ML17251A353: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:ROCHESTER GASANDELECTRICCORPORATION GINNASTATIONCONTROLLED COPYNUMBERTIM::-PROCEDURE NO.A-503.1REV.NO.EMERGENCY ANDABNORMALOPERATING PROCEDURES USERSGUIDE,TECHNICAL REVIEWPORCREVIEWDATEQUALITYASSURANCE PLANTSUPERINTENDENT EFFECTIVE DATEQANON-QACATEGORY1.0REVIEWEDBY:THISPROCEDURE CONTAINS19PAGES8811180197 881031PDRADOCK05000244PPDC
{{#Wiki_filter:ROCHESTER GAS AND ELECTRIC CORPORATION GINNA STATION CONTROLLED COPY NUMBER TIM::-PROCEDURE NO.A-503.1 REV.NO.EMERGENCY AND ABNORMAL OPERATING PROCEDURES USERS GUIDE ,TECHNICAL REVIEWPORC REVIEW DATE QUALITY ASSURANCE PLANT SUPERINTENDENT EFFECTIVE DATE QA NON-QA CATEGORY 1.0 REVIEWED BY: THIS PROCEDURE CONTAINS 19 PAGES 8811180197 881031 PDR ADOCK 05000244 P PDC
'
'
A-503.1:1A-503.1EMERGENCY ANDABNORMALPROCEDURES USERSGU1DEINTRODUCTION PURPOSE-togiveguidanceintheuseofEmergency Operating Procedures (EOPs)andAbnormalProcedures (APs)andtoclarifythelogicusedintheseprocedures.
A-503.1: 1 A-503.1 EMERGENCY AND ABNORMAL PROCEDURES USERS GU1DE INTRODUCTION PURPOSE-to give guidance in the use of Emergency Operating Procedures (EOPs)and Abnormal Procedures (APs)and to clarify the logic used in these procedures.
SCOPEOFAPPLICABILITY
SCOPE OF APPLICABILITY
-thisprocedure isapplicable toallEOPsandAPs.REFERENCES
-this procedure is applicable to all EOPs and APs.REFERENCES
-applicable tothisprocedure are;WOG-ERG,Revision1,LPVersion,,Executive VolumeUsersGuide.GinnaStationEOP/APWritersGuide,A-502.1.GinnaStationEOP/APSeries.DEFINITIONS Emergency Operating Procedure (EOP)-Aprocedure whichprovidesactionsnecessary toreturntheplanttoasafe,stablecondition following atransient/acci-dentwhichhascausedplantparameters tochallenge reactorprotection systemsetpoints,engineered safeguards systemsetpoints,challenge theabilitytocoolthereactorcoreora.radiation releaseboundary.
-applicable to this procedure are;WOG-ERG, Revision 1, LP Version,,Executive Volume Users Guide.Ginna Station EOP/AP Writers Guide, A-502.1.Ginna Station EOP/AP Series.DEFINITIONS Emergency Operating Procedure (EOP)-A procedure which provides actions necessary to return the plant to a safe, stable condition following a transient/acci-dent which has caused plant parameters to challenge reactor protection system set points, engineered safeguards system set points, challenge the ability to cool the reactor core or a.radiation release boundary.Abnormal Operating Procedure (AP)-APs govern the plant operations during abnormal conditions and specify operator actions that will prevent the condition from degrading into an emergency.
AbnormalOperating Procedure (AP)-APsgoverntheplantoperations duringabnormalconditions andspecifyoperatoractionsthatwillpreventthecondition fromdegrading intoanemergency.
Critical Safety Function (CSF)-CSFs are those functions necessary to protect the fuel/cladding, RCS pressure boundary and the containment vessel from degradation.
CriticalSafetyFunction(CSF)-CSFsarethosefunctions necessary toprotectthefuel/cladding, RCSpressureboundaryandthecontainment vesselfromdegradation.
A prioritized list of these six functions is as follows: Maintenance of Subcriticality Maintenance of Core Cooling Maintenance of Heat Sink Maintenance of RCS Integrity
Aprioritized listofthesesixfunctions isasfollows:Maintenance ofSubcriticality Maintenance ofCoreCoolingMaintenance ofHeatSinkMaintenance ofRCSIntegrity


A-503.1:21.4.3.51.4.3.61.5Maintenance ofContainment Integrity ControlofReactorCoolantInventory TEXTREVISIONS
A-503.1: 2 1.4.3.5 1.4.3.6 1.5 Maintenance of Containment Integrity Control of Reactor Coolant Inventory TEXT REVISIONS-are identified by a change bar.The change bar is located in the right hand margin to indicate changes to the text of that line.The change bar for the current revision will not be carried forward to the next revision.2.0 EOP AP Section Or anization-in order to facilitate rapid location of specific sections and subsections of the EOP/AP, the control room copy is arranged per FIGURE 3 as follows: 2.1 2'..COVER SHEET-which is used for administrative purposes and does not provide any active.function in the EOP/AP to be used.The Cover Sheet of the Control Room copy is the first page seen in the binder.PURPOSE and ENTRY CONDITIONS SYMPTOMS PAGE-in the Control Room copy is immediately following the cover sheet.2.2~1~~2.2.2 2'2.3.1 2.3.2 2'.3 A Purpose Statement which specifically describes the intent of the procedure.
-areidentified byachangebar.Thechangebarislocatedintherighthandmargintoindicatechangestothetextofthatline.Thechangebarforthecurrentrevisionwillnotbecarriedforwardtothenextrevision.
Entry conditions and/or Symptoms sections which specify the conditions, transitions and/or symptoms which dictate or direct entry into the procedure.
The symptoms used should be unique to the procedure.
OPERATOR ACTION STEP PAGES-which may be subdivided into Immediate Operator Action pages, followed by subsequent operator action pages.Operator action step pages may contain;CAUTION STATEMENTS
-which provide information about hazards to personnel or equipment and advice on actions or transitions which may become necessary depending on changes in plant conditions.
NOTE STATEMENTS
-which provide administrative or advisory information which supports operator actions.OPERATOR ACTION STEPS-presented in a two column format, direct the operator through specific step by step tasks, give the expected results from those tasks and provide contingency actions to be taken should an expected task method not be available or an expected result not be obtained.
0 A-503.1:3 2.3.3.1~~~2.3.3.2 Immediate Operator Actions-actions which the operator should be able to perform before opening and reading his emergency procedures.
In general, immediate actions are limited to the verification of automatic protection features of the plant.Although the immediate actions should be memorized by the operator, they need not be memorized verbatim.The operator should know them well enough to complete the intent of each step, which is to verify that the automatic actions have occurred.The order in which they should be performed should also be consistent with the step sequence requirements.
Subsequent Operator Actions-actions not defined as immediate.
2'''2'.3.4 An Action/Expected Response column contains the primary operator action and the expected response or results of those actions.Expected response or results of the operator action tasks are given in CAPITAL LETTERS, separated from the action by a dash (-)~The Response Not Obtained (RNO)column presents contingency actions to be taken when an action in the left.-hand column cannot be performed or does not satisfy the expected response condition.
RNO column actions are specified for steps and substeps for which useful alternatives are available.
Contingency actions may include directions to override automatic controls, to manually or locally initiate normally automatic actions, or to use alternative systems, evaluations, or procedures.
2.4 2.4.1 2.4.2 OTHER EOP/AP CONTENTS-may include: AUTOMATIC ACTION PAGE-which provides information on systems or components which should activate or realign automatically, without operator intervention.
FOLDOUT PAGE-which provides a summary of information and conditions to be monitored throughout the EOP/AP.This page provides actions and transitions based on plant conditions which may occur outside the normal flow of the EOP/AP.2.4.3 FIGURES-may be drawings, graphs or diagrams which will provide additional information to the operator.  


