ML18053A727

Duke Energy Wsl III Units 1 & 2 COL (Updated Final Safety Analysis Report) Rev.1 - UFSAR Chapter 05 - Reactor Coolant System and Connected Systems

ML18053A727
Person / Time
Site:	Lee
Issue date:	12/19/2017
From:	Donahue J Duke Energy Carolinas
To:	Office of New Reactors
Hughes B
References
DUKE, DUKE.SUBMISSION.15, LEE.NP, LEE.NP.1
Download: ML18053A727 (197)

Text

Chapter 5 UFSAR Table of Contents Chapter 1 Introduction and General Description of the Plant Chapter 2 Site Characteristics Chapter 3 Design of Structures, Components, Equipment and Systems Chapter 4 Reactor Chapter 5 Reactor Coolant System and Connected Systems Chapter 6 Engineered Safety Features Chapter 7 Instrumentation and Controls Chapter 8 Electric Power Chapter 9 Auxiliary Systems Chapter 10 Steam and Power Conversion Chapter 11 Radioactive Waste Management Chapter 12 Radiation Protection Chapter 13 Conduct of Operation Chapter 14 Initial Test Program Chapter 15 Accident Analyses Chapter 16 Technical Specifications Chapter 17 Quality Assurance Chapter 18 Human Factors Engineering Chapter 19 Probabilistic Risk Assessment UFSAR Formatting Legend Color Description Original Westinghouse AP1000 DCD Revision 19 content Departures from AP1000 DCD Revision 19 content Standard FSAR content Site-specific FSAR content Linked cross-references (chapters, appendices, sections, subsections, tables, figures, and references)

5-i Revision 1 WLS 1&2 - UFSAR TABLE OF CONTENTS Section Title Page CHAPTER 5 REACTOR COOLANT SYSTEM AND CONNECTED SYSTEMS................ 5.1-1 5.1 Summary Description.................................................................................... 5.1-1 5.1.1 Design Bases............................................................................... 5.1-1 5.1.2 Design Description....................................................................... 5.1-2 5.1.3 System Components.................................................................... 5.1-3 5.1.3.1 Reactor Vessel.......................................................... 5.1-3 5.1.3.2 AP1000 Steam Generator......................................... 5.1-4 5.1.3.3 Reactor Coolant Pumps............................................. 5.1-4 5.1.3.4 Primary Coolant Piping.............................................. 5.1-5 5.1.3.5 Pressurizer................................................................. 5.1-5 5.1.3.6 Pressurizer Safety Valves.......................................... 5.1-5 5.1.3.7 Reactor Coolant System Automatic Depressurization Valves........................................................................ 5.1-6 5.1.4 System Performance Characteristics........................................... 5.1-6 5.1.4.1 Best-Estimate Flow.................................................... 5.1-6 5.1.4.2 Minimum Measured Flow........................................... 5.1-6 5.1.4.3 Thermal Design Flow................................................. 5.1-7 5.1.4.4 Mechanical Design Flow............................................ 5.1-7 5.1.5 Combined License Information..................................................... 5.1-7 5.2 Integrity of Reactor Coolant Pressure Boundary........................................... 5.2-1 5.2.1 Compliance with Codes and Code Cases.................................... 5.2-1 5.2.1.1 Compliance with 10 CFR 50.55a............................... 5.2-1 5.2.1.2 Applicable Code Cases............................................. 5.2-3 5.2.1.3 Alternate Classification.............................................. 5.2-3 5.2.2 Overpressure Protection............................................................... 5.2-4 5.2.2.1 Design Bases............................................................. 5.2-4 5.2.2.2 Design Evaluation...................................................... 5.2-6 5.2.2.3 Piping and Instrumentation Diagrams........................ 5.2-6 5.2.2.4 Equipment and Component Description.................... 5.2-6 5.2.2.5 Mounting of Pressure Relief Devices......................... 5.2-7 5.2.2.6 Applicable Codes and Classification.......................... 5.2-7 5.2.2.7 Material Specifications............................................... 5.2-7 5.2.2.8 Process Instrumentation............................................ 5.2-7 5.2.2.9 System Reliability...................................................... 5.2-7 5.2.2.10 Testing and Inspection............................................... 5.2-8 5.2.3 Reactor Coolant Pressure Boundary Materials............................ 5.2-8 5.2.3.1 Materials Specifications............................................. 5.2-8 5.2.3.2 Compatibility with Reactor Coolant............................ 5.2-9 5.2.3.3 Fabrication and Processing of Ferritic Materials...... 5.2-11 5.2.3.4 Fabrication and Processing of Austenitic Stainless Steel......................................................................... 5.2-12 5.2.3.5 Threaded Fastener Lubricants................................. 5.2-16 5.2.4 Inservice Inspection and Testing of Class 1 Components.......... 5.2-17 5.2.4.1 System Boundary Subject to Inspection.................. 5.2-17 5.2.4.2 Arrangement and Inspectability............................... 5.2-19 5.2.4.3 Examination Techniques and Procedures............... 5.2-20 5.2.4.4 Inspection Intervals.................................................. 5.2-22 5.2.4.5 Examination Categories and Requirements............ 5.2-22

5-ii Revision 1 WLS 1&2 - UFSAR TABLE OF CONTENTS (CONTINUED)

Section Title Page 5.2.4.6 Evaluation of Examination Results.......................... 5.2-22 5.2.4.7 System Leakage and Hydrostatic Pressure Tests.... 5.2-22 5.2.4.8 Relief Requests....................................................... 5.2-22 5.2.4.9 Preservice Inspection of Class 1 Components........ 5.2-23 5.2.4.10 Program Implementation......................................... 5.2-23 5.2.5 Detection of Leakage Through Reactor Coolant Pressure Boundary.................................................................................... 5.2-23 5.2.5.1 Collection and Monitoring of Identified Leakage...... 5.2-23 5.2.5.2 Intersystem Leakage Detection............................... 5.2-24 5.2.5.3 Collection and Monitoring of Unidentified Leakage.................................................................... 5.2-26 5.2.5.4 Safety Evaluation..................................................... 5.2-30 5.2.5.5 Tests and Inspections.............................................. 5.2-30 5.2.5.6 Instrumentation Applications.................................... 5.2-30 5.2.5.7 Technical Specification............................................ 5.2-31 5.2.6 Combined License Information Items......................................... 5.2-31 5.2.6.1 ASME Code and Addenda....................................... 5.2-31 5.2.6.2 Plant-Specific Inspection Program........................... 5.2-31 5.2.6.3 Response to Unidentified Reactor Coolant System Leakage Inside Containment................................... 5.2-32 5.2.7 References................................................................................. 5.2-32 5.3 Reactor Vessel.............................................................................................. 5.3-1 5.3.1 Reactor Vessel Design................................................................. 5.3-1 5.3.1.1 Safety Design Bases................................................. 5.3-1 5.3.1.2 Safety Description...................................................... 5.3-1 5.3.1.3 System Safety Evaluation.......................................... 5.3-3 5.3.1.4 Inservice Inspection/Inservice Testing....................... 5.3-3 5.3.2 Reactor Vessel Materials.............................................................. 5.3-3 5.3.2.1 Material Specifications............................................... 5.3-3 5.3.2.2 Special Processes Used for Manufacturing and Fabrication................................................................. 5.3-3 5.3.2.3 Special Methods for Nondestructive Examination..... 5.3-4 5.3.2.4 Special Controls for Ferritic and Austenitic Stainless Steels......................................................................... 5.3-5 5.3.2.5 Fracture Toughness................................................... 5.3-5 5.3.2.6 Material Surveillance................................................. 5.3-5 5.3.2.7 Reactor Vessel Fasteners....................................... 5.3-13 5.3.3 Pressure-Temperature Limits..................................................... 5.3-13 5.3.3.1 Limit Curves............................................................. 5.3-13 5.3.3.2 Operating Procedures.............................................. 5.3-14 5.3.4 Reactor Vessel Integrity............................................................. 5.3-14 5.3.4.1 Design...................................................................... 5.3-14 5.3.4.2 Materials of Construction......................................... 5.3-16 5.3.4.3 Fabrication Methods................................................ 5.3-16 5.3.4.4 Inspection Requirements......................................... 5.3-16 5.3.4.5 Shipment and Installation........................................ 5.3-16 5.3.4.6 Operating Conditions............................................... 5.3-17 5.3.4.7 Inservice Surveillance.............................................. 5.3-17

5-iii Revision 1 WLS 1&2 - UFSAR TABLE OF CONTENTS (CONTINUED)

Section Title Page 5.3.5 Reactor Vessel Insulation........................................................... 5.3-19 5.3.5.1 Reactor Vessel Insulation Design Bases................. 5.3-19 5.3.5.2 Description of Insulation.......................................... 5.3-20 5.3.5.3 Description of External Vessel Cooling Flooded Compartments......................................................... 5.3-20 5.3.5.4 Determination of Forces on Insulation and Support System..................................................................... 5.3-21 5.3.5.5 Design Evaluation.................................................... 5.3-21 5.3.6 Combined License Information................................................... 5.3-22 5.3.6.1 Pressure-Temperature Limit Curves........................ 5.3-22 5.3.6.2 Reactor Vessel Materials Surveillance Program..... 5.3-22 5.3.6.3 Surveillance Capsule Lead Factor and Azimuthal Location Confirmation.............................................. 5.3-22 5.3.6.4 Reactor Vessel Materials Properties Verification..... 5.3-22 5.3.6.5 Reactor Vessel Insulation........................................ 5.3-22 5.3.6.6 Inservice Inspection of Reactor Vessel Head Weld Buildup..................................................................... 5.3-22 5.3.7 References................................................................................. 5.3-22 5.4 Component and Subsystem Design.............................................................. 5.4-1 5.4.1 Reactor Coolant Pump Assembly................................................. 5.4-1 5.4.1.1 Design Bases............................................................. 5.4-1 5.4.1.2 Pump Assembly Description...................................... 5.4-1 5.4.1.3 Design Evaluation...................................................... 5.4-3 5.4.1.4 Tests and Inspections................................................ 5.4-8 5.4.2 Steam Generators........................................................................ 5.4-8 5.4.2.1 Design Bases............................................................. 5.4-8 5.4.2.2 Design Description..................................................... 5.4-9 5.4.2.3 Design Evaluation.................................................... 5.4-11 5.4.2.4 Steam Generator Materials...................................... 5.4-14 5.4.2.5 Steam Generator Inservice Inspection.................... 5.4-17 5.4.2.6 Quality Assurance.................................................... 5.4-18 5.4.3 Reactor Coolant System Piping.................................................. 5.4-19 5.4.3.1 Design Bases........................................................... 5.4-19 5.4.3.2 Design Description................................................... 5.4-20 5.4.3.3 Design Evaluation.................................................... 5.4-22 5.4.3.4 Material Corrosion/Erosion Evaluation.................... 5.4-22 5.4.3.5 Test and Inspections................................................ 5.4-23 5.4.4 Main Steam Line Flow Restriction.............................................. 5.4-23 5.4.4.1 Design Bases........................................................... 5.4-23 5.4.4.2 Design Description................................................... 5.4-24 5.4.4.3 Design Evaluation.................................................... 5.4-24 5.4.4.4 Inspections............................................................... 5.4-24 5.4.5 Pressurizer................................................................................. 5.4-24 5.4.5.1 Design Bases........................................................... 5.4-24 5.4.5.2 Design Description................................................... 5.4-25 5.4.5.3 Design Evaluation.................................................... 5.4-28 5.4.5.4 Tests and Inspections.............................................. 5.4-30

5-iv Revision 1 WLS 1&2 - UFSAR TABLE OF CONTENTS (CONTINUED)

Section Title Page 5.4.6 Automatic Depressurization System Valves............................... 5.4-30 5.4.6.1 Design Bases........................................................... 5.4-31 5.4.6.2 Design Description................................................... 5.4-31 5.4.6.3 Design Verification................................................... 5.4-32 5.4.6.4 Inspection and Testing Requirements..................... 5.4-32 5.4.7 Normal Residual Heat Removal System.................................... 5.4-32 5.4.7.1 Design Bases........................................................... 5.4-33 5.4.7.2 System Description.................................................. 5.4-36 5.4.7.3 Component Description........................................... 5.4-39 5.4.7.4 System Operation and Performance....................... 5.4-41 5.4.7.5 Design Evaluation.................................................... 5.4-43 5.4.7.6 Inspection and Testing Requirements..................... 5.4-44 5.4.7.7 Instrumentation Requirements................................. 5.4-44 5.4.8 Valves......................................................................................... 5.4-45 5.4.8.1 Design Bases........................................................... 5.4-45 5.4.8.2 Design Description................................................... 5.4-48 5.4.8.3 Design Evaluation.................................................... 5.4-49 5.4.8.4 Tests and Inspections.............................................. 5.4-49 5.4.8.5 Preoperational Testing............................................. 5.4-50 5.4.9 Reactor Coolant System Pressure Relief Devices..................... 5.4-52 5.4.9.1 Design Bases........................................................... 5.4-53 5.4.9.2 Design Description................................................... 5.4-53 5.4.9.3 Design Evaluation.................................................... 5.4-53 5.4.9.4 Tests and Inspections.............................................. 5.4-54 5.4.10 Component Supports.................................................................. 5.4-55 5.4.10.1 Design Bases........................................................... 5.4-55 5.4.10.2 Design Description................................................... 5.4-55 5.4.10.3 Design Evaluation.................................................... 5.4-57 5.4.10.4 Tests and Inspections.............................................. 5.4-57 5.4.11 Pressurizer Relief Discharge...................................................... 5.4-57 5.4.11.1 Design Bases........................................................... 5.4-58 5.4.11.2 System Description.................................................. 5.4-58 5.4.11.3 Safety Evaluation..................................................... 5.4-58 5.4.11.4 Instrumentation Requirements................................. 5.4-59 5.4.11.5 Inspection and Testing Requirements..................... 5.4-59 5.4.12 Reactor Coolant System High Point Vents................................. 5.4-59 5.4.12.1 Design Bases........................................................... 5.4-60 5.4.12.2 System Description.................................................. 5.4-60 5.4.12.3 Safety Evaluation..................................................... 5.4-61 5.4.12.4 Inspection and Testing Requirements..................... 5.4-62 5.4.12.5 Instrumentation Requirements................................. 5.4-62 5.4.13 Core Makeup Tank..................................................................... 5.4-62 5.4.13.1 Design Bases........................................................... 5.4-62 5.4.13.2 Design Description................................................... 5.4-63 5.4.13.3 Design Evaluation.................................................... 5.4-63 5.4.13.4 Material Corrosion/Erosion Evaluation.................... 5.4-63 5.4.13.5 Test and Inspections................................................ 5.4-64

5-v Revision 1 WLS 1&2 - UFSAR TABLE OF CONTENTS (CONTINUED)

Section Title Page 5.4.14 Passive Residual Heat Removal Heat Exchanger...................... 5.4-64 5.4.14.1 Design Bases........................................................... 5.4-64 5.4.14.2 Design Description................................................... 5.4-65 5.4.14.3 Design Evaluation.................................................... 5.4-65 5.4.14.4 Material Corrosion/Erosion Evaluation.................... 5.4-66 5.4.14.5 Testing and Inspections........................................... 5.4-66 5.4.15 Combined License Information................................................... 5.4-66 5.4.16 References................................................................................. 5.4-67

5-vi Revision 1 WLS 1&2 - UFSAR LIST OF TABLES Table Number Title Page 5.1-1 Principal System Pressures, Temperatures, and Flow Rates....................... 5.1-8 5.1-2 Nominal System Design and Operating Parameters..................................... 5.1-9 5.1-3 Thermal-Hydraulic Parameters................................................................... 5.1-10 5.2-1 Reactor Coolant Pressure Boundary Materials Specifications.................... 5.2-33 5.2-2 Reactor Coolant Water Chemistry Specifications....................................... 5.2-39 5.2-3 ASME Code Cases..................................................................................... 5.2-40 5.3-1 Maximum Limits for Elements of the Reactor Vessel.................................. 5.3-24 5.3-2 Reactor Vessel Quality Assurance Program............................................... 5.3-25 5.3-3 End-of-Life RTNDT and Upper Shelf Energy Projections............................. 5.3-27 5.3-4 Reactor Vessel Material Surveillance Program........................................... 5.3-28 5.3-5 Reactor Vessel Design Parameters............................................................ 5.3-29 5.4-1 Reactor Coolant Pump Design Parameters................................................ 5.4-68 5.4-2 Not Used..................................................................................................... 5.4-69 5.4-3 Reactor Coolant Pump Quality Assurance Program................................... 5.4-70 5.4-4 Steam Generator Design Requirements..................................................... 5.4-71 5.4-5 Steam Generator Design Parameters (Nominal Values)............................ 5.4-72 5.4-6 Steam Generator Quality Assurance Program............................................ 5.4-73 5.4-7 Reactor Coolant System Piping Design...................................................... 5.4-74 5.4-8 Reactor Coolant System Piping Quality Assurance Program..................... 5.4-75 5.4-9 Pressurizer Design Data............................................................................. 5.4-76 5.4-10 Pressurizer Heater Group Parameters........................................................ 5.4-77 5.4-11 Reactor Coolant System Design Pressure Settings.................................... 5.4-78 5.4-12 Pressurizer Quality Assurance Program..................................................... 5.4-79 5.4-13 Design Bases for Normal Residual Heat Removal System Operation........ 5.4-80 5.4-14 Normal Residual Heat Removal System Component Data......................... 5.4-81 5.4-15 Reactor Coolant System Valve Design Parameters.................................... 5.4-82 5.4-16 Reactor Coolant System Motor-operated Valves Design Opening and Closing Pressures....................................................................................... 5.4-83 5.4-17 Pressurizer Safety Valves - Design Parameters........................................ 5.4-84 5.4-18 Reactor Vessel Head Vent System Design Parameters............................. 5.4-85

5-vii Revision 1 WLS 1&2 - UFSAR LIST OF FIGURES Figure Number Title Page 5.1-1 Reactor Coolant System Schematic Flow Diagram.................................... 5.1-11 5.1-2 Reactor Coolant Loops - Isometric View.................................................... 5.1-12 5.1-3 Reactor Coolant System - Loop Layout....................................................... 5.1-13 5.1-4 Reactor Coolant System - Elevation........................................................... 5.1-14 5.1-5 Reactor Coolant System Piping and Instrumentation Diagram (Sheet 1 of 3)................................................................................................ 5.1-15 5.1-5 Reactor Coolant System Piping and Instrumentation Diagram (Sheet 2 of 3)................................................................................................ 5.1-16 5.1-5 Reactor Coolant System Piping and Instrumentation Diagram (Sheet 3 of 3)............................................................................................... 5.1-17 5.2-1 Leak Detection Approach............................................................................ 5.2-41 5.3-1 Reactor Vessel............................................................................................ 5.3-30 5.3-2 AP1000 Reactor Coolant System Heatup Limitations (Heatup Rate Up to 50° and 100°F/hour) Representative for the First 54 EFPY (Without Margins for Instrumentation Errors)............................................................. 5.3-31 5.3-3 AP1000 Reactor Coolant System Cooldown Limitations (Cooldown Rates up to 50° and 100°F/hour) Representative for the First 54 EFPY (Without Margins for Instrumentation Errors)............................................................. 5.3-32 5.3-4 AP1000 Reactor Vessel Surveillance Capsules Locations......................... 5.3-33 5.3-5 Reactor Vessel Key Dimensions Plan View................................................ 5.3-34 5.3-6 Reactor Vessel Key Dimensions, Side View............................................... 5.3-35 5.3-7 Schematic of Reactor Vessel Insulation...................................................... 5.3-36 5.3-8 RCS Flooded Compartments During Ex-Vessel Cooling............................ 5.3-37 5.3-9 Door Between RCDT Room and Reactor Cavity Compartment.................. 5.3-38 5.4-1 Reactor Coolant Pump................................................................................ 5.4-86 5.4-2 Steam Generator......................................................................................... 5.4-87 5.4-3 Support Plate Geometry (Trifoil Holes)....................................................... 5.4-88 5.4-4 Surge Line................................................................................................... 5.4-89 5.4-5 Pressurizer.................................................................................................. 5.4-90 5.4-6 Normal Residual Heat Removal System..................................................... 5.4-91 5.4-7 Normal Residual Heat Removal System Piping and Instrument Diagram.... 5.4-92 5.4-8 Reactor Vessel Head Vent System............................................................. 5.4-93

5.1-1 Revision 1 WLS 1&2 - UFSAR Chapter 5 Reactor Coolant System and Connected Systems 5.1 Summary Description This section describes the reactor coolant system (RCS) and includes a schematic flow diagram of the reactor coolant system (Figure 5.1-1), an isometric view of the reactor coolant loops and major components (Figure 5.1-2), a sketch of the loop layout (Figure 5.1-3), and a sketch of the elevation of the reactor coolant system (Figure 5.1-4). The piping and instrumentation diagram (Figure 5.1-5, sheets 1, 2, and 3) shows additional details of the design of the reactor coolant system.

5.1.1 Design Bases The performance and safety design bases of the reactor coolant system and its major components are interrelated. These design bases are listed as follows:

z The reactor coolant system transfers to the steam and power conversion system the heat produced during power operation as well as the heat produced when the reactor is subcritical, including the initial phase of plant cooldown.

z The reactor coolant system transfers to the normal residual heat removal system the heat produced during the subsequent phase of plant cooldown and cold shutdown.

z During power operation and normal operational transients (including the transition from forced to natural circulation), the reactor coolant system heat removal maintain fuel condition within the operating bounds permitted by the reactor control and protection systems.

z The reactor coolant system provides the water used as the core neutron moderator and reflector conserving thermal neutrons and improving neutron economy. The reactor coolant system also provides the water used as a solvent for the neutron absorber used in chemical shim reactivity control.

z The reactor coolant system maintains the homogeneity of the soluble neutron poison concentration and the rate of change of the coolant temperature so that uncontrolled reactivity changes do not occur.

z The reactor coolant system pressure boundary accommodates the temperatures and pressures associated with operational transients.

z The reactor vessel supports the reactor core and control rod drive mechanisms.

z The pressurizer maintains the system pressure during operation and limits pressure transients. During the reduction or increase of plant load, the pressurizer accommodates volume changes in the reactor coolant.

z The reactor coolant pumps supply the coolant flow necessary to remove heat from the reactor core and transfer it to the steam generators.

z The steam generators provide high-quality steam to the turbine. The tubes and tubesheet boundary prevent the transfer of radioactivity generated within the core to the secondary system.

5.1-2 Revision 1 WLS 1&2 - UFSAR z

The reactor coolant system piping contains the coolant under operating temperature and pressure conditions and limits leakage (and activity release) to the containment atmosphere.

The reactor coolant system piping contains demineralized and borated water that is circulated at the flow rate and temperature consistent with achieving the reactor core thermal and hydraulic performance.

z The reactor coolant system is monitored for loose parts, as described in Subsection 4.4.6.

z Applicable industry standards and equipment classifications of reactor coolant system components are identified in Tables 3.2-1 and 3.2-3 of Subsection 3.2.2.

z The reactor vessel head is equipped with suitable provisions for connecting the head vent system, which meets the requirements of 10 CFR 50.34 (f)(2)(vi) (TMI Action Item II.B.1).

(See Subsection 5.4.12.)

z The pressurizer surge line and each loop spray line connected with the reactor coolant system are instrumented with resistance temperature detectors (RTDs) attached to the pipe to detect thermal stratification.

5.1.2 Design Description Figure 5.1-1 shows a schematic of the reactor coolant system. Table 5.1-1 provides the principal pressures, temperatures, and flow rates of the system at the locations noted in Figure 5.1-1 under normal steady-state, full-power operating conditions. These parameters are based on the best-estimate flow at the pump discharge. Table 5.1-2 contains a summary of nominal system design and operating parameters under normal steady-state, full-power operating conditions. These parameters are based on the best-estimate conditions at nominal full power. The reactor coolant system volume under these conditions is also provided.

The reactor coolant system consists of two heat transfer circuits, each with a steam generator, two reactor coolant pumps, and a single hot leg and two cold legs for circulating reactor coolant. In addition, the system includes the pressurizer, interconnecting piping, valves, and instrumentation for operational control and safeguards actuation. All reactor coolant system equipment is located in the reactor containment.

During operation, the reactor coolant pumps circulate pressurized water through the reactor vessel then the steam generators. The water, which serves as coolant, moderator, and solvent for boric acid (chemical shim control), is heated as it passes through the core. It is transported to the steam generators where the heat is transferred to the steam system. Then it is returned to the reactor vessel by the pumps to repeat the process.

The reactor coolant system pressure boundary provides a barrier against the release of radioactivity generated within the reactor and is designed to provide a high degree of integrity throughout operation of the plant.

The reactor coolant system pressure is controlled by operation of the pressurizer, where water and steam are maintained in equilibrium by the activation of electrical heaters or a water spray, or both.

Steam is formed by the heaters or condensed by the water spray to control pressure variations due to expansion and contraction of the reactor coolant.

Spring-loaded safety valves are installed above and connected to the pressurizer to provide overpressure protection for the reactor coolant system. These valves discharge into the containment atmosphere. Three stages of reactor coolant system automatic depressurization valves are also connected to the pressurizer. These valves discharge steam and water through spargers to the

5.1-3 Revision 1 WLS 1&2 - UFSAR in-containment refueling water storage tank (IRWST) of the passive core cooling system (PXS). Most (initially all) of the steam and water discharged to the spargers is condensed and cooled by mixing with the water in the tank.

The fourth-stage automatic depressurization valves are connected by two redundant paths to each reactor coolant loop hot leg and discharge directly to the containment atmosphere.

The reactor coolant system is also served by a number of auxiliary systems, including the chemical and volume control system (CVS), the passive core cooling system (PXS), the normal residual heat removal system (RNS), the steam generator system (SGS), the primary sampling system (PSS), the liquid radwaste system (WLS), and the component cooling water system (CCS).

The reactor coolant system includes the following:

z The reactor vessel, including control rod drive mechanism housings.

z The reactor coolant pumps, consisting of four sealless pumps that pump fluid through the entire reactor coolant and reactor systems. Two pumps are coupled with each steam generator.

z The portion of the steam generators containing reactor coolant, including the channel head, tubesheet, and tubes.

z The pressurizer which is attached by the surge line to one of the reactor coolant hot legs.

With a combined steam and water volume, the pressurizer maintains the reactor system within a narrow pressure range.

z The safety and automatic depressurization system valves.

z The reactor vessel head vent isolation valves.

z The interconnecting piping and fittings between the preceding principal components.

z The piping, fittings, and valves leading to connecting auxiliary or support systems.

The piping and instrumentation diagram of the reactor coolant system (Figure 5.1-5) shows the extent of the systems located within the containment and the interface between the reactor coolant system and the secondary (heat utilization) system.

Figures 5.1-3 and 5.1-4 show the plan and section of the reactor coolant loops. These figures show reactor coolant system components in relationship to supporting and surrounding steel and concrete structures. The figures show the protection provided to the reactor coolant system by its physical layout.

5.1.3 System Components The major components of the reactor coolant system are described in the following subsections.

Additional details of the design and requirements of these components are found in other sections of this safety analysis report.

5.1.3.1 Reactor Vessel The reactor vessel is cylindrical, with a hemispherical bottom head and removable, flanged, hemispherical upper head. The vessel contains the core, core support structures, control rods, and

5.1-4 Revision 1 WLS 1&2 - UFSAR other parts directly associated with the core. The vessel interfaces with the reactor internals, the integrated head package, and reactor coolant loop piping and is supported on the containment building concrete structure.

