ML17250B238

TMRE Presubmittal NRC

ML17250B238
Person / Time
Site:	Harris
Issue date:	08/30/2017
From:	Duke Energy Progress
To:	Office of Nuclear Reactor Regulation
Brown E A
References
Download: ML17250B238 (18)

Text

1Harris TMRE LAR Presubmittal MeetingAugust 30, 2017 Duke/Harris Participants*John Caves, Licensing Engineer*Scott Brinkman, PRA Engineer

• Alex Holder, Design Engineer

• Pat Chriscoe, Harris Design Engineering Manager

• Melvin Arey, Duke Design Engineering Manager

• Art Zaremba, Duke Fleet Licensing Manager 2

2 Agenda *Purpose*Background-Design and Current Licensing Basis-Discovery Results*TMRE Evaluation*Conclusions 3 Purpose *License Amendment Request seeks NRC approval to amend design and licensing bases described in the FSAR to add a methodology to be utilized for determining whether unprotected systems and components require protecti on from tornado missiles. TMRE would be an alternate methodology to meet regulatory requirements.*Requested action would restore full qualification for existing non-conforming conditions*Methodology would not be used for future design modifications 4

3 Purpose Proposed FSAR changes*ReviseSection 1.8 discussion regarding RG 1.117 to say:The SHNPP project complies with thisguide except for conditions deemed acceptable using Tornado Missile Risk Evaluator (TMRE )

methodology that was approved by the NRC in [Document Name, ADAMS number]. TMRE is a methodology which can only be utilized for determining whether unprotected systems and components require protection from tornado missiles, and is not applicable to future design modifications.

5 Purpose Proposed FSAR changes (cont'd)Revise Section 3.5.1.4 to include:

• The NRC approved a license amendment in [Document Name, ADAMS number, add specific reference] for SHNPP that authorized use of the Tornado Missile Risk Evaluator (TMRE) methodology. TMRE is a methodology which can only be utilized for determining whether unprotected systems and components require protection from tornado missiles, and is not applicable to future design modifications.*- As a result, SHNPP is in compliance with RG 1.117, Rev. 1 except for conditions of low importance to safety that were demonstrated to be acceptable using TMRE methodology

• Add Table 3.5.1-2a, Safety-related Structures, Systems and Components that Do Not Require Protection From Tornado Generated Missiles Based on NEI 17-02 Tornado Missile Risk Evaluator Methodology 6

4 Background ShearonHarris Nuclear Power Plant, Unit 1*3-loop Westinghouse PWR

• EBASCO prime contractor

• Construction Permit issued January 1978

• Operating License issued January 1987

• Commercial operations began May 2, 1987

• Standard Technical Specifications (Not ITS) 7 Background Design and Licensing Basis*Construction Permit Issued January 27, 1978*Licensed to 10 CFR 50, Appendix Aas published on July 7, 1971-GDC 2: Structures, systems, and components important to safety shall be designed to withstand the effects of natural phenomena such as earthquakes, tornadoes- without loss of capability to perform their safety functions--GDC 4: Structures, systems, and components important to safety shall be designed to accommodate the effects of, and to be compatible with, the environmental conditions associated with normal operation, maintenance, testing, and postulated accidents including loss-of-coolant accidents. These structures, systems, and components shall be appropriately protected against dynamic effects, including the effects of missiles, pipe whipping, and discharging effects, that may result from equipment failures and from events and conditions outside the nuclear power unit-8 5 Background Design and Licensing Basis (Cont'd)NUREG 1038, Harris SER: Section 3.5.1*The tornado missile spectrum was reviewed in accordance with SRP 3.5.1.4 (NUREG-0800). Conformance with the acceptance criteria formed the basis for the staff evaluation of the tornado-missile spectrum with respect to the applicable regulations of 10 CFR 50. The portions of the SRP review procedures concerning the probability per year of damage to safety-related systems as a result of missiles were not used in the staff review.*GDC 2 requires that structures, systems, and components essential to safety be designed to withstand the effects of natural phenomena, and GDC 4 requires that these same plant features be protected against missiles generated by natural phenomena. The missiles generated by natural phenomena of concern are those resulting from tornadoes. The applicant has identified a spectrum of missiles for a tornado Region I site as identified in RG 1.76, Position C.l, and has utilized missile Spectrum A of SRP 3.5.1.4 as the basis for the design of tornado-missile protection. *The applicant has identified all safety-related structures, systems, and components requiring protection from externally generated missiles. All safety-related structures are designed to withstand postulated tornado-generated missiles without damage to the safety-related equipment they contain.