==2.0 EOPAPSectionOranization==
A-503.1:4 2.4.4~~3.0 ATTACHMENT PAGES-which may be used to provide additional information to the operator.They provide information concerning a particular step or evolution addressed in the procedure.
-inordertofacilitate rapidlocationofspecificsectionsandsubsections oftheEOP/AP,thecontrolroomcopyisarrangedperFIGURE3asfollows:2.12'..COVERSHEET-whichisusedforadministrative purposesanddoesnotprovideanyactive.functionintheEOP/APtobeused.TheCoverSheetoftheControlRoomcopyisthefirstpageseeninthebinder.PURPOSEandENTRYCONDITIONS SYMPTOMSPAGE-intheControlRoomcopyisimmediately following thecoversheet.2.2~1~~2.2.22'2.3.12.3.22'.3APurposeStatement whichspecifically describes theintentoftheprocedure.
'he information presented is of importance to the action or decision where referenced, but is of a length or format which precludes incorporation into the procedure step.INSTRUCTIONS NOTE: See attachment 1, Example of EOP Use, which describes the process of working through a dual column formatted EOP and implements the instructions described herein.NOTE Refer to A-502.1 EOP/AP Writer Guide (Reference 1.3.2)for actual format and content requirements.
Entryconditions and/orSymptomssectionswhichspecifytheconditions, transitions and/orsymptomswhichdictateordirectentryintotheprocedure.
3.1 ENTRY INTO EOP AP-entry into an EOP/AP normally begins at the PURPOSE AND ENTRY CONDITIONS/SYMPTOMS page and sequentially progresses through the Operator Action pages unless specifically directed outside the normal operating or abnormal procedure, by a Foldout page concern or by a CSFST condition.
Thesymptomsusedshouldbeuniquetotheprocedure.
Direct entry into the EOP set is normally through E-O, but proce-dure FR-S.l or ECA-O.O may be entered directly if the entry conditions are observed.3.2 PURPOSE and ENTRY CONDITIONS SYMPTOMS PAGE 3.2.1 3.2.2 Verify that the procedure purpose satisfies the specific goal desired.Verify that the stated entry conditions are consistent with current plant conditions or that the correct transitions have been made.3.2.3 3.3 Verify that current plant symptoms meet the symptoms associated with the procedure in hand.OPERATOR ACTION STEP PAGES3.3.1 3.3.1.1 3~3~1~2 NOTES and CAUTIONS Observe all applicable NOTES and CAUTIONS prior to performing any step.NOTES and CAUTIONS immediately proceed the applicable step(s)to which they apply.Those applicable to the entire procedure are shown prior to any Operator Action step.  
OPERATORACTIONSTEPPAGES-whichmaybesubdivided intoImmediate OperatorActionpages,followedbysubsequent operatoractionpages.Operatoractionsteppagesmaycontain;CAUTIONSTATEMENTS
~~0 0 A-503.1:5 3.3'.3~~~Cautions are differentiated from notes by inclusion of asterisks across the EOP Page (See Reference 1.3.2).3.3.2 DUAL COLUMN FORMAT USAGE 3.3~2~1 3'''Perform all Immediate actions prior to performing Subsequent action steps.Perform actions in the left-hand column first.3''.3 3.3.2.4 3.3.2.5 Move to the next step and perform actions in the left-hand column if the actions in the previous left-hand column were performed successfully.
-whichprovideinformation abouthazardstopersonnel orequipment andadviceonactionsortransitions whichmaybecomenecessary depending onchangesinplantconditions.
Perform actions in the right-hand column only if the action performed in the left-hand column does not achieve the expected response or the action in the left-hand column cannot be performed.
NOTESTATEMENTS
Move to the next step or substep and perform actions in the left-hand column if the actions in the previous right-hand column are performed successfully or if the actions in the previous right-hand column fail to bring about the required response or no entry exists in the right-hand column unless specifically directed not to continue.3.3.2.6 3~3~2~7 Perform all numerically or alphabetically identified steps in sequential order.Those substeps identified by bullets (o)may be performed in any order or preference.
-whichprovideadministrative oradvisoryinformation whichsupportsoperatoractions.OPERATORACTIONSTEPS-presented inatwocolumnformat,directtheoperatorthroughspecificstepbysteptasks,givetheexpectedresultsfromthosetasksandprovidecontingency actionstobetakenshouldanexpectedtaskmethodnotbeavailable oranexpectedresultnotbeobtained.
Beginning an action step or substep and being assured that it is progressing successfully is sufficient action to proceed to a subsequent step unless;3.3.2.7.1 A NOTE states otherwise or;3.3'''3.3.2.7.3 3.3'3.3.3'~~~The step specifies otherwise or;The operator deems it hazardous to personnel or equipment to proceed.TEXT CONTINUITY
0 A-503.1:3 2.3.3.1~~~2.3.3.2Immediate OperatorActions-actionswhichtheoperatorshouldbeabletoperformbeforeopeningandreadinghisemergency procedures.
-the text of operator action steps;with applicable substeps, cautions, notes;will normally be wholly contained on the same page.Where physical constraints preclude this the following guidelines are used: Cautions and/or notes are placed on the immediately preceding page.  
Ingeneral,immediate actionsarelimitedtotheverification ofautomatic protection featuresoftheplant.Althoughtheimmediate actionsshouldbememorized bytheoperator, theyneednotbememorized verbatim.
~r!l,e 0 A-503 F 1:6 3.3''~~~3.3.3.2.1 3.3.3.2.2 3.3.4 3.3.F 1 3.3.4'If a step is continued on to another page, then: The initial page is annotated at the bottom of the action step field portion of the page to indicate that the step is continued on the next page.(ie, THIS STEP CONTINUED ON FOLLOWING PAGE)The follower page will have the initial action step heading repeated with a statement to indicate that the step is being continued from a previous page.example: Establish letdown-THIS STEP CONTINUED FROM PREVIOUS PAGE USE OF LOGEC TERMS AND CONDITIONAL STATEMENTS:
Theoperatorshouldknowthemwellenoughtocompletetheintentofeachstep,whichistoverifythattheautomatic actionshaveoccurred.
The word AND is placed between a description of conditions for no more than combination of three conditions.
Theorderinwhichtheyshouldbeperformed shouldalsobeconsistent withthestepsequencerequirements.
A list format shall be used for four or more conditions.
Subsequent OperatorActions-actionsnotdefinedasimmediate.
There is an implied and condition between each list item if no logic term is specified if substeps are proceeded with bullets (o).The word OR is used between alternative conditions.
2'''2'.3.4AnAction/Expected Responsecolumncontainstheprimaryoperatoractionandtheexpectedresponseorresultsofthoseactions.ExpectedresponseorresultsoftheoperatoractiontasksaregiveninCAPITALLETTERS,separated fromtheactionbyadash(-)~TheResponseNotObtained(RNO)columnpresentscontingency actionstobetakenwhenanactionintheleft.-hand columncannotbeperformed ordoesnotsatisfytheexpectedresponsecondition.
Use of the word OR implies the inclusive sense.The exclusive sense of the word OR is denoted by using the form;either A OR B but not both.3.3.4'.1 3.3.4.3 When the inclusive or is used for a set of conditions, the satisfaction of any one condition allows progres-sion to the next step or substep.When two or more actions are separated by an or condition, only one action needs to be successfully taken to allow progression to the next step or substep.Action steps contingent upon certain conditions or combinations of conditions, begin with the logic terms IF or WHEN followed by a description of the condition(s), a comma, the logic term THEN and the action to be taken.IF is used for unexpected or possible conditions, THEN is only used in conditional statements and WHEN is used for expected or probable conditions.
RNOcolumnactionsarespecified forstepsandsubstepsforwhichusefulalternatives areavailable.
3.3.4'The logic term IF NOT is the operator must respond possible conditions.
Contingency actionsmayincludedirections tooverrideautomatic
The operator response to the conditions.
: controls, tomanuallyorlocallyinitiatenormallyautomatic actions,ortousealternative systems,evaluations, orprocedures.
limited to cases in which to the second of any two term IF is used to specify first of any two possible 3''~~USE OF REFERENCE TERMS I 4 A-503.1:7 The words GO TO followed by only a step number directs transition to a subsequent step within the procedure being used.The words RETURN TO followed by only a step number directs transition to a previous step within the procedure being used.The words GO TO followed by a procedure designator, and title and/or a step number direct a transition to the specified EOP/AP.If no step number is specified, then the transition is to the beginning of the specified procedure.
2.42.4.12.4.2OTHEREOP/APCONTENTS-mayinclude:AUTOMATIC ACTIONPAGE-whichprovidesinformation onsystemsorcomponents whichshouldactivateorrealignautomatically, withoutoperatorintervention.
Example: GO TO ES-0.1, REACTOR TRIP RESPONSE, Step 20.The words REFER TO followed by a procedure designator and title are used to denote a procedure which may provide necessary or useful information during the execution of an EOP/AP.In general, those procedures referenced cover low probability occurrences, or plant evaluations with their own procedures whose inclusion in the EOP/AP would cause excessive complication of and reduced effectiveness of the EOP/AP.Referencing another procedure does not constitute leaving the EOP/AP in effect.Example: REFER TO ER-AFW.l, ALTERNATE WATER SUPPLY TO AFW PUMPS.Procedures entered for supplemental guidance or from CSFST direction may contain a RETURN TO statement.
FOLDOUTPAGE-whichprovidesasummaryofinformation andconditions tobemonitored throughout theEOP/AP.Thispageprovidesactionsandtransitions basedonplantconditions whichmayoccuroutsidethenormalflowoftheEOP/AP.2.4.3FIGURES-maybedrawings, graphsordiagramswhichwillprovideadditional information totheoperator.  
A procedure with multiple entry conditions may state RETURN TO PROCEDURE AND STEP IN EFFECT, this denotes a return to the last previous EOP and step in use.ACTION VERBS AND ABBREVIATIONS USAGE Operator action steps are normally written in a command form and begin with an action verb which has a precise meaning.Refer to A-502.1, WOP/AP Writers Guide (Reference 1;3.2)for listing.Certain abbreviations are used throughout the EOPs and APs to improve readability.
Refer to A-502.1, EOP/AP Writers Guide for proper abbreviations.
I FOLDOUT PAGES A-503.1'8 3.4.1 3.4.2 Direction to use a foldout page is provided by a NOTE within the procedure, generally at the beginning.
Once its use is directed the Foldout page is to be monitored throughout the time the EOP is in use.One section of each foldout page is a RED PATH


