ML18039A222

Proposed Tech Specs Re RHR SW Pumps Required for multi-unit Operation & Cold Shutdown

ML18039A222
Person / Time
Site:	Browns Ferry
Issue date:	12/30/1997
From:	TENNESSEE VALLEY AUTHORITY
To:
Shared Package
ML18039A221	List: ML18039A220 ML18039A222
References
NUDOCS 9801090088
Download: ML18039A222 (182)

Text

ENCLOSURE 2 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)

Units 1, 2, and 3 PROPOSED TECHNICAL SPECIFICATION (TS) CHANGE TS-395 MAEGCED PAGES I. AFFECTED PAGE LIST Unit 1 pages 3.5/4.5-11,, 3.5/4.5-29 Unit 2 pages 3.5/4.5-11, 3.5/4.5-27 Unit 3 pages 3.S/4.S-11, 3.S/4.5-30 II. MARKED PAGES See attached.

<<PBoio~ooe POR AOO " 0@OOOQQ9'71230 part P

i Table 3.5-1 ZOV 05 >9SO Minimum RHRSW and EECW Pump Assignment 1 Unit Fueled 2 Units Fueled 3 Units Fueled Time Limit ts e ue d Un t De ue ed SW E CW R SW CW R RSW EECW None 4 and 3 and 3 and 3 S (~3 W<)(w ~R d(b) 7 clnd 2 30 Days 3 and 2 (or) (or.)

4 and 3 6 and 3 7 Days and 2 4 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

(B) When each pump is supplied from a separate 4-kv shutdown hoard..

(C) This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.

(D) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

3.5/4.5-11 AhIEHOMBT NO. I 76 BFN Unit 1

II II

/e

3.5 S~S (Cont ') NOV 0 2595 are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.

When the decay heat IThere are four RHR heat exchanger headers (A, B, C, & D) with one RHR level has decreased Iheat exchanger from each unit on each header. There are two RHRSM pumps on each header; one normally assigned to each header (A2, B2, sufficiently following ,C2, or D2) and one on alternate assignment (Al, Bl, Cl, or Dl). One shutdown, the entire RHR heat exchanger header can adequately deliver the flow supplied by shutdown cooling both RHRSW pumps to any two of the three RHR heat exchangers on the load can be header. One RHRSM pump can supply the full'flow requirement of one.

RHR heat exchanger. Two RHR heat exchangers can more than adequately adequately handled handle the cooling requirements of one unit in any abnormal or by one RHR heat postaccident situation.

exchanger.

The RHR Service Mater System was designed as a shared system for three units. The specification, as written, is conservative when consider-The minimum ation is given to particular pumps being out of service and to number of RHRSW 'oss e va v ng arrangemen s.

If unusual operating conditions arise such that more pumps are out of service than allowed by this pumps which are specification, a special case request may be made to the NRC to allow.

required to be 'ontinued operation if the actual system cooling requirements can be operable by this assured.

~

specification ensure at the RHRSW I Since the standby coolant supply capability provides added long term stem will satisfy its

'edundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed. This time safety functions for 'i limit does not reduce the other requirements associated with all three units RHRSM/EECW system pump operability.

following a design basis event on one Should one of the two RHRSW pumps normally or alternately assigned to unit and a postulated 'he RHR heat exchanger header supplying the standby coolant supply single active failure.

connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containmei.t This includes a single'$ remains OPERABLE. Because of the availability of an equal makeup and

~

failure of diesel cooling capability, a 30-day repair period is justified. Should the generator A or B capability to provide standby coolant supply be lost, a 10-day repair which would result in time is justified based on the low probability for ever needing the the loss of two standby coolant supply.

RHRSW pumps.

Mith only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system). If only 'three RHRSW pumps a 30-day LCO exists because of the requirement of are'PERABLE, Specification 3.5.B.5 (RHR system).

3.5.D E ui ment Area Coolers There is an equipment area cooler for each RHR pump and an equtP=e>t area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take s ".:'. n BFH 3.5/4.5-29 4MENDMENT 10

" "5 Unit 1

e 0

Table 3.5-1 NOV 0 5 1980 Minimum RHRSW and EECW Pump Assignment 1 Unit Fueled 2 Units Fueled 3 Units Fueled Time Limit 2 nits Defue ed U t De ue ed R RSW EECW SW CW R SW ECW Hone and 3 and 3 7 and 3 (r ~ onus 7 and 2 30 Days 3 and 2 (or) (or) 4 and 3 6 and 3 7 Days and 2 4 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

(B) When each pump is supplied from a separate 4-kv shutdown board.

(C) This condition is satisfied with 2 RHRSW pumps when each pump is, aligned to a separate RHRSW header.

(D) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

BFN 3. 5/4. 5-11 AMBOQENT No. y Vg Unit 2

3.5 ~BS~S (Cont'd)

NOV 0 3 8%

are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

.The control air comoressors only usc the EECW north header as an emergency backup supply.

When the decay heat There are four RHR heat exchanger headers (A,, B, C, & D) vith one RHR level has decreased heat exchanger from each unit on each header. There are tvo RHRSW sufficiently following Ipumps on each header; one normally assigned to each header (A2f B2 shutdown, the entire C2, or D2) and onc on alternate assignment (Al, Bl, Cl, or Dl). One shutdown cooling RHR heat exchanger header can adequately deliver the flov supplied by load can be both RHRSW pumps to any tvo of the three RHR heat exchangers on the adequately handled header. One RHRSW pump can supply the full flov requirement of one RHR heat exchanger. Tvo RHR heat cxchangers can morc than adequately by one RHR heat ;handle the cooling requirements of one unit in any abnormal or exchanger. postaccident situation.

'The RHR Service Water System vas designed as a shared system for three The minimum 'units. The specification, as vritten, is conservative vhcn consider-number of RHRSW ation is given to particular pumps being, out of service and to pumps which are possible valving arrangements. If unusual operating conditions arise such that more pumps are out of service than allovcd by this' required to be specification, a special case request may bc made to the HRC to allov operable by this 'ontinued operation assured.

if the actual system cooling requirements can bc s ecification ensur the RHRSW em will satisfy its

'ince the standby coolant supply capability provides added long term to the other emergency and containment cooling systems, a 'edundancy

'safety functions for 5-hour time to establish flov path availability is alloved. This time all three units limi.t does not reduce the other requirements associated vith

,following a design RHRSW/EECW system pump operability.

'basis event on one unit and a postulated 'hould one of the tvo RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply single active failure. connection become inoperable, an equal capability for long-term fluid This includes a single makeup to the unit reactor and for cooling of thc unit containment failure of diesel remains OPERABLE. Because of the availability of an equal makeup and generator A or B cooling capability; a 30-day repair period is justi.fied. Should the w'hich would result in capability to provide standby coolant supply bc lost, a 10-day repair the loss of two time is )ustified 'based on the lov probability for ever needing the RHRSW pumps.

'tandby coolant supply.

I With only onc unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system). If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the rcquiremcnt of Specification 3.5.B.5 (RHR system).

3.5.D E u a Coo s Thcrc is an equipment area cooler for each RHR pump and an equipmcnt area cooler for each set (tvo pumps, either thc A and C or B and D pumps) of core spray pumps. The equipment area coolers. take suction BFH 3.5/4.5-27 NENMEHT NO. 2 4 0 Unit 2

4 Table 3.5-1 SOY 05 igloo Minimum RHRSW and EECW Pump Assignment 1 Unit Fueled 2 Units Fueled 3 Units Fueled Time Limit ts De ue d n t Defue ed SW E CW A H SW EECW R RSW ECW A None and '3 and 3 and 3

+C~)

5 an 7 an 2 30 Days 3 and 2 (or) (or) 4 and 3 6 and 3 7 Days ~ and 2 4 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

I (B) When each pump is supplied from a separate 4-kv shutdown board.