The design of the AP1000 reactor vessel closely matches the existing vessel designs of Westinghouse three-loop plants. New features for the AP1000 have been incorporated without departing from the proven features of existing vessel designs.

The vessel has inlet and outlet nozzles positioned in two horizontal planes between the upper head flange and the top of the core. The nozzles are located in this configuration to provide an acceptable cross-flow velocity in the vessel outlet region and to facilitate optimum layout of the reactor coolant system equipment. The inlet and outlet nozzles are offset, with the inlet positioned above the outlet, to allow mid-loop operation for removal of a main coolant pump without discharge of the core.

Coolant enters the vessel through the inlet nozzles and flows down the core barrel-vessel wall annulus, turns at the bottom, and flows up through the core to the outlet nozzles.

5.1.3.2 AP1000 Steam Generator The AP1000 steam generator (SG) is a vertical shell and U-tube evaporator with integral moisture separating equipment. The basic steam generator design and features have been proven in tests and in previous steam generators including replacement steam generator designs.

Design enhancements include nickel-chromium-iron Alloy 690 thermally treated tubes on a triangular pitch, improved antivibration bars, single-tier separators, enhanced maintenance features, and a primary-side channel head design that allows for easy access and maintenance by robotic tooling.

The AP1000 steam generator employs tube supports utilizing a broached hole support plate design.

All tubes in the steam generator are accessible for sleeving, if necessary. The design enhancements are based on proven technology.

The basic function of the AP1000 steam generator is to transfer heat from the single-phase reactor coolant water through the U-shaped heat exchanger tubes to the boiling, two-phase steam mixture in the secondary side of the steam generator. The steam generator separates dry, saturated steam from the boiling mixture, and delivers the steam to a nozzle from which it is delivered to the turbine.

Water from the feedwater system replenishes the steam generator water inventory by entering the steam generator through a feedwater inlet nozzle and feedring.

In addition to its steady-state performance function, the steam generator secondary side provides a water inventory which is continuously available as a heat sink to absorb primary side high temperature transients.

5.1.3.3 Reactor Coolant Pumps The AP1000 reactor coolant pumps are high-inertia, high-reliability, low-maintenance, sealless pumps of canned motor design that circulate the reactor coolant through the reactor vessel, loop piping, and steam generators. The pumps are integrated into the steam generator channel head.

The integration of the pump suction into the bottom of the steam generator channel head eliminates the cross-over leg of coolant loop piping; reduces the loop pressure drop; simplifies the foundation and support system for the steam generator, pumps, and piping; and reduces the potential for uncovering of the core by eliminating the need to clear the loop seal during a small loss of coolant accident.

The AP1000 design uses four pumps. Two pumps are coupled with each steam generator.

5.1-5 Revision 1 WLS 1&2 - UFSAR Each AP1000 reactor coolant pump is a vertical, single-stage centrifugal pump designed to pump large volumes of main coolant at high pressures and temperatures. Because of its sealless design, it is more tolerant of off-design conditions that could adversely affect shaft seal designs. The main impeller attaches to the rotor shaft of the driving motor, which is an electric induction motor. The stator and rotor of the motor are both encased in corrosion-resistant cans constructed and supported to withstand full system pressure.

Primary coolant circulates between the stator and rotor which obviates the need for a seal around the motor shaft. Additionally, the motor bearings are lubricated by primary coolant. The motor is thus an integral part of the pump. The basic pump design has been proven by many years of service in other applications.

The pump motor size is minimized through the use of a variable frequency drive to provide speed control in order to reduce motor power requirements during pump startup from cold conditions. The variable frequency drive is used only during heatup and cooldown when the reactor trip breakers are open. During power operations, the drive is isolated and the pump is run at constant speed.

To provide the rotating inertia needed for flow coast-down, bi-metallic flywheel assemblies are attached to the pump shaft.

5.1.3.4 Primary Coolant Piping Reactor coolant system piping is configured with two identical main coolant loops, each of which employs a single 31-inch inside diameter hot leg pipe to transport reactor coolant to a steam generator. The two reactor coolant pump suction nozzles are welded directly to the outlet nozzles on the bottom of the steam generator channel head. Two 22-inch inside diameter cold leg pipes in each loop (one per pump) transport reactor coolant back to the reactor vessel to complete the circuit.

The loop configuration and material have been selected such that pipe stresses are sufficiently low for the primary loop and large auxiliary lines to meet the requirements to demonstrate "leak-before-break." Thus, pipe rupture restraints are not required, and the loop is analyzed for pipe ruptures only for small auxiliary lines that do not meet the leak-before-break requirements.

5.1.3.5 Pressurizer The AP1000 pressurizer is a principal component of the reactor coolant system pressure control system. It is a vertical, cylindrical vessel with hemispherical top and bottom heads, where liquid and vapor are maintained in equilibrium saturated conditions.

One spray nozzle and two nozzles for connecting the safety and depressurization valve inlet headers are located in the top head. Electrical heaters are installed through the bottom head. The heaters are removable for replacement. The bottom head contains the nozzle for attaching the surge line. This line connects the pressurizer to a hot leg, and provides for the flow of reactor coolant into and out of the pressurizer during reactor coolant system thermal expansions and contractions.

5.1.3.6 Pressurizer Safety Valves The pressurizer safety valves are spring loaded, self-actuated with back-pressure compensation.

Their set pressure and combined capacity is based on not exceeding the reactor coolant system maximum pressure limit during the Level B service condition loss of load transient.

5.1-6 Revision 1 WLS 1&2 - UFSAR 5.1.3.7 Reactor Coolant System Automatic Depressurization Valves Some of the functions of the AP1000 passive core cooling system (PXS) are dependent on depressurization of the reactor coolant system. This is accomplished by the automatically actuated depressurization valves. The automatic depressurization valves connected to the pressurizer are arranged in six parallel sets of two valves in series opening in three stages.

A set of fourth-stage automatic depressurization valves is connected to each reactor coolant hot leg.

Each set of valves consists of two parallel paths of two valves in series.

To mitigate the consequences of the various accident scenarios, the controls are arranged to open the valves in a prescribed sequence based on core makeup tank level and a timer as described in Section 6.3.

5.1.4 System Performance Characteristics Table 5.1-3 lists the nominal thermal hydraulic parameters of the reactor coolant system. The system performance parameters are also determined for an assumed 10 percent uniform steam generator tube plugging condition.

Reactor coolant flow is established by a detailed design procedure supported by operating plant performance data and component hydraulics experimental data. The procedure establishes a best-estimate flow and conservatively high and low flows for the applicable mechanical and thermal design considerations. In establishing the range of design flows, the procedure accounts for the uncertainties in the component flow resistances and the pump head-flow capability, established by analysis of the available experimental data. The procedure also accounts for the uncertainties in the technique used to measure flow in the operating plant.

Definitions of the four reactor coolant flows applied in various plant design considerations are presented in the following paragraphs.

5.1.4.1 Best-Estimate Flow The best-estimate flow is the most likely value for the normal full-power operating condition. This flow is based on the best estimate of the fuel, reactor vessel, steam generator, and piping flow resistances, and on the best estimate of the reactor coolant pump head and flow capability. The best-estimate flow provides the basis for the other design flows required for the system and component design. The best-estimate flow and head also define the performance requirement for the reactor coolant pump. Table 5.1-1 lists system pressure losses based on best-estimate flow.

The best-estimate flow analysis is based on extensive experimental data, including accurate flow and pressure drop data from an operating plant, flow resistance measurements from several fuel assembly hydraulics tests, and hydraulic performance measurements from several pump impeller model tests. Since operating plant flow measurements are in close agreement with the calculated best-estimate flows, the flows established with this design procedure can be applied to the plant design with a high level of confidence.

Although the best-estimate flow is the most likely value to be expected in operation, more conservative flow rates are applied in the thermal and mechanical designs.

5.1.4.2 Minimum Measured Flow The minimum measured flow is specified in the technical specifications as the flow that must be confirmed or exceeded by the flow measurements obtained during plant startup. This is the flow used

5.1-7 Revision 1 WLS 1&2 - UFSAR in reactor core departure from nucleate boiling (DNB) analysis for the thermal design procedure used in the AP1000. In the thermal design procedure methodology for DNB analysis, flow measurement uncertainties are combined statistically with fuel design and manufacturing uncertainties.

The measured reactor coolant flow will most likely differ from the best-estimate flow because of uncertainties in the hydraulics analysis and the inaccuracies in the instrumentation used to measure flow. The measured flow is expected to fall within a range around the best-estimate flow. The magnitude of the expected range is established by statistically combining the system hydraulics uncertainty with the total flow rate within the expected range, less any excess flow margin that may be provided to account for future changes in the hydraulics of the reactor coolant system.

5.1.4.3 Thermal Design Flow The thermal design flow is the conservatively low value used for thermal-hydraulic analyses where the design and measurement uncertainties are not combined statistically, and additional flow margin must therefore be explicitly included. The thermal design flow is derived by subtracting the plant flow measurement uncertainty from the minimum measured flow. The thermal design flow is approximately 4.5 percent less than the best-estimate flow. The thermal design flow is confirmed when the plant is placed in operation. Table 5.1-3 provides tabulations of important design parameters based on the thermal design flow.

5.1.4.4 Mechanical Design Flow Mechanical design flow is the conservatively high flow used as the basis for the mechanical design of the reactor vessel internals, fuel assemblies, and other system components. Mechanical design flow is established at 104 percent of best-estimate flow.

5.1.5 Combined License Information This section contained no requirement for additional information.

5.1-8 Revision 1 WLS 1&2 - UFSAR Note:

(a)

At the conditions specified.

Table 5.1-1 Principal System Pressures, Temperatures, and Flow Rates (Nominal Steady-State, Full Power Operating Conditions)

Location (Figure 5.1-1)

Description Fluid Pressure (psig)

Nominal Temp. (°F)

Flow(a)

(gpm) 1 Hot Leg 1 Reactor Coolant 2248 610 177,645 2

Hot Leg 2 Reactor Coolant 2248 610 177,645 3

Cold Leg 1A Reactor Coolant 2310 537.2 78,750 4

Cold Leg 1B Reactor Coolant 2310 537.2 78,750 5

Cold Leg 2A Reactor Coolant 2310 537.2 78,750 6

Cold Leg 2B Reactor Coolant 2310 537.2 78,750 7

Surge Line Inlet Reactor Coolant 2248 610 8

Pressurizer Inlet Reactor Coolant 2241 653.0 9

Pressurizer Liquid Reactor Coolant 2235 653.0 10 Pressurizer Steam Steam 2235 653.0 11 Pressurizer Spray 1A Reactor Coolant 2310 537.2 1 - 2 12 Pressurizer Spray 1B Reactor Coolant 2310 537.2 1 - 2 13 Common Spray Line Reactor Coolant 2310 537.2 2 - 4 14 ADS Valve Inlet Steam 2235 653.0 15 ADS Valve Inlet Steam 2235 653.0

5.1-9 Revision 1 WLS 1&2 - UFSAR Table 5.1-2 Nominal System Design and Operating Parameters General Plant design objective, years 60 NSSS power, MWt 3415 Reactor coolant pressure, psia 2250 Reactor coolant liquid volume at power conditions (including 1000 ft3 pressurizer liquid), ft3 9600 Loops Number of cold legs 4

Number of hot legs 2

Hot leg ID, in.

31 Cold leg ID, in.

22 Reactor Coolant Pumps Type of reactor coolant pumps Sealless Number of reactor coolant pumps 4

Estimated motor rating, hp 7300 Effective pump power to coolant, MWt 15 Pressurizer Number of units 1

Total volume, ft3 2100 Water volume, ft3 1000 Spray capacity, gpm 700 Inside diameter, in.

100 Height, in.

503 Steam Generator Steam generator power, MWt/unit 1707.5 Type Vertical U-tube Feedring-type Number of units 2

Surface area, ft2/unit 123,540 Shell design pressure, psia 1200 Zero load temperature, °F 557 Feedwater temperature, °F 440 Exit steam pressure, psia 836 Steam flow, lb/hr per steam generator 7.49x106 Total steam flow, lb/hr 14.97x106

5.1-10 Revision 1 WLS 1&2 - UFSAR Table 5.1-3 Thermal-Hydraulic Parameters (Nominal)

Detailed Thermal-Hydraulic Parameters Best-Estimate Flow (BEF)

Without Plugging With 10% Tube Plugging Flow rate, gpm/loop 157,500 155,500 Reactor vessel outlet temperature, °F 610.0 610.4 Reactor vessel inlet temperature, °F 537.2 536.8 Minimum Measured Flow (MMF)

Flow rate, gpm/loop 152,775 150,835 Thermal Design Flow (TDF)

Flow rate, gpm/loop 149,940 148,000 Reactor vessel outlet temperature, °F 611.7 612.2 Reactor vessel inlet temperature, °F 535.5 535.0 Mechanical Design Flow (MDF)

Flow rate, gpm/flow 163,800 Best-Estimate Reactor Core and Vessel Thermal-Hydraulic Parameters Without Plugging NSSS power, MWt 3415 Reactor power, MWt 3400 Best-Estimate loop flow, gpm/loop 157,500 Best-Estimate vessel flow, lb/hr 120.4x106 Best-Estimate core flow, lb/hr 113.3x106 Reactor coolant pressure, psia 2250 Vessel/core inlet temperature, °F 537.2 Vessel average temperature, °F 573.6 Vessel outlet temperature, °F 610.0 Average core outlet temperature, °F 614.0 Total core bypass flow, (percent of total flow) 5.9 Core barrel nozzle flow 1.0 Head cooling flow 1.5 Thimble flow 1.9 Core shroud cooling flow 0.5 Unallocated bypass flow 1.0

5.1-11 Revision 1 WLS 1&2 - UFSAR Figure 5.1-1 Reactor Coolant System Schematic Flow Diagram

5.1-12 Revision 1 WLS 1&2 - UFSAR Figure 5.1-2 Reactor Coolant Loops - Isometric View

WLS 1&2 - UFSAR 5.1-13 Revision 1 Figure 5.1-3 Reactor Coolant System - Loop Layout

5.1-14 Revision 1 WLS 1&2 - UFSAR Figure 5.1-4 Reactor Coolant System - Elevation

WLS 1&2 - UFSAR 5.1-15 Revision 1 Inside Reactor Containment Figure 5.1-5 (Sheet 1 of 3)

Reactor Coolant System Piping and Instrumentation Diagram

WLS 1&2 - UFSAR 5.1-16 Revision 1 Inside Reactor Containment Figure 5.1-5 (Sheet 2 of 3)

Reactor Coolant System Piping and Instrumentation Diagram

WLS 1&2 - UFSAR 5.1-17 Revision 1 Inside Reactor Containment Figure 5.1-5 (Sheet 3 of 3)

Reactor Coolant System Piping and Instrumentation Diagram

5.2-1 Revision 1 WLS 1&2 - UFSAR 5.2 Integrity of Reactor Coolant Pressure Boundary This section discusses the measures to provide and maintain the integrity of the reactor coolant pressure boundary (RCPB) during plant operation. Section 50.2 of 10 CFR 50 defines the reactor coolant pressure boundary as vessels, piping, pumps, and valves that are part of the reactor coolant system (RCS), or that are connected to the reactor coolant system up to and including the following:

z The outermost containment isolation valve in system piping that penetrates the containment z

The second of two valves closed during normal operation in system piping that does not penetrate containment z

The reactor coolant system overpressure protection valves The design transients used in the design and fatigue analysis of ASME Code Class 1 and Class CS components, supports, and reactor internals are provided in Subsection 3.9.1. The loading conditions, loading combinations, evaluation methods, and stress limits for design and service conditions for components, core support structures, and component supports are discussed in Subsection 3.9.3.

The term reactor coolant system, as used in this section, is defined in Section 5.1. The AP1000 reactor coolant pressure boundary is consistent with that of 10 CFR 50.2.

5.2.1 Compliance with Codes and Code Cases 5.2.1.1 Compliance with 10 CFR 50.55a Reactor coolant pressure boundary components are designed and fabricated in accordance with the ASME Boiler and Pressure Vessel Code,Section III. A portion of the chemical and volume control system inside containment that is defined as reactor coolant pressure boundary uses an alternate classification in conformance with the requirements of 10 CFR 50.55a(a)(3). Systems other than the reactor coolant system connecting to the chemical and volume control system have required isolation and are not classified as reactor coolant pressure boundary. The alternate classification is discussed in Subsection 5.2.1.3. The quality group classification for the reactor coolant pressure boundary components is identified in Subsection 3.2.2. The quality group classification is used to determine the appropriate sections of the ASME Code or other standards to be applied to the components.

The edition and addenda of the ASME Code applied in the design and manufacture of each component are the edition and addenda established by the requirements of the Design Certification.

The use of editions and addenda issued subsequent to the Design Certification is permitted or required based on the provisions in the Design Certification. If a later Code edition/addenda than the Design Certification Code edition/addenda is used by the material and/or component supplier, then a code reconciliation to determine acceptability is performed as required by the ASME Code,Section III, NCA-1140. The later Code edition/addenda must be authorized in 10 CFR 50.55a or in a specific authorization as provided in 50.55a(a)(3). Code Cases to be used in design and construction are identified in this document; additional Code Cases for design and construction beyond those for the design certification are not required.

Inservice inspection of the reactor coolant pressure boundary is conducted in accordance with the applicable edition and addenda of the ASME Boiler and Pressure Vessel Code Section XI, as described in Subsection 5.2.4. Inservice testing of the reactor coolant pressure boundary components is in accordance with the edition and addenda of the ASME OM Code as discussed in Subsection 3.9.6 for pumps and valves, and as discussed in Subsection 3.9.3.4.4 for dynamic restraints.

• NRC Staff approval is required prior to implementing a change in this information.

5.2-2 Revision 1 WLS 1&2 - UFSAR The baseline used for the evaluations done to support this safety analysis report and the Design Certification is the 1998 Edition, 2000 Addenda, [with an additional restriction for piping design.

The restriction on piping design is that the treatment of dynamic loads, including seismic loads, in pipe stress analysis will satisfy the requirements of the ASME Code,Section III, Subarticles NB-3210, NB-3220, NB-3620, NB-3650, NC-3620, NC-3650, ND-3620, and ND-3650 1989 Edition, 1989 Addenda. The requirements shown below for fillet welds are also applicable.

The criteria below are used in place of those in paragraph NB-3683.4(c)(1) and Footnote 11 to Figures NC/ND-3673.2(b)-1 of the 1989 Addenda to the 1989 Edition of ASME Code,Section III.

This criteria is based on the criteria included in the 1989 Edition of the ASME Code,Section III.

For girth fillet welds between the piping and socket welded fittings, valves and flanges, and slip on flanges in ASME III Class 1, 2, and 3 piping, the primary stress indices and stress intensification factors are as follows:

Primary Stress Indices B1

=

0.75 B2

=

1.5 Stress Intensification Factor i

=

2.1*(tn/Cx), but not less than 1.3 Cx

=

fillet weld leg length based on ASME III 1989 Edition, Figures NC/ND-4427-1, sketches (c-1), (c-2), and (c-3). For unequal leg length, use smaller leg length for Cx.]*

Seismic Integrity of the CVS System Inside Containment To provide for the seismic integrity and pressure boundary [integrity of the nonsafety-related (B31.1, Piping Class D) CVS piping located inside containment, a seismic analysis will be performed and a CVS Seismic Analysis Report prepared with a faulted stress limit equal to the smaller of 4.5 Sh and 3.0 Sy and based on the following additional criteria:

Additional loading combinations and stress limits for nonsafety-related chemical and volume control system piping systems and components inside containment]*

Notes:

1.

For earthquake loading, PMAX is equal to normal operating pressure at 100% power.

2.

Where:

M1 is range of moments for TNU, M2 is one half the range of SSES moments, M1 + M2 is larger of M1 plus one half the range of SSES, or full range of SSES.

3.

See Table 3.9-3 for description of loads.

4.

FAM is amplitude of axial force for SSES; AM is nominal pipe metal area.]*

Condition Loading Combination(3)

[Equations (ND3650)

Stress Limit Level D PMAX(1) + DW + SSE + SSES 9

Smaller of 4.5 Sh or 3.0 Sy SSES FAM/AM (4) 1.0 Sh TNU + SSES i ( M1 + M2)/Z(2) 3.0 Sh

• NRC Staff approval is required prior to implementing a change in this information.

5.2-3 Revision 1 WLS 1&2 - UFSAR Component supports, equipment, and structural steel frame are evaluated to demonstrate that they do not fail under seismic loads. Design methods and stress criteria are the same as for corresponding Seismic Category I components. The functionality of the chemical and volume control system does not have to be maintained to insure structural integrity of the components.

[Fabrication, examination, inspection, and testing requirements as defined in Chapters IV, V, VI, and VII of the ASME B31.1 Code are applicable and used for the B31.1 (Piping Class D) CVS piping systems, valves, and equipment inside containment.]*

5.2.1.2 Applicable Code Cases

[ASME Code Cases used in the AP1000 are listed in Table 5.2-3.]* In addition, other ASME Code Cases found in Regulatory Guide 1.84, as discussed in Section 1.9 and Appendix 1A, in effect at the time of the Design Certification may be used for pressure boundary components. Use of Code Cases approved in revisions of the Regulatory Guides issued subsequent to the Design Certification may be used as discussed in Subsection 5.2.6.1 by using the process outlined above for updating the ASME Code edition and addenda. Use of any Code Case not approved in Regulatory Guide 1.84 on Class 1 components is authorized as provided in 50.55a(a)(3) and the requirements of the Design Certification.

The use of any Code Case conditionally approved in Regulatory Guide 1.84 used on Class 1 components meets the conditions established in the Regulatory Guide.

ASME Code Cases required for Section XI inspections will be identified in Plant Owner provided Inspection Plans as referenced in Subsection 5.2.6.2. See Subsection 5.2.4, Inservice Inspection and Testing of Class 1 Components, and Section 6.6, Inservice Inspection of Class 2, 3, and MC Components, for discussion of inservice examinations and procedures.

5.2.1.3 Alternate Classification The Code of Federal Regulations, Section 10 CFR 50.55a requires the reactor coolant pressure boundary be class A (ASME Boiler and Pressure Vessel Code Section III, Class 1). Components which are connected to the reactor coolant pressure boundary that can be isolated from the reactor coolant system by two valves in series (both closed, both open, or one closed and the other open) with automatic actuation to close can be classified as class C (ASME Section III, class 3) according to 50.55a.

A portion of the chemical and volume control system inside containment is not classified as safety-related. The classification of the AP1000 reactor coolant pressure boundary deviates from the requirement that the reactor coolant pressure boundary be classified as safety related and be constructed using the ASME Code,Section III as provided in 10 CFR 50.55a. The safety-related classification of the AP1000 reactor coolant pressure boundary ends at the third isolation valve between the reactor coolant system and the chemical and volume control system. The nonsafety-related portion of the chemical and volume control system inside containment provides purification of the reactor coolant and includes heat exchangers, demineralizers, filters and connecting piping. For a description of the chemical and volume control system, refer to Subsection 9.3.6. The portion of the chemical and volume control system between the inside and outside containment isolation valves is classified as Class B and is constructed using the ASME Code,Section III.

The nonsafety-related portion of the chemical and volume control system is designed using ANSI B31.1 and ASME Code,Section VIII for the construction of the piping, valves, and components.

The nonsafety-related portion of the CVS inside containment is analyzed seismically. The methods and criteria used for the seismic analysis are similar to those used of seismic Category II pipe and

5.2-4 Revision 1 WLS 1&2 - UFSAR are defined in the Subsection 5.2.1.1. The chemical and volume control system components are located inside the containment which is a seismic Category I structure.

The alternate classification of the nonsafety-related purification subsystems satisfies the purpose of 10 CFR 50.55a that structures, systems, and components of nuclear power plants which are important to safety be designed, fabricated, erected, and tested to quality standards that reflect the importance of the safety functions to be performed.

The AP1000 chemical and volume control system is not required to perform safety-related functions such as emergency boration or reactor coolant makeup. Safety-related core makeup tanks are capable of providing sufficient reactor coolant makeup for shutdown and cooldown without makeup supplied by the chemical and volume control system. Safe shutdown of the reactor does not require use of the chemical and volume control system makeup. AP1000 safe shutdown is discussed in Section 7.4.

The isolation valves between the reactor coolant system and the chemical and volume control system are active safety-related valves that are designed, qualified, inspected and tested for the isolation requirements. The isolation valves between the reactor coolant system and chemical and volume control system are designed and qualified for design conditions that include closing against blowdown flow with full system differential pressure. These valves are qualified for adverse seismic and environmental conditions. The valves are subject to inservice testing including operability testing.

The potential for release of activity from a break or leak in the chemical and volume control system is minimized by the location of the purification subsystem inside containment and the design and test of the isolation valves. Chemical and volume control system leakage inside containment is detectable by the reactor control leak detection function as potential reactor coolant pressure boundary leakage.

This leakage must be identified before the reactor coolant leak limit is reached. The nonsafety-related classification of the system does not impact the need to identify the source of a leak inside containment.

5.2.2 Overpressure Protection Reactor coolant system and steam system overpressure protection during power operation are provided by the pressurizer safety valves and the steam generator safety valves, in conjunction with the action of the reactor protection system. Combinations of these systems provide compliance with the overpressure protection requirements of the ASME Boiler and Pressure Vessel Code,Section III, Paragraphs NB-7300 and NC-7300, for pressurized water reactor systems.

Low temperature overpressure protection is provided by a relief valve in the suction line of the normal residual heat removal (RNS) system. The sizing and use of the relief valve for low temperature overpressure protection is consistent with the guidelines of Branch Technical Position RSB 5-2.

5.2.2.1 Design Bases Overpressure protection during power operation is provided for the reactor coolant system by the pressurizer safety valves. This protection is afforded for the following events to envelop those credible events that could lead to overpressure of the reactor coolant system if adequate overpressure protection were not provided:

z Loss of electrical load and/or turbine trip z

Uncontrolled rod withdrawal at power z

Loss of reactor coolant flow

5.2-5 Revision 1 WLS 1&2 - UFSAR z

Loss of normal feedwater z

Loss of offsite power to the station auxiliaries The sizing of the pressurizer safety valves is based on the analysis of a complete loss of steam flow to the turbine, with the reactor operating at 102 percent of rated power. In this analysis, feedwater flow is also assumed to be lost. No credit is taken for operation of the pressurizer level control system, pressurizer spray system, rod control system, steam dump system, or steam line power-operated relief valves. The reactor is maintained at full power (no credit for direct reactor trip on turbine trip and for reactivity feedback effects), and steam relief through the steam generator safety valves is considered. The total pressurizer safety valve capacity is required to be at least as large as the maximum surge rate into the pressurizer during this transient.

This sizing procedure results in a safety valve capacity well in excess of the capacity required to prevent exceeding 110 percent of system design pressure for the events previously listed. The discharge of the safety valve is routed through a rupture disk to containment atmosphere. The rupture disk is to contain leakage past the valve. The rupture disk pressure rating is substantially less than the set pressure of the safety valve. See Subsection 5.4.11 for additional information on the safety valve discharge system. Subsection 5.4.5 describes the connection of the safety valves to the pressurizer.

