ML16165A280: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
(4 intermediate revisions by the same user not shown)
Line 3: Line 3:
| issue date = 06/09/2016
| issue date = 06/09/2016
| title = ASP Analysis - Reject - Diablo Canyon Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld (LER 275/2015-001)
| title = ASP Analysis - Reject - Diablo Canyon Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld (LER 275/2015-001)
| author name = Aird D, Pfefferkorn C M, Tetter K M
| author name = Aird D, Pfefferkorn C, Tetter K
| author affiliation = NRC/RES/DRA/PRB
| author affiliation = NRC/RES/DRA/PRB
| addressee name =  
| addressee name =  
Line 9: Line 9:
| docket = 05000323, 05000375
| docket = 05000323, 05000375
| license number =  
| license number =  
| contact person = Pfefferkorn C M
| contact person = Pfefferkorn C
| document type = Significant Event Report
| document type = Significant Event Report
| page count = 7
| page count = 7
Line 15: Line 15:


=Text=
=Text=
{{#Wiki_filter:Final ASP Program Analysis - Reject Accident Sequence Precursor Program - Office of Nuclear Regulatory Research Diablo Canyon Power Plant, Unit 1 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld Event Date: 12/31/2014 LERs:  275-2015-001 IR: 50-275/2015-004 CCDP= 2x10-8 Plant Type: Westinghouse 4-Loop Pressurized Water Reactor with Large Dry Containment Plant Operating Mode (Reactor Power Level): Mode 3 (0 Percent Reactor Power, Operating Temperature and Pressure) Analyst: Candace Pfefferkorn Reviewer: Keith Tetter Contributors: David Aird BC Approved Date: 6/9/2016 EVENT DETAILS             Event Description. On December 31, 2014, both trains of residual heat removal (RHR) at Diablo Canyon Power Plant, Unit 1, were declared inoperable. The declaration was made after plant personnel performing a walk-down identified boric acid accumulation/through-wall seepage (30 drops per minute) originating from a circumferential crack on the socket weld connection from the RHR pump common discharge header to relief valve (RV) RHR-1-RV-8708.
{{#Wiki_filter:Final ASP Program Analysis - Reject Accident Sequence Precursor Program - Office of Nuclear Regulatory Research Diablo Canyon Power               Both Trains of Residual Heat Removal Inoperable Due to Plant, Unit 1                      Circumferential Crack on a Socket Weld LERs: 275-2015-001 Event Date: 12/31/2014                                                                       CCDP= 2x10-8 IR: 50-275/2015-004 Plant Type: Westinghouse 4-Loop Pressurized Water Reactor with Large Dry Containment Plant Operating Mode (Reactor Power Level): Mode 3 (0 Percent Reactor Power, Operating Temperature and Pressure)
Analyst:                     Reviewer:                         Contributors:             BC Approved Date:
Candace Pfefferkorn          Keith Tetter                      David Aird                6/9/2016 EVENT DETAILS Event Description. On December 31, 2014, both trains of residual heat removal (RHR) at Diablo Canyon Power Plant, Unit 1, were declared inoperable. The declaration was made after plant personnel performing a walk-down identified boric acid accumulation/through-wall seepage (30 drops per minute) originating from a circumferential crack on the socket weld connection from the RHR pump common discharge header to relief valve (RV) RHR-1-RV-8708.
Relief valve RHR-1-RV-8708 is inside containment and protects RHR discharge piping to reactor coolant system (RCS) hot legs 1 and 2 from exceeding its design pressure rating. The condition was entered at 11:05 am and was exited at 10:56 pm when the plant entered Mode 4.
Relief valve RHR-1-RV-8708 is inside containment and protects RHR discharge piping to reactor coolant system (RCS) hot legs 1 and 2 from exceeding its design pressure rating. The condition was entered at 11:05 am and was exited at 10:56 pm when the plant entered Mode 4.
Immediate corrective actions included a repair of the cracked socket weld and installation of a pipe support on RV-8708. In addition, per technical specifications, the associated containment penetration flow path was isolated. Cause. The root cause of the condition was determined to be containment fan cooler unit (CFCU) vibration that induced a resonant condition in the RHR piping generating stresses above the material endurance limit of the socket weld. Subsequent corrective actions included the replacement of the previously repaired socket weld and one additional socket weld on the RV discharge pipe, the relocation of the previously installed pipe supports, and correction of the condition that caused the CFCU vibrations. Notably, a similar condition (circumferential crack on the socket weld RHR connection RV RHR-1-RV-8708), was documented in LER 275-2013-005 for Diablo Canyon Nuclear Power Plant, Unit 1. In that case, the condition was attributed to low-stress, high-cycle fatigue caused by system vibration. MODELING               Basis for ASP Analysis/SDP Results. The ASP Program uses Significance Determination Process (SDP) results for degraded conditions when available and applicable. The ASP Program performs independent analyses for initiating events. ASP analyses of initiating events account for all failures/degraded conditions and unavailabilities (e.g., equipment out for test/maintenance) that occurred during the event, regardless of licensee performance.1 1 ASP analyses also account for any degraded condition(s) that were identified after the initiating event occurred if the failure/degradation exposure period(s) overlapped the initiating event date.
Immediate corrective actions included a repair of the cracked socket weld and installation of a pipe support on RV-8708. In addition, per technical specifications, the associated containment penetration flow path was isolated.
LER 275-2015-001 In Inspection Report 50-275/15-04 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML16035A481), the inspectors documented their review of the events described in License Event Report (LER) 275-2015-001 and 275-2013-005. The inspectors documented a green self-revealing non-cited violation of 10 CFR Part 50, Appendix B, Criterion XVI "Corrective Action," for the licensee's failure to identify the cause and take corrective action to prevent recurrence of a significant condition adverse to quality impacting both trains of the Unit 1 safety-related residual heat removal (RHR) system. Specifically, the licensee failed to identify a definitive cause and implement corrective actions to prevent recurrent failures of the socket weld for RV RHR-1-RV-8708 for both trains of the RHR system. While the issue associated with LER 275-2015-001 was addressed through the SDP in Inspection Report 50-275/15-04, as of the writing of this report, the LER has not been documented as closed in an inspection report.
Cause. The root cause of the condition was determined to be containment fan cooler unit (CFCU) vibration that induced a resonant condition in the RHR piping generating stresses above the material endurance limit of the socket weld. Subsequent corrective actions included the replacement of the previously repaired socket weld and one additional socket weld on the RV discharge pipe, the relocation of the previously installed pipe supports, and correction of the condition that caused the CFCU vibrations. Notably, a similar condition (circumferential crack on the socket weld RHR connection RV RHR-1-RV-8708), was documented in LER 275-2013-005 for Diablo Canyon Nuclear Power Plant, Unit 1. In that case, the condition was attributed to low-stress, high-cycle fatigue caused by system vibration.
An independent ASP analysis was performed for this condition assessment because this event has not yet been directly closed to date. Analysis Type. The Diablo Canyon Unit 1 & 2 Standardized Plant Analysis Risk (SPAR) model, Revision 8.23, created May 2014, was used for this event analysis. The event was modeled as a condition assessment. SPAR Model Modifications. Fault tree modifications and basic event additions were made within the BFN Unit 3 SPAR model as described below:
MODELING Basis for ASP Analysis/SDP Results. The ASP Program uses Significance Determination Process (SDP) results for degraded conditions when available and applicable. The ASP Program performs independent analyses for initiating events. ASP analyses of initiating events account for all failures/degraded conditions and unavailabilities (e.g., equipment out for test/maintenance) that occurred during the event, regardless of licensee performance.1 1
ASP analyses also account for any degraded condition(s) that were identified after the initiating event occurred if the failure/degradation exposure period(s) overlapped the initiating event date.
 