(C) This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.

(D) For units with fuel loaded, the minimum I~W pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

AhlEHOM97 go. g76 BFN 3.5/4.5-11 Unit 1

I 1

3.5 ~B SES (Cont'd) NOV 08~

are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.

There are four RHR heat exchanger headers (A, B, C, & D) vith one RHR

,heat exchanger from each unit on each header. There are tvo RHRSW When the decay heat 'C2, pumps on each header; one normally assigned to each header (A2, B2, level has decreased or D2) and one on alternate assignment (Al, Bl, Cl, or Dl). One RHR heat exchanger header can adequately deliver the flov supplied by sufficiently following ,both RHRSW pumps to any tvo of the three RHR heat exchangers on the

~

shutdown, the entire  !

header. One RHRSW pump can supply the full flov requirement of one shutdown cooling RHR heat exchanger. Tvo RHR heat exchangers can more than adequately load can be handle the cooling requirements of one unit in any abnormal or adequately handled postaccident situation.

by one RHR heat

~

The RHR Service Water System vas designed as a shared system for three exchanger. units. The specification, as written, is conservative vhen consider-ation is given to particular pumps being out of service and to possible valving arrangements. If unusual operating conditions arise

'he minimum suc a more pumps are ou o service than alloved by this specification, a special case request may be made to the NRC to allo+

number of IQGKW pumps which are continued operation assured.

if the actual system cooling requirements can be equired to be erable by this Since the standby coolant supply capability provides added long term ecification ensur redundancy to the other emergency and containment cooling systems, a that the RHRSW 5-hour time to establish flov path availability is alloved. This time system will satisfy its

,limit does not reduce the other requirements associated vith

'RHRSW/EECW system pump operability.

'afety functions for all three units Should one of the tvo RHRSW pumps normally or alternately assigned to

, following a design the RHR heat exchanger header supplying the standby coolant supply basis event on one connection become .inoperable, an equal capability for long-term '~luid makeup'to the unit reactor and for cooling of the unit containment unit and a postulated

! Iremains OPERABLE. Because of the availability of an equal makeup and single active failure. cooling capability, a 30-day repair period is justified. Should the

', This includes a single capability to provide standby coolant supply be lost, a 10-day repair

'ailure of diesel ,time is justified based on the lov probability for ever needing the generator A or B ~~standby coolant supply.

which would result in the loss of two With only one unit fueled, four RHRSW pumps are required to be

~OPERABLE for indefinite operation to meet the requirements of RHRSW pumps. 'Specification 3.5.B.1 (RHR system). If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).

3.5.D E ui ment rea Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (tvo pumps, either the A and C. or B and 0 pumps) of core spray pumps. The equipment area coolers. take sue:'."n BFN 3.5/4.5-30 >>i~s~~~mr e. i 39 Unit 3

I I

ENCLOSURE 3 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)

Units 1, 2, and 3 PROPOSED TECHNICAL SPECIFICATION (TS) CHANGE TS-395 REVISED PAGES I. AFFECTED PAGE LIST Unit, 1 Pages 3.5/4.5-11, 3.5/4.5-29 Unit 2 Pages 3.5/4.5-11, 3.5/4.5-27 Unit 3 Pages 3.5/4.5-11,'.5/4.5-30 II . REVISED PAGES See attached.

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit 1 Unit Fueled 2 Units Fueled 3 Units Fueled 2 Units Defueled 1 Unit Defueled RHRSW EECW A RHRSW EECW A RHRSW EECW A None 4(D) and 3 5(B)(D) and 3 8(D) and 3 (or) 6(D) and 3 30 Days and 2 and 2 7 and 2 (or) (or) and 3 6 and 3 7 Days 2(C) and 2 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

(B) When each pump is supplied from a separate 4-kv shutdown board.

(C) This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.

(D) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

0 BFN Unit 1 3.5/4.5-11

r n

~ t ~ tt', ll III t

3.5 BASES (Cont'd) are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.

There are four RHR heat exchanger headers (A, B, C, t D) with one RHR heat exchanger from each unit on each header. There are two RHRSW pumps on each header; one normally assigned to each header (A2, B2, C2, or D2) and one on alternate assignment (Al, Bl, Cl, or Dl). One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header. One RHRSW pump can supply the full flow requirement of one RHR heat exchanger. Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.>> When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system for three units. The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements. The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.

This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps. If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation assured.

if the actual system cooling requirements can be Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed. This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE. Because of the availability of an equal makeup and cooling capability, a 30-day repair period is )ustified. Should the capability to provide standby coolant supply be lost, a 10-day repair time is )ustified based on the low probability for ever needing the standby coolant supply.

With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.l (RHR system). If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.S (RHR system).

3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take suction

~

Unit 1 3.5/4.5-29

t ~

I lt I ',I [$ h IV

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit 1 Unit Fueled 2 Units Fueled 3 Units Fueled (2 Units Defueled) (1 Unit Defueled)

RHRSW EECW A RHRSW EECW A RHRSW EECW A None 4(D) and 3 5(B)(D) and 3 8(D) and 3 (or) 6(D) and 3 30 Days and 2 and 2 7 and 2 (or) (or) and 3 6 and 3 7 Days 2(C) and 2 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

(~) When each pump is supplied from a separate 4-kv shutdown board.

(C) This condition is satisfied with 2 RHRSW pumps when each pump is aligned I

I to a separate RHRSW header.

(D) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

BFN 3.5/4.5-11 Unit 2

1

~4 P

~ ~

3,5 BASES (Cont'd) are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.

There are four RHR heat exchanger headers (A, B, C, 6 D) with one RHR heat exchanger from each unit on each header. There are two RHRSW pumps on each headers one normally assigned to each header (A2, B2, C2, or D2) and one on alternate assignment (A1, Bl, Cl, or Dl). One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header. One RHRSW pump can supply the full flow requirement of one RHR heat exchanger. Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation. When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system for three units. The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements. The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.

This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps. Zf unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation assured.

if the actual system cooling requirements can be Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed. This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE. Because of the availability of an equal makeup and cooling capability, a 30-day repair period is )ustified. Should the capability to provide standby coolant supply be lost, a 10-day repair time is )ustified based on the low probability for ever needing the standby coolant supply.

With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system). Zf only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).

3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take suction 3.5/4.5-27 Unit 2

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit 1 Unit Fueled 2 Units Fueled 3 Units Fueled (2 Units Defueled) (1 Unit Defueled)

RHRSW EECW A RHRSW EECW A RHRSW EECW A None 4(D) and 3 5(B)(D) and 3 8(D) and 3 (or) 6(D) and 3 30 Days and 2 and 2 7 and 2 (or) (or) and 3 6 and 3 7 Days 2(C) and 2 and 2 6 and 2 Note:

(A) At least one OPERABLE pump must be assigned to each header. Only automatically starting pumps may be assigned to EECW header service.

When each pump is supplied from a separate 4-kv shutdown board.

(C) This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.

(D) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

0 BFN Unit 3 3.5/4.5-11

~ 'l 0 ~

~ ", ~

3' BASES (Cont'd) are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.

There are four RHR heat exchanger headers (A, B, C, 6 D) with one RHR heat exchanger from each unit on each header. There are two RHRSW pumps on each headers one normally assigned to each header (A2, B2, C2g or D2) and one on alternate assignment (Al, Bl, Cl, or Dl). One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header. One RHRSW pump can supply the full flow requirement of one RHR heat exchanger. Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation. When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system .for three units. The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements. The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.

This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps. If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation assured.

if the actual system cooling requirements can be Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed. This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE. Because of the availability of an equal makeup and cooling capability, a 30-day repair period is )ustified. Should the capability to provide standby coolant supply be lost, a 10-day repair time is )ustified based on the low probability for ever needing the standby coolant supply.