A-503.1:4 2.4.4~~3.0ATTACHMENT PAGES-whichmaybeusedtoprovideadditional information totheoperator.
==SUMMARY==
Theyprovideinformation concerning aparticular steporevolution addressed intheprocedure.
which promotes a periodic check of the Critical Safety Functions.
'heinformation presented isofimportance totheactionordecisionwherereferenced, butisofalengthorformatwhichprecludes incorporation intotheprocedure step.INSTRUCTIONS NOTE:Seeattachment 1,ExampleofEOPUse,whichdescribes theprocessofworkingthroughadualcolumnformatted EOPandimplements theinstructions described herein.NOTERefertoA-502.1EOP/APWriterGuide(Reference 1.3.2)foractualformatandcontentrequirements.
Upon meeting one or more Red path conditions, transition to the appropriate Functional Restoration procedure is made as described in section 3.6.3''Other sections of the Foldout page contain plant conditions which may arise at any time during the execution of the procedure or outside of the normal flow of the procedure.
3.1ENTRYINTOEOPAP-entryintoanEOP/APnormallybeginsatthePURPOSEANDENTRYCONDITIONS/SYMPTOMS pageandsequentially progresses throughtheOperatorActionpagesunlessspecifically directedoutsidethenormaloperating orabnormalprocedure, byaFoldoutpageconcernorbyaCSFSTcondition.
These sections provide actions or guidance for operations if these conditions occur.3.5 USE OF CRITICAL SAFETY FUNCTION STATUS TREES CSFST 3.5~1~~3.5.2 CSFSTs are entered from and monitored in conjunction with the recovery actions of the other EOP series procedures.
DirectentryintotheEOPsetisnormallythroughE-O,butproce-dureFR-S.lorECA-O.Omaybeentereddirectlyiftheentryconditions areobserved.
FR procedures are entered from the CSFST or the EOPs and are intended to restore a degraded safety function to satisfied condition.
3.2PURPOSEandENTRYCONDITIONS SYMPTOMSPAGE3.2.13.2.2Verifythattheprocedure purposesatisfies thespecificgoaldesired.Verifythatthestatedentryconditions areconsistent withcurrentplantconditions orthatthecorrecttransitions havebeenmade.3.2.33.3Verifythatcurrentplantsymptomsmeetthesymptomsassociated withtheprocedure inhand.OPERATORACTIONSTEPPAGES3.3.13.3.1.13~3~1~2NOTESandCAUTIONSObserveallapplicable NOTESandCAUTIONSpriortoperforming anystep.NOTESandCAUTIONSimmediately proceedtheapplicable step(s)towhichtheyapply.Thoseapplicable totheentireprocedure areshownpriortoanyOperatorActionstep.
3'.3 3.5'3.5.5 A CSFST, as shown in Figure 1, is entered on the left side of the page as indicated by the arrow.Questions are asked and answered in turn which then direct the user to the next question.When all questions are answered in a particular path the user will have reached an endpoint or terminus.Each final path segment and each terminus circle is coded by a symbol scheme.The control room copy also utilizes a color code.The symbols and color coding used are described below.3.5.5.1 3.5.5.2 Color code-GREEN, final path segment and terminus circle are out-lined only: The CSF is satisfied.
~~00 A-503.1:5 3.3'.3~~~Cautionsaredifferentiated fromnotesbyinclusion ofasterisks acrosstheEOPPage(SeeReference 1.3.2).3.3.2DUALCOLUMNFORMATUSAGE3.3~2~13'''PerformallImmediate actionspriortoperforming Subsequent actionsteps.Performactionsintheleft-hand columnfirst.3''.33.3.2.43.3.2.5Movetothenextstepandperformactionsintheleft-hand columniftheactionsinthepreviousleft-handcolumnwereperformed successfully.
No operator action is required.Color code-YELLOW, the final path segment is a series of solid dots and the terminus circle is one third filled in: The CSF is off-normal.
Performactionsintheright-hand columnonlyiftheactionperformed intheleft-hand columndoesnotachievetheexpectedresponseortheactionintheleft-hand columncannotbeperformed.
Operator action may be taken.  
Movetothenextsteporsubstepandperformactionsintheleft-hand columniftheactionsinthepreviousright-hand columnareperformed successfully oriftheactionsinthepreviousright-hand columnfailtobringabouttherequiredresponseornoentryexistsintheright-hand columnunlessspecifically directednottocontinue.
~i A-503.1:9 3'.5.3~~~3.5.5.4 3.5.6 Color code-ORANGE, the final path segment is a broken line, the terminus circle is two thirds filled in: The CSF is under severe challenge.
3.3.2.63~3~2~7Performallnumerically oralphabetically identified stepsinsequential order.Thosesubstepsidentified bybullets(o)maybeperformed inanyorderorpreference.
Prompt operator action is required.Color code-RED, the final path segment is a solid line, the terminus circle is totally filled in: The CSF is under extreme challenge.
Beginning anactionsteporsubstepandbeingassuredthatitisprogressing successfully issufficient actiontoproceedtoasubsequent stepunless;3.3.2.7.1 ANOTEstatesotherwise or;3.3'''3.3.2.7.3 3.3'3.3.3'~~~Thestepspecifies otherwise or;Theoperatordeemsithazardous topersonnel orequipment toproceed.TEXTCONTINUITY
Immediate operator action is required.For Yellow, Orange and Red paths a procedure designator will be included to direct the operator to the correct Function Restoration (FR)procedure.
-thetextofoperatoractionsteps;withapplicable
These procedures
: substeps, cautions, notes;willnormallybewhollycontained onthesamepage.Wherephysicalconstraints precludethisthefollowing guidelines areused:Cautionsand/ornotesareplacedontheimmediately preceding page.
.are intended to return the CSF to the satisfied condition.
~r!l,e0 A-503F1:63.3''~~~3.3.3.2.1 3.3.3.2.2 3.3.43.3.F13.3.4'Ifastepiscontinued ontoanotherpage,then:Theinitialpageisannotated atthebottomoftheactionstepfieldportionofthepagetoindicatethatthestepiscontinued onthenextpage.(ie,THISSTEPCONTINUED ONFOLLOWING PAGE)Thefollowerpagewillhavetheinitialactionstepheadingrepeatedwithastatement toindicatethatthestepisbeingcontinued fromapreviouspage.example:Establish letdown-THISSTEPCONTINUED FROMPREVIOUSPAGEUSEOFLOGECTERMSANDCONDITIONAL STATEMENTS:
ThewordANDisplacedbetweenadescription ofconditions fornomorethancombination ofthreeconditions.
Alistformatshallbeusedforfourormoreconditions.
Thereisanimpliedandcondition betweeneachlistitemifnologictermisspecified ifsubstepsareproceeded withbullets(o).ThewordORisusedbetweenalternative conditions.
UseofthewordORimpliestheinclusive sense.Theexclusive senseofthewordORisdenotedbyusingtheform;eitherAORBbutnotboth.3.3.4'.13.3.4.3Whentheinclusive orisusedforasetofconditions, thesatisfaction ofanyonecondition allowsprogres-siontothenextsteporsubstep.Whentwoormoreactionsareseparated byanorcondition, onlyoneactionneedstobesuccessfully takentoallowprogression tothenextsteporsubstep.Actionstepscontingent uponcertainconditions orcombinations ofconditions, beginwiththelogictermsIForWHENfollowedbyadescription ofthecondition(s),
acomma,thelogictermTHENandtheactiontobetaken.IFisusedforunexpected orpossibleconditions, THENisonlyusedinconditional statements andWHENisusedforexpectedorprobableconditions.
3.3.4'ThelogictermIFNOTistheoperatormustrespondpossibleconditions.
Theoperatorresponsetotheconditions.
limitedtocasesinwhichtothesecondofanytwotermIFisusedtospecifyfirstofanytwopossible3''~~USEOFREFERENCE TERMS I4 A-503.1:7 ThewordsGOTOfollowedbyonlyastepnumberdirectstransition toasubsequent stepwithintheprocedure beingused.ThewordsRETURNTOfollowedbyonlyastepnumberdirectstransition toapreviousstepwithintheprocedure beingused.ThewordsGOTOfollowedbyaprocedure designator, andtitleand/orastepnumberdirectatransition tothespecified EOP/AP.Ifnostepnumberisspecified, thenthetransition istothebeginning ofthespecified procedure.
Example:GOTOES-0.1,REACTORTRIPRESPONSE, Step20.ThewordsREFERTOfollowedbyaprocedure designator andtitleareusedtodenoteaprocedure whichmayprovidenecessary orusefulinformation duringtheexecution ofanEOP/AP.Ingeneral,thoseprocedures referenced coverlowprobability occurrences, orplantevaluations withtheirownprocedures whoseinclusion intheEOP/APwouldcauseexcessive complication ofandreducedeffectiveness oftheEOP/AP.Referencing anotherprocedure doesnotconstitute leavingtheEOP/APineffect.Example:REFERTOER-AFW.l, ALTERNATE WATERSUPPLYTOAFWPUMPS.Procedures enteredforsupplemental guidanceorfromCSFSTdirection maycontainaRETURNTOstatement.
Aprocedure withmultipleentryconditions maystateRETURNTOPROCEDURE ANDSTEPINEFFECT,thisdenotesareturntothelastpreviousEOPandstepinuse.ACTIONVERBSANDABBREVIATIONS USAGEOperatoractionstepsarenormallywritteninacommandformandbeginwithanactionverbwhichhasaprecisemeaning.RefertoA-502.1,WOP/APWritersGuide(Reference 1;3.2)forlisting.Certainabbreviations areusedthroughout theEOPsandAPstoimprovereadability.
RefertoA-502.1,EOP/APWritersGuideforproperabbreviations.
I FOLDOUTPAGESA-503.1'8 3.4.13.4.2Direction touseafoldoutpageisprovidedbyaNOTEwithintheprocedure, generally atthebeginning.
OnceitsuseisdirectedtheFoldoutpageistobemonitored throughout thetimetheEOPisinuse.OnesectionofeachfoldoutpageisaREDPATHSUMMARYwhichpromotesaperiodiccheckoftheCriticalSafetyFunctions.
UponmeetingoneormoreRedpathconditions, transition totheappropriate Functional Restoration procedure ismadeasdescribed insection3.6.3''OthersectionsoftheFoldoutpagecontainplantconditions whichmayariseatanytimeduringtheexecution oftheprocedure oroutsideofthenormalflowoftheprocedure.
Thesesectionsprovideactionsorguidanceforoperations iftheseconditions occur.3.5USEOFCRITICALSAFETYFUNCTIONSTATUSTREESCSFST3.5~1~~3.5.2CSFSTsareenteredfromandmonitored inconjunction withtherecoveryactionsoftheotherEOPseriesprocedures.
FRprocedures areenteredfromtheCSFSTortheEOPsandareintendedtorestoreadegradedsafetyfunctiontosatisfied condition.
3'.33.5'3.5.5ACSFST,asshowninFigure1,isenteredontheleftsideofthepageasindicated bythearrow.Questions areaskedandansweredinturnwhichthendirecttheusertothenextquestion.
Whenallquestions areansweredinaparticular paththeuserwillhavereachedanendpointorterminus.
Eachfinalpathsegmentandeachterminuscircleiscodedbyasymbolscheme.Thecontrolroomcopyalsoutilizesacolorcode.Thesymbolsandcolorcodingusedaredescribed below.3.5.5.13.5.5.2Colorcode-GREEN,finalpathsegmentandterminuscircleareout-lined only:TheCSFissatisfied.
Nooperatoractionisrequired.
Colorcode-YELLOW,thefinalpathsegmentisaseriesofsoliddotsandtheterminuscircleisonethirdfilledin:TheCSFisoff-normal.
Operatoractionmaybetaken.  
~i A-503.1:9 3'.5.3~~~3.5.5.43.5.6Colorcode-ORANGE,thefinalpathsegmentisabrokenline,theterminuscircleistwothirdsfilledin:TheCSFisunderseverechallenge.
Promptoperatoractionisrequired.
Colorcode-RED,thefinalpathsegmentisasolidline,theterminuscircleistotallyfilledin:TheCSFisunderextremechallenge.
Immediate operatoractionisrequired.
ForYellow,OrangeandRedpathsaprocedure designator willbeincludedtodirecttheoperatortothecorrectFunctionRestoration (FR)procedure.
Theseprocedures
.areintendedtoreturntheCSFtothesatisfied condition.
3.6PRIORITIZATION OFFUNCTIONRESTORATION PROCEDURES 3.6.13.6.2~~RedorOrangechallenges toaCriticalSafetyfunctiontakepriorityoverallE,ES,ERandECAprocedures exceptECA-O.O,LossofAllACPowerandtheimmediate actionstepsofE-O,ReactorTriporSafetyInjection.
ThesixCSFSTsareorderedinthecontrolroombookbythefollowing prioritylist.Thislistingestab-lishesthepriorityinwhichconditions aretobeaddressed inconjunction withthecolorcodepriorityasdescribed in3.6.3.3.6.2.13.6.2.23.6.2.33.6.2.43.6.2.53.6.2.63.6.3Subcriticality (S)CoreCooling(C)HeatSink(H)Integrity (P)Containment (Z)Inventory (I)OnceenteredtheCSFSTsshouldbemonitored inthepriorityorder.EachCSFSTisfollowedtoaterminusbasedonplantconditions atthattime.AnexampleofstatustreeuseisincludedasAttachment 2.Therulesofusebasedonthecolorcode/symbol systemareasfollows:3.6.3.1IfaREDpath/solid circleterminusisreached,anyprocedure ineffectotherthanthosenotedinstep3.6.1issuspended andtransition ismadetotheFRprocedure designated ontheCSFST.
,rt~
A-503.1:103.6.3.2~~~3.6.3.3Ifduringtheperformance o'fanFRprocedure fromaREDpathcondition ahigherpriorityREDpathisdetermined, theFRprocedure inuseissuspended andthehigherprioritycondition procedure isaddressed.
Oncethehigherpriorityprocedure iscomplete, thesuspended procedure forthelowerprioritycondition istobecompleted.
IfanORANGEpath/2/3filledcircleterminus, isreached,theremaining treesarechecked.IfnoREDpathexists,procedures ineffectotherthanthosenotedinstep3.6.1aresuspended andtheFRprocedure indicated forthehighestpriorityORANGEpathcondition identified isentered.3.6.3e43.6.3.5~~~3.6~3.6Ifduringtheperformance ofanORANGEterminusdirectedFRprocedure, aREDpathorhigherpriorityORANGEpathcondition arises,thentheoriginalORANGEpathFRissuspended andtheREDorhigherpriorityORANGEcondition isaddressed.
Oncethehigherprioritycondition procedure iscompleted, thesuspended procedure forthenextlowerprioritycondition istobecompleted.
WhileitisexpectedthattheactionsintheFRprocedure willcleartheREDandORANGEconditions beforealloperatoractionsarecompleted, theprocedure isperformed tothepointofaprocedure driventransition.
However,FR-S.1,ReactorRestart-/ATWSreceuires completion whenentered.AYELLOWpath/1/3filledcircleterminusisanindication ofanoff-normal condition.
Thesedonottakepriorityoverotherprocedures.
TheoperatorisallowedtodecideifanFRprocedure notedataYELLOWterminusistobeimplemented basedontheplantstatusandsystemtrendsat.thetimethecondition isnoted.3'CONTROLROOMPROCEDURE LAYOUTANDPLACEKEEPING 3.7.13.7'TheControlRoomcopyoftheEOP/APprocedures areorganized inindividual binderswithlayoutperFIGURE1.Thislayoutprovidesforeasyaccess,visibility of-.ATTACHMENTS andFOLDOUTPages,andensuresplacekeeping.
EachEOP/APbinderislocatedforeasyaccesswiththeControlRoom.Eachbinderisidentified byletterdesignation, number,andtitle.Example:E-O,ReactorTriporSafetyInjection