9 Background Design and Licensing Basis (Cont'd)NUREG 1038, Harris SER, Section 3.5.2*The structures, systems, and components to be protected from externally tornado-generated missiles were reviewed in accordance with SRP 3.5.2 (NUREG-0800)*The applicant has identified all safety-related structures, systems, and components requiring protection from externally generated missiles. All safety-related structures are designed to withstand postulated tornado-generated missiles without damage to the safety-related equipment they contain. All safety-related systems and components and stored fuel are located within tornado-missile-protected structures or are provided with tornado-missile barriers. Buried safety-related systems such as piping and electrical circuits are protected by the overlaying earth.

10 6 Background Design and Licensing Basis (Cont'd)NUREG 1038, Harris SER, Section 3.5.2 (cont'd)Based on the above, the staff concludes that the applicant's list of safety-related structures, systems, and components to be protected from externally generated missiles and the provisions in the plant design providing this protection are in accordance with the requirements of GDC 2 and 4 with respect to missile and environmental effects and the guidelines of RG 1.13, Position C.2; RG 1.27, Positions C.2 and C.3; and RG 1.117, Positions C.1 through C.3, concerning protection of safety-related plant features, including stored fuel and the ultimate heat sink, from tornado missiles.

11 Background Design and Licensing Basis (Cont'd)*UFSAR Section 1.8, Conformanceto NRC Regulatory Guides-RG 1.76, Design Basis Tornado for Nuclear Power Plants*Harris complies with RG 1.76, Rev. 0. *The Harris Nuclear Plant adopts the guidance provided in Regulatory Guide 1.76 Revision 1 as an optional design basis for new system modifications occurring after March 2007.-RG 1.117, Tornado Design Classification, Rev. 1*The SHNPP project complies with this guide.

12 7 Background Design and Licensing Basis (Cont'd)UFSAR Section 2.3, Meteorology*The SHNPP site lies within Region I for determining the Design Basis Tornado (Reference 2.3.1-2). The Region I associated Design Basis Tornado parameters are as follows:Maximum wind speed 360 mphRotational wind speed 290 mph Translational speed 70 mph maximum; 5 mph minimum Radius of maximum rotational speed 150 ft.

Pressure drop 3.0 psi Rate of pressure drop 2.0 psi/sec.*Calculation of the tornado strike probability: Consequently, one would expect a tornado strike every 944 years.

13 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.1 Compliance with NRC GDC

3.1.2 Criterion

2 -Design Ba ses for Protection Against Natural Phenomena*The structures, systems and components important to safety are protected from or designed to withstand the effects of natural phenomena without loss of capability to perform their safety functions.*The most severe natural phenomena considered in the design in terms of induced stresses are the safe shutdown earthquake (SSE) and the design basis tornado. Structures, systems and components essential to the safe shutdown of the plant are designed to withstand the effects of the most severe natural phenomena, including floods, hurricanes, tornadoes or the SSE, as appropriate.

14 8 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.1 Compliance with NRC GDC

• 3.1.4 Criterion 4 -Environmental and Dynamic Effects Design Bases-Structures, systems, and components are designed, arranged or protected such that the external missiles will not cause an accident which could result in the release of significant amounts of radioactivity or prevent safe plant shutdown.-Failure of high pressure lines external to the Containment will not cause a LOCA, or prevent safe shutdown of the Unit.

15 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.3 Wind and Tornado LoadingsStructures, systems, or components whose failure, due to design wind loading, tornado wind loading, or associated missiles, could prevent safe shutdown of the reactor, or result in significant uncontrolled release of radioactivity from the unit, are protected from such failure by one of the following methods:a) the structure or component is designed to withstand design wind, tornado wind and tornado generated missiles, orb) the system or components are housed within a structure which is designed to withstand the design wind, tornado wind and tornado generated missiles.Table 3.3.0-1 lists all safety re lated structures and the method of wind/tornado protection as applicable. The Ta or Tb designation in the table refers to item a or b above.

16 9 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5 Missile Protection 3.5.0 The following criteria were adopted for assessing the plant's capability to withstand the missiles postulated in Sections 3.5.1.1 and 3.5.1.2:a) No perforation of the Containment Building (i.e., no loss of leak tightness)b) Assurance that the plant can be maintained in a safe shutdown conditionc) Offsite exposure within 10 CFR 100 guidelines for missile damage resulting in radioactivity release.

