance as measured during installation or not
 
above the ceiling value established by the manufacturer.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.4.3  Visual inspection of the battery cells, cell plates, and battery racks provides an indication of physical damage or
 
abnormal deterioration that could potentially degrade
 
battery performance.
 
The presence of physical damage or deterioration does not necessarily represent a failure of this SR, provided an
 
evaluation determines that the physical damage or
 
deterioration  does not affect the OPERABILITY of the  
 
battery (its ability to perform its design function).  
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-29 Revision 55  SR 3.8.1.14 This SR ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and that the DG can be returned to ready-to-load status when offsite power is restored. The DG is considered to be in ready-to-load status when the DG is at rated speed and voltage, the output breaker is open and can receive an auto-close signal on bus undervoltage, and the load sequence timers are reset.
SR 3.8.4.4 and SR 3.8.4.5 Visual inspection and resistance measurements of cell to cell and terminal connections provide an indication of
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
SR 3.8.1.15  In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.
physical damage or abnormal deterioration that could
This SR demonstrates the DG operation during a loss of offsite power actuation test signal in conjunction with an ESF (i.e., safety injection) actuation signal. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.
 
It is not necessary to energize loads which are dependent on temperature to load (i.e., heat tracing, switchgear HVAC compressor, computer room HVAC compressor). Also, it is acceptable to transfer the instrument AC bus to the non tested train to maintain safe operation of the plant during testing. Loads (both permanent and auto connect) < 15 kW do not require loading onto the diesel since these are insignificant loads for the DG.
indicate degraded battery condition. The anti-corrosion
Permanently- and auto-connected loads to the emergency diesel generators are defined as follows:
 
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-30 Revision 55 Permanently-Connected Load - Equipment that is not shed by an undervoltage or safety injection actuation signal and is normally operating, i.e., loads that are manually started, selected, or process signal controlled are not considered permanently-connected loads. Auto-Connected Loads - Emergency equipment required for mitigating the events described in UFSAR Chapter 14 that are energized by loss-of-coolant incident sequencer actions after step zero and within the first minute of emergency diesel generator operation after the initiation of an undervoltage signal.
material is used to help ensure good electrical connections
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
This SR is modified by a Note. The reason for the Note is to minimize mechanical wear and stress on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs.
and to reduce terminal deterioration. The visual inspection
SR 3.8.1.16  This SR lists the SRs that are applicable to the LCO 3.8.1.c (SRs 3.8.1.1, 3.8.1.2, 3.8.1.3, 3.8.1.5, 3.8.1.6, and 3.8.1.7). Performance of any SR for the LCO 3.8.1.c will satisfy both Unit 1 and Unit 2 requirements for those SRs.
 
Surveillance Requirements 3.8.1.4, 3.8.1.8, 3.8.1.9, 3.8.1.10, 3.8.1.11, 3.8.1.12, 3.8.1.13, 3.8.1.14, 3.8.1.15, and 3.8.1.17 are not required to be performed for the LCO 3.8.1.c. Surveillance Requirement 3.8.1.10 is not required because this SR verifies manual transfer of AC power sources from the normal offsite circuit to the alternate offsite circuit, but only one qualified offsite circuit is necessary for the LCO 3.8.1.c. Surveillance Requirements 3.8.1.4, 3.8.1.11, 3.1.8.12, and 3.8.1.17 are not required because they are tests that deal with loads.
for corrosion is not intended to require removal of and DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-6 Revision 55 inspection under each terminal connection. The removal of visible corrosion is a preventive maintenance SR. The
Surveillance Requirement 3.8.1.8 verifies the interval between sequenced loads. Surveillance Requirement 3.8.1.14 verifies the proper sequencing with offsite power.
 
Surveillance Requirement 3.8.1.9 verifies that the DG starts AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-31 Revision 55 within 10 seconds. These SRs are not required because they do not support the function of the LCO 3.8.1.c to provide power to the CREVS and CRETS. Surveillance Requirements 3.8.1.13 and 3.8.1.15 are not required to be performed because these SRs verify the emergency loads are actuated on an ESFAS signal for the Unit in which the test is being performed. The LCO 3.8.1.c DG will not start on an ESFAS signal for this Unit.
presence of visible corrosion does not necessarily represent
SR 3.8.1.17 Reference 13 requires demonstration that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours,  2 hours of which is at a load equivalent to 105-110% of the continuous service rating and the remainder of the time at a load equivalent to 90-100% of the continuous service rating. For the Nos. 1B, 2A, and 2B DGs the SR reflects these loading ranges. For the No. 1A DG, since the post accident loading is significantly less than the continuous service rating, the post accident loading (<4000 kW) is used instead of the continuous service rating. Actual testing is performed at a load higher than the post accident loading.  
 
a failure of this SR provided visible corrosion is removed
 
during performance of SR 3.8.4.4.
The connection resistance limits for SR 3.8.4.5 shall be no more than 20% above the resistance as measured during
 
installation, or not above the ceiling value established by
 
the manufacturer.  
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.  
 
SR 3.8.4.6  This SR requires that each battery charger be capable of supplying 400 amps and 125 V for 30 minutes. These requirements are based on the output rating of the chargers
 
(Reference 1, Chapter 8). According to Reference 7, the  
 
battery charger supply is required to be based on the  
 
largest combined demands of the various steady state loads
 
and the charging capacity to restore the battery from the  
 
design minimum charge state to the fully charged state,
 
irrespective of the status of the unit during these demand
 
occurrences. The minimum required amperes and duration
 
ensures that these requirements can be satisfied. The test
 
is performed while supplying normal DC loads or an
 
equivalent or greater dummy load.  


The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.3 and for gradual loading, discussed in SR 3.8.1.4 are applicable to this SR.  
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.  


The load band is provided to avoid routine overloading of the DG. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.
SR 3.8.4.7  A battery service test is a special test of battery capability, as found and with the associated battery charger disconnected, to satisfy the design requirements (battery duty cycle) of the DC source. The test duration must be  2 hours and battery terminal voltage must be maintained  105 volts during the test. The discharge rate and test length should correspond to the design accident load (duty)


In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG. To ensure No. 1A DG performance is not degraded, routine monitoring of engine parameters should be performed during the performance of this SR for No. 1A DG (Reference 9).  
cycle requirements as specified in Reference 1, Chapter 8.