LER 275-2015-001 In Inspection Report 50-275/15-04 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML16035A481), the inspectors documented their review of the events described in License Event Report (LER) 275-2015-001 and 275-2013-005. The inspectors documented a green self-revealing non-cited violation of 10 CFR Part 50, Appendix B, Criterion XVI Corrective Action, for the licensees failure to identify the cause and take corrective action to prevent recurrence of a significant condition adverse to quality impacting both trains of the Unit 1 safety-related residual heat removal (RHR) system. Specifically, the licensee failed to identify a definitive cause and implement corrective actions to prevent recurrent failures of the socket weld for RV RHR-1-RV-8708 for both trains of the RHR system.
While the issue associated with LER 275-2015-001 was addressed through the SDP in Inspection Report 50-275/15-04, as of the writing of this report, the LER has not been documented as closed in an inspection report.
An independent ASP analysis was performed for this condition assessment because this event has not yet been directly closed to date.
Analysis Type. The Diablo Canyon Unit 1 & 2 Standardized Plant Analysis Risk (SPAR) model, Revision 8.23, created May 2014, was used for this event analysis. The event was modeled as a condition assessment.
SPAR Model Modifications. Fault tree modifications and basic event additions were made within the BFN Unit 3 SPAR model as described below:
* A new house event, titled LPI-RV-8708 (Relief Valve 8708 Breaks) was created to model a break resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. The normal state of this valve is closed and therefore LPI-RV-8708 was set to FALSE.
* A new house event, titled LPI-RV-8708 (Relief Valve 8708 Breaks) was created to model a break resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. The normal state of this valve is closed and therefore LPI-RV-8708 was set to FALSE.
* The LPI (Low Pressure Injection) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPI (Low Pressure Injection) "OR" gate.
* The LPI (Low Pressure Injection) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPI (Low Pressure Injection)
* The LPR (Low Pressure Recirculation) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPR-SYS-F (Failure of LPI Systems During Recirculation) "OR" gate.
OR gate.
* The LPR (Low Pressure Recirculation) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPR-SYS-F (Failure of LPI Systems During Recirculation) OR gate.
2


LER 275-2015-001 Key Modeling Assumptions. The following modeling assumptions were determined to be significant to the modeling of this event:
LER 275-2015-001 Key Modeling Assumptions. The following modeling assumptions were determined to be significant to the modeling of this event:
* While the RHR system was declared inoperable in accordance with Technical Specifications, the Diablo Canyon SPAR Report states that: Success [of RHR] implies the RCS pressure and temperature are within the requirements to allow the RCS hot leg (to LPI pump suction) suction valves to be opened and provide a suction source to the LPI pumps. The dedicated LPI pump train heat exchangers will slowly cool down the reactor. This system requires an operator action to open the RCS hot leg valves which provide the suction source for the pumps. The success criterion is one-of-two LPI pumps providing sufficient flow through their respective heat exchangers Therefore, for this analysis, nominal probabilities for RHR basic events were used which include LPI hot leg suction valves, pumps, and heat exchangers, as well as the operator action to open RCS hot leg valves. Furthermore, most initiating event sequences that reference the RHR top event (fault tree) subsequently reference either low or high pressure recirculation (LPR or HPR fault trees, respectively) implicating RHR in providing heat exchange and suction for LPI, LPR and HPR.
* While the RHR system was declared inoperable in accordance with Technical Specifications, the Diablo Canyon SPAR Report states that:
Success [of RHR] implies the RCS pressure and temperature are within the requirements to allow the RCS hot leg (to LPI pump suction) suction valves to be opened and provide a suction source to the LPI pumps. The dedicated LPI pump train heat exchangers will slowly cool down the reactor. This system requires an operator action to open the RCS hot leg valves which provide the suction source for the pumps. The success criterion is one-of-two LPI pumps providing sufficient flow through their respective heat exchangers Therefore, for this analysis, nominal probabilities for RHR basic events were used which include LPI hot leg suction valves, pumps, and heat exchangers, as well as the operator action to open RCS hot leg valves. Furthermore, most initiating event sequences that reference the RHR top event (fault tree) subsequently reference either low or high pressure recirculation (LPR or HPR fault trees, respectively) implicating RHR in providing heat exchange and suction for LPI, LPR and HPR.
* To ensure conservative bounding risk results, it is assumed that the subject circumferential crack on the socket weld connection to RV RHR-1-RV-8708 resulted in a full pipe rupture. The pipe rupture is assumed to be of sufficient size such that all RHR water is diverted from both cold leg LPI (or LPR) trains through the break until it is isolated manually by operators.
* To ensure conservative bounding risk results, it is assumed that the subject circumferential crack on the socket weld connection to RV RHR-1-RV-8708 resulted in a full pipe rupture. The pipe rupture is assumed to be of sufficient size such that all RHR water is diverted from both cold leg LPI (or LPR) trains through the break until it is isolated manually by operators.
* The time duration of the condition is assumed to be one hour. In an emergency core cooling system mode valve alignment, two motor operated valves are open. These values would have to be closed from the control room during an incident to isolate a break in the hot leg injection line. Based on review of abnormal operating procedures for malfunction of RHR, an upper bound estimate of one hour was ascribed to this action.
* The time duration of the condition is assumed to be one hour. In an emergency core cooling system mode valve alignment, two motor operated valves are open. These values would have to be closed from the control room during an incident to isolate a break in the hot leg injection line. Based on review of abnormal operating procedures for malfunction of RHR, an upper bound estimate of one hour was ascribed to this action.
* The subject pipe rupture, even if isolated, would result in a loss of low pressure hot leg injection during recirculation. Hot leg recirculation typically occurs approximately 24 hours after low pressure cold leg recirculation is initiated. Therefore, failure of hot leg injection during recirculation was not modeled in this analysis.
* The subject pipe rupture, even if isolated, would result in a loss of low pressure hot leg injection during recirculation. Hot leg recirculation typically occurs approximately 24 hours after low pressure cold leg recirculation is initiated. Therefore, failure of hot leg injection during recirculation was not modeled in this analysis.
* At the time of the event Diablo Canyon Power Plant, Unit 1, was in Mode 3 (Hot Standby) with no components reported as being out of service for test and maintenance. However, this analysis assumes a full break in the hot leg injection line resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. Thus, basic event LPI-RV-8708 was set to TRUE for this event analysis
* At the time of the event Diablo Canyon Power Plant, Unit 1, was in Mode 3 (Hot Standby) with no components reported as being out of service for test and maintenance.
* All other safety systems responded as designed.  
However, this analysis assumes a full break in the hot leg injection line resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. Thus, basic event LPI-RV-8708 was set to TRUE for this event analysis
 