17 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5 Missile Protection

3.5.0 Missile

Selection and Description Barriers are provided for missiles which cannot be oriented to take advantage of existing structures and which could cause failure of safety-related structures or components. Generally, these barriers are designed to contain or deflect the missiles from the safety related feature; but, as a minimum requirement, penetration of the missile through the barrier reduces the missile energy to levels which cannot cause failure of the safety feature function. Wherever possible, advantage is taken of walls and structures arising from functional requirements, other than missile considerations, by judicious arrangement of equipment.

18 10 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5 Missile Protection

3.5.0 Missile

Selection and Description Sources considered capable of generating potential missiles are as follows:a) Tornadoes All Seismic Category I structures are designed to withstand the tornado generated missiles specified in the "Missile Spectrum" of the Standard Review Plan 3.5.1.4 (Rev. 0) and listed in Table 3.5.1-3. All Seismic Category I structures are designed with f'c=4000 psi concrete and a minimum thickness of 24 inches in roofs and walls.

19 Background Design and Licensing Basis (Cont'd)UFSAR Table 3.5.1-3, Tornado-generated Missile SpectrumMissile WeightArea (ft 2)Velocity (fps)1) Wood Plank 200 .333 4224 in. x 12 in. x 12 ft. 2) Steel Pipe 3 in. x 10 ft. 78 .0155 211schedule 403) Steel Rod 1 in. x 3 ft. 8 .00545 317

4) Steel Pipe 6 in. x 15 ft.285 .0388 211schedule 405) Steel Pipe 12 in. x 15 ft. 743 .1014 211schedule 406) Utility Pole 131/2 in. x 35 ft. 1490 .994 211

7) Automobile 4000 20 106These missiles are considered to be capable of striking in all directions. Missiles 1, 2, 3, 4 and 5 are considered at all elevations and Missiles 6 and 7 for elevations up to 30 feet above the highest grade level within 1/2 mile of the facility structures.

20 11 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5.1.4 Missiles Generated by Natural Phenomena*All structures that house systems and components to be protected against tornado generated missiles and the types of protection have been presented in Table 3.5.1-2.*The characteristics of the tornado generated missiles considered in the plant design are given in Table 3.5.1-3. The missiles listed in this table are considered as striking in all directions.

21 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5.1.4 (Cont'd)

Structures, systems, and components whose failure could prevent safe shutdown of t he reactor or result in significant uncontrolled release of radioactivity from the Unit are protected from such failure due to design tornado and wind loading of missiles by the following methods:a) Structure or component is designed to withstand tornado loading or tornado missile.b) Component is housed within a structure which is designed to withstand the tornado loading and tornado missile.

22 12 Background Design and Licensing Basis (Cont'd)UFSAR Section 3.5.2 SSCs to be Protected from Externally Generated MissilesStructures, systems, and components whose failure could prevent safe shutdown of the reactor or result in significant uncontrolled release of radioactivity from the Unit are protected against externally generated missiles; they are listed in Table 3.5.1 Most safety-related systems are located within structures that are specifically designed and constructed to withstand external missiles; therefore they are adequately protected. The penetrations, access openings, and HVAC air intake and exhaust openings in these safety-related structures are protected by steel doors and/or concrete barriers designed to withstand external missiles.

23 Background *RIS 2015-06 recommended licensees confirm compliance with CLB for tornado missile protection*Harris identified non-conforming conditions during 2016 discovery walkdowns-Entered into Corrective Action Program-Assessed for Operability

-Enforcement Guidance Memorandum (EGM)15-002 and DSS-ISG-2016-01 invoked as appropriate-Conditions meeting reporting criteria reported in EN 52072 and Licensee Event Report 2016-001 (ADAMS Accession No. ML16245A804). *Examples of non-conforming conditions in safety-related systems -Emergency Diesel Generator -missile could penetrate steel door to impact fuel line-Emergency Service Water -outside air temperature sensors that control pump room ventilation not protected -Essential Services Chilled Water -chill water expansion tanks not protected

-Main Steam Safety Valves -Vent stacks exposed 24 13 Background *RIS documented opportunity to disposition non-compliantconditions using NRC approved risk-informed methodology*NEI/Industry developed Tornado Missile Risk Evaluator methodology-NEI 17-02, TMRE Industry Guidance Document, was provided to NRC staff for information on June 23, 2017 and discussed at July 6, 2017, public meeting-Appendices A through E provide technical bases for the methodology-NEI 17-02 will be revised and provided to the NRC

-Revised methodology will be incorporated by reference into License Amendment Request 25TMRE Evaluation *Standard PRA practices used for non-TMRE-specific analyses*Evaluation did not deviate from TMRE guidance