Administrative controls and plant procedures aid in controlling reactor coolant system pressure during low-temperature operation. Normal plant operating procedures maximize the use of a steam or gas bubble in the pressurizer during periods of low pressure, low-temperature operation. For those low-temperature modes of operation when operation with a water solid pressurizer is possible, a relief valve in the residual heat removal system provides low-temperature overpressure protection for the reactor coolant system. The valve is sized to prevent overpressure during the following credible events with a water-solid pressurizer:

z Makeup/letdown flow mismatch z

Inadvertent actuation of the pressurizer heaters z

Loss of residual heat removal with reactor coolant system heatup due to decay heat and pump heat z

Inadvertent start of one reactor coolant pump z

Inadvertent hydrogen addition Of those events the makeup/letdown flow mismatch is the limiting mass input condition. Inadvertent start of an inactive reactor coolant pump is the limiting heat input condition to size the relief valve.

The flow rate postulated for mass input condition is based on the flow from two makeup pumps at the set pressure of the relief valve. The heat input condition is based on a 50-degree temperature difference between the reactor coolant system and the steam generator secondary side.

The set pressure for the normal residual heat removal system relief valve is established based on the lower value of the normal residual heat removal system design pressure and the low-temperature pressure limit for the reactor vessel based on ASME Code,Section III, Appendix G, analyses. The pressure-temperature limits for the reactor vessel, based on expected material properties and the vessel design, are discussed in Subsection 5.3.3.

The capacity of the residual heat removal relief valve can maintain the pressure in the reactor coolant system and the residual heat removal system to a pressure less than the lesser of 110 percent of the

5.2-6 Revision 1 WLS 1&2 - UFSAR design pressure of the normal residual heat removal system or the pressure limit from the Appendix G analyses for the limiting event.

Overpressure protection for the steam system is provided by steam generator safety valves. The capacity of the steam system safety valves limits steam system pressure to less than 110 percent of the steam generator shell side design pressure. See Section 10.3 for details.

Section 10.3 discusses the steam generator relief valves and connecting piping.

5.2.2.2 Design Evaluation The relief capacities of the pressurizer safety valves, steam generator safety valves, and the normal residual heat removal system relief valve are determined from the postulated overpressure transient conditions in conjunction with the action of the reactor protection system. An overpressure protection report is prepared according to Article NB-7300 of Section III of the ASME Code. WCAP-7907 (Reference 1) describes the analytical model used in the analysis of the overpressure protection system and the basis for its validity.

Chapter 15 includes a design description of certain initiating events and describes assumptions made, method of analysis, conclusions, and the predicted response of the AP1000 to those events.

The performance characteristics of the pressurizer safety valves are included in the analysis of the response. The incidents evaluated include postulated accidents not included in the compilation of credible events used for valve sizing purposes.

Subsection 5.4.9 discusses the capacities of the pressurizer safety valves and residual heat removal system relief valve used for low temperature overpressure protection. The setpoints and reactor trip signals which occur during operational overpressure transients are discussed in Subsection 5.4.5.

With the current AP1000 pressure-temperature limits (Subsection 5.3.3), the set pressure for the relief valve in the normal residual heat removal system is based on a sizing analysis performed to prevent the reactor coolant system pressure from exceeding the applicable low temperature pressure limit for the reactor vessel based on ASME Code,Section III, Appendix G. The limiting mass and energy input transients are assumed for the sizing analysis.

5.2.2.3 Piping and Instrumentation Diagrams The connection of the pressurizer safety valves to the pressurizer is incorporated into the pressurizer safety and relief valve module and is discussed in Subsection 5.4.9. The pressurizer safety and relief valve module configuration appears in the piping and instrumentation drawing for the reactor coolant system (Figure 5.1-5). The normal residual heat removal system (Subsection 5.4.7) incorporates the relief valve for low-temperature overpressure protection. The valves which isolate the normal residual heat removal system from the reactor coolant system do not have an autoclosure interlock.

Figure 5.4-6 shows a simplified sketch of the normal residual heat removal system. Figure 5.4-7 shows the piping and instrumentation drawing for the residual heat removal system.

Section 10.3 discusses the safety valves for the main steam system. Figure 10.3.2-1 shows the piping and instrumentation drawing for the main steam system.

5.2.2.4 Equipment and Component Description Subsection 5.4.9 discusses the design and design parameters for the safety valves providing operating and low-temperature overpressure protection. The pressurizer safety valves are ASME Boiler and Pressure Vessel Code Class 1 components. These valves are tested and analyzed using the design transients, loading conditions, seismic considerations, and stress limits for Class 1 components as described in Subsections 3.9.1, 3.9.2, and 3.9.3.

5.2-7 Revision 1 WLS 1&2 - UFSAR The relief valve included in the normal residual heat removal system provides containment boundary function since it is connected to the piping between the containment isolation valves for the system.

Containment isolation requirements are discussed in Subsection 6.2.3. Based on the containment boundary function, the relief valve is an ASME Code Class 2 component and is analyzed to the appropriate requirements.

In addition to the testing and analysis required for ASME Code requirements, the pressurizer safety valves are of a type which has been verified to operate during normal operation, anticipated transients, and postulated accident conditions. The verification program (Reference 2) was established by the Electric Power Research Institute to address the requirements of 10 CFR 50.34 (f)(2)(x). These requirements do not apply to relief valves of the size and type represented by the relief valve on the normal residual heat removal system.

Section 10.3 discusses the equipment and components that provide the main steam system overpressure protection.

5.2.2.5 Mounting of Pressure Relief Devices Subsection 5.4.9 describes the design and installation of the pressure relief devices for the reactor coolant system. Section 3.9 describes the design basis for the assumed loads for the primary-and secondary-side pressure relief devices. Subsection 10.3.2, discusses the main steam safety valves and the power-operated atmospheric steam relief valves.

5.2.2.6 Applicable Codes and Classification The requirements of the ASME Boiler and Pressure Vessel Code,Section III, Paragraphs NB-7300 (Overpressure Protection Report) and NC-7300 (Overpressure Protection Analysis), are met.

Piping, valves, and associated equipment used for overpressure protection are classified according to the classification system discussed in Subsection 3.2.2. These safety-class designations are delineated in Table 3.2-3.

5.2.2.7 Material Specifications See Subsection 5.2.3 for the material specifications for the pressurizer safety valves. The piping in the pressurizer safety and relief valve module up to the safety valve is considered reactor coolant system. See Subsection 5.2.3 for material specifications. The discharge piping is austenitic stainless steel. Subsection 5.4.7 specifies the materials used in the normal residual heat removal system.

5.2.2.8 Process Instrumentation Each pressurizer safety valve discharge line incorporates a main control room temperature indicator and alarm to notify the operator of steam discharge due to either leakage or actual valve operation.

5.2.2.9 System Reliability ASME Code safety valves and relief valves have demonstrated a high degree of reliability over many years of service. The in-service inspection and testing required of safety valves and relief valves (Subsections 3.9.6 and 5.2.4 and Section 6.6) provides assurance of continued reliability and conformance to setpoints. The assessment of reliability, availability, and maintainability which is done to evaluate the estimated availability for the AP1000 includes estimates for the contribution of safety valves and relief valves to unavailability. These estimates were based on experience for operating units.

5.2-8 Revision 1 WLS 1&2 - UFSAR 5.2.2.10 Testing and Inspection Subsections 3.9.6 and 5.4.8 and Section 6.6 discuss the preservice and in-service testing and inspection required for the safety valves and relief valves. The testing and inspection requirements are in conformance with industry standards, including Section XI of the ASME Code.

5.2.3 Reactor Coolant Pressure Boundary Materials 5.2.3.1 Materials Specifications Table 5.2-1 lists material specifications used for the principal pressure-retaining applications in Class 1 primary components and reactor coolant system piping. Material specifications with grades, classes or types are included for the reactor vessel components, steam generator components, reactor coolant pump, pressurizer, core makeup tank, and the passive residual heat removal heat exchanger. Table 5.2-1 lists the application of nickel-chromium-iron alloys in the reactor coolant pressure boundary. The use of nickel-chromium-iron alloy in the reactor coolant pressure boundary is limited to Alloy 690, or its associated weld metals Alloys 52, 52M, and 152, and similar alloys developed for improved weldability as allowed by ASME Boiler and Pressure Vessel Code rules.

Steam generator tubes use Alloy 690 in the thermally treated form. Nickel-chromium-iron alloys are used where corrosion resistance of the alloy is an important consideration and where the use of nickel-chromium-iron alloy is the choice because of the coefficient of thermal expansion.

Subsection 5.4.3 defines reactor coolant piping. See Subsection 4.5.2 for material specifications used for the core support structures and reactor internals. See appropriate sections for internals of other components. Engineered safeguards features materials are included in Subsection 6.1.1. The nonsafety-related portion of the chemical and volume control system inside containment in contact with reactor coolant is constructed of or clad with corrosion resistant material such as Type 304 or Type 316 stainless steel or material with equivalent corrosion resistance. The materials are compatible with the reactor coolant. The nonsafety-related portion of the chemical and volume control system is not required to conform to the process requirements outlined below.

Table 5.2-1 material specifications are the materials used in the AP1000 reactor coolant pressure boundary. The materials used in the reactor coolant pressure boundary conform to the applicable ASME Code rules. Cast austenitic stainless steel does not exceed a ferrite content of 20 FN.

Calculation of ferrite content is based on Hulls equivalent factors.

The welding materials used for joining the ferritic base materials of the reactor coolant pressure boundary conform to or are equivalent to ASME Material Specifications SFA 5.1, 5.5, 5.17, 5.18, 5.20, 5.23, 5.28, 5.29, and 5.30. They are qualified to the requirements of the ASME Code,Section III.

The welding materials used for joining the austenitic stainless steel base materials of the reactor coolant pressure boundary conform to ASME Material Specifications SFA 5.4, 5.9, 5.22, and 5.30.

They are qualified to the requirements of the ASME Code,Section III.

The welding materials used for joining nickel-chromium-iron alloy in similar base material combination and in dissimilar ferritic or austenitic base material combination conform to ASME Material Specifications SFA 5.11 and 5.14, or are similar welding alloys to those in SFA-5.11 or SFA-5.14 developed for improved weldability as allowed by the ASME Boiler and Pressure Vessel Code rules. They are qualified to the requirements of the ASME Code,Section III.

The fabrication and installation specifications for partial penetration welds with Alloy 52/52M/152, within the ASME Class 1 reactor coolant pressure boundary, require successive dye penetrant examinations after the first pass and after every 1/4-inch of weld metal. The specifications for J-groove welds, which join ASME Class 1 reactor coolant pressure boundary penetrations require

5.2-9 Revision 1 WLS 1&2 - UFSAR ultrasonic examination of the interface where the weld joins the penetration tube. The specifications for butt welds used for nozzle safe-end welds require these welds to be radiographically inspected.

These weld specifications are applicable to the ASME Class 1 reactor coolant pressure boundary portions of the reactor vessel (Section 5.3), the reactor coolant pumps (Subsection 5.4.1), the steam generators (Subsection 5.4.2), the reactor coolant system piping (Subsection 5.4.3), the pressurizer (Subsection 5.4.5), the core makeup tanks (Subsection 5.4.13), and the passive residual heat removal heat exchanger (Subsection 5.4.14).

5.2.3.2 Compatibility with Reactor Coolant 5.2.3.2.1 Chemistry of Reactor Coolant The reactor coolant system chemistry specifications conform to the recommendation of Regulatory Guide 1.44 and are shown in Table 5.2-2.

The reactor coolant system water chemistry is selected to minimize corrosion. Routinely scheduled analyses of the coolant chemical composition are performed to verify that the reactor coolant chemistry meets the specifications. Other additions, such as those to reduce activity transport and deposition, may be added to the system.

The chemical and volume control system (CVS) provides a means for adding chemicals to the reactor coolant system. The chemicals perform the following functions:

z Control the pH of the coolant during prestartup testing and subsequent operation z

Scavenge oxygen from the coolant during heatup z

Control radiolysis reactions involving hydrogen, oxygen, and nitrogen during power operations following startup Table 5.2-2 shows the normal limits for chemical additives and reactor coolant impurities for power operation.

The pH control chemical is lithium hydroxide monohydrate, enriched in the lithium-7 isotope to 99.9 percent. This chemical is chosen for its compatibility with the materials and water chemistry of borated water/stainless steel/zirconium/nickel-chromium-iron systems. In addition, lithium-7 is produced in solution from the neutron irradiation of the dissolved boron in the coolant. The lithium-7 hydroxide is introduced into the reactor coolant system via the charging flow. The concentration of lithium-7 hydroxide in the reactor coolant system is maintained in the range specified for pH control.

During reactor startup from the cold condition, hydrazine is used as an oxygen-scavenging agent.

The hydrazine solution is introduced into the reactor coolant system in the same manner as described for the pH control agent.

The reactor coolant is treated with dissolved hydrogen to control the net decomposition of water by radiolysis in the core region. The hydrogen reacts with oxygen introduced into the reactor coolant system by the radiolysis effect of radiation on molecules. Hydrogen makeup is supplied to the reactor coolant system by direct injection of high pressure gaseous hydrogen, which can be adjusted to provide the correct equilibrium hydrogen concentration. Subsection 1.9.1 indicates the degree of conformance with Regulatory Guide 1.44, "Control of the Use of Sensitized Stainless Steel."

Boron, in the chemical form of boric acid, is added to the reactor coolant system for long-term reactivity control of the core.

5.2-10 Revision 1 WLS 1&2 - UFSAR Suspended solid (corrosion product particulates) and other impurity concentrations are maintained below specified limits by controlling the chemical quality of makeup water and chemical additives and by purification of the reactor coolant through the chemical and volume control system.

The water chemistry program is based on industry guidelines as described in EPRI TR-1002884, Pressurized Water Reactor Primary Water Chemistry (Reference 201). The program includes periodic monitoring and control of chemical additives and reactor coolant impurities listed in Table 5.2-2. Detailed procedures implement the program requirements for sampling and analysis frequencies, and corrective actions for control of reactor water chemistry.

The frequency of sampling water chemistry varies (e.g. continuous, daily, weekly, or as needed) based on plant operating conditions and the EPRI water chemistry guidelines. Whenever corrective actions are taken to address an abnormal chemistry condition, increased sampling is utilized to verify the effectiveness of these actions. When measured water chemistry parameters are outside the specified range, corrective actions are taken to bring the parameter back within the acceptable range and within the time period specified in the EPRI water chemistry guidelines. Following corrective actions, additional samples are taken and analyzed to verify that the corrective actions were effective in returning the concentrations of contaminants to within the specified range.

Chemistry procedures will provide guidance for the sampling and monitoring of primary coolant properties.

5.2.3.2.2 Compatibility of Construction Materials with Reactor Coolant Ferritic low-alloy and carbon steels used in principal pressure-retaining applications have corrosion-resistant cladding on surfaces exposed to the reactor coolant. The corrosion resistance of the cladding material is at least equivalent to the corrosion resistance of Types 304 and 316 austenitic stainless steel alloys or nickel-chromium-iron alloy, martensitic stainless steel, and precipitation-hardened stainless steel. These clad materials may be subjected to the ASME Code-required postweld heat treatment for ferritic base materials.

Ferritic low-alloy and carbon steel nozzles have safe ends of stainless steel-wrought materials welded to nickel-chromium-iron alloy-weld metal F-number 43 buttering. The safe end is welded to the F 43 buttering after completion of postweld heat treatment of the buttering when the nozzle is larger than a 4-inch nominal inside diameter and/or the wall thickness is greater than 0.531 inch.

Austenitic stainless steel and nickel-chromium-iron alloy base materials with primary pressure-retaining applications are used in the solution-annealed or thermally treated conditions. These heat treatments are as required by the material specifications.

During later fabrications, these materials are not heated above 800°F other than locally by welding operations. The solution-annealed surge line material is subsequently formed by hot-bending followed by a resolution-annealing heat treatment.

Components using stainless steel sensitized in the manner expected during component fabrication and installation operate satisfactorily under normal plant chemistry conditions in pressurized water reactor (PWR) systems because chlorides, fluorides, and oxygen are controlled to very low levels.

Subsection 1.9.1 indicates the degree of conformance with Regulatory Guide 1.44, "Control of the Use of Sensitized Stainless Steel."

Hardfacing material in contact with reactor coolant is primarily a qualified low or zero cobalt alloy equivalent to Stellite-6. The use of cobalt base alloy is minimized. Low or zero cobalt alloys used for hardfacing or other applications where cobalt alloys have been previously used are qualified using wear and corrosion tests. The corrosion tests qualify the corrosion resistance of the alloy in reactor

5.2-11 Revision 1 WLS 1&2 - UFSAR coolant. Cobalt free wear resistant alloys considered for this application include those developed and qualified in nuclear industry programs.

5.2.3.2.3 Compatibility with External Insulation and Environmental Atmosphere In general, materials that are used in principal pressure-retaining applications and are subject to elevated temperature during system operation are in contact with thermal insulation that covers their outer surfaces.

The thermal insulation used on the reactor coolant pressure boundary is reflective stainless steel-type.

The compounded materials in the form of blocks, boards, cloths, tapes, adhesives, cements, etc., are silicated to provide protection of austenitic stainless steels against stress corrosion that may result from accidental wetting of the insulation by spillage, minor leakage, or other contamination from the environmental atmosphere. Subsection 1.9.1 indicates the degree of conformance with Regulatory Guide 1.36, "Nonmetallic Thermal Insulation for Austenitic Stainless Steel."

In the event of coolant leakage, the ferritic materials will show increased general corrosion rates.

Where minor leakage is considered possible based on service experience (such as valve packing, pump seals, etc.), only materials compatible with the coolant are used. Table 5.2-1 shows examples.

Ferritic materials exposed to coolant leakage can be readily observed as part of the inservice visual and/or nondestructive inspection program to confirm the integrity of the component for subsequent service.

5.2.3.3 Fabrication and Processing of Ferritic Materials 5.2.3.3.1 Fracture Toughness The fracture toughness properties of the reactor coolant pressure boundary components meet the requirements of the ASME Code,Section III, Subarticle NB-2300. Those portions of the reactor coolant pressure boundary that meet the requirements of ASME Code,Section III, Class 2 per the criteria of 10 CFR 50.55a, meet the fracture toughness requirements of the ASME Code,Section III, Subarticle NC-2300. The fracture toughness properties of the reactor coolant pressure boundary components also meet the requirements of Appendix G of 10 CFR 50.

The fracture toughness properties of the reactor vessel materials are discussed in Section 5.3.

Limiting steam generator and pressurizer reference temperatures for a nil ductility transition (RTNDT) temperatures are guaranteed at 10°F for the base materials and the weldments.

These materials meet the 50-foot-pound absorbed energy and 35-mils lateral expansion requirements of the ASME Code,Section III, at 70°F. The actual results of these tests are provided in the ASME material data reports which are supplied for each component and submitted to the owner at the time of shipment of the component.

Temperature instruments and Charpy impact test machines are calibrated to meet the requirements of the ASME Code,Section III, Paragraph NB-2360.

Westinghouse has conducted a test program to determine the fracture toughness of low-alloy ferritic materials with specified minimum yield strengths greater than 50,000 psi to demonstrate compliance with Appendix G of the ASME Code,Section III. In this program, fracture toughness properties were determined and shown to be adequate for base metal plates and forgings, weld metal, and

5.2-12 Revision 1 WLS 1&2 - UFSAR heat-affected zone metal for higher-strength ferritic materials used for components of the reactor coolant pressure boundary. WCAP-9292 (Reference 3) documents the program results.

5.2.3.3.2 Control of Welding Welding is conducted using procedures qualified according to the rules of Sections III and IX of the ASME Code. Control of welding variables (as well as examination and testing) during procedure qualification and production welding is performed according to ASME Code requirements.

The practices for storing and handling welding electrodes and fluxes comply with ASME Code,Section III, Paragraphs NB-2400 and NB-4400.

Subsection 1.9.1 indicates the degree of conformance of the ferritic materials components of the reactor coolant pressure boundary with Regulatory Guides 1.31, "Control of Ferrite Content in Stainless Steel Welds"; 1.34, "Control of Electroslag Weld Properties"; 1.43, "Control of Stainless Steel Weld Cladding of Low-Alloy Steel Components"; 1.50, "Control of Preheat Temperature for Welding of Low-Alloy Steel"; and 1.71, "Welder Qualification for Areas of Limited Accessibility."

5.2.3.4 Fabrication and Processing of Austenitic Stainless Steel Subsections 5.2.3.4.1 through 5.2.3.4.5 address Regulatory Guide 1.44, "Control of the Use of Sensitized Stainless Steel," and present the methods and controls to avoid sensitization and to prevent intergranular attack (IGA) of austenitic stainless steel components. Also, Subsection 1.9.1 indicates the degree of conformance with Regulatory Guide 1.44.

5.2.3.4.1 Cleaning and Contamination Protection Procedures Austenitic stainless steel materials used in the fabrication, installation, and testing of nuclear steam supply components and systems are handled, protected, stored, and cleaned according to recognized, accepted methods designed to minimize contamination that could lead to stress corrosion cracking. The procedures covering these controls are stipulated in process specifications.

Tools used in abrasive work operations on austenitic stainless steel, such as grinding or wire brushing, do not contain and are not contaminated with ferritic carbon steel or other materials that could contribute to intergranular cracking or stress-corrosion cracking.

These process specifications supplement the equipment specifications and purchase order requirements of every individual austenitic stainless steel component or system procured for the AP1000, regardless of the ASME Code classification.

The process specifications define these requirements and follow the guidance of ASME NQA-1.

Subsection 1.9.1 indicates the degree of conformance of the austenitic stainless steel components of the reactor coolant pressure boundary with Regulatory Guide 1.37, "Quality Assurance Requirements for Cleaning of Fluid Systems and Associated Components of Water-Cooled Nuclear Power Plants."

5.2.3.4.2 Solution Heat Treatment Requirements The austenitic stainless steels listed in Table 5.2-1 are used in the final heat-treated condition required by the respective ASME Code,Section II, materials specification for the particular type or grade of alloy.

5.2-13 Revision 1 WLS 1&2 - UFSAR 5.2.3.4.3 Material Testing Program Austenitic stainless steel materials of product forms with simple shapes need not be corrosion-tested provided that the solution heat treatment is followed by water quenching. Simple shapes are defined as plates, sheets, bars, pipe, and tubes, as well as forgings, fittings, and other shaped products that do not have inaccessible cavities or chambers that would preclude rapid cooling when water-quenched. This characterization of cavities or chambers as inaccessible is in relation to the entry of water during quenching and is not a determination of the component accessibility for inservice inspection.

When testing is required, the tests are performed according to a process specification following the guidelines of ASTM A 262, Practice A or E.

5.2.3.4.4 Prevention of Intergranular Attack of Unstabilized Austenitic Stainless Steels Unstabilized stainless steels can be subject to intergranular attack if the steels are sensitized, if certain species are present, such as chlorides and oxygen, and if they are exposed to a stressed condition. In the reactor coolant system, reliance is placed on the elimination or avoidance of these conditions. This is accomplished by the following:

z Control of primary water chemistry to provide a benign environment z

Use of materials in the final heat-treated condition and the prohibition of subsequent heat treatments from 800°F to 1500°F z

Control of welding processes and procedures to avoid heat-affected zone sensitization z

Confirmation that the welding procedures used for the manufacture of components in the primary pressure boundary and the reactor internals do not result in the sensitization of heat-affected zones Further information on each of these steps is provided in the following paragraphs.

The water chemistry in the reactor coolant system is controlled to prevent the intrusion of aggressive elements. In particular, the maximum permissible oxygen and chloride concentrations are 0.005 ppm and 0.15 ppm, respectively. Table 5.2-2 lists the recommended reactor coolant water chemistry specifications.

The precautions taken to prevent the intrusion of chlorides into the system during fabrication, shipping, and storage are stipulated in the appropriate process specifications. The use of hydrogen overpressure precludes the presence of oxygen during operation.

The effectiveness of these controls has been demonstrated by both laboratory tests and operating experience. The long-term exposure of severely sensitized stainless steels to reactor coolant environments in early Westinghouse pressurized water reactors has not resulted in any sign of intergranular attack. WCAP-7477 (Reference 4) describes the laboratory experimental findings and reactor operating experience. The additional years of operations since Reference 4 was issued have provided further confirmation of the earlier conclusions that severely sensitized stainless steels do not undergo any intergranular attack in Westinghouse pressurized water reactor coolant environments.

Although there is no evidence that pressurized water reactor coolant water attacks sensitized stainless steels, it is good metallurgical practice to avoid the use of sensitized stainless steels in the reactor coolant system components.

5.2-14 Revision 1 WLS 1&2 - UFSAR Accordingly, measures are taken to prohibit the use of sensitized stainless steels and to prevent sensitization during component fabrication. The wrought austenitic stainless steel stock used in the reactor coolant pressure boundary is used in one of the following conditions:

z Solution-annealed and water-quenched z

Solution-annealed and cooled through the sensitization temperature range within less than about 5 minutes Westinghouse has verified that these practices will prevent sensitization by performing corrosion tests on wrought material as it was received.

The heat-affected zones of welded components must, of necessity, be heated into the sensitization temperature range (800°F to 1500°F). However, severe sensitization (that is, continuous grain boundary precipitates of chromium carbide, with adjacent chromium depletion) can be avoided by controlling welding parameters and welding processes. The heat input and associated cooling rate through the carbide precipitation range are of primary importance. Westinghouse has demonstrated this by corrosion-testing a number of weldments.

The heat input in austenitic pressure boundary weldments is controlled by the following:

z Limiting the maximum interpass temperature to 350°F z

Exercising approval rights on welding procedures z

Requiring qualification of processes 5.2.3.4.5 Retesting Unstabilized Austenitic Stainless Steels Exposed to Sensitization Temperatures If during the course of fabrication, steel is inadvertently exposed to the sensitization temperature range, the material may be tested according to a process specification, following the guidelines of ASTM A 262, to verify that it is not susceptible to intergranular attack. Testing is not required for the following:

z Cast metal or weld metal with a ferrite content of 5 percent or more z

Material with a carbon content of 0.03 percent or less z

Material exposed to special processing, provided the following:

Processing is properly controlled to develop a uniform product Adequate documentation exists of service experience and/or test data to demonstrate that the processing will not result in increased susceptibility to intergranular attack If such material is not verified to be not susceptible to intergranular attack, the material is resolution-annealed and water-quenched or rejected.

5.2.3.4.6 Control of Welding The following paragraphs address Regulatory Guide 1.31, "Control of Ferrite Content in Stainless Steel Weld Metal." They present the methods used, and the verification of these methods, for austenitic stainless steel welding.

5.2-15 Revision 1 WLS 1&2 - UFSAR The welding of austenitic stainless steel is controlled to mitigate the occurrence of microfissuring, or hot cracking, in the weld.

Also, it has been well documented that delta ferrite is one of the mechanisms for reducing the susceptibility of stainless steel welds to hot cracking. The minimum delta ferrite level below which the material will be prone to hot cracking lies between 0 and 3 percent delta ferrite.

The following paragraphs discuss welding processes used to join stainless steel parts in components designed, fabricated, or stamped according to the ASME Code,Section III, Classes 1 and 2, and core support components. Delta ferrite control is appropriate for the preceding welding requirements, except where no filler metal is used or where such control is not applicable, such as the following:

electron beam welding; autogenous gas shielded tungsten arc welding; explosive welding; welding using fully austenitic welding materials.

The fabrication and installation specifications require welding procedures and welder qualification according to Section III of the ASME Code. They also include the delta ferrite determinations for the austenitic stainless steel welding materials used for welding qualification testing and for production processing.

Specifically, the undiluted weld deposits of the "starting" welding materials must contain at least 5 percent delta ferrite. (The equivalent ferrite number may be substituted for percent delta ferrite.)

This is determined by chemical analysis and calculation using the appropriate weld metal constitution diagrams in Section III of the ASME Code or magnetic measurement by calibrated instruments.