With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system). If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).

3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take suction 3.5/4.5-30 Unit 3

ENCLOSURE 4 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)

Units 1, 2, and 3 PROPOSED IMPROVED TECHNICAL SPECIFICATION (TS)CHANGE TS-395 MARKED PAGES I. AFFECTED PAGE LIST Unit 1 pages 3.7-1 through -3, B3.7-1 through -6 Unit 2 pages 3.7-1 through -3, B3.7-1 through -6 Unit 3 pages 3.7-1 through -3, B3.7-1 through -6 I,I . REVISED PAGES See attached.

-Note------------- RHRSW System The number of required RHRSW pumps 3.7.1 may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

3.7 PLANT SYSTEMS 3.7. 1 Residual Heat Removal Service Mater (RHRSW) System LCO 3.7.1, -NOTES-W 2 units fueled, each subsyst have at least one 0 B RHRSM pum

2. With 3 uni ed, two RHRS tems must have t P BLE RHRSW pumps.

Four-RHRSM-subsystems-shaH-be-OPERAB~

Four RHRSW subsystems shall be OPERABLE with the numbe of OPERABLE pumps as listed below:

APPLICABILITY: NOD'ES 1, 2, and 3 1. 1 unit fueled - four OPERABLE RHRSW pumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

ACTIONS I 3. 3 units fueled - eight OPERABLE RHRSW pumps.

Enter applicab Removal e

(RHR) Shutdown

'ndCoolin NOTE Required Aetio utdown," for RHR

, "Residual Heat "shutdown cooling made inopera H ystem.

NDITION REQUIRED ACTION C PK N TINE A. One RHRSW subsystem or A.l re RHRSW 30 days required pump subsys e equired inoperable. pump to OPERABL status.

(continued)

/MS~+ I 3.7-1 Amendment BFN-UNIT 1

1

'4

Insert A CONDITION REQUIRED ACTION COMPLETION TIME One required RHRSW A.1 --------Notes------- Immediately pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for a 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

30 days Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.

OR A.2 Restore required RHRSW pump to OPERABLE status.

(continued)

RHRSW System 3.7.1 CONDITION RE(UIRED ACTION COMPLETION TIME B. wo RHRSW subsystems B.l --------NOTE--------

i perable. Only applicable when two units are fueled.

Verify at least three 1 hou OPERABLE RHRSW'pumps are associated with two OPERABLE RHRSW subsystems.

B.2 ---=----NOTE-------

Only applicab when three units re fueled.

Verif at least four 1 hour E BLE RHRSW pumps a associated with wo PERABLE RHRSW subsy ems.

.3 Restore one 7 days inoperable RH W subsystem to OP BLE status.

C. Three or mo e RHRSW C.1 Restore the required hours subsystem inoperable. RHRSW subsystems to OPERABLE status.

OR Re ired Action B.l or

.2 and associated ompletion Time not met.

(continued)

BFN-UNIT 1 3 7 2

~ Amendment

\

h.

Insert B CONDITION REQUIRED ACTION COMPLETION TIME One RHRSW subsystem B.1 -------Note-------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR) Shutdown Cooling - Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW subsystem 30 days to OPERABLE status.

Two required RHRSW C.1 Restore one inoperable 7 days pumps inoperable. RHRSW pump to OPERABLE status Two RHRSW subsystems D.1 --------Note-----

inoperable. Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

Three or more required Restore one RHRSW pump to 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> RHRSW pumps inoperable OPERABLE status.

Three or more RHRSW F.1 -------Note -------

subsystems inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.

Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> subsystem to OPERABLE 1

status.

(continued)

~

~ I p g I ~ ~ ~

~

~ . ~ ~ ~

~ ~

~ ~

/

~ ~

~ I ~ I ~ ~

I ~ ~

~ ~

~ ~ ~ ~

~ ~ I I I ~

~ ~ ~ 1 ~ '

~ I ~

I ~

~ ~

~ ~ ~ ~ I

~ ~

I ~

~

h RHRSW System B 3.7.1 B 3.7'LANT SYSTEMS B 3.7. 1 Residual Heat Removal Service Water (RHRSW) System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe, reactor shutdown following a Design Basis Accident (DBA) or transient. ,The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.

T he RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One loop with one pump operating is capable of providing 50/ of the required cooling capacity to maintain safe shutdown dtt! f

! f t!

i~eapa@~ef-prov-M+ng-su4'-Ament-eoal4ng-

-However ,one-pump

~pacA4~o-m '

t by<<!

own-cond+tAen loop with one or two OPERABLE pumps dependent-ope~e-foreach-ef' f

-number o4-feels-uo+4s The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 I ,(Ref. 1).

, a heat exchanger, a suction source, and associated valves, Cooling water is pumped by the RHRSW pumps from the Wheeler

'd piping and instrumentation. Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core. The system can be manually started any time the dg ddb ttg tg  !

started within clears, and is assumed to be manually 10 minutes after the LOCA.

0 (continued)

B 3.7-1 Amendment BFN-UNIT 1

l 4

RHRSW System B 3.7.1 BASES (continued)

APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment "

following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively). These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

d The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since'there are certain

• alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these an'alyses, manual initiation of the OPERABLE RHRSW s'ubsystems and, the associated RHR System is assumed to occur 10 minutes after a DBA. The RHRSW flow assumed in the analyses pump with two pumps operating in one loop.

is~

In this a gpm per the maximum suppression chamber water 'temperature and 9'<><

pressure are 177'F (as reported in Reference 7) and i 11 bl p f62pig.~

49.6 psig, respectively, well below the design temperature f281'F d The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).

(continued)

BFN-UNIT 1 B 3.7-2 Amend--en'.

I Additionally, since the RHRSW pumps are shared between the three RHRSW System units, the number of OPERABLE pumps required is also 3.7.1

'FN 8

~'ependent on the number of units fueled.

(continued)

CO Four RHRSW subsystems are required to be OPERABLE to provide

'n addition to the required number the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case I

of OPERABLE subsystems, there l single active failure occurs coincident with the loss of

'ust be an adequate number of offsite power

~d pumps OPERABLE to provide cooling for thc fueled non-accident An OPERABLE RHRSW subsystem consists of

'~

units.

e-vequ+red-number o$ -QitERABLE RHRSW-pumps-dependent-The number of required th s It OPERABLE RHRSW pumps required is modified by a Note b. An OPERABLE flow path capable of taking suction from which specifics that the number of the intake structure and transferring the water to the

~

required RHRSW pumps may be required RHR heat exchangers at the assumed flow rat .

reduced by one for each fueled unit that has been in MODE 4 or 5 for -4n " s ne over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note PERABLE-pump-per RHRSQ-subsy-skerrh Noke~gec-i4'its-44~

, acknowledges the fact that decay n n-I f-th~llnN heat'removal requirements are substantially reduced for fueled have-ewe-OPERABLE RHRStt-pumps with at least one OPERABLE Mode 4 or 5 for over 24 W pump in the flow path. I J APPLICABILITY In NODES 1, 2, and 3, the RHRSW System is required to be 1

OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) arid decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of thes'e systems.

~

In NODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.

ACTIONS p~sn' Ann~

eee-iettteeeie g-thee-ehe-I n bl~ ~~p IR-n~

sn-no N n'

n arms-.5 cempenent~

I n nn -t~h (continued)

BFN-UNIT 1 B 3.7-3 Amendment

t P

RHRSM System B 3.7.1 BASES

/~/E~Rz C ACTIONS A.l (continued)

W h one RHRSW subsystem or required pump inoperable, the ino erable RHRSW subsystem or required pump must be restor d to 0 RABLE status within 30 days. With the unit in thi condi 'on, the remaining OPERABLE RHRSW subsystems are adequat to perform the RHRSW heat removal function.