The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
AC Sources-Operating B 3.8.1 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-32 Revision 55 This SR is modified by a Note. Note 1 states that momentary transients due to changing bus loads do not invalidate this test. Similarly, momentary power factor transients above the limit will not invalidate the test. REFERENCES 1. 10 CFR Part 50, Appendix A, "General Design Criteria for Nuclear Power Plants"  2. UFSAR
: 3. Regulatory Guide 1.9, Revision 3, "Selection, Design, Qualification, and Testing of Emergency Diesel Generator Units Used as Class 1E Onsite Electric Power Systems at Nuclear Power Plants," July 1993  4. Safety Guide 9, Revision 0, March 1971
: 5. NRC Safety Evaluation for Amendment Nos. 19 and 5 for Calvert Cliffs Nuclear Power Plant Unit Nos. 1 and 2, dated January 14, 1977  6. Regulatory Guide 1.93, Revision 0, "Availability of Electric Power Sources," December 1974  7. Generic Letter 84-15, Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability, July 2, 1984  8. Regulatory Guide 1.137, Revision 1, "Fuel-Oil Systems for Standby Diesel Generators," October 1979  9. Letter from Mr. D. G. McDonald, Jr. (NRC) to Mr. C. H. Cruse (BGE), dated April 2, 1996, Issuance of Amendments for Calvert Cliffs Nuclear Power Plant, Unit 1 (TAC No. M94030) and Unit 2 (TAC No. M94031) 10. IEEE Standard 308-1991, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating Stations" 11. NO-1-117, Integrated Risk Management
: 12. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4 13. Regulatory Guide 1.9, Revision 4, "Application and Testing of Safety Related Diesel Generators in Nuclear Power Plants," March 2007 AC Sources-Shutdown B 3.8.2 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.2  AC Sources-Shutdown BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-1 Revision 2 BACKGROUND A description of the AC sources is provided in the Bases for LCO 3.8.1. APPLICABLE The OPERABILITY of the minimum AC sources during MODEs 5 SAFETY ANALYSES and 6 and during movement of irradiated fuel assemblies ensures that:  a. The unit can be maintained in the shutdown or refueling condition for extended periods;  b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status; and  c. Adequate AC electrical power is provided to mitigate events postulated during shutdown, such as a fuel handling accident.
In general, when the unit is shut down, the Technical Specifications requirements ensure that the unit has the capability to mitigate the consequences of postulated accidents. However, assuming a single failure and concurrent loss of all offsite or all onsite power is not required. The rationale for this is based on the fact that many DBAs that are analyzed in MODEs 1, 2, 3, and 4 have no specific analyses in MODEs 5 and 6. Worst case bounding events are deemed not credible in MODEs 5 and 6 because the energy contained within the reactor pressure boundary, reactor coolant temperature and pressure, and the corresponding stresses result in the probabilities of occurrence being significantly reduced or eliminated, and in minimal consequences. These deviations from DBA analysis assumptions and design requirements during shutdown conditions are allowed by the LCO for required systems.
During MODEs 1, 2, 3, and 4, various deviations from the analysis assumptions and design requirements are allowed within the Required Actions. This allowance is in recognition that certain testing and maintenance activities must be conducted provided an acceptable level of risk is not exceeded. During MODEs 5 and 6, performance of a significant number of required testing and maintenance AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-2 Revision 2 activities is also required. In MODEs 5 and 6, the activities are generally planned and administratively controlled. Relaxations from MODEs 1, 2, 3, and 4 LCO requirements are acceptable during shutdown MODEs based on:  a. The fact that time in an outage is limited. This is a risk prudent goal as well as a utility economic consideration. b. Requiring appropriate compensatory measures for certain conditions. These may include administrative controls, reliance on systems that do not necessarily meet typical design requirements applied to systems credited in operating MODE analyses, or both. c. Prudent utility consideration of the risk associated with multiple activities that could affect multiple systems. d. Maintaining, to the extent practical, the ability to perform required functions (even if not meeting MODEs 1, 2, 3, and 4 OPERABILITY requirements) with systems assumed to function during an event.
In the event of an accident during shutdown, this LCO ensures the capability to support systems necessary to avoid immediate difficulty, assuming either a loss of all offsite power or a loss of all onsite DG power. The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3. LCO One offsite circuit capable of supplying the onsite Class 1E power distribution subsystem(s) of LCO 3.8.10, ensures that all required loads are powered from offsite power. An OPERABLE DG, associated with a distribution system train required to be OPERABLE by LCO 3.8.10, ensures a diverse power source is available to provide electrical power support, assuming a loss of the offsite circuit. Together, OPERABILITY of the required offsite circuit and DG ensures the availability of sufficient AC sources to operate the unit in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents).
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-3 Revision 59  The qualified offsite circuit must be capable of maintaining rated frequency and voltage, and accepting required loads during an accident, while connected to the ESF bus(es).
Qualified offsite circuits are those that are described in the UFSAR and are part of the licensing basis for the unit. The DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective ESF bus, and accepting required loads. The DG must continue to operate until offsite power can be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such as DG in standby with the engine hot and DG in standby at ambient conditions. Automatic start and loading of a DG is not required in MODEs 5 and 6. A DG is OPERABLE when it is in local control mode if it is capable of being returned to automatic control mode when required, and within the time assumed in the accident analysis.
It is acceptable for trains to be cross-tied during shutdown conditions, allowing a single offsite power circuit to supply all required trains.
The CREVS and CRETS are shared systems with one train of each system connected to an onsite Class 1E AC electrical power distribution subsystem from each unit. Limiting Condition for Operation 3.8.2.c requires one qualified circuit between the offsite transmission network and the other unit's onsite Class 1E AC electrical power distribution subsystems needed to supply power to the CREVS and CRETS to be OPERABLE. Limiting Condition for Operation 3.8.2.d requires one DG from the other unit capable of supplying power to the required CREVS and CRETS to be OPERABLE, if the DG required by LCO 3.8.2.b is not capable of supplying power to the required CREVS and CRETS. These requirements, in conjunction with the requirements for the unit AC electrical power sources in LCO 3.8.2.a and LCO 3.8.2.b, ensure that offsite power is available to both trains and onsite power is available to one train of the CREVS and CRETS, when they are required to be OPERABLE by their respective LCOs (LCOs 3.7.8 and 3.7.9).
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-4 Revision 5 APPLICABILITY The AC sources required to be OPERABLE in MODEs 5 and 6 and during movement of irradiated fuel assemblies provide assurance that:  a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel assemblies;  b. Systems needed to mitigate a fuel handling accident are available;  c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are available; and  d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown condition or refueling condition.
The AC power requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.1. ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel assembly movement can occur in MODEs 1, 2, 3, or 4, the ACTIONS have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving irradiated fuel assemblies while in MODEs 5 or 6, LCO 3.0.3 would not specify any action. If moving irradiated fuel assemblies while in MODEs 1, 2, 3, or 4, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of irradiated fuel assemblies would not be sufficient reason to require a reactor shutdown.
The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude completion of actions to establish a safe conservative position. This clarification is provided to avoid stopping movement of irradiated fuel assemblies while in a non-conservative position based on compliance with the Required Actions.
A.1  An offsite circuit would be considered inoperable, if it was unavailable to one required ESF train. Although two trains may be required by LCO 3.8.10, the remaining train with AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-5 Revision 29  offsite power available may be capable of supporting sufficient required features to allow continuation of fuel movement. By the allowance of the option to declare required features inoperable, with no offsite power available, appropriate restrictions will be implemented in accordance with the affected required features LCO's ACTIONS.
A.2.1, A.2.2, A.2.3, B.1, B.2, and B.3  With the offsite circuit not available to all required trains, the option would still exist to declare all required features inoperable. Since this option may involve undesired administrative efforts, the allowance for sufficiently conservative actions is made. With the required DG inoperable, the minimum required diversity of AC power sources is not available. It is, therefore, required to suspend movement of irradiated fuel assemblies, and operations involving positive reactivity additions that could result in loss of the required SHUTDOWN MARGIN (SDM)
(MODE 5) or boron concentration (MODE 6). Suspending positive reactivity additions that could result in failure to meet the minimum SDM or boron concentration limit is required to assure continued safe operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that required in the RCS for the minimum SDM or refueling boron concentration. This may result in an overall reduction in RCS boron concentration, but provides an acceptable margin to maintaining subcritical operation. Introduction of temperature changes including temperature increases when operating with a positive moderator temperature coefficient (MTC) must also be evaluated to ensure they do not result in a loss of the required SDM. Suspension of these activities does not preclude completion of actions to establish a safe conservative condition.
These actions minimize the probability or the occurrence of postulated events. It is further required, to immediately initiate action to restore the required AC sources and to continue this action until restoration is accomplished in order to provide the necessary AC power to the unit safety systems.
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-6 Revision 19  The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The restoration of the required AC electrical power sources should be completed as quickly as possible in order to minimize the time during which the unit safety systems may be without sufficient power. Pursuant to LCO 3.0.6, the Electrical Distribution System's ACTIONS are not entered even if all AC sources to it are inoperable, resulting in de-energization. Therefore, the Required Actions of Condition A are modified by a Note to indicate that when Condition A is entered with no AC power to any required ESF bus, the ACTIONS for LCO 3.8.10 must be immediately entered. This Note allows Condition A to provide requirements for the loss of the offsite circuit, whether or not a train is de-energized. Limiting Condition for Operation 3.8.10 provides the appropriate restrictions for the situation involving a de-energized train. SURVEILLANCE SR 3.8.2.1 and SR 3.8.2.2 REQUIREMENTS Surveillance Requirements 3.8.2.1 and 3.8.2.2 require the performance of SRs from LCO 3.8.1 that are necessary for ensuring the OPERABILITY of the AC sources in other than MODEs 1, 2, 3, and 4. Surveillance Requirement 3.8.1.10 is not required to be met, since only one offsite circuit is required to be OPERABLE. Surveillance Requirements 3.8.1.4, 3.8.1.8, 3.8.1.13, and 3.8.1.15 are related to automatic starting of the DGs for an operating unit, which is not applicable for a shutdown unit. Surveillance Requirement 3.8.1.16 is related to LCO 3.8.2.c and 3.8.2.d AC sources, and is addressed by SR 3.8.2.2.
Surveillance Requirement 3.8.2.1 is modified by a Note. The Note lists SRs not required to be performed in order to preclude de-energizing a required 4.16 kV ESF bus or disconnecting a required offsite circuit during performance of SRs. With limited AC Sources available, a single event could compromise both the required circuit and the DG. It is the intent that these SRs must still be capable of being met, but actual performance is not required during periods when the DG and offsite circuit are required to be OPERABLE.
AC Sources-Shutdown B 3.8.2 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-7 Revision 19 Refer to the corresponding Bases for LCO 3.8.1 for a discussion of each SR. REFERENCES None Diesel Fuel Oil B 3.8.3 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.3  Diesel Fuel Oil BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-1 Revision 47 BACKGROUND The fuel oil storage tanks (FOSTs) contain sufficient capability for the DGs to operate one unit on accident loads and one unit on shutdown loads for seven days. This is discussed in Reference 1, Chapter 8. This onsite fuel oil capacity is sufficient to operate the DGs for longer than the time to replenish the onsite supply from outside sources.
Fuel oil is transferred from the storage tanks to the day tank by transfer pumps associated with each DG.
For proper operation of the standby DGs, it is necessary to ensure the proper quality of the fuel oil. Testing to check for water and sediment content, the kinematic viscosity, specific gravity (or API gravity), and impurity level (i.e., total particulates) ensures this quality.
The DG fuel oil system design at Calvert Cliffs supports four emergency DGs and other non-safety DGs. Three of the four emergency DGs, i.e., Nos. 1B, 2A, and 2B, are fueled from two FOSTs, i.e., FOST Nos. 11 and 21, and DG No. 1A is fueled from FOST No. 1A. Fuel Oil Storage Tank Nos. 1A and 21 are enclosed such as to be considered "tornado protected" but FOST No. 11 is not protected. As such, FOST No. 11 is not used as the primary source for the emergency DGs, but rather is used as a backup to support FOST No. 21, if it or the fuel oil it contains becomes degraded.
The operability of FOST No. 21 ensures that at least seven days of fuel oil will be available for operation of one DG on each unit, assuming one unit under accident conditions with a DG load of 3500 kW, and the opposite unit under normal shutdown conditions with a DG load of 3000 kW. Additionally, the operability of FOST No. 21 ensures that in the event of a loss of offsite power, concurrent with a loss of the non-bunkered FOST (tornado/missile event), at least seven days of fuel oil will be available for operation of one DG on each unit, assuming both DGs are loaded to 3000 kW. The operability of the FOST No. 1A ensures that at Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-2 Revision 47 least seven days of fuel oil is available to support operation of DG No. 1A at 4000 kW.
The operability of the fuel oil day tanks ensures that at least one hour of DG operation is available without makeup to the day tanks, assuming DG No. 1A is loaded to 4000 kW and DG Nos. 1B, 2A, and 2B are loaded to 3500 kW. APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, and Chapters 6 and 14, assume ESF systems are OPERABLE. The DGs are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that fuel, RCS, and containment design limits are not exceeded.
These limits are discussed in more detail in the Bases for LCO Section 3.2, 3.4, and 3.6.
Since diesel fuel oil supports the operation of the standby AC power sources, they satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3. LCO Fuel Oil Storage Tank No. 1A is required to contain a minimum of 49,500 gallons of available diesel fuel oil which is a sufficient supply to operate DG No. 1A with accident loads for seven days. Fuel Oil Storage Tank No. 21 is required to contain a minimum of 85,000 gallons of available diesel fuel oil which is a sufficient supply to operate one unit with accident loads and one unit with shutdown loads for seven days. It is also required to meet specific standards for quality. This requirement, in conjunction with an ability to obtain replacement supplies within seven days, supports the availability of DGs required to shut down the reactor and to maintain it in a safe condition for an AOO or a postulated DBA with loss of offsite power.
Diesel generator day tank fuel requirements, as well as transfer capability from the FOST to the day tank, are addressed in LCO 3.8.1 and LCO 3.8.2. APPLICABILITY The AC sources (LCO 3.8.1 and LCO 3.8.2) are required to ensure the availability of the required power to shut down the reactor and maintain it in a safe shutdown condition after an AOO or a postulated DBA. Since stored diesel fuel oil supports LCO 3.8.1 and LCO 3.8.2, stored diesel fuel oil Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-3 Revision 49  is required to be within limits when the associated DG is required to be OPERABLE.
For both Unit 1 and Unit 2, the FOST No. 1A associated DG is only DG No. 1A. For Unit 1, the FOST No. 21 associated DGs are DG Nos. 1B and 2B. For Unit 2, the FOST No. 21 associated DGs are DG Nos. 2A and 2B. Alignment does not affect the association of DG and FOST since the individual DG fuel oil day tank provides sufficient volume for the DG to perform its safety function while re-alignment is accomplished, if necessary. ACTIONS The ACTIONS Table is modified by a Note indicating that separate Condition entry is allowed for each DG. This is acceptable, since the Required Actions for each Condition provide appropriate compensatory actions for each inoperable DG subsystem. Complying with the Required Actions for one inoperable DG subsystem may allow for continued operation, and subsequent inoperable DG subsystem(s) are governed by separate Condition entry and application of associated Required Actions.
A.1, B.1, B.2, C.1, C.2, and C.3  In this Condition, the seven day fuel oil supply for a DG is not available. However, fuel oil volume reduction is limited to 6/7 of the required volume which will provide sufficient capacity to operate one DG on one unit on accident loads, and one DG on the other unit on shutdown loads for approximately six days. The fuel oil level ensuring a six day supply is 42,430 gallons (FOST No. 1A) and 72,860 gallons (FOST No. 11, FOST No. 21). These circumstances may be caused by events such as full load operation required after an inadvertent start while at minimum required level; or feed and bleed operations, which may be necessitated by increasing particulate levels or any number of other oil quality degradations. This restriction allows sufficient time for obtaining the requisite replacement volume and performing the analyses required prior to addition of fuel oil to the tank. A period of 48 hours is considered sufficient to complete restoration of the required level prior to declaring the DG inoperable.
This period is acceptable based on the remaining capacity (approximately six days), the fact that procedures will be Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-4 Revision 49 initiated to obtain replenishment, and the low probability of an event during this brief period.
Condition A addresses only FOST No. 1A which is "tornado protected" and which contains sufficient fuel for seven days of required operation of DG No. 1A. It supports both Unit 1 and Unit 2 equipment since DG No. 1A provides power for equipment which is shared by both units, e.g., the CREVS.
Condition B addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for seven days of required operation of two DGs. Fuel Oil Storage Tank No. 21 supports both Unit 1 and Unit 2 equipment, but Condition B is written for Unit 1 only to reflect the Unit 1 requirements for DG Nos. 1B and 2B. For an accident, Unit 1 requires either DG No. 1A or both DG Nos. 1B and 2B (since DG No. 2B powers equipment which is redundant to some equipment powered by DG No. 1A, e.g., CREVS). Since DG No. 1A is supported by FOST No. 1A and the redundant required equipment is powered by DG Nos. 1B and 2B which are supported by FOST No. 21, at least one full train of required equipment is supported by a "tornado protected" FOST even with an inoperable FOST or DG. Therefore, low fuel oil volume in FOST No. 21 can be supplemented by the fuel oil volume of an OPERABLE FOST No. 11 to assure the necessary volume. Required Action B.1 requires the combined volume of FOST No. 21 and an OPERABLE FOST No. 11 to be verified to be greater than 6/7 of the required volume within one hour. The Completion Time of one hour is consistent with the time needed to verify through administrative means that the backup FOST is OPERABLE.
Required Action B.2 requires the combined volume of FOST No. 21 and an OPERABLE FOST No. 11 to be  85,000 gallons within 48 hours. In addition, if FOST No. 21 is not restored and FOST No. 11 continues to be relied upon, Required Action B.2 must be repeated every 31 days. This effectively replaces the SR 3.8.3.1 periodic surveillance of available DG fuel oil volume for the inoperable FOST No. 21.
Since FOST No. 11 is not required by the LCO, FOST No. 11 may be considered OPERABLE only when the stored fuel oil meets SR 3.8.3.2 and SR 3.8.3.3, and is capable of being delivered to the required DG, i.e., the necessary piping and valves are capable of performing their safety function.
Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-5 Revision 2  Specific alignment to a particular FOST is not required since the individual DG fuel oil day tank provides sufficient volume for the DG to perform its safety function while re-alignment is accomplished, if necessary. Further, if any fuel oil in FOST No. 11 above the 33,000 gallons reserved for emergency DG use is credited for DG use, appropriate administrative controls must be in place to assure its retention for this purpose.
Condition C also addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for seven days of required operation of two DGs. Fuel Oil Storage Tank No. 21 supports both Unit 1 and Unit 2 equipment, but Condition C is written for Unit 2 only to reflect the Unit 2 requirements for DG Nos. 2A and 2B. For an accident, Unit 2 requires either DG No. 2B or both DG Nos. 1A and 2A (since DG No. 1A powers equipment which is redundant to some equipment powered by DG No. 2B, e.g., CREVS). Unlike Unit 1, at least one full train of required equipment is not supported by a "tornado protected" FOST with an inoperable FOST or DG since most of the redundant required equipment is powered by DG Nos. 2A and 2B which are both supported by FOST No. 21. Therefore, low fuel oil volume in FOST No. 21 can only be supplemented by the fuel oil volume of an OPERABLE FOST No. 11 to assure the necessary volume when the probability for a tornado is sufficiently low. This is reflected in Note 2 for Required Action C.2 which addresses the inoperability of FOST No. 21 from April 1 to September 30. During the time of low tornado probability, the Unit 2 requirements for the inoperability of FOST No. 21 are very similar to the Unit 1 requirements for inoperability of FOST No. 21. It is acceptable for the combined volume of FOST No. 11 and FOST No. 21 to be considered in providing 6/7 of the required volume for the 48 hours allowed by Required Action C.3.
Required Action C.1 requires the combined volume of FOST No. 21 and an OPERABLE FOST No. 11 to be verified to be greater than 6/7 of the required volume within one hour. Required Action C.3 then requires the volume of FOST No. 21 to be restored to within volume limits within 48 hours.
However, during tornado season, i.e., from April 1 to September 30, the fuel oil volume of FOST No. 11 is not allowed to be credited and the fuel oil seven day volume of Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-6 Revision 2 FOST No. 21 must be restored within two hours as indicated in Required Action C.2. Required Action C.2 is also modified by a Note such that it is only required during the operation of Unit 2 in MODEs 1, 2, 3, or 4 since the unit is already shutdown if it is in another MODE or condition. An OPERABLE FOST No. 11 is determined as described above in the discussion for Condition B.
D.1  This Condition is entered as a result of a failure to meet the acceptance criterion of SR 3.8.3.2. Normally, trending of particulate levels allows sufficient time to correct high particulate levels prior to reaching the limit of acceptability. Poor sample procedures (bottom sampling),
contaminated sampling equipment, and errors in laboratory analysis can produce failures that do not follow a trend.
Since the presence of particulates does not mean failure of the fuel oil to burn properly in the diesel engine, and particulate concentration is unlikely to change significantly between SR Frequency intervals, and proper engine performance has been recently demonstrated (within 31 days), it is prudent to allow a brief period prior to declaring the associated DG inoperable. The seven day Completion Time allows for further evaluation, resampling, and re-analysis of the DG fuel oil.
E.1  With the new fuel oil properties defined in the Bases for SR 3.8.3.2 not within the required limits, a period of 30 days is allowed for restoring the stored fuel oil properties to within the new fuel oil limits. This period provides sufficient time to test the stored fuel oil to determine that the new fuel oil, when mixed with previously stored fuel oil, remains acceptable, or restore the stored fuel oil properties to within the new fuel oil limits. This restoration may involve feed and bleed procedures, filtering, or combinations of these procedures. Even if a DG start and load was required during this time interval, and the fuel oil properties were outside limits, there is a high likelihood that the DG would still be capable of performing its intended function.
Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-7 Revision 55  F.1  With a Required Action and associated Completion Time not met, or one or more DGs with diesel fuel oil not within limits for reasons other than addressed by Conditions A through E, the associated DG may be incapable of performing its intended function and must be immediately declared inoperable.  "Associated DG(s)" are identified in the Applicability Bases. SURVEILLANCE SR 3.8.3.1 REQUIREMENTS This SR provides verification that there is an adequate inventory of fuel oil in the DG FOSTs to support one unit on accident loads and one unit on shutdown loads for seven days. The fuel oil level ensuring a seven day supply is 49,500 gallons (FOST No. 1A) and 85,000 gallons (FOST No. 21) when calculated in accordance with References 3 and
: 4. The required fuel oil storage volume is determined using the most limiting energy content of the stored fuel. Using the limiting energy content, the required diesel generator output and the corresponding fuel oil consumption rate, the onsite fuel oil storage volume required for seven days of operation can be determined. Surveillance Requirement 3.8.3.2 requires new fuel to be tested to verify that the energy content is within the range assumed in the diesel fuel oil consumption calculations. The seven day period is sufficient time to place the unit in a safe shutdown condition and to bring in replenishment fuel from an offsite location. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. SR 3.8.3.2  The tests listed below are a means of determining whether new fuel oil is of the appropriate grade (i.e., 2D and 2D low sulfur) and has not been contaminated with substances that would have an immediate, detrimental impact on diesel engine combustion. Note that further references to American Society for Testing Materials (ASTM) 2D fuel oil include both 2D and 2D low sulfur. If results from these tests are within acceptable limits, the fuel oil may be added to the Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-8 Revision 55 storage tanks without concern for contaminating the entire volume of fuel oil in the storage tanks. These tests are to be conducted prior to adding the new fuel to the storage tank(s), but in no case is the time between receipt of new fuel and conducting the tests to exceed 31 days. The tests, limits, and applicable ASTM Standards are as follows:  a. Sample the new fuel oil in accordance with Reference 3, ASTM D4057-1995;  b. Verify in accordance with the tests specified in Reference 3, ASTM D975-1996, that the sample has an absolute specific gravity at 60/60&deg;F of  0.8155 and  0.8871, or an American Petroleum Institute gravity at 60&deg;F of  28&deg; and  42&deg;, a kinematic viscosity at 40&deg;C of  1.9 centistokes and  4.1 centistokes, and a flash point  125&deg;F; and  c. Verify that the new fuel oil has  0.05% water and sediment (Reference 3, ASTM D975-1996).
Failure to meet any of the above limits is cause for rejecting the new fuel oil, but does not represent a failure to meet the LCO concern since the fuel oil is not added to the storage tanks.
Within 31 days following the initial new fuel oil sample, the fuel oil is analyzed to establish that the other properties specified in Reference 2, ASTM D975-1996, Table 1, are met for new fuel oil. The 31 day period is acceptable because the fuel oil properties of interest, even if they were not within stated limits, would not have an immediate effect on DG operation. This SR ensures the availability of high quality fuel oil for the DGs.
Fuel oil degradation during long-term storage shows up as an increase in particulate, due mostly to oxidation. The presence of particulate does not mean the fuel oil will not burn properly in a diesel engine. The particulate can cause fouling of filters and fuel oil injection equipment, however, that can cause engine failure.
Particulate concentrations should be determined by gravimetric analysis (based on ASTM D2276-1989) of total Diesel Fuel Oil B 3.8.3 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-9 Revision 55 particulate concentration in the fuel oil and has a limit of 10 mg/l. It is acceptable to obtain a field sample for subsequent laboratory testing in lieu of field testing.
Because the total stored fuel oil volume for DG Nos. 1B, 2A, and 2B is contained in two interconnected tanks, each tank must be considered and tested separately. There is a separate FOST for DG No. 1A.
The Frequency of this test takes into consideration fuel oil degradation trends that indicate that particulate concentration is unlikely to change significantly between Frequency intervals.
SR 3.8.3.3  Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in fuel oil and cause fouling, but all must have a water environment in order to survive. Removal of water from the fuel storage tanks eliminates the necessary environment for bacterial survival. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, and contaminated fuel oil, and from breakdown of the fuel oil by bacteria. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR provided the accumulated water is removed during performance of the surveillance test. REFERENCES 1. UFSAR  2. ASTM Standards
: 3. Regulatory Guide 1.137, "Fuel-Oil Systems for Standby Diesel Generators," October 1979  4. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4 DC Sources-Operating B 3.8.4 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.4  DC Sources-Operating BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-1 Revision 48 BACKGROUND The station DC sources provide the AC emergency power system with control power. It also provides both motive and control power to selected safety related equipment and preferred AC vital bus power (via inverters). As required by Reference 1, Appendix 1C, Criterion 39, the DC electrical power sources are designed to have sufficient independence, redundancy, and testability to perform their safety functions, assuming a single failure. The DC sources also conform to the recommendations of References 2 and 3.
The 125 VDC electrical power sources consist of four independent and redundant safety related Class 1E DC channels. Each channel consists of one 125 VDC battery, two associated battery charger for each battery, and all the associated control equipment and interconnecting cabling.
During normal operation, the 125 VDC load is powered from the battery chargers with the batteries floating on the system. In cases where momentary loads are greater than the charger capability, or a loss of normal power to the battery charger, the DC load is automatically powered from the station batteries.
The DC channels provide the control power for its associated Class 1E AC power load group, 4.16 kV switchgear, and 480 V load centers. The DC channels also provide a DC source to the inverters, which in turn power the AC vital buses.
The DC sources are described in more detail in the Bases for LCO 3.8.9 and for LCO 3.8.10.
Each battery has adequate storage capacity to carry the required load continuously for at least 2 hours and to carry load duty cycle as discussed in Reference 1, Chapter 8.
Each 125 VDC battery is separately housed in a ventilated room apart from its charger and distribution centers. Each channel is separated physically and electrically from the other channel to ensure that a single failure in one channel does not cause a failure in a redundant channel. There is DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-2 Revision 48 no sharing between redundant Class 1E channels, such as batteries, battery chargers, or distribution panels.
The batteries for DC channels are sized to produce required capacity at 80% of nameplate rating, corresponding to warranted capacity at end of life cycles and the 100% design demand. Battery size is based on 125% of required capacity. An average voltage of 2.13 V per cell, corresponds to a total minimum voltage output of 125 V per battery (128 V for the reserve battery) as discussed in Reference 1, Chapter 8.
The criteria for sizing large lead storage batteries are defined in Reference 4.
Each DC channel has ample power output capacity for the steady state operation of connected loads required during normal operation, while at the same time maintaining its battery bank fully charged. Each battery charger also has sufficient capacity to restore the battery from the design minimum charge to 95% of its fully charged state within 24 hours while supplying normal steady state loads discussed in Reference 1, Chapter 8. APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC channels provide a normal and emergency DC sources for the DGs, emergency auxiliaries, and control and switching during all MODEs of operation.
The OPERABILITY of the DC sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This includes maintaining the DC sources OPERABLE during accident conditions in the event of:  a. An assumed loss of all offsite AC power or all onsite AC power; and  b. A worst case single failure. The DC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3. LCO The DC channels, each channel consisting of one battery, two battery chargers, and the corresponding control equipment and interconnecting cabling supplying power to the DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-3 Revision 48 associated bus, are required to be OPERABLE to ensure the availability of the required power to shut down the reactor and maintain it in a safe condition after an AOO or a postulated DBA. Loss of any DC channel does not prevent the minimum safety function from being performed (Reference 1, Chapter 8). An OPERABLE DC channel requires the battery and one OPERABLE charger to be operating and connected to the associated DC bus(es). APPLICABILITY The DC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure safe unit operation and to ensure that:  a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of AOOs or abnormal transients; and  b. Adequate core cooling is provided, and containment integrity and other vital functions are maintained in the event of a postulated DBA.
The DC sources requirement for MODEs 5 and 6 are addressed in the Bases for LCO 3.8.5. ACTIONS A.1  Required Action A.1 requires the inoperable battery to be replaced by the reserve battery within four hours when one DC channel is inoperable due to an inoperable battery and the reserve battery is available. The reserve battery is a qualified battery that can replace and perform the required function of any inoperable battery. The four hour Completion Time is acceptable based on the capability of the reserve battery and the time it takes to replace the inoperable battery with the reserve battery while minimizing the time in this degraded condition.
B.1  Condition B represents one channel with a loss of ability to completely respond to an event, and a potential loss of ability to remain energized during normal operation.
Therefore, it is imperative that the operator's attention focus on stabilizing the unit, minimizing the potential for DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-4 Revision 48 complete loss of DC power to the affected channel. The 2 hour limit is consistent with the allowed time for an inoperable DC channel.
If one of the required DC channels is inoperable for reasons other than Condition A (e.g., inoperable battery, inoperable battery charger(s), or inoperable battery charger and associated inoperable battery), the remaining DC channels have the capacity to support a safe shutdown and to mitigate an accident condition. Since a subsequent worst case single failure would, however, result in the further loss of the 125 VDC channels with attendant loss of ESF functions, continued power operation should not exceed 2 hours. The 2 hour Completion Time is based on Reference 5 and reflects a reasonable time to assess unit status as a function of the inoperable DC channel and, if the DC channel is not restored to OPERABLE status, to prepare to effect an orderly and safe unit shutdown.
C.1 and C.2  If the inoperable DC channel cannot be restored to OPERABLE status within the required Completion Time, the unit must be brought to a MODE in which the LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within 6 hours and to MODE 5 within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems. The Completion Time to bring the unit to MODE 5 is consistent with the time required in Reference 5. SURVEILLANCE SR 3.8.4.1 REQUIREMENTS Verifying battery terminal voltage while on float charge helps to ensure the effectiveness of the charging system and the ability of the batteries to perform their intended function. Float charge is the condition in which the charger is supplying connected loads and the continuous charge required to overcome the internal losses of a battery and maintain the battery in a fully charged state. The voltage requirements are based on the nominal design voltage of the battery (2.13 V per cell average) and are consistent DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-5 Revision 55  with Reference 6 and the initial state of charge conditions assumed in the battery sizing calculations. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.4.2  Visual inspection to detect corrosion of the battery cells and connections, or measurement of the resistance of each cell to cell and terminal connection, provides an indication of physical damage or abnormal deterioration that could potentially degrade battery performance.
The limits established for this SR must be no more than 20% above the resistance as measured during installation or not above the ceiling value established by the manufacturer.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.4.3  Visual inspection of the battery cells, cell plates, and battery racks provides an indication of physical damage or abnormal deterioration that could potentially degrade battery performance.
The presence of physical damage or deterioration does not necessarily represent a failure of this SR, provided an evaluation determines that the physical damage or deterioration  does not affect the OPERABILITY of the battery (its ability to perform its design function).
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. SR 3.8.4.4 and SR 3.8.4.5  Visual inspection and resistance measurements of cell to cell and terminal connections provide an indication of physical damage or abnormal deterioration that could indicate degraded battery condition. The anti-corrosion material is used to help ensure good electrical connections and to reduce terminal deterioration. The visual inspection for corrosion is not intended to require removal of and DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-6 Revision 55 inspection under each terminal connection. The removal of visible corrosion is a preventive maintenance SR. The presence of visible corrosion does not necessarily represent a failure of this SR provided visible corrosion is removed during performance of SR 3.8.4.4. The connection resistance limits for SR 3.8.4.5 shall be no more than 20% above the resistance as measured during installation, or not above the ceiling value established by the manufacturer.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.4.6  This SR requires that each battery charger be capable of supplying 400 amps and 125 V for  30 minutes. These requirements are based on the output rating of the chargers (Reference 1, Chapter 8). According to Reference 7, the battery charger supply is required to be based on the largest combined demands of the various steady state loads and the charging capacity to restore the battery from the design minimum charge state to the fully charged state, irrespective of the status of the unit during these demand occurrences. The minimum required amperes and duration ensures that these requirements can be satisfied. The test is performed while supplying normal DC loads or an equivalent or greater dummy load.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.4.7  A battery service test is a special test of battery capability, as found and with the associated battery charger disconnected, to satisfy the design requirements (battery duty cycle) of the DC source. The test duration must be  2 hours and battery terminal voltage must be maintained  105 volts during the test. The discharge rate and test length should correspond to the design accident load (duty) cycle requirements as specified in Reference 1, Chapter 8.
A dummy load simulating the emergency loads of the design DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-7 Revision 55 duty cycle may be used in lieu of the actual emergency loads.
A dummy load simulating the emergency loads of the design DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-7 Revision 55 duty cycle may be used in lieu of the actual emergency loads.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. This SR is modified by a Note. The Note allows the performance of a modified performance discharge test in lieu of a service test. This substitution is acceptable because a modified performance discharge test represents a more severe test of battery capacity than SR 3.8.4.7.
SR 3.8.4.8  A battery performance discharge test is a test of constant current capacity of a battery after having been in service, to detect any change in the capacity determined by the acceptance test. The test is intended to determine overall battery degradation due to age and usage.
A battery modified performance discharge test is a simulated duty cycle consisting of just two rates; the one minute rate published for the battery or the largest current load of the duty cycle, followed by the test rate employed for the performance discharge test, both of which envelope the duty cycle of the service test. Since the ampere-hours removed by a rated one minute discharge represents a very small portion of the battery capacity, the test rate can be changed to that for the performance test without compromising the results of the performance discharge test.
The battery terminal voltage for the modified performance discharge test should remain above the minimum battery terminal voltage specified in the battery performance discharge test for the duration of time equal to that of the performance discharge test. A modified performance discharge test is a test of the battery capacity and its ability to provide a high rate, short duration load (usually the highest rate of the duty cycle). This will often confirm the battery's ability to meet the critical period of the load duty cycle, in addition to determining its percentage of rated capacity. Initial conditions for the modified performance discharge test should be identical to those specified for a service test.
DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-8 Revision 55 Either the battery performance discharge test or the modified performance discharge test is acceptable for satisfying SR 3.8.4.8; however, only the modified performance discharge test may be used to satisfy SR 3.8.4.8 while satisfying the requirements of SR 3.8.4.7 at the same time. The acceptance criteria for this SR are consistent with References 6 and 4. These references recommend that the battery be replaced if its capacity is below 80% of the manufacturer rating. A capacity of 80% shows that the battery rate of deterioration is increasing, even if there is ample capacity to meet the load requirements.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. If the battery shows degradation, or if the battery has reached 85% of its expected life and capacity is < 100% of the manufacturer's rating, the SR Frequency is reduced to 12 months. However, if the battery shows no degradation but has reached 85% of its expected life, the SR Frequency is only reduced to 24 months for batteries that retain capacity  100% of the manufacturer's rating. Degradation is indicated, according to Reference 6, when the battery capacity drops by more than 10% relative to its capacity on the previous performance test or when it is  10% below the manufacturer's rating. These Frequencies are consistent with the recommendations in Reference 6. REFERENCES 1. UFSAR  2. Safety Guide 6, Revision 0, "Independence Between Redundant Standby (Onsite) Power Sources and Between Their Distribution Systems, August 10, 1971  3. IEEE Standard 308-1974, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating Stations"  4. IEEE Standard 485-1983, "Recommended Practice for Sizing Large Lead Storage Batteries for Generating Stations and Substations (ANSI)," June 1983  5. Regulatory Guide 1.93, "Availability of Electric Power Sources," December 1974 DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-9 Revision 55  6. IEEE Standard 450-1995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-Acid Batteries for Stationary Applications," May 1995  7. Regulatory Guide 1.32, Revision 2, "Criteria for Safety-Related Electric Power Systems for Nuclear Power Plants," February 1977 DC Sources-Shutdown B 3.8.5 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.5  DC Sources-Shutdown BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-1 Revision 2 BACKGROUND A description of the DC sources is provided in the Bases for LCO 3.8.4. APPLICABLE The initial conditions of DBA; and transient analyses in  SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC sources provide normal and emergency DC for the DGs, emergency auxiliaries, and control and switching during all MODEs of operation. The OPERABILITY of the DC subsystems is consistent with the initial assumptions of the accident analyses and the requirements for the supported systems' OPERABILITY.
The OPERABILITY of the minimum DC sources during MODEs 5 and 6 and during movement of irradiated fuel assemblies ensures that:  a. The unit can be maintained in the shutdown or refueling condition for extended periods;  b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status; and  c. Adequate DC sources are provided to mitigate events postulated during shutdown, such as a fuel handling accident. The DC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3. LCO The DC channels, each channel consisting of one battery, one battery charger, and the corresponding control equipment and interconnecting cabling within the channel, are required to be OPERABLE to support required trains of distribution systems required OPERABLE by LCO 3.8.10. This ensures the availability of sufficient DC sources to operate the unit in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents).
DC Sources-Shutdown B 3.8.5 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-2 Revision 29 APPLICABILITY The DC sources required to be OPERABLE in MODEs 5 and 6, and during movement of irradiated fuel assemblies provide assurance that:  a. Required features needed to mitigate a fuel handling accident are available;  b. Required features necessary to mitigate the effects of events that can lead to core damage during shutdown are available; and  c. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown condition or refueling condition.
The DC channel requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.4. ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODE 5 or 6. However, since irradiated fuel assembly movement can occur in MODE 1, 2, 3, or 4, the ACTIONS have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving irradiated fuel assemblies while in MODE 5 or 6, LCO 3.0.3 would not specify any action. If moving irradiated fuel assemblies while in MODE 1, 2, 3, or 4, the fuel movement is independent of reactor operations. Therefore, in either case, the inability to suspend movement of irradiated fuel assemblies would not be sufficient reason to require a reactor shutdown.
The ACTIONS have been modified by a second Note stating that performance of REQUIRED ACTIONS shall not preclude completion of actions to establish a safe conservative position. This clarification is provided to avoid stopping movement of irradiated fuel assemblies while in a non-conservative position based on compliance with the REQUIRED ACTIONS.
A.1, A.2.1, A.2.2, and A.2.3  If two trains are required per LCO 3.8.10, the remaining train with DC power available may be capable of supporting sufficient systems to allow continuation of movement of irradiated fuel assemblies. By allowing the option to declare required features inoperable with the associated DC DC Sources-Shutdown B 3.8.5 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-3 Revision 29 power source(s) inoperable, appropriate restrictions will be implemented in accordance with the affected required features LCO ACTIONS. In many instances, this option may involve undesired administrative efforts. Therefore, the allowance for sufficiently conservative actions is made (i.e., to suspend movement of irradiated fuel assemblies and operations involving positive reactivity additions). The Required Action to suspend positive reactivity additions does not preclude actions to maintain or increase reactor vessel inventory, provided the required SDM is maintained.
Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.
These actions minimize probability of the occurrence of postulated events. It is further required to immediately initiate action to restore the required DC channels and to continue this action until restoration is accomplished in order to provide the necessary DC source to the unit safety systems.
The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The restoration of the required DC channels should be completed as quickly as possible in order to minimize the time during which the unit safety systems may be without sufficient power. SURVEILLANCE SR 3.8.5.1 REQUIREMENTS Surveillance Requirement 3.8.5.1 states that surveillance tests required by SR 3.8.4.1 through SR 3.8.4.8 are applicable in these MODEs. See the corresponding Bases for LCO 3.8.4 for a discussion of each SR.
This SR is modified by a Note. The reason for the Note is to preclude requiring the OPERABLE DC sources from being discharged below their capability to provide the required power supply or otherwise rendered inoperable during the performance of SRs. It is the intent that these SRs must still be capable of being met, but actual performance is not required.
DC Sources-Shutdown B 3.8.5 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-4 Revision 2 REFERENCES 1. UFSAR Battery Cell Parameters B 3.8.6 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.6  Battery Cell Parameters BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-1 Revision 2 BACKGROUND This LCO delineates the limits on electrolyte temperature, level, individual cell float voltage (ICV), and specific gravity for the DC power source batteries. A discussion of these batteries and their OPERABILITY requirements is provided in the Bases for LCO 3.8.4 and LCO 3.8.5. APPLICABLE The initial conditions of DBA and transient analyses in  SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The DC sources provide normal and emergency DC electrical power for the DGs, emergency auxiliaries, and control and switching during all MODEs of operation.
The OPERABILITY of the DC channels is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit, as discussed in the Bases for LCO 3.8.4 and LCO 3.8.5.
Battery cell parameters satisfy Criterion 3 of the NRC Policy Statement. LCO Battery cell parameters must remain within acceptable limits to ensure availability of the required DC power to shut down the reactor and maintain it in a safe condition after an AOO or a postulated DBA. Electrolyte limits are conservatively established, allowing continued DC electrical system function even with Category A or B limits not met. APPLICABILITY The battery parameters are required solely for the support of the associated DC electrical power subsystems.
Therefore, battery electrolyte is only required when the DC power source is required to be OPERABLE. Refer to the Applicability discussion in the Bases for LCO 3.8.4 and LCO 3.8.5. ACTIONS The Actions Table is modified by a Note which indicates that separate Condition entry is allowed for each battery. This is acceptable, since the Required Actions for each Condition provide appropriate compensatory actions for each inoperable DC channel. Complying with the Required Actions for one Battery Cell Parameters B 3.8.6 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-2 Revision 56  inoperable DC channel may allow for continued operation, and subsequent inoperable DC subsystem(s) are governed by separate Condition entry and application of associated Required Actions.
A.1, A.2, and A.3 With parameters of one or more cells, in one or more batteries, not within limits (i.e., Category A limits not met or Category B limits not met) but within Category C limits specified in Table 3.8.6-1, the battery is degraded but there is still sufficient capacity to perform the intended function. Therefore, the affected battery is not required to be considered inoperable solely as a result of Category A or B limits not met, and continued operation is permitted for a limited period.
The pilot cell electrolyte level and ICV are required to be verified to meet the Category C limits within one hour (Required Action A.1). This check will provide a quick indication of the status of the remainder of the battery cells. One hour provides time to inspect the electrolyte level and to confirm the ICV of the pilot cells. One hour is considered a reasonable amount of time to perform the required verification.
Verification that the Category C limits are met (Required Action A.2) provides assurance that during the time needed to restore the parameters to the Category A and B limits, the battery will still be capable of performing its intended function. A period of 24 hours is allowed to complete the initial verification because specific gravity measurements must be obtained for each connected cell. Taking into consideration both the time required to perform the required verification and the assurance that the battery cell parameters are not severely degraded, this time is considered reasonable. The verification is repeated at seven day intervals until the parameters are restored to Category A and B limits. This periodic verification is consistent with the normal Frequency of pilot cell Surveillances.
Battery Cell Parameters B 3.8.6 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-3 Revision 55  Continued operation prior to declaring the affected batteries inoperable is permitted for 31 days before battery cell parameters must be restored to within Category A and B limits. With the consideration that, while battery capacity is degraded, sufficient capacity exists to perform the intended function and to allow time to fully restore the battery cell parameters to normal limits, this time is acceptable prior to declaring the battery inoperable.
B.1 With one or more batteries with one or more battery cell parameters outside the Category C limit for any connected cell, sufficient capacity to supply the maximum expected load requirement is not assured and the corresponding DC channel must be declared inoperable. Additionally, other potentially extreme conditions, such as any Required Action of Condition A and associated Completion Time not met, or average electrolyte temperature of representative cells < 69&deg;F, are also cause for immediately declaring the associated DC channel inoperable. SURVEILLANCE SR 3.8.6.1 REQUIREMENTS This SR verifies that Category A battery cell parameters are consistent with Reference 2, which recommends regular battery inspections including voltage, specific gravity, and electrolyte temperature of pilot cells.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
SR 3.8.6.2 The inspection of specific gravity and voltage is consistent with Reference 2.
This SR is modified by a Note. The Note allows the performance of a modified performance discharge test in lieu
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
 
Battery Cell Parameters B 3.8.6 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-4 Revision
of a service test. This substitution is acceptable because
 
a modified performance discharge test represents a more
 
severe test of battery capacity than SR 3.8.4.7.
 