• Missile count assumption in TMRE confirmed conservative -Site missile count of 139,000 < 240,000 in TMRE*Some issues dispositioned as negligible impact consistent with standard PRA practices with justificationFor example, PRA room heat up analysis shows the battery room ventilation is not needed for success in the PRA model. This non-conformance is evaluated as having a negligible impact on risk from tornado missiles.*Site-specific tornado hazard curve developed IAW TMRE 26 14TMRE Evaluation 27y = -22.8ln(x) -98.333R² = 0.9985 0 50 100 150 200 250 3001.00E-081.00E-071.00E-061.00E-051.00E-041.00E-03 HNP HNP Log. (HNP)

F'2 F'3 F'4 F'5Harris Tornado Hazard CurveTMRE Evaluation *Operator Actions reviewed to assess feasibility following tornado-Most retained because they were performed in Main Control Room or Reactor Auxiliary Building-Some disallowed, such as manual control of PORV which would require travel through exposed path 28 15TMRE Evaluation Example Exposed Equipment Failure Probabilities Turbine Driven Aux Feed Pump exhaust pipe

Area: 16 ft 2Elevation: < 30' Robust type J (Not Robust) 29 Robust Missiles %Missile Count F'-ScaleMIPEEFP Event NameEEFP100%15500021.10E-10FHWTDPEXF22.73E-04100%15500033.60E-10FHWTDPEXF38.93E-04100%20500046.30E-10FHWTDPEXF42.07E-03100%24000051.60E-09FHWTDPEXF56.14E-03100%24000062.40E-09FHWTDPEXF69.22E-03TMRE Evaluation Example Exposed Equipment Failure Probabilities EDG Fuel Oil Line

Area: 2 ft 2Elevation: < 30' Robust type G (Partial prot ection from steel door) 30 Robust Missiles %Missile Count F'-ScaleMIPEEFP Event NameEEFP45%6975021.10E-10PHWDGFO_F21.53E-0545%6975033.60E-10PHWDGFO_F35.02E-0545%9225046.30E-10PHWDGFO_F41.16E-0445%10800051.60E-09PHWDGFO_F53.46E-0445%10800062.40E-09PHWDGFO_F65.18E-04 16TMRE Evaluation PRA Modeling*Selected operator actions failed -Examples *Selected equipment failed from high winds equipment List -Examples 31Event NameDescriptionOPER-27FAILURE TO LOCALLY OPERATE ANY SG PORVOPER-43FAILURE TO RE-ENERGIZE BUS 1A1 (NVDCS CHARGER) AND RECOVER OFFSITE AC OPER-45FAILURE TO LOCALLY ALIGN OFFSITE AC BREAKERS OPER-74OPERATOR FAILS TO OPEN PUMPHOUSE INNER DOORSEvent NameDescriptionTPDE0001FNDSDG FAILS TO RUNTPDE0001NNDSDG FAILS TO STARTACP1ANNSSRIA COMPRESSOR 1A-NNS FAILS TO RUNTMRE Evaluation Quantification ResultsInitiating Event Contribution 32 Result Type CDFper Year LERFper YearDegraded5.44E-75.77E-8Compliant5.22E-75.55E-8Delta2.2E-82.2E-9Event NameFrequency% CDF Contribution Degraded% CDF Contribution Compliant Description%TMRE_F21.10E-0473.8%75.3%TMRE Tornado Event F'2%TMRE_F32.75E-0519.4%18.9%TMRE Tornado Event F'3%TMRE_F47.05E-065.4%4.8%TMRE Tornado Event F'4

%TMRE_F51.33E-061.3%0.9%TMRE Tornado Event F'5

%TMRE_F67.09E-080.04%0.02%TMRE Tornado Event F'6 17TMRE Evaluation Target Contributions -Examples 33Target Group CDF Contribution Degraded CDF Contribution CompliantEmergency Diesel Generator Train A1.37E-080Emergency Diesel Generator Train B8.08E-090 RWST8.63E-097.90E-09Emergency Service Water Train A00Emergency Service Water Train B2.23E-100 MSIV Bypass A1.27E-100 MSIV Bypass B00 MSIV Bypass C6.96E-110 Conclusions*All non-conforming conditions met acceptance criteria for excluding tornado missile protection as low importance to safety*Range of delta CDF impact ranged from below the truncation limit to 1.4E-8/year*Aggregate impact of non-conformances was 2.2E-8/year*No deviations from TMRE methodology were identified

• LAR will address five key principles of risk-informed decision making (RG 1.174)-Meets current regulations-Consistent with and maintains defense-in-depth

-Maintains safety margins

-Increase in risk is small and consistent with NRC Safety Goal Policy

-Impact will be monitored*PRA quality -No open findings on internal events model 34 18 35 End of Presentation