* All other safety systems responded as designed.
LER 275-2015-001 4  ANALYSIS RESULTS            CCDP/Rejection Basis. The CDP for this analysis is 1.8 x10-8 which is below the ASP Program CDP threshold of 1x10-6. Therefore, this event is not a precursor and is screened out of the ASP Program. Dominant Sequence. The dominant accident sequence is Medium Loss of Coolant Accident (MLOCA) Sequence 02 (CDP = 1.7x10-8) that contributes approximately 98% of the total internal events CCDP. Figure 1 in Appendix B illustrates this sequence. The cut sets/sequences that contribute to the top 95% and/or at least 1% of the total internal events CCDP are provided in Appendix A.
3


LER 275-2015-001 ANALYSIS RESULTS CCDP/Rejection Basis. The CDP for this analysis is 1.8 x10-8 which is below the ASP Program CDP threshold of 1x10-6. Therefore, this event is not a precursor and is screened out of the ASP Program.
Dominant Sequence. The dominant accident sequence is Medium Loss of Coolant Accident (MLOCA) Sequence 02 (CDP = 1.7x10-8) that contributes approximately 98% of the total internal events CCDP. Figure 1 in Appendix B illustrates this sequence. The cut sets/sequences that contribute to the top 95% and/or at least 1% of the total internal events CCDP are provided in Appendix A.
The events and important component/system failures in MLOCA Sequence 02 are:
The events and important component/system failures in MLOCA Sequence 02 are:
* Reactor trip succeeds,
* Reactor trip succeeds,
Line 40: Line 54:
* Auxiliary feedwater succeeds,
* Auxiliary feedwater succeeds,
* Reactor coolant system cooldown below RHR initial pressure succeeds,
* Reactor coolant system cooldown below RHR initial pressure succeeds,
* Low pressure recirculation fails. REFERENCES             1. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld," dated February 11, 2016 (ML16042A470). 2. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld," dated March 2, 2015 (ML15061A548). 3. Diablo Canyon Power Plant, "LER 275-2013-005 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld," dated August 22, 2013 (ML13235A101). 4. U.S. Nuclear Regulatory Commission, "Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2015004," dated February 4, 2016 (ML16035A481). 5. Nuclear Regulatory Commission, "Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2014002," dated April 23, 2014 (ML14113A527).
* Low pressure recirculation fails.
LER 275-2015-001 A-1  Appendix A: SAPHIRE 8 Worksheet Summary of Conditional Event Changes Event Description Cond Value Nominal Value LPI-RV-8708 Relief Valve 8708 Breaks True False Event Tree Dominant Results Only items contributing at least 1.0% to the total CCDP are displayed. EVENT TREE   CCDP   CDP   CDP   DESCRIPTION   MLOCA 1.71E-8 3.85E-11 1.71E-8 Diablo Canyon 1 & 2 Medium Loss of Coolant Accident LLOCA 2.85E-10 6.18E-13 2.85E-10 Diablo Canyon 1 & 2 Large Loss of Coolant Accident Total 1.90E-8 1.48E-9 1.75E-8   Dominant Sequence Results Only items contributing at least 1.0% to the total CCDP are displayed. EVENT TREE   SEQUENCE   CCDP   CDP   CDP   DESCRIPTION   MLOCA 02 1.71E-8 3.75E-11 1.71E-8 /RPS, /OEP, /HPI, /AFW, /SSC1, LPR LLOCA 3 2.85E-10 2.59E-14 2.85E-10 /OEP, /ACC, LPI Total 1.90E-8 1.48E-9 1.75E-8   Referenced Fault Trees Fault Tree Description LPI LOW PRESSURE INJECTION LPR LOW PRESSURE RECIRCULATION Cut Set Report - MLOCA 02 Only items contributing at least 1% to the total are displayed. #   PROB/FREQ   TOTAL%   CUT SET     Total 1.50E-4 100 Displaying 1 Cut Sets. (1 Original) 1 1.50E-4 100.00 IE-MLOCA,<TRUE>   Cut Set Report - LLOCA 3 Only items contributing at least 1% to the total are displayed. #   PROB/FREQ   TOTAL%   CUT SET       1.65E-7 100 Displaying 176 Cut Sets. (176 Original) 1 1.02E-7 61.80 IE-LOOPSC,ACP-CRB-CF-OPSD3 2 4.75E-8 28.84 IE-LOOPSC,RSW-STR-CF-ALL 3 2.60E-9 1.58 IE-LOOPSC,ACP-XHE-XM-EPSXT,EPS-XHE-XL-NR04H,OEP-XHE-XL-NR04HSC,OPR-XHE-XR-CASLT   Referenced Events Event Description Probability IE-LLOCA LARGE LOCA 2.50E-6 IE-MLOCA MEDIUM LOCA 1.50E-4 LER 275-2015-001 B-1  Appendix B: Key Event Tree   Figure 1: Diablo Canyon MLOCA Event Tree (Sequence 02 Bolded)