When new welding procedure qualification tests are evaluated for these applications, including repair welding of raw materials, they are performed according to the requirements of Sections III and IX of the ASME Code.

The results of the destructive and nondestructive tests are recorded in the procedure qualification record, in addition to the information required by Section III of the ASME Code.

The welding materials used for fabrication and installation welds of austenitic stainless steel materials and components meet the requirements of Section III of the ASME Code. For applications using austenitic stainless steel welding material, the material conforms to ASME weld metal analysis A-8, Type 308, 308L, 309, 309L, 316, or 316L.

Delta ferrite determinations of austenitic stainless steel weld filler materials to be used with gas tungsten arc welding (GTAW) and plasma arc welding (PAW) processes and any other welding material to be used with any GTAW, PAW, or gas metal arc welding (GMAW) process, including consumable insert material, shall be made using a magnetic measuring instrument and weld deposits made in accordance with ASME Code,Section III, NB-2432.1(c) or (d) or, alternatively, the delta ferrite determinations for welding materials may be performed by the use of chemical analysis performed either on the filler metal or on an undiluted weld deposit made in accordance with NB-2432. The allowable delta ferrite range shall be 5 FN to 20 FN for the weld material with low molybdenum content, and 5 FN to 16 FN for weld materials with higher molybdenum content such as Types 316/316L, which contain 2.0 to 3.0% molybdenum.

Delta ferrite determinations of austenitic stainless steel weld filler materials to be used with flux welding processes, such as shielded metal arc welding (SMAW), submerged arc welding (SAW) or for electro-slag weld (ESW) deposited cladding and other welding material to be used with other than the GTAW, PAW, or GMAW process shall be made using a magnetic measuring instrument and weld deposits made in accordance with ASME Code,Section III, B-2432.1(c) or (d) or, alternatively, the delta ferrite determinations may be performed by the use of chemical analysis of the undiluted weld deposit of NB-2432 in conjunction with Figure NB-2433.1-1. The allowable delta ferrite range shall be

5.2-16 Revision 1 WLS 1&2 - UFSAR 5 FN to 20 FN for the weld material with low molybdenum content, and 5 FN to 16 FN for weld materials with higher molybdenum content such as types 316/316L, which contain 2.0 to 3.0%

molybdenum.

Welding materials are tested using the welding energy inputs employed in production welding.

Combinations of approved heats and lots of welding materials are used for welding processes. The welding quality assurance program includes identification and control of welding material by lots and heats as appropriate. Weld processing is monitored according to approved inspection programs that include review of materials, qualification records, and welding parameters. Welding systems are also subject to the following:

z Quality assurance audit, including calibration of gauges and instruments z

Identification of welding materials z

Welder and procedure qualifications z

Availability and use of approved welding and heat-treating procedures z

Documentary evidence of compliance with materials, welding parameters, and inspection requirements Fabrication and installation welds are inspected using nondestructive examination methods according to Section III of the ASME Code rules.

To verify the reliability of these controls, Westinghouse has completed a delta ferrite verification program, described in WCAP-8324-A (Reference 5). This program has been approved as a valid approach to verify the Westinghouse hypothesis and is considered an acceptable alternative for conformance with the NRC Interim Position on Regulatory Guide 1.31. The regulatory staff's acceptance letter and topical report evaluation were received on December 30, 1974. The program results, which support the hypothesis presented in WCAP-8324-A (Reference 5), are summarized in WCAP-8693 (Reference 6).

Subsection 1.9.1 indicates the degree of conformance of the austenitic stainless steel components of the reactor coolant pressure boundary with Regulatory Guides 1.34, "Control of Electroslag Weld Properties," and 1.71, "Welder Qualification for Areas of Limited Accessibility."

5.2.3.4.7 Control of Cold Work in Austenitic Stainless Steels The use of cold worked austenitic stainless steels is limited to small parts including pins and fasteners where proven alternatives are not available and where cold worked material has been used successfully in similar applications. Cold work control of austenitic stainless steels in pressure boundary applications is provided by limiting the hardness of austenitic stainless steel raw material and controlling the hardness during fabrication by process control of bending, cold forming, straightening or other similar operation. Grinding of material in contact with reactor coolant is controlled by procedures. Ground surfaces are finished with successively finer grit sizes to remove the bulk of cold worked material.

5.2.3.5 Threaded Fastener Lubricants The lubricants to be used on threaded fasteners which maintain pressure boundary integrity in the reactor coolant and related systems and in the steam, feed, and condensate systems; threaded fasteners used inside those systems; and threaded fasteners used in component structural support

5.2-17 Revision 1 WLS 1&2 - UFSAR for those systems are specified in the design specification. Field selection of thread lubricants is not permitted. The thread lubricants are selected based on experience and test data which show them to be effective, but not to cause or accelerate corrosion of the fastener. Where leak sealants are used on threaded fasteners or can be in contact with the fastener in service, their selection is based on satisfactory experience or test data. Selection considers possible adverse interaction between sealants and lubricants. Lubricants containing molybdenum sulphide are prohibited.

5.2.4 Inservice Inspection and Testing of Class 1 Components Preservice and inservice inspection and testing of ASME Code Class 1 pressure-retaining components (including vessels, piping, pumps, valves, bolting, and supports) within the reactor coolant pressure boundary are performed in accordance with Section XI of the ASME Code including addenda according to 10 CFR 50.55a(g). This includes all ASME Code Section XI mandatory appendices.

The initial inservice inspection program incorporates the latest edition and addenda of the ASME Boiler and Pressure Vessel Code approved in 10 CFR 50.55a(b) on the date 12 months before initial fuel load. Inservice examination of components and system pressure tests conducted during successive 120-month inspection intervals must comply with the requirements of the latest edition and addenda of the Code incorporated by reference in 10 CFR 50.55a(b) 12 months before the start of the 120-month inspection interval (or the optional ASME Code cases listed in NRC Regulatory Guide 1.147, that are incorporated by reference in 10 CFR 50.55a(b)), subject to the limitations and modifications listed in 10 CFR 50.55a(b).

The specific edition and addenda of the Code used to determine the requirements for the inspection and testing plan for the initial and subsequent inspection intervals is to be delineated in the inspection program. The Code includes requirements for system pressure tests and functional tests for active components. The requirements for system pressure tests are defined in Section XI, IWA-5000 and IWB-5000. These tests verify the pressure boundary integrity in conjunction with inservice inspection.

Section 6.6 discusses Classes 2 and 3 component examinations.

Subsection 3.9.6 discusses the in-service functional testing of valves for operational readiness. Since none of the pumps in the AP1000 are required to perform an active safety function, the operational readiness test program for pumps is controlled administratively.

In conformance with ASME Code and NRC requirements, the preparation of inspection and testing programs is discussed in Subsection 5.2.6. A preservice inspection program (nondestructive examination) for the AP1000 will be developed and submitted to the NRC. The in-service inspection program will be submitted to the NRC as discussed in Subsection 5.2.6. These programs will comply with applicable in-service inspection provisions of 10 CFR 50.55a(b)(2).

The preservice program provides details of areas subject to examination, as well as the method and extent of preservice examinations. The in-service program details the areas subject to examination and the method, extent, and frequency of examinations. Additionally, component supports and examination requirements are included in the inspection programs.

5.2.4.1 System Boundary Subject to Inspection ASME Code Class 1 components (including vessels, piping, pumps, valves, bolting, and supports) are designated AP1000 equipment Class A (see Subsection 3.2.2). Class 1 pressure-retaining components and their specific boundaries are included in the equipment designation list and the line designation list. Both of these lists are contained in the inspection programs.

5.2-18 Revision 1 WLS 1&2 - UFSAR The Class 1 system boundary for both preservice and inservice inspection programs and the system pressure test program includes all those items within the Class 1 and Quality Group A (Equipment Class A per Subsection 3.2.2 and Table 3.2-3) boundary. Based on 10 CFR Part 50 and Regulatory Guide 1.26, the Class 1 boundary includes the following:

z Reactor pressure vessel; z

Portions of the Reactor System (RXS);

z Portions of the Chemical and Volume Control System (CVS);

z Portions of the Incore Instrumentation System (IIS);

z Portions of the Passive Core Cooling System (PXS);

z Portions of the Reactor Coolant System (RCS); and z

Portions of the Normal Residual Heat Removal System (RNS).

Those portions of the above systems within the Class 1 boundary are those items that are part of the reactor coolant pressure boundary as defined in Section 5.2.

Exclusions Portions of the systems within the reactor coolant pressure boundary (RCPB), as defined above, that are excluded from the Class 1 boundary in accordance with 10 CFR Part 50, Section 50.55a, are as follows:

z Those components where, in the event of postulated failure of the component during normal reactor operation, the reactor can be shut down and cooled down in an orderly manner, assuming makeup is provided by the reactor coolant makeup system only; or z

Components that are or can be isolated from the reactor coolant system by two valves in series (both closed, both open, or one closed and the other open). Each open valve is capable of automatic actuation and, assuming the other valve is open, its closure time is such that, in the event of postulated failure of the component during normal reactor operation, each valve remains operable and the reactor can be shut down and cooled down in an orderly manner, assuming makeup is provided by the reactor coolant makeup system only.

The description of portions of systems excluded from the RCPB does not address Class 1 components exempt from inservice examinations under ASME Code Section XI rules. The Class 1 components exempt from inservice examinations are defined by ASME Section XI, IWB-1220, except as modified by 10 CFR 50.55a.

The inservice inspection program is augmented for reactor vessel top head inspections by use of the ASME Code Case N-729-1, Alternative Examination Requirements for Pressurized-Water Reactor (PWR) Vessel Upper Heads With Nozzles Having Pressure-Retaining Partial-Penetration Welds, as modified by the conditions specified in 10 CFR 50.55a(g)(6)(ii)(D).

Boric acid corrosion control procedures require inspection of the reactor coolant pressure boundary subject to leakage that can cause boric acid corrosion of the reactor coolant pressure boundary materials. The procedures determine the principal locations where leaks can cause degradation of the primary pressure boundary by boric acid corrosion. Potential paths of the leaking coolant are established. The boric acid corrosion control procedures also contain methods for conducting

5.2-19 Revision 1 WLS 1&2 - UFSAR examinations and performing engineering evaluations to establish the impact on the reactor coolant pressure boundary when leakage is located.

The boric acid corrosion control procedures consist of:

1.

Visual inspections of component surfaces that are potentially exposed to borated water leakage.

2.

Discovery of leak path and removal of boric acid residue.

3.

Assessment of the corrosion.

4.

Follow-up inspection for adequacy of corrective actions, as appropriate.

The inservice inspection program, along with the boric acid corrosion control procedures, provides guidance for inspecting the integrity of bolting and threaded fasteners.

The in-service inspection program is augmented to include the performance of a 100 percent volumetric examination of the weld build-up on the reactor vessel head for the instrumentation penetrations (Quickloc) conducted once during each 120-month inspection interval in accordance with the ASME Code,Section XI. The weld build-up acceptance standards are those provided in ASME Code,Section XI, IWB-3514. Personnel performing examinations and the ultrasonic examination systems are qualified in accordance with ASME Code,Section XI, Appendix VIII.

Alternatively, an alternative inspection may be developed in conjunction with the voluntary consensus standards bodies (i.e., ASME) and submitted to the NRC for approval.

5.2.4.2 Arrangement and Inspectability ASME Code Class 1 components are designed so that access is provided in the installed condition for visual, surface, and volumetric examinations specified by the ASME Code Section XI (1998 Edition) and mandatory appendices. Design provisions, in accordance with Section XI, Article IWA-1500, are incorporated in the design processes for Class 1 components.

The AP1000 design activity includes a design for inspectability program. The goal of this program is to provide for the inspectability access and conformance of component design with available inspection equipment and techniques. Factors such as examination requirements, examination techniques, accessibility, component geometry and material selection are used in evaluating component designs. Examination requirements and examination techniques are defined by inservice inspection personnel. Inservice inspection review as part of the design process provides component designs that conform to inspection requirements and establishes recommendations for enhanced inspections.

Considerable experience is utilized in designing, locating, and supporting pressure-retaining components to permit preservice and in-service inspection required by Section XI of the ASME Code.

Factors such as examination requirements, examination techniques, accessibility, component geometry, and material selections aid in establishing the designs. The inspection design goals are to eliminate uninspectable components, reduce occupational radiation exposure, reduce inspections times, allow state-of-the-art inspection system, and enhance flaw detection and the reliability of flaw characterization.

As one example of component geometry that reduces inspection requirements, the reactor pressure vessel has no longitudinal welds requiring in-service inspection. No Quality Group A (ASME Code Class 1) components require in-service inspection during reactor operation.

5.2-20 Revision 1 WLS 1&2 - UFSAR Removable insulation and shielding are provided on those piping systems requiring volumetric and surface examination. Removable hangers and pipe whip restraints are provided as necessary and practical to facilitate inservice inspection. Working platforms are provided in areas requiring inspection and servicing of pumps and valves. Permanent or temporary working platforms, scaffolding, and ladders facilitate access to piping and component welds. The components and welds requiring in-service inspection allow for the application of the required in-service inspection methods.

Such design features include sufficient clearances for personnel and equipment, maximized examination surface distances, two-sided access, favorable materials, weld-joint simplicity, elimination of geometrical interferences, and proper weld surface preparation.

Some of the ASME Class 1 components are included in modules fabricated offsite and shipped to the site. (See Subsection 3.9.1.5.) The modules are designed and engineered to provide access for in-service inspection and maintenance activities. The attention to detail engineered into the modules before construction provides the accessibility for inspection and maintenance. Relief from Section XI requirements should not be required for Class 1 pressure retaining components in the AP1000.

Future unanticipated changes in the ASME Code,Section XI requirements could, however, necessitate relief requests. Relief from the inspection requirements of ASME Code,Section XI will be requested when full compliance is not practical according to the requirements of 10 CFR 50.55a(g)(5)(iv). In such cases, specific information will be provided which identifies the applicable Code requirements, justification for the relief request, and the inspection method to be used as an alternative.

Space is provided to handle and store insulation, structural members, shielding, and other materials related to the inspection. Suitable hoists and other handling equipment, lighting, and sources of power for inspection equipment are installed. The integrated head package provides for access to inspect the reactor vessel head and the weld of the control rod drive mechanisms to the reactor vessel head. Closure studs, nuts, and washers are removed to a dry location for direct inspection.

5.2.4.3 Examination Techniques and Procedures The visual, surface, and volumetric examination techniques and procedures agree with the requirements of Subarticle IWA-2200 and Table IWB-2500-1 of the ASME Code,Section XI.

Qualification of the ultrasonic inspection equipment, personnel and procedures is in compliance with Appendix VII of the ASME Code,Section XI. Approved Code Cases listed in Regulatory Guide 1.147 are applied as the need arises during the pre-service inspection. Approved Code Cases determined as necessary to accomplish pre-service inspection activities are used. The liquid penetrant method or the magnetic particle method is used for surface examinations. Radiography, ultrasonic, or eddy current techniques (manual or remote) are used for volumetric examinations.

The reactor vessel is designed so that the reactor pressure vessel (RPV) inspections can be performed primarily from the vessel internal surfaces. These inspections can be done remotely using existing inspection tool designs to minimize occupational radiation exposure and to facilitate the inspections. Access is also available for the application of inspection techniques from the outside of the complete reactor pressure vessel. Reactor pressure vessel welds are examined to meet the requirements of Appendix VIII of ASME Code,Section XI, which has been incorporated into the guidance of Regulatory Guide 1.150, as defined in Subsection 1.9.1.

5.2.4.3.1 Examination Methods Ultrasonic Examination of the Reactor Vessel Ultrasonic examination for the RPV is conducted in accordance with the ASME Code,Section XI.

The design of the RPV considered the requirements of the ASME Code Section XI with regard to performance of preservice inspection. For the required preservice examinations, the reactor vessel meets the acceptance standards of Section XI, IWB-3510. The RPV shell welds are designed for

5.2-21 Revision 1 WLS 1&2 - UFSAR 100% accessibility for both preservice and inservice inspection. RPV shell welds may be examined from the inside or outside diameter surfaces (or a combination of those techniques) using automated ultrasonic examination equipment. The RPV nozzle-to-shell welds are 100% accessible for preservice inspection but might have limited areas that may not be accessible from the outer surface for inservice examination techniques. If accessibility is limited, an inservice inspection program relief request is prepared and submitted for review approval by the NRC.

Inner radius examinations are performed from the outside of the nozzle using several compound angle transducer wedges to obtain complete coverage of the required examination volume.

Alternatively, nozzle inner radius examinations may be performed using enhanced visual techniques, as allowed by 10 CFR 50.55a(b)(2)(xxi).

Visual Examination Visual examination methods VT-1, VT-2 and VT-3 are conducted in accordance with ASME Section XI, IWA-2210. In addition, VT-2 examinations meet the requirements of IWA-5240.

Where direct visual VT-1 examinations are conducted without the use of mirrors or with other viewing aids, clearance is provided where feasible for the head and shoulders of a man within a working arm's length of the surface to be examined.

Surface Examination Magnetic particle and liquid penetrant examination techniques are performed in accordance with ASME Section XI, IWA-2221 and IWA-2222, respectively. Direct examination access for magnetic particle (MT) and liquid penetrant (PT) examination is the same as that required for direct visual (VT-1) examination (see Visual Examination), except that additional access is provided as necessary to enable physical contact with the item in order to perform the examination. Remote MT and PT generally are not appropriate as a standard examination process; however, boroscopes and mirrors can be used at close range to improve the angle of vision.

Volumetric Ultrasonic Direct Examination Volumetric ultrasonic direct examination is performed in accordance with ASME Section XI, IWA-2232, which references mandatory Appendix I.

Alternative Examination Techniques As provided by ASME Section XI, IWA-2240, alternative examination methods, a combination of methods, or newly developed techniques may be substituted for the methods specified for a given item in this section, provided that they are demonstrated to be equivalent or superior to the specified method. This provision allows for the use of newly developed examination methods, techniques, etc.,

which may result in improvements in examination reliability and reductions in personnel exposure. In accordance with 10 CFR 50.55a(b)(2)(xix), IWA-2240 as written in the 1997 Addenda of ASME Section XI must be used when applying these provisions.

5.2.4.3.2 Qualification of Personnel and Examination Systems for Ultrasonic Examination Personnel performing examinations shall be qualified in accordance with ASME Section XI, Appendix VII. Ultrasonic examination systems shall be qualified in accordance with industry accepted programs for implementation of ASME Section XI, Appendix VIII. Qualification to ASME Section XI, Appendix VIII, is in compliance with the provisions of 10 CFR 50.55a.

5.2-22 Revision 1 WLS 1&2 - UFSAR 5.2.4.4 Inspection Intervals Inspection intervals are established as defined in Subarticles IWA-2400 and IWB-2400 of the ASME Code,Section XI. The interval may be extended by as much as one year so that inspections are concurrent with plant outages. Because 10 CFR 50.55a(g)(4) requires 120-month inspection intervals, Inspection Program B of IWB-2400 must be chosen. The inspection interval is divided into three periods. Period one comprises the first three years of the interval, period two comprises the next four years of the interval, and period three comprises the remaining three years of the inspection interval. Each period can be extended for up to one year to enable an inspection to coincide with a plant outage. The adjustment of period end dates shall not alter the rules and requirements for scheduling inspection intervals. It is intended that in-service examinations be performed during normal plant outages such as refueling shutdowns or maintenance shutdowns occurring during the inspection interval.

5.2.4.5 Examination Categories and Requirements The examination categories and requirements are established according to Subarticle IWB-2500 and Table IWB-2500-1 of the ASME Code,Section XI. Class 1 piping supports will be examined in accordance with ASME Section XI, IWF-2500. Preservice examinations required by design specification and preservice documentation are in accordance with ASME Section III, NB-5280.

Components exempt from preservice examination are described in ASME Section III, NB-5283.

The preservice examinations comply with IWB-2200. The preservice examination is performed once in accordance with ASME XI, IWB-2200, on all of the items selected for inservice examination, with the exception of the examinations specifically excluded by ASME Section XI from preservice requirements, such as VT-3 examination of valve body and pump casing internal surfaces (B-L-2 and B-M-2 examination categories, respectively) and the visual VT-2 examinations for category B-P.

5.2.4.6 Evaluation of Examination Results Examination results are evaluated according to IWA-3000 and IWB-3000, with flaw indications according to IWB-3400 and Table IWA-3410-1. Repair procedures, if required, are according to IWA-4000 of the ASME Code,Section XI.

Components containing flaws or relevant conditions and accepted for continued service in accordance with the requirements of IWB-3132.4 or IWB-3142.4 are subjected to successive period examinations in accordance with the requirements of IWB-2420. Examinations that reveal flaws or relevant conditions exceeding Table IWB-3410-1 acceptance standards are extended to include additional examinations in accordance with the requirements of IWB-2430.

5.2.4.7 System Leakage and Hydrostatic Pressure Tests System pressure tests comply with IWA-5000 and IWB-5000 of the ASME Code,Section XI. These system pressure tests are included in the design transients defined in Subsection 3.9.1. This subsection discusses the transients included in the evaluation of fatigue of Class 1 components due to cyclic loads.

5.2.4.8 Relief Requests The specific areas where the applicable ASME Code requirements cannot be met are identified after the initial examinations are performed. Should relief requests be required, they will be developed through the regulatory process and submitted to the NRC for approval in accordance with 10 CFR 50.55a(a)(3) or 50.55a(g)(5). The relief requests include appropriate justifications and proposed alternative inspection methods.

5.2-23 Revision 1 WLS 1&2 - UFSAR 5.2.4.9 Preservice Inspection of Class 1 Components Preservice examinations required by design specification and preservice documentation are in accordance with ASME Section III, NB-5281. Volumetric and surface examinations are performed as specified in ASME Section III, NB-5282. Components described in ASME Section III, NB-5283 are exempt from preservice examination.

5.2.4.10 Program Implementation The milestones for preservice and inservice inspection program implementation are identified in Table 13.4-201.

5.2.5 Detection of Leakage Through Reactor Coolant Pressure Boundary The reactor coolant pressure boundary (RCPB) leakage detection monitoring provides a means of detecting and to the extent practical, identifying the source and quantifying the reactor coolant leakage. The detection monitors perform the detection and monitoring function in conformance with the requirements of General Design Criteria 2 and 30 and the recommendations of Regulatory Guide 1.45. Leakage detection monitoring is also maintained in support of the use of leak-before-break criteria for high-energy pipe in containment. See Subsection 3.6.3 for the application of leak-before-break criteria.

Leakage detection monitoring is accomplished using instrumentation and other components of several systems. Diverse measurement methods including level, flow, and radioactivity measurements are used for leak detection. The equipment classification for each of the systems and components used for leak detection is generally determined by the requirements and functions of the system in which it is located. There is no requirement that leak detection and monitoring components be safety-related. See Figure 5.2-1 for the leak detection approach. The descriptions of the instrumentation and components used for leak detection and monitoring include information on the system.

To satisfy position 1 of Regulatory Guide 1.45, reactor coolant pressure boundary leakage is classified as either identified or unidentified leakage. Identified leakage includes:

z Leakage from closed systems such as reactor vessel seal or valve leaks that are captured and conducted to a collecting tank z

Leakage into auxiliary systems and secondary systems (intersystem leakage) (This leakage is considered to be part of the 10 gpm limit identified leakage in the bases of the technical specification 3.4.8. This additional leakage must be considered in the evaluation of the reactor coolant inventory balance.)

Other leakage is unidentified leakage.

5.2.5.1 Collection and Monitoring of Identified Leakage Identified leakage other than intersystem leakage is collected in the reactor coolant drain tank. The reactor coolant drain tank is a closed tank located in the reactor cavity in the containment. The tank vent is piped to the gaseous radwaste system to prevent release of radioactive gas to the containment atmosphere. For positions 1 and 7 of Regulatory Guide 1.45, the liquid level in the reactor coolant drain tank and total flow pumped out of the reactor coolant drain tank are used to calculate the identified leakage rate. The identified leakage rate is automatically calculated by the plant computer. A leak as small as 0.1 gpm can be detected in one hour. The design leak of 10 gpm will be detected in less than a minute. These parameters are available in the main control room. The

5.2-24 Revision 1 WLS 1&2 - UFSAR reactor coolant drain tank, pumps, and sensors are part of the liquid radwaste system. The following sections outline the various sources of identified leakage other than intersystem leakage.

5.2.5.1.1 Valve Stem Leakoff Collection Valve stem leakoff connections are not provided in the AP1000.

5.2.5.1.2 Reactor Head Seal The reactor vessel flange and head flange are sealed by two concentric seals. Seal leakage is detected by two leak-off connections: one between the inner and outer seal, and one outside the outer seal. These lines are combined in a header before being routed to the reactor coolant drain tank. An isolation valve is installed in the common line. During normal plant operation, the leak-off valves are aligned so that leakage across the inner seal drains to the reactor coolant drain tank.

A surface-mounted resistance temperature detector installed on the bottom of the common reactor vessel seal leak pipe provides an indication and high temperature alarm signal in the main control room indicating the possibility of a reactor pressure vessel head seal leak. The temperature detector and drain line downstream of the isolation valve are part of the liquid radwaste system.

The reactor coolant pump closure flange is sealed with a welded canopy seal and does not require leak-off collection provisions.

Leakage from other flanges is discussed in Subsection 5.2.5.3, Collection and Monitoring of Unidentified Leakage.

5.2.5.1.3 Pressurizer Safety Relief and Automatic Depressurization Valves Temperature is sensed downstream of each pressurizer safety relief valve and each automatic depressurization valve mounted on the pressurizer by a resistance temperature detector on the discharge piping just downstream of each globe valve. High temperature indications (alarms in the main control room) identify a reduction of coolant inventory as a result of seat leakage through one of the valves. These detectors are part of the reactor coolant system. This leakage is drained to the reactor coolant drain tank during normal plant operation and vented to containment atmosphere or the in-containment refueling water storage tank during accident conditions. This identified leakage is measured by the change in level of the reactor coolant drain tank.

5.2.5.1.4 Other Leakage Sources In the course of plant operation, various minor leaks of the reactor coolant pressure boundary may be detected by operating personnel. If these leaks can be subsequently observed, quantified, and routed to the containment sump, this leakage will be considered identified leakage.

5.2.5.2 Intersystem Leakage Detection Substantial intersystem leakage from the reactor coolant pressure boundary to other systems is not expected. However, possible leakage points across passive barriers or valves and their detection methods are considered. In accordance with position 4 of Regulatory Guide 1.45, auxiliary systems connected to the reactor coolant pressure boundary incorporate design and administrative provisions that limit leakage. Leakage is detected by increasing auxiliary system level, temperature, flow, or pressure, by lifting the relief valves or increasing the values of monitored radiation in the auxiliary system.

5.2-25 Revision 1 WLS 1&2 - UFSAR The normal residual heat removal system and the chemical and volume control system, which are connected to the reactor coolant system, have potential for leakage past closed valves. For additional information on the control of reactor coolant leakage into these systems, see Subsections 5.4.7 and 9.3.6 and the intersystem LOCA discussion in Subsection 1.9.5.1.

5.2.5.2.1 Steam Generator Tubes An important potential identified leakage path for reactor coolant is through the steam generator tubes into the secondary side of the steam generator. Identified leakage from the steam generator primary side is detected by one, or a combination, of the following:

z High condenser air removal discharge radioactivity, as monitored and alarmed by the turbine island vent discharge radiation monitor z

Steam generator secondary side radioactivity, as monitored and alarmed by the steam generator blowdown radiation monitor z

Secondary side radioactivity, as monitored and alarmed by the main steam line radiation monitors z

Radioactivity, boric acid, or conductivity in condensate as indicated by laboratory analysis Details on the radiation monitors are provided in Section 11.5, Radiation Monitoring.