A-503.1:11 3.7.4Placekeeping intheresponsibility oftheEOPUser,normallytheControlRoomForeman.Inordertoensureproperplacekeeping, theEOPUsermaycheckofforannotatestepsbyusingpen/pencil markingstotheimmediate rightoftheActionSteporRNOperformed.
===3.6 PRIORITIZATION===
Alsoavailable tohim,arestick-onpadsornotepadswhichmaybeaffixedtopageswheretransition orloopingarenecessary.
OF FUNCTION RESTORATION PROCEDURES 3.6.1 3.6.2~~Red or Orange challenges to a Critical Safety function take priority over all E, ES, ER and ECA procedures except ECA-O.O, Loss of All AC Power and the immediate action steps of E-O, Reactor Trip or Safety Injection.
InadditiontotheControlRoomControlled Copy,additional controlled hardcopiesoftheEOP/APsareavailable tothecontrolroomoperators inthecopy54fileswithinthecontrolroom.3.8GENERICISSUESOFCONCERN3~8~13.8.1.1Adversecontainment processparameter values:Ifeithercontainment pressureexceeds4psigorthecontainment radiation exceeds105R/hr,theoperatorshoulduseadversecontainment values.3.8.1.2~~~IfAdverseCNMTvaluesarebeingusedANDbothofthefollowing conditions aremet,THENtheoperatormayreverttouseofnormalcontainment values:3~8.1.2.13.8.1.2.2 3.8.23.8.2.1CNMTpressuredecreases belowthepressuresetpoint(4psig)and,IfCNMTradiation exceeded10R/hr,HealthPhysicsshouldassesstheintegrated radiation dose.Iftheintegrated radiation doseisverifiedtobelessthan106Radswithdoseratelessthan105R/hr,theoperatormayagainusenormalCNMTvalues.Technical Specification Violations duringEOPuse:TheEOPscontainactionswhichwillleadtoTechnical Specification violations inordertomaintainplantsafety.Althoughitisdesirable toremainwithinTechnical Specification limitsatalltimes,onemustkeepinmindthattheoverallobjective istoprotectthehealthandsafetyofthepublic.Thismayrequireviolating aparticular Technical Specification inresponsetoanaccident, althoughtheEOPprovidestrategythatallowsTechnical Specification limitstobeadheredtowheneverpossible.
The six CSFSTs are ordered in the control room book by the following priority list.This listing estab-lishes the priority in which conditions are to be addressed in conjunction with the color code priority as described in 3.6.3.3.6.2.1 3.6.2.2 3.6.2.3 3.6.2.4 3.6.2.5 3.6.2.6 3.6.3 Subcriticality (S)Core Cooling (C)Heat Sink (H)Integrity (P)Containment (Z)Inventory (I)Once entered the CSFSTs should be monitored in the priority order.Each CSFST is followed to a terminus based on plant conditions at that time.An example of status tree use is included as Attachment 2.The rules of use based on the color code/symbol system are as follows: 3.6.3.1 If a RED path/solid circle terminus is reached, any procedure in effect other than those noted in step 3.6.1 is suspended and transition is made to the FR procedure designated on the CSFST.
,r t~
A-503.1: 10 3.6.3.2~~~3.6.3.3 If during the performance o'f an FR procedure from a RED path condition a higher priority RED path is determined, the FR procedure in use is suspended and the higher priority condition procedure is addressed.
Once the higher priority procedure is complete, the suspended procedure for the lower priority condition is to be completed.
If an ORANGE path/2/3 filled circle terminus, is reached, the remaining trees are checked.If no RED path exists, procedures in effect other than those noted in step 3.6.1 are suspended and the FR procedure indicated for the highest priority ORANGE path condition identified is entered.3.6.3e4 3.6.3.5~~~3.6~3.6 If during the performance of an ORANGE terminus directed FR procedure, a RED path or higher priority ORANGE path condition arises, then the original ORANGE path FR is suspended and the RED or higher priority ORANGE condition is addressed.
Once the higher priority condition procedure is completed, the suspended procedure for the next lower priority condition is to be completed.
While it is expected that the actions in the FR procedure will clear the RED and ORANGE conditions before all operator actions are completed, the procedure is performed to the point of a procedure driven transition.
However, FR-S.1, Reactor Restart-/ATWS receuires completion when entered.A YELLOW path/1/3 filled circle terminus is an indication of an off-normal condition.
These do not take priority over other procedures.
The operator is allowed to decide if an FR procedure noted at a YELLOW terminus is to be implemented based on the plant status and system trends at.the time the condition is noted.3'CONTROL ROOM PROCEDURE LAYOUT AND PLACEKEEPING 3.7.1 3.7'The Control Room copy of the EOP/AP procedures are organized in individual binders with layout per FIGURE 1.This layout provides for easy access, visibility of-.ATTACHMENTS and FOLDOUT Pages, and ensures placekeeping.
Each EOP/AP binder is located for easy access with the Control Room.Each binder is identified by letter designation, number, and title.Example: E-O, Reactor Trip or Safety Injection
 