REFERENCES
LER 275-2015-001 C-1  Appendix C: SPAR Model Modifications Figure 2: Change to LPI Fault Tree (Partial)    Figure 3: Change to LPR Fault Tree (Partial) LPILOW PRESSURE INJECTIONLPI-TRNB-FFAILURE OF LPI TRAIN B TO COLD LEGS 3 & 4ExtNYON 1 & 2 EAT REMOVAL AIN BLPI-TRNB-F1FAILURE OF COLD LEGS 3 & 4LPI-CLINJ-CL3-FNO FLOW TO COLD LEG 3 DURING LPILPI-RCS-CL3-F1FAILURE OF INJECTION TO RCS COLD LEG 3FalseHE-LOCAHOUSE EVENT: LOCA2.50E-01LOCA-CL3LOCA OCCURED IN COLD LEG 34.26E-08RCS-CKV-CF-8948ABCDCCF OF RCS COLD LEG DISCHARGE CHECK VALVES1.07E-05RCS-CKV-CC-8948CCOLD LEG INJECTION CKV 8948C FAILS TO OPEN1.07E-05LPI-CKV-CC-8818CCOLD LEG 3 INJECTION CHECK VALVE FROM LPI/RHR TRAINS FAIL4.26E-08LPI-CKV-CF-ALLCCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLESLPI-CLINJ-CL4-FNO FLOW TO COLD LEG 4 DURING LPILPI-RCS-CL4-F1FAILURE OF INJECTION TO RCS COLD LEG 4FalseHE-LOCAHOUSE EVENT: LOCA2.50E-01LOCA-CL4LOCA OCCURED IN COLD LEG 44.26E-08RCS-CKV-CF-8948ABCDCCF OF RCS COLD LEG DISCHARGE CHECK VALVES1.07E-05RCS-CKV-CC-8948DCOLD LEG INJECTION CKV 8948D FAILS TO OPEN1.07E-05LPI-CKV-CC-8818DCOLD LEG 4 INJECTION CHECK VALVE FROM LPI/RHR TRAINS FAIL4.26E-08LPI-CKV-CF-ALLCCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES3.13E-06LPI-AOV-OC-HCV637RHR MDP 1-2 DISCHARGE CONTROL AOV 637 FAILS TO REMAIN OPEN8.13E-07LPI-MOV-OC-8809BLPI/RHR DISCHARGE MOV 8809B FAILS TO REMAIN OPEN9.63E-04LPI-MOV-CC-FCV641BFAILURE OF RHR TRAIN B MOV FCV-641B1.85E-05LPI-MOV-CF-FCV641ABCCF OF RHR TRAIN A/B MOVs FCV-641A/B4.37E-07HPI-TNK-FC-RWSTRWST FAILS TO PROVIDE WATER2.02E-06HPI-XVM-OC-XVM11RWST MANUAL VALVE MV 1-1 FAILS8.13E-07LPI-MOV-OC-8980LPI DISCHARGE MOV 8980 FROM RWST FAILS TO REMAIN OPEN1.07E-05LPI-CKV-CC-8981LPI DISCHARGE CHECK VALVE FROM RWST FAILS TO OPENFalseLPI-RV-8708Relief Valve 8708 BreaksLPRLOW PRESSURE RECIRCULATIONLPR-SYS-FFAILURE OF LPI SYSTEMS DURING RECIRCULATIONLPR-CLINJ-FFAILURE OF COLD LEG INJECTION DURING LPRLPR-CLINJA-FFAILURE OF FLOW FROM RHR/LPI TRAIN A DURING LPRLPR-CLINJ12-FFAILURE OF FLOW FROM RHR TRN A TO COLD LEGS 1 & 24.26E-08RCS-CKV-CF-8948ABCDCCF OF RCS COLD LEG DISCHARGE CHECK VALVES1.07E-05RCS-CKV-CC-8948ACOLD LEG INJECTION CKV 8948A FAILS TO OPEN1.07E-05LPI-CKV-CC-8818ACOLD LEG 1 INJECTION CHECK VALVE FROM LPI/RHR TRAINS FAIL4.26E-08LPI-CKV-CF-ALLCCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLESLPR-CLINJ-CL2-FNO FLOW TO COLD LEG 2 DURING LPILPR-RCS-CL2-F1FAILURE OF INJECTION TO RCS COLD LEG 2FalseHE-LOCAHOUSE EVENT: LOCA2.50E-01LOCA-CL2LOCA OCCURED IN COLD LEG 24.26E-08RCS-CKV-CF-8948ABCDCCF OF RCS COLD LEG DISCHARGE CHECK VALVES1.07E-05RCS-CKV-CC-8948BCOLD LEG INJECTION CKV 8948B FAILS TO OPEN1.07E-05LPI-CKV-CC-8818BCOLD LEG 2 INJECTION CHECK VALVE FROM LPI/RHR TRAINS FAIL4.26E-08LPI-CKV-CF-ALLCCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES8.13E-07LPI-MOV-OC-8809ALPI/RHR DISCHARGE MOV 8809A FAILS TO REMAIN OPEN9.63E-04HPI-MOV-CC-8982ASUMP SUCTION MOV 8982A FAILS TO OPEN1.85E-05HPI-MOV-CF-8982ABCCF OF CONTAINMENT SUMP ISOL MOVs 8982A/B3.13E-06LPI-AOV-OC-HCV638RHR MDP 1-1 DISCHARGE CONTROL AOV 638 FAILS TO REMAIN OPEN9.63E-04LPI-MOV-OO-8700ARWST ISOLATION MOV 8700A FAILS TO CLOSE7.78E-06LPI-MOV-CF-8700ABCCF OF LPI/RHR RWST ISOLATION MOVs 8700A/BExtLPR-CLINJBFAILURE OF FLOW FROM RHR/LPI TRAIN B DURING LPRFalseLPI-RV-8708Relief Valve 8708 Breaks2.00E-03LPI-XHE-XM-RECIRCOPERATOR FAILS TO INITIATE LPR OPERATION MODE}}
: 1. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated February 11, 2016 (ML16042A470).
: 2. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated March 2, 2015 (ML15061A548).
: 3. Diablo Canyon Power Plant, "LER 275-2013-005 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated August 22, 2013 (ML13235A101).
: 4. U.S. Nuclear Regulatory Commission, Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2015004, dated February 4, 2016 (ML16035A481).
: 5. Nuclear Regulatory Commission, Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2014002, dated April 23, 2014 (ML14113A527).
4
 