SR 3.8.4.8  A battery performance discharge test is a test of constant current capacity of a battery after having been in service,
 
to detect any change in the capacity determined by the
 
acceptance test. The test is intended to determine overall
 
battery degradation due to age and usage.
 
A battery modified performance discharge test is a simulated duty cycle consisting of just two rates; the one minute rate
 
published for the battery or the largest current load of the
 
duty cycle, followed by the test rate employed for the
 
performance discharge test, both of which envelope the duty
 
cycle of the service test. Since the ampere-hours removed
 
by a rated one minute discharge represents a very small
 
portion of the battery capacity, the test rate can be
 
changed to that for the performance test without
 
compromising the results of the performance discharge test. 
 
The battery terminal voltage for the modified performance
 
discharge test should remain above the minimum battery
 
terminal voltage specified in the battery performance
 
discharge test for the duration of time equal to that of the
 
performance discharge test.
A modified performance discharge test is a test of the battery capacity and its ability to provide a high rate,
 
short duration load (usually the highest rate of the duty
 
cycle). This will often confirm the battery's ability to
 
meet the critical period of the load duty cycle, in addition
 
to determining its percentage of rated capacity. Initial
 
conditions for the modified performance discharge test
 
should be identical to those specified for a service test.
DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-8 Revision 55 Either the battery performance discharge test or the modified performance discharge test is acceptable for
 
satisfying SR 3.8.4.8; however, only the modified
 
performance discharge test may be used to satisfy SR 3.8.4.8
 
while satisfying the requirements of SR 3.8.4.7 at the same
 
time. The acceptance criteria for this SR are consistent with References 6 and 4. These references recommend that the
 
battery be replaced if its capacity is below 80% of the
 
manufacturer rating. A capacity of 80% shows that the
 
battery rate of deterioration is increasing, even if there
 
is ample capacity to meet the load requirements.
 
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. If the battery shows degradation, or if the battery has reached 85% of its
 
expected life and capacity is < 100% of the manufacturer's
 
rating, the SR Frequency is reduced to 12 months. However,
 
if the battery shows no degradation but has reached 85% of
 
its expected life, the SR Frequency is only reduced to 24 months for batteries that retain capacity  100% of the manufacturer's rating. Degradation is indicated, according
 
to Reference 6, when the battery capacity drops by more than
 
10% relative to its capacity on the previous performance test or when it is  10% below the manufacturer's rating.
These Frequencies are consistent with the recommendations in Reference 6.
REFERENCES 1. UFSAR  2. Safety Guide 6, Revision 0, "Independence Between Redundant Standby (Onsite) Power Sources and Between
 
Their Distribution Systems, August 10, 1971  3. IEEE Standard 308-1974, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating
 
Stations"  4. IEEE Standard 485-1983, "Recommended Practice for Sizing Large Lead Storage Batteries for Generating
 
Stations and Substations (ANSI)," June 1983  5. Regulatory Guide 1.93, "Availability of Electric Power Sources," December 1974 DC Sources-Operating B 3.8.4 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-9 Revision 55  6. IEEE Standard 450-1995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-
 
Acid Batteries for Stationary Applications," May 1995  7. Regulatory Guide 1.32, Revision 2, "Criteria for Safety-Related Electric Power Systems for Nuclear Power Plants," February 1977 DC Sources-Shutdown B 3.8.5 B 3.8  ELECTRICAL POWER SYSTEMS
 
B 3.8.5  DC Sources-Shutdown
 
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-1 Revision 2 BACKGROUND A description of the DC sources is provided in the Bases for LCO 3.8.4
. APPLICABLE The initial conditions of DBA; and transient analyses in SAFETY ANALYSES Reference 1
, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC sources provide normal and emergency DC for the DGs, emergency auxiliaries, and control and


480 Volt Emergency Bus No. 11A (Unit 1), No. 21A (Unit 2)  
480 Volt Emergency Bus No. 11A (Unit 1), No. 21A (Unit 2)  
Line 363: Line 3,712:
125 Volt DC Bus No. 11 (Unit 1 and Unit 2)  
125 Volt DC Bus No. 11 (Unit 1 and Unit 2)  


125 Volt DC Bus No. 12 (Unit 1 and Unit 2) 125 Volt DC Bus No. 21 (Unit 1 and Unit 2) 125 Volt DC Bus No. 22 (Unit 1 and Unit 2)  (1) Each bus of the AC and DC Electrical Power Distribution System is a subsystem.
125 Volt DC Bus No. 12 (Unit 1 and Unit 2) 125 Volt DC Bus No. 21 (Unit 1 and Unit 2)  
Distribution Systems-Shutdown B 3.8.10 B 3.8  ELECTRICAL POWER SYSTEMS B 3.8.10  Distribution Systems-Shutdown BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-1 Revision 5 BACKGROUND A description of the AC, DC, and AC vital bus Electrical Power Distribution Systems is provided in the Bases for LCO 3.8.9. The list of all required Distribution Systems-Shutdown is presented in Table B 3.8.10-1. APPLICABLE The initial conditions of a DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC, DC, and AC vital bus Electrical Power Distribution Systems are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.
 
The OPERABILITY of the AC, DC, and AC vital bus Electrical Power Distribution System is consistent with the initial assumptions of the accident analyses and the requirements for the supported systems' OPERABILITY.
125 Volt DC Bus No. 22 (Unit 1 and Unit 2)  
The OPERABILITY of the minimum AC, DC, and AC vital bus electrical power distribution subsystems during MODEs 5 and 6, and during movement of irradiated fuel assemblies, ensures that:  a. The unit can be maintained in the shutdown or refueling condition for extended periods;  b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status; and  c. Adequate power is provided to mitigate events postulated during shutdown, such as a fuel handling accident.
  (1) Each bus of the AC and DC Electrical Power Distribution System is a subsystem.  
The AC and DC Electrical Power Distribution Systems satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.
 
Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-2 Revision 5 LCO Various combinations of subsystems, equipment, and components are required OPERABLE by other LCOs, depending on the specific unit condition. Implicit in those requirements is the required OPERABILITY of necessary support required features. This LCO explicitly requires energization of the portions of the electrical distribution system necessary to support OPERABILITY of required systems, equipment, and components-all specifically addressed in each LCO and implicitly required via the definition of OPERABILITY.
Distribution Systems-Shutdown B 3.8.10 B 3.8  ELECTRICAL POWER SYSTEMS  
Maintaining these portions of the distribution system energized ensures the availability of sufficient power to operate the unit in a safe manner to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents). APPLICABILITY The AC and DC electrical power distribution subsystems required to be OPERABLE in MODEs 5 and 6, and during movement of irradiated fuel assemblies, provide assurance that:  a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel in the core;  b. Systems needed to mitigate a fuel handling accident are available;  c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are available; and  d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown condition and refueling condition. The AC, DC, and AC vital bus electrical power distribution subsystem requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.9. ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel assembly movement can occur in MODEs 1, 2, 3, or 4, the ACTIONS have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving irradiated fuel assemblies while in MODEs 5 or 6, LCO 3.0.3 would not specify any Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-3 Revision 29  action. If moving irradiated fuel assemblies while in MODEs 1, 2, 3, or 4, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of irradiated fuel assemblies would not be sufficient reason to require a reactor shutdown. The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude completion of actions to establish a safe conservative position. This clarification is provided to avoid stopping movement of irradiated fuel assemblies while in a non-conservative position based on compliance with the Required Actions.
 
A.1, A.2.1, A.2.2, A.2.3, and A.2.4  Although redundant required features may require redundant trains of electrical power distribution subsystems to be OPERABLE, one OPERABLE distribution subsystem train may be capable of supporting sufficient required features to allow continuation of movement of irradiated fuel assemblies. By allowing the option to declare required features associated with an inoperable distribution subsystem inoperable, appropriate restrictions are implemented in accordance with the affected distribution subsystems LCO's Required Actions.
B 3.8.10  Distribution Systems-Shutdown  
In many instances, this option may involve undesired administrative efforts. Therefore, the allowance for sufficiently conservative actions is made [i.e., to suspend movement of irradiated fuel assemblies, and operations involving positive reactivity additions that could result in loss of the required SDM (MODE 5) or boron concentration (MODE 6)]. Suspending positive reactivity additions that could result in failure to meet the minimum SDM or boron concentration limit is required to assure continued safe operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that required in the RCS for the minimum SDM or refueling boron concentration. This may result in an overall reduction in RCS boron concentration, but provides an acceptable margin to maintaining subcritical operation. Introduction of temperature changes including temperature increases when operating with a positive MTC must also be evaluated to ensure they do not result is a loss of the required SDM.
 
Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-4 Revision 55   Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.
BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-1 Revision 5 BACKGROUND A description of the AC, DC, and AC vital bus Electrical Power Distribution Systems is provided in the Bases for  
These actions minimize the probability of the occurrence of postulated events. It is further required to immediately initiate action to restore the required AC and DC electrical power distribution subsystems and to continue this action until restoration is accomplished in order to provide the necessary power to the unit safety systems.
 
Notwithstanding performance of the above conservative Required Actions, a required shutdown cooling (SDC) subsystem may be inoperable. In this case, Required Actions A.2.1 through A.2.3 do not adequately address the concerns relating to coolant circulation and heat removal.
LCO 3.8.9.
Pursuant to LCO 3.0.6, the SDC ACTIONS would not be entered.
The list of all required Distribution Systems-Shutdown is presented in Table B 3.8.10-1.
Therefore, Required Action A.2.4 is provided to direct declaring SDC inoperable, which results in taking the appropriate SDC actions. The SDC subsystem(s) declared inoperable and not in operation as a result of not meeting this LCO, may be used if needed. However, the appropriate actions are still required to be taken.
APPLICABLE The initial conditions of a DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC, DC, and AC vital bus Electrical Power  
The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The restoration of the required distribution subsystems should be completed as quickly as possible in order to minimize the time the unit safety systems may be without power. SURVEILLANCE SR 3.8.10.1 REQUIREMENTS This SR verifies that the AC, DC, and AC vital bus Electrical Power Distribution System is functioning properly, with all the buses energized. The verification of proper voltage availability on the buses ensures that the required power is readily available for motive as well as control functions for critical system loads connected to these buses. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. REFERENCES 1. UFSAR Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-5 Revision 55 Table B 3.8.10-1 (page 1 of 1) AC and DC Electrical Power Distribution Systems 1 4160 Volt Emergency Bus 1 480 Volt Emergency Bus  
 
Distribution Systems are designed to provide sufficient  
 
capacity, capability, redundancy, and reliability to ensure  
 
the availability of necessary power to ESF systems so that  
 
the fuel, RCS, and containment design limits are not  
 
exceeded.  
 
The OPERABILITY of the AC, DC, and AC vital bus Electrical Power Distribution System is consistent with the initial  
 
assumptions of the accident analyses and the requirements  
 
for the supported systems' OPERABILITY.  
 
The OPERABILITY of the minimum AC, DC, and AC vital bus electrical power distribution subsystems during MODEs 5  
 
and 6, and during movement of irradiated fuel assemblies,  
 
ensures that:  a. The unit can be maintained in the shutdown or refueling condition for extended periods;  b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status; and  c. Adequate power is provided to mitigate events postulated during shutdown, such as a fuel handling  
 
accident.  
 
The AC and DC Electrical Power Distribution Systems satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.  
 
Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-2 Revision 5 LCO Various combinations of subsystems, equipment, and components are required OPERABLE by other LCOs, depending on  
 
the specific unit condition. Implicit in those requirements  
 
is the required OPERABILITY of necessary support required  
 
features. This LCO explicitly requires energization of the  
 
portions of the electrical distribution system necessary to support OPERABILITY of required systems, equipment, and components-all specifically addressed in each LCO and  
 
implicitly required via the definition of OPERABILITY.  
 
Maintaining these portions of the distribution system energized ensures the availability of sufficient power to  
 
operate the unit in a safe manner to mitigate the  
 
consequences of postulated events during shutdown (e.g., fuel handling accidents).
APPLICABILITY The AC and DC electrical power distribution subsystems required to be OPERABLE in MODEs 5 and 6, and during  
 
movement of irradiated fuel assemblies, provide assurance  
 
that:  a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel in the core;  b. Systems needed to mitigate a fuel handling accident are available;  c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are  
 
available; and  d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown  
 
condition and refueling condition.
The AC, DC, and AC vital bus electrical power distribution subsystem requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.9.
ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel  
 
assembly movement can occur in MODEs 1, 2, 3, or 4, the  
 
ACTIONS have been modified by a Note stating that LCO 3.0.3  
 
is not applicable. If moving irradiated fuel assemblies  
 
while in MODEs 5 or 6, LCO 3.0.3 would not specify any Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-3 Revision 29  action. If moving irradiated fuel assemblies while in MODEs 1, 2, 3, or 4, the fuel movement is independent of  
 
reactor operations. Therefore, in either case, inability to  
 
suspend movement of irradiated fuel assemblies would not be  
 
sufficient reason to require a reactor shutdown.
The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude  
 
completion of actions to establish a safe conservative  
 
position. This clarification is provided to avoid stopping  
 
movement of irradiated fuel assemblies while in a non-
 
conservative position based on compliance with the Required  
 
Actions.  
 
A.1, A.2.1, A.2.2, A.2.3, and A.2.4  Although redundant required features may require redundant trains of electrical power distribution subsystems to be  
 
OPERABLE, one OPERABLE distribution subsystem train may be  
 
capable of supporting sufficient required features to allow  
 
continuation of movement of irradiated fuel assemblies. By allowing the option to declare required features associated  
 
with an inoperable distribution subsystem inoperable,  
 
appropriate restrictions are implemented in accordance with  
 
the affected distribution subsystems LCO's Required Actions.
 
In many instances, this option may involve undesired  
 
administrative efforts. Therefore, the allowance for  
 
sufficiently conservative actions is made [i.e., to suspend movement of irradiated fuel assemblies, and operations  
 
involving positive reactivity additions that could result in  
 
loss of the required SDM (MODE 5) or boron concentration  
 
(MODE 6)]. Suspending positive reactivity additions that  
 
could result in failure to meet the minimum SDM or boron  
 
concentration limit is required to assure continued safe  
 
operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that required in the RCS for the minimum SDM or refueling boron  
 
concentration. This may result in an overall reduction in  
 
RCS boron concentration, but provides an acceptable margin  
 
to maintaining subcritical operation. Introduction of  
 
temperature changes including temperature increases when  
 
operating with a positive MTC must also be evaluated to  
 
ensure they do not result is a loss of the required SDM.
Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-4 Revision 55 Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.
 
These actions minimize the probability of the occurrence of  
 
postulated events. It is further required to immediately  
 
initiate action to restore the required AC and DC electrical power distribution subsystems and to continue this action until restoration is accomplished in order to provide the  
 
necessary power to the unit safety systems.  
 
Notwithstanding performance of the above conservative Required Actions, a required shutdown cooling (SDC)  
 
subsystem may be inoperable. In this case, Required  
 
Actions A.2.1 through A.2.3 do not adequately address the  
 
concerns relating to coolant circulation and heat removal.
 
Pursuant to LCO 3.0.6, the SDC ACTIONS would not be entered.
 
Therefore, Required Action A.2.4 is provided to direct  
 
declaring SDC inoperable, which results in taking the  
 
appropriate SDC actions. The SDC subsystem(s) declared  
 
inoperable and not in operation as a result of not meeting  
 
this LCO, may be used if needed. However, the appropriate  
 
actions are still required to be taken.  
 
The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The  
 
restoration of the required distribution subsystems should  
 
be completed as quickly as possible in order to minimize the time the unit safety systems may be without power.
SURVEILLANCE SR 3.8.10.1 REQUIREMENTS This SR verifies that the AC, DC, and AC vital bus Electrical Power Distribution System is functioning  
 
properly, with all the buses energized. The verification of  
 
proper voltage availability on the buses ensures that the  
 
required power is readily available for motive as well as  
 
control functions for critical system loads connected to  
 
these buses. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REFERENCES 1. UFSAR  
 
Distribution Systems-Shutdown B 3.8.10 BASES  CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-5 Revision 55 Table B 3.8.10-1 (page 1 of 1)
AC and DC Electrical Power Distribution Systems 1 4160 Volt Emergency Bus 1 480 Volt Emergency Bus  


2 120 Volt AC Vital Busses  
2 120 Volt AC Vital Busses  

Revision as of 13:29, 29 June 2018

Calvert Cliffs, Units 1 and 2 - Bases 3.8, Electric Power Systems, Revisions; B 3.8.1-1 Through B 3.8.10-5
ML17261A235
Person / Time
Site: Calvert Cliffs  Constellation icon.png
Issue date: 07/19/2017
From:
Exelon Generation Co
To:
Office of Nuclear Reactor Regulation
Shared Package
ML17261A190 List:
References
Download: ML17261A235 (89)
v • d • e


Text

AC Sources-Operating B 3.8.1 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.1 AC Sources-Operating

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-1 Revision 5 BACKGROUND The AC sources to the Class 1E Electrical Power Distribution System consist of the offsite power sources starting at the 4.16 kV engineered safety feature (ESF) buses and the onsite diesel generators (DGs). As required by Reference 1, General Design Criteria (GDC) 17, the design of the AC electrical power system has sufficient independence and

redundancy to ensure a source to the ESFs assuming a single

failure.

The Class 1E AC Distribution System is divided into two redundant load groups so that the loss of one group does not

prevent the minimum safety functions from being performed.

Each load group has connections to two offsite sources and

one Class 1E DG at its 4.16 kV 1E bus.

Offsite power is supplied to the 500 kV Switchyard from the transmission network by three 500 kV transmission lines.

Two electrically and physically separated circuits supply

electric power from the 500 kV Switchyard to two 13 kV buses

and then to the two 4.16 kV ESF buses. A third 69 kV/

13.8 kV offsite power source that may be manually connected

to either 13 kV bus is available from the Southern Maryland

Electric Cooperative (SMECO). When appropriate, the

Engineered Safety Feature Actuation System (ESFAS) loss of

coolant incident and shutdown sequencer for the 4.16 kV bus

will sequence loads on the bus after the 69 kV/13.8 kV SMECO

line has been manually placed in service. The SMECO offsite

power source will not be used to carry loads for an

operating unit. A detailed description of the offsite power

network and the circuits to the Class 1E ESF buses, is found

in Reference 2, Chapter 8.

The required offsite power circuits are the two 13 kV buses (Nos. 11 and 21) which can be powered by: a. Two 500 kV lines, two 500 kV buses each of which have connections to a 500 kV line that does not pass

through the other 500 kV bus and both P-13000

(500 kV/14 kV) transformers; or AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-2 Revision 12 b. One 500 kV line, one 500 kV bus, and one associated P-13000 (500 kV/13.8 kV) transformer, and the 69 kV/

13.8 kV SMECO line. When the SMECO line is credited

as one of the qualified offsite circuits, the

disconnect from the SMECO line to Warehouse No. 1 must

be open.

In addition, each offsite circuit includes the cabling to and from a 13.8/13.8 kV voltage regulator, 13.8/4.16 kV unit service transformer, and one of the two breakers to one 4.16 kV ESF bus. Transfer capability between the two

required offsite circuits is by manual means only. The

required circuit breaker to each 4.16 kV ESF bus must be

from different 13.8/4.16 kV unit service transformers for the two required offsite circuits. Thus, each unit is able

to align one 4.16 kV bus to one required offsite circuit,

and the other 4.16 kV bus to the other required offsite

circuit.

In some cases, inoperable components in the electrical circuit place both units in Conditions. Examples of these

are 13.8 kV bus Nos. 11 or 21, two 500 kV transmission

lines, one P-13000 service transformer, or one 500 kV bus.

In other cases, inoperable components only place one unit in

a Condition, such as an inoperable U-4000 and/or 13.8 kV

regulator that feeds a required 4.16 kV bus.

The onsite standby power source to each 4.16 kV ESF bus is a dedicated DG. A DG starts automatically on an safety

injection actuation signal or on a 4.16 kV degraded or

undervoltage signal. If both 4.16 kV offsite source

breakers are open, the DG, after reaching rated voltage and

frequency, will automatically close onto the 4.16 kV bus.

In the event of a loss of offsite power to a 4.16 kV 1E bus, if required, the ESF electrical loads will be automatically

sequenced onto the DG in sufficient time to provide for safe

shutdown for an anticipated operational occurrence (AOO) and

to ensure that the containment integrity and other vital

functions are maintained in the event of a design bases

accident.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-3 Revision 2 Ratings for the No. 1A DG satisfies the requirements of Reference 3 and ratings for the Nos. 1B, 2A, and 2B DGs satisfy the requirements of Reference 4. The continuous service rating for the No. 1A DG is 5400 kW and for the Nos. 1B, 2A, and 2B DGs are 3000 kW.

APPLICABLE The initial conditions of Design Basis Accident (DBA) and SAFETY ANALYSES transient analyses in Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC electrical power sources

are designed to provide sufficient capacity, capability,

redundancy, and reliability to ensure the availability of

necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded. These limits

are discussed in more detail in the Bases for Sections 3.2, 3.4, and 3.6.

The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident

analyses and is based upon meeting the design basis of the

unit. This results in maintaining at least one train of the

onsite or offsite AC sources OPERABLE, during accident conditions in the event of: a. An assumed loss of all offsite power; and

b. A single failure.

The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

LCO Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power

Distribution System and separate and independent DGs for

each train ensure availability of the required power to shut

down the reactor and maintain it in a safe shutdown

condition after an AOO or a postulated DBA.

Qualified offsite circuits are those that are described in the Updated Final Safety Analysis Report (UFSAR) and are part of the licensing basis for the unit.