5.2.5.2.2 Component Cooling Water System Leakage from the reactor coolant system to the component cooling water system is detected by high component cooling water system radiation, by increasing surge tank level, by high flow downstream of selected components, by a high temperature condition at reactor coolant pump bearing water temperature RTDs, or by some combination of the preceding. Refer to Section 11.5, Radiation Monitoring, and Subsection 9.2.2, Component Cooling Water System.

5.2.5.2.3 Passive Residual Heat Removal Heat Exchanger Tubes A potential identified leakage path for reactor coolant is through the passive residual heat removal heat exchanger into the in-containment refueling water storage tank. Identified leakage from the passive residual heat removal heat exchanger tubes is detected as follows:

z High temperature in the passive residual heat removal heat exchanger, as monitored and alarmed by temperature detectors in the heat exchanger inlet and outlet piping, alerts the operators to potential leakage. The location of these instruments is selected to provide early indication of leakage considering the potential for thermal stratification. The alarm setpoint is selected to provide early indication of leakage.

z The operator then closes the passive residual heat removal heat exchanger inlet isolation valve and observes the pressure indication inside the passive residual heat removal heat exchanger. If pressure remains at reactor coolant system pressure, then tube leakage is not present, and the high passive residual heat removal heat exchanger temperature is indicative of leakage through the outlet isolation valves.

z If the operator observes a reduction in pressure, then passive residual heat removal heat exchanger tube leakage is present. The operator then observes the change in the reactor coolant system inventory balance when the passive residual heat removal heat exchanger

5.2-26 Revision 1 WLS 1&2 - UFSAR inlet isolation valve is closed. The difference in the reactor coolant system leakage when the isolation valve is closed identifies the passive residual heat removal heat exchanger tube leakage rate.

5.2.5.3 Collection and Monitoring of Unidentified Leakage Position 3 of Regulator Guide 1.45 identifies three diverse methods of detecting unidentified leakage.

AP1000 use two of these three and adds a third method. To detect unidentified leakage inside containment, the following diverse methods may be utilized to quantify and assist in locating the leakage:

z Containment Sump Level z

Reactor Coolant System Inventory Balance z

Containment Atmosphere Radiation Other methods that can be employed to supplement the above methods include:

z Containment Atmosphere Pressure, Temperature, and Humidity z

Containment Water Level z

Visual Inspection The reactor coolant system is an all-welded system, except for the connections on the pressurizer safety valves, reactor vessel head, explosively actuated fourth stage automatic depressurization system valves, pressurizer and steam generator manways, and reactor vessel head vent, which are flanged. During normal operation, variations in airborne radioactivity, containment pressure, temperature, or specific humidity above the normal level signify a possible increase in unidentified leakage rates and alert the plant operators that corrective action may be required. Similarly, increases in containment sump level signify an increase in unidentified leakage. The following sections outline the methods used to collect and monitor unidentified leakage.

These methods also allow for identification of main steam line leakage inside containment. The primary method of identifying steam line leakage is redundant containment sump level monitoring. A diverse backup method is provided by containment water level monitoring. The safety-related class 1E containment water level sensors use a different measuring process than the containment sump level sensors.

5.2.5.3.1 Containment Sump Level Monitor In conformance with position 2 of Regulatory Guide 1.45, leakage from the reactor coolant pressure boundary and other components not otherwise identified inside the containment will condense and flow by gravity via the floor drains and other drains to the containment sump.

A leak in the primary system would result in reactor coolant flowing into the containment sump.

Leakage is indicated by an increase in the sump level. The containment sump level is monitored by three seismic Category I level sensors. Position 6 of Regulatory Guide 1.45 requires two sensors.

The third sensor is provided for redundancy in detecting main steam line leakage. The level sensors are powered from a safety-related Class 1E electrical source. These sensors remain functional when subjected to a safe shutdown earthquake in conformance with the guidance in Regulatory Guide 1.45. The containment sump level and sump total flow sensors located on the discharge of the sump pump are part of the liquid radwaste system.

5.2-27 Revision 1 WLS 1&2 - UFSAR Failure of two of the level sensors will still allow the calculation of a 0.5 gpm in-leakage rate within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. The data display and processing system (DDS) computes the leakage rate and the plant control system (PLS) provides an alarm in the main control room if the average change in leak rate for any given measurement period exceeds 0.5 gpm for unidentified leakage. The minimum detectable leak is 0.03 gpm. Unidentified leakage is the total leakage minus the identified leakage.

The leakage rate algorithm subtracts the identified leakage directed to the sump.

To satisfy positions 2 and 5 of Regulatory Guide 1.45, the measurement interval must be long enough to permit the measurement loop to adequately detect the increase in level that would correspond to 0.5 gpm leak rate, and yet short enough to ensure that such a leak rate is detected within an hour. The measurement interval is less than or equal to 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

When the sump level increases to the high level setpoint, one of the sump pumps automatically starts to pump the accumulated liquid to the waste holdup tanks in the liquid radwaste system. The sump discharge flow is integrated and available for display in the control room, in accordance with position 7 of Regulatory Guide 1.45.

Procedures to identify the leakage source upon a change in the unidentified leakage rate into the sump include the following:

z Check for changes in containment atmosphere radiation monitor indications, z

Check for changes in containment humidity, pressure, and temperature, z

Check makeup rate to the reactor coolant system for abnormal increases, z

Perform an RCS inventory balance, z

Check for changes in water levels and other parameters in systems which could leak water into the containment, and z

Review records for maintenance operations which may have discharged water into the containment.

This procedure allows identification of main steam line leakage as well as RCS leakage.

5.2.5.3.2 Reactor Coolant System Inventory Balance Reactor coolant system inventory monitoring provides an indication of system leakage. Net level change in the pressurizer is indicative of system leakage. Monitoring net makeup from the chemical and volume control system and net collected leakage provides an important method of obtaining information to establish a water inventory balance. An abnormal increase in makeup water requirements or a significant change in the water inventory balance can indicate increased system leakage.

The reactor coolant system inventory balance is a quantitative inventory or mass balance calculation.

This approach allows determination of both the type and magnitude of leakage. Steady-state operation is required to perform a proper inventory balance calculation. Steady-state is defined as stable reactor coolant system pressure, temperature, power level, pressurizer level, and reactor coolant drain tank and in-containment refueling water storage tank levels. The reactor coolant inventory balance is done on a periodic basis and when other indication and detection methods indicate a change in the leak rate. The minimum detectable leak is 0.13 gpm.

5.2-28 Revision 1 WLS 1&2 - UFSAR The mass balance involves isolating the reactor coolant system to the extent possible and observing the change in inventory which occurs over a known time period. This involves isolating the systems connected to the reactor coolant system. System inventory is determined by observing the level in the pressurizer. Compensation is provided for changes in plant conditions which affect water density.

The change in the inventory determines the total reactor coolant system leak rate. Identified leakages are monitored (using the reactor coolant drain tank) to calculate a leakage rate and by monitoring the intersystem leakage. The unidentified leakage rate is then calculated by subtracting the identified leakage rate from the total reactor coolant system leakage rate.

Since the pressurizer inventory is controlled during normal plant operation through the level control system, the level in the pressurizer will be reasonably constant even if leakage exists. The mass contained in the pressurizer may fluctuate sufficiently, however, to have a significant effect on the calculated leak rate. The pressurizer mass calculation includes both the steam and water mass contributions.

Changes in the reactor coolant system mass inventory are a result of changes in liquid density. Liquid density is a strong function of temperature and a lesser function of pressure. A range of temperatures exists throughout the reactor coolant system all of which may vary over time. A simplified, but acceptably accurate, model for determining mass changes is to assume all of the reactor coolant system is at TAverage.

The inventory balance calculation is done by the data display and processing system with additional input from sensors in the protection and safety monitoring system, chemical and volume control system, and liquid radwaste system. The use of components and sensors in systems required for plant operation provides conformance with the regulatory guidance of position 6 in Regulatory Guide 1.45 that leak detection should be provided following seismic events that do not require plant shutdown.

5.2.5.3.3 Containment Atmosphere Radioactivity Monitor Leakage from the reactor coolant pressure boundary will result in an increase in the radioactivity levels inside containment. The containment atmosphere is continuously monitored for airborne particulate radioactivity. Air flow through the monitor is provided by the suction created by a vacuum pump. An F18 particulate concentration monitor indicates radiation concentrations in the containment atmosphere.

F18 particulate is a neutron activated product, which is proportional to power levels. An increase in activity inside containment would, therefore, indicate a leakage from the reactor coolant pressure boundary. Based on the concentration of F18 in particulate form and the power level, reactor coolant pressure boundary leakage can be estimated.

The F18 particulate monitor is seismic Category I. Conformance with the position 6 guidance of Regulatory Guide 1.45 that leak detection should be provided following seismic events that do not require plant shutdown is provided by the seismic Category I classification. Safety-related Class 1E power is not required since loss of power to the radiation monitor is not consistent with continuing operation following an earthquake.

The F18 particulate monitor is operable when the plant is above 20-percent power, and can detect a 0.5 gpm leak within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> when the plant is at full power.

Radioactivity concentration indication and alarms for loss of sample flow, high radiation, and loss of indication are provided. Sample collection connections permit sample collection for laboratory analysis. The radiation monitor can be calibrated during power operation.

5.2-29 Revision 1 WLS 1&2 - UFSAR 5.2.5.3.4 Containment Pressure, Temperature and Humidity Monitors Reactor coolant pressure boundary leakage increases containment pressure, temperature, and humidity, values available to the operator through the plant control system.

An increase in containment pressure is an indication of increased leakage or a high energy line break. Containment pressure is monitored by redundant Class 1E pressure transmitters. For additional discussion see Subsection 6.2.2, Passive Containment Cooling System.

The containment average temperature is monitored using temperature instrumentation at the inlet to the containment fan cooler as an indication of increased leakage or a high energy line break. This instrumentation as well as temperature instruments within specific areas, including steam generator areas, pressurizer area, and containment compartments, are part of the containment recirculation cooling system.

An increase in the containment average temperature combined with an increase in containment pressure indicate increased leakage or a high energy line break. The individual compartment area temperatures can assist in identifying the location of the leak.

Containment humidity is monitored using temperature-compensated humidity detectors which determine the water-vapor content of the containment atmosphere. An increase in the containment atmosphere humidity indicates release of water vapor within the containment. The containment humidity monitors are part of the containment leak rate test system.

The humidity monitors supplement the containment sump level monitors and are most sensitive under conditions when there is no condensation. A rapid increase of humidity over the ambient value by more than 10 percent is indication of a probable leak.

Containment pressure, temperature and humidity can assist in identifying and locating a leak. They are not relied on to quantify a leak.

5.2.5.3.5 Response to Reactor Coolant System Leakage Operating procedures specify operator actions in response to prolonged low level unidentified reactor coolant leakage conditions that exist above normal leakage rates and below the Technical Specification (TS) limits to provide operators sufficient time to take action before the TS limit is reached. The procedures include identifying, monitoring, trending, and addressing prolonged low level leakage. The procedures for effective management of leakage, including low level leakage, are developed including the following operations related activities:

z Trends in the unidentified leakage rates are periodically analyzed. When the leakage rate increases noticeably from the baseline leakage rate, the safety significance of the leak is evaluated. The rate of increase in the leakage is determined to verify that plant actions can be taken before the plant exceeds TS limits.

z Procedures are established for responding to leakage. These procedures address the following considerations to prevent adverse safety consequence results from the leakage:

Plant procedures specify operator actions in response to leakage rates less than the limits set forth in the Technical Specifications. The procedures include actions for confirming the existence of a leak, identifying its source, increasing the frequency of monitoring, verifying the leakage rate (through a water inventory balance), responding to trends in the leakage rate, performing a walkdown outside containment, planning a

5.2-30 Revision 1 WLS 1&2 - UFSAR containment entry, adjusting alarm setpoints, limiting the amount of time that operation is permitted when the sources of the leakage are unknown, and determining the safety significance of the leakage.

Plant procedures specify the amount of time the leakage detection and monitoring instruments (other than those required by Technical Specifications) may be out of service to effectively monitor the leakage rate during plant operation (i.e., hot shutdown, hot standby, startup, transients, and power operation).

z The output and alarms from leakage monitoring systems are provided in the main control room. Procedures are readily available to the operators for converting the instrument output to a common leakage rate. (Alternatively, these procedures may be part of a computer program so that the operators have a real-time indication of the leakage rate as determined from the output of these monitors.) Periodic calibration and testing of leakage monitoring systems are conducted. The alarm(s), and associated setpoint(s), provide operators an early warning signal so that they can take corrective actions, as discussed above, i.e., before the plant exceeds TS limits.

z During maintenance and refueling outages, actions are taken to identify the source of any unidentified leakage that was detected during plant operation. In addition, corrective action is taken to eliminate the condition resulting in the leakage.

The procedures described above will be available prior to fuel load.

5.2.5.4 Safety Evaluation Leak detection monitoring has no safety-related function. Therefore, the single failure criterion does not apply and there is no requirement for a nuclear safety evaluation. The containment sump level monitors and the containment atmosphere monitor are seismic Category I. The components used to calculate reactor coolant system inventory balance are both safety-related and nonsafety-related components. The containment sump level monitors are powered from the Class 1E dc and UPS system (IDS). Measurement signals are processed by the data display and processing system and the plant control system (PLS).

5.2.5.5 Tests and Inspections To satisfy position 8 of Regulatory Guide 1.45, periodic testing of leakage detection monitors verifies the operability and sensitivity of detector equipment. These tests include installation calibrations and alignments, periodic channel calibrations, functional tests, and channel checks in conformance with regulatory guidance.

5.2.5.6 Instrumentation Applications The parameters tabulated below satisfy position 7 of Regulatory Guide 1.45 and are provided in the main control room to allow operating personnel to monitor for indications of reactor coolant pressure boundary leakage. The containment sump level, containment atmosphere radioactivity, reactor coolant system inventory balance, and the flow measurements are provided as gallon per minute leakage equivalent.

5.2-31 Revision 1 WLS 1&2 - UFSAR Note:

1.

The containment water level instruments provide indication and alarm for identification of a 0.5 gpm leak within 3.5 days.

5.2.5.7 Technical Specification Limits which satisfy position 9 of Regulatory Guide 1.45 for identified and unidentified reactor coolant leakage are identified in the technical specifications, Chapter 16. LCO 3.4.7 addresses RCS leakage limits. LCO 3.7.8 addresses main steam line leakage limits. LCO 3.4.9 addresses leak detection instrument requirements.

5.2.6 Combined License Information Items 5.2.6.1 ASME Code and Addenda The ASME Code editions and addenda to be used are addressed in Subsection 5.2.1.1.

5.2.6.2 Plant-Specific Inspection Program The plant-specific preservice inspection and inservice inspection program is addressed in Subsections 5.2.4, 5.2.4.1, 5.2.4.3.1, 5.2.4.3.2, 5.2.4.4, 5.2.4.5, 5.2.4.6, 5.2.4.8, 5.2.4.9, and 5.2.4.10.

Parameter System(s)

Alarm or Indication Containment sump level and sump total flow WLS Both Reactor coolant drain tank level and drain tank total flow WLS Both Containment atmosphere radioactivity PSS Both Reactor coolant system inventory balance parameters CVS, PCS, PXS, RCS, WLS Both Containment humidity VUS Indication Containment atmospheric pressure PCS Both Containment atmosphere temperature VCS Both Containment water level PXS Both(1)

Reactor vessel head seal leak temperature WLS Both Pressurizer safety relief valve leakage temperature RCS Both Reactor coolant pump bearing water RTDs RCS Both Steam generator blowdown radiation BDS Both Turbine island vent discharge radiation TDS Both Component cooling water radiation CCS Both Main steam line radiation SGS Both Component cooling water surge tank level CCS Both

5.2-32 Revision 1 WLS 1&2 - UFSAR 5.2.6.3 Response to Unidentified Reactor Coolant System Leakage Inside Containment Prolonged low-level unidentified reactor coolant leakage inside containment is addressed in Subsection 5.2.5.3.5.

5.2.7 References 1.

Burnett, T. W. T., et al., "LOFTRAN Code Description," WCAP-7907-P-A (Proprietary),

and WCAP-7907-A (Nonproprietary), April 1984.

2.

EPRI PWR Safety and Relief Valve Test Program, Safety and Relief Valve Test Report, Interim Report, April 1982.

3.

Logsdon, W. A., Begley, J. A., and Gottshall, C. L., "Dynamic Fracture Toughness of ASME SA-508 Class 2a and ASME SA-533 Grade A Class 2 Base and Heat-Affected Zone Material and Applicable Weld Metals," WCAP-9292, March 1978.

4.

Golik, M. A., "Sensitized Stainless Steel in Westinghouse PWR Nuclear Steam Supply Systems," WCAP-7477-L (Proprietary), March 1970, and WCAP-7735 (Nonproprietary),

August 1971.

5.

Enrietto, J. F., "Control of Delta Ferrite in Austenitic Stainless Steel Weldments,"

WCAP-8324-A, June 1975.

6.

Enrietto, J. F., "Delta Ferrite in Production Austenitic Stainless Steel Weldments,"

WCAP-8693, January 1976.

201.

EPRI, Pressurized Water Reactor Primary Water Chemistry Guidelines, EPRI TR-1002884, Revision 5, October 2003.

5.2-33 Revision 1 WLS 1&2 - UFSAR Table 5.2-1 (Sheet 1 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type Reactor Vessel Components Head plates (other than core region)

SA-533 or SA-508 Type B, CL 1 or GR 3 CL 1 Shell courses SA-508 GR 3 CL 1 Shell, flange, and nozzle forgings SA-508 GR 3 CL 1 Nozzle safe ends SA-182 F316, F316L, F316LN Appurtenances to the control rod drive mechanism (CRDM)

SB-167 SB-166 or SA-182 N06690 N06690 or F304, F304L, F304LN, F316, F316L, F316LN Instrumentation nozzles, upper head SB-167 SB-166 and SA-182, or SA-479 N06690 N06690 and F304, F304L, F304LN, F316, F316L, F316LN 304, 304L, 304LN 316, 316L, 316LN, S21800 Closure studs SA-540 GR B23 CL 3 or GR B24 CL 3 Monitor tubes SA-312(1) or SA-376 or SA-182 TP304, TP304L, TP304LN, TP316, TP316L, TP316LN TP304, TP304LN, TP316, TP316LN F304, F304L, F304LN, F316, F316L, F316LN

5.2-34 Revision 1 WLS 1&2 - UFSAR Vent pipe SB-166 SB-167 or SA-312(1)

SA-376 N06690 N06690 TP304, TP304L, TP304LN, TP316, TP316L, TP316LN TP304, TP304LN, TP316, TP316LN Steam Generator Components Pressure plates SA-533 Type B, CL 1 or CL 2 Pressure forgings (including primary side nozzles and tube sheet)

SA-508 GR 3, CL 2 Nozzle safe ends SA-182 SA-336 or SB-564 F316, F316L, F316LN F316LN N06690 Channel heads SA-508 GR 3, CL 2 Tubes SB-163 N06690 Manway studs/

Nuts SA-193 SA-194 GR B7 GR 7 Pressurizer Components Pressure plates SA-533 Type B, CL 1 Pressure forgings SA-508 GR 3, CL 2 Nozzle safe ends SA-182 SA-336 or SB-163 F316, F316L, F316LN F316, F316L, F316LN N06690 Manway studs/

Nuts SA-193 SA-194 GR B7 GR 7 Table 5.2-1 (Sheet 2 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type

5.2-35 Revision 1 WLS 1&2 - UFSAR Reactor Coolant Pump Pressure forgings SA-182 SA-508 or SA-336 F304, F304L, F304LN, F316, F316L, F316LN GR1(4)

F304, F304L, F304LN, F316, F316L, F316LN Pressure casting SA-351 CF3A or CF8A Tube and pipe SA-213 SA-376 or SA-312(1)

TP304, TP304L, TP304LN, TP316, TP316L, TP316LN TP304, TP304LN, TP316, TP316LN TP304, TP304L, TP304LN, TP316, TP316L, TP316LN Pressure plates SA-240 304, 304L, 304LN, 316, 316L, 316LN Closure bolting SA-193 or SA-540 GR B7 or GR B24, CL 2 & CL 4, or GR B23, CL2, CL 3 & 4 Reactor Coolant Piping Reactor coolant pipe SA-376 SA-182(2)

TP304, TP304LN, TP316, TP316LN F304, F304L, F304LN, F316, F316L, F316LN Reactor coolant fittings, branch nozzles SA-376 SA-182 TP304, TP304LN, TP316, TP316LN F304, F304L, 304LN, F316, F316L, F316LN Surge line SA-376 or SA-312(1)

TP304, TP304LN, TP316, TP316LN TP304, TP304L, TP304LN, TP316, TP316L, TP316LN Table 5.2-1 (Sheet 3 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type

5.2-36 Revision 1 WLS 1&2 - UFSAR RCP piping other than loop and surge line SA-312(1) and SA-376 TP304, TP304L, TP304LN, TP316, TP316L, TP316LN TP304, TP304L, TP304LN, TP316, TP316L, TP316LN CRDM Latch housing SA-336 F304, F304L, F304LN, F316, F316L, F316LN Rod travel housing SA-336 F304, F304L, F304LN, F316, F316L, F316LN Valves Bodies SA-182 or SA-351 F304, F304L, F304LN, F316, F316L, F316LN or CF3A, CF3M, CF8 Bonnets SA-182 SA-240 or SA-351 F304, F304L, F304LN, F316, F316L, F316LN, 304, 304L, 304LN, 316, 316L, 316LN or CF3A, CF3M, CF8 Discs SA-182 SA-564 or SA-351 F304, F304L, F304LN, F316, F316L, F316LN Type 630 (H1100 or H1150),

or CF3A, CF3M, CF8 Stems SA-479 SA-564 or SB-637 316, 316LN or XM-19 Type 630 (H1100 or H1150)

Alloy N07718 Pressure retaining bolting SA-453 SA-564 SA-193 GR 660 Type 630 (H1100)

GR B8 Table 5.2-1 (Sheet 4 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type

5.2-37 Revision 1 WLS 1&2 - UFSAR Pressure retaining nuts SA-453 or SA-194 GR 660 or GR 6 or 8 Core Makeup Tank Pressure plates SA-533 or SA-240 Type B, CL 1 or 304, 304L, 304LN, 316, 316L, 316LN Pressure forgings SA-508 or SA-182 SA-336 GR 3 CL 1 or F304, F304L, F316, F316L F304, F304L, F316, F316L Passive Residual Heat Removal Heat Exchanger Pressure plates SA-533 or SA-240 Type B CL1 or 304, 304L, 304LN Pressure forgings SA-508 or SA-336 GR 3 CL 2 or F304, F304L, F304LN Tubing SB-163 N06690 Welding Consumables Austenitic stainless steel corrosion-resistant cladding, buttering, and welds(5)

SFA 5.4 SFA 5.9(6)

SFA 5.22(3)

SFA 5.30 E308, E308L, E309, E309L, E316, E316L ER308, ER308L, ER309, ER309L, ER316, ER316L, EQ308L, EQ309L E308LTX-Y, E308TX-Y, E309LTX-Y, E309TX-Y, E316LTX-Y, E316TX-Y IN308, IN308L, IN316, IN316L Table 5.2-1 (Sheet 5 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type

5.2-38 Revision 1 WLS 1&2 - UFSAR Ni-Cr-Fe corrosion-resistant cladding, buttering, and welds(7)

SFA 5.11 SFA 5.14 ENiCrFe-7 ERNiCrFe-7, ERNiCrFe-7A, EQNiCrFe-7, EQNiCrFe-7A Carbon steel pressure boundary welds(8)(4)

SFA 5.1, 5.17, 5.18, 5.20, 5.30 To be compatible with base material Low alloy pressure boundary welds(8)

SFA 5.5, 5.23, 5.28, 5.29 To be compatible with base material Notes:

1.

Limited to seamless form only.

2.

Subject to manufacturing sequence and final finish condition review.

3.

Only gas-shielded electrodes for use with the FCAW process are permitted. These electrodes shall not be used for root passes except for joints welded from two sides where the root is back-gouged to sound metal as evidenced by magnetic particle or liquid penetrant testing.

X=Position, acceptable values 0 (flat and horizontal) and 1 (all positions)

Y=Shield Gas, acceptable values 1 (100% CO2) and 4 (75-80% Argon, remainder CO2) 4.

GR1 material (carbon steel) and associated filler material is used only for reactor coolant pump components that are not exposed to the reactor coolant. These components are limited to the stator main flange, stator shell, and external heat exchanger supports.

5.

Austenitic stainless steel filler metals that are exposed to temperatures within the 800°F to 1500°F temperature range after welding, and are not subsequently solution annealed, do not contain more than 0.03% or 0.04% carbon by weight (depending on the maximum carbon content of the corresponding low-carbon classification in the SFA specification), or have demonstrated nonsensitization per Regulatory Guide 1.44.

6.

In addition to ER, EC (composite) rod/electrodes may also be used.

7.

These materials are UNS N06052, N06054, and W86152, where F43 grouping is allowed by codes cases 2143-1 and 2142-2. Note that UNS N06054 is only in ASME Section II part C 2004 with 2006 addenda and later. Similar welding alloys developed for improved weldability may be used as allowed by ASME Boiler and Pressure Vessel Code rules.

8.

These weld metals are compatible with the base metal mechanical requirements and meet applicable ASME Section III, Section II part C, and Section IX requirements. Their use is limited to applications in which the welds are not exposed to reactor coolant. These weld metals used with a flux bearing welding process are also not used for root passes of single-sided welds.

Table 5.2-1 (Sheet 6 of 6)

Reactor Coolant Pressure Boundary Materials Specifications Component Material Class, Grade, or Type

5.2-39 Revision 1 WLS 1&2 - UFSAR Notes:

1.

Oxygen concentration must be controlled to less than 0.1 ppm in the reactor coolant by scavenging with hydrazine prior to plant operation above 200°F. During power operation with the specified hydrogen concentration maintained in the coolant, the residual oxygen concentration will not exceed 0.005 ppm.

2.

Halogen concentrations must be maintained below the specified values regardless of system temperature.

3.

Hydrogen must be maintained in the reactor coolant for plant operations with nuclear power above 1 MW. The normal operating range should be 30-40 cm3 (STP) H2/kg H2O.

4.

Solids concentration determined by filtration through filter having 0.45-m pore size.

5.

The specified lithium concentrations must be established for startup testing prior to heatup beyond 150°F. During cold hydrostatic testing and hot functional testing in the absence of boric acid, the reactor coolant limits for lithium hydroxide must be maintained to inhibit halogen stress corrosion cracking.

6.

These limits are included in the table of reactor coolant specifications as recommended standards for monitoring coolant purity.

Establishing coolant purity within the limits shown for these species is judged desirable with the current data base to minimize fuel clad crud deposition, which affects the corrosion resistance and heat transfer of the clad.

7.

Specification is applicable during power operation when zinc is being injected. The zinc concentration is maintained at the lower of 0.04 ppm or that specified in the reload safety analyses.

Table 5.2-2 Reactor Coolant Water Chemistry Specifications Electrical conductivity Determined by the concentration of boric acid and alkali present.

Expected range is <1 to 40 mhos/cm at 25°C.

Solution pH Determined by the concentration of boric acid and alkali present.