LER 275-2015-001 Appendix A: SAPHIRE 8 Worksheet Summary of Conditional Event Changes Event             Description                     Cond Value       Nominal Value LPI-RV-8708       Relief Valve 8708 Breaks         True             False Event Tree Dominant Results Only items contributing at least 1.0% to the total CCDP are displayed.
EVENT TREE             CCDP           CDP             CDP         DESCRIPTION MLOCA                 1.71E-8       3.85E-11       1.71E-8       Diablo Canyon 1 & 2 Medium Loss of Coolant Accident LLOCA                 2.85E-10       6.18E-13       2.85E-10       Diablo Canyon 1 & 2 Large Loss of Coolant Accident Total                 1.90E-8       1.48E-9       1.75E-8 Dominant Sequence Results Only items contributing at least 1.0% to the total CCDP are displayed.
EVENT TREE             SEQUENCE             CCDP           CDP           CDP         DESCRIPTION MLOCA                 02                   1.71E-8       3.75E-11     1.71E-8       /RPS, /OEP, /HPI, /AFW, /SSC1, LPR LLOCA                 3                   2.85E-10       2.59E-14     2.85E-10       /OEP, /ACC, LPI Total                                       1.90E-8       1.48E-9     1.75E-8 Referenced Fault Trees Fault Tree     Description LPI             LOW PRESSURE INJECTION LPR             LOW PRESSURE RECIRCULATION Cut Set Report - MLOCA 02 Only items contributing at least 1% to the total are displayed.
#         PROB/FREQ             TOTAL%           CUT SET Total     1.50E-4               100               Displaying 1 Cut Sets. (1 Original) 1         1.50E-4               100.00           IE-MLOCA,<TRUE>
Cut Set Report - LLOCA 3 Only items contributing at least 1% to the total are displayed.
#       PROB/FREQ             TOTAL%           CUT SET 1.65E-7               100               Displaying 176 Cut Sets. (176 Original) 1       1.02E-7               61.80             IE-LOOPSC,ACP-CRB-CF-OPSD3 2       4.75E-8               28.84             IE-LOOPSC,RSW-STR-CF-ALL 3       2.60E-9               1.58             IE-LOOPSC,ACP-XHE-XM-EPSXT,EPS-XHE-XL-NR04H,OEP-XHE-XL-NR04HSC,OPR-XHE-XR-CASLT Referenced Events Event           Description           Probability IE-LLOCA       LARGE LOCA           2.50E-6 IE-MLOCA       MEDIUM LOCA           1.50E-4 A-1
 
LER 275-2015-001 Appendix B: Key Event Tree Figure 1: Diablo Canyon MLOCA Event Tree (Sequence 02 Bolded)
B-1
 
LER 275-2015-001 Appendix C: SPAR Model Modifications LOW PRESSURE INJECTION LPI RWST FAILS TO PROVIDE          Relief Valve 8708 Breaks WATER HPI-TNK-FC-RWST      4.37E-07 LPI-RV-8708              False RWST MANUAL VALVE MV 1-1 FAILS FAILURE OF LPI TRAIN B TO                                                                                                                        HPI-XVM-OC-XVM11      2.02E-06 COLD LEGS 3 & 4                                                                                                                              LPI DISCHARGE MOV 8980 FROM RWST FAILS TO LPI-TRNB-F                                                                                                                                                  REMAIN OPEN LPI-MOV-OC-8980      8.13E-07 LPI DISCHARGE CHECK VALVE FROM RWST FAILS TO OPEN NYON 1 & 2                                                                                        FAILURE OF COLD LEGS 3 & 4                                                                                        RHR MDP 1-2 DISCHARGE EAT REMOVAL                                                                                                                                                                                                          CONTROL AOV 637 FAILS TO        LPI-CKV-CC-8981      1.07E-05 AIN B                                                                                                                                                                                                                        REMAIN OPEN Ext                                                                                  LPI-TRNB-F1                                                                                                      LPI-AOV-OC-HCV637 3.13E-06 LPI/RHR DISCHARGE MOV 8809B FAILS TO REMAIN OPEN NO FLOW TO COLD LEG 3                                                                              NO FLOW TO COLD LEG 4                                       LPI-MOV-OC-8809B      8.13E-07 DURING LPI                                                                                        DURING LPI                                            FAILURE OF RHR TRAIN B MOV FCV-641B LPI-CLINJ-CL3-F                                                                                    LPI-CLINJ-CL4-F LPI-MOV-CC-FCV641B 9.63E-04 CCF OF RHR TRAIN A/B MOVs FCV-641A/B FAILURE OF INJECTION TO                            CCF OF RCS COLD LEG                           FAILURE OF INJECTION TO                            CCF OF RCS COLD LEG RCS COLD LEG 3                              DISCHARGE CHECK VALVES                                RCS COLD LEG 4                              DISCHARGE CHECK VALVES        LPI-MOV-CF-FCV641AB1.85E-05 LPI-RCS-CL3-F1                                  RCS-CKV-CF-8948ABCD 4.26E-08                    LPI-RCS-CL4-F1                                  RCS-CKV-CF-8948ABCD 4.26E-08 COLD LEG INJECTION CKV                                                                            COLD LEG INJECTION CKV 8948C FAILS TO OPEN                                                                              8948D FAILS TO OPEN HOUSE EVENT: LOCA          LOCA OCCURED IN COLD LEG 3      RCS-CKV-CC-8948C      1.07E-05        HOUSE EVENT: LOCA          LOCA OCCURED IN COLD LEG 4    RCS-CKV-CC-8948D    1.07E-05 COLD LEG 3 INJECTION CHECK                                                                        COLD LEG 4 INJECTION CHECK VALVE FROM LPI/RHR TRAINS                                                                        VALVE FROM LPI/RHR TRAINS HE-LOCA                  False  LOCA-CL3              2.50E-01              FAIL                HE-LOCA                False  LOCA-CL4            2.50E-01                FAIL LPI-CKV-CC-8818C      1.07E-05                                                                  LPI-CKV-CC-8818D    1.07E-05 CCF OF LPI/RHR COLD LEG                                                                          CCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES                                                                            INJECTION CHECK VAVLES LPI-CKV-CF-ALL        4.26E-08                                                                  LPI-CKV-CF-ALL      4.26E-08 Figure 2: Change to LPI Fault Tree (Partial)
LOW PRESSURE RECIRCULATION LPR FAILURE OF LPI SYSTEMS                                                                                                                                                                            OPERATOR FAILS TO INITIATE DURING RECIRCULATION                                                                                                                                                                                  LPR OPERATION MODE LPR-SYS-F                                                                                                                                                                                          LPI-XHE-XM-RECIRC    2.00E-03 FAILURE OF COLD LEG                                                                                                                                               Relief Valve 8708 Breaks INJECTION DURING LPR LPR-CLINJ-F                                                                                                                                                      LPI-RV-8708              False FAILURE OF FLOW FROM                                                                                                                              FAILURE OF FLOW FROM RHR/LPI TRAIN A DURING LPR                                                                                                                        RHR/LPI TRAIN B DURING LPR LPR-CLINJA-F                                                                                                                                      LPR-CLINJB                Ext FAILURE OF FLOW FROM RHR                                                                                            LPI/RHR DISCHARGE MOV TRN A TO COLD LEGS 1 & 2                                                                                        8809A FAILS TO REMAIN OPEN LPR-CLINJ12-F                                                                                                      LPI-MOV-OC-8809A    8.13E-07 SUMP SUCTION MOV 8982A FAILS TO OPEN NO FLOW TO COLD LEG 2                                        HPI-MOV-CC-8982A    9.63E-04 DURING LPI                                              CCF OF CONTAINMENT SUMP ISOL MOVs 8982A/B LPR-CLINJ-CL2-F HPI-MOV-CF-8982AB    1.85E-05 RHR MDP 1-1 DISCHARGE CONTROL AOV 638 FAILS TO CCF OF RCS COLD LEG                            FAILURE OF INJECTION TO                            CCF OF RCS COLD LEG                  REMAIN OPEN DISCHARGE CHECK VALVES                                RCS COLD LEG 2                              DISCHARGE CHECK VALVES        LPI-AOV-OC-HCV638 3.13E-06 RWST ISOLATION MOV 8700A RCS-CKV-CF-8948ABCD 4.26E-08                    LPR-RCS-CL2-F1                                    RCS-CKV-CF-8948ABCD 4.26E-08            FAILS TO CLOSE COLD LEG INJECTION CKV                                                                            COLD LEG INJECTION CKV 8948A FAILS TO OPEN                                                                                8948B FAILS TO OPEN        LPI-MOV-OO-8700A    9.63E-04 CCF OF LPI/RHR RWST RCS-CKV-CC-8948A      1.07E-05        HOUSE EVENT: LOCA            LOCA OCCURED IN COLD LEG 2      RCS-CKV-CC-8948B    1.07E-05      ISOLATION MOVs 8700A/B COLD LEG 1 INJECTION CHECK                                                                        COLD LEG 2 INJECTION CHECK VALVE FROM LPI/RHR TRAINS                                                                          VALVE FROM LPI/RHR TRAINS      LPI-MOV-CF-8700AB    7.78E-06 FAIL                HE-LOCA                  False  LOCA-CL2              2.50E-01                FAIL LPI-CKV-CC-8818A      1.07E-05                                                                    LPI-CKV-CC-8818B    1.07E-05 CCF OF LPI/RHR COLD LEG                                                                          CCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES                                                                            INJECTION CHECK VAVLES LPI-CKV-CF-ALL        4.26E-08                                                                    LPI-CKV-CF-ALL      4.26E-08 Figure 3: Change to LPR Fault Tree (Partial)
C-1}}