Each offsite circuit must be capable of maintaining rated frequency and voltage and accepting required loads during an

accident, while connected to the ESF buses. Loads are

immediately connected to the ESF buses when the buses are AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-4 Revision 10 powered from the 500 kV offsite circuits and, when powered from the 69/13.8 kV SMECO offsite circuit after being

manually connected, the loads are sequenced onto the ESF bus

utilizing the same sequencer used to sequence the loads onto

the DG. The SMECO offsite circuit will not be used to carry

loads for an operating unit.

The Limiting Condition for Operation (LCO) requires operability of two out of three qualified circuits between

the transmission network and the onsite Class 1E AC

Electrical Power Distribution System circuits. These

circuits consist of two 500 kV circuits via 500 kV/14 kV and

13.8 kV/4.16 kV transformers and the 69 kV SMECO dedicated

source (described in Reference 5) via 69 kV/13.8 kV and

13.8 kV/4.16 kV transformers. In addition, each offsite

circuit includes one of the two breakers to one 4.16 kV ESF

bus. The required circuit breaker to each 4.16 kV ESF bus

must be from different 13.8/4.16 unit service transformers

for the two required offsite circuits. Thus, each unit is

able to align one 4.16 kV bus to one required offsite

circuit, and the other 4.16 kV bus to the other required

offsite circuit.

Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus

on detection of bus undervoltage. This will be accomplished

within 10 seconds. Each DG must also be capable of

accepting required loads within the assumed loading sequence

intervals, and continue to operate until offsite power can

be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such

as DG in standby with the engine hot and DG in standby with

the engine at ambient conditions. Additional DG

capabilities must be demonstrated to meet required Surveillances, e.g., capability of the DG to reject a load 500 hp without tripping.

Proper sequencing of loads, including shedding of non-essential loads, is a required function for DG OPERABILITY

in MODEs 1, 2, and 3.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-5 Revision 59 The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other

train. For the DGs, separation and independence are

complete.

The Control Room Emergency Ventilation System (CREVS) and Control Room Emergency Temperature System (CRETS) are shared systems with one train of each system connected to an onsite

Class 1E AC electrical power distribution subsystem from

each unit. Limiting Condition for Operation 3.8.1.c

requires one qualified circuit between the offsite

transmission network and the other unit's onsite Class 1E AC

electrical power distribution subsystems needed to supply

power to the CREVS and CRETS to be OPERABLE and one DG from

the other unit capable of supplying power to the CREVS and

CRETS to be OPERABLE. The other unit may not be in MODEs 1, 2, 3, or 4. The qualified circuit in LCO 3.8.1.c must be separate and independent (to the extent possible) of the

qualified circuit which provides power to the other train of

the CREVS and CRETS. The OPERABLE 3.8.1.c DG may not have automatic starting or loading (sequencing) capability. In addition, the OPERABLE 3.8.1.c DG may be in the local control mode if it is capable of being returned to the automatic control mode when required and within the time assumed in the accident analysis. These requirements, in conjunction with the requirements for the unit AC electrical

power sources in LCO 3.8.1.a and LCO 3.8.1.b, ensure that power is available to two trains of the CREVS and CRETS.

APPLICABILITY The AC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure that: a. Acceptable fuel design limits and reactor coolant pressure boundary limits, are not exceeded as a result

of AOOs or abnormal transients; and b. Adequate core cooling is provided and Containment OPERABILITY and other vital functions, are maintained

in the event of a postulated DBA.

The AC power requirements for MODEs 5 and 6 are covered in LCO 3.8.2.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-6 Revision 59 ACTIONS A Note prohibits the application of LCO 3.0.4.b to an inoperable DG. There is an increased risk associated with

entering a MODE or other specified condition in the

Applicability with an inoperable DG and the provisions of

LCO 3.0.4.b, which allow entry into a MODE or other

specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in

this circumstance.

A.1 To ensure a highly reliable power source remains with the one required LCO 3.8.1.a offsite circuit inoperable, it is

necessary to verify the OPERABILITY of the remaining

required offsite circuits on a more frequent basis. Since

the Required Action only specifies "perform," a failure of

Surveillance Requirement (SR) 3.8.1.1 or SR 3.8.1.2

acceptance criteria does not result in a Required Action not

met. However, if a second required circuit fails SR 3.8.1.1

or SR 3.8.1.2, the second offsite circuit is inoperable, and

Condition D and/or G, as applicable, for the two offsite

circuits inoperable, is entered.

A.2 Required Action A.2, which only applies if the train cannot be powered from an offsite source, is intended to provide

assurance that an event coincident with a single failure of

the associated DG will not result in a complete loss of

safety function of critical redundant required features.

These features are powered from the redundant AC electrical

power train(s). Single train systems may not be included.

The Completion Time for Required Action A.2 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for

beginning the allowed outage time "clock." In this Required

Action, the Completion Time only begins on discovery that

both: a. The train has no offsite power supplying its loads; and

b. A required feature on another train is inoperable.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-7 Revision 59 If at any time during the existence of Condition A (one required LCO 3.8.1.a offsite circuit inoperable) a redundant

required feature subsequently becomes inoperable, this

Completion Time begins to be tracked.

The Completion Time must be started if it is discovered that there is no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident

with one or more inoperable required support or supported

features (or both) that are associated with the other train

that has offsite power. Twenty-four hours is acceptable

because it minimizes risk while allowing time for

restoration before subjecting the unit to transients

associated with shutdown.

The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the

onsite Class 1E Distribution System. The 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion

Time takes into account the component OPERABILITY of the

redundant counterpart to the inoperable required feature.

Additionally, the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time takes into account

the capacity and capability of the remaining AC sources, a

reasonable time for repairs, and the low probability of a

DBA occurring during this period.

A.3 Consistent with Reference 6, operation may continue in Condition A for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

With one offsite circuit inoperable, the reliability of the

offsite system is degraded, and the potential for a loss of

offsite power is increased, with attendant potential for a

challenge to the unit safety systems. In this Condition,

however, the remaining OPERABLE offsite circuit and DGs are

adequate to supply electrical power to the onsite Class 1E Distribution System.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable

time for repairs, and the low probability of a DBA occurring

during this period.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-8 Revision 59 B.1 The 14 day Completion Time for Required Action B.5 is based on the OPERABILITY of both opposite-unit DGs and the

availability of the 0C DG. The 0C DG is available to power

the inoperable DG bus loads in the event of a station

blackout or loss-of-offsite power. It is required to administratively verify both opposite-unit DGs OPERABLE and the 0C DG available within one hour and to continue this

action once per 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> thereafter until restoration of the

required DG is accomplished. This verification provides

assurance that both opposite-unit DGs and the 0C DG are

capable of supplying the onsite Class 1E AC Electrical Power

Distribution System.

B.2 To ensure a highly reliable power source remains with an inoperable LCO 3.8.1.b DG, it is necessary to verify the

availability of the offsite circuits on a more frequent

basis. Since the Required Action only specifies "perform,"

a failure of SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria

does not result in a Required Action being not met.

However, if a circuit fails to pass SR 3.8.1.1 or

SR 3.8.1.2, it is inoperable. Upon offsite circuit

inoperability, additional Conditions and Required Actions

must then be entered.

B.3 Required Action B.3 is intended to provide assurance that a loss of offsite power, during the period that a LCO 3.8.1.b

DG is inoperable, does not result in a complete loss of

safety function of critical systems. These features are

designed with redundant safety-related trains. Single train

systems are not included. Redundant required feature

failures consist of inoperable features with a train, redundant to the train that has an inoperable LCO 3.8.1.b DG.

The Completion Time for Required Action B.3 is intended to allow the operator time to evaluate and repair any

discovered inoperabilities. This Completion Time also

allows for an exception to the normal "time zero" for

beginning the allowed outage time "clock." In this Required AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-9 Revision 59 Action, the Completion Time only begins on discovery that both: a. An inoperable LCO 3.8.1.b DG exists; and

b. A required feature on another train is inoperable.

If at any time during the existence of this Condition (one LCO 3.8.1.b DG inoperable) a required feature subsequently becomes inoperable, this Completion Time begins to be

tracked.

Discovering one required LCO 3.8.1.b DG inoperable coincident with one or more inoperable required support or

supported features (or both) that are associated with the

OPERABLE DGs, results in starting the Completion Time for

the Required Action. Four hours from the discovery of these

events existing concurrently, is acceptable because it

minimizes risk while allowing time for restoration before

subjecting the unit to transients associated with shutdown.

In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the

onsite Class 1E Distribution System. Thus, on a component

basis, single failure protection for the required feature's

function may have been lost; however, function has not been

lost. The four hour Completion Time takes into account the

OPERABILITY of the redundant counterpart to the inoperable

required feature. Additionally, the four hour Completion

Time takes into account the capacity and capability of the

remaining AC sources, a reasonable time for repairs, and the

low probability of a DBA occurring during this period.

B.4.1 and B.4.2 Required Action B.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be determined that the cause of the inoperable DG does not exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be

performed. If the cause of inoperability exists on other

DG(s), the other DG(s) would be declared inoperable upon

discovery and Condition E and/or I of LCO 3.8.1, as

applicable, would be entered. Once the failure is repaired,

the common cause failure no longer exists and Required

Action B.4.1 is satisfied. If the cause of the initial AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-10 Revision 59 inoperable DG cannot be confirmed not to exist on the remaining DG(s), performance of SR 3.8.1.3 suffices to

provide assurance of continued OPERABILITY of the DG(s).

In the event the inoperable DG is restored to OPERABLE status prior to completing either B.4.1 or B.4.2, the corrective action program will continue to evaluate the common cause possibility. This continued evaluation,

however, is no longer under the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> constraint imposed

while in Condition B.

Consistent with Reference 7, 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is reasonable to confirm that the OPERABLE DG(s) is not affected by the same

problem as the inoperable DG.

These Conditions (B.4.1 and B.4.2) do not address the

availability of the 0C DG.

B.5 Operation may continue in Condition B for a period that should not exceed 14 days.

Planned entry into this Required Action requires that a risk

assessment be performed in accordance with a configuration

risk management program (Reference 11). This ensures that a

proceduralized probabilistic risk assessment-informed

process is in place that assesses the overall impact of

plant maintenance on plant risk prior to entering this

Required Action for planned activities.

In Condition B, the remaining OPERABLE DGs, available 0C DG, and offsite circuits are adequate to supply electrical power

to the onsite Class 1E Distribution System. The 14 day

Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring

during this period.

In addition to utilizing Calvert Cliffs Nuclear Power

Plant's processes for evaluating risk, Reference 11, Calvert

Cliffs will administratively limit DG OOS time to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />

for elective maintenance unless the following actions are

completed:

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-11 Revision 59 a. Weather conditions will be evaluated prior to entering the extended DG Completion Time for elective

maintenance. An extended DG Completion Time will not

be entered for elective maintenance purposes if

official weather forecasts are predicting severe

conditions (tornado or thunderstorm warnings). b. The condition of the offsite power supply will be evaluated prior to entering the extended DG Completion

Time. c. No elective maintenance will be performed in the switchyard, on the 4 kV Distribution System, or on the

13 kV Distribution System. d. No maintenance or testing that affects the reliability of the train associated with the operable DG on the

affected unit will be scheduled during the extended DG

Completion Time. If any testing or maintenance

activities, which affects the train reliability must be

performed while the extended DG Completion Time is in

effect, a 10 CFR 50.65(a)(4) evaluation will be

performed. e. Elective maintenance will not be performed on the alternate AC power source (0C DG). Personnel will be

made aware of the dedication of the alternate AC source

to the affected Unit. f. Planned maintenance will not be performed on the Auxiliary Feedwater System. g. The system dispatcher (System Operations and Maintenance Department) will be contacted prior to

removing the DG from service and after it has been

returned to service. h. The operations crews will be briefed concerning the Unit activities, including compensatory measures

established and the importance of promptly starting and

aligning the alternate AC source (0C DG). i. The on-shift operations crew will discuss and review the appropriate normal and emergency operating

procedures prior to or shortly after assuming the watch

for the first time after having scheduled days off

while the extended DG Completion Time is in effect.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-12 Revision 59 j. The condition of the grid will be evaluated prior to entering the extended DG 3.8.1 Condition B Completion

Time for elective maintenance. An extended DG

Completion Time will not be entered to perform elective

maintenance when grid stress conditions are considered

"High" per plant procedures. This will include conditions such as expected extreme summer temperatures and/or high demand.

C.1.1 and C.1.2 In Condition C with an opposite-unit DG inoperable and/or

the 0C DG unavailable, the remaining OPERABLE unit-specific

DG and required qualified circuits are adequate to supply

electrical power to the onsite Class 1E Distribution System.

Consistent with Reference 6, operation may continue in

Condition C for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time takes into account the capacity

and capability of the remaining AC sources, a reasonable

time for repairs, and the low probability of a DBA occurring

during this period.

D.1 Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable

resulting in de-energization. Therefore, the Required

Actions of Condition D are modified by a Note to indicate

that when Condition D is entered with no AC source to any

train, the Conditions and Required Actions for LCO 3.8.9,

must be immediately entered. This allows Condition D to

provide requirements for the loss of the LCO 3.8.1.c offsite

circuit and DG without regard to whether a train is de-

energized. Limiting Condition for Operation 3.8.9 provides

the appropriate restrictions for a de-energized train.

To ensure a highly reliable power source remains with the one required LCO 3.8.1.c offsite circuit inoperable, it is

necessary to verify the OPERABILITY of the remaining

required offsite circuits on a more frequent basis. Since

the Required Action only specifies "perform," a failure of

SR 3.8.1.1 or SR 3.8.1.2 acceptance criteria does not result

in a Required Action not met. However, if a second required

circuit fails SR 3.8.1.1 or SR 3.8.1.2, the second offsite AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-13 Revision 59 circuit is inoperable, and Condition A and/or G, as applicable, for the two offsite circuits inoperable, is

entered.

D.2 Required Action D.2, which only applies if the train cannot be powered from an offsite source, is intended to provide assurance that an event coincident with a single failure of

the associated DG will not result in a complete loss of

safety function for the CREVS or CRETS. The Completion Time

for Required Action D.2 is intended to allow the operator

time to evaluate and repair any discovered inoperabilities.

This Completion Time also allows for an exception to the

normal "time zero" for beginning the allowed outage time

"clock." In this Required Action, the Completion Time only

begins on discovery that both: a. The train has no offsite power supplying its loads; and

b. A train of CREVS or CRETS on the other train is inoperable.

If at any time during the existence of Condition D (one required LCO 3.8.1.c offsite circuit inoperable) a train of

CREVS or CRETS becomes inoperable, this Completion Time

begins to be tracked.

Discovering no offsite power to one train of the onsite Class 1E Electrical Power Distribution System coincident

with one train of CREVS or CRETS that is associated with the

other train that has offsite power, results in starting the

Completion Times for the Required Action. Twenty-four hours

is acceptable because it minimizes risk while allowing time

for restoration before subjecting the unit to transients

associated with shutdown.

The remaining OPERABLE offsite circuits and DGs are adequate to supply electrical power to Train A and Train B of the

onsite Class 1E Distribution System. The 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion

Time takes into account the component OPERABILITY of the

redundant counterpart to the inoperable CREVS or CRETS.

Additionally, the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time takes into account

the capacity and capability of the remaining AC sources, a AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-14 Revision 59 reasonable time for repairs, and the low probability of a DBA occurring during this period.

D.3 Consistent with the time provided in ACTION A, operation may continue in Condition D for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. With one required LCO 3.8.1.c offsite circuit inoperable, the reliability of the offsite system is

degraded, and the potential for a loss of offsite power is

increased, with attendant potential for a challenge to the

unit safety systems. In this Condition, however, the

remaining OPERABLE offsite circuits and DGs are adequate to

supply electrical power to the onsite Class 1E Distribution

System.

If the LCO 3.8.1.c required offsite circuit cannot be restored to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, the CREVS and

CRETS associated with the offsite circuit must be declared

inoperable. The ACTIONS associated with the CREVS and CRETS

will ensure the appropriate actions are taken. The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />

Completion Time takes into account the capacity and

capability of the remaining AC sources, a reasonable time

for repairs, and the low probability of a DBA occurring

during this period.

E.1 The 14 day Completion Time for Required Action E.5 is based

on the OPERABILITY of the other three safety-related DGs and

the availability of the 0C DG. The 0C DG is available to

power the inoperable DG bus loads in the event of a station

blackout or loss-of-offsite power. It is required to

administratively verify the three safety-related DGs

OPERABLE and the 0C DG available within one hour and to

continue this action once per 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> thereafter until restoration of the required DG is accomplished. This verification provides assurance that the three safety-

related DGs and the 0C DG are capable of supplying the

onsite Class 1E AC Electrical Power Distribution System.

E.2 Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it, were inoperable AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-15 Revision 59 resulting in de-energization. Therefore, the Required Actions of Condition E are modified by a Note to indicate

that when Condition E is entered with no AC source to any

train, the Conditions and Required Actions for LCO 3.8.9

must be immediately entered. This allows Condition E to

provide requirements for the loss of the LCO 3.8.1.c offsite circuit and DG without regard to whether a train is de-energized. Limiting Condition for Operation 3.8.9 provides

the appropriate restrictions for a de-energized train.

To ensure a highly reliable power source remains with the one required LCO 3.8.1.c DG inoperable, it is necessary to

verify the availability of the required offsite circuits on

a more frequency basis. Since the Required Action only

specifies "perform," a failure of SR 3.8.1.1 or SR 3.8.1.2

acceptance criteria does not result in a Required Action not

met. However, if a circuit fails to pass SR 3.8.1.1 or

SR 3.8.1.2, it is inoperable. Upon offsite circuit

inoperability additional Conditions and Required Actions

must then be entered.

E.3 Required Action E.3 is intended to provide assurance that a loss of offsite power, during the period the LCO 3.8.1.c DG

is inoperable, does not result in a complete loss of safety

function for the CREVS or CRETS. The Completion Time is

intended to allow the operator time to evaluate and repair

any discovered inoperabilities. This Completion Time also

allows for an exception to the normal "time zero" for

beginning the allowed outage time "clock." In this Required

Action, the Completion Time only begins on discovery that

both: a. An inoperable LCO 3.8.1.c DG exists; and

b. A train of CREVS or CRETS on the other train is inoperable.

If at any time during the existence of this Condition (the LCO 3.8.1.c DG inoperable) a train of CREVS or CRETS becomes

inoperable, this Completion Time begins to be tracked.

Discovering the LCO 3.8.1.c DG inoperable coincident with one train of CREVS or CRETS that is associated with the one AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-16 Revision 59 LCO 3.8.1.b DG results in starting the Completion Time for the Required Action. Four hours from the discovery of these

events existing concurrently, is acceptable because it

minimizes risk while allowing time for restoration before

subjecting the unit to transients associated with shutdown.

In this Condition, the remaining OPERABLE DGs and offsite circuits are adequate to supply electrical power to the

onsite Class 1E Distribution System. Thus, on a component

basis, single failure protection for the CREVS or CRETS may

have been lost; however, function has not been lost. The

four hour Completion Time also takes into account the

capacity and capability of the remaining CREVS and CRETS

train, a reasonable time for repairs, and the low

probability of a DBA occurring during this period.

E.4.1 and E.4.2 Required Action E.4.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be

determined that the cause of the inoperable DG does not

exist on the OPERABLE DG(s), SR 3.8.1.3 does not have to be

performed. If the cause of inoperability exists on other

DG(s), the other DG(s) would be declared inoperable upon

discovery and Condition B and/or I of LCO 3.8.1, as

applicable, would be entered. Once the failure is repaired,

the common cause failure no longer exists and Required

Action E.4.1 is satisfied. If the cause of the initial

inoperable DG cannot be confirmed not to exist on the

remaining DG(s), performance of SR 3.8.1.3 suffices to

provide assurance of continued OPERABILITY of the DG(s).

In the event the inoperable DG is restored to OPERABLE status prior to completing either E.4.1 or E.4.2, the

corrective action program will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> constraint imposed

while in Condition E.

Consistent with Reference 6, 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is reasonable to confirm that the OPERABLE DG(s) is not affected by the same

problem as the inoperable DG.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-17 Revision 59 These Conditions (E.4.1 and E.4.2) do not address the availability of the 0C DG.

E.5 Consistent with the time provided in ACTION B, operation may continue in Condition E for a period that should not exceed 14 days. In Condition E, the remaining OPERABLE DGs, available 0C DG, and offsite power circuits are adequate to

supply electrical power to the Class 1E Distribution System.

If the LCO 3.8.1.c DG cannot be restored to OPERABLE status within 14 days the CREVS and CRETS associated with this DG

must be declared inoperable. The Actions associated with

the CREVS and CRETS will ensure the appropriate Actions are

taken.

The 14 day Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable

time for repairs, and the low probability of a DBA occurring

during this period.

F.1.1 and F.1.2 In Condition F, with an additional safety-related DG

inoperable or the 0C DG unavailable, the remaining OPERABLE

DG and required qualified circuits are adequate to supply

electrical power to the onsite Class 1E Distribution System.

Consistent with Reference 6, operation may continue in

Condition F for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time takes into account the capacity

and capability of the remaining AC sources, a reasonable

time for repairs, and the low probability of a DBA occurring

during this period.

F.1.3 If the LCO 3.8.1.c DG cannot be restored to OPERABLE status

within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> the CREVS and CRETS associated with this DG

must be declared inoperable. The Required Actions

associated with the CREVS and CRETS will ensure that the

appropriate actions are taken.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time takes into account the capacity

and capability of the remaining AC sources, a reasonable AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-18 Revision 59 time for repairs, and the low probability of a DBA occurring during this period.

G.1 and G.2 Condition G is entered when both offsite circuits required by LCO 3.8.1.a are inoperable, or when the offsite circuit required by LCO 3.8.1.c and one offsite circuit required by LCO 3.8.1.a are concurrently inoperable, if the LCO 3.8.1.a

offsite circuit is credited with providing power to the

CREVS and CRETS.

Required Action G.1 is intended to provide assurance that an event with a coincident single failure will not result in a

complete loss of redundant required safety functions. The

Completion Time for this failure of redundant required

features is reduced to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> from that allowed for one

train without offsite power (Required Action A.2). The

rationale for the reduction to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is that Reference 6

allows a Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for two required

offsite circuits inoperable, based upon the assumption that

two complete safety trains are OPERABLE. When a concurrent

redundant required feature failure exists, this assumption

is not the case, and a shorter Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />

is appropriate. These features are powered from redundant

AC safety trains. Single train features are not included in

the list.

The Completion Time for Required Action G.1 is intended to allow the operator time to evaluate and repair any

discovered inoperabilities. This Completion Time also

allows for an exception to the normal "time zero" for

beginning the allowed outage time "clock." In this Required

Action, the Completion Time only begins on discovery that

both: a. Two required offsite circuits are inoperable; and b. A required feature is inoperable.

If at any time during the existence of Condition G (e.g., two required LCO 3.8.1.a offsite circuits inoperable)

and a required feature becomes inoperable, this Completion

Time begins to be tracked.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-19 Revision 59 Consistent with Reference 6, operation may continue in Condition G for a period that should not exceed 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

This level of degradation means that the offsite electrical

power system does not have the capability to effect a safe

shutdown and to mitigate the effects of an accident;

however, the onsite AC sources have not been degraded. This level of degradation could correspond to a total loss of the immediately accessible offsite power sources.

Because of the normally high availability of the offsite sources, this level of degradation may appear to be more

severe than other combinations of two AC sources inoperable

that involve one or more DGs inoperable. However, two

factors tend to decrease the severity of this level of

degradation: a. The configuration of the redundant AC electrical power system that remains available is not susceptible to a

single bus or switching failure; and b. The time required to detect and restore an unavailable offsite power source is generally much less than that

required to detect and restore an unavailable onsite AC

source.

With two of the required offsite circuits inoperable, sufficient onsite AC sources are available to maintain the

unit in a safe shutdown condition in the event of a DBA or

transient. In fact, a simultaneous loss of offsite AC

sources, a loss of coolant accident, and a worst case single

failure were postulated as a part of the design basis in the

safety analysis. Thus, the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time provides

a period of time to effect restoration of one of the offsite

circuits commensurate with the importance of maintaining an

AC electrical power system capable of meeting its design

criteria.