However, he overall reliability is reduced because single failure co ld result in reduced primary containmen cooling capability. The 30 day Completion Time is based the availability f equipment in excess of normal r undancy requirements a d the low probability of an eve occurring requiring RHRSW uring this period.

B. 1 B.2 and B.3 Required Action B. 1 re ires verificat on that at least three OPERABLE RHRSW pum s are assoc'ed with the two OPERABLE RHRSW subsystems. The Re ired Action is modified by a Note indicating that t e req red action is applicable only when two units are fuel . equired Action B.2 requires verification .that at ast four OPERABLE RHRSW pumps are associated with the o OPERABLE RHRSW subsystems.

The Required Action is modif ed a Note indicating that the required action is app cable'ly when three units are fueled.

Required Action B.3 re uires that with two RHRSW subsystems inoperable, one inop able RHRSW subsys m be restored to OPERABLE status wit in 7 days. With the it(s) in this condition, the re ining OPERABLE RHRSW su ystems are adequate to perf rm the RHRSW heat removal nction.

However, the o rail reliability is reduced b ause a single failure in th OPERABLE RHRSW subsystems could esult in loss of RHR$ function. The 7 day Completion T e is based on the red fidant RHRSW capabilities afforded by t OPERABLE subsyste and the l,ow probability of an event occu ring requiri RHRSW during this period.

C.1 ith three or more RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.

(continued)

BFN-UNIT I 8 3.7-4 Amendment

'1 I

t

Insert C A.1 and A.2 Required Action A.1 requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE. The Required Action is modified by two Notes. Note I indicates that the required action is applicable only when two units are fueled. In the two unit fueled condition a single failure (loss of a 4kV shutdown board) could result in inadequate RHRSW pumps iftwo pumps are powered from the same power supply. This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. Iffive RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required action A. 1 is met.

Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE ifthe other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

IfRequired action A. 1 cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.

With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

B. 1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C. 1 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perfoim the RHRSW heat removal fupction. However, the overall reliability is reduced because a single failure of the, OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

RHRSW System B 3.7.1 BASES ACTIONS continued)

I The requisite num e ubsyste pumps must be restored to OPERABLE hours.

Completion Ti for e-RH suppression

'sed s on the 8

Comp e 'mes The 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />

's.

provided pool cooling and spray n

.1 and D.2 If the ItSht subsystems cannot be restored t P RABLE be placed in a NOD achieve this status, the

'ich'st status within th associated Completio the

'mes, the unit must does not apply. To p/gCRf MODE 3 within 12-hour be placed in at least in 9 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The Complet'mes are reasona based on operating 'llowed experienc o reach the required unit con ns from full pow onditions in an orderly manner and withou allenging unit systems.

1 SURVEILLANCE REQUIREMENTS SR'.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation,'nd ensures correct valve positions; (continued)

BFN-UNIT 1 B 3.7-5 Amendment

0 h

I i I

t 1

Insert D With two RHRSW subsystems inoperablc, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E. I With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within S hours. The 3 hour3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br />. The 3 hour3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be if entered and Required Actions taken the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 Ifthe RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion

'imes, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1 BASES (continued)

REFERENCES 1. FSAR, Section 10.9.

2. FSAR, Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3.2.

es+gn-Cmit~ia-BFN-56-+9&I~

4-NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

GE-NE-B13-01755-2, Revision 1, February 1996.

8 3.7-6 Amendment BFN-UNIT 1

E

-Note- ---- RHRSW System The number of required RHRSW pumps 3.7.1 may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

3.7.1 Residual Heat Removal Service Mater (RHRSM) System LCO 3.7.1 NOTES Wit 1-or 2 units fueled, each subsys s have at least one OPZRABL RHRSW pum

2. With 3 units , two RHRS ubs. tems must have two P E RHRSM pumps.

-Foun-IIHREtt-subsyet~tes-eh&1-be-BPERAHEE-.

Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below:

APPLICABILITY: 1. i unit fueled - four OPERABLE RHRSW pumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

ACTIONS 3. 3 units fueled - eight OPERABLE RHRSW pumps.

Enter ap cable-Con itions and Required Actions of LCO 4%~ ua Heat Removal (RHR) Shutdown Coo i~yste ot-Shutdo n, for RHR shutdown cooling made inoperable b RSW-Sy NDITION REQUIRED ACTION CO EBO~TI RE A. One RHRSM subsystem. or A.l es- RHRSW 30 days required pump subsystem uired inoperable. pump to OPERABLE status.

(continued)

Zn/SE/2y 3.7-1 Amendment BFN-UNIT 2

1, Insert A CONDITION REQUIRED ACTION COMPLETION TIME Orie required RHRSW A..1 --------Notes------- Immediately pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 fora 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

30 days Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.

OR A.2 Restore required RHRSW pump to OPERABLE status.

(continued)

RHRSW System 3.7.1 CONDITION REQUIRED ACTION COMPLETION TI B. Tw RHRSW subsystems B.l --------NOTE--------

inop able. Only applicable when two units are fueled.

Verify at least three 1 hour OPERABLE RHRSW pumps are associated with two OPERABLE RHRSM subsystems.

AND 8.2 --------NOTE-------

Only applicable when three unit are fueled.

Verj> y at least four 1 hour RABLE RHRSW pumps ar associated with wo PERABLE RHRSW subsy tems.

AND zyB.3 Restore one 7 days inoperable R gSW subsystem to 01 RABLE status.

C. Three or mor RHRSM C.1 Restore the required 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />' subsystems inoperable. RHRSW subsystems to OPERABLE status.

OR Requi ed Action B.l or B.2 nd associated Co pletion Time not 5t.

(continued)

BFN-UNIT 2 3.7-2 Amendment

II 0

I

0

Insert B CONDITION REQUIRED ACTION COMPLETION TIME One RHRSW subsystem B.1 ---Note-- ----

inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR) Shutdown Cooling - Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW subsystem 30 days to OPERABLE status.

Two required RHRSW C.1 Restore one inoperable 7 days pumps inoperable. RHRSW pump to OPERABLE status Two RHRSW subsystems D.1 ----Note--------

inoperable. Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

Three or more required Restore one RHRSW pump to 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> RHRSW pumps inoperable OPERABLE status.

Three or more RHRSW F.1 --------Note--------

subsystems inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.

Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> subsystem to OPERABLE status.

(continued)

RHRSW System 3.7.1 RE(UIRED ACTION ~CONPL IO TINE COITION D. Required Action A.l, Be in OD 12 hours B.3, or C.l and associated Completion Time not met.

0.2 Be in NODE 4. hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FRE(UENCY SR 3.7.1.1 Verify each RHRSW manual and power operated 31 days valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.

CONDITION REQUIRED ACTION COMPLETION TIME G. Required Action and G.1 Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> associated Completion Time not met. AND I

G.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> BFN-UNIT 2 307 3 Amendment

l 0

RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS B 3.7. 1 Residual Heat Removal Service Water (RHRSW) System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA) or transient. The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.

The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One loop with one pump operating is capable of providing 50% of

,the required cooling capacity to maintain safe shutdown conditions for one unitiARe~g-a-design-bas~eeident

~owever~ne-pump-i.~<

0 pa

~paoi4'y&o-mQnta4n-a-safe-shutdown-Gond4Men-for each-ef' o~cc1de~Q4s As such a subsystem consists of a loop with one or two OPERAHLE~pump Aepende~po~e-number-of-fuelged-ups The RHRSW System is designed with sufficient redundancy so that no single active component .

failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 (Ref. 1).

,Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers,

, a heat exchanger, a suction and discharged back to the Wheeler Reservoir.

source, and associated valves, piping and instrumentation. IThe system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA)., the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core. The system can be manually started any time the d g d d 1 11 g tg clears, and is assumed to be manually started within 10 minutes after the LOCA.