Latest revision as of 18:00, 30 October 2019

ASP Analysis - Reject - Diablo Canyon Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld (LER 275/2015-001)
ML16165A280
Person / Time
Site: Diablo Canyon, 05000375  Pacific Gas & Electric icon.png
Issue date: 06/09/2016
From: David Aird, Pfefferkorn C, Keith Tetter
NRC/RES/DRA/PRB
To:
Pfefferkorn C
References
Download: ML16165A280 (7)


Text

Final ASP Program Analysis - Reject Accident Sequence Precursor Program - Office of Nuclear Regulatory Research Diablo Canyon Power Both Trains of Residual Heat Removal Inoperable Due to Plant, Unit 1 Circumferential Crack on a Socket Weld LERs: 275-2015-001 Event Date: 12/31/2014 CCDP= 2x10-8 IR: 50-275/2015-004 Plant Type: Westinghouse 4-Loop Pressurized Water Reactor with Large Dry Containment Plant Operating Mode (Reactor Power Level): Mode 3 (0 Percent Reactor Power, Operating Temperature and Pressure)

Analyst: Reviewer: Contributors: BC Approved Date:

Candace Pfefferkorn Keith Tetter David Aird 6/9/2016 EVENT DETAILS Event Description. On December 31, 2014, both trains of residual heat removal (RHR) at Diablo Canyon Power Plant, Unit 1, were declared inoperable. The declaration was made after plant personnel performing a walk-down identified boric acid accumulation/through-wall seepage (30 drops per minute) originating from a circumferential crack on the socket weld connection from the RHR pump common discharge header to relief valve (RV) RHR-1-RV-8708.

Relief valve RHR-1-RV-8708 is inside containment and protects RHR discharge piping to reactor coolant system (RCS) hot legs 1 and 2 from exceeding its design pressure rating. The condition was entered at 11:05 am and was exited at 10:56 pm when the plant entered Mode 4.

Immediate corrective actions included a repair of the cracked socket weld and installation of a pipe support on RV-8708. In addition, per technical specifications, the associated containment penetration flow path was isolated.

Cause. The root cause of the condition was determined to be containment fan cooler unit (CFCU) vibration that induced a resonant condition in the RHR piping generating stresses above the material endurance limit of the socket weld. Subsequent corrective actions included the replacement of the previously repaired socket weld and one additional socket weld on the RV discharge pipe, the relocation of the previously installed pipe supports, and correction of the condition that caused the CFCU vibrations. Notably, a similar condition (circumferential crack on the socket weld RHR connection RV RHR-1-RV-8708), was documented in LER 275-2013-005 for Diablo Canyon Nuclear Power Plant, Unit 1. In that case, the condition was attributed to low-stress, high-cycle fatigue caused by system vibration.

MODELING Basis for ASP Analysis/SDP Results. The ASP Program uses Significance Determination Process (SDP) results for degraded conditions when available and applicable. The ASP Program performs independent analyses for initiating events. ASP analyses of initiating events account for all failures/degraded conditions and unavailabilities (e.g., equipment out for test/maintenance) that occurred during the event, regardless of licensee performance.1 1

ASP analyses also account for any degraded condition(s) that were identified after the initiating event occurred if the failure/degradation exposure period(s) overlapped the initiating event date.

LER 275-2015-001 In Inspection Report 50-275/15-04 (Agencywide Documents Access and Management System (ADAMS) Accession No. ML16035A481), the inspectors documented their review of the events described in License Event Report (LER) 275-2015-001 and 275-2013-005. The inspectors documented a green self-revealing non-cited violation of 10 CFR Part 50, Appendix B, Criterion XVI Corrective Action, for the licensees failure to identify the cause and take corrective action to prevent recurrence of a significant condition adverse to quality impacting both trains of the Unit 1 safety-related residual heat removal (RHR) system. Specifically, the licensee failed to identify a definitive cause and implement corrective actions to prevent recurrent failures of the socket weld for RV RHR-1-RV-8708 for both trains of the RHR system.

While the issue associated with LER 275-2015-001 was addressed through the SDP in Inspection Report 50-275/15-04, as of the writing of this report, the LER has not been documented as closed in an inspection report.

An independent ASP analysis was performed for this condition assessment because this event has not yet been directly closed to date.

Analysis Type. The Diablo Canyon Unit 1 & 2 Standardized Plant Analysis Risk (SPAR) model, Revision 8.23, created May 2014, was used for this event analysis. The event was modeled as a condition assessment.