Consistent with Reference 6, with the available offsite AC sources two less than required by the LCO, operation may

continue for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. If two offsite sources are restored

within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, unrestricted operation may continue. If

only one offsite source is restored within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, power

operation continues in accordance with Condition A or D, as

applicable.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-20 Revision 48 H.1 and H.2 Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it were inoperable

resulting in de-energization. Therefore, the Required

Actions of Condition H are modified by a Note to indicate

that when Condition H is entered with no AC source to any train, the Conditions and Required Actions for LCO 3.8.9, must be immediately entered. This allows Condition H to

provide requirements for the loss of one required

LCO 3.8.1.a offsite circuit and one LCO 3.8.1.b DG without

regard to whether a train is de-energized. Limiting

Condition for Operation 3.8.9 provides the appropriate

restrictions for a de-energized train.

Consistent with Reference 6, operation may continue in Condition H for a period that should not exceed 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

In Condition H, individual redundancy is lost in both the offsite electrical power system and the onsite AC electrical

power system. Since power system redundancy is provided by

two diverse sources of power, however, the reliability of

the power systems in this Condition may appear higher than

that in Condition G (loss of two required offsite circuits).

This difference in reliability is offset by the

susceptibility of this power system configuration to a

single bus or switching failure. The 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Completion

Time takes into account the capacity and capability of the

remaining AC sources, a reasonable time for repairs, and the

low probability of a DBA occurring during this period.

I.1 With two LCO 3.8.1.b DGs inoperable, there are no remaining standby AC sources to provide power to most of the ESF

systems. With one LCO 3.8.1.c DG inoperable and the LCO 3.8.1.b DG that provides power to the CREVS and CRETS inoperable, there are no remaining standby AC sources to the

CREVS and CRETS. Thus, with an assumed loss of offsite

electrical power, insufficient standby AC sources are

available to power the minimum required ESF functions.

Since the offsite electrical power system is the only source

of AC power for this level of degradation, the risk

associated with continued operation for a short time could AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-21 Revision 48 be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid

instability, which could result in a total loss of AC

power). Since any inadvertent generator trip could also

result in a total loss of offsite AC power, however, the

time allowed for continued operation is severely restricted.

The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk

associated with this level of degradation.

Consistent with Reference 6, with both LCO 3.8.1.b DGs inoperable, or with the LCO 3.8.1.b DG that provides power

to the CREVS and CRETS and the LCO 3.8.1.c DG inoperable,

operation may continue for a period that should not exceed

2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

J.1 and J.2 If any Required Action and associated Completion Time of Conditions A, B.2, B.3, B.4.1, B.4.2, B.5, C, E.2, E.3,

E.4.1, E.4.2, E.5, F, G, H, or I are not met, the unit must

be brought to a MODE in which the LCO does not apply. To

achieve this status, the unit must be brought to at least

MODE 3 within six hours and to MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The

allowed Completion Times are reasonable, based on operating

experience, to reach the required unit conditions from full

power conditions in an orderly manner and without

challenging unit systems.

K.1 Condition K corresponds to a level of degradation in which all redundancy in LCO 3.8.1.a and LCO 3.8.1.b AC electrical

power supplies has been lost. At this severely degraded

level, any further losses in the AC electrical power system

will cause a loss of function. Therefore, no additional time is justified for continued operation. The unit is

required by LCO 3.0.3 to commence a controlled shutdown.

SURVEILLANCE The AC sources are designed to permit inspection and REQUIREMENTS testing of all important areas and features, especially those that have a standby function, in accordance with

Reference 1, GDC 18. Periodic component tests are

supplemented by extensive functional tests during refueling AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-22 Revision 55 outages (under simulated accident conditions). The SRs for demonstrating the OPERABILITY of the DGs are consistent with

the recommendations of Reference 3, or Reference 4, and

Reference 8.

When the SRs discussed herein specify voltage and frequency tolerances, the following is applicable. The minimum transient output voltage of 3740 V is 90% of the nominal

4160 V output voltage. This value allows for voltage drop

to the terminals of 4000 V motors whose minimum operating

voltage is specified as 90% or 3600 V. The specified

maximum output voltage of 4400 V is equal to the maximum

operating voltage specified for 4000 V motors. It ensures

that for a lightly loaded distribution system, the voltage

at the terminals of 4000 V is no more than the maximum rated

operating voltages. The specified minimum and maximum

frequencies of the DG are 58.8 Hz and 61.2 Hz, respectively.

These values are equal to +/- 2% of the 60 Hz nominal

frequency and are the recommendations given in Reference 3.

The SRs are modified by a Note which states that SR 3.8.1.1 through SR 3.8.1.15 are applicable to LCO 3.8.1.a and

LCO 3.8.1.b AC Sources. The Note also states that

SR 3.8.1.16 is applicable to LCO 3.8.1.c AC sources. This

Note clarifies that not all of the SRs are applicable to all

the components described in the LCO.

SR 3.8.1.1 and SR 3.8.1.2 These SRs assure proper circuit continuity for the offsite AC electrical power supply to the onsite distribution

network and availability of offsite AC electrical power.

The breaker alignment verifies that each breaker is in its

correct position to ensure that distribution buses and loads

are connected to their preferred power source, and that appropriate independence of offsite circuits is maintained.

The Frequency of once within one hour after substitution for

a 500 kV circuit and periodically thereafter, for SR 3.8.1.1 was established to ensure that the breaker alignment for the

SMECO circuit (which does not have Control Room indication)

is in its correct position although breaker position is

unlikely to change. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-23 Revision 55 Surveillance Requirement 3.8.1.1 is modified by a Note which states that this SR is only required when SMECO is being

credited for an offsite source. This SR will prevent

unnecessary testing on an uncredited circuit.

SR 3.8.1.3 and SR 3.8.1.9 These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and

to maintain the unit in a safe shutdown condition.

To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs are

modified by a Note (Note 2 for SR 3.8.1.3) to indicate that

all DG starts for these surveillance tests may be preceded

by an engine prelube period and followed by a warmup period

prior to loading by an engine prelube period.

For the purposes of SR 3.8.1.9 testing, the DGs are required to start from standby conditions only for SR 3.8.1.9.

Standby conditions for a DG mean the diesel engine coolant

and oil are being continuously circulated and temperature is

being maintained consistent with manufacturer

recommendations.

In order to reduce stress and mechanical wear on diesel engines, the DG manufacturers recommend a modified start in

which the starting speed of DGs is limited, warmup is

limited to this lower speed, and the DGs are gradually

accelerated to synchronous speed prior to loading. This is

the intent of Note 3, which is only applicable when such

modified start procedures are recommended by the

manufacturer.

Surveillance Requirement 3.8.1.9 requires that the DG starts from standby conditions and achieves required voltage and

frequency within 10 seconds. The minimum voltage and

frequency stated in the SR are those necessary to ensure the

DG can accept DBA loading while maintaining acceptable

voltage and frequency levels. The 10 second start

requirement supports the assumptions of the design basis

loss of coolant accident analysis in Reference 2,

Chapter 14.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-24 Revision 55 Since SR 3.8.1.9 requires a 10 second start, it is more restrictive than SR 3.8.1.3, and it may be performed in lieu

of SR 3.8.1.3.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.4 This SR verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads

greater than or equal to 4000 kW for No. 1A DG and greater

than or equal to 90% of the continuous duty rating for the

remaining DGs. The 90% minimum load limit is consistent

with Reference 3 and is acceptable because testing of these

DGs at post-accident load values is performed by

SR 3.8.1.11. A minimum run time of 60 minutes is required

to stabilize engine temperatures, while minimizing the time

that the DG is connected to the offsite source.

Although no power factor requirements are established by this SR, the DG is normally operated at a power factor

between 0.8 lagging and 1.0. The 0.8 value is the design

rating of the machine, while 1.0 is an operational

limitation. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by four Notes. Note 1 indicates that the diesel engine runs for this surveillance test may

include gradual loading, as recommended by the manufacturer,

so that mechanical stress and wear on the diesel engine are

minimized. Note 2 states that momentary transients because

of changing bus loads do not invalidate this test. Note 3

indicates that this surveillance test shall be conducted on

only one DG at a time in order to prevent routinely paralleling multiple DGs and to minimize the potential for effects from offsite circuit or grid perturbations. Note 4

stipulates a prerequisite requirement for performance of

this SR. A successful DG start must precede this test to

credit satisfactory performance.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-25 Revision 55 SR 3.8.1.5 This SR provides verification that the level of fuel oil in the day tank is at or above the level at which fuel oil is

automatically added. The level required by the SR is

selected to ensure adequate fuel oil for a minimum of

one hour of DG operation at full load plus 10%. The fuel oil level ensuring a one hour supply is 325 gallons for DG 1A and 275 gallons for DGs 1B, 2A, and 2B when calculated

in accordance with References 8 and 12.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.6 Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in

fuel oil and cause fouling, but all must have a water

environment in order to survive. Removal of water from the

fuel oil day tanks eliminates the necessary environment for bacterial survival. This is the most effective means of

controlling microbiological fouling. In addition, it

eliminates the potential for water entrainment in the fuel

oil during DG operation. Water may come from any of several

sources, including condensation, ground water, rain water,

contaminated fuel oil, and from breakdown of the fuel oil by

bacteria. Frequent checking for and removal of accumulated

water minimizes fouling and provides data regarding the

watertight integrity of the fuel oil system. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR provided the

accumulated water is removed during the performance of this

surveillance test.

SR 3.8.1.7 This SR demonstrates that one fuel oil transfer pump operates and transfers fuel oil from its associated storage

tank to its associated day tank. This is required to

support continuous operation of standby power sources. This

SR provides assurance that the fuel oil transfer pump is

OPERABLE, the fuel oil piping system is intact, the fuel

delivery piping is not obstructed, and the controls and AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-26 Revision 55 control systems for automatic fuel transfer systems are OPERABLE.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.8 Under accident and loss of offsite power conditions loads are sequentially connected to the bus by the automatic load

sequencer (this SR verifies steps 1 through 5 for the

emergency load sequencer and verifies steps 1 through 3 for

the shutdown load sequencer). The sequencing logic controls

the permissive and closing signals to breakers to prevent

overloading of the DGs due to high motor starting currents.

The 10% load sequence time interval tolerance ensures that

sufficient time exists for the DG to restore frequency and

voltage prior to applying the next load, and that safety

analysis assumptions regarding ESF equipment time delays are

not violated. The UFSAR provides a summary of the automatic

loading of ESF buses.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.9 See SR 3.8.1.3.

SR 3.8.1.10 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit

demonstrates the OPERABILITY of the alternate circuit

distribution network to power the shutdown loads. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.11 This SR provides verification that the DG can be operated at a load greater than predicted accident loads for at least

4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. Operation at the greater than calculated accident loads will clearly demonstrate the ability of the DGs to

perform their safety function. In order to ensure that the

DG is tested under load conditions that are as close to AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-27 Revision 55 design conditions as possible, testing must be performed using a DG load greater than or equal to calculated accident load and using a power factor 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are

chosen based on the calculated highest kW value of DG loads

during the postulated design basis accidents.

In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG.

To ensure No. 1A DG performance is not degraded, routine

monitoring of engine parameters should be performed during

the performance of this SR for No. 1A DG (Reference 9).

This SR is modified by two Notes, Note 1 states that momentary transients due to changing bus loads do not

invalidate this test. Similarly, momentary power factor

transients above the limit will not invalidate the test.

Note 2 ensures that the DG is tested under load conditions

that are as close to design basis conditions as practicable.

When synchronized with offsite power, testing should be performed at a power factor of 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs. These power factors are representative of the actual inductive loading a DG

would see under design basis accident conditions. Under

certain conditions, however, Note 2 allows the surveillance to be conducted at a power factor other than 0.84 for No.

1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs. These conditions occur when grid voltage is high, and the

additional field excitation needed to get the power factor to 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs results in voltages on the emergency busses that are too

high. Conditions can also occur that could result in

emergency bus voltages which are too low. Under these

conditions, the power factor shall be maintained as close a

practicable to 0.84 for No. 1A DG and 0.83 for Nos. 1B, 2A, and 2B DGs while maintaining acceptable voltages on the emergency busses.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-28 Revision 55 SR 3.8.1.12 Each DG is provided with an engine overspeed trip to prevent damage to the engine. Recovery from the transient caused by

the loss of a large load could cause diesel engine

overspeed, which, if excessive, might result in a trip of

the engine. This SR demonstrates the DG load response characteristics. This SR is accomplished by tripping the DG output breaker with the DG carrying greater than or equal to

its associated single largest post-accident load while

paralleled to offsite power.

Consistent with References 10, 3, and 4, the load rejection test is acceptable if the increase in diesel speed does not

exceed 75% of the difference between synchronous speed and

the overspeed trip setpoint, or 15% above synchronous speed,

whichever is lower.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.13 This SR demonstrates that DG non-critical protective functions are bypassed on a required actuation signal. This

SR is accomplished by verifying the bypass contact changes

to the correct state which prevents actuation of the non-

critical function. The non-critical protective functions

are consistent with References 3 and 4, and Institute of

Electrical and Electronic Engineers (IEEE)-387 and are

listed in Reference 2, Chapter 8. Verifying the non-

critical trips are bypassed will ensure DG operation during

a required actuation. The non-critical trips are bypassed

during DBAs and provide an alarm on an abnormal engine

condition. A failure of the electronic governor results in

the diesel generator operating in hydraulic mode. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is

more critical than protecting the engine against minor

problems that are not immediately detrimental to emergency

operation of the DG.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-29 Revision 55 SR 3.8.1.14 This SR ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and

that the DG can be returned to ready-to-load status when

offsite power is restored. The DG is considered to be in ready-to-load status when the DG is at rated speed and voltage, the output breaker is open and can receive an auto-

close signal on bus undervoltage, and the load sequence

timers are reset.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.1.15 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to

ESF systems so that the fuel, RCS, and containment design

limits are not exceeded.

This SR demonstrates the DG operation during a loss of offsite power actuation test signal in conjunction with an

ESF (i.e., safety injection) actuation signal. In lieu of

actual demonstration of connection and loading of loads,

testing that adequately shows the capability of the DG

system to perform these functions is acceptable. This

testing may include any series of sequential, overlapping,

or total steps so that the entire connection and loading

sequence is verified.

It is not necessary to energize loads which are dependent on temperature to load (i.e., heat tracing, switchgear HVAC

compressor, computer room HVAC compressor). Also, it is

acceptable to transfer the instrument AC bus to the non tested train to maintain safe operation of the plant during testing. Loads (both permanent and auto connect) < 15 kW do

not require loading onto the diesel since these are

insignificant loads for the DG.

Permanently- and auto-connected loads to the emergency diesel generators are defined as follows:

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-30 Revision 55 Permanently-Connected Load - Equipment that is not shed by an undervoltage or safety injection actuation signal and is

normally operating, i.e., loads that are manually started,

selected, or process signal controlled are not considered

permanently-connected loads.

Auto-Connected Loads - Emergency equipment required for mitigating the events described in UFSAR Chapter 14 that are

energized by loss-of-coolant incident sequencer actions

after step zero and within the first minute of emergency

diesel generator operation after the initiation of an

undervoltage signal.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by a Note. The reason for the Note is to minimize mechanical wear and stress on the DGs during

testing. For the purpose of this testing, the DGs must be

started from standby conditions, that is, with the engine

coolant and oil continuously circulated and temperature

maintained consistent with manufacturer recommendations for

DGs.

SR 3.8.1.16 This SR lists the SRs that are applicable to the LCO 3.8.1.c (SRs 3.8.1.1, 3.8.1.2, 3.8.1.3, 3.8.1.5, 3.8.1.6, and

3.8.1.7). Performance of any SR for the LCO 3.8.1.c will

satisfy both Unit 1 and Unit 2 requirements for those SRs.

Surveillance Requirements 3.8.1.4, 3.8.1.8, 3.8.1.9,

3.8.1.10, 3.8.1.11, 3.8.1.12, 3.8.1.13, 3.8.1.14, 3.8.1.15,

and 3.8.1.17 are not required to be performed for the

LCO 3.8.1.c. Surveillance Requirement 3.8.1.10 is not

required because this SR verifies manual transfer of AC power sources from the normal offsite circuit to the alternate offsite circuit, but only one qualified offsite

circuit is necessary for the LCO 3.8.1.c. Surveillance

Requirements 3.8.1.4, 3.8.1.11, 3.1.8.12, and 3.8.1.17 are

not required because they are tests that deal with loads.

Surveillance Requirement 3.8.1.8 verifies the interval

between sequenced loads. Surveillance Requirement 3.8.1.14

verifies the proper sequencing with offsite power.

Surveillance Requirement 3.8.1.9 verifies that the DG starts AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-31 Revision 55 within 10 seconds. These SRs are not required because they do not support the function of the LCO 3.8.1.c to provide

power to the CREVS and CRETS. Surveillance Requirements

3.8.1.13 and 3.8.1.15 are not required to be performed

because these SRs verify the emergency loads are actuated on

an ESFAS signal for the Unit in which the test is being performed. The LCO 3.8.1.c DG will not start on an ESFAS signal for this Unit.

SR 3.8.1.17 Reference 13 requires demonstration that the DGs can start

and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of which is at a load equivalent to 105-110% of the continuous service rating and

the remainder of the time at a load equivalent to 90-100% of

the continuous service rating. For the Nos. 1B, 2A, and 2B

DGs the SR reflects these loading ranges. For the No. 1A

DG, since the post accident loading is significantly less

than the continuous service rating, the post accident loading (

<4000 kW) is used instead of the continuous service rating. Actual testing is performed at a load

higher than the post accident loading.

The DG starts for this Surveillance can be performed either

from standby or hot conditions. The provisions for

prelubricating and warmup, discussed in SR 3.8.1.3 and for

gradual loading, discussed in SR 3.8.1.4 are applicable to

this SR.

The load band is provided to avoid routine overloading of

the DG. Routine overloading may result in more frequent

teardown inspections in accordance with vendor

recommendations in order to maintain DG OPERABILITY.

In addition, the post-accident load for No. 1A DG is significantly lower than the continuous rating of No. 1A DG.

To ensure No. 1A DG performance is not degraded, routine

monitoring of engine parameters should be performed during

the performance of this SR for No. 1A DG (Reference 9).

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

AC Sources-Operating B 3.8.1 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.1-32 Revision 55 This SR is modified by a Note. Note 1 states that momentary transients due to changing bus loads do not invalidate this

test. Similarly, momentary power factor transients above the

limit will not invalidate the test.

REFERENCES 1. 10 CFR Part 50, Appendix A, "General Design Criteria for Nuclear Power Plants" 2. UFSAR

3. Regulatory Guide 1.9, Revision 3, "Selection, Design, Qualification, and Testing of Emergency Diesel

Generator Units Used as Class 1E Onsite Electric Power

Systems at Nuclear Power Plants," July 1993 4. Safety Guide 9, Revision 0, March 1971

5. NRC Safety Evaluation for Amendment Nos. 19 and 5 for Calvert Cliffs Nuclear Power Plant Unit Nos. 1 and 2,

dated January 14, 1977 6. Regulatory Guide 1.93, Revision 0, "Availability of Electric Power Sources," December 1974 7. Generic Letter 84-15, Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability, July 2, 1984 8. Regulatory Guide 1.137, Revision 1, "Fuel-Oil Systems for Standby Diesel Generators," October 1979 9. Letter from Mr. D. G. McDonald, Jr. (NRC) to Mr. C. H. Cruse (BGE), dated April 2, 1996, Issuance of

Amendments for Calvert Cliffs Nuclear Power Plant,

Unit 1 (TAC No. M94030) and Unit 2 (TAC No. M94031)

10. IEEE Standard 308-1991, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating

Stations" 11. NO-1-117, Integrated Risk Management

12. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4 13. Regulatory Guide 1.9, Revision 4, "Application and Testing of Safety Related Diesel Generators in Nuclear Power Plants," March 2007

AC Sources-Shutdown B 3.8.2 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.2 AC Sources-Shutdown

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-1 Revision 2 BACKGROUND A description of the AC sources is provided in the Bases for LCO 3.8.1.

APPLICABLE The OPERABILITY of the minimum AC sources during MODEs 5 SAFETY ANALYSES and 6 and during movement of irradiated fuel assemblies ensures that: a. The unit can be maintained in the shutdown or refueling condition for extended periods; b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit

status; and c. Adequate AC electrical power is provided to mitigate events postulated during shutdown, such as a fuel

handling accident.

In general, when the unit is shut down, the Technical Specifications requirements ensure that the unit has the

capability to mitigate the consequences of postulated

accidents. However, assuming a single failure and

concurrent loss of all offsite or all onsite power is not

required. The rationale for this is based on the fact that

many DBAs that are analyzed in MODEs 1, 2, 3, and 4 have no specific analyses in MODEs 5 and 6. Worst case bounding events are deemed not credible in MODEs 5 and 6 because the energy contained within the reactor pressure boundary,

reactor coolant temperature and pressure, and the

corresponding stresses result in the probabilities of

occurrence being significantly reduced or eliminated, and in minimal consequences. These deviations from DBA analysis assumptions and design requirements during shutdown

conditions are allowed by the LCO for required systems.

During MODEs 1, 2, 3, and 4, various deviations from the analysis assumptions and design requirements are allowed

within the Required Actions. This allowance is in

recognition that certain testing and maintenance activities

must be conducted provided an acceptable level of risk is

not exceeded. During MODEs 5 and 6, performance of a significant number of required testing and maintenance AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-2 Revision 2 activities is also required. In MODEs 5 and 6, the activities are generally planned and administratively controlled. Relaxations from MODEs 1, 2, 3, and 4 LCO requirements are acceptable during shutdown MODEs based on: a. The fact that time in an outage is limited. This is a risk prudent goal as well as a utility economic consideration. b. Requiring appropriate compensatory measures for certain conditions. These may include administrative controls,

reliance on systems that do not necessarily meet

typical design requirements applied to systems credited

in operating MODE analyses, or both. c. Prudent utility consideration of the risk associated with multiple activities that could affect multiple

systems. d. Maintaining, to the extent practical, the ability to perform required functions (even if not meeting

MODEs 1, 2, 3, and 4 OPERABILITY requirements) with systems assumed to function during an event.

In the event of an accident during shutdown, this LCO ensures the capability to support systems necessary to avoid

immediate difficulty, assuming either a loss of all offsite

power or a loss of all onsite DG power.

The AC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

LCO One offsite circuit capable of supplying the onsite Class 1E power distribution subsystem(s) of LCO 3.8.10, ensures that all required loads are powered from offsite power. An OPERABLE DG, associated with a distribution system train required to be OPERABLE by LCO 3.8.10, ensures a diverse

power source is available to provide electrical power

support, assuming a loss of the offsite circuit. Together,

OPERABILITY of the required offsite circuit and DG ensures

the availability of sufficient AC sources to operate the

unit in a safe manner and to mitigate the consequences of

postulated events during shutdown (e.g., fuel handling

accidents).

AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-3 Revision 59 The qualified offsite circuit must be capable of maintaining rated frequency and voltage, and accepting required loads

during an accident, while connected to the ESF bus(es).

Qualified offsite circuits are those that are described in

the UFSAR and are part of the licensing basis for the unit.

The DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective ESF bus, and

accepting required loads. The DG must continue to operate

until offsite power can be restored to the ESF buses. These

capabilities are required to be met from a variety of

initial conditions such as DG in standby with the engine hot

and DG in standby at ambient conditions. Automatic start and loading of a DG is not required in MODEs 5 and 6. A DG is OPERABLE when it is in local control mode if it is capable of being returned to automatic control mode when required, and within the time assumed in the accident analysis.

It is acceptable for trains to be cross-tied during shutdown conditions, allowing a single offsite power circuit to

supply all required trains.

The CREVS and CRETS are shared systems with one train of each system connected to an onsite Class 1E AC electrical

power distribution subsystem from each unit. Limiting

Condition for Operation 3.8.2.c requires one qualified

circuit between the offsite transmission network and the

other unit's onsite Class 1E AC electrical power

distribution subsystems needed to supply power to the CREVS

and CRETS to be OPERABLE. Limiting Condition for

Operation 3.8.2.d requires one DG from the other unit

capable of supplying power to the required CREVS and CRETS

to be OPERABLE, if the DG required by LCO 3.8.2.b is not capable of supplying power to the required CREVS and CRETS.

These requirements, in conjunction with the requirements for

the unit AC electrical power sources in LCO 3.8.2.a and

LCO 3.8.2.b, ensure that offsite power is available to both

trains and onsite power is available to one train of the

CREVS and CRETS, when they are required to be OPERABLE by their respective LCOs (LCOs 3.7.8 and 3.7.9).

AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-4 Revision 5 APPLICABILITY The AC sources required to be OPERABLE in MODEs 5 and 6 and during movement of irradiated fuel assemblies provide

assurance that: a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel assemblies; b. Systems needed to mitigate a fuel handling accident are available; c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are

available; and d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown

condition or refueling condition.