A-503.1:11
 
====3.7.4 Placekeeping====
in the responsibility of the EOP User, normally the Control Room Foreman.In order to ensure proper placekeeping, the EOP User may checkoff or annotate steps by using pen/pencil markings to the immediate right of the Action Step or RNO performed.
Also available to him, are stick-on pads or note pads which may be affixed to pages where transition or looping are necessary.
In addition to the Control Room Controlled Copy, additional controlled hard copies of the EOP/APs are available to the control room operators in the copy 54 files within the control room.3.8 GENERIC ISSUES OF CONCERN 3~8~1 3.8.1.1 Adverse containment process parameter values: If either containment pressure exceeds 4 psig or the containment radiation exceeds 105 R/hr, the operator should use adverse containment values.3.8.1.2~~~If Adverse CNMT values are being used AND both of the following conditions are met, THEN the operator may revert to use of normal containment values: 3~8.1.2.1 3.8.1.2.2 3.8.2 3.8.2.1 CNMT pressure decreases below the pressure setpoint (4 psig)and, If CNMT radiation exceeded 10 R/hr, Health Physics should assess the integrated radiation dose.If the integrated radiation dose is verified to be less than 106 Rads with dose rate less than 105 R/hr, the operator may again use normal CNMT values.Technical Specification Violations during EOP use: The EOPs contain actions which will lead to Technical Specification violations in order to maintain plant safety.Although it is desirable to remain within Technical Specification limits at all times, one must keep in mind that the overall objective is to protect the health and safety of the public.This may require violating a particular Technical Specification in response to an accident, although the EOP provide strategy that allows Technical Specification limits to be adhered to whenever possible.
O~
O~
A-503.1:12ATTACHMENT 1EXAMPLEOFEOPUSETheactualprocessofworkingthroughadualcolumnformatted EOPisillustrated byusingE-2,FaultedSteamGenerator Isolation.
A-503.1: 12 ATTACHMENT 1 EXAMPLE OF EOP USE The actual process of working through a dual column formatted EOP is illustrated by using E-2, Faulted Steam Generator Isolation.
Itisassumedtheuserwasdirectedtothebeginning ofthisprocedure byanotherEOP.Thecoverpageprovidestheprocedure designator andtitletoassurethecorrectprocedure hasbeenobtained.
It is assumed the user was directed to the beginning of this procedure by another EOP.The cover page provides the procedure designator and title to assure the correct procedure has been obtained.The PURPOSE section tells the user that this procedure is written to identify and isolate a faulted Steam Generator.
ThePURPOSEsectiontellstheuserthatthisprocedure iswrittentoidentifyandisolateafaultedSteamGenerator.
The ENTRY CONDITIONS/SYMP-TOMS section list should show the procedure from which transition has been made.The first action step of the procedure is preceeded by two caution statements and one note statement.
TheENTRYCONDITIONS/SYMP-TOMSsectionlistshouldshowtheprocedure fromwhichtransition hasbeenmade.Thefirstactionstepoftheprocedure ispreceeded bytwocautionstatements andonenotestatement.
The cautions are distinguished by a line of asterisks above and below them and the word CAUTION.The word NOTE distinguishes the note's existence.
Thecautionsaredistinguished byalineofasterisks aboveandbelowthemandthewordCAUTION.ThewordNOTEdistinguishes thenote'sexistence.
Both types of entries are also made more visible by the use of the entire width of the page in contrast to the dual column format of the action steps.I\The first caution tells the operator that at least one S/G must be maintained available for RCS cooldown.The second caution tells the operator that any faulted S/G or secondary break which becomes isolated should remain isolated during subsequent recovery actions unless needed for RCS cooldown.Both of these cautions are placed at this point due to the isolation process begun in the next step.The operator is presumed to know that"faulted" means-a failure of the secondary pressure boundary, and"isolated" refers to closure of steam and/or feed paths.The cautions have provided a specific criteria of RCS cooldown concerns for not isolating, or unisolating a faulted S/G.In addition, the second caution reminds the operator that the concerns for maintaining a faulted S/G isolated continue to exist after a transition from this procedure to another.The note reminds the operator that status tree monitoring should be occurring.
Bothtypesofentriesarealsomademorevisiblebytheuseoftheentirewidthofthepageincontrasttothedualcolumnformatoftheactionsteps.I\ThefirstcautiontellstheoperatorthatatleastoneS/Gmustbemaintained available forRCScooldown.
The first action, Step 1, is a check for main steam line isolation on any affected (faulted)S/G.The expected condition is that the MSIV and bypass valve on any affected S/G is CLOSED.If the operators determine they are closed, they proceed to Step 2.If any valve is not closed on an affected S/G, then a transfer to the right-hand or RESPONSE NOT OBTAINED (RNO)column.This column instructs manual closure of the valves.After the perfor-mance of this action the operator proceeds to the next task in the left-hand column.If any valve cannot be closed, the operator still proceeds to the next task in the left-hand column.
ThesecondcautiontellstheoperatorthatanyfaultedS/Gorsecondary breakwhichbecomesisolatedshouldremainisolatedduringsubsequent recoveryactionsunlessneededforRCScooldown.
h OJ P~
Bothofthesecautionsareplacedatthispointduetotheisolation processbeguninthenextstep.Theoperatorispresumedtoknowthat"faulted" means-afailureofthesecondary pressureboundary, and"isolated" referstoclosureofsteamand/orfeedpaths.ThecautionshaveprovidedaspecificcriteriaofRCScooldownconcernsfornotisolating, orunisolating afaultedS/G.Inaddition, thesecondcautionremindstheoperatorthattheconcernsformaintaining afaultedS/Gisolatedcontinuetoexistafteratransition fromthisprocedure toanother.Thenoteremindstheoperatorthatstatustreemonitoring shouldbeoccurring.
Step 2 contains a high level action step to"Check If Either S/G Is Not Faulted" with a substep"a." task providing more detail on how to complete this task.The substep instructs the checking of pressures in both S/G's.The expected response of"EITHER S/G STABLE OR INCREASING" is satisfied if the pressure in one S/G, or both, is stable or increasing and the user proceeds to Step 3.If pressure is decreasing in both'S/G's, then the left-hand column is not satis f ied and a move to the RNO column is made.The RNO column directs a transition to ECA-2.1 if both S/G's pressure are decreasing in an uncontrolled manner.At this point the operators must determine if the decreasing pressure is controlled or uncontrolled.
Thefirstaction,Step1,isacheckformainsteamlineisolation onanyaffected(faulted)
If it is in fact uncontrolled by the operators, then the transition is made.If the depressurization in at least one S/G is under control, then they proceed to the left-hand column and into Step 3.Step 3 directs the user to"IDENTIFY FAULTED S/G(s)" and again uses a substep for detailed task description.
S/G.Theexpectedcondition isthattheMSIVandbypassvalveonanyaffectedS/GisCLOSED.Iftheoperators determine theyareclosed,theyproceedtoStep2.IfanyvalveisnotclosedonanaffectedS/G,thenatransfertotheright-hand orRESPONSENOTOBTAINED(RNO)column.Thiscolumninstructs manualclosureofthevalves.Aftertheperfor-manceofthisactiontheoperatorproceedstothenexttaskintheleft-hand column.Ifanyvalvecannotbeclosed,theoperatorstillproceedstothenexttaskintheleft-hand column.
Two indications are used to determine if a S/G is faulted.If a S/G is depressur-izing in an uncontrolled manner or is completely depressurized it is identified as being faulted and the operator moves on to Step 4.The use of the word OR between the two bullet marked conditions signifies that only one of the conditions need be satisfied to identify a faulted S/G.If no S/G satisfies either listed condition, then the operator moves to the RNO column.The RNO action directs a search for the initiating break as't is assumed that the break has been isolated by the previous closure of the MSIV and bypass.Once the search is begun the action portion of the step is satisfied and movement through the procedure may continue.The RNO step now tells the user to GO TO Step 5.This bypasses the Step 4 isolation as no faulted S/G now exists.Step, 4 tells the operators to"Isolate Faulted S/G" and provides a list of inlet and outlet flow paths to be isolated.These are listed with bullet designators thereby noting that no particular'rder of isolation is required.The operators proceed to verify isolated or isolate paths from the control room and dispatch personnel to the listed areas for other paths.If some aspect of the control room isolation process is not satisfied, the RNO column is accessed.The RNO column directs closing valves from the control room and, if that is not possible, dispatching personnel to perform local isolations.
hOJP~
With contingency actions completed or local actions initiated, the operator proceeds to Step 5.Step 5 requires a check of the Condensate Storage Tanks level.If the level is greater than 5 feet, the expected response is satisfied and the operator moves to Step 6.If the level is not greater than 5 feet then the RNO column instructs a switch to an alternate AFW water supply and provides a reference to ER-AFW.l.
Step2containsahighlevelactionstepto"CheckIfEitherS/GIsNotFaulted"withasubstep"a."taskproviding moredetailonhowtocompletethistask.Thesubstepinstructs thecheckingofpressures inbothS/G's.Theexpectedresponseof"EITHERS/GSTABLEORINCREASING" issatisfied ifthepressureinoneS/G,orboth,isstableorincreasing andtheuserproceedstoStep3.Ifpressureisdecreasing inboth'S/G's,thentheleft-hand columnisnotsatisfiedandamovetotheRNOcolumnismade.TheRNOcolumndirectsatransition toECA-2.1ifbothS/G'spressurearedecreasing inanuncontrolled manner.Atthispointtheoperators mustdetermine ifthedecreasing pressureiscontrolled oruncontrolled.
l I br<Ir 0 0 Since this is a REFER TO statement the E-2 procedure is not exited.The ER-AFW.1 procedure is used in parallel with the E-2 procedure, as possible and appropriate, and the operator moves on to Step 6.Step 6 directs a check of secondary radiation indicators.
Ifitisinfactuncontrolled bytheoperators, thenthetransition ismade.Ifthedepressurization inatleastoneS/Gisundercontrol,thentheyproceedtotheleft-hand columnandintoStep3.Step3directstheuserto"IDENTIFY FAULTEDS/G(s)"andagainusesasubstepfordetailedtaskdescription.
Several substeps are used to satisfy the high level action step.In the first substep the operator will request periodic samples be collected by HP personnel.
Twoindications areusedtodetermine ifaS/Gisfaulted.IfaS/Gisdepressur-izinginanuncontrolled manneroriscompletely depressurized itisidentified asbeingfaultedandtheoperatormovesontoStep4.TheuseofthewordORbetweenthetwobulletmarkedconditions signifies thatonlyoneoftheconditions needbesatisfied toidentifyafaultedS/G.IfnoS/Gsatisfies eitherlistedcondition, thentheoperatormovestotheRNOcolumn.TheRNOactiondirectsasearchfortheinitiating breakas'tisassumedthatthebreakhasbeenisolatedbythepreviousclosureoftheMSIVandbypass.Oncethesearchisbeguntheactionportionofthestepissatisfied andmovementthroughtheprocedure maycontinue.
The desired samples are specified and the appropriate procedures are referenced.
TheRNOstepnowtellstheusertoGOTOStep5.ThisbypassestheStep4isolation asnofaultedS/Gnowexists.Step,4tellstheoperators to"IsolateFaultedS/G"andprovidesalistofinletandoutletflowpathstobeisolated.
Once the HP department is notified this substep is satisfied and the operator proceeds to the next substep.Here the operators are directed to check any unisolated secondary radiation monitors.A list of those monitors which may be used from the control room is included.The third substep is a conclusion of the radiation check process.If the radiation levels are normal the operator proceeds to step 7.If abnormal radiation is detected, then the operator moves to the RNO column.This entry directs a transition to E-3, therefore the E-2 procedure is exited and entry is made into the E-3 procedure.
Thesearelistedwithbulletdesignators therebynotingthatnoparticular'rder ofisolation isrequired.
Step 7 directs the operator to GO TO E-l, this ends the use of the E-2 procedure and provides direction for transition to another appropriate procedure, E-1 is entered at step one, the CAUTIONS and NOTE before step one in E-1 are to be read.
Theoperators proceedtoverifyisolatedorisolatepathsfromthecontrolroomanddispatchpersonnel tothelistedareasforotherpaths.Ifsomeaspectofthecontrolroomisolation processisnotsatisfied, theRNOcolumnisaccessed.
e 0 A-503.1:15 ATTACHMENT 2 CRITICAL SAFETY FUNCTION STATUS TREE USE The process of working through the status trees can be illustrated by using CSFST: F-0.1, SUBCRITICALITY.(FIGURE 1)The user enters the tree on the left-hand side of the arrow.The first block asks if the power range instruments indicate less than 5%.The possible answers are YES or NO.If indicated power is greater than 5%, then the response is NO.Exiting the decision box at the NO segment places the user on a path which leads directly to a terminus.At.this point it is determined that: o the response priority is RED o the appropriate Function Restoration procedure is FR-S.l According to the rules of priority any procedure in effect, other than ECA-0.0 or the immediate actions of E-O, would be suspended and actions for FR-S.1 would be initiated.
TheRNOcolumndirectsclosingvalvesfromthecontrolroomand,ifthatisnotpossible, dispatching personnel toperformlocalisolations.
Since Subcriticality is the highest priority Critical Safety Function, this would also suspend any FR procedure in effect other than FR-S.l.Monitoring of the CSFSTs may continue for information purposes.When FR-S.1 is complete the user is directed to return to the procedure and step in effect.This permits a return to the suspended procedure at the point of suspension, or any other RED or ORANGE paths identified would now be addressed in their priority order.If indicated power is less than 5%, the first decision block is exited at the YES section pathway which leads to the next decision block.This block asks the user if the intermediate range startup rate is zero or negative.If the startup rate is positive the block is exited at the NO section.This path leads directly to a terminus where it is determined that: o the response priority is ORANGE o the procedure to be used is FR-S.l The user now must check the other status trees to determine if a RED path exists on another tree.If no RED path conditions exist the Subcriticality ORANGE path becomes the priority procedure and suspension of an in use procedure occurs as previously described.
Withcontingency actionscompleted orlocalactionsinitiated, theoperatorproceedstoStep5.Step5requiresacheckoftheCondensate StorageTankslevel.Ifthelevelisgreaterthan5feet,theexpectedresponseissatisfied andtheoperatormovestoStep6.Ifthelevelisnotgreaterthan5feetthentheRNOcolumninstructs aswitchtoanalternate AFWwatersupplyandprovidesareference toER-AFW.l.
Under these conditions monitoring of the CSFSTs continues and if a RED path condition arises it takes priority.When FR-S.1 is completed, a return to the previously suspended procedure takes place.If any other ORANGE path conditions had occurred, they"-=""'ould now be addresses in the order of priority.
lIbr<Ir00 SincethisisaREFERTOstatement theE-2procedure isnotexited.TheER-AFW.1procedure isusedinparallelwiththeE-2procedure, aspossibleandappropriate, andtheoperatormovesontoStep6.Step6directsacheckofsecondary radiation indicators.
a A-503.1:16 If the startup rate is determined to be zero or negative, exit is by the YES segment which leads to another decision block.The user is now asked to determine if a source range is energized.
Severalsubstepsareusedtosatisfythehighlevelactionstep.Inthefirstsubsteptheoperatorwillrequestperiodicsamplesbecollected byHPpersonnel.
If no source range is energized this block is exited via the NO segment to another decision block.This block asks if the intermediate range startup rate is more negative than-0.2 DPM.If the indicated startup rate is between 0 and-0.2 DPM, the user now exits at the NO section and reaches a terminus where it is determined that: o the response priority is YELLOW o the appropriate response procedure is FR-S.2 Since the status is a Yellow condition, the remaining trees are checked to determine if any Red or Orange conditions exist.If no condition color-coded higher than Yellow exists, then a decisions made whether FR-S.2 is to be performed or not.Often a Yellow path indicates an off-normal condition which may be restored to satisfied status by actions in progress.It may also be the case that the condition is expected or acceptable for a particular transient or evolution in progress.If the intermediate range startup rate is more negative than-0.2 DPM, then the decision block is exited from the YES segment.This leads directly to a Green terminus which is annotated CSF SAT.The Subcriticality Safety Function is satisfied and the user moves on to the next tree in the secpxence.
Thedesiredsamplesarespecified andtheappropriate procedures arereferenced.
If in the third decision block it is determined that a source range is energized, the YES exit is taken which leads to another decision block.This time the user is asked to determine if the source range startup rate is zero or negative.If the startup rate is determined to be positive the NO exit is taken which leads directly to a Yellow terminus.Again the other trees are checked and then a decision may be made whether or not to implement FR-ST 2'f the source range startup rate is determined to be zero or negative the YES segment exit leads directly to a Green or satisfied terminus and the user moves on the next status tree.
OncetheHPdepartment isnotifiedthissubstepissatisfied andtheoperatorproceedstothenextsubstep.Heretheoperators aredirectedtocheckanyunisolated secondary radiation monitors.
C CSFST: F-0.1 TITLE;POWER RANGE LESS THAN 5%SU BCRITICALITY NO YES NO INTERMEDIATE RANGE SUR ZERO OR NEGATIVE YES r t-'g~ve-l SOURCE RANGE ENERGIZED INTERMEDIATE RANGE SUR MORE NEGATIVE THAN-0.2 DPM NO YES SOURCE RANGE SUR ZERO OR NEGATIVE REv: 0 PAGE 1 OF NO YES NO YES GO TO FR-S.1 GO TO FR-S.1 GO TO FR-S.2 CSF SAT GO TO FR-S.2 CSF SAT 4}}
Alistofthosemonitorswhichmaybeusedfromthecontrolroomisincluded.
Thethirdsubstepisaconclusion oftheradiation checkprocess.Iftheradiation levelsarenormaltheoperatorproceedstostep7.Ifabnormalradiation isdetected, thentheoperatormovestotheRNOcolumn.Thisentrydirectsatransition toE-3,therefore theE-2procedure isexitedandentryismadeintotheE-3procedure.
Step7directstheoperatortoGOTOE-l,thisendstheuseoftheE-2procedure andprovidesdirection fortransition toanotherappropriate procedure, E-1isenteredatstepone,theCAUTIONSandNOTEbeforesteponeinE-1aretoberead.
e0 A-503.1:15 ATTACHMENT 2CRITICALSAFETYFUNCTIONSTATUSTREEUSETheprocessofworkingthroughthestatustreescanbeillustrated byusingCSFST:F-0.1,SUBCRITICALITY.
(FIGURE1)Theuserentersthetreeontheleft-hand sideofthearrow.Thefirstblockasksifthepowerrangeinstruments indicatelessthan5%.ThepossibleanswersareYESorNO.Ifindicated powerisgreaterthan5%,thentheresponseisNO.ExitingthedecisionboxattheNOsegmentplacestheuseronapathwhichleadsdirectlytoaterminus.
At.thispointitisdetermined that:otheresponsepriorityisREDotheappropriate FunctionRestoration procedure isFR-S.lAccording totherulesofpriorityanyprocedure ineffect,otherthanECA-0.0ortheimmediate actionsofE-O,wouldbesuspended andactionsforFR-S.1wouldbeinitiated.
SinceSubcriticality isthehighestpriorityCriticalSafetyFunction, thiswouldalsosuspendanyFRprocedure ineffectotherthanFR-S.l.Monitoring oftheCSFSTsmaycontinueforinformation purposes.
WhenFR-S.1iscompletetheuserisdirectedtoreturntotheprocedure andstepineffect.Thispermitsareturntothesuspended procedure atthepointofsuspension, oranyotherREDorORANGEpathsidentified wouldnowbeaddressed intheirpriorityorder.Ifindicated powerislessthan5%,thefirstdecisionblockisexitedattheYESsectionpathwaywhichleadstothenextdecisionblock.Thisblockaskstheuseriftheintermediate rangestartuprateiszeroornegative.
IfthestartuprateispositivetheblockisexitedattheNOsection.Thispathleadsdirectlytoaterminuswhereitisdetermined that:otheresponsepriorityisORANGEotheprocedure tobeusedisFR-S.lTheusernowmustchecktheotherstatustreestodetermine ifaREDpathexistsonanothertree.IfnoREDpathconditions existtheSubcriticality ORANGEpathbecomesthepriorityprocedure andsuspension ofaninuseprocedure occursaspreviously described.
Undertheseconditions monitoring oftheCSFSTscontinues andifaREDpathcondition arisesittakespriority.
WhenFR-S.1iscompleted, areturntothepreviously suspended procedure takesplace.IfanyotherORANGEpathconditions hadoccurred, they"-=""'ould nowbeaddresses intheorderofpriority.
a A-503.1:16 Ifthestartuprateisdetermined tobezeroornegative, exitisbytheYESsegmentwhichleadstoanotherdecisionblock.Theuserisnowaskedtodetermine ifasourcerangeisenergized.
Ifnosourcerangeisenergized thisblockisexitedviatheNOsegmenttoanotherdecisionblock.Thisblockasksiftheintermediate rangestartuprateismorenegativethan-0.2DPM.Iftheindicated startuprateisbetween0and-0.2DPM,theusernowexitsattheNOsectionandreachesaterminuswhereitisdetermined that:otheresponsepriorityisYELLOWotheappropriate responseprocedure isFR-S.2SincethestatusisaYellowcondition, theremaining treesarecheckedtodetermine ifanyRedorOrangeconditions exist.Ifnocondition color-coded higherthanYellowexists,thenadecisions madewhetherFR-S.2istobeperformed ornot.OftenaYellowpathindicates anoff-normal condition whichmayberestoredtosatisfied statusbyactionsinprogress.
Itmayalsobethecasethatthecondition isexpectedoracceptable foraparticular transient orevolution inprogress.
Iftheintermediate rangestartuprateismorenegativethan-0.2DPM,thenthedecisionblockisexitedfromtheYESsegment.ThisleadsdirectlytoaGreenterminuswhichisannotated CSFSAT.TheSubcriticality SafetyFunctionissatisfied andtheusermovesontothenexttreeinthesecpxence.
Ifinthethirddecisionblockitisdetermined thatasourcerangeisenergized, theYESexitistakenwhichleadstoanotherdecisionblock.Thistimetheuserisaskedtodetermine ifthesourcerangestartuprateiszeroornegative.
Ifthestartuprateisdetermined tobepositivetheNOexitistakenwhichleadsdirectlytoaYellowterminus.
Againtheothertreesarecheckedandthenadecisionmaybemadewhetherornottoimplement FR-ST2'fthesourcerangestartuprateisdetermined tobezeroornegativetheYESsegmentexitleadsdirectlytoaGreenorsatisfied terminusandtheusermovesonthenextstatustree.
C CSFST:F-0.1TITLE;POWERRANGELESSTHAN5%SUBCRITICALITY NOYESNOINTERMEDIATE RANGESURZEROORNEGATIVEYESrt-'g~ve-lSOURCERANGEENERGIZED INTERMEDIATE RANGESURMORENEGATIVETHAN-0.2DPMNOYESSOURCERANGESURZEROORNEGATIVEREv:0PAGE1OFNOYESNOYESGOTOFR-S.1GOTOFR-S.1GOTOFR-S.2CSFSATGOTOFR-S.2CSFSAT 4}}