SPAR Model Modifications. Fault tree modifications and basic event additions were made within the BFN Unit 3 SPAR model as described below:

  • A new house event, titled LPI-RV-8708 (Relief Valve 8708 Breaks) was created to model a break resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. The normal state of this valve is closed and therefore LPI-RV-8708 was set to FALSE.
  • The LPI (Low Pressure Injection) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPI (Low Pressure Injection)

OR gate.

  • The LPR (Low Pressure Recirculation) fault tree was modified to include the basic house event LPI-RV-8708 (Relief Valve 8708 Breaks) under the LPR-SYS-F (Failure of LPI Systems During Recirculation) OR gate.

2

LER 275-2015-001 Key Modeling Assumptions. The following modeling assumptions were determined to be significant to the modeling of this event:

  • While the RHR system was declared inoperable in accordance with Technical Specifications, the Diablo Canyon SPAR Report states that:

Success [of RHR] implies the RCS pressure and temperature are within the requirements to allow the RCS hot leg (to LPI pump suction) suction valves to be opened and provide a suction source to the LPI pumps. The dedicated LPI pump train heat exchangers will slowly cool down the reactor. This system requires an operator action to open the RCS hot leg valves which provide the suction source for the pumps. The success criterion is one-of-two LPI pumps providing sufficient flow through their respective heat exchangers Therefore, for this analysis, nominal probabilities for RHR basic events were used which include LPI hot leg suction valves, pumps, and heat exchangers, as well as the operator action to open RCS hot leg valves. Furthermore, most initiating event sequences that reference the RHR top event (fault tree) subsequently reference either low or high pressure recirculation (LPR or HPR fault trees, respectively) implicating RHR in providing heat exchange and suction for LPI, LPR and HPR.

  • To ensure conservative bounding risk results, it is assumed that the subject circumferential crack on the socket weld connection to RV RHR-1-RV-8708 resulted in a full pipe rupture. The pipe rupture is assumed to be of sufficient size such that all RHR water is diverted from both cold leg LPI (or LPR) trains through the break until it is isolated manually by operators.
  • The time duration of the condition is assumed to be one hour. In an emergency core cooling system mode valve alignment, two motor operated valves are open. These values would have to be closed from the control room during an incident to isolate a break in the hot leg injection line. Based on review of abnormal operating procedures for malfunction of RHR, an upper bound estimate of one hour was ascribed to this action.
  • The subject pipe rupture, even if isolated, would result in a loss of low pressure hot leg injection during recirculation. Hot leg recirculation typically occurs approximately 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> after low pressure cold leg recirculation is initiated. Therefore, failure of hot leg injection during recirculation was not modeled in this analysis.
  • At the time of the event Diablo Canyon Power Plant, Unit 1, was in Mode 3 (Hot Standby) with no components reported as being out of service for test and maintenance.

However, this analysis assumes a full break in the hot leg injection line resulting from the circumferential crack on the socket weld connection to RV RHR-1-RV-8708. Thus, basic event LPI-RV-8708 was set to TRUE for this event analysis

  • All other safety systems responded as designed.

3

LER 275-2015-001 ANALYSIS RESULTS CCDP/Rejection Basis. The CDP for this analysis is 1.8 x10-8 which is below the ASP Program CDP threshold of 1x10-6. Therefore, this event is not a precursor and is screened out of the ASP Program.

Dominant Sequence. The dominant accident sequence is Medium Loss of Coolant Accident (MLOCA) Sequence 02 (CDP = 1.7x10-8) that contributes approximately 98% of the total internal events CCDP. Figure 1 in Appendix B illustrates this sequence. The cut sets/sequences that contribute to the top 95% and/or at least 1% of the total internal events CCDP are provided in Appendix A.

The events and important component/system failures in MLOCA Sequence 02 are:

  • Offsite electrical power succeeds,
  • High pressure injection succeeds
  • Low pressure recirculation fails.

REFERENCES

1. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated February 11, 2016 (ML16042A470).
2. Diablo Canyon Power Plant, "LER 275-2015-001 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated March 2, 2015 (ML15061A548).
3. Diablo Canyon Power Plant, "LER 275-2013-005 Both Trains of Residual Heat Removal Inoperable Due to Circumferential Crack on a Socket Weld, dated August 22, 2013 (ML13235A101).
4. U.S. Nuclear Regulatory Commission, Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2015004, dated February 4, 2016 (ML16035A481).
5. Nuclear Regulatory Commission, Diablo Canyon Plant - NRC Integrated Inspection Report 05000275/2014002, dated April 23, 2014 (ML14113A527).

4

LER 275-2015-001 Appendix A: SAPHIRE 8 Worksheet Summary of Conditional Event Changes Event Description Cond Value Nominal Value LPI-RV-8708 Relief Valve 8708 Breaks True False Event Tree Dominant Results Only items contributing at least 1.0% to the total CCDP are displayed.

EVENT TREE CCDP CDP CDP DESCRIPTION MLOCA 1.71E-8 3.85E-11 1.71E-8 Diablo Canyon 1 & 2 Medium Loss of Coolant Accident LLOCA 2.85E-10 6.18E-13 2.85E-10 Diablo Canyon 1 & 2 Large Loss of Coolant Accident Total 1.90E-8 1.48E-9 1.75E-8 Dominant Sequence Results Only items contributing at least 1.0% to the total CCDP are displayed.

EVENT TREE SEQUENCE CCDP CDP CDP DESCRIPTION MLOCA 02 1.71E-8 3.75E-11 1.71E-8 /RPS, /OEP, /HPI, /AFW, /SSC1, LPR LLOCA 3 2.85E-10 2.59E-14 2.85E-10 /OEP, /ACC, LPI Total 1.90E-8 1.48E-9 1.75E-8 Referenced Fault Trees Fault Tree Description LPI LOW PRESSURE INJECTION LPR LOW PRESSURE RECIRCULATION Cut Set Report - MLOCA 02 Only items contributing at least 1% to the total are displayed.

  1. PROB/FREQ TOTAL% CUT SET Total 1.50E-4 100 Displaying 1 Cut Sets. (1 Original) 1 1.50E-4 100.00 IE-MLOCA,<TRUE>

Cut Set Report - LLOCA 3 Only items contributing at least 1% to the total are displayed.