The AC power requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.1.

ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel

assembly movement can occur in MODEs 1, 2, 3, or 4, the

ACTIONS have been modified by a Note stating that LCO 3.0.3

is not applicable. If moving irradiated fuel assemblies

while in MODEs 5 or 6, LCO 3.0.3 would not specify any

action. If moving irradiated fuel assemblies while in

MODEs 1, 2, 3, or 4, the fuel movement is independent of

reactor operations. Therefore, in either case, inability to

suspend movement of irradiated fuel assemblies would not be

sufficient reason to require a reactor shutdown.

The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude completion of actions to establish a safe conservative

position. This clarification is provided to avoid stopping

movement of irradiated fuel assemblies while in a non-

conservative position based on compliance with the Required

Actions.

A.1 An offsite circuit would be considered inoperable, if it was unavailable to one required ESF train. Although two trains

may be required by LCO 3.8.10, the remaining train with AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-5 Revision 29 offsite power available may be capable of supporting sufficient required features to allow continuation of fuel movement. By the allowance of the option to declare

required features inoperable, with no offsite power

available, appropriate restrictions will be implemented in

accordance with the affected required features LCO's ACTIONS.

A.2.1, A.2.2, A.2.3, B.1, B.2, and B.3 With the offsite circuit not available to all required trains, the option would still exist to declare all required

features inoperable. Since this option may involve

undesired administrative efforts, the allowance for

sufficiently conservative actions is made. With the

required DG inoperable, the minimum required diversity of AC

power sources is not available. It is, therefore, required

to suspend movement of irradiated fuel assemblies, and operations involving positive reactivity additions that

could result in loss of the required SHUTDOWN MARGIN (SDM)

(MODE 5) or boron concentration (MODE 6). Suspending

positive reactivity additions that could result in failure

to meet the minimum SDM or boron concentration limit is

required to assure continued safe operation. Introduction

of coolant inventory must be from sources that have a boron

concentration greater than that required in the RCS for the

minimum SDM or refueling boron concentration. This may

result in an overall reduction in RCS boron concentration,

but provides an acceptable margin to maintaining subcritical

operation. Introduction of temperature changes including

temperature increases when operating with a positive

moderator temperature coefficient (MTC) must also be

evaluated to ensure they do not result in a loss of the

required SDM.

Suspension of these activities does not preclude completion of actions to establish a safe conservative condition.

These actions minimize the probability or the occurrence of

postulated events. It is further required, to immediately

initiate action to restore the required AC sources and to

continue this action until restoration is accomplished in

order to provide the necessary AC power to the unit safety

systems.

AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-6 Revision 19 The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The

restoration of the required AC electrical power sources

should be completed as quickly as possible in order to

minimize the time during which the unit safety systems may

be without sufficient power.

Pursuant to LCO 3.0.6, the Electrical Distribution System's ACTIONS are not entered even if all AC sources to it are

inoperable, resulting in de-energization. Therefore, the

Required Actions of Condition A are modified by a Note to

indicate that when Condition A is entered with no AC power

to any required ESF bus, the ACTIONS for LCO 3.8.10 must be

immediately entered. This Note allows Condition A to

provide requirements for the loss of the offsite circuit,

whether or not a train is de-energized. Limiting Condition

for Operation 3.8.10 provides the appropriate restrictions for the situation involving a de-energized train.

SURVEILLANCE SR 3.8.2.1 and SR 3.8.2.2 REQUIREMENTS Surveillance Requirements 3.8.2.1 and 3.8.2.2 require the performance of SRs from LCO 3.8.1 that are necessary for

ensuring the OPERABILITY of the AC sources in other than

MODEs 1, 2, 3, and 4. Surveillance Requirement 3.8.1.10 is

not required to be met, since only one offsite circuit is

required to be OPERABLE. Surveillance Requirements 3.8.1.4,

3.8.1.8, 3.8.1.13, and 3.8.1.15 are related to automatic

starting of the DGs for an operating unit, which is not

applicable for a shutdown unit. Surveillance Requirement 3.8.1.16 is related to LCO 3.8.2.c and 3.8.2.d AC sources, and is addressed by SR 3.8.2.2.

Surveillance Requirement 3.8.2.1 is modified by a Note. The Note lists SRs not required to be performed in order to

preclude de-energizing a required 4.16 kV ESF bus or

disconnecting a required offsite circuit during performance

of SRs. With limited AC Sources available, a single event

could compromise both the required circuit and the DG. It

is the intent that these SRs must still be capable of being

met, but actual performance is not required during periods

when the DG and offsite circuit are required to be OPERABLE.

AC Sources-Shutdown B 3.8.2 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.2-7 Revision 19 Refer to the corresponding Bases for LCO 3.8.1 for a discussion of each SR.

REFERENCES None

Diesel Fuel Oil B 3.8.3 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.3 Diesel Fuel Oil

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-1 Revision 47 BACKGROUND The fuel oil storage tanks (FOSTs) contain sufficient capability for the DGs to operate one unit on accident loads

and one unit on shutdown loads for seven days. This is

discussed in Reference 1, Chapter 8. This onsite fuel oil capacity is sufficient to operate the DGs for longer than the time to replenish the onsite supply from outside

sources.

Fuel oil is transferred from the storage tanks to the day tank by transfer pumps associated with each DG.

For proper operation of the standby DGs, it is necessary to ensure the proper quality of the fuel oil. Testing to check

for water and sediment content, the kinematic viscosity,

specific gravity (or API gravity), and impurity level

(i.e., total particulates) ensures this quality.

The DG fuel oil system design at Calvert Cliffs supports four emergency DGs and other non-safety DGs. Three of the

four emergency DGs, i.e., Nos. 1B, 2A, and 2B, are fueled

from two FOSTs, i.e., FOST Nos. 11 and 21, and DG No. 1A is

fueled from FOST No. 1A. Fuel Oil Storage Tank Nos. 1A and

21 are enclosed such as to be considered "tornado protected"

but FOST No. 11 is not protected. As such, FOST No. 11 is

not used as the primary source for the emergency DGs, but

rather is used as a backup to support FOST No. 21, if it or

the fuel oil it contains becomes degraded.

The operability of FOST No. 21 ensures that at least seven days of fuel oil will be available for operation of one DG on each unit, assuming one unit under accident conditions

with a DG load of 3500 kW, and the opposite unit under normal shutdown conditions with a DG load of 3000 kW.

Additionally, the operability of FOST No. 21 ensures that in

the event of a loss of offsite power, concurrent with a loss

of the non-bunkered FOST (tornado/missile event), at least

seven days of fuel oil will be available for operation of

one DG on each unit, assuming both DGs are loaded to

3000 kW. The operability of the FOST No. 1A ensures that at Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-2 Revision 47 least seven days of fuel oil is available to support operation of DG No. 1A at 4000 kW.

The operability of the fuel oil day tanks ensures that at least one hour of DG operation is available without makeup

to the day tanks, assuming DG No. 1A is loaded to 4000 kW and DG Nos. 1B, 2A, and 2B are loaded to 3500 kW.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, and Chapters 6 and 14, assume ESF systems are OPERABLE. The DGs are designed to provide sufficient

capacity, capability, redundancy, and reliability to ensure

the availability of necessary power to ESF systems so that

fuel, RCS, and containment design limits are not exceeded.

These limits are discussed in more detail in the Bases for

LCO Section 3.2, 3.4, and 3.6.

Since diesel fuel oil supports the operation of the standby AC power sources, they satisfy 10 CFR 50.36(c)(2)(ii),

Criterion 3.

LCO Fuel Oil Storage Tank No. 1A is required to contain a minimum of 49,500 gallons of available diesel fuel oil which

is a sufficient supply to operate DG No. 1A with accident

loads for seven days. Fuel Oil Storage Tank No. 21 is required to contain a minimum of 85,000 gallons of available diesel fuel oil which is a sufficient supply to operate one

unit with accident loads and one unit with shutdown loads

for seven days. It is also required to meet specific

standards for quality. This requirement, in conjunction

with an ability to obtain replacement supplies within

seven days, supports the availability of DGs required to

shut down the reactor and to maintain it in a safe condition

for an AOO or a postulated DBA with loss of offsite power.

Diesel generator day tank fuel requirements, as well as

transfer capability from the FOST to the day tank, are addressed in LCO 3.8.1 and LCO 3.8.2.

APPLICABILITY The AC sources (LCO 3.8.1 and LCO 3.8.2) are required to ensure the availability of the required power to shut down

the reactor and maintain it in a safe shutdown condition

after an AOO or a postulated DBA. Since stored diesel fuel

oil supports LCO 3.8.1 and LCO 3.8.2, stored diesel fuel oil Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-3 Revision 49 is required to be within limits when the associated DG is required to be OPERABLE.

For both Unit 1 and Unit 2, the FOST No. 1A associated DG is only DG No. 1A. For Unit 1, the FOST No. 21 associated DGs

are DG Nos. 1B and 2B. For Unit 2, the FOST No. 21 associated DGs are DG Nos. 2A and 2B. Alignment does not affect the association of DG and FOST since the individual

DG fuel oil day tank provides sufficient volume for the DG

to perform its safety function while re-alignment is accomplished, if necessary.

ACTIONS The ACTIONS Table is modified by a Note indicating that separate Condition entry is allowed for each DG. This is

acceptable, since the Required Actions for each Condition

provide appropriate compensatory actions for each inoperable

DG subsystem. Complying with the Required Actions for one

inoperable DG subsystem may allow for continued operation,

and subsequent inoperable DG subsystem(s) are governed by

separate Condition entry and application of associated

Required Actions.

A.1, B.1, B.2, C.1, C.2, and C.3 In this Condition, the seven day fuel oil supply for a DG is not available. However, fuel oil volume reduction is

limited to 6/7 of the required volume which will provide

sufficient capacity to operate one DG on one unit on

accident loads, and one DG on the other unit on shutdown

loads for approximately six days. The fuel oil level ensuring a six day supply is 42,430 gallons (FOST No. 1A) and 72,860 gallons (FOST No. 11, FOST No. 21). These circumstances may be caused by events such as full load

operation required after an inadvertent start while at

minimum required level; or feed and bleed operations, which

may be necessitated by increasing particulate levels or any

number of other oil quality degradations. This restriction

allows sufficient time for obtaining the requisite

replacement volume and performing the analyses required

prior to addition of fuel oil to the tank. A period of

48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> is considered sufficient to complete restoration of

the required level prior to declaring the DG inoperable.

This period is acceptable based on the remaining capacity

(approximately six days), the fact that procedures will be Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-4 Revision 49 initiated to obtain replenishment, and the low probability of an event during this brief period.

Condition A addresses only FOST No. 1A which is "tornado protected" and which contains sufficient fuel for seven days

of required operation of DG No. 1A. It supports both Unit 1 and Unit 2 equipment since DG No. 1A provides power for equipment which is shared by both units, e.g., the CREVS.

Condition B addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for seven days

of required operation of two DGs. Fuel Oil Storage Tank

No. 21 supports both Unit 1 and Unit 2 equipment, but

Condition B is written for Unit 1 only to reflect the Unit 1

requirements for DG Nos. 1B and 2B. For an accident, Unit 1

requires either DG No. 1A or both DG Nos. 1B and 2B (since

DG No. 2B powers equipment which is redundant to some

equipment powered by DG No. 1A, e.g., CREVS). Since DG

No. 1A is supported by FOST No. 1A and the redundant

required equipment is powered by DG Nos. 1B and 2B which are

supported by FOST No. 21, at least one full train of

required equipment is supported by a "tornado protected"

FOST even with an inoperable FOST or DG. Therefore, low

fuel oil volume in FOST No. 21 can be supplemented by the

fuel oil volume of an OPERABLE FOST No. 11 to assure the

necessary volume. Required Action B.1 requires the combined

volume of FOST No. 21 and an OPERABLE FOST No. 11 to be

verified to be greater than 6/7 of the required volume

within one hour. The Completion Time of one hour is

consistent with the time needed to verify through

administrative means that the backup FOST is OPERABLE.

Required Action B.2 requires the combined volume of FOST No. 21 and an OPERABLE FOST No. 11 to be 85,000 gallons within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />. In addition, if FOST No. 21 is not

restored and FOST No. 11 continues to be relied upon, Required Action B.2 must be repeated every 31 days. This effectively replaces the SR 3.8.3.1 periodic surveillance of

available DG fuel oil volume for the inoperable FOST No. 21.

Since FOST No. 11 is not required by the LCO, FOST No. 11

may be considered OPERABLE only when the stored fuel oil

meets SR 3.8.3.2 and SR 3.8.3.3, and is capable of being

delivered to the required DG, i.e., the necessary piping and

valves are capable of performing their safety function.

Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-5 Revision 2 Specific alignment to a particular FOST is not required since the individual DG fuel oil day tank provides

sufficient volume for the DG to perform its safety function

while re-alignment is accomplished, if necessary. Further,

if any fuel oil in FOST No. 11 above the 33,000 gallons reserved for emergency DG use is credited for DG use, appropriate administrative controls must be in place to assure its retention for this purpose.

Condition C also addresses only FOST No. 21 which is "tornado protected" and which contains sufficient fuel for

seven days of required operation of two DGs. Fuel Oil Storage Tank No. 21 supports both Unit 1 and Unit 2 equipment, but Condition C is written for Unit 2 only to

reflect the Unit 2 requirements for DG Nos. 2A and 2B. For an accident, Unit 2 requires either DG No. 2B or both DG Nos. 1A and 2A (since DG No. 1A powers equipment which is redundant to some equipment powered by DG No. 2B, e.g., CREVS). Unlike Unit 1, at least one full train of

required equipment is not supported by a "tornado protected"

FOST with an inoperable FOST or DG since most of the

redundant required equipment is powered by DG Nos. 2A and 2B which are both supported by FOST No. 21. Therefore, low fuel oil volume in FOST No. 21 can only be supplemented by the fuel oil volume of an OPERABLE FOST No. 11 to assure the necessary volume when the probability for a tornado is

sufficiently low. This is reflected in Note 2 for Required

Action C.2 which addresses the inoperability of FOST No. 21 from April 1 to September 30. During the time of low

tornado probability, the Unit 2 requirements for the

inoperability of FOST No. 21 are very similar to the Unit 1 requirements for inoperability of FOST No. 21. It is acceptable for the combined volume of FOST No. 11 and FOST No. 21 to be considered in providing 6/7 of the required volume for the 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> allowed by Required Action C.3.

Required Action C.1 requires the combined volume of FOST

No. 21 and an OPERABLE FOST No. 11 to be verified to be greater than 6/7 of the required volume within one hour.

Required Action C.3 then requires the volume of FOST No. 21 to be restored to within volume limits within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />.

However, during tornado season, i.e., from April 1 to

September 30, the fuel oil volume of FOST No. 11 is not allowed to be credited and the fuel oil seven day volume of Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-6 Revision 2 FOST No. 21 must be restored within two hours as indicated in Required Action C.2. Required Action C.2 is also modified by a Note such that it is only required during the

operation of Unit 2 in MODEs 1, 2, 3, or 4 since the unit is already shutdown if it is in another MODE or condition. An

OPERABLE FOST No. 11 is determined as described above in the discussion for Condition B.

D.1 This Condition is entered as a result of a failure to meet the acceptance criterion of SR 3.8.3.2. Normally, trending

of particulate levels allows sufficient time to correct high

particulate levels prior to reaching the limit of

acceptability. Poor sample procedures (bottom sampling),

contaminated sampling equipment, and errors in laboratory

analysis can produce failures that do not follow a trend.

Since the presence of particulates does not mean failure of

the fuel oil to burn properly in the diesel engine, and

particulate concentration is unlikely to change

significantly between SR Frequency intervals, and proper engine performance has been recently demonstrated (within

31 days), it is prudent to allow a brief period prior to

declaring the associated DG inoperable. The seven day Completion Time allows for further evaluation, resampling,

and re-analysis of the DG fuel oil.

E.1 With the new fuel oil properties defined in the Bases for SR 3.8.3.2 not within the required limits, a period of

30 days is allowed for restoring the stored fuel oil

properties to within the new fuel oil limits. This period

provides sufficient time to test the stored fuel oil to

determine that the new fuel oil, when mixed with previously

stored fuel oil, remains acceptable, or restore the stored fuel oil properties to within the new fuel oil limits. This restoration may involve feed and bleed procedures,

filtering, or combinations of these procedures. Even if a

DG start and load was required during this time interval, and the fuel oil properties were outside limits, there is a

high likelihood that the DG would still be capable of

performing its intended function.

Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-7 Revision 55 F.1 With a Required Action and associated Completion Time not met, or one or more DGs with diesel fuel oil not within

limits for reasons other than addressed by Conditions A

through E, the associated DG may be incapable of performing

its intended function and must be immediately declared inoperable. "Associated DG(s)" are identified in the

Applicability Bases.

SURVEILLANCE SR 3.8.3.1 REQUIREMENTS This SR provides verification that there is an adequate inventory of fuel oil in the DG FOSTs to support one unit on

accident loads and one unit on shutdown loads for

seven days. The fuel oil level ensuring a seven day supply

is 49,500 gallons (FOST No. 1A) and 85,000 gallons (FOST

No. 21) when calculated in accordance with References 3 and

4. The required fuel oil storage volume is determined using

the most limiting energy content of the stored fuel. Using

the limiting energy content, the required diesel generator

output and the corresponding fuel oil consumption rate, the

onsite fuel oil storage volume required for seven days of

operation can be determined. Surveillance

Requirement 3.8.3.2 requires new fuel to be tested to verify

that the energy content is within the range assumed in the

diesel fuel oil consumption calculations. The seven day

period is sufficient time to place the unit in a safe

shutdown condition and to bring in replenishment fuel from

an offsite location.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.3.2 The tests listed below are a means of determining whether new fuel oil is of the appropriate grade (i.e., 2D and 2D

low sulfur) and has not been contaminated with substances

that would have an immediate, detrimental impact on diesel

engine combustion. Note that further references to American

Society for Testing Materials (ASTM) 2D fuel oil include

both 2D and 2D low sulfur. If results from these tests are

within acceptable limits, the fuel oil may be added to the Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-8 Revision 55 storage tanks without concern for contaminating the entire volume of fuel oil in the storage tanks. These tests are to

be conducted prior to adding the new fuel to the storage

tank(s), but in no case is the time between receipt of new

fuel and conducting the tests to exceed 31 days. The tests,

limits, and applicable ASTM Standards are as follows: a. Sample the new fuel oil in accordance with Reference 3, ASTM D4057-1995; b. Verify in accordance with the tests specified in Reference 3, ASTM D975-1996, that the sample has an absolute specific gravity at 60/60°F of 0.8155 and 0.8871, or an American Petroleum Institute gravity at 60°F of 28° and 42°, a kinematic viscosity at 40°C of 1.9 centistokes and 4.1 centistokes, and a flash point 125°F; and c. Verify that the new fuel oil has 0.05% water and sediment (Reference 3, ASTM D975-1996).

Failure to meet any of the above limits is cause for rejecting the new fuel oil, but does not represent a failure

to meet the LCO concern since the fuel oil is not added to

the storage tanks.

Within 31 days following the initial new fuel oil sample, the fuel oil is analyzed to establish that the other

properties specified in Reference 2, ASTM D975-1996,

Table 1, are met for new fuel oil. The 31 day period is

acceptable because the fuel oil properties of interest, even

if they were not within stated limits, would not have an

immediate effect on DG operation. This SR ensures the

availability of high quality fuel oil for the DGs.

Fuel oil degradation during long-term storage shows up as an increase in particulate, due mostly to oxidation. The

presence of particulate does not mean the fuel oil will not burn properly in a diesel engine. The particulate can cause fouling of filters and fuel oil injection equipment,

however, that can cause engine failure.

Particulate concentrations should be determined by gravimetric analysis (based on ASTM D2276-1989) of total Diesel Fuel Oil B 3.8.3 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.3-9 Revision 55 particulate concentration in the fuel oil and has a limit of 10 mg/l. It is acceptable to obtain a field sample for

subsequent laboratory testing in lieu of field testing.

Because the total stored fuel oil volume for DG Nos. 1B, 2A,

and 2B is contained in two interconnected tanks, each tank

must be considered and tested separately. There is a separate FOST for DG No. 1A.

The Frequency of this test takes into consideration fuel oil degradation trends that indicate that particulate

concentration is unlikely to change significantly between

Frequency intervals.

SR 3.8.3.3 Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in

fuel oil and cause fouling, but all must have a water

environment in order to survive. Removal of water from the

fuel storage tanks eliminates the necessary environment for bacterial survival. This is the most effective means of

controlling microbiological fouling. In addition, it

eliminates the potential for water entrainment in the fuel

oil during DG operation. Water may come from any of several

sources, including condensation, ground water, rain water,

and contaminated fuel oil, and from breakdown of the fuel

oil by bacteria. Frequent checking for and removal of

accumulated water minimizes fouling and provides data

regarding the watertight integrity of the fuel oil system.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The presence of water does not necessarily represent failure of this SR

provided the accumulated water is removed during performance of the surveillance test.

REFERENCES 1. UFSAR 2. ASTM Standards

3. Regulatory Guide 1.137, "Fuel-Oil Systems for Standby Diesel Generators," October 1979 4. ANSI N195-1976, "Fuel Oil Systems for Standby Diesel-Generators," April 1976, Section 5.4

DC Sources-Operating B 3.8.4 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.4 DC Sources-Operating

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-1 Revision 48 BACKGROUND The station DC sources provide the AC emergency power system with control power. It also provides both motive and

control power to selected safety related equipment and

preferred AC vital bus power (via inverters). As required by Reference 1, Appendix 1C, Criterion 39, the DC electrical power sources are designed to have sufficient independence,

redundancy, and testability to perform their safety

functions, assuming a single failure. The DC sources also

conform to the recommendations of References 2 and 3.

The 125 VDC electrical power sources consist of four independent and redundant safety related Class 1E DC

channels. Each channel consists of one 125 VDC battery, two associated battery charger for each battery, and all the

associated control equipment and interconnecting cabling.

During normal operation, the 125 VDC load is powered from the battery chargers with the batteries floating on the

system. In cases where momentary loads are greater than the

charger capability, or a loss of normal power to the battery

charger, the DC load is automatically powered from the

station batteries.

The DC channels provide the control power for its associated Class 1E AC power load group, 4.16 kV switchgear, and 480 V

load centers. The DC channels also provide a DC source to

the inverters, which in turn power the AC vital buses.

The DC sources are described in more detail in the Bases for LCO 3.8.9 and for LCO 3.8.10.

Each battery has adequate storage capacity to carry the required load continuously for at least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> and to carry load duty cycle as discussed in Reference 1, Chapter 8.

Each 125 VDC battery is separately housed in a ventilated room apart from its charger and distribution centers. Each

channel is separated physically and electrically from the

other channel to ensure that a single failure in one channel

does not cause a failure in a redundant channel. There is DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-2 Revision 48 no sharing between redundant Class 1E channels, such as batteries, battery chargers, or distribution panels.

The batteries for DC channels are sized to produce required capacity at 80% of nameplate rating, corresponding to

warranted capacity at end of life cycles and the 100% design demand. Battery size is based on 125% of required capacity.

An average voltage of 2.13 V per cell, corresponds to a

total minimum voltage output of 125 V per battery (128 V for

the reserve battery) as discussed in Reference 1, Chapter 8.

The criteria for sizing large lead storage batteries are

defined in Reference 4.

Each DC channel has ample power output capacity for the steady state operation of connected loads required during

normal operation, while at the same time maintaining its

battery bank fully charged. Each battery charger also has

sufficient capacity to restore the battery from the design

minimum charge to 95% of its fully charged state within

24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> while supplying normal steady state loads discussed in Reference 1, Chapter 8.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC channels provide a normal and emergency DC

sources for the DGs, emergency auxiliaries, and control and

switching during all MODEs of operation.

The OPERABILITY of the DC sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This includes maintaining the DC sources OPERABLE during accident

conditions in the event of: a. An assumed loss of all offsite AC power or all onsite AC power; and b. A worst case single failure.

The DC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

LCO The DC channels, each channel consisting of one battery, two battery chargers, and the corresponding control equipment and interconnecting cabling supplying power to the DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-3 Revision 48 associated bus, are required to be OPERABLE to ensure the availability of the required power to shut down the reactor

and maintain it in a safe condition after an AOO or a

postulated DBA. Loss of any DC channel does not prevent the

minimum safety function from being performed (Reference 1,

Chapter 8).

An OPERABLE DC channel requires the battery and one OPERABLE charger to be operating and connected to the associated DC bus(es).