(continued)

BFN-UNIT 2 B 3.7-1 Amendment

I L

RHRSW System B 3.7.1 APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively), These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA. The RHRSW flow assumed in the analyses is-4809- pm per pump with two pumps operating in one loop. In this as ,

the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 7) and 49.6 psig, respectively, well below the design temperature of 281'F aod maximum allowable pressure of 62 psig. Wbiams-a4so-bel ow-the-200-'F-1-imi4-imposed-by-Deign-Gr i teria BFN-50-7064A-(Ref~)-for~1-1-pl ant-trans i ents-inv&v4n~RV o peraVens The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).

(continued)

BFN-UNIT 2 B 3.7-2 Amendment

E Additionally, since the RHRSW pumps are shared between the three RHRSW System BFN units, the number of OPERABLE pumps required is also B 3.7. 1 dependent on the number of units fueled.

BASES (continued)

LCO Four RHRSW subsystems are required to be OPERABLE to provide In addition to the required number the required redundancy to ensure that the .system functions of OPERABLE subsystems, there to remove post accident heat loads,- assuming the worst case must be an adequate number of single active failure occurs coincident with the loss of offsite power.

pumps OPERABLE to provide cooling for the fueled non-accident An OPERABLE RHRSW subsystem consists ogg units.

Sere-quirmdnu-mber of pumpme The number of required OPERABLE RHRSW pumps upon-@he-number -ORERABLZ RH ofum4s-fu&e~nd R SW Pe nde nt required is modified by a Note n OPERABLE flow path capable of taking suction from which specifies that the number of the intake structure and transferring the water to the ired RHRSW .p um p s ma be 'equ required RHR heat exchangers at the assumed flow rat .

reduced by one for each fueled unit that has been in MODE 4 or 5 for The-LCO is-mode-fled-byWwo-Not,es Nate-I-spe ail'-i~~ha4 over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note whe~~rd~~Ae~here mu~e ~4.~ne acknowledges the fact that decay MRGNBLE-pump-per RHRS~ubsyMe~at~pem41a~hat heat removal requirements are -when-3-uni4;-s-are-fueled~wo-of the-RHRSW-subsystem~ust substantially reduced for fueled Mave-two-OPHNBLE RHRSW-pumps

) with at least one OPERABLE units in Mode 4 or 5 for over 24 I RHRSWpumpinthefiowpath.,

, h J APPLICABILITY In MODES I, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) and decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of these systems.

In MODES 4 and 5, the OPERABILITY requirements of the RHRSW

. System are determined by the systems it supports.

ACTIONS 'e-Actions-are-modi-fied-by-a-Note-indicating-that-the-

~ppl1catAe-Condition~ LC(LXA~b~ntera~nbkequired AetAon~ken-i fiche-inoperabl.e-RHRSWmubsyMe~wsuW~n-.

~zopemtAe-RHRmhutdown-coal-ing~hi-s i.s-an-except1~n-to-LG0-3-.0A-and-ensures tahe-proper acth oner~ken-f~~hese-

~omponents (continued)

BFN-UNIT 2 B 3.7-3 Amendment

'J System Zn!SCPy'HRSW B 3.7.1 BASES ACTIONS A.l (continued)

'n D~within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completio Ti@es are reasonaEa~ased on operating experience ~ each the required unit conNtions from full power~oefstions in an orderly manner and withou hrlTenging unit systems.

SURVEILLANCE SR 3.7.1.1 REQUIREMENTS Verifying the correct'lignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

(continued)

BFN-UNIT 2 B 3.7-5 Amendment

0 Insert D With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

Tlie Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />. The 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F,l I

~ With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />. The 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 Ifthe RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unitmust be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1 BASES (continued)

REFERENCES 1. FSAR, Section 10.9.

2. FSAR; Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3.2.

es-F9 ~Faerie-8 F&5~54~

NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

GE-NE-B13-01755-2, Revision 1, February 1995.

I BFN-UNIT 2 B 3.7-6 Amendment

0 1

-Note- RHRSW System The number of required RHRSW pumps 3.7.1 may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24,hours.

~ 3.7 PLANT SYSTEMS I Residual Heat Removal Service Water

~

3.7.1 (RHRSW) System LCO 3.7.1

1. 2 units fueled, each subsystem ave at least one DNB RHRSW pump.

2. With 3 units , two RHRS bs- tems must have two E RHRSW pumps.

~IIRSli I ~PKHABES-.

Four RHRSW subsystems shall be OPERABLE with the number

, of OPERABLE pumps as listed below:

APPLICABILITY: MODES 1, 2, and 3 i. 1 unitfueled-fourOPERABLERHRSWpumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

ACTIONS 3. 3 units fueled - eight OPERABLE RHRSW pumps.

Enter applica Removal e n~

(RHR) Shutdown Coolin and Required NOTE m H Actions utdown," for RHR

, "Residual Heat shutdown cooling made inoperabl HRS ys em.

CONDITION REQUIRED ACTION CONPL INE A. One RHRSW subsystem or Res RSW 30 days required pump s tern or required inoperable. pump to P E status.

(Conti BFN-UNIT '3 3.7-1 Amendment

JL

~ r. .

/

Insert A CONDITION REQUIRED ACTION COMPLETION TIME One required RHRSW A..1 --------Notes------- Immediately pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for a 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

30 days Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.

OR A.2 Restore required RHRSW pump to OPERABLE status.

(continued)

0

/nP5c~)7 i RHRSW System 3.7.1 CONDITION RE(VIREO ACTION COMPLETION TINE B. o RHRSW subsystems B. I --------NOTE--------

in erable. Only applicable when two units are fueled.

Verify at least three I h r OPERABLE RHRSW pumps are associated with two OPERABLE RHRSW subsystems.

AND 8.2 --------NOTE-------

Only applica e when three unit are fueled.

Veri at least four I hour BLE RHRSW pumps associated with wo ERABLE RHRSW subsy ems.

.3 Restore one 7 days inoperable RH W subsystem to OP BLE status; C. Three or mo RHRSW C. 1 Restore the required hours subsystem inoperable. RHRSW subsystems to OPERABLE status.

OR Re ired Action B.l or B and associated ompletion Time not

'et.

(continued) 0 BFN-UNIT 3 3.7-2 Amendment

'I E

J

/

Insert B CONDITION REQUIRED ACTION COMPLETION TIME B. One RHRSW subsystem B..1 -------Note-------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR) Shutdown Cooling - Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW subsystem 30 days to OPERABLE status.

Two required RHRSW C.1 Restore one inoperable 7 days pumps inoperable. RHRSW pump to OPERABLE status D. Two RHRSW subsystems D.1 ------Note-----

inoperable. Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

Three or more required E.1 Restore one RHRSW pump to 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> RHRSW pumps inoperable OPERABLE status.

Three or more RHRSW F.1 ----Note- ----

subsystems inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.

Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> subsystem to OPERABLE status.

(continued)

RHRSW System 3.7.1 N DITION REQUIRED ACTION COMP TIME D. Required Action A.l, Be in 9 12 hours B.3, or C.l and associated Completion N Time not met.

0.2 Be in MODE 4. hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated 31 days valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.

CONDITION REQUIRED ACTION COMPLETION TIME G. Required Action and G.1 Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> associated Completion Time not met. AND G.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> BFN-UNIT 3 3.7-3 Amendment

l l

\

RHRSW System B 3.7.1 8 3.7 PLANT SYSTEMS B 3.7.1 Residual Heat Removal Service Water (RHRSWJ System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA) or transient. The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System..

The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop it.~

is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One

~~A

'loop with one pump operating is capable of providing 50/ of the required cooling capacity to maintain safe shutdown iiii f .f f f '

v4dewn-eon f ~9 n for-each-t4-e-non-aaeiden4~+Q~ As such a subsystem consists of a

. loop with one or two OPERABL pump 4ependene-open-the The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 (Ref. 1).