Expected values range between 4.2 (high boric acid concentration) and 10.5 (low boric acid concentration) at 25°C. Values will be 5.0 or greater at normal operating temperatures.

Oxygen(1) 0.1 ppm, maximum Chloride(2) 0.15 ppm, maximum Fluoride(2) 0.15 ppm, maximum Hydrogen(3) 25 to 50 cm3 (STP)/kg H2O Suspended solids(4) 0.2 ppm, maximum pH control agent (Li7OH)(5)

Lithium is coordinated with boron per fuel warranty contract.

Boric acid Variable from 0 to 4000 ppm as boron Silica(6) 1.0 ppm, maximum Aluminum(6) 0.05 ppm, maximum Calcium(6) + magnesium 0.05 ppm, maximum Magnesium(6) 0.025 ppm, maximum Zinc(7) 0.04 ppm, maximum

• NRC Staff approval is required prior to implementing a change in this information.

5.2-40 Revision 1 WLS 1&2 - UFSAR Table 5.2-3 ASME Code Cases Code Case Number Title N-4-11 Special Type 403 Modified Forgings or Bars,Section III, Division 1, Class 1 and Class CS N-20-4 SB-163 Nickel-Chromium-Iron Tubing (Alloys 600 and 690) and Nickel-Iron-Chromium Alloy 800 at a Specified Minimum Yield Strength of 40.0 ksi and Cold Worked Alloy 800 at Yield Strength of 47.0 ksi,Section III, Division 1, Class 1 N-60-5 Material for Core Support Structures,Section III, Division 1(a)

N-71-18 Additional Material for Subsection NF, Class 1, 2, 3 and MC Component Supports Fabricated by Welding,Section III Division 1

[N-122-2 Stress Indices for integral Structural AttachmentsSection III, Division 1, Class 1]*

N-249-14 Additional Materials for Subsection NF, Class 1, 2, 3, and MC Supports Fabricated Without Welding,Section III, Division 1(b)

[N-284-1 Metal Containment Shell Buckling Design Methods,Section III, Division 1 Class MC]*

[N-318-5 Procedure for Evaluation of the Design of Rectangular Cross Section Attachments on Class 2 or 3 Piping Section III, Division]*

[N-319-3 Alternate Procedure for Evaluation of Stresses in Butt Welding Elbows in Class 1 Piping Section III, Division 1]*

[N-391-2 Procedure for Evaluation of the Design of Hollow Circular Cross Section Welded Attachments on Class 1 Piping Section III, Division 1]*

[N-392-3 Procedure for Valuation of the Design of Hollow Circular Cross Section Welded Attachments on Class 2 and 3 Piping Section III, Division 1(c) ]*

N-474-2 Design Stress Intensities and Yield Strength Values for UNS06690 With a Minimum Yield Strength of 35 ksi, Class 1 Components,Section III, Division 1 2142-2 F-Number Grouping for Ni-Cr-Fe Filler Metals,Section IX (Applicable to all Sections, including Section III, Division 1, and Section XI) 2143-1 F-Number Grouping for Ni-Cr-Fe, Classification UNS W86152 Welding Electrode,Section IX N-655-1 Use of SA-738, Grade B, for Metal Containment Vessels, Class MC,Section III, Division 1 N-757-1 Alternative Rules for Acceptability for Class 2 and 3 Valves, NPS 1 (DN25) and Smaller with Welded and Nonwelded End Connections other than Flanges,Section III, Division 1(d)

N-759-2 Alternative Rules for Determining Allowable External Pressure and Compressive Stresses for Cylinders, Cones, Spheres, and Formed Heads, Class 1, 2, and 3,Section III, Division 1 N-782 Use of Code Editions, Addenda, and CasesSection III, Division 1 Notes:

(a)

Use of this code case will meet the conditions for Code Case N-60-4 in Reg. Guide 1.85 Revision 30.

(b)

Use of this code case will meet the conditions for Code Case N-249-10 in Reg. Guide 1.85 Revision 30.

(c)

Use of this code case will meet the conditions for Code Case N-392-1 in Reg. Guide 1.84 Revision 30.

(d)

Use of this code case is subject to the condition that the design provisions of ASME Code,Section III, Division I, Appendix XIII not be used for the design of Code Class 3 (ND) valves.

5.2-41 Revision 1 WLS 1&2 - UFSAR Figure 5.2-1 Leak Detection Approach

5.3-1 Revision 1 WLS 1&2 - UFSAR 5.3 Reactor Vessel 5.3.1 Reactor Vessel Design 5.3.1.1 Safety Design Bases The reactor vessel, as an integral part of the reactor coolant pressure boundary will be designed, fabricated, erected and tested to quality standards commensurate with the requirements set forth in 10 CFR 50, 50.55a and General Design Criterion 1. Design and fabrication of the reactor vessel is carried out in accordance with ASME Code,Section III, Class 1 requirements. Subsections 5.2.3 and 5.3.2 provide further details.

The performance and safety design bases of the reactor vessel follow:

z The reactor vessel provides a high integrity pressure boundary to contain the reactor coolant, heat generating reactor core, and fuel fission products. The reactor vessel is the primary pressure boundary for the reactor coolant and the secondary barrier against the release of radioactive fission products.

z The reactor vessel provides support for the reactor internals, flow skirt, and core to ensure that the core remains in a coolable configuration.

z The reactor vessel directs main coolant flow through the core by close interface with the reactor internals and flow skirt.

z The reactor vessel provides for core internals location and alignment.

z The reactor vessel provides support and alignment for the control rod drive mechanisms and in-core instrumentation assemblies.

z The reactor vessel provides support and alignment for the integrated head assembly.

z The reactor vessel provides an effective seal between the refueling cavity and sump during refueling operations.

z The reactor vessel supports and locates the main coolant loop piping.

z The reactor vessel provides support for safety injection flow paths.

z The reactor vessel serves as a heat exchanger during core meltdown scenario with water on the outside surface of the vessel.

5.3.1.2 Safety Description The reactor vessel consists of a cylindrical section with a transition ring, hemispherical bottom head, and a removable flanged hemispherical upper head (Figure 5.3-1). Key dimensions are shown in Figures 5.3-5 and 5.3-6. The cylindrical section consists of two shells, the upper shell and the lower shell. The upper and lower shells and the lower hemispherical head are fabricated from low alloy steel and clad with austenitic stainless steel. The upper shell forging is welded to the lower shell forging, and the lower shell is welded to the transition ring, which is welded to the hemispherical bottom head. The removable flanged hemispherical upper head consists of a single forging, which includes the closure head flange and the closure head dome. The closure head is fabricated from a low alloy steel forging and clad with austenitic stainless steel. Specifics of the processes used in base materials, clad material, and weld materials are discussed in Subsection 5.2.3. The removable

5.3-2 Revision 1 WLS 1&2 - UFSAR flanged hemispherical closure head is attached to the vessel (consisting of the upper shell-lower shell-bottom hemispherical head) by studs. Two metal o-rings are used for sealing the two assemblies. Inner and outer monitor tubes are provided through the upper shell to collect any leakage past the o-rings. Details of the head gasket monitoring connections are included in Subsection 5.2.5.2.1.

The reactor vessel supports the internals. An internal ledge is machined into the top of the upper shell section. The core barrel flange rests on the ledge. A large circumferential spring is positioned on the top surface of the core barrel flange. The upper support plate rests on the top surface of the spring. The spring is compressed by installation of the reactor vessel closure head and the upper and lower core support assemblies are restrained from any axial movements.

Four core support pads are located on the bottom hemispherical head just below the transition ring-to-lower shell circumferential weld. The core support pads function as a clevis. At assembly, as the lower internals are lowered into the vessel, the keys at the bottom of the lower internals engage the clevis in the axial direction. With this design, the internals are provided with a lateral support at the furthest extremity and may be viewed as a beam supported at the top and bottom.

The interfaces between the reactor vessel and the lower internals core barrel are such that the main coolant flow enters through the inlet nozzle and is directed down through the annulus between the reactor vessel and core barrel and through the flow skirt and flows up through the core. The annulus is designed such that the core remains in a coolable configuration for all design conditions.

Prior to installation of the internals into the reactor vessel, guide studs are assembled into the upper shell. Dimensional relationships are established between the guide studs and the core support pads such that when the lower internals lifting rig engages the guide studs, the keys at the bottom of the lower internals are in relative circumferential position to enter the core support pads.

There are 69 penetrations in the removable flanged hemispherical head (closure head) that are used to provide access for the control rod drive mechanisms. Each control rod drive mechanism is positioned in its opening and welded to the closure head penetration. In addition there are eight penetrations in the closure head used to provide access for in-core and core exit instrumentation.

Lugs are welded to the outside surface of the closure head along the outer periphery of the dome section. The purpose of these lugs is to provide support and alignment for the integrated head package.

Attached to the top surface and along the outer periphery of the upper shell is a ring section. During field assembly the ring is welded to the refueling cavity seal liner. This ring provides an effective water seal between the refueling cavity and sump during refueling operations.

A support pad is integral to each of the four inlet nozzles. The reactor vessel is supported by the pads. The pads rest on steel base pads atop a support structure, which is attached to the concrete foundation wall. Thermal expansion and contraction of the vessel are accommodated by sliding surfaces between the support pads and the base plates. Side stops on these plates keep the vessel centered and resist lateral loads.

The reactor vessel primary and direct vessel injection (DVI) nozzles are located in the upper shell.

These nozzles are either forged as part of the upper shell forging or are fabricated by set in construction such that the welding is through the vessel shell forging. A stainless steel safe end is shop welded to each of the four inlet, two outlet and two DVI nozzles to facilitate field welding without heat treatment to the stainless steel reactor coolant piping system. The primary coolant nozzles support one end of the primary coolant system. Reaction loads are transferred into the nozzles and

5.3-3 Revision 1 WLS 1&2 - UFSAR eventually into the support pads. The inlet and outlet elevation nozzles are offset in different planes by 17.5 inches. This allows pump maintenance without discharging the core.

There are no penetrations in the reactor vessel below the core. This eliminates the possibility of a loss-of-coolant accident by leakage from the reactor vessel that would allow the core to be uncovered.

5.3.1.3 System Safety Evaluation The reactor vessel is part of the reactor coolant system. Load and stress evaluation for operating loads and mechanical transients of safe shutdown earthquake (SSE), and pipe ruptures appear in Subsection 3.9.3.

5.3.1.4 Inservice Inspection/Inservice Testing Inservice surveillance is discussed in Subsection 5.3.4.7.

5.3.2 Reactor Vessel Materials 5.3.2.1 Material Specifications Material specifications are in accordance with the ASME Code requirements and are given in Subsection 5.2.3. All ferritic reactor vessel materials comply with the fracture toughness requirements of Section 50.55a and Appendices G and H of 10 CFR 50.

The ferritic materials of the reactor vessel beltline are restricted to the maximum limits shown in Table 5.3-1. Copper, nickel, and phosphorus content is restricted to reduce sensitivity to irradiation embrittlement in service.

5.3.2.2 Special Processes Used for Manufacturing and Fabrication The reactor vessel is classified as AP1000 Class A. Design and fabrication of the reactor vessel is carried out in accordance with ASME Code,Section III, Class 1 requirements. The shell sections, flange, and nozzles are manufactured as forgings. The hemispherical heads are made from dished plates or forgings. The reactor vessel parts are joined by welding, using the single or multiple wire submerged arc and the shielded metal arc processes. Gas metal arc welding and plasma arc welding are acceptable methods of applying buttering for dissimilar metal welds.

The use of severely sensitized stainless steel as a pressure boundary material is prohibited and is eliminated by either a select choice of material or by programming the method of assembly.

At locations in the reactor vessel where stainless steel and nickel-chromium-iron alloy are joined, the final joining beads are nickel-chromium-iron alloy weld metal in order to prevent cracking.

The location of full penetration weld seams in the upper closure head and vessel bottom head are restricted to areas that permit accessibility during in-service inspection.

The stainless steel clad surfaces are sampled to demonstrate that composition requirements are met.

Freedom from underclad cracking is provided by special evaluation of the procedure qualification for cladding applied on low-alloy steel (SA-508, GR 3 CL 1).

5.3-4 Revision 1 WLS 1&2 - UFSAR Minimum preheat requirements have been established for pressure boundary welds using low-alloy material. The preheat is maintained until either a low temperature (400°F - 500°F) post heat treatment, an intermediate postweld heat treatment or a full postweld heat treatment is performed.

A field weld is made, after the reactor vessel has been set, to install the permanent reactor vessel cavity seal ring. This stainless steel filler weld joins the seal ring to the reactor vessel seal ledge. A minimum preheat is specified for this weld in compliance with the ASME Code requirements.

The flow skirt is also welded to support lugs in the field after the reactor vessel/internals system is set.

5.3.2.3 Special Methods for Nondestructive Examination The nondestructive examination (NDE) of the reactor vessel and its appurtenances is conducted in accordance with ASME Code,Section III requirements; also, numerous examinations are performed in addition to ASME Code,Section III requirements. The nondestructive examination of the vessel is discussed in the following paragraphs, and the reactor vessel quality assurance program is given in Table 5.3-2.

5.3.2.3.1 Ultrasonic Examination In addition to the required ASME Code straight beam ultrasonic examination, angle beam inspection over 100 percent of one major surface of plate material is performed during fabrication to detect discontinuities that may be undetected by the straight beam examination.

In addition to the ASME Code,Section III nondestructive examination, full penetration ferritic pressure boundary welds in the reactor vessel are ultrasonically examined during fabrication. This test is performed upon completion of the welding and intermediate heat treatment but prior to the final postweld heat treatment.

After hydrotesting, full penetration ferritic pressure boundary welds in the reactor vessel, as well as the nozzle to safe end welds, are ultrasonically examined. These inspections are performed in addition to the ASME Code,Section III nondestructive examination requirements.

5.3.2.3.2 Penetrant Examinations The partial penetration welds for the control rod drive mechanism head adapters and the QuickLoc assemblies are inspected by dye penetrant after the root pass, in addition to ASME code requirements. Core support block attachment welds are inspected by dye penetrant after the first layer of weld metal and after each 0.5 inch of weld metal. Clad surfaces and other vessel and head internal surfaces are inspected by dye penetrant after the hydrostatic test.

5.3.2.3.3 Magnetic Particle Examination Magnetic particle examination requirements below are in addition to the magnetic particle examination requirements of Section III of the ASME Code. All magnetic particle examinations of materials and welds are performed in accordance with the following:

z Prior to the final postweld heat treatment, only by the prod, coil, or direct contact method z

After the final postweld heat treatment, only by the yoke method The following surfaces and welds are examined by magnetic particle methods. The acceptance standards are in accordance with Section III of the ASME Code.

5.3-5 Revision 1 WLS 1&2 - UFSAR Surface Examinations z

Magnetic particle examination of exterior vessel and head surfaces after the hydrostatic test.

z Magnetic particle examination of exterior closure stud surfaces and all nut surfaces after final machining or rolling. Continuous circular and longitudinal magnetization is used.

z Magnetic particle examination of inside diameter surfaces of carbon and low alloy steel products that have their properties enhanced by accelerated cooling. This inspection is performed after forming and machining and prior to cladding.

Weld Examination Magnetic particle examination of the welds attaching the closure head lifting lugs and refueling seal ledge to the reactor vessel after the first layer and each 0.5 inch of weld metal is deposited. All pressure boundary welds are examined after back-chipping or back-grinding operations.

5.3.2.4 Special Controls for Ferritic and Austenitic Stainless Steels Welding of ferritic steels and austenitic stainless steels is discussed in Subsection 5.2.3.

Subsection 5.2.3 includes discussions on the degree of conformance with Regulatory Guide 1.44.

Section 1.9 discusses the degree of conformance with Regulatory Guides, including 1.31 and 1.34 (if applicable), as well as 1.37, 1.43, 1.50, 1.71, and 1.99.

5.3.2.5 Fracture Toughness Assurance of adequate fracture toughness of ferritic materials in the reactor vessel (ASME Code,Section III, Class 1 component) is provided by compliance with the requirements for fracture toughness testing included in NB-2300 to Section III of the ASME Code and Appendix G of 10 CFR 50.

The initial Charpy V-notch minimum upper shelf fracture energy levels for the reactor vessel beltline base metal transverse direction and welds are 75 foot-pounds, as required by Appendix G of 10 CFR 50. The vessel fracture toughness data are given in Table 5.3-3. The AP1000 end-of-life RTNDT and upper shelf energy projections were estimated using Regulatory Guide 1.99 for the end-of-life neutron fluence at the 1/4-thickness (T) and ID reactor vessel locations.

5.3.2.6 Material Surveillance In the surveillance program, the evaluation of radiation damage is based on pre-irradiation testing of Charpy V-notch and tensile specimens and postirradiation testing of Charpy V-notch, tensile, and 1/2-T compact tension (CT) fracture mechanics test specimens. The program is directed toward evaluation of the effect of radiation on the fracture toughness of reactor vessel steels based on the transition temperature approach and the fracture mechanics approach. The program conforms to ASTM E-185 (Reference 1) and 10 CFR 50, Appendix H.

Surveillance test materials are prepared from the actual materials used in fabricating the beltline region of the reactor vessel. Records are maintained of the chemical analyses, fabrication history, mechanical properties and other essential variables pertinent to the fabrication process of the shell forging and weld metal from which the surveillance test materials are prepared. The test materials are processed so that they are representative of the material in the completed reactor vessel.

Three metallurgically different materials prepared from sections of reactor vessel shell forging are used for test specimens. These include base metal, weld metal and heat affected zone (HAZ) material.

5.3-6 Revision 1 WLS 1&2 - UFSAR Base metal test material is manufactured from a section of ring forging, either the intermediate shell course, the lower shell course, or the transition ring of the reactor pressure vessel. Selection is based on an evaluation of initial toughness (characterized by the reference temperature (RTNDT) and Upper Shelf Energy (USE)), and the predicted effect of chemical composition (nickel and residual copper) and neutron fluence on the toughness (RTNDT shift and decrease in USE) during reactor operation.

The ring forging with the highest predicted adjusted RTNDT temperature (initial RTNDT plus RTNDT shift) or that with USE predicted to approach close to the minimum limit of 50 ft-lb at end-of-license (EOL) is selected as the surveillance base metal test material. The means for measuring initial toughness and for predicting irradiation induced toughness changes is consistent with applicable procedures in force at the time the material is being selected. The section of shell forging used for the base metal test block is adjacent to the test material used for fracture toughness tests.

Weld metal and HAZ test material is produced by welding together sections of the forgings from the beltline of the reactor vessel. The HAZ test material is manufactured from a section of the same shell course forging used for base metal test material. The sections of shell course forging used for weld metal and HAZ test material are adjacent to the test material used for fracture toughness tests. The heat of wire or rod and lot of flux are from the same heat and lot used in making the beltline region welds. Welding parameters duplicate those used for the beltline region welds. The procedures for inspection of the reactor vessel welds are followed for the inspection of the welds in test materials.

The surveillance weld and HAZ material are heat-treated to metallurgical conditions which are representative of the final metallurgical conditions of similar materials in the completed reactor vessel.

Test Specimens are marked to identify the type of materials and the orientation with respect to the test materials. Drawings specify the identification system to be used and include plant identification, type of material, orientation of specimen and sequential number.

Baseline test specimens are provided for establishing the baseline (unirradiated) properties of the reactor vessel materials. The data from tests of these specimens provides the basis for determining the radiation induced property changes of the reactor vessel materials.

Drop weight test specimens of each of base metal, weld metal, and HAZ metal are provided for establishing the nil-ductility transition temperature (NDTT) of the unirradiated surveillance materials.

These data form the basis for RTNDT determination from which subsequent radiation induced changes are determined.

Standard Charpy impact test specimens each of base metal (longitudinal (tangential) and transverse (axial)), weld metal, and HAZ material are provided for developing a Charpy impact energy transition curve from fully brittle to fully ductile behavior for defining specific index temperatures for these materials. These data, together with the drop weight NDTT, are used to establish an RTNDT for each material.

Tensile test specimens each of base metal (longitudinal (tangential) and transverse (axial)), weld metal, and HAZ metal are provided to permit a sufficient number of tests for accurately establishing the tensile properties for these materials at a minimum of three test temperatures (e.g., ambient, operating and one intermediate temperature) to define the strength of the material.

The above described test specimens are to be used for determining changes in the strength and toughness of the surveillance materials resulting from neutron irradiation. Sufficient Charpy impact, compact tension and tensile test specimens are provided for establishing the changes in the properties of the surveillance materials over the lifetime of the reactor vessel. The type, quantity, and storage conditions (e.g., surveillance capsules backfilled with inert gas) of test specimens meet or exceed the minimum requirements of ASTM E-185.

5.3-7 Revision 1 WLS 1&2 - UFSAR Reactor materials do not begin to be affected by neutron fluence until the reactor begins critical operation. Table 13.4-201 provides milestones for reactor vessel material surveillance program implementation.

The reactor vessel surveillance program incorporates eight specimen capsules. The capsules are located in guide baskets welded to the outside of the core barrel as shown in Figure 5.3-4 and positioned directly opposite the center portion of the core. The capsules can be removed when the vessel head is removed. To meet the guidelines of ASTM E-185 (lead factors less than three), the specimen guide baskets are located azimuthally near the lowest fluence locations at 135, 225, and 315 degrees. The 45 degree location is also a low fluence azimuthal location; however, there is a Roto-Lock insert for the internals lifting rig, which would prevent access for removal of the capsules from the baskets. Therefore, there are no guide baskets at the 45 degree location. Eight specimen capsules are provided by including three guide baskets at the 135 and 315 degree azimuthal locations and two baskets at the 225 degree location.

The capsules contain reactor vessel weld metal, base metal, and heat-affected zone metal specimens. The base metal specimens are oriented both parallel and normal (longitudinal and transverse) to the principal rolling direction of the limiting base material located in the core region of the reactor vessel. The 8 capsules contain 72 tensile specimens, 480 Charpy V-notch specimens, and 48 compact tension specimens. Archive material sufficient for two additional capsules and heat-affected-zone (HAZ) materials is retained.

Dosimeters, as described below, are placed in filler blocks drilled to contain them. The dosimeters permit evaluation of the flux seen by the specimens and the vessel wall. In addition, thermal monitors made of low melting point alloys are included to monitor the maximum temperature of the specimens.

The specimens are enclosed in a tight-fitting stainless steel sheath to prevent corrosion and ensure good thermal conductivity. The complete capsule is helium leak tested. As part of the surveillance program, a report of the residual elements in weight percent to the nearest 0.01 percent is made for surveillance material and as deposited weld metal. Each of the eight capsules contains the specimens shown in Table 5.3-4.

The following dosimeters and thermal monitors are included in each of the eight capsules:

z Dosimeters Iron Copper Nickel Niobium-93 (cadmium shielded)

Cobalt-aluminum (0.15-percent cobalt)

Cobalt-aluminum (cadmium shielded) z Thermal Monitors 97.5-percent lead, 2.5-percent silver, (579°F melting point) 97.5-percent lead, 1.75-percent silver, 0.75-percent tin (590°F melting point)

5.3-8 Revision 1 WLS 1&2 - UFSAR The fast neutron exposure of the specimens occurs at a faster rate than that experienced by the vessel wall, with the specimens being located between the core and the vessel. Since these specimens experience accelerated exposure and are actual samples from the materials used in the vessel, the transition temperature shift measurements are representative of the vessel at a later time in life. The lead factors for the eight specimen capsule locations based on the reference neutron flux distribution (flux distribution that results in the maximum fluence on the reactor vessel inner surface) vary between approximately 1.8 and 2.3. These lead factors will change over the life of the plant due to changes in core design and operating parameters. Data from CT fracture toughness specimens are expected to provide additional information for use in determining allowable stresses for irradiated material.

Correlations between the calculations and measurements of the irradiated samples in the capsules, assuming the same neutron spectrum at the samples and the vessel inner wall, are described in Subsection 5.3.2.6.1. The anticipated degree to which the specimens perturb the fast neutron flux and energy distribution is considered in the evaluation of the surveillance specimen data. Verification and possible readjustment of the calculated wall exposure is made by the use of data on capsules withdrawn. The recommended program schedule for removal of the capsules for post-irradiation testing includes five capsules to be withdrawn instead of four as specified in ASTM E-185 (Reference 1) and Appendix H of 10 CFR 50. The following is the recommended withdrawal schedule of capsules for AP1000.

Capsule Withdrawal Time 1st When the accumulated neutron fluence of the capsule is 5 x 1018 n/cm2.

2nd When the accumulated neutron fluence of the capsule corresponds to the approximate end of life fluence at the reactor vessel 1/4T location.

3rd When the accumulated neutron fluence of the capsule corresponds to the approximate end of life fluence at the reactor vessel inner wall location.

4th When the accumulated neutron fluence of the capsule corresponds to a fluence not less than once or greater than twice the peak end of vessel life fluence.

5th End of plant design objective of 60 years 6th Standby 7th Standby 8th Standby 5.3.2.6.1 Measurement of Integrated Fast Neutron (E > 1.0 MeV) Flux at the Irradiation Samples The use of passive neutron sensors such as those included in the internal surveillance capsule dosimetry sets does not yield a direct measure of the energy dependent neutron flux level at the measurement location. Rather, the activation or fission process is a measure of the integrated effect that the time and energy dependent neutron flux has on the target material over the course of the irradiation period. An accurate estimate of the average neutron flux level, and hence, time integrated exposure (fluence) experienced by the sensors may be derived from the activation measurements only if the parameters of the irradiation are well known. In particular, the following variables are of interest:

5.3-9 Revision 1 WLS 1&2 - UFSAR z

The measured specific activity of each sensor z

The physical characteristics of each sensor z

The operating history of the reactor z

The energy response of each sensor z

The neutron energy spectrum at the sensor location The procedures used to determine sensor specific activities, to develop reaction rates for individual sensors from the measured specific activities and the operating history of the reactor, and to derive key fast neutron exposure parameters from the measured reaction rates are described below.

5.3.2.6.1.1 Determination of Sensor Reaction Rates The specific activity of each of the radiometric sensors is determined using established ASTM procedures. Following sample preparation and weighing, the specific activity of each sensor is determined by means of a high purity germanium gamma spectrometer. In the case of the surveillance capsule multiple foil sensor sets, these analyses are performed by direct counting of each of the individual wires or, as in the case of niobium monitors, by appropriate methods as described in ASTM E 1297.

The irradiation history of the reactor over its operating lifetime is determined from plant power generation records. In particular, operating data are extracted on a monthly basis from reactor startup to the end of the capsule irradiation period. For the sensor sets utilized in the surveillance capsule irradiations, the half-lives of the product isotopes are long enough that a monthly histogram describing reactor operation has proven to be an adequate representation for use in radioactive decay corrections for the reactions of interest in the exposure evaluations.

Having the measured specific activities, the operating history of the reactor, and the physical characteristics of the sensors, reaction rates referenced to full power operation are determined from the following equation:

where:

A

=

measured specific activity provided in terms of disintegrations per second per gram of target material (dps/gm).

R

=

reaction rate averaged over the irradiation period and referenced to operation at a core power level of Pref expressed in terms of reactions per second per nucleus of target isotope (rps/nucleus).

N0

=

number of target element atoms per gram of sensor.

F

=

weight fraction of the target isotope in the sensor material.

Y

=

number of product atoms produced per reaction.

e ]

e -

[1 C

P P

Y F

N A

=

R t

t j

ref j

j 0

d j

5.3-10 Revision 1 WLS 1&2 - UFSAR Pj

=

average core power level during irradiation period j (MW).