APPLICABILITY The DC sources are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure safe unit operation and to ensure that: a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result

of AOOs or abnormal transients; and b. Adequate core cooling is provided, and containment integrity and other vital functions are maintained in

the event of a postulated DBA.

The DC sources requirement for MODEs 5 and 6 are addressed in the Bases for LCO 3.8.5.

ACTIONS A.1 Required Action A.1 requires the inoperable battery to be replaced by the reserve battery within four hours when one

DC channel is inoperable due to an inoperable battery and

the reserve battery is available. The reserve battery is a

qualified battery that can replace and perform the required

function of any inoperable battery. The four hour Completion Time is acceptable based on the capability of the reserve battery and the time it takes to replace the

inoperable battery with the reserve battery while minimizing

the time in this degraded condition.

B.1 Condition B represents one channel with a loss of ability to completely respond to an event, and a potential loss of

ability to remain energized during normal operation.

Therefore, it is imperative that the operator's attention

focus on stabilizing the unit, minimizing the potential for DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-4 Revision 48 complete loss of DC power to the affected channel. The 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> limit is consistent with the allowed time for an

inoperable DC channel.

If one of the required DC channels is inoperable for reasons other than Condition A (e.g., inoperable battery, inoperable battery charger(s), or inoperable battery charger and associated inoperable battery), the remaining DC channels

have the capacity to support a safe shutdown and to mitigate

an accident condition. Since a subsequent worst case single

failure would, however, result in the further loss of the

125 VDC channels with attendant loss of ESF functions,

continued power operation should not exceed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />. The

2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> Completion Time is based on Reference 5 and reflects

a reasonable time to assess unit status as a function of the

inoperable DC channel and, if the DC channel is not restored

to OPERABLE status, to prepare to effect an orderly and safe

unit shutdown.

C.1 and C.2 If the inoperable DC channel cannot be restored to OPERABLE status within the required Completion Time, the unit must be

brought to a MODE in which the LCO does not apply. To

achieve this status, the unit must be brought to at least

MODE 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and to MODE 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The

allowed Completion Times are reasonable, based on operating

experience, to reach the required unit conditions from full

power conditions in an orderly manner and without

challenging unit systems. The Completion Time to bring the

unit to MODE 5 is consistent with the time required in Reference 5.

SURVEILLANCE SR 3.8.4.1 REQUIREMENTS Verifying battery terminal voltage while on float charge helps to ensure the effectiveness of the charging system and

the ability of the batteries to perform their intended

function. Float charge is the condition in which the

charger is supplying connected loads and the continuous

charge required to overcome the internal losses of a battery

and maintain the battery in a fully charged state. The

voltage requirements are based on the nominal design voltage

of the battery (2.13 V per cell average) and are consistent DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-5 Revision 55 with Reference 6 and the initial state of charge conditions assumed in the battery sizing calculations. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.4.2 Visual inspection to detect corrosion of the battery cells and connections, or measurement of the resistance of each

cell to cell and terminal connection, provides an indication

of physical damage or abnormal deterioration that could

potentially degrade battery performance.

The limits established for this SR must be no more than 20%

above the resistance as measured during installation or not

above the ceiling value established by the manufacturer.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.4.3 Visual inspection of the battery cells, cell plates, and battery racks provides an indication of physical damage or

abnormal deterioration that could potentially degrade

battery performance.

The presence of physical damage or deterioration does not necessarily represent a failure of this SR, provided an

evaluation determines that the physical damage or

deterioration does not affect the OPERABILITY of the

battery (its ability to perform its design function).

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.4.4 and SR 3.8.4.5 Visual inspection and resistance measurements of cell to cell and terminal connections provide an indication of

physical damage or abnormal deterioration that could

indicate degraded battery condition. The anti-corrosion

material is used to help ensure good electrical connections

and to reduce terminal deterioration. The visual inspection

for corrosion is not intended to require removal of and DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-6 Revision 55 inspection under each terminal connection. The removal of visible corrosion is a preventive maintenance SR. The

presence of visible corrosion does not necessarily represent

a failure of this SR provided visible corrosion is removed

during performance of SR 3.8.4.4.

The connection resistance limits for SR 3.8.4.5 shall be no more than 20% above the resistance as measured during

installation, or not above the ceiling value established by

the manufacturer.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.4.6 This SR requires that each battery charger be capable of supplying 400 amps and 125 V for 30 minutes. These requirements are based on the output rating of the chargers

(Reference 1, Chapter 8). According to Reference 7, the

battery charger supply is required to be based on the

largest combined demands of the various steady state loads

and the charging capacity to restore the battery from the

design minimum charge state to the fully charged state,

irrespective of the status of the unit during these demand

occurrences. The minimum required amperes and duration

ensures that these requirements can be satisfied. The test

is performed while supplying normal DC loads or an

equivalent or greater dummy load.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.4.7 A battery service test is a special test of battery capability, as found and with the associated battery charger disconnected, to satisfy the design requirements (battery duty cycle) of the DC source. The test duration must be 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> and battery terminal voltage must be maintained 105 volts during the test. The discharge rate and test length should correspond to the design accident load (duty)

cycle requirements as specified in Reference 1, Chapter 8.

A dummy load simulating the emergency loads of the design DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-7 Revision 55 duty cycle may be used in lieu of the actual emergency loads.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by a Note. The Note allows the performance of a modified performance discharge test in lieu

of a service test. This substitution is acceptable because

a modified performance discharge test represents a more

severe test of battery capacity than SR 3.8.4.7.

SR 3.8.4.8 A battery performance discharge test is a test of constant current capacity of a battery after having been in service,

to detect any change in the capacity determined by the

acceptance test. The test is intended to determine overall

battery degradation due to age and usage.

A battery modified performance discharge test is a simulated duty cycle consisting of just two rates; the one minute rate

published for the battery or the largest current load of the

duty cycle, followed by the test rate employed for the

performance discharge test, both of which envelope the duty

cycle of the service test. Since the ampere-hours removed

by a rated one minute discharge represents a very small

portion of the battery capacity, the test rate can be

changed to that for the performance test without

compromising the results of the performance discharge test.

The battery terminal voltage for the modified performance

discharge test should remain above the minimum battery

terminal voltage specified in the battery performance

discharge test for the duration of time equal to that of the

performance discharge test.

A modified performance discharge test is a test of the battery capacity and its ability to provide a high rate,

short duration load (usually the highest rate of the duty

cycle). This will often confirm the battery's ability to

meet the critical period of the load duty cycle, in addition

to determining its percentage of rated capacity. Initial

conditions for the modified performance discharge test

should be identical to those specified for a service test.

DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-8 Revision 55 Either the battery performance discharge test or the modified performance discharge test is acceptable for

satisfying SR 3.8.4.8; however, only the modified

performance discharge test may be used to satisfy SR 3.8.4.8

while satisfying the requirements of SR 3.8.4.7 at the same

time. The acceptance criteria for this SR are consistent with References 6 and 4. These references recommend that the

battery be replaced if its capacity is below 80% of the

manufacturer rating. A capacity of 80% shows that the

battery rate of deterioration is increasing, even if there

is ample capacity to meet the load requirements.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. If the battery shows degradation, or if the battery has reached 85% of its

expected life and capacity is < 100% of the manufacturer's

rating, the SR Frequency is reduced to 12 months. However,

if the battery shows no degradation but has reached 85% of

its expected life, the SR Frequency is only reduced to 24 months for batteries that retain capacity 100% of the manufacturer's rating. Degradation is indicated, according

to Reference 6, when the battery capacity drops by more than

10% relative to its capacity on the previous performance test or when it is 10% below the manufacturer's rating.

These Frequencies are consistent with the recommendations in Reference 6.

REFERENCES 1. UFSAR 2. Safety Guide 6, Revision 0, "Independence Between Redundant Standby (Onsite) Power Sources and Between

Their Distribution Systems, August 10, 1971 3. IEEE Standard 308-1974, "IEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating

Stations" 4. IEEE Standard 485-1983, "Recommended Practice for Sizing Large Lead Storage Batteries for Generating

Stations and Substations (ANSI)," June 1983 5. Regulatory Guide 1.93, "Availability of Electric Power Sources," December 1974 DC Sources-Operating B 3.8.4 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.4-9 Revision 55 6. IEEE Standard 450-1995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-

Acid Batteries for Stationary Applications," May 1995 7. Regulatory Guide 1.32, Revision 2, "Criteria for Safety-Related Electric Power Systems for Nuclear Power Plants," February 1977 DC Sources-Shutdown B 3.8.5 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.5 DC Sources-Shutdown

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-1 Revision 2 BACKGROUND A description of the DC sources is provided in the Bases for LCO 3.8.4

. APPLICABLE The initial conditions of DBA; and transient analyses in SAFETY ANALYSES Reference 1

, Chapters 6 and 14, assume that ESF systems are OPERABLE. The DC sources provide normal and emergency DC for the DGs, emergency auxiliaries, and control and switching during all MODE s of operation.

The OPERABILITY of the DC subsystems is consistent with the initial assumptions of the accident analyses and the

requirements for the supported systems' OPERABILITY.

The OPERABILITY of the minimum DC sources during MODE s 5 and 6 and during movement of irradiated fuel assemblies ensures that: a. The unit can be maintained in the shutdown or refueling condition for extended periods; b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit

status; and c. Adequate DC sources are provided to mitigate events postulated during shutdown, such as a fuel handling

accident.

The DC sources satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

LCO The DC channels, each channel consisting of one battery, one battery charger, and the corresponding control equipment and

interconnecting cabling within the channel, are required to

be OPERABLE to support required trains of distribution

systems required OPERABLE by LCO 3.8.10

. This ensures the availability of sufficient DC sources to operate the unit in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents).

DC Sources-Shutdown B 3.8.5 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-2 Revision 29 APPLICABILITY The DC sources required to be OPERABLE in MODEs 5 and 6, and during movement of irradiated fuel assemblies provide

assurance that: a. Required features needed to mitigate a fuel handling accident are available; b. Required features necessary to mitigate the effects of events that can lead to core damage during shutdown are available; and c. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown

condition or refueling condition.

The DC channel requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.4.

ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODE 5 or 6. However, since irradiated fuel

assembly movement can occur in MODE 1, 2, 3, or 4, the

ACTIONS have been modified by a Note stating that LCO 3.0.3

is not applicable. If moving irradiated fuel assemblies

while in MODE 5 or 6, LCO 3.0.3 would not specify any

action. If moving irradiated fuel assemblies while in MODE

1, 2, 3, or 4, the fuel movement is independent of reactor

operations. Therefore, in either case, the inability to

suspend movement of irradiated fuel assemblies would not be

sufficient reason to require a reactor shutdown.

The ACTIONS have been modified by a second Note stating that performance of REQUIRED ACTIONS shall not preclude

completion of actions to establish a safe conservative position. This clarification is provided to avoid stopping movement of irradiated fuel assemblies while in a non-

conservative position based on compliance with the REQUIRED

ACTIONS.

A.1, A.2.1, A.2.2, and A.2.3 If two trains are required per LCO 3.8.10, the remaining train with DC power available may be capable of supporting

sufficient systems to allow continuation of movement of irradiated fuel assemblies

. By allowing the option to declare required features inoperable with the associated DC DC Sources-Shutdown B 3.8.5 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-3 Revision 29 power source(s) inoperable, appropriate restrictions will be implemented in accordance with the affected required

features LCO ACTIONS. In many instances, this option may

involve undesired administrative efforts. Therefore, the

allowance for sufficiently conservative actions is made

(i.e., to suspend movement of irradiated fuel assemblies and operations involving positive reactivity additions). The Required Action to suspend positive reactivity additions

does not preclude actions to maintain or increase reactor

vessel inventory, provided the required SDM is maintained.

Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.

These actions minimize probability of the occurrence of

postulated events. It is further required to immediately

initiate action to restore the required DC channels and to

continue this action until restoration is accomplished in

order to provide the necessary DC source to the unit safety

systems.

The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The

restoration of the required DC channels should be completed

as quickly as possible in order to minimize the time during

which the unit safety systems may be without sufficient power. SURVEILLANCE SR 3.8.5.1 REQUIREMENTS Surveillance Requirement 3.8.5.1 states that surveillance tests required by SR 3.8.4.1 through SR 3.8.4.8 are applicable in these MODEs. See the corresponding Bases for

LCO 3.8.4 for a discussion of each SR.

This SR is modified by a Note. The reason for the Note is to preclude requiring the OPERABLE DC sources from being

discharged below their capability to provide the required

power supply or otherwise rendered inoperable during the

performance of SRs. It is the intent that these SRs must

still be capable of being met, but actual performance is not required.

DC Sources-Shutdown B 3.8.5 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.5-4 Revision 2 REFERENCES 1. UFSAR

Battery Cell Parameters B 3.8.6 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.6 Battery Cell Parameters

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-1 Revision 2 BACKGROUND This LCO delineates the limits on electrolyte temperature, level, individual cell float voltage (ICV), and specific

gravity for the DC power source batteries. A discussion of

these batteries and their OPERABILITY requirements is provided in the Bases for LCO 3.8.4 and LCO 3.8.5.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The DC sources provide normal and emergency DC

electrical power for the DGs, emergency auxiliaries, and control and switching during all MODEs of operation.

The OPERABILITY of the DC channels is consistent with the initial assumptions of the accident analyses and is based

upon meeting the design basis of the unit, as discussed in

the Bases for LCO 3.8.4 and LCO 3.8.5.

Battery cell parameters satisfy Criterion 3 of the NRC Policy Statement.

LCO Battery cell parameters must remain within acceptable limits to ensure availability of the required DC power to shut down

the reactor and maintain it in a safe condition after an AOO or a postulated DBA. Electrolyte limits are conservatively

established, allowing continued DC electrical system function even with Category A or B limits not met.

APPLICABILITY The battery parameters are required solely for the support of the associated DC electrical power subsystems.

Therefore, battery electrolyte is only required when the

DC power source is required to be OPERABLE. Refer to the

Applicability discussion in the Bases for LCO 3.8.4 and LCO 3.8.5.

ACTIONS The Actions Table is modified by a Note which indicates that separate Condition entry is allowed for each battery. This

is acceptable, since the Required Actions for each Condition

provide appropriate compensatory actions for each inoperable

DC channel. Complying with the Required Actions for one Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-2 Revision 56 inoperable DC channel may allow for continued operation, and subsequent inoperable DC subsystem(s) are governed by

separate Condition entry and application of associated

Required Actions.

A.1, A.2, and A.3

With parameters of one or more cells, in one or more batteries, not within limits (i.e., Category A limits not

met or Category B limits not met) but within Category C

limits specified in Table 3.8.6-1, the battery is degraded

but there is still sufficient capacity to perform the

intended function. Therefore, the affected battery is not

required to be considered inoperable solely as a result of

Category A or B limits not met, and continued operation is

permitted for a limited period.

The pilot cell electrolyte level and ICV are required to be verified to meet the Category C limits within one hour

(Required Action A.1). This check will provide a quick

indication of the status of the remainder of the battery

cells. One hour provides time to inspect the electrolyte

level and to confirm the ICV of the pilot cells. One hour

is considered a reasonable amount of time to perform the

required verification.

Verification that the Category C limits are met (Required Action A.2) provides assurance that during the time needed

to restore the parameters to the Category A and B limits,

the battery will still be capable of performing its intended

function. A period of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is allowed to complete the

initial verification because specific gravity measurements

must be obtained for each connected cell. Taking into

consideration both the time required to perform the required verification and the assurance that the battery cell parameters are not severely degraded, this time is

considered reasonable. The verification is repeated at

seven day intervals until the parameters are restored to

Category A and B limits. This periodic verification is

consistent with the normal Frequency of pilot cell

Surveillances.

Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-3 Revision 55 Continued operation prior to declaring the affected batteries inoperable is permitted for 31 days before battery

cell parameters must be restored to within Category A and B

limits. With the consideration that, while battery capacity

is degraded, sufficient capacity exists to perform the

intended function and to allow time to fully restore the battery cell parameters to normal limits, this time is acceptable prior to declaring the battery inoperable.

B.1 With one or more batteries with one or more battery cell parameters outside the Category C limit for any connected

cell, sufficient capacity to supply the maximum expected

load requirement is not assured and the corresponding DC

channel must be declared inoperable. Additionally, other

potentially extreme conditions, such as any Required Action

of Condition A and associated Completion Time not met, or

average electrolyte temperature of representative cells

< 69°F, are also cause for immediately declaring the associated DC channel inoperable.

SURVEILLANCE SR 3.8.6.1 REQUIREMENTS This SR verifies that Category A battery cell parameters are consistent with Reference 2, which recommends regular

battery inspections including voltage, specific gravity, and electrolyte temperature of pilot cells.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

SR 3.8.6.2

The inspection of specific gravity and voltage is consistent with Reference 2.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-4 Revision 55 SR 3.8.6.3 This Surveillance verification that the average temperature of representative cells is

> 69°F is consistent with a recommendation of Reference 2, which states that the

temperature of electrolytes in representative cells should be determined. The temperature is also high enough to supply the required capacity.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

Lower than normal temperatures act to inhibit or reduce battery capacity. This SR ensures that the operating

temperatures remain within an acceptable operating range.

This limit is based on manufacturer recommendations.

Table 3.8.6-1

This Table delineates the limits on electrolyte level, ICV, and specific gravity for three different categories. The

meaning of each category is discussed below.

Category A defines the normal parameter limit for each designated pilot cell in each battery. The cells selected

as pilot cells are those whose temperature, voltage, and

electrolyte specific gravity approximate the state of charge

of the entire battery.

The Category A limits specified for electrolyte level are based on manufacturer recommendations and are consistent

with the guidance in Reference 2, with the extra 1/4 inch

allowance above the high water level indication for

operating margin to account for temperatures and charge

effects. In addition to this allowance, Footnote (a) to Table 3.8.6-1 permits the electrolyte level to be temporarily above the specified maximum level during and

following equalizing charge (i.e., for up to seven days

following the completion of an equalize charge), provided it

is not overflowing. These limits ensure that the plates

suffer no physical damage, and that adequate electron

transfer capability is maintained in the event of transient

conditions. Reference 2 recommends that electrolyte level Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-5 Revision 55 readings should be made only after the battery has been at float charge for at least 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

The Category A limit specified for ICV is 2.13 V per cell. This value is based on a recommendation of

Reference 2, which states that prolonged operation of cells

< 2.13 V can reduce the life expectancy of cells.

The Category A limit specified for specific gravity for each pilot cell is 1.200 (0.015 below the manufacturer fully charged nominal specific gravity or a battery charging

current that had stabilized at a low value). This value is

characteristic of a charged cell with adequate capacity.

According to Reference 2, the specific gravity readings are based on a temperature of 77

°F (25°C) and full electrolyte level.

The specific gravity readings are corrected for actual electrolyte temperature and level. For each 3

°F (1.67°C) above 77°F (25°C), 1 point (0.001) is added to the reading; 1 point is subtracted for each 3

°F below 77

°F. The specific gravity of the electrolyte in a cell increases with a loss

of water due to electrolysis or evaporation.

Category B defines the normal parameter limits for each connected cell. The term "connected cell" excludes any

battery cell that may be jumpered out.

The Category B limits specified for electrolyte level and ICV are the same as those specified for Category A and have

been discussed above. The Category B limit specified for specific gravity for each connected cell is 1.195 (0.020 below the manufacturer fully charged, nominal specific gravity) with the average of all connected cells 1.205 (0.010 below the manufacturer fully charged, nominal specific gravity). These values are based on manufacturer's recommendations. The minimum specific gravity value

required for each cell ensures a cell with a marginal or

unacceptable specific gravity is not masked by averaging

cells having higher specific gravities.

Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-6 Revision 55 Category C defines the limit for each connected cell. These values, although reduced, provide assurance that sufficient

capacity exists to perform the intended function and

maintain a margin of safety. When any battery parameter is

outside the Category C limit, the assurance of sufficient

capability described above no longer exists and the battery must be declared inoperable.

The Category C limit specified for electrolyte level (above the top of the plates and not overflowing) ensures that the

plates suffer no physical damage and maintain adequate

electron transfer capability. The Category C limit for ICV

is derived from Reference 2 recommendations, which states

that a cell voltage of 2.07 V or below, under float

conditions and not caused by elevated temperature of the

cell, indicates internal cell problems and may require cell

replacement.

The Category C limit of average specific gravity 1.195 is based on manufacturer recommendations (0.020 below the

manufacturer recommended fully charged, nominal specific

gravity). In addition to that limit, it is required that

the specific gravity for each connected cell must be no less

than 0.020 below the average of all connected cells. This

limit ensures that a cell with a marginal or unacceptable

specific gravity is not masked by averaging with cells

having higher specific gravities.

The footnotes to Table 3.8.6-1 are applicable to Category A, B, and C specific gravity. Footnote (b) to Table 3.8.6-1

requires the above mentioned correction for electrolyte

level and temperature, with the exception that level

correction is not required when battery charging current is

< 1 amp on float charge. This current provides, in general, an indication of acceptable overall battery condition.

Because of specific gravity gradients that are produced during the recharging process, delays of several days may

occur while waiting for the specific gravity to stabilize.

A stabilized charging current is an acceptable alternative

to specific gravity measurement for determining the state of

charge. This phenomenon is discussed in Reference 2.

Battery Cell Parameters B 3.8.6 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.6-7 Revision 55 Footnote (c) to Table 3.8.6-1 allows the float charge current to be used as an alternate to specific gravity for

up to seven days following a battery equalizing recharge.

Within seven days, each connected cell's specific gravity

must be measured to confirm the state of charge. Following

a minor battery recharge (such as equalizing charge that does not follow a deep discharge) specific gravity gradients are not significant, and confirming measurements may be made in less than seven days.

REFERENCES 1. UFSAR 2. IEEE Standard 4501995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement Vented Lead-Acid Batteries for Stationary Applications," May 1995

Inverters-Operating B 3.8.7 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.7 Inverters-Operating

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.7-1 Revision 2 BACKGROUND The inverters are the preferred source of power for the AC vital buses, because of the stability and reliability they achieve. The function of the inverter is to provide AC

electrical power to the vital buses. Each inverter has two built-in independent inverters, either one of which can serve as the preferred source of power. In these dual

inverters, 120 volt AC power output can be manually switched

from one side to the other side. The inverters can be powered from the DC bus which is energized from the station battery and/or battery chargers. The station battery and

the inverters provides an uninterruptible power source for

the instrumentation and controls for the Reactor Protective

System (RPS) and the ESFAS. Specific details on inverters and their operating characteristics are found in Reference 1, Chapter 8.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The inverters are designed to provide the

required capacity, capability, redundancy, and reliability

to ensure the availability of necessary power to the RPS and

ESFAS instrumentation and controls so that the fuel, RCS, and containment design limits are not exceeded. These

limits are discussed in more detail in the Bases for

Sections 3.2, 3.4, and 3.6.

The OPERABILITY of the inverters is consistent with the initial assumptions of the accident analyses and is based on meeting the design basis of the unit. This includes maintaining required AC vital buses OPERABLE during accident

conditions in the event of: a. An assumed loss of all offsite AC electrical power or all onsite AC electrical power; and b. A worst case single failure.

Inverters are a part of the distribution system and, as such, satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

Inverters-Operating B 3.8.7 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.7-2 Revision 2 LCO The LCO requires four inverters to be operable, one inverter per AC vital bus. Each AC vital bus can receive power from

either side of the dual inverter. Each side of the dual

inverter is fully rated, to power the AC vital bus.

Therefore, only one side of each dual inverter is required

for the inverter to be considered OPERABLE.

The inverters ensure the availability of AC electrical power for the systems instrumentation required to shut down the

reactor and maintain it in a safe condition after an AOO or a postulated DBA.

Maintaining the required inverters OPERABLE ensures that the redundancy incorporated into the design of the RPS and ESFAS

instrumentation and controls, is maintained. The four required inverters per unit ensure an uninterruptible supply

of AC electrical power to each of the units AC vital buses

even if the 4.16 kV safety buses are de-energized.

OPERABLE inverters require the associated vital bus to be powered by either side of the dual inverter with output

voltage within tolerances, and power input to the inverter

from a 125 VDC station battery. Alternatively, power supply

may be from the battery charger as long as the station

battery is available as the uninterruptible power supply.

APPLICABILITY The inverters are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure that: a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of AOOs or abnormal transients; and b. Adequate core cooling is provided, and containment OPERABILITY and other vital functions are maintained in

the event of a postulated DBA.

Inverter requirements for MODEs 5 and 6 are covered in the Bases for LCO 3.8.8.