  1. PROB/FREQ TOTAL% CUT SET 1.65E-7 100 Displaying 176 Cut Sets. (176 Original) 1 1.02E-7 61.80 IE-LOOPSC,ACP-CRB-CF-OPSD3 2 4.75E-8 28.84 IE-LOOPSC,RSW-STR-CF-ALL 3 2.60E-9 1.58 IE-LOOPSC,ACP-XHE-XM-EPSXT,EPS-XHE-XL-NR04H,OEP-XHE-XL-NR04HSC,OPR-XHE-XR-CASLT Referenced Events Event Description Probability IE-LLOCA LARGE LOCA 2.50E-6 IE-MLOCA MEDIUM LOCA 1.50E-4 A-1

LER 275-2015-001 Appendix B: Key Event Tree Figure 1: Diablo Canyon MLOCA Event Tree (Sequence 02 Bolded)

B-1

LER 275-2015-001 Appendix C: SPAR Model Modifications LOW PRESSURE INJECTION LPI RWST FAILS TO PROVIDE Relief Valve 8708 Breaks WATER HPI-TNK-FC-RWST 4.37E-07 LPI-RV-8708 False RWST MANUAL VALVE MV 1-1 FAILS FAILURE OF LPI TRAIN B TO HPI-XVM-OC-XVM11 2.02E-06 COLD LEGS 3 & 4 LPI DISCHARGE MOV 8980 FROM RWST FAILS TO LPI-TRNB-F REMAIN OPEN LPI-MOV-OC-8980 8.13E-07 LPI DISCHARGE CHECK VALVE FROM RWST FAILS TO OPEN NYON 1 & 2 FAILURE OF COLD LEGS 3 & 4 RHR MDP 1-2 DISCHARGE EAT REMOVAL CONTROL AOV 637 FAILS TO LPI-CKV-CC-8981 1.07E-05 AIN B REMAIN OPEN Ext LPI-TRNB-F1 LPI-AOV-OC-HCV637 3.13E-06 LPI/RHR DISCHARGE MOV 8809B FAILS TO REMAIN OPEN NO FLOW TO COLD LEG 3 NO FLOW TO COLD LEG 4 LPI-MOV-OC-8809B 8.13E-07 DURING LPI DURING LPI FAILURE OF RHR TRAIN B MOV FCV-641B LPI-CLINJ-CL3-F LPI-CLINJ-CL4-F LPI-MOV-CC-FCV641B 9.63E-04 CCF OF RHR TRAIN A/B MOVs FCV-641A/B FAILURE OF INJECTION TO CCF OF RCS COLD LEG FAILURE OF INJECTION TO CCF OF RCS COLD LEG RCS COLD LEG 3 DISCHARGE CHECK VALVES RCS COLD LEG 4 DISCHARGE CHECK VALVES LPI-MOV-CF-FCV641AB1.85E-05 LPI-RCS-CL3-F1 RCS-CKV-CF-8948ABCD 4.26E-08 LPI-RCS-CL4-F1 RCS-CKV-CF-8948ABCD 4.26E-08 COLD LEG INJECTION CKV COLD LEG INJECTION CKV 8948C FAILS TO OPEN 8948D FAILS TO OPEN HOUSE EVENT: LOCA LOCA OCCURED IN COLD LEG 3 RCS-CKV-CC-8948C 1.07E-05 HOUSE EVENT: LOCA LOCA OCCURED IN COLD LEG 4 RCS-CKV-CC-8948D 1.07E-05 COLD LEG 3 INJECTION CHECK COLD LEG 4 INJECTION CHECK VALVE FROM LPI/RHR TRAINS VALVE FROM LPI/RHR TRAINS HE-LOCA False LOCA-CL3 2.50E-01 FAIL HE-LOCA False LOCA-CL4 2.50E-01 FAIL LPI-CKV-CC-8818C 1.07E-05 LPI-CKV-CC-8818D 1.07E-05 CCF OF LPI/RHR COLD LEG CCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES INJECTION CHECK VAVLES LPI-CKV-CF-ALL 4.26E-08 LPI-CKV-CF-ALL 4.26E-08 Figure 2: Change to LPI Fault Tree (Partial)

LOW PRESSURE RECIRCULATION LPR FAILURE OF LPI SYSTEMS OPERATOR FAILS TO INITIATE DURING RECIRCULATION LPR OPERATION MODE LPR-SYS-F LPI-XHE-XM-RECIRC 2.00E-03 FAILURE OF COLD LEG Relief Valve 8708 Breaks INJECTION DURING LPR LPR-CLINJ-F LPI-RV-8708 False FAILURE OF FLOW FROM FAILURE OF FLOW FROM RHR/LPI TRAIN A DURING LPR RHR/LPI TRAIN B DURING LPR LPR-CLINJA-F LPR-CLINJB Ext FAILURE OF FLOW FROM RHR LPI/RHR DISCHARGE MOV TRN A TO COLD LEGS 1 & 2 8809A FAILS TO REMAIN OPEN LPR-CLINJ12-F LPI-MOV-OC-8809A 8.13E-07 SUMP SUCTION MOV 8982A FAILS TO OPEN NO FLOW TO COLD LEG 2 HPI-MOV-CC-8982A 9.63E-04 DURING LPI CCF OF CONTAINMENT SUMP ISOL MOVs 8982A/B LPR-CLINJ-CL2-F HPI-MOV-CF-8982AB 1.85E-05 RHR MDP 1-1 DISCHARGE CONTROL AOV 638 FAILS TO CCF OF RCS COLD LEG FAILURE OF INJECTION TO CCF OF RCS COLD LEG REMAIN OPEN DISCHARGE CHECK VALVES RCS COLD LEG 2 DISCHARGE CHECK VALVES LPI-AOV-OC-HCV638 3.13E-06 RWST ISOLATION MOV 8700A RCS-CKV-CF-8948ABCD 4.26E-08 LPR-RCS-CL2-F1 RCS-CKV-CF-8948ABCD 4.26E-08 FAILS TO CLOSE COLD LEG INJECTION CKV COLD LEG INJECTION CKV 8948A FAILS TO OPEN 8948B FAILS TO OPEN LPI-MOV-OO-8700A 9.63E-04 CCF OF LPI/RHR RWST RCS-CKV-CC-8948A 1.07E-05 HOUSE EVENT: LOCA LOCA OCCURED IN COLD LEG 2 RCS-CKV-CC-8948B 1.07E-05 ISOLATION MOVs 8700A/B COLD LEG 1 INJECTION CHECK COLD LEG 2 INJECTION CHECK VALVE FROM LPI/RHR TRAINS VALVE FROM LPI/RHR TRAINS LPI-MOV-CF-8700AB 7.78E-06 FAIL HE-LOCA False LOCA-CL2 2.50E-01 FAIL LPI-CKV-CC-8818A 1.07E-05 LPI-CKV-CC-8818B 1.07E-05 CCF OF LPI/RHR COLD LEG CCF OF LPI/RHR COLD LEG INJECTION CHECK VAVLES INJECTION CHECK VAVLES LPI-CKV-CF-ALL 4.26E-08 LPI-CKV-CF-ALL 4.26E-08 Figure 3: Change to LPR Fault Tree (Partial)

C-1