Pref

=

maximum or reference core power level of the reactor (MW).

Cj

=

calculated ratio of (E > 1.0 MeV) during irradiation period j to the time weighted average (E > 1.0 MeV) over the entire irradiation period.

=

decay constant of the product isotope (sec-1).

tj

=

length of irradiation period j (sec).

td

=

decay time following irradiation period j (sec).

and the summation is carried out over the total number of monthly intervals comprising the total irradiation period.

In the above equation, the ratio Pj/Pref accounts for month-by-month variation of power level within a given fuel cycle. The ratio Cj is calculated for each fuel cycle and accounts for the change in sensor reaction rates caused by variations in flux level due to changes in core power spatial distributions from fuel cycle to fuel cycle. Since the neutron flux at the measurement locations within the surveillance capsules is dominated by neutrons produced in the peripheral fuel assemblies, the change in the relative power in these assemblies from fuel cycle to fuel cycle can have a significant impact on the activation of neutron sensors. For a single-cycle irradiation, Cj = 1.0. However, for multiple-cycle irradiations, particularly those employing low leakage fuel management, the additional Cj correction must be utilized in order to provide accurate determinations of the decay corrected reaction rates for the dosimeter sets contained in the surveillance capsules.

5.3.2.6.1.2 Least Squares Adjustment Procedure Least squares adjustment methods provide the capability of combining the measurement data with the neutron transport calculation resulting in a Best Estimate neutron energy spectrum with associated uncertainties. Best Estimates for key exposure parameters such as neutron fluence (E > 1.0 MeV) or iron atom displacements (dpa) along with their uncertainties are then easily obtained from the adjusted spectrum. The use of measurements in combination with the analytical results reduces the uncertainty in the calculated spectrum and acts to remove biases that may be present in the analytical technique.

In general, the least squares methods, as applied to pressure vessel fluence evaluations, act to reconcile the measured sensor reaction rate data, dosimetry reaction cross-sections, and the calculated neutron energy spectrum within their respective uncertainties. For example, relates a set of measured reaction rates, Ri, to a single neutron spectrum, g, through the multigroup dosimeter reaction cross-section, ig, each with an uncertainty.

The use of least squares adjustment methods in LWR dosimetry evaluations is not new. The American Society for Testing and Materials (ASTM) has addressed the use of adjustment codes in ASTM Standard E944, Application of Neutron Spectrum Adjustment Methods in Reactor Surveillance and many industry workshops have been held to discuss the various applications. For

)

)(

(

R g

ig i

g g

ig R

i

+/-

+/-

=

+/-

5.3-11 Revision 1 WLS 1&2 - UFSAR example, the ASTM-EURATOM Symposia on Reactor Dosimetry holds workshops on neutron spectrum unfolding and adjustment techniques at each of its bi-annual conferences.

The primary objective of the least squares evaluation is to produce unbiased estimates of the neutron exposure parameters at the location of the measurement. The analytical method alone may be deficient because it inherently contains uncertainty due to the input assumptions to the calculation.

Typically these assumptions include parameters such as the temperature of the water in the peripheral fuel assemblies, by-pass region, and downcomer regions, component dimensions, and peripheral core source. Industry consensus indicates that the use of calculation alone results in overall uncertainties in the neutron exposure parameters in the range of 15-20% (1).

The application of the least squares methodology requires the following input:

1.

The calculated neutron energy spectrum and associated uncertainties at the measurement location.

2.

The measured reaction rate and associated uncertainty for each sensor contained in the multiple foil set.

3.

The energy dependent dosimetry reaction cross-sections and associated uncertainties for each sensor contained in the multiple foil sensor set.

For a given application, the calculated neutron spectrum is obtained from the results of plant specific neutron transport calculations applicable to the irradiation period experienced by the dosimetry sensor set. This calculation is performed using the benchmarked transport calculational methodology described in Subsection 5.3.2.6.2. The sensor reaction rates are derived from the measured specific activities obtained from the counting laboratory using the specific irradiation history of the sensor set to perform the radioactive decay corrections. The dosimetry reaction cross-sections and uncertainties that are utilized in LWR evaluations comply with ASTM Standard E1018, Application of ASTM Evaluated Cross-Section Data File, Matrix E 706 (IIB).

The uncertainties associated with the measured reaction rates, dosimetry cross-sections, and calculated neutron spectrum are input to the least squares procedure in the form of variances and covariances. The assignment of the input uncertainties also follows the guidance provided in ASTM Standard E 944.

5.3.2.6.2 Calculation of Integrated Fast Neutron (E > 1.0 MeV) Flux at the Irradiation Samples A generalized set of guidelines for performing fast neutron exposure calculations within the reactor configuration, and procedures for analyzing measured irradiation sample data that can be correlated to these calculations, has been promulgated by the Nuclear Regulatory Commission (NRC) in Regulatory Guide 1.190, or RG-1.190, Calculational and Dosimetry Methods for Determining Pressure Vessel Neutron Fluence [Reference 2]. Since different calculational models exist and are continuously evolving along with the associated model inputs, e.g., cross-section data, it is worthwhile summarizing the key models, inputs, and procedures that the NRC staff finds acceptable for use in determining fast neutron exposures within the reactor geometry. This material is highlighted in the subsection of material that is provided below.

5.3.2.6.2.1 Calculation and Dosimetry Measurement Procedures The selection of a particular geometric model, the corresponding input data, and the overall methodology used to determine fast neutron exposures within the reactor geometry are based on the needs for accurately determining a solution to the problem that must be solved and the

5.3-12 Revision 1 WLS 1&2 - UFSAR data/resources that are currently available to accomplish this task. Based on these constraints, engineering judgment is applied to each problem based on an analysts thorough understanding of the problem, detailed knowledge of the plant, and due consideration to the strengths and weaknesses associated with a given calculational model and/or methodology. Based on these conditions, RG-1.190 does not recommend using a singular calculational technique to determine fast neutron exposures. Instead, RG-1.190 suggests that one of the following neutron transport tools be used to perform this work.

z Discrete Ordinates Transport Calculations Adjoint calculations benchmarked to a reference-forward calculation, or stand-alone forward calculations.

Various geometrical models utilized with suitable mesh spacing in order to accurately represent the spatial distribution of the material compositions and source.

In performing discrete ordinates transport calculations, RG-1.190 also suggests that a P3 angular decomposition of the scattering cross-sections be used, as a minimum.

RG-1.190 also recommends that discrete ordinates transport calculations utilize S8 angular quadrature, as a minimum.

RG-1.190 indicates that the latest version of the Evaluated Nuclear Data File, or ENDF/B, should be used for determining the nuclear cross-sections; however, cross-sections based on earlier or equivalent nuclear data sets that have been thoroughly benchmarked are also acceptable.

z Monte Carlo Transport Calculations A complete description of the Westinghouse pressure vessel neutron fluence methodology, which is based on discrete ordinates transport calculations, is provided in Reference 3. The Westinghouse methodology adheres to the guidelines set forth in Regulatory Guide 1.190.

5.3.2.6.2.2 Plant-Specific Calculations The location, selection, and evaluation of neutron dosimetry and the associated radiometric monitors, as well as fast (E > 1.0 MeV) neutron fluence assessments of the AP1000 reactor pressure vessel, are conducted in accordance with the guidelines that are specified in Regulatory Guide 1.190.

5.3.2.6.3 Report of Test Results A summary technical report for each capsule withdrawn with the test results is submitted, as specified in 10 CFR 50.4, within one year of the date of capsule withdrawal unless an extension is granted by the Director, Office of Nuclear Reactor Regulation.

The report includes the data required by ASTM E185-82, as specified in paragraph III.B.1 of 10 CFR Part 50, Appendix H, and includes the results of the fracture toughness tests conducted on the beltline materials in the irradiated and unirradiated conditions.

If the test results indicate a change in the Technical Specifications is required, either in the pressure-temperature limits or in the operating procedures required to meet the limits, the expected date for submittal of the revised Technical Specification is provided with the report.

5.3-13 Revision 1 WLS 1&2 - UFSAR 5.3.2.7 Reactor Vessel Fasteners The reactor vessel closure studs, nuts, and washers are designed and fabricated in accordance with the requirements of the ASME Code,Section III. The closure studs are fabricated of SA-540. The closure stud material meets the fracture toughness requirements of the ASME Code,Section III, and 10 CFR 50, Appendix G. Conformance with Regulatory Guide 1.65, Materials and Inspections for Reactor Vessel Closure Studs, is discussed in Section 1.9. Nondestructive examinations are performed in accordance with the ASME Code,Section III. See Subsection 5.2.3 for restrictions on lubricants.

Refueling procedures require that the reactor vessel closure studs, nuts, and washers are lifted out of their respective holes and a stud support collar be put in place prior to the lift of the integrated head assembly during preparation for refueling. In this way the studs are lifted with and stored on the head.

An alternative method is to remove the reactor vessel closure studs, nuts, and washers from the reactor closure and place them in storage racks during preparation for refueling. In this method, the storage racks are removed from the refueling cavity and stored at convenient locations on the containment operating deck prior to removal of the reactor closure head and refueling cavity flooding.

In either case, the reactor closure studs are not exposed to the borated refueling cavity water.

Additional protection against the possibility of incurring corrosion effects is provided by the use of a manganese base phosphate surfacing treatment.

The stud holes in the reactor flange are sealed with special plugs before removing the reactor closure, thus preventing leakage of the borated refueling water into the stud holes.

5.3.3 Pressure-Temperature Limits 5.3.3.1 Limit Curves Heatup and cooldown pressure-temperature limit curves are required as a means of protecting the reactor vessel during startup and shut down to minimize the possibility of fast fracture. The methods outlined in Appendix G of Section III of the ASME Code are employed in the analysis of protection against nonductile failure. Beltline material properties degrade with radiation exposure, and this degradation is measured in terms of the adjusted reference nil ductility temperature, which includes a reference nil ductility temperature shift (RTNDT), initial RTNDT and margin. The extent of the RTNDT shift is enhanced by certain chemical elements (such as copper and nickel).

Predicted RTNDT values are derived considering the effect of fluence and copper and nickel content for the reactor vessel steels exposed to 550°F temperature. U.S. NRC Regulatory Guide 1.99 is used in calculating adjusted reference temperature. Since the AP1000 cold leg temperature exceeds 525°F (minimum steady-state temperature is 535°F at 100% power, thermal design flow, and 10%

tube plugging), the procedures of Regulatory Guide 1.99 for nominal embrittlement apply. The heatup and cooldown curves are developed considering a sufficient magnitude of radiation embrittlement so that no unirradiated ferritic materials in other components of the reactor coolant system will be limiting in the analysis.

The pressure-temperature curves are developed considering a radiation embrittlement of up to 54 effective full power years (EFPY) consistent with the plant design objective of 60 years with 90 percent availability. Copper, nickel contents and initial RTNDT for materials in the reactor vessel beltline region and the reactor vessel flange and the closure head flange region are shown in Tables 5.3-1 and 5.3-3. The operating curves are developed with the methodology given in Reference 6, which is in accordance with 10 CFR 50, Appendix G with the following exceptions:

1.

The fluence values used are calculated fluence values (i.e., comply with Regulatory Guide 1.190), not the best-estimate fluence values.

5.3-14 Revision 1 WLS 1&2 - UFSAR 2.

The KIc critical stress intensities are used in place of the KIa critical stress intensities. This methodology is taken from approved ASME Code Case N-641 (which covers Code Cases N-640 and N-588).

3.

The 1996 Version of Appendix G to Section XI is used rather than the 1989 version.

The curves are applicable up to 54 effective full-power years. These curves, shown in Figures 5.3-2 and 5.3-3, are generic curves for the AP1000 reactor vessel design and they are limiting curves based on copper and nickel material composition (Reference 9). These curves are applicable as long as the following criteria are met:

z 10 CFR 50, Appendix G as related to pressure-temperature remains unchanged, z

Adjusted Reference Temperatures at 1/4T and 3/4T locations remain below the bases of Figures 5.3-2 and 5.3-3 The results of the material surveillance program described in Subsection 5.3.2.6 will be used to verify the validity of RTNDT used in the calculation for the development of heatup and cooldown curves.

The projected fluence, copper, and nickel contents along with the RTNDT calculation will be adjusted if necessary, from time to time using the surveillance capsule results. This may require the development of new heatup and cooldown curves.

Higher rates of temperature changes when the reactor coolant system pressure is at or above the operating pressure do not impact the determination of the proper curve to use. Figure 5.3-2 also includes a curve for the leak test limit at steady-state temperature and curves for the criticality limit for nuclear heatup.

Temperature limits for core operation, inservice leak and hydrotests are calculated in accordance with the ASME Code,Section III, Appendix G.

5.3.3.2 Operating Procedures Plant operating procedures are developed and maintained to prevent exceeding the pressure-temperature limits identified in reactor coolant system pressure and temperature limits report, as required by Technical Specification 5.6.6, during normal and abnormal operating conditions and system tests.

5.3.4 Reactor Vessel Integrity 5.3.4.1 Design The reactor vessel is the high pressure containment boundary used to support and enclose the reactor core. It provides flow direction with the reactor internals through the core and maintains a volume of coolant around the core. The vessel is cylindrical, with a transition ring, hemispherical bottom head, and removable flanged hemispherical upper head. The vessel is fabricated by welding together the lower head, the transition ring, the lower shell, and the upper shell. The upper shell contains the penetrations from the inlet and outlet nozzles and direct vessel injection nozzles. The closure head is fabricated with a head dome and bolting flange. The upper head has penetrations for the control rod drive mechanisms, the incore instrumentation, head vent, and support lugs for the integrated head package.

The reactor vessel (including closure head) is approximately 40 feet long and has an inner diameter at the core region of 159 inches. The total weight of the vessel (including closure head and CRDMs) is approximately 417 tons. Surfaces which can become wetted during operation and refueling are

5.3-15 Revision 1 WLS 1&2 - UFSAR clad to a nominal 0.22 inches of thickness with stainless steel welded overlay which includes the upper shell top surface but not the stud holes. The AP1000 reactor vessels design objective is to withstand the design environment of 2500 psi and 650°F for 60 years. The major factor affecting vessel life is radiation degradation of the lower shell.

As a safety precaution, there are no penetrations below the top of the core. This eliminates the possibility of a loss of coolant accident by leakage from the reactor vessel which could allow the core to be uncovered. The core is positioned as low as possible in the vessel to limit reflood time in an accident. The main radial support system of the lower end of the reactor internals is accomplished by key and keyway joints to the vessel wall. At equally spaced points around the circumference, a clevis block is located on the reactor vessel inner diameter. A permanent cavity liner seal ring is attached to the top of the vessel shell for welding to the refueling cavity liner. To decrease outage time during refueling, access to the stud holes is provided to allow stud hole plugging with the head in place. By the use of a ring forging with an integral flange, the number of welds is minimized to decrease inservice inspection time.

The lower head has an approximate 6.5 feet inner spherical radius. The lower radial supports are located on the head at the elevation of the lower internals lower core support plate. The transition ring is welded to the lower shell course with the weld located outside the high fluence active core region.

The lower shell is a ring forging about 8 inches thick with an inner diameter of 159 inches. The length of the shell is greater than 168 inches to place the upper shell weld outside of the active fuel region.

The upper shell is a large ring forging. Included in this forging are four 22-inch inner diameter inlet nozzles, two 31-inch inner diameter outlet nozzles and two 6.81-inch inner diameter direct vessel injection nozzles (8-inch schedule 160 pipe connections). These nozzles are forged into the ring or are fabricated by set in construction. The inlet and outlet nozzles are offset axially in different planes by 17.5 inches. The injection nozzles are 100 inches down from the main flange and the outlet nozzles are 80 inches down and the inlet nozzles are 62.5 inches below the mating surface.

The closure head has a 77.5-inch inner spherical radius and a 188.0-inch O.D. outer flange. Cladding is extended across the bottom of the flange for refueling purposes. Forty-five, seven-inch diameter studs attach the head to the lower vessel and two metal o-rings are used for sealing. The upper head has sixty-nine 4-inch outer diameter penetrations for the control rod drive mechanism housings and eight penetrations for the incore instrumentation tubes.

The eight penetrations for the incore instrumentation tubes are Quickloc instrument nozzles, which are welded to the reactor vessel head. Up to six instrument thimble assemblies pass through each Quickloc instrument nozzle. The reactor vessel head penetration diameter is approximately 4.75 inches to the cladding. The material of the pressure boundary parts of the Quickloc are SA-182 - Type F304, SA-479 - Type 304 and Type 316, and UNS S21800. The Quickloc instrument nozzle is welded to the Ni-Cr-Fe buttering on the weld buildup on the reactor vessel closure head.

The Quickloc provides two pressure boundaries: 1) between the Quickloc plug and the incore instrument thimble assemblies (this pressure boundary is disassembled only when the instrument thimble is replaced) and 2) between the Quickloc plug and the instrument nozzle (this pressure boundary is disassembled when the reactor vessel closure head is removed). The Quickloc instrument nozzle pressure boundary parts are designed and fabricated to the requirements of the ASME Code,Section III Division 1, Subsection NB. The Quickloc internal, non-pressure boundary parts are designed to Subsection NG. The Quickloc assembly is a proven design, which was first installed in an operating plant in 1995. Since then, it has been installed on four additional operating plants.

The vessel is manufactured from low alloy steel plates and forgings to minimize size. The chemical content of the core region base material is specifically controlled. A surveillance program is used to monitor the radiation damage to the vessel material.

5.3-16 Revision 1 WLS 1&2 - UFSAR The four vessel supports are located beneath the inlet nozzles and the internals support ledge is machined into the top of the upper shell. The top of the upper shell contains the stud holes and has the sealing surface for the closure head. Inner and outer monitor tubes are provided through the shell to collect any leakage past the closure region o-rings.

The reactor vessel is designed and fabricated in accordance with the quality standards set forth in 10 CFR 50, General Design Criteria 1, 14, 30, and 31, and 50.55a; and the requirements of the American Society of Mechanical Engineers (ASME) Code,Section III. Principal design parameters of the reactor vessel are given in Table 5.3-5. The vessel design and construction enables inspection in accordance with the ASME Code,Section XI.

Cyclic loads are introduced by normal power changes, reactor trips, and startup and shutdown operations. These design base cycles are selected for fatigue evaluation and constitute a conservative design envelope for the design life. Thermal stratification during passive core cooling system operation and natural circulation cooldown is considered by performing a thermal/flow analysis using computational fluid dynamics techniques. This analysis includes thermally-induced fluid buoyancy, heat transfer between the coolant and the metal of the vessel and internals and uses thermal/flow boundary conditions based on an existing thermal/hydraulic transient analysis of the primary reactor coolant system. This analysis provides temperature maps that are used to evaluate thermal stresses.

Analysis proves that the vessel is in compliance with the fatigue and stress limits of the ASME Code,Section III. The loadings and transients specified for the analysis are based on the most severe conditions expected during service. The heatup and cooldown rates imposed by plant operating limits are 100°F per hour for normal operations.

5.3.4.2 Materials of Construction The materials used in the fabrication of the reactor vessel are discussed in Subsection 5.2.3.

5.3.4.3 Fabrication Methods The fabrication methods used in the construction of the reactor vessel are discussed in Subsection 5.3.2.2.

5.3.4.4 Inspection Requirements The nondestructive examinations performed on the reactor vessel are described in Subsection 5.3.2.3.

5.3.4.5 Shipment and Installation The reactor vessel is shipped in a horizontal position on a shipping skid with a vessel-lifting truss assembly. All vessel openings are sealed to prevent the entrance of moisture, and an adequate quantity of desiccant bags is placed inside the vessel. These are usually placed in a wire mesh basket attached to the vessel cover. All carbon steel surfaces are protected with a temporary protective covering before shipment.

The closure head is also shipped with a shipping cover and skid. An enclosure attached to the ventilation shroud support ring protects the control rod mechanism housings. All head openings are sealed to prevent the entrance of moisture, and an adequate quantity of desiccant bags is placed inside the head. These are placed in a wire mesh basket attached to the head cover. All carbon steel surfaces are protected with a temporary protective covering before shipment.

5.3-17 Revision 1 WLS 1&2 - UFSAR 5.3.4.6 Operating Conditions Operating limitations for the reactor vessel are presented in Subsection 5.3.3 and in the technical specifications.

In addition to the analysis of primary components discussed in Subsection 3.9.1.4, the reactor vessel is further qualified to ensure against unstable crack growth under faulted conditions. Safeguard actuation following a loss-of-coolant, tube rupture or other similar emergency or faulted event produces relatively high thermal stresses in regions of the reactor vessel which come into contact with water from the passive core cooling system. Primary consideration is given to these areas, including the reactor vessel beltline region and the reactor vessel primary coolant nozzles, to ensure the integrity of the reactor vessel under these severe postulated transients. TMI Action Item II.K.2.13, is satisfied upon submittal of RTNDT values which are below the pressurized thermal shock (PTS) rule screening values. The results given in Table 5.3-3 show that the issue is resolved.

For the beltline region, the NRC staff concluded that conservatively calculated screening criterion values of RTNDT less than 270°F for plate material and axial welds, and less than 300°F for circumferential welds, present an acceptably low risk of vessel failure from pressurized thermal shock events. These values were chosen as the screening criterion in the pressurized thermal shock rule for 10 CFR 50.34 (new plants) and 10 CFR 50.61 (operating plants). The conservative methods chosen by the NRC staff for the calculation of RTPTS for the purpose of comparison with the screening criterion is presented in paragraph (b)(2) of 10 CFR 50.61. Details of the analysis method and the basis for the pressurized thermal shock rule can be found in SECY-82-465 (Reference 4).

The revised pressurized thermal shock rule, (10 CFR 50.61), effective June 14, 1991 makes the procedure for calculating RTPTS values consistent with the methods given in Regulatory Guide 1.99.

The reactor vessel beltline materials are specified in Subsection 5.3.2. Evaluation of the AP1000 reactor vessel material showed that even at the fluence level which results in the highest RTPTS value, this value is well below the screening criteria of 270°F. RTPTS is RTNDT, the reference nil ductility transition temperature as calculated by the method chosen by the NRC staff as presented in paragraph (b)(2) of 10 CFR 50.61, and the pressurized thermal shock rule. The pressurized thermal shock rule states that this method of calculating RTPTS should be used in reporting values used to compare pressurized thermal shock to the above screening criterion set in the pressurized thermal shock rule. The screening criteria will not be exceeded using the method of calculation prescribed by the pressurized thermal shock rule for the vessel design objective. The material properties, and initial RTNDT and end-of-life RTPTS requirements and predictions are in Tables 5.3-1 and 5.3-3. The materials that are exposed to high fluence levels at the beltline region of the reactor vessel are subject to the pressurized thermal shock rule. These materials are a subset of the reactor vessel materials identified in Subsection 5.3.2.

The principles and procedures of linear elastic fracture mechanics (LEFM) are used to evaluate thermal effects in the regions of interest. The linear elastic fracture mechanics approach to the design against failure is basically a stress intensity consideration in which criteria are established for fracture instability in the presence of a crack. Consequently, a basic assumption employed in linear elastic fracture mechanics is that a crack or crack-like defect exists in the structure. The essence of the approach is to relate the stress field developed in the vicinity of the crack tip to the applied stress on the structure, the material properties, and the size of defect necessary to cause failure.

5.3.4.7 Inservice Surveillance The internal surfaces of the reactor vessel are accessible for periodic inspection. Visual and/or nondestructive techniques are used. During refueling, the vessel cladding is capable of being inspected in certain areas of the upper shell above the primary coolant inlet nozzles, and if deemed

5.3-18 Revision 1 WLS 1&2 - UFSAR necessary, the core barrel is capable of being removed, making the entire inside vessel surface accessible.

The closure head is examined visually during each refueling. Optical devices permit a selective inspection of the cladding, control rod drive mechanism nozzles, and the gasket seating surface.

Access to the top head surface is provided by 7 ports around the circumference of the integrated head package shroud and by multiple removable insulation panels, which interface with the head under the integrated head package shroud. Both the ports and the insulation panels provide access to the bare vessel head, and CRDM and instrumentation penetrations for use of a remote, mobile visual inspection manipulator to perform a 360° inspection around each penetration. The head insulation is a stand-off design with a minimum offset from the head surface of 3 inches.

The knuckle transition piece, which is the area of highest stress of the closure head, is accessible on the outer surface for visual inspection, dye penetrant or magnetic particle testing, and ultrasonic testing. The closure studs and nuts can be inspected periodically using visual, magnetic particle, and ultrasonic techniques.

The closure studs, nuts, washers, and the vessel flange seal surface, as well as the full-penetration welds in the following areas of the installed reactor vessel, are available for nondestructive examination:

z Vessel shell, from the inside surface.

z Primary coolant nozzles, from the inside surface. Only partial outside diameter coverage is provided.

z Closure head, from the inside surface; bottom head, from the inside surface.

z Field welds between the reactor vessel nozzle safe ends and the main coolant piping, from the inside surface.

The design considerations which have been incorporated into the system design to permit the above inspection are as follows:

z Reactor internals are completely removable. The tools and storage space required to permit removal of the reactor internals are provided.

z The closure head is stored on a stand on the reactor operating deck during refueling to facilitate direct visual inspection.

z Reactor vessel studs, nuts, and washers can be removed to dry storage during refueling.

z Access is provided to the reactor vessel nozzle safe ends. The insulation covering the nozzle-to-pipe welds may be removed.

Because radiation levels and remote underwater accessibility limits access to the reactor vessel, several steps have been incorporated into the design and manufacturing procedures in preparation for the periodic nondestructive tests which are required by the ASME Code inservice inspection requirements. These are as follows:

z Shop ultrasonic examinations are performed on internally clad surfaces to an acceptance and repair standard to provide an adequate cladding bond to allow later ultrasonic testing of the base metal from the inside surface. The size of cladding bond defect allowed is 0.25 inch by 0.75 inch with the greater direction parallel to the weld in the region bounded by 2T (T = wall

5.3-19 Revision 1 WLS 1&2 - UFSAR thickness) on both sides of each full-penetration pressure boundary weld. Unbounded areas exceeding 0.442 square inches (0.75-inch diameter) in other regions are rejected.

z The design of the reactor vessel shell is an uncluttered cylindrical surface to permit future positioning of the test equipment without obstruction.

z The weld-deposited clad surface on both sides of the welds to be inspected is specifically prepared to ensure meaningful ultrasonic examinations.

z During fabrication, full-penetration ferritic pressure boundary welds are ultrasonically examined in addition to code examinations.

z After the shop hydrostatic testing, full-penetration ferritic pressure boundary welds (with the exception of the closure head welds), as well as the nozzles to safe end welds, are ultrasonically examined from both the inside and outside diameters in addition to ASME Code,Section III requirements.

z Preservice examinations for the closure head will include a baseline top-of-the head visual examination; ultrasonic examinations of the inside diameter surface of each vessel head penetration; eddy current examinations of the surface of head penetration welds, the outside diameter surface of the vessel penetrations, and the inside diameter surface of the penetrations; and post-hydro liquid penetrant examinations of accessible surfaces that have undergone preservice inspection eddy current examinations.

The vessel design and construction enables inspection in accordance with the ASME Code,Section XI.