, a heat exchanger, a suction

, source,andassociatedvalves, Cooling water is pumped by the RHRSW pumps from the Wheeler

'ipingandinstrumentation.,Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically. power only that equipment necessary to reflood the core. The system can be manually started any time the degraded bus voltage signal 'en-0Ir-clears, and is assumed to be manually started within 10 minutes after the LOCA.

(continued)

BFN-UNIT 3 B 3.7-1 Amendment

.V RHRSW System 8 3.7.1 BASES (continued).

APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively). These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool. Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these analyses, manual initiation of the OPERABLE RHRSW subsystems 'arid the associated RHR System is assumed to occur 10 minutes af'ter a DBA. The RHRSW flow assumed in the analyses i m per pump with two pumps operating in one loop. In this as ,

the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 7) and

%*Ma f 251'5 d edbdbydbddd-52~

2

' ll '

bl 5 5 5-byd~~

5.2 2525 ib.~

49.6 psig, respectively, well below the design temperature

~

The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).

(continued)

BFN-UNIT 3 B 3.7-2 Amendment

l Additionally, since the RHRSW pumps are shared between the three RHRSW System BFN units, the number of OPERABLE pumps required is also B 3.7.1 dependent on the number of units fueled.

BASES (continued)

.LCO Four RHRSW subsystems are required to be OPERABLE to provide In addition to thc required number I the required redundancy to ensure that the system functions of OPERABLE subsystems, there to remove post accident heat loads, assuming the worst case

'ust be an adequate number of single active failure occurs coincident with the loss of offsite power.

pumps OPERABLE to provide

'ooling for the fueled non-accident An OPERABLE RHRSW subsystem consists o units.

e-requ+red-. number ofOPERABLERHRSW-pumps-depende~

The number of required 0 P E RAB LE RHR S Wj p u mp s upon-4he-number ofun+ts fuAe~nd

, required is modified by a Note b. n OPERABLE flow path capable of taking suction from which specifies that the number o the intake structure and transferring the water to the required RHRSW pumps may be required RHR heat exchangers at the assumed flow rate.

reduced by one for each fueled uni

'PP'-~~

that has been in MODE 4 or 5 fo over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note acknowledges thc fact that decay

'eat removal requirements are bdd

~pdlkbbd"p PP~AHAII beO t~e-two-GPERABLE-RHRSW-pumps;

~. II Adb~kbp A p heo substantially reduced for fueled with at least one OPERABLE e 'AAMode4or5forover24 RHRSW pump in the flow path.

P APPLICABILITY In NODES I, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) and decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of these systems.

~

In NODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.

ACTIONS p

'k

~e-Act-io~e-tnod-i-Aud-by-a-Note i+Nm4-kg-aha@-4he-

~ppl-i-cab~nd444e '

-AH bodlkk-oed

'd-hb

<<o

~h~p A e'k AOAIHIISN e-e~d-and-ReqAeed-b PO pl'

~~h cempenents .

(continued)

BFN-UNIT 3 B 3.7-3 Amendment

0

)~

N r' 4/I

RHRSM System B 3.7.1 BASES ACTIONS (continued)

Wi h one RHRSW subsystem or required pump inoperable, the ino qrable RHRSM subsystem or required pump must be resto ed to OP RABLE status within 30 days. With the unit in the remaining OPERABLE RHRSW subsystems are th'ondit'on, adequat to perform the RHRSW heat removal function.

However, he overall reliability is reduced because single failure co ld result in reduced primary containmen cooling capability. The 30 day Completion Time is based n the availability f equipment in excess of normal r undancy requirements a d the low probability of an eve occurring requiring RHRSW uring this period.

B. I B.2 and B.3 Required Action B.l re uires verificat' that at least three OPERABLE RHRSW pu s are associ ted with the two OPERABLE RHRSW subsystems The Req red Action is modified by a Note indicating that e requ'd action is applicable only when two units are fue d. equired Action B.2 requires verification that at 1 st four OPERABLE RHRSW pumps are associated with the o OPERABLE RHRSM subsystems.

The Required Action is modifi d y a Note indicating that the required action is appl'ble only when three units are fueled.

Required Action B.3 req res that wit two RHRSW subsystems inoperable, one inoper le RHRSM subsy tern be restored to OPERABLE status withi 7 days. With th unit(s) in this condition, the rema ing OPERABLE RHRSW s bsystems are adequate to perfo the RHRSW heat removal unction.

However, the over 11 reliability is reduced ecause a single failure in the ERABLE RHRSW subsystems coul result in loss of RHRSW unction. The 7 day Completion Time is based on the redung nt RHRSW capabilities afforded by he OPERABLE, subsystems yhd the low probability of an event oc urring requiring HRSW during this period.

C.1 Wi h three or more RHRSW subsystems inoperable, the RHRSW stem is not capable of performing its intended function.

(continued)

BFN-UNIT 3 B 3.7-4 Amendment

Insert C A. 1 and A.2 Required Action A. I requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE. The Required Action is modified by two Notes. Note 1 indicates that the required action is applicable only when two units are fueled. In the two unit fueled condition a single if failure (loss of a 4kV shutdown board) could result in inadequate RHRSW pumps two pumps are powered from the same power supply. This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. Iffive RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required action A. 1 is met.

Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE ifthe other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

IfRequired action A. 1 cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.

With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

B. 1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C. 1 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

Insert C A.l and A.2 Required Action A. 1 requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE. The Required Action is modified by two Notes. Not~ndicates that the required action is applicable only when two units are fueled. In the two unit fueled condition a single failure (loss of a kV shutdown board) could result in inadequate RHRSW pumps iftwo pumps are powered from the same power supply. This corresponds to the LCO requirement of 6 OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. Iffive RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required action A. 1 is met.

Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE ifthe other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

IfRequired action A. 1 cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.

With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

B. 1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

'C. 1 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low 0 probability of an event occurring during this period.

RHRSW System B 3.7.1 BASES ACTIONS (continued)

The req 'site number of subsystems and pumps must be restored OPERABLE status within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />. The our Completion Ti is based on the Completion Ti provided for the RHR supp ssion pool cooling and s y functions.

D.l and 0.2 If the RHRSW subsystems can re'stored to OPERABLE status within the associ ed Compl ion Times, the unit must be placed in a i which the not apply.

/~EWE achieve MODE LCO s this stat , the unit must be pl d in at least To MODE 3 within ours and in MODE 4 within hours. The allowed Com tion Times are reasonable, based q operating experien , to reach the required unit conditions f om full power onditions in an orderly manner and without t

ch enging unit systems.

SURVEILLANCE SR 3.7.1.1

=

RE(UIREMENTS Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or, valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

The 31 day Frequency is based on engineering judgment, is

- consistent with the procedural controls governing valve operation, and ensures correct valve positions.

.0 (continued)

BFN-UNIT 3 B 3.7-5 Amendment

A

/

e- Insert D With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E. I With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />. The 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />. The 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken ifthe inoperable RHRSW subsystem results in inoperable RHR

. shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G. 1 and G.2 "Ifthe RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1

• REFERENCES 1. FSAR, Section 10.9.

2. FSAR, Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3,2.

esign-C r+Lv.~~BFN-58-N64A,Pnmary-Eontainmerrl-NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

GE-NE-B13-01755-2, Revision 1, February 1996.

BFN-UNIT 3 B 3.7-6 Amendment

y ENCLOSURE 5 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)

Units 1, 2, and 3 PROPOSED IMPROVED TECHNICAL SPECIFICATION (TS) CHANGE TS-395 REVISED ITS I. AFFECTED PAGE LIST Unit 1 Pages 3.7-1 through 3, B3.7-1 through -8 Unit 2 Pages 3.7-1 through 3, B3.7-1 through -8 Unit 3 Pages 3.7-1 through 3, B3.7-1 through -8 II . REVISED PAGES See attached.