Revision as of 15:48, 7 July 2018

Rev 6 to A-503.1, Emergency & Abnormal Operating Procedures Users Guide.
ML17251A353
Person / Time
Site: Ginna Constellation icon.png
Issue date: 10/31/1988
From:
ROCHESTER GAS & ELECTRIC CORP.
To:
Shared Package
ML17251A351 List:
References
A-503.1, NUDOCS 8811180197
Download: ML17251A353 (36)


Text

ROCHESTER GAS AND ELECTRIC CORPORATION GINNA STATION CONTROLLED COPY NUMBER TIM::-PROCEDURE NO.A-503.1 REV.NO.EMERGENCY AND ABNORMAL OPERATING PROCEDURES USERS GUIDE ,TECHNICAL REVIEWPORC REVIEW DATE QUALITY ASSURANCE PLANT SUPERINTENDENT EFFECTIVE DATE QA NON-QA CATEGORY 1.0 REVIEWED BY: THIS PROCEDURE CONTAINS 19 PAGES 8811180197 881031 PDR ADOCK 05000244 P PDC

'

A-503.1: 1 A-503.1 EMERGENCY AND ABNORMAL PROCEDURES USERS GU1DE INTRODUCTION PURPOSE-to give guidance in the use of Emergency Operating Procedures (EOPs)and Abnormal Procedures (APs)and to clarify the logic used in these procedures.

SCOPE OF APPLICABILITY

-this procedure is applicable to all EOPs and APs.REFERENCES

-applicable to this procedure are;WOG-ERG, Revision 1, LP Version,,Executive Volume Users Guide.Ginna Station EOP/AP Writers Guide, A-502.1.Ginna Station EOP/AP Series.DEFINITIONS Emergency Operating Procedure (EOP)-A procedure which provides actions necessary to return the plant to a safe, stable condition following a transient/acci-dent which has caused plant parameters to challenge reactor protection system set points, engineered safeguards system set points, challenge the ability to cool the reactor core or a.radiation release boundary.Abnormal Operating Procedure (AP)-APs govern the plant operations during abnormal conditions and specify operator actions that will prevent the condition from degrading into an emergency.

Critical Safety Function (CSF)-CSFs are those functions necessary to protect the fuel/cladding, RCS pressure boundary and the containment vessel from degradation.

A prioritized list of these six functions is as follows: Maintenance of Subcriticality Maintenance of Core Cooling Maintenance of Heat Sink Maintenance of RCS Integrity

A-503.1: 2 1.4.3.5 1.4.3.6 1.5 Maintenance of Containment Integrity Control of Reactor Coolant Inventory TEXT REVISIONS-are identified by a change bar.The change bar is located in the right hand margin to indicate changes to the text of that line.The change bar for the current revision will not be carried forward to the next revision.2.0 EOP AP Section Or anization-in order to facilitate rapid location of specific sections and subsections of the EOP/AP, the control room copy is arranged per FIGURE 3 as follows: 2.1 2'..COVER SHEET-which is used for administrative purposes and does not provide any active.function in the EOP/AP to be used.The Cover Sheet of the Control Room copy is the first page seen in the binder.PURPOSE and ENTRY CONDITIONS SYMPTOMS PAGE-in the Control Room copy is immediately following the cover sheet.2.2~1~~2.2.2 2'2.3.1 2.3.2 2'.3 A Purpose Statement which specifically describes the intent of the procedure.

Entry conditions and/or Symptoms sections which specify the conditions, transitions and/or symptoms which dictate or direct entry into the procedure.

The symptoms used should be unique to the procedure.

OPERATOR ACTION STEP PAGES-which may be subdivided into Immediate Operator Action pages, followed by subsequent operator action pages.Operator action step pages may contain;CAUTION STATEMENTS

-which provide information about hazards to personnel or equipment and advice on actions or transitions which may become necessary depending on changes in plant conditions.

NOTE STATEMENTS

-which provide administrative or advisory information which supports operator actions.OPERATOR ACTION STEPS-presented in a two column format, direct the operator through specific step by step tasks, give the expected results from those tasks and provide contingency actions to be taken should an expected task method not be available or an expected result not be obtained.

0 A-503.1:3 2.3.3.1~~~2.3.3.2 Immediate Operator Actions-actions which the operator should be able to perform before opening and reading his emergency procedures.

In general, immediate actions are limited to the verification of automatic protection features of the plant.Although the immediate actions should be memorized by the operator, they need not be memorized verbatim.The operator should know them well enough to complete the intent of each step, which is to verify that the automatic actions have occurred.The order in which they should be performed should also be consistent with the step sequence requirements.

Subsequent Operator Actions-actions not defined as immediate.

22'.3.4 An Action/Expected Response column contains the primary operator action and the expected response or results of those actions.Expected response or results of the operator action tasks are given in CAPITAL LETTERS, separated from the action by a dash (-)~The Response Not Obtained (RNO)column presents contingency actions to be taken when an action in the left.-hand column cannot be performed or does not satisfy the expected response condition.

RNO column actions are specified for steps and substeps for which useful alternatives are available.

Contingency actions may include directions to override automatic controls, to manually or locally initiate normally automatic actions, or to use alternative systems, evaluations, or procedures.

2.4 2.4.1 2.4.2 OTHER EOP/AP CONTENTS-may include: AUTOMATIC ACTION PAGE-which provides information on systems or components which should activate or realign automatically, without operator intervention.

FOLDOUT PAGE-which provides a summary of information and conditions to be monitored throughout the EOP/AP.This page provides actions and transitions based on plant conditions which may occur outside the normal flow of the EOP/AP.2.4.3 FIGURES-may be drawings, graphs or diagrams which will provide additional information to the operator.