ACTIONS A.1 With a required inverter inoperable, its associated AC vital bus becomes inoperable until it is manually re-energized Inverters-Operating B 3.8.7 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.7-3 Revision 55 from its 120 VAC bus powered by an ESF motor control center through a regulating transformer.

Required Action A.1 is modified by a Note, which states to enter the applicable conditions and Required Actions of

LCO 3.8.9, when Condition A is entered with one AC vital bus de-energized. This ensures the vital bus is re-energized within two hours.

Required Action A.1 allows 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> to fix the inoperable inverter and return it to service. The 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> limit is

based upon engineering judgment, taking into consideration

the time required to repair an inverter and the additional

risk to which the unit is exposed because of the inverter

inoperability. This has to be balanced against the risk of

an immediate shutdown, along with the potential challenges

to safety systems such a shutdown might entail. When the AC

vital bus is powered from its constant voltage source, it is

relying upon interruptible AC electrical power sources

(offsite and onsite). The uninterruptible inverter source

to the AC vital buses is the preferred source for powering

instrumentation trip setpoint devices.

B.1 and B.2 If the inoperable devices or components cannot be restored to OPERABLE status within the required Completion Time, the

unit must be brought to a MODE in which the LCO does not

apply. To achieve this status, the unit must be brought to

at least MODE 3 within six hours and to MODE 5 within

36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable,

based on operating experience, to reach the required unit

conditions from full power conditions in an orderly manner and without challenging unit systems.

SURVEILLANCE SR 3.8.7.1 REQUIREMENTS This SR verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses

energized from the inverter. The verification of proper

voltage output ensures that the required power is readily

available for the instrumentation of the RPS and ESFAS

connected to the AC vital buses. The Surveillance Frequency Inverters-Operating B 3.8.7 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.7-4 Revision 55 is controlled under the Surveillance Frequency Control Program.

REFERENCES 1. UFSAR

Inverters-Shutdown B 3.8.8 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.8 Inverters-Shutdown

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.8-1 Revision 2 BACKGROUND A description of the inverters is provided in the Bases for LCO 3.8.7.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The DC to AC inverters are designed to provide

the required capacity, capability, redundancy, and

reliability to ensure the availability of necessary power to

the RPS and ESFAS instrumentation and controls so that the fuel, RCS, and containment design limits are not exceeded.

The OPERABILITY of the inverters is consistent with the initial assumptions of the accident analyses and the

requirements for the supported systems' OPERABILITY.

The OPERABILITY of the minimum inverters to each AC vital bus during MODEs 5 and 6 ensures that: a. The unit can be maintained in the shutdown or refueling condition for extended periods; b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit

status; and c. Adequate power is available to mitigate events postulated during shutdown, such as a fuel handling

accident.

The inverters were previously identified as part of the distribution system and, as such, satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

LCO The inverters ensure the availability of electrical power for the instrumentation for systems required to shut down

the reactor and maintain it in a safe condition after an AOO or a postulated DBA. The battery powered inverters provide

uninterruptible supply of AC electrical power to the AC

vital buses even if the 4.16 kV safety buses are

de-energized. OPERABILITY of the inverters requires that

the vital bus be powered by the inverter. This ensures the Inverters-Shutdown B 3.8.8 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.8-2 Revision 29 availability of sufficient inverter power sources to operate the unit in a safe manner and to mitigate the consequences

of postulated events during shutdown (e.g., fuel handling accidents).

APPLICABILITY The inverters required to be OPERABLE in MODEs 5 and 6 and during movement of irradiated fuel assemblies provide

assurance that: a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel in the core; b. Systems needed to mitigate a fuel handling accident are available; c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are

available; and d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown

condition or refueling condition.

Inverter requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.7.

ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel

assembly movement can occur in MODEs 1, 2, 3, or 4, the ACTIONS have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving irradiated fuel assemblies

while in MODEs 5 or 6, LCO 3.0.3 would not specify any

action. If moving irradiated fuel assemblies while in

MODEs 1, 2, 3, or 4, the fuel movement is independent of

reactor operations. Therefore, in either case, inability to

suspend movement of irradiated fuel assemblies would not be

sufficient reason to require a reactor shutdown.

A.1, A.2.1, A.2.2, and A.2.3 If two trains are required by LCO 3.8.10, the remaining OPERABLE inverters may be capable of supporting sufficient

required features to allow continuation of movement of irradiated fuel assemblies, operations with a potential for draining the reactor vessel, and operations with a potential

for positive reactivity additions. By the allowance of the Inverters-Shutdown B 3.8.8 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.8-3 Revision 29 option to declare required features inoperable with the associated inverter(s) inoperable, appropriate restrictions

will be implemented in accordance with the affected required

features LCOs' Required Actions. In many instances, this

option may involve undesired administrative efforts. It is

therefore required to suspend movement of irradiated fuel assemblies, and operations involving positive reactivity

additions that could result in loss of the required SDM

(MODE 5) or boron concentration (MODE 6). Suspending

positive reactivity additions that could result in failure

to meet the minimum SDM or boron concentration limit is

required to assure continued safe operation. Introduction

of coolant inventory must be from sources that have a boron

concentration greater than that required in the RCS for the

minimum SDM or refueling boron concentration. This may

result in an overall reduction in RCS boron concentration,

but provides an acceptable margin to maintaining subcritical

operation. Introduction of temperature changes including

temperature increases when operating with a positive MTC

must also be evaluated to ensure they do not result in a

loss of the required SDM.

Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.

These actions minimize the probability of the occurrence of

postulated events. It is further required to immediately

initiate action to restore the required inverters and to

continue this action until restoration is accomplished in

order to provide the necessary inverter power to the unit

safety systems.

The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The

restoration of the required inverters should be completed as quickly as possible in order to minimize the time the unit safety systems may be without power or powered from a constant voltage source transformer.

SURVEILLANCE SR 3.8.8.1 REQUIREMENTS This SR verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses

energized from the inverter. The verification of proper Inverters-Shutdown B 3.8.8 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.8-4 Revision 55 voltage output ensures that the required power is readily available for the instrumentation connected to the AC vital

buses. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

REFERENCES 1. UFSAR Distribution Systems-Operating B 3.8.9 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.9 Distribution Systems-Operating

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-1 Revision 5 BACKGROUND The onsite Class 1E AC, DC, and AC vital bus Electrical Power Distribution Systems are divided into two redundant

and independent AC electrical power distribution subsystems

and four independent and redundant DC and AC vital bus electrical power distribution subsystems (Reference 1, Chapter 8).

The AC primary Electrical Power Distribution System consists of two 4.16 kV ESF buses, each having at least one separate

and independent offsite source of power as well as a

dedicated onsite DG source. Each 4.16 kV ESF bus is

normally connected to a preferred offsite source. After a

loss of the preferred offsite power source to a 4.16 kV ESF

bus, the onsite emergency DG supplies power to the 4.16 kV

ESF bus. Control power for the 4.16 kV breakers is supplied

from the Class 1E batteries. Additional description of this

system may be found in the Bases for LCOs 3.8.1 and 3.8.4.

The 480 V system include the safety-related load centers, motor control centers, and distribution panels shown in

Table B 3.8.9-1.

The 120 VAC vital buses are divided into four independent and isolated subsystems and are normally supplied from an

inverter. The alternate power supply for the vital buses

are non-Class 1E 120 VAC Buses fed from a Class 1E ESF motor

control center through the regulating transformer, and its

use is governed by LCO 3.8.7. Each constant voltage source

transformer is powered from a Class 1E AC bus.

There are four independent 125 VDC electrical power distribution subsystems.

The list of all required Distribution Systems-Operating is presented in Table B 3.8.9-1.

APPLICABLE The initial conditions of DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC, DC, and AC vital bus Electrical Power

Distribution Systems are designed to provide sufficient Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-2 Revision 2 capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that

the fuel, RCS, and containment design limits are not exceeded. These limits are discussed in more detail in the

Bases for Sections 3.2, 3.4, and 3.6.

The OPERABILITY of the AC, DC, and AC vital bus Electrical Power Distribution Systems is consistent with the initial

assumptions of the accident analyses and is based upon

meeting the design basis of the unit. This includes

maintaining power distribution systems OPERABLE during

accident conditions in the event of: a. An assumed loss of all offsite power or all onsite AC electrical power; and b. A worst case single failure.

The distribution systems satisfy 10 CFR 50.36(c)(2)(ii),

Criterion 3.

LCO The required electrical power distribution subsystems listed in Table B 3.8.9-1 ensure the availability of AC, DC, and AC

vital bus electrical supply for the systems required to shut

down the reactor and maintain it in a safe condition after

an AOO or a postulated DBA. The AC, DC, and AC vital bus electrical power distribution subsystems are required to be

OPERABLE.

Maintaining the AC, DC, and AC vital bus electrical power distribution subsystems OPERABLE ensures that the redundancy

incorporated into the design of ESF is not defeated.

Therefore, a single failure within any system or within the electrical power distribution subsystems will not prevent

safe shutdown of the reactor.

OPERABLE AC electrical power distribution subsystems require the associated buses, load centers, motor control centers,

and distribution panels to be energized to their proper

voltages. OPERABLE DC electrical power distribution

subsystems require the associated buses to be energized to

their proper voltage from either the associated battery or

charger. OPERABLE vital bus electrical distribution Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-3 Revision 2 subsystems require the associated buses to be energized to their proper voltage.

In addition, tie breakers between redundant safety-related AC, DC, and AC vital bus distribution subsystems, if they

exist, must be open. This prevents any electrical malfunction in any distribution subsystem from propagating to the redundant subsystem, which could cause the failure of

a redundant subsystem and a loss of essential safety

function(s). If any tie breakers are closed, the affected

redundant electrical distribution subsystems are considered

inoperable. This applies to the onsite, safety-related redundant electrical power distribution subsystems.

APPLICABILITY The electrical distribution subsystems are required to be OPERABLE in MODEs 1, 2, 3, and 4 to ensure that: a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result

of AOOs or abnormal transients; and b. Adequate core cooling is provided, and Containment OPERABILITY and other vital functions are maintained in the event of a postulated DBA.

Electrical distribution subsystem requirements for MODEs 5 and 6 are covered in the Bases for LCO 3.8.10.

ACTIONS A.1 With one or more required AC buses, load centers, motor control centers, or distribution panels, except AC vital

buses, inoperable and a loss of function has not yet occurred, the remaining AC electrical power distribution

subsystems are capable of supporting the minimum safety

functions necessary to shut down the reactor and maintain it

in a safe shutdown condition, assuming no single failure.

The overall reliability is reduced, however, because a

single failure in the remaining power distribution

subsystems could result in the minimum required ESF

functions not being supported. Therefore, the required AC

buses, load centers, motor control centers, and distribution

panels must be restored to OPERABLE status within

eight hours.

Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-4 Revision 48 Condition A worst scenario is one train without AC power (i.e., no offsite power to the train and the associated DG

inoperable). In this condition, the unit is more vulnerable

to a complete loss of AC power. It is, therefore,

imperative that the unit operator's attention be focused on

minimizing the potential for loss of power to the remaining train by stabilizing the unit, and on restoring power to the affected train. The eight hour time limit before requiring

a unit shutdown in this condition is acceptable because of: a. The potential for decreased safety if the unit operator's attention is diverted from the evaluations

and actions necessary to restore power to the affected

train, to the actions associated with taking the unit

to shutdown within this time limit; and b. The potential for an event in conjunction with a single failure of a redundant component in the train with AC

power. B.1 With one or more AC vital buses inoperable and a loss of Function has not yet occurred, the remaining OPERABLE AC

vital buses are capable of supporting the minimum safety

functions necessary to shut down the unit and maintain it in

the safe shutdown condition. Overall reliability is

reduced, however, since an additional single failure could

result in the minimum required ESF functions not being

supported. Therefore, the AC vital bus must be restored to

OPERABLE status within two hours by powering the bus from an

associated inverter via DC or the non-Class 1E 120 VAC bus

powered by an ESF motor control center through a regulating

transformer.

Condition B represents one or more AC vital buses without power; potentially both the DC source and the associated AC source are non-functioning. In this situation, the unit is significantly more vulnerable to a complete loss of all

noninterruptible power. It is, therefore, imperative that

the operator's attention focus on stabilizing the unit,

minimizing the potential for loss of power to the remaining

vital buses, and restoring power to the affected vital bus.

Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-5 Revision 48 This two hour limit is more conservative than Completion Times allowed for the vast majority of components that are

without adequate vital AC power. Taking exception to

LCO 3.0.2 for components without adequate vital AC power,

which would have the Required Action Completion Times

shorter than two hours if declared inoperable, is acceptable because of: a. The potential for decreased safety by requiring a change in unit conditions (i.e., requiring a shutdown)

and not allowing stable operations to continue; b. The potential for decreased safety by requiring entry into numerous Applicable Conditions and Required

Actions for components without adequate vital AC power

and not providing sufficient time for the operators to

perform the necessary evaluations and actions for

restoring power to the affected train; and c. The potential for an event in conjunction with a single failure of a redundant component.

The two hour Completion Time takes into account the importance to safety of restoring the AC vital bus to

OPERABLE status, the redundant capability afforded by the

other OPERABLE vital buses, and the low probability of a DBA

occurring during this period.

C.1 With one DC bus inoperable, the remaining DC electrical power distribution subsystems are capable of supporting the

minimum safety functions necessary to shut down the reactor

and maintain it in a safe shutdown condition, assuming no

single failure. The overall reliability is reduced,

however, because a single failure in the remaining DC

electrical power distribution subsystem could result in the

minimum required ESF functions not being supported.

Therefore, the DC bus must be restored to OPERABLE status within two hours by powering the bus from the associated

battery or charger.

Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-6 Revision 48 Condition C represents one DC bus without adequate DC power; potentially both with the battery significantly degraded and

the associated charger nonfunctioning. In this situation,

the unit is significantly more vulnerable to a complete loss

of all DC power. It is, therefore, imperative that the

operator's attention focus on stabilizing the unit, minimizing the potential for loss of power to the remaining trains and restoring power to the affected train.

This two hour limit is more conservative than Completion Times allowed for the vast majority of components which

would be without power. Taking exception to LCO 3.0.2 for

components without adequate DC power, which would have

Required Action Completion Times shorter than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, is

acceptable because of: a. The potential for decreased safety by requiring a change in unit conditions (i.e., requiring a shutdown)

while allowing stable operations to continue; b. The potential for decreased safety by requiring entry into numerous applicable Conditions and Required

Actions for components without DC power and not

providing sufficient time for the operators to perform

the necessary evaluations and actions for restoring

power to the affected train; and c. The potential for an event in conjunction with a single failure of a redundant component.

The two hour Completion Time for DC buses is consistent with Reference 2.

D.1 and D.2 If the inoperable distribution subsystem cannot be restored to OPERABLE status within the required Completion Time, the

unit must be brought to a MODE in which the LCO does not apply. To achieve this status, the unit must be brought to at least MODE 3 within six hours and to MODE 5 within

36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable,

based on operating experience, to reach the required unit

conditions from full power conditions in an orderly manner

and without challenging unit systems.

Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-7 Revision 55 E.1 Condition E corresponds to a level of degradation in the electrical distribution system that causes a required safety

function to be lost. When more than one inoperable

electrical power distribution subsystem results in the loss

of a required function, the plant is in a condition outside the accident analysis. Therefore, no additional time is justified for continued operation. Limiting Condition for

Operation 3.0.3 must be entered immediately to commence a controlled shutdown.

SURVEILLANCE SR 3.8.9.1 REQUIREMENTS This SR verifies that the AC, DC, and AC vital bus Electrical Power Distribution Systems are functioning

properly, with the correct circuit breaker alignment. The

correct breaker alignment ensures the appropriate separation

and independence of the electrical divisions is maintained,

and the appropriate voltage is available to each required

bus. The verification of proper voltage availability on the

buses ensures that the required voltage is readily available

for motive as well as control functions for critical system

loads connected to these buses. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

REFERENCES 1. UFSAR 2. Regulatory Guide 1.93, "Availability of Electric Power Sources," December 1974

Distribution Systems-Operating B 3.8.9 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.9-8 Revision 48 Table B 3.8.9-1 (page 1 of 1)

AC and DC Electrical Power Distribution Systems(1) 4160 Volt Emergency Bus No. 11 (Unit 1), No. 21 (Unit 2) 4160 Volt Emergency Bus No. 14 (Unit 1), No. 24 (Unit 2)

480 Volt Emergency Bus No. 11A (Unit 1), No. 21A (Unit 2)

480 Volt Emergency Bus No. 11B (Unit 1), No. 21B (Unit 2)

480 Volt Emergency Bus No. 14A (Unit 1), No. 24A (Unit 2)

480 Volt Emergency Bus No. 14B (Unit 1), No. 24B (Unit 2)

480 Volt Emergency Bus No. 104R (Unit 1), No. 204R (Unit 2)

480 Volt Emergency Bus No. 114R (Unit 1), No. 214R (Unit 2)

120 Volt AC Vital Bus No. 11 (Unit 1), No. 21 (Unit 2)

120 Volt AC Vital Bus No. 12 (Unit 1), No. 22 (Unit 2)

120 Volt AC Vital Bus No. 13 (Unit 1), No. 23 (Unit 2)

120 Volt AC Vital Bus No. 14 (Unit 1), No. 24 (Unit 2)

125 Volt DC Bus No. 11 (Unit 1 and Unit 2)

125 Volt DC Bus No. 12 (Unit 1 and Unit 2) 125 Volt DC Bus No. 21 (Unit 1 and Unit 2)

125 Volt DC Bus No. 22 (Unit 1 and Unit 2)

(1) Each bus of the AC and DC Electrical Power Distribution System is a subsystem.

Distribution Systems-Shutdown B 3.8.10 B 3.8 ELECTRICAL POWER SYSTEMS

B 3.8.10 Distribution Systems-Shutdown

BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-1 Revision 5 BACKGROUND A description of the AC, DC, and AC vital bus Electrical Power Distribution Systems is provided in the Bases for

LCO 3.8.9.

The list of all required Distribution Systems-Shutdown is presented in Table B 3.8.10-1.

APPLICABLE The initial conditions of a DBA and transient analyses in SAFETY ANALYSES Reference 1, Chapters 6 and 14, assume ESF systems are OPERABLE. The AC, DC, and AC vital bus Electrical Power

Distribution Systems are designed to provide sufficient

capacity, capability, redundancy, and reliability to ensure

the availability of necessary power to ESF systems so that

the fuel, RCS, and containment design limits are not

exceeded.

The OPERABILITY of the AC, DC, and AC vital bus Electrical Power Distribution System is consistent with the initial

assumptions of the accident analyses and the requirements

for the supported systems' OPERABILITY.

The OPERABILITY of the minimum AC, DC, and AC vital bus electrical power distribution subsystems during MODEs 5

and 6, and during movement of irradiated fuel assemblies,

ensures that: a. The unit can be maintained in the shutdown or refueling condition for extended periods; b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status; and c. Adequate power is provided to mitigate events postulated during shutdown, such as a fuel handling

accident.

The AC and DC Electrical Power Distribution Systems satisfy 10 CFR 50.36(c)(2)(ii), Criterion 3.

Distribution Systems-Shutdown B 3.8.10 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-2 Revision 5 LCO Various combinations of subsystems, equipment, and components are required OPERABLE by other LCOs, depending on

the specific unit condition. Implicit in those requirements

is the required OPERABILITY of necessary support required

features. This LCO explicitly requires energization of the

portions of the electrical distribution system necessary to support OPERABILITY of required systems, equipment, and components-all specifically addressed in each LCO and

implicitly required via the definition of OPERABILITY.

Maintaining these portions of the distribution system energized ensures the availability of sufficient power to

operate the unit in a safe manner to mitigate the

consequences of postulated events during shutdown (e.g., fuel handling accidents).

APPLICABILITY The AC and DC electrical power distribution subsystems required to be OPERABLE in MODEs 5 and 6, and during

movement of irradiated fuel assemblies, provide assurance

that: a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel in the core; b. Systems needed to mitigate a fuel handling accident are available; c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are

available; and d. Instrumentation and control capability is available for monitoring and maintaining the unit in a cold shutdown

condition and refueling condition.

The AC, DC, and AC vital bus electrical power distribution subsystem requirements for MODEs 1, 2, 3, and 4 are covered in LCO 3.8.9.

ACTIONS Limiting Condition for Operation 3.0.3 is not applicable while in MODEs 5 or 6. However, since irradiated fuel

assembly movement can occur in MODEs 1, 2, 3, or 4, the

ACTIONS have been modified by a Note stating that LCO 3.0.3

is not applicable. If moving irradiated fuel assemblies

while in MODEs 5 or 6, LCO 3.0.3 would not specify any Distribution Systems-Shutdown B 3.8.10 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-3 Revision 29 action. If moving irradiated fuel assemblies while in MODEs 1, 2, 3, or 4, the fuel movement is independent of

reactor operations. Therefore, in either case, inability to

suspend movement of irradiated fuel assemblies would not be

sufficient reason to require a reactor shutdown.

The ACTIONS have been modified by a second Note stating that performance of Required Actions shall not preclude

completion of actions to establish a safe conservative

position. This clarification is provided to avoid stopping

movement of irradiated fuel assemblies while in a non-

conservative position based on compliance with the Required

Actions.

A.1, A.2.1, A.2.2, A.2.3, and A.2.4 Although redundant required features may require redundant trains of electrical power distribution subsystems to be

OPERABLE, one OPERABLE distribution subsystem train may be

capable of supporting sufficient required features to allow

continuation of movement of irradiated fuel assemblies. By allowing the option to declare required features associated

with an inoperable distribution subsystem inoperable,

appropriate restrictions are implemented in accordance with

the affected distribution subsystems LCO's Required Actions.

In many instances, this option may involve undesired

administrative efforts. Therefore, the allowance for

sufficiently conservative actions is made [i.e., to suspend movement of irradiated fuel assemblies, and operations

involving positive reactivity additions that could result in

loss of the required SDM (MODE 5) or boron concentration

(MODE 6)]. Suspending positive reactivity additions that

could result in failure to meet the minimum SDM or boron

concentration limit is required to assure continued safe

operation. Introduction of coolant inventory must be from sources that have a boron concentration greater than that required in the RCS for the minimum SDM or refueling boron

concentration. This may result in an overall reduction in

RCS boron concentration, but provides an acceptable margin

to maintaining subcritical operation. Introduction of

temperature changes including temperature increases when

operating with a positive MTC must also be evaluated to

ensure they do not result is a loss of the required SDM.

Distribution Systems-Shutdown B 3.8.10 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-4 Revision 55 Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition.

These actions minimize the probability of the occurrence of

postulated events. It is further required to immediately

initiate action to restore the required AC and DC electrical power distribution subsystems and to continue this action until restoration is accomplished in order to provide the

necessary power to the unit safety systems.

Notwithstanding performance of the above conservative Required Actions, a required shutdown cooling (SDC)

subsystem may be inoperable. In this case, Required

Actions A.2.1 through A.2.3 do not adequately address the

concerns relating to coolant circulation and heat removal.

Pursuant to LCO 3.0.6, the SDC ACTIONS would not be entered.

Therefore, Required Action A.2.4 is provided to direct

declaring SDC inoperable, which results in taking the

appropriate SDC actions. The SDC subsystem(s) declared

inoperable and not in operation as a result of not meeting

this LCO, may be used if needed. However, the appropriate

actions are still required to be taken.

The Completion Time of immediately is consistent with the required times for actions requiring prompt attention. The

restoration of the required distribution subsystems should

be completed as quickly as possible in order to minimize the time the unit safety systems may be without power.

SURVEILLANCE SR 3.8.10.1 REQUIREMENTS This SR verifies that the AC, DC, and AC vital bus Electrical Power Distribution System is functioning

properly, with all the buses energized. The verification of

proper voltage availability on the buses ensures that the

required power is readily available for motive as well as

control functions for critical system loads connected to

these buses. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

REFERENCES 1. UFSAR

Distribution Systems-Shutdown B 3.8.10 BASES CALVERT CLIFFS - UNITS 1 & 2 B 3.8.10-5 Revision 55 Table B 3.8.10-1 (page 1 of 1)

AC and DC Electrical Power Distribution Systems 1 4160 Volt Emergency Bus 1 480 Volt Emergency Bus

2 120 Volt AC Vital Busses

2 125 Volt DC Busses

2 125 Volt Battery Banks (one of which may be the reserve battery) (one associated battery charger per battery bank supplying the required DC busses)

Retrieved from "https://kanterella.com/w/index.php?title=ML17261A235&oldid=743735"