RHRSW System 3.7.1 3.7 PLANT SYSTEHS 3.7. 1 Residual Heat Removal Service Water (RHRSW) System LCO 3.7.1 -NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in NODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Four RHRSW subsystems shall be OPERABLE with the'umber of OPERABLE pumps as listed below:

1. 1 unit fueled - four OPERABLE RHRSW pumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

3. 3 units fueled - eight OPERABLE RHRSW pumps.

APPLICABILITY: NODES 1, 2, and 3.

0 BFN-UNIT 1 3.7-1 Amendment *Rl

RHRSW System 3.7.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required RHRSW A.1 -------NOTES-------

pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the fueled unit other has been in MODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Verify five RHRSW Immediately pumps powered from separate 4 kV shutdown boards are OPERABLE.

OR A.2 Restore required 30 days RHRSW pump to OPERABLE status.

(continued) 0 BFN-UNIT 1, 3.7-2 Amendment *Rl

RHRSW System 3.7.1 e ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TIME B. One RHRSW B.1 --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW 30 days subsystem to OPERABLE status.

C. Two required RHRSW C.l Restore one 7 days pumps inoperable. inoperable RHRSW pump to OPERABLE status.

D. Two RHRSW D.l --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

(continued)

BFN-UNIT 1 317 3 Amendment *Rl

t RHRSW System 3.7.1 ACTIONS continued CONDITION RE(UI RED ACTION COMPLETION TINE E. Three or more E.l Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> required RHRSW pump to OPERABLE pumps inoperable. status.

F. Three or more F.l --------NOTE--------

RHRSW subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 8 hours subsystem to OPERABLE status.

G. Required Action G.1 Be in NODE 3. 12 hours and associated Completion Time AND not met.

G.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> BFN-UNIT 1 3.7-4 Amendment *Rl

RHRSW System 3.7.1 SURVEILLANCE RE(UIREHENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated 31 days valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.

BFN-UNIT 1 3.7-5 Amendment *Rl

RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS B 3.7. 1 Residual Heat Removal Service Water (RHRSW) System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA) or transient. The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.

The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One loop with one pump operating is capable of providing 50% of the required cooling capacity to maintain safe shutdown conditions for one unit. As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation. The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 (Ref. 1).

Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core, The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.

(continued)

BFN-UNIT 1 B 3.7-1 Amendment *Rl

I RHRSW System B 3.7.1 APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively). These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the .

associated RHR System is assumed to occur 10 minutes after a DBA. The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop. In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6) and 49.6 psig, respectively, well below the design t'emperature of 281'F and maximum allowable pressure of 62 psig.

The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).

(continued)

BFN-UNIT 2 B 3.7-2 Amendment *Rl

RHRSW System B 3.7.1 BASES (continued)

LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power. Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.

An OPERABLE RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.

In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling for the fueled non-accident units.

The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note acknowledges the fact that decay heat removal.

requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) and decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of these systems.

In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.

(continued)

BFN-UNIT 1 B 3.7-3 Amendment *Rl

RHRSW System B 3.7.1 ACTIONS A. 1 and A.2 Required Action A.l requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE. The Required Action is modified by two notes.

Note 1 indicates that the required action is applicable only when two units are fueled. In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board) could result in inadequate RHRSW pumps if two pumps are powered from the same power supply. This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required Action A.l is met.

Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

If Required Action A. 1 cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

(continued)

BFN-UNIT 1 B 3.7-4 Amendment *Rl

RHRSW System B 3.7.1 I

ACTIONS B.1 (continued)

With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

(continued) 0 BFN-UNIT 1 B 3.7-5 Amendment *Rl

I I 4, h

RHRSW System B 3.7.1 ACTIONS D. 1 (continued)

With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem, results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.l With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

(continued)

BFN-UNIT I B 3.7-6 Amendment *Rl

1 0

RHRSW System B 3.7.1 I

ACTIONS F. l (continued)

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the'nit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full t

power conditions in an orderly manner and without challenging unit systems.

SURVEILLANCE SR 3.7.1.1 REQUIREMENTS F

Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

(continued)

BFN-UNIT I B 3.7-7 Amendment *Rl

I

~

RHRSW System B 3.7.1 SURVEILLANCE SR 3.7. 1. 1 (continued)

RE(UIRENENTS The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1. FSAR, Section 10.9.

2. FSAR, Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3.2.

5. NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

6. GE-NE-B13-01755-2, Revision 1, February 1996.

BFN-UNIT 1 B 3.7-8 Amendment *Rl

RHRSW System 3.7.1 3.7 PLANT SYSTEMS 3.7. 1 Residual Heat Removal Service Water (RHRSW) System LCO 3.7.1 NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below:

~

1. 1 unit fueled - four OPERABLE RHRSW pumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

3. 3 units fueled - eight OPERABLE RHRSW pumps.

APPLICABILITY: MODES 1, 2, and 3.

BFN-UNIT 2 3.7-1 Amendment *Rl

RHRSW System 3.7.1 e ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. ,One required RHRSW A.l -------NOTES-------

pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Verify five RHRSW Immediately pumps powered from separate 4 kV shutdown boards are OPERABLE.

OR

.A.2 Restore required 30 days RHRSW pump to OPERABLE status.

(continued)

BFN-UNIT 2 3.7-2 Amendment *Rl

h RHRSW System 3.7.1 ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TINE B. One RHRSW 8.1 --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW 30 days subsystem to OPERABLE status.

C. Two required RHRSW C. 1 Restore one 7 days pumps inoperable. inoperable RHRSW pump to OPERABLE status.

D. Two RHRSW 0;1 --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

(continued)

BFN-UNIT 2 3 ' 3 Amendment *Rl

IV RHRSW System 3.7.1 ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TIME E. Three or more E. 1 Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> required RHRSW pump to OPERABLE pumps inoperable. status.

F. Three or more F.1 --------NOTE--------

RHRSW subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> subsystem to OPERABLE status.

G. Required Action G.l Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and associated Completion Time AND not met.

G.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> BFN-UNIT 2 3.7-4 Amendment *Rl

f R '1 t

RHRSW System 3.7.1 SURVEILLANCE REgUIRBlENTS SURVEILLANCE FRE(UENCY SR 3.7.1.1 Verify each RHRSW manual and power operated 31 days valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.

BFN-UNIT 2 3.7-5 Amendment *Rl

RHRSW System 8 3.7.1 B 3.7 PLANT SYSTEMS B 3.7. 1 Residual Meat Removal Service Water (RHRSW) System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA) or transient. The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.

The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One loop with one pump operating is capable of providing 50% of the required cooling capacity to maintain safe shutdown conditions for one unit. As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation. The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 (Ref. 1).

Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core. The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.

(continued)

BFN-UNIT 2 B 3.7-1 Amendment *Rl

6 I'

V

RHRSW System B 3.7.1 BASES (continued)

APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively). These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA. The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop. In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6) and 49.6 psig, respectively, well below the design temperature of 281'F and maximum allowable pressure of 62 psig.

The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).

(continued)

BFN-UNIT 1 B 3.7-2 Amendment *Rl

RHRSW System B 3.7.1 LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power. Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.

An OPERABLE RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.

In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling fo} the fueled non-accident units.

The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) and decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of these systems.

In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.

(continued)

BFN-UNIT 2 B 3.7-3 Amendment *Rl

5~

1 I

II

RHRSW System B 3.7.1 BASES (continued)

I ACTIONS A.l and A.2 Required Action A. 1 requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE. The Required Action is modified by two notes.