A-503.1:4 2.4.4~~3.0 ATTACHMENT PAGES-which may be used to provide additional information to the operator.They provide information concerning a particular step or evolution addressed in the procedure.

'he information presented is of importance to the action or decision where referenced, but is of a length or format which precludes incorporation into the procedure step.INSTRUCTIONS NOTE: See attachment 1, Example of EOP Use, which describes the process of working through a dual column formatted EOP and implements the instructions described herein.NOTE Refer to A-502.1 EOP/AP Writer Guide (Reference 1.3.2)for actual format and content requirements.

3.1 ENTRY INTO EOP AP-entry into an EOP/AP normally begins at the PURPOSE AND ENTRY CONDITIONS/SYMPTOMS page and sequentially progresses through the Operator Action pages unless specifically directed outside the normal operating or abnormal procedure, by a Foldout page concern or by a CSFST condition.

Direct entry into the EOP set is normally through E-O, but proce-dure FR-S.l or ECA-O.O may be entered directly if the entry conditions are observed.3.2 PURPOSE and ENTRY CONDITIONS SYMPTOMS PAGE 3.2.1 3.2.2 Verify that the procedure purpose satisfies the specific goal desired.Verify that the stated entry conditions are consistent with current plant conditions or that the correct transitions have been made.3.2.3 3.3 Verify that current plant symptoms meet the symptoms associated with the procedure in hand.OPERATOR ACTION STEP PAGES3.3.1 3.3.1.1 3~3~1~2 NOTES and CAUTIONS Observe all applicable NOTES and CAUTIONS prior to performing any step.NOTES and CAUTIONS immediately proceed the applicable step(s)to which they apply.Those applicable to the entire procedure are shown prior to any Operator Action step.

~~0 0 A-503.1:5 3.3'.3~~~Cautions are differentiated from notes by inclusion of asterisks across the EOP Page (See Reference 1.3.2).3.3.2 DUAL COLUMN FORMAT USAGE 3.3~2~1 3'Perform all Immediate actions prior to performing Subsequent action steps.Perform actions in the left-hand column first.3.3 3.3.2.4 3.3.2.5 Move to the next step and perform actions in the left-hand column if the actions in the previous left-hand column were performed successfully.

Perform actions in the right-hand column only if the action performed in the left-hand column does not achieve the expected response or the action in the left-hand column cannot be performed.

Move to the next step or substep and perform actions in the left-hand column if the actions in the previous right-hand column are performed successfully or if the actions in the previous right-hand column fail to bring about the required response or no entry exists in the right-hand column unless specifically directed not to continue.3.3.2.6 3~3~2~7 Perform all numerically or alphabetically identified steps in sequential order.Those substeps identified by bullets (o)may be performed in any order or preference.

Beginning an action step or substep and being assured that it is progressing successfully is sufficient action to proceed to a subsequent step unless;3.3.2.7.1 A NOTE states otherwise or;3.33.3.2.7.3 3.3'3.3.3'~~~The step specifies otherwise or;The operator deems it hazardous to personnel or equipment to proceed.TEXT CONTINUITY

-the text of operator action steps;with applicable substeps, cautions, notes;will normally be wholly contained on the same page.Where physical constraints preclude this the following guidelines are used: Cautions and/or notes are placed on the immediately preceding page.

~r!l,e 0 A-503 F 1:6 3.3~~~3.3.3.2.1 3.3.3.2.2 3.3.4 3.3.F 1 3.3.4'If a step is continued on to another page, then: The initial page is annotated at the bottom of the action step field portion of the page to indicate that the step is continued on the next page.(ie, THIS STEP CONTINUED ON FOLLOWING PAGE)The follower page will have the initial action step heading repeated with a statement to indicate that the step is being continued from a previous page.example: Establish letdown-THIS STEP CONTINUED FROM PREVIOUS PAGE USE OF LOGEC TERMS AND CONDITIONAL STATEMENTS:

The word AND is placed between a description of conditions for no more than combination of three conditions.

A list format shall be used for four or more conditions.

There is an implied and condition between each list item if no logic term is specified if substeps are proceeded with bullets (o).The word OR is used between alternative conditions.

Use of the word OR implies the inclusive sense.The exclusive sense of the word OR is denoted by using the form;either A OR B but not both.3.3.4'.1 3.3.4.3 When the inclusive or is used for a set of conditions, the satisfaction of any one condition allows progres-sion to the next step or substep.When two or more actions are separated by an or condition, only one action needs to be successfully taken to allow progression to the next step or substep.Action steps contingent upon certain conditions or combinations of conditions, begin with the logic terms IF or WHEN followed by a description of the condition(s), a comma, the logic term THEN and the action to be taken.IF is used for unexpected or possible conditions, THEN is only used in conditional statements and WHEN is used for expected or probable conditions.

3.3.4'The logic term IF NOT is the operator must respond possible conditions.

The operator response to the conditions.

limited to cases in which to the second of any two term IF is used to specify first of any two possible 3~~USE OF REFERENCE TERMS I 4 A-503.1:7 The words GO TO followed by only a step number directs transition to a subsequent step within the procedure being used.The words RETURN TO followed by only a step number directs transition to a previous step within the procedure being used.The words GO TO followed by a procedure designator, and title and/or a step number direct a transition to the specified EOP/AP.If no step number is specified, then the transition is to the beginning of the specified procedure.

Example: GO TO ES-0.1, REACTOR TRIP RESPONSE, Step 20.The words REFER TO followed by a procedure designator and title are used to denote a procedure which may provide necessary or useful information during the execution of an EOP/AP.In general, those procedures referenced cover low probability occurrences, or plant evaluations with their own procedures whose inclusion in the EOP/AP would cause excessive complication of and reduced effectiveness of the EOP/AP.Referencing another procedure does not constitute leaving the EOP/AP in effect.Example: REFER TO ER-AFW.l, ALTERNATE WATER SUPPLY TO AFW PUMPS.Procedures entered for supplemental guidance or from CSFST direction may contain a RETURN TO statement.

A procedure with multiple entry conditions may state RETURN TO PROCEDURE AND STEP IN EFFECT, this denotes a return to the last previous EOP and step in use.ACTION VERBS AND ABBREVIATIONS USAGE Operator action steps are normally written in a command form and begin with an action verb which has a precise meaning.Refer to A-502.1, WOP/AP Writers Guide (Reference 1;3.2)for listing.Certain abbreviations are used throughout the EOPs and APs to improve readability.

Refer to A-502.1, EOP/AP Writers Guide for proper abbreviations.

I FOLDOUT PAGES A-503.1'8 3.4.1 3.4.2 Direction to use a foldout page is provided by a NOTE within the procedure, generally at the beginning.

Once its use is directed the Foldout page is to be monitored throughout the time the EOP is in use.One section of each foldout page is a RED PATH

SUMMARY

which promotes a periodic check of the Critical Safety Functions.

Upon meeting one or more Red path conditions, transition to the appropriate Functional Restoration procedure is made as described in section 3.6.3Other sections of the Foldout page contain plant conditions which may arise at any time during the execution of the procedure or outside of the normal flow of the procedure.

These sections provide actions or guidance for operations if these conditions occur.3.5 USE OF CRITICAL SAFETY FUNCTION STATUS TREES CSFST 3.5~1~~3.5.2 CSFSTs are entered from and monitored in conjunction with the recovery actions of the other EOP series procedures.

FR procedures are entered from the CSFST or the EOPs and are intended to restore a degraded safety function to satisfied condition.

3'.3 3.5'3.5.5 A CSFST, as shown in Figure 1, is entered on the left side of the page as indicated by the arrow.Questions are asked and answered in turn which then direct the user to the next question.When all questions are answered in a particular path the user will have reached an endpoint or terminus.Each final path segment and each terminus circle is coded by a symbol scheme.The control room copy also utilizes a color code.The symbols and color coding used are described below.3.5.5.1 3.5.5.2 Color code-GREEN, final path segment and terminus circle are out-lined only: The CSF is satisfied.

No operator action is required.Color code-YELLOW, the final path segment is a series of solid dots and the terminus circle is one third filled in: The CSF is off-normal.

Operator action may be taken.

~i A-503.1:9 3'.5.3~~~3.5.5.4 3.5.6 Color code-ORANGE, the final path segment is a broken line, the terminus circle is two thirds filled in: The CSF is under severe challenge.

Prompt operator action is required.Color code-RED, the final path segment is a solid line, the terminus circle is totally filled in: The CSF is under extreme challenge.

Immediate operator action is required.For Yellow, Orange and Red paths a procedure designator will be included to direct the operator to the correct Function Restoration (FR)procedure.

These procedures

.are intended to return the CSF to the satisfied condition.

3.6 PRIORITIZATION

OF FUNCTION RESTORATION PROCEDURES 3.6.1 3.6.2~~Red or Orange challenges to a Critical Safety function take priority over all E, ES, ER and ECA procedures except ECA-O.O, Loss of All AC Power and the immediate action steps of E-O, Reactor Trip or Safety Injection.

The six CSFSTs are ordered in the control room book by the following priority list.This listing estab-lishes the priority in which conditions are to be addressed in conjunction with the color code priority as described in 3.6.3.3.6.2.1 3.6.2.2 3.6.2.3 3.6.2.4 3.6.2.5 3.6.2.6 3.6.3 Subcriticality (S)Core Cooling (C)Heat Sink (H)Integrity (P)Containment (Z)Inventory (I)Once entered the CSFSTs should be monitored in the priority order.Each CSFST is followed to a terminus based on plant conditions at that time.An example of status tree use is included as Attachment 2.The rules of use based on the color code/symbol system are as follows: 3.6.3.1 If a RED path/solid circle terminus is reached, any procedure in effect other than those noted in step 3.6.1 is suspended and transition is made to the FR procedure designated on the CSFST.

,r t~

A-503.1: 10 3.6.3.2~~~3.6.3.3 If during the performance o'f an FR procedure from a RED path condition a higher priority RED path is determined, the FR procedure in use is suspended and the higher priority condition procedure is addressed.

Once the higher priority procedure is complete, the suspended procedure for the lower priority condition is to be completed.

If an ORANGE path/2/3 filled circle terminus, is reached, the remaining trees are checked.If no RED path exists, procedures in effect other than those noted in step 3.6.1 are suspended and the FR procedure indicated for the highest priority ORANGE path condition identified is entered.3.6.3e4 3.6.3.5~~~3.6~3.6 If during the performance of an ORANGE terminus directed FR procedure, a RED path or higher priority ORANGE path condition arises, then the original ORANGE path FR is suspended and the RED or higher priority ORANGE condition is addressed.

Once the higher priority condition procedure is completed, the suspended procedure for the next lower priority condition is to be completed.

While it is expected that the actions in the FR procedure will clear the RED and ORANGE conditions before all operator actions are completed, the procedure is performed to the point of a procedure driven transition.

However, FR-S.1, Reactor Restart-/ATWS receuires completion when entered.A YELLOW path/1/3 filled circle terminus is an indication of an off-normal condition.

These do not take priority over other procedures.

The operator is allowed to decide if an FR procedure noted at a YELLOW terminus is to be implemented based on the plant status and system trends at.the time the condition is noted.3'CONTROL ROOM PROCEDURE LAYOUT AND PLACEKEEPING 3.7.1 3.7'The Control Room copy of the EOP/AP procedures are organized in individual binders with layout per FIGURE 1.This layout provides for easy access, visibility of-.ATTACHMENTS and FOLDOUT Pages, and ensures placekeeping.

Each EOP/AP binder is located for easy access with the Control Room.Each binder is identified by letter designation, number, and title.Example: E-O, Reactor Trip or Safety Injection

A-503.1:11

3.7.4 Placekeeping

in the responsibility of the EOP User, normally the Control Room Foreman.In order to ensure proper placekeeping, the EOP User may checkoff or annotate steps by using pen/pencil markings to the immediate right of the Action Step or RNO performed.

Also available to him, are stick-on pads or note pads which may be affixed to pages where transition or looping are necessary.

In addition to the Control Room Controlled Copy, additional controlled hard copies of the EOP/APs are available to the control room operators in the copy 54 files within the control room.3.8 GENERIC ISSUES OF CONCERN 3~8~1 3.8.1.1 Adverse containment process parameter values: If either containment pressure exceeds 4 psig or the containment radiation exceeds 105 R/hr, the operator should use adverse containment values.3.8.1.2~~~If Adverse CNMT values are being used AND both of the following conditions are met, THEN the operator may revert to use of normal containment values: 3~8.1.2.1 3.8.1.2.2 3.8.2 3.8.2.1 CNMT pressure decreases below the pressure setpoint (4 psig)and, If CNMT radiation exceeded 10 R/hr, Health Physics should assess the integrated radiation dose.If the integrated radiation dose is verified to be less than 106 Rads with dose rate less than 105 R/hr, the operator may again use normal CNMT values.Technical Specification Violations during EOP use: The EOPs contain actions which will lead to Technical Specification violations in order to maintain plant safety.Although it is desirable to remain within Technical Specification limits at all times, one must keep in mind that the overall objective is to protect the health and safety of the public.This may require violating a particular Technical Specification in response to an accident, although the EOP provide strategy that allows Technical Specification limits to be adhered to whenever possible.

O~

A-503.1: 12 ATTACHMENT 1 EXAMPLE OF EOP USE The actual process of working through a dual column formatted EOP is illustrated by using E-2, Faulted Steam Generator Isolation.

It is assumed the user was directed to the beginning of this procedure by another EOP.The cover page provides the procedure designator and title to assure the correct procedure has been obtained.The PURPOSE section tells the user that this procedure is written to identify and isolate a faulted Steam Generator.

The ENTRY CONDITIONS/SYMP-TOMS section list should show the procedure from which transition has been made.The first action step of the procedure is preceeded by two caution statements and one note statement.

The cautions are distinguished by a line of asterisks above and below them and the word CAUTION.The word NOTE distinguishes the note's existence.

Both types of entries are also made more visible by the use of the entire width of the page in contrast to the dual column format of the action steps.I\The first caution tells the operator that at least one S/G must be maintained available for RCS cooldown.The second caution tells the operator that any faulted S/G or secondary break which becomes isolated should remain isolated during subsequent recovery actions unless needed for RCS cooldown.Both of these cautions are placed at this point due to the isolation process begun in the next step.The operator is presumed to know that"faulted" means-a failure of the secondary pressure boundary, and"isolated" refers to closure of steam and/or feed paths.The cautions have provided a specific criteria of RCS cooldown concerns for not isolating, or unisolating a faulted S/G.In addition, the second caution reminds the operator that the concerns for maintaining a faulted S/G isolated continue to exist after a transition from this procedure to another.The note reminds the operator that status tree monitoring should be occurring.

The first action, Step 1, is a check for main steam line isolation on any affected (faulted)S/G.The expected condition is that the MSIV and bypass valve on any affected S/G is CLOSED.If the operators determine they are closed, they proceed to Step 2.If any valve is not closed on an affected S/G, then a transfer to the right-hand or RESPONSE NOT OBTAINED (RNO)column.This column instructs manual closure of the valves.After the perfor-mance of this action the operator proceeds to the next task in the left-hand column.If any valve cannot be closed, the operator still proceeds to the next task in the left-hand column.

h OJ P~

Step 2 contains a high level action step to"Check If Either S/G Is Not Faulted" with a substep"a." task providing more detail on how to complete this task.The substep instructs the checking of pressures in both S/G's.The expected response of"EITHER S/G STABLE OR INCREASING" is satisfied if the pressure in one S/G, or both, is stable or increasing and the user proceeds to Step 3.If pressure is decreasing in both'S/G's, then the left-hand column is not satis f ied and a move to the RNO column is made.The RNO column directs a transition to ECA-2.1 if both S/G's pressure are decreasing in an uncontrolled manner.At this point the operators must determine if the decreasing pressure is controlled or uncontrolled.

If it is in fact uncontrolled by the operators, then the transition is made.If the depressurization in at least one S/G is under control, then they proceed to the left-hand column and into Step 3.Step 3 directs the user to"IDENTIFY FAULTED S/G(s)" and again uses a substep for detailed task description.

Two indications are used to determine if a S/G is faulted.If a S/G is depressur-izing in an uncontrolled manner or is completely depressurized it is identified as being faulted and the operator moves on to Step 4.The use of the word OR between the two bullet marked conditions signifies that only one of the conditions need be satisfied to identify a faulted S/G.If no S/G satisfies either listed condition, then the operator moves to the RNO column.The RNO action directs a search for the initiating break as't is assumed that the break has been isolated by the previous closure of the MSIV and bypass.Once the search is begun the action portion of the step is satisfied and movement through the procedure may continue.The RNO step now tells the user to GO TO Step 5.This bypasses the Step 4 isolation as no faulted S/G now exists.Step, 4 tells the operators to"Isolate Faulted S/G" and provides a list of inlet and outlet flow paths to be isolated.These are listed with bullet designators thereby noting that no particular'rder of isolation is required.The operators proceed to verify isolated or isolate paths from the control room and dispatch personnel to the listed areas for other paths.If some aspect of the control room isolation process is not satisfied, the RNO column is accessed.The RNO column directs closing valves from the control room and, if that is not possible, dispatching personnel to perform local isolations.

With contingency actions completed or local actions initiated, the operator proceeds to Step 5.Step 5 requires a check of the Condensate Storage Tanks level.If the level is greater than 5 feet, the expected response is satisfied and the operator moves to Step 6.If the level is not greater than 5 feet then the RNO column instructs a switch to an alternate AFW water supply and provides a reference to ER-AFW.l.

l I br<Ir 0 0 Since this is a REFER TO statement the E-2 procedure is not exited.The ER-AFW.1 procedure is used in parallel with the E-2 procedure, as possible and appropriate, and the operator moves on to Step 6.Step 6 directs a check of secondary radiation indicators.

Several substeps are used to satisfy the high level action step.In the first substep the operator will request periodic samples be collected by HP personnel.

The desired samples are specified and the appropriate procedures are referenced.

Once the HP department is notified this substep is satisfied and the operator proceeds to the next substep.Here the operators are directed to check any unisolated secondary radiation monitors.A list of those monitors which may be used from the control room is included.The third substep is a conclusion of the radiation check process.If the radiation levels are normal the operator proceeds to step 7.If abnormal radiation is detected, then the operator moves to the RNO column.This entry directs a transition to E-3, therefore the E-2 procedure is exited and entry is made into the E-3 procedure.

Step 7 directs the operator to GO TO E-l, this ends the use of the E-2 procedure and provides direction for transition to another appropriate procedure, E-1 is entered at step one, the CAUTIONS and NOTE before step one in E-1 are to be read.

e 0 A-503.1:15 ATTACHMENT 2 CRITICAL SAFETY FUNCTION STATUS TREE USE The process of working through the status trees can be illustrated by using CSFST: F-0.1, SUBCRITICALITY.(FIGURE 1)The user enters the tree on the left-hand side of the arrow.The first block asks if the power range instruments indicate less than 5%.The possible answers are YES or NO.If indicated power is greater than 5%, then the response is NO.Exiting the decision box at the NO segment places the user on a path which leads directly to a terminus.At.this point it is determined that: o the response priority is RED o the appropriate Function Restoration procedure is FR-S.l According to the rules of priority any procedure in effect, other than ECA-0.0 or the immediate actions of E-O, would be suspended and actions for FR-S.1 would be initiated.

Since Subcriticality is the highest priority Critical Safety Function, this would also suspend any FR procedure in effect other than FR-S.l.Monitoring of the CSFSTs may continue for information purposes.When FR-S.1 is complete the user is directed to return to the procedure and step in effect.This permits a return to the suspended procedure at the point of suspension, or any other RED or ORANGE paths identified would now be addressed in their priority order.If indicated power is less than 5%, the first decision block is exited at the YES section pathway which leads to the next decision block.This block asks the user if the intermediate range startup rate is zero or negative.If the startup rate is positive the block is exited at the NO section.This path leads directly to a terminus where it is determined that: o the response priority is ORANGE o the procedure to be used is FR-S.l The user now must check the other status trees to determine if a RED path exists on another tree.If no RED path conditions exist the Subcriticality ORANGE path becomes the priority procedure and suspension of an in use procedure occurs as previously described.

Under these conditions monitoring of the CSFSTs continues and if a RED path condition arises it takes priority.When FR-S.1 is completed, a return to the previously suspended procedure takes place.If any other ORANGE path conditions had occurred, they"-=""'ould now be addresses in the order of priority.

a A-503.1:16 If the startup rate is determined to be zero or negative, exit is by the YES segment which leads to another decision block.The user is now asked to determine if a source range is energized.

If no source range is energized this block is exited via the NO segment to another decision block.This block asks if the intermediate range startup rate is more negative than-0.2 DPM.If the indicated startup rate is between 0 and-0.2 DPM, the user now exits at the NO section and reaches a terminus where it is determined that: o the response priority is YELLOW o the appropriate response procedure is FR-S.2 Since the status is a Yellow condition, the remaining trees are checked to determine if any Red or Orange conditions exist.If no condition color-coded higher than Yellow exists, then a decisions made whether FR-S.2 is to be performed or not.Often a Yellow path indicates an off-normal condition which may be restored to satisfied status by actions in progress.It may also be the case that the condition is expected or acceptable for a particular transient or evolution in progress.If the intermediate range startup rate is more negative than-0.2 DPM, then the decision block is exited from the YES segment.This leads directly to a Green terminus which is annotated CSF SAT.The Subcriticality Safety Function is satisfied and the user moves on to the next tree in the secpxence.

If in the third decision block it is determined that a source range is energized, the YES exit is taken which leads to another decision block.This time the user is asked to determine if the source range startup rate is zero or negative.If the startup rate is determined to be positive the NO exit is taken which leads directly to a Yellow terminus.Again the other trees are checked and then a decision may be made whether or not to implement FR-ST 2'f the source range startup rate is determined to be zero or negative the YES segment exit leads directly to a Green or satisfied terminus and the user moves on the next status tree.

C CSFST: F-0.1 TITLE;POWER RANGE LESS THAN 5%SU BCRITICALITY NO YES NO INTERMEDIATE RANGE SUR ZERO OR NEGATIVE YES r t-'g~ve-l SOURCE RANGE ENERGIZED INTERMEDIATE RANGE SUR MORE NEGATIVE THAN-0.2 DPM NO YES SOURCE RANGE SUR ZERO OR NEGATIVE REv: 0 PAGE 1 OF NO YES NO YES GO TO FR-S.1 GO TO FR-S.1 GO TO FR-S.2 CSF SAT GO TO FR-S.2 CSF SAT 4