Note 1 indicates that the required action is applicable only when two units are fueled. In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board) could result in inadequate RHRSW pumps if two pumps are powered from the same power supply. This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required Action A.l is met.

Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

If Required Action A. 1 cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days. With thei unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

(continued)

BFN-UNIT 2 B 3.7-4 Amendment *Rl

RHRSW System 8 3.7.1 BASES I

ACTIONS B.l (continued)

With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required'RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

(continued)

BFN-UNIT 2 B 3.7-5 Amendment *Rl

~ 1 A J RHRSW System B 3.7.1 BASES ACTIONS D.l (continued)

With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.'he seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E. 1 With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

(continued)

BFN-UNIT 2 8 3.7-6 , Amendment *Rl

II k

RHRSW System B 3.7.1 BASES I

ACTIONS F. 1 (continued) 4 The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full t

power conditions in an orderly manner and without challenging unit systems.

SURVEILLANCE SR 3.7.1.1 RE(UIREMENTS Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

(continued)

BFN-UNIT 2 B 3.7-7 Amendment *Rl

N

'1,f,

RHRSW System B 3.7.1 BASES SURVEILLANCE SR 3.7. 1. 1 (continued)

RE(UIREHENTS The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1. FSAR, Section 10.9.

2. FSAR, Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3.2.

5. NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

6. GE-NE-B13-01755-2, Revision 1, February 1996.

BFN-UNIT 2 B 3.7-8 Amendment *Rl

RHRSW System 3.7.1 3.7 PLANT SYSTEMS 3.7.~ 1 Residual Heat Removal Service Water

~

(RHRSW) System LCO 3.7.1 NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below:

1. 1 unit fueled - four OPERABLE RHRSW pumps.

2. 2 units fueled - six OPERABLE RHRSW pumps.

3. 3 units fueled - eight OPERABLE RHRSW pumps.

APPLICABILITY: MODES 1, 2, and 3.

0 BFN-UNIT 3 3.7-1 Amendment *Rl

l ,! c4 I

Cl P y3

RHRSW System 3.7.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required RHRSW A.1 --------NOTES--------

pump inoperable. 1. Only applicable for the 2 units fueled condition.

2. Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the fueled unit other has been in MODE 4 or 5 for > 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Verify five RHRSW Immediately pumps powered from separate 4 kV shutdown boards are OPERABLE.

OR A.2 Restore required 30 days RHRSW pump to OPERABLE status.

(continued)

BFN-UNIT 3 3.7-2 Amendment *Rl

RHRSW System 3.7.1 e ACTIONS continued CONDITION REQUIRED ACTION COHPLETION TIME B. One RHRSW B.1 --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.

Restore RHRSW 30 days subsystem to OPERABLE status.

C. Two required RHRSW C. 1 Restore one 7 days pumps inoperable. inoperable RHRSW pump to OPERABLE status.

D. Two RHRSW D.l --------NOTE--------

subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 7 days subsystem to OPERABLE status.

(continued)

BFN-UNIT 3 3.7-3 Amendment *Rl

'I

• f II

~ a

RHRSW System 3.7.1 ACTIONS continued CONDITION RE(UIRED ACTION COMPLETION TIME E. Three or more E.1 Restore one RHRSW 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> required RHRSW pump to OPERABLE pumps inoperable. status.

F. Three or more F.l --------NOTE--------

RHRSW subsystems Enter applicable inoperable. Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.

Restore one RHRSW 8 hours subsystem to OPERABLE status.

G. Required Action G.1 Be in MODE 3. 12 hours and associated Completion Time AND not met.

G.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> BFN-UNIT 3 3.7-4 Amendment *Rl

0 t

RHRSW System 3.7.1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated 31 days valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.

BFN-UNIT 3 3.7-5 Amendment *Rl

RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS C

B 3.7. 1 Residual Heat Removal Service Water (RHRSW) System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR) System heat exchangers, required for a safe r eactor shutdown following a Design Basis Accident (DBA) or transient. The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.

The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit. Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation. One loop with one pump operating is capable of providing 50% of the required cooling capacity to maintain safe shutdown conditions for one unit. As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation. The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.

The RHRSW System is described in the FSAR, Section 10.9 (Ref. 1).

Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms. If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core. The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.

(continued)

BFN-UNIT 3 B 3.7-1 Amendment *Rl

~ -4 0

0

RHRSW System B 3.7.1 BASES (continued)

APPLICABLE The RHRSW System removes heat from the suppression pool to SAFETY ANALYSES limit the suppression pool temperature and primary containment pressure following a LOCA. This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA. The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs. 2 and 3, respectively). These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown. These analyses include the evaluation of the long term primary containment response after a design basis LOCA.

The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled. With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).

With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board. As discussed in the FSAR, Section 14.6.3.3.2 (Ref. 4) for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA. The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop. In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6) and 49.6 psig, respectively, well below the design temperature of 281'F and maximum allowable pressure of 62 psig.

The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).

(continued)

BFN-UNIT 3 B 3.7-2 Amendment *Rl

f t

f

RHRSW System B 3.7.1 LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power. Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.

An OPERABLE'RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring, the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.

In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling for the fueled non-accident units.

The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This Note acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3, "Residual Heat Removal (RHR) Suppression Pool Cooling," and LCO 3.6.2.4, "Residual Heat Removal (RHR) Suppression Pool Spray" ) and decay heat removal (LCO 3.4.7, "Residual Heat Removal (RHR)

Shutdown Cooling System- Hot Shutdown" ). The Applicability is therefore consistent with the requirements of these systems.

In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.

(continued)

BFN-UNIT 3 B 3.7-3 Amendment *Rl

N ~

RHRSW System B 3.7.1 BASES (continued)

I ACTIONS A.l and A.2 Required Action A. 1 requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE. The Required Action is modified by two notes.

Note I indicates that the required action is applicable only when two units are fueled. In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board) could result in inadequate RHRSW pumps if two pumps are powered from the same power supply. This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure. If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function. This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply. Operation can continue indefinitely if Required Action A.l is met.

Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

If Required Action A.l cannot be met, then Required Action A.2 must be complied with. With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

(continued)

BFN-UNIT 3 B 3.7-4 Amendment *Rl

RHRSW System B 3.7.1 BASES I

ACTIONS B.l (continued)

With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days. With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

,The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function. The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

(continued)

BFN-UNIT 3 B 3.7-5 Amendment *Rl

'I P '~~

8

RHRSW System B 3.7.1 ACTIONS 0.1 (continued)

With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function. However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability. The seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem shutdown cooling. This is an.

results in inoperable RHR exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.l With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of pumps must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the.RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function. The requisite number of subsystems must be restored to OPERABLE status within eight hours. The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

(continued)

BFN-UNIT 3 B 3.7-6 Amendment *Rl

RHRSW System B 3.7.1 ACTIONS F. 1 (continued)

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling. This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply. To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full t

power conditions in an orderly manner and without challenging unit systems.

SURVEILLANCE SR 3.7.1.1 REQUIREMENTS Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing. A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position. This is acceptable because the RHRSW System is a manually initiated system.

This SR does not require any testing or valve manipulation; rather,,it involves verification that those valves capable of being mispositioned are in the correct position. This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.

(continued)

BFN-UNIT 3 8 3.7-7 Amendment *Rl

W RHRSW System B 3.7.1 BASES SURVEILLANCE SR 3.7.1.1 (continued)

RE(UIREHENTS The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1. FSAR, Section 10.9.

2. FSAR, Chapter 5.

3. FSAR, Chapter 14.

4. FSAR, Section 14.6.3.3.2.

5. NRC No.93-102, "Final Policy Statement on Technical Specification Improvements," July 23, 1993.

6. GE-NE-B13-01755-2, Revision 1, February 1996.

BFN-UNIT 3 B 3.7-8 Amendment *Rl

J i

0,