5.3.5 Reactor Vessel Insulation 5.3.5.1 Reactor Vessel Insulation Design Bases Reactor vessel insulation is provided to minimize heat losses from the primary system. Nonsafety-related reflective insulation similar to that in use in current pressurized water reactors is utilized. The AP1000 reactor vessel insulation contains design features to promote in-vessel retention following severe accidents. In the unlikely event of a beyond design basis accident, the reactor cavity is flooded with water, and the reactor vessel insulation allows heat removal from core debris via boiling on the outside surface of the reactor vessel. The reactor vessel insulation permits a water layer next to the reactor vessel to promote heat transfer from the reactor vessel. This is accomplished by providing:

z A means of allowing water free access to the region between the reactor vessel and insulation.

z A means to allow steam generated by water contact with the reactor vessel to escape from the region surrounding the reactor vessel.

z The insulation support frame and the insulation panels form a structurally reliable flowpath for the water and steam.

The reactor vessel insulation and its supports are designed to withstand bounding pressure differentials across the reactor vessel insulation panels during the period that the reactor vessel is externally flooded with water and the core heat is removed from the vessel wall by water and generated steam is vented. This is accomplished by providing steam vents with a minimum flow area of 12 ft2 from the vessel insulation annular space. The flow path from the reactor loop compartment to

5.3-20 Revision 1 WLS 1&2 - UFSAR the reactor cavity provides an open flow path for water to flood the reactor cavity. The reactor vessel insulation water inlets are designed to minimize the pressure drop during ex-vessel cooling to permit water inflow to cool the vessel.

5.3.5.2 Description of Insulation A schematic of the reactor vessel, the vessel insulation and the reactor cavity is shown in Figure 5.3-7. The insulation is mounted on a structural frame that is supported from the wall and floor of the reactor cavity. The insulation panels are designed to have a minimum gap between the insulation and reactor vessel not less than 2 inches when subjected to the dynamic loads in the direction towards the vessel that result during ex-vessel cooling.

The bottom portion of the vessel insulation is constructed to provide a flow channel conducive for heat removal.

The structural frame supporting the insulation is designed to withstand the bounding severe accident loads while maintaining the flow path. The fasteners holding the insulation panels to the frame are also designed for these loads.

At the bottom of the insulation are water inlet assemblies. Each water inlet assembly is normally closed to prevent an air circulation path through the vessel insulation. The inlet assemblies are self-actuating passive devices. The inlet assemblies open when the cavity is filled with water. This permits ingress of water during a severe accident, while preventing excessive heat loss during normal operation.

The total flow area of the water inlet assemblies has sufficient margin to preclude significant pressure drop during ex-vessel cooling during a severe accident. The minimum total flow area for the water inlets assemblies is 6 ft2. Due to the relatively low approach velocities in the flow paths leading to the reactor cavity, the grating over the vertical access tunnel, the design of the doorway between the reactor coolant drain tank compartment and the reactor cavity, the low flow velocities approaching the water inlet assemblies, and the relatively large minimum flow area through each water inlet assembly, at least 7 in2, the water inlet assemblies and the steam flow path are not susceptible to clogging from debris inside containment.

Multiple steam vents in the nozzle gallery provide a flow path for the steam/water within the reactor vessel/insulation annular space to flow back to the containment flood-up region. The steam vents provide 12 ft2 minimum flow area for steam/water to exit the annular space. Each of the steam vents has a door that will be opened by the steam/water flow generated under the insulation with the cavity filled with water, but which remains in place when only normal air cooling flow is operating.

Extensive maintenance of the vessel insulation is not normally required. Periodic verification of the vessel insulation moving parts can be performed during refueling outages.

5.3.5.3 Description of External Vessel Cooling Flooded Compartments Ex-vessel cooling during a severe accident is provided by flooding the reactor coolant system loop compartment including the vertical access tunnel, the reactor coolant drain tank room, and the reactor cavity. Water from these compartments replenishes the water that comes in contact with the reactor vessel and is boiled and vented to containment. The opening between the vertical access tunnel and the reactor coolant drain tank room is approximately 100 ft2. Removable steel grating is provided over the inlet to the vertical access tunnel to restrict access to the lower compartments. This grating precludes large debris from being transported into the reactor cavity during ex-vessel cooling scenarios. Figure 5.3-8 depicts the flooded compartments that provide the water for ex-vessel cooling. The doorway between the reactor cavity compartment and the reactor coolant drain tank

5.3-21 Revision 1 WLS 1&2 - UFSAR room consists of a normally closed door and a damper above the door. The door and damper arrangement, shown in Figure 5.3-9, maintains the proper air flow through the reactor cavity during normal operation. The damper prevents air from flowing into the reactor coolant drain tank compartment, but opens to permit flooding of the reactor cavity from the reactor coolant drain tank compartment. The damper opening has a minimum flow area of 8 ft2 and is not susceptible to clogging from debris that can pass through the grating over the inlet to the vertical access tunnel. It is constructed of light-weight material to minimize the force necessary to open the damper and permit flooding and continued water flow through the opening during ex-vessel cooling. The damper provides an acceptable pressure drop through the opening during ex-vessel cooling.

Subsection 6.3.2.1.3 discusses post-accident operation of the passive core cooling system, which operates to flood the reactor cavity following an accident. Subsection 9.1.3 discusses the connections from the refueling cavity to the steam generator compartment that facilitate flooding of the reactor cavity following an accident.

5.3.5.4 Determination of Forces on Insulation and Support System The forces that may be expected in the reactor cavity region of the AP1000 plant during a core damage accident in which the core has relocated to the lower head and the reactor cavity is reflooded can be based on test results from the ULPU test program (Reference 5). The particular configuration (Configuration V) reviewed closely models the full-scale AP1000 geometry of water in the region near the reactor vessel, between the reactor vessel and the reactor vessel insulation. The ULPU tests provide data on the pressure generated in the region between the reactor vessel and reactor vessel insulation. These data, along with observations and conclusions from heat transfer studies, are used to develop the functional requirements with respect to in-vessel retention for the reactor vessel insulation and support system. Interpretation of data collected from ULPU Configuration V experiments in conjunction with the static head of water that would be present in the AP1000 is used to estimate forces acting on the rigid sections of insulation. The ULPU V test results indicate that the pressure variations in the flow channel between the vessel and the insulation are on the order of plus/minus 0.5 meters of water. Fast Fourier Transform analysis of the ULPU V pressure data is also included in the ULPU V test report. This analysis shows that the dominant frequency of the pressure variations is less than about 2 Hz. The natural frequency of the insulation structure is expected to be well above 2 Hz.

5.3.5.5 Design Evaluation A structural analysis of the AP1000 reactor cavity insulation system was performed that demonstrates that it meets the functional requirements discussed above. The analysis encompasses the insulation and support system and includes a determination of the stresses in support members, bolts, insulation panels and welds, as well as deflection of support members and insulation panels.

Loads on the insulation and the support structure include hydrostatic loads and dynamic loads from boiling. These loads are of the same order as those analyzed for AP600, and the results of the AP1000 analysis show that the insulation is able to meet its functional requirements. The reactor vessel insulation provides an engineered pathway for water-cooling the vessel and for venting steam from the reactor cavity. These results were also compared to the available test data.

The reactor vessel insulation is purchased equipment. The purchase specification for the reactor vessel insulation design required confirmatory static load analyses.

5.3-22 Revision 1 WLS 1&2 - UFSAR 5.3.6 Combined License Information 5.3.6.1 Pressure-Temperature Limit Curves The pressure-temperature curves shown in Figures 5.3-2 and 5.3-3 are generic curves for AP1000 reactor vessel design, and they are the limiting curves based on copper and nickel material composition. Plant-specific curves will be developed based on material composition of copper and nickel. Use of plant-specific curves will be addressed during procurement and fabrication of the reactor vessel. As noted in the bases to Technical Specification 3.4.14, use of plant-specific curves requires evaluation of the LTOP system. This includes an evaluation of the setpoint pressure for the RNS relief valve to determine if the setpoint pressure needs to be changed based on the plant-specific pressure-temperature curves. The development of the plant-specific curves and evaluation of the setpoint pressure are required prior to fuel load.

5.3.6.2 Reactor Vessel Materials Surveillance Program The reactor vessel reactor material surveillance program is addressed in Subsections 5.3.2.6 and 5.3.2.6.3.

5.3.6.3 Surveillance Capsule Lead Factor and Azimuthal Location Confirmation The surveillance capsule lead factors and azimuthal locations are addressed in APP-GW-GLR-023 (Reference 7).

5.3.6.4 Reactor Vessel Materials Properties Verification 5.3.6.4.1 The verification of plant-specific belt line material properties consistent with the requirements in Subsection 5.3.3.1 and Tables 5.3-1 and 5.3-3 will be completed prior to fuel load. The verification will include a pressurized thermal shock evaluation based on as procured reactor vessel material data and the projected neutron fluence for the plant design objective of 60 years. This evaluation report will be submitted for NRC staff review.

5.3.6.4.2 The structural analysis of the AP1000 reactor vessel insulation and support structure is addressed in APP-GW-GLR-060 (Reference 8).

5.3.6.5 Reactor Vessel Insulation The verification that the reactor vessel insulation is consistent with the design bases established for in-vessel retention is addressed in Reference 8 (APP-GW-GLR-060).

5.3.6.6 Inservice Inspection of Reactor Vessel Head Weld Buildup The inservice inspection program of the weld buildup on the reactor vessel head for the instrumentation penetrations (Quickloc) is addressed in Subsection 5.2.4.1.

5.3.7 References 1.

ASTM E-185-82, Standard Practice for Conducting Surveillance Tests for Light-Water Cooled Nuclear Power Reactor Vessels.

5.3-23 Revision 1 WLS 1&2 - UFSAR 2.

Regulatory Guide 1.190, Calculational and Dosimetry Methods for Determining Pressure Vessel Neutron Fluence, United States Nuclear Regulatory Commission, Office of Nuclear Reactor Research, March, 2001.

3.

WCAP-15557, Qualification of the Westinghouse Pressure Vessel Neutron Fluence Evaluation Methodology, S. L. Anderson, August 2000.

4.

NRC Policy Issue, Pressurized Thermal Shock, SECY-82-465, November 23, 1982.

5.

Theofanous, T.G., et al., Limits of Coolability in the AP1000-Related ULPU-2400 Configuration V Facility, CRSS-03/06, June 2003.

6.

WCAP-14040-NP-A, Revision 2, Methodology Used to Develop Cold Overpressure Mitigating System Setpoints and RCS Heatup and Cooldown Limit Curves, J. D. Andrachek, et al., January 1996.

7.

APP-GW-GLR-023, Surveillance Capsule Lead Factor and Azimuthal Location Confirmation, Westinghouse Electric Company LLC.

8.

APP-GW-GLR-060, Reactor Vessel Insulation System - Verification of In-Vessel Retention Design Bases, Westinghouse Electric Company LLC.

9.

APP-RXS-Z0R-001, Revision 2, AP1000 Generic Pressure Temperature Limits Report, F. C. Gift, September 2008.

5.3-24 Revision 1 WLS 1&2 - UFSAR Table 5.3-1 Maximum Limits for Elements of the Reactor Vessel Element Beltline Forging (percent)

As Deposited Weld Metal (percent)

Copper 0.06 0.06 Phosphorus 0.01 0.01 Vanadium 0.05 0.05 Sulfur 0.01 0.01 Nickel 0.85 0.85

5.3-25 Revision 1 WLS 1&2 - UFSAR Table 5.3-2 Reactor Vessel Quality Assurance Program RT(a)

UT(a)

PT(a)

MT(a)

Forgings Flanges Yes Yes Studs and nuts Yes Yes CRDM head adapter tube Yes Yes Instrumentation tube Yes Yes Main nozzles Yes Yes Nozzle safe ends Yes Yes Shell sections Yes Yes Heads Yes Yes Plates Yes Yes Weldments Head and shell Yes Yes Yes CRDM head adapter to closure head connection Yes Instrumentation tube to closure head connection Yes Main nozzle Yes Yes Yes Cladding Yes Yes Nozzle to safe ends Yes Yes Yes CRDM head adapter flange to CRDM head adapter tube Yes Yes All full-penetration ferritic pressure boundary welds accessible after hydrotest Yes Yes Full-penetration nonferritic pressure boundary welds accessible after hydrotest a.

Nozzle to safe ends Yes Yes Seal ledge Yes Head lift lugs Yes Core pad welds Yes Flow skirt support lugs weld buildup Yes Yes

5.3-26 Revision 1 WLS 1&2 - UFSAR Notes:

a.

RT - Radiographic UT - Ultrasonic PT - Dye penetrant MT - Magnetic particle Base metal weld repairs as a result of UT, MT, RT, and/or PT indications are cleared by the same nondestructive examination technique/procedure by which the indications were found. The repairs meet applicable Section III requirements.

In addition, UT examination in accordance with the in process/posthydro UT requirements is performed on base metal repairs in the core region and base metal repairs in the inservice inspection zone (1/2 T).

5.3-27 Revision 1 WLS 1&2 - UFSAR Notes:

1.

The minimum unirradiated upper shelf energy for beltline base metal is for the transverse direction.

2.

End-of-Life RTPTS requirements shown. End-of-Life RTPTS (also equals RTNDT) will be determined for as-built material. The preliminary RTPTS for the AP1000 reactor vessel beltline forging and beltline weld are 94°F and 148°F, respectively.

Table 5.3-3 End-of-Life RTNDT and Upper Shelf Energy Projections Unirradiated End-of-life (54 EFPY)

RTNDT

(°F)

USE (ft-lb)

USE (ft-lb) 1/4T RTPTS

(°F)

Beltline Forging

-10

> 75

> 50

< 270(2)

Head 10 N/A N/A N/A Flange 10 N/A N/A N/A Weld 10 N/A N/A N/A Beltline Weld

-20

> 75

> 50

< 300(2)

5.3-28 Revision 1 WLS 1&2 - UFSAR Table 5.3-4 Reactor Vessel Material Surveillance Program Capsules S, T, U, V, W, X, Y, and Z Material Charpy Specimens Tensile Specimens 1/2T-CT Specimens Forging (tangential) 15 3

2 Forging (axial) 15 3

2 Weld Metal 15 3

2 Heat Affected Zone (HAZ) 15

5.3-29 Revision 1 WLS 1&2 - UFSAR Table 5.3-5 Reactor Vessel Design Parameters (approximate values)

Design pressure (psig) 2485 Design temperature (°F) 650 Overall height of vessel and closure head, bottom head outside diameter to top of control rod mechanism (ft-in.)

45-9 Number of reactor closure head studs 45 Diameter of reactor closure head/studs, (in.)

7 Outside diameter of closure head flange (in.)

188 Inside diameter of flange (in.)

148.81 Outside diameter at shell (in.)

176 Inside diameter at shell (in.)

159 Inlet nozzle inside diameter (in.)

22 Outlet nozzle inside diameter (in.)

31 Clad thickness, nominal (in.)

0.22 Lower head thickness, minimum (in.)

6 Vessel beltline thickness, minimum (in.)

8 Closure head thickness (in.)

6.25

5.3-30 Revision 1 WLS 1&2 - UFSAR Figure 5.3-1 Reactor Vessel

5.3-31 Revision 1 WLS 1&2 - UFSAR Figure 5.3-2 AP1000 Reactor Coolant System Heatup Limitations (Heatup Rate Up to 50° and 100°F/hour) Representative for the First 54 EFPY (Without Margins for Instrumentation Errors)

5.3-32 Revision 1 WLS 1&2 - UFSAR Figure 5.3-3 AP1000 Reactor Coolant System Cooldown Limitations (Cooldown Rates up to 50° and 100°F/hour) Representative for the First 54 EFPY (Without Margins for Instrumentation Errors)

5.3-33 Revision 1 WLS 1&2 - UFSAR Figure 5.3-4 AP1000 Reactor Vessel Surveillance Capsules Locations

5.3-34 Revision 1 WLS 1&2 - UFSAR Figure 5.3-5 Reactor Vessel Key Dimensions Plan View

5.3-35 Revision 1 WLS 1&2 - UFSAR Figure 5.3-6 Reactor Vessel Key Dimensions, Side View

5.3-36 Revision 1 WLS 1&2 - UFSAR Figure 5.3-7 Schematic of Reactor Vessel Insulation

5.3-37 Revision 1 WLS 1&2 - UFSAR Figure 5.3-8 RCS Flooded Compartments During Ex-Vessel Cooling

5.3-38 Revision 1 WLS 1&2 - UFSAR Figure 5.3-9 Door Between RCDT Room and Reactor Cavity Compartment

• NRC Staff approval is required prior to implementing a change in this information.

5.4-1 Revision 1 WLS 1&2 - UFSAR 5.4 Component and Subsystem Design 5.4.1 Reactor Coolant Pump Assembly 5.4.1.1 Design Bases The reactor coolant pump (RCP) is an integral part of the reactor coolant pressure boundary. It is designed, fabricated, erected, and tested to quality standards consistent with the requirements set forth in 10 CFR 50, 50.55a and General Design Criterion 1. The reactor coolant pump casing and stator shell provide a barrier to the release of reactor coolant and other radioactive materials to the containment atmosphere.

The reactor coolant pump provides an adequate core cooling flow rate for sufficient heat transfer to maintain a departure from nucleate boiling ratio (DNBR) greater than the limit established in the safety analysis. Pump assembly rotational inertia is provided by a flywheel (inside the pump pressure boundary) motor rotor, and other rotating parts. This rotational inertia provides flow during coastdown conditions. This forced flow following an assumed loss of electrical power and the subsequent natural circulation effect in the reactor coolant system (RCS) adequately cools the core. The net positive suction head (NPSH) required for operation is by conservative pump design always less than that available by system design and operation.

The reactor coolant pump pressure boundary shields the balance of the reactor coolant pressure boundary from theoretical worst-case flywheel failures. The reactor coolant pump pressure boundary is analyzed to demonstrate that a fractured flywheel cannot breach the reactor coolant system boundary (impacted pressure boundary components are stator closure, stator main flange, and lower stator flange) and impair the operation of safety-related systems or components. This meets the requirements of General Design Criteria 4. The reactor coolant pump flywheel is designed, manufactured, and inspected to minimize the potential for the generation of high-energy fragments (missiles) under any anticipated operating or accident condition consistent with the intent of the guidelines set forth in Standard Review Plan Subsection 5.4.1.1 and Regulatory Guide 1.14. Each flywheel is tested at an overspeed condition to verify the flywheel design and construction.

5.4.1.2 Pump Assembly Description 5.4.1.2.1 Design Description

[The reactor coolant pump is a single-stage, hermetically sealed, high-inertia, centrifugal sealless pump of canned motor design.]* It pumps large volumes of reactor coolant at high pressures and temperature. Figure 5.4-1 shows a reactor coolant pump. Table 5.4-1 gives the design parameters.

A reactor coolant pump is directly connected to each of two outlet nozzles on the steam generator channel head. The two pumps on a steam generator turn in the same direction.

A sealless pump contains the motor and all rotating components inside a pressure vessel. The pressure vessel consists of the pump casing, stator closure, stator main flange, stator shell, stator lower flange, and stator cap, which are designed for full reactor coolant system pressure. In a canned motor pump, the stator and rotor are encased in corrosion-resistant cans that prevent contact of the rotor bars and stator windings by the reactor coolant. Because the shaft for the impeller and rotor is contained within the pressure boundary, seals are not required to restrict leakage out of the pump into containment. The connection between the pump casing and the stator closure is provided with a welded canopy type seal assembly, which provides definitive leak protection for the pump closure.

Access to the internals of the pump and motor is by severing the canopy seal weld. When the pump is reassembled, a canopy seal is rewelded. Canned motor reactor coolant pumps have a long history of safe, reliable performance in military and commercial nuclear plant service.

5.4-2 Revision 1 WLS 1&2 - UFSAR The reactor coolant pump driving motor is a vertical, water-cooled, squirrel-cage induction motor with a canned rotor and stator. It is designed for removal from the casing for inspection, maintenance, and replacement, if required. The stator can protects the stator (windings and insulation) from the controlled portion of the reactor coolant circulating inside the motor and bearing cavity. The can on the rotor isolates the copper rotor bars from the system and minimizes the potential for the copper to plate out in other areas.

The motor is cooled by primary reactor coolant system coolant circulating through the motor cavity and by component cooling water circulating through a cooling jacket on the outside of the motor housing. Primary coolant used to cool the motor enters the lower end of the rotor and passes axially through the motor cavity to remove heat from the rotor and stator. An auxiliary impeller provides the motive force for circulating the coolant. Heat from the primary coolant is transferred to component coolant water in an external heat exchanger.

Each pump motor is driven by a variable speed drive, which is used for pump startup and operation when the reactor trip breakers are open. When the reactor trip breakers are closed, the variable frequency drives are bypassed and the pumps run at constant speed.

Flywheel assemblies provide rotating inertia that increases the coastdown time for the pump. Each flywheel assembly is of bi-metallic design consisting of a tungsten heavy metal alloy for mass with Type 403 stainless steel and 18Mn-18Cr alloy steel structural components. The upper flywheel assembly is located between the motor and pump impeller. The lower assembly is located below the canned motor, with the thrust bearing. Surrounding the flywheel assemblies are the heavy walls of the stator closure, casing, thermal barrier, or stator lower flange.

The materials in contact with the reactor coolant and cooling water (with the exception of the bearing material) are austenitic stainless steel, nickel-chromium-iron alloy, or equivalent corrosion-resistant material.

There are two journal bearings, one at the bottom of the rotor shaft and the other between the upper flywheel assembly and the motor. The bearings are a hydrodynamic film-riding design. During rotor rotation, a thin film of water forms between the journal and pads, providing lubrication.

The thrust bearing assembly is at the bottom of the rotor shaft. The pivoted pad hydrodynamic bearing provides positive axial location of the rotating assembly regardless of operating conditions.

The reactor coolant pump is equipped with a vibration monitoring system that continuously monitors pump structure (frame) vibrations. Five vibration monitors provide pump vibration information. The readout equipment includes warning alarms and high-vibration level alarms, as well as output for analytical instruments.

Four resistance temperature detectors (RTDs) monitor motor cooling circuit water temperature.

These detectors provide indication of anomalous bearing or motor operation, as well as leakage through the pump labyrinth seal into the stator cavity as a result of a leak in the pump external heat exchanger. They also provide a system for automatic shutdown in the event of a prolonged loss of component cooling water or a large tube leak from the external heat exchanger into the CCS.

A speed sensor monitors rotor rpms. Additionally, voltage and current sensors provide information on motor load and electrical input.

5.4.1.2.2 Description of Operation Reactor coolant is pumped by the main impeller. It is drawn through the eye of the impeller and discharged via the diffuser out through the radial discharge nozzle in the side of the casing. Once the

5.4-3 Revision 1 WLS 1&2 - UFSAR motor housing is filled with coolant, the labyrinth seals around the shaft between the impeller and the thermal barrier minimize the flow of coolant into the motor during operation.

An auxiliary impeller at the lower part of the rotor shaft circulates a controlled volume of the primary coolant through the motor cavity and external heat exchanger. The coolant is cooled to about 150°F by component cooling water circulating on the shell side of the external heat exchanger. The cooled reactor coolant then passes through the motor cavity, where it removes heat from the rotor and stator and lubricates the motors hydrodynamic bearings.

The variable frequency drives enable the startup of the reactor coolant pumps at slow speeds to decrease the power required from the pump motor during operation at cold conditions. The variable frequency drive provides operational flexibility during pump startup and reactor coolant system heatup. During a plant startup, the general startup procedure for the pumps is for the operator to start the pumps at a low speed. During reactor coolant system heatup, the pumps are run at the highest speed that is within the allowable motor current limits. As the reactor coolant temperature increases, the allowable pump speed also increases. Before the reactor trip breakers are closed, the variable frequency controllers are bypassed and the pumps run at constant speed.

During all power operations (Modes 1 and 2), the variable frequency drives are bypassed and the pumps run at constant speed.

5.4.1.3 Design Evaluation 5.4.1.3.1 Pump Performance The reactor coolant pump is sized to deliver a flow rate that equals or exceeds the required flow rate.

Testing prior to plant startup confirms the total delivery capability of the reactor coolant pump. See Section 14.2. Thus, adequate forced circulation coolant flow is confirmed prior to initial plant operation.

The required net positive suction head is provided with ample margin to provide operational integrity and minimize the potential for cavitation. The AP1000 does not require reactor coolant pump operation to achieve safe shut down. Minimum net positive suction head requirements are not required to provide safe operation of the AP1000.

5.4.1.3.2 Overspeed Conditions Reactor coolant pump overspeed can be postulated for either a fault in the connected electrical system that results in an increase in the frequency of the supplied current or due to a pipe rupture which results in an increase in the flow through the pump as the coolant exits the pipe.

For grid disconnect transients or turbine trips actuated by either the reactor trip system or the turbine protection system, the turbine overspeed control system acts to limit the reactor coolant pump overspeed. The turbine control system acts to rapidly close the turbine governor and intercept valves.

An electrical fault requiring immediate generator trip (with resulting turbine trip) will result in an overspeed condition in the electrically coupled reactor coolant pump no greater than that described previously for the grid disconnect/turbine trip transient.

Pump overspeed from high coolant flow rates associated with pipe rupture events are mitigated by the inertia of the pump, flywheel, and motor and by the connection of the motor to the electrical grid.

Because of the application of mechanistic pipe break criteria, dynamic effects such as pump overspeed are not evaluated for breaks in piping in which leak-before-break is demonstrated.

5.4-4 Revision 1 WLS 1&2 - UFSAR 5.4.1.3.3 Pressure Boundary Integrity The pressure boundary integrity is verified for normal, anticipated transients, and postulated accident conditions. The pressure boundary components (pump casing, stator closure, stator main flange, stator shell, stator lower flange, stator cap, and external piping and tube side of the external heat exchanger) meet the requirements of the ASME Boiler and Pressure Vessel Code,Section III.

These components are designed, analyzed, and tested according to the requirements in Paragraph NB-3400 of the ASME Code,Section III. Wells provided for resistance temperature detectors and a phase reference sensor, and speed sensor penetrations also satisfy the requirements of the ASME Code,Section III.

The motor terminals form part of the pressure boundary in the event of a stator-can failure. The ASME Code does not include criteria or methods for completely designing or analyzing such terminals. Motor terminals are designed, analyzed, and tested using criteria established and validated based on many years of service. Where applicable, ASME Code requirements and criteria are used. Individual terminals are hydrostatically tested to test the integrity prior to performance testing.

5.4.1.3.4 Coastdown Capability It is important to reactor protection that the reactor coolant continues to flow for a time after reactor trip and loss of electrical power. To provide this flow, each reactor coolant pump has a high-density flywheel and high-inertia rotor. The rotating inertia of the pump, motor, and flywheel is used during the coastdown period to continue the reactor coolant flow. The reactor coolant pump is designed for the safe shutdown earthquake. The coastdown capability of the pump is maintained even for the case of loss of offsite and onsite electrical power coincident with the safe shutdown earthquake. Core flow transients and figures are provided in Subsections 15.3.1 and 15.3.2.

A loss of component cooling water has no impact on coastdown capability. The reactor coolant pump can operate without cooling water until a safety-related pump trip occurs on high bearing water temperature. This prevents damage that could potentially affect coastdown.

The reactor trip system maintains the pump operation within the assumptions used for loss of coolant flow analyses. This also provides that adequate core cooling is provided to permit an orderly reduction in power if flow from a reactor coolant pump is lost during operation.

The reactor coolant pump coastdown occurs on a power loss to the plant. The following conditions are assumed to occur simultaneously:

z Reactor coolant system at normal operation temperature and pressure, z

Loss of cooling water, z

Loss of pump power, z

Reactor trip If the stator can should leak during operation, the reactor coolant may cause a short in the stator windings. In such a case, the result would be the same as a loss of power to that pump. With either a rotor or a stator can failure, no fluid would be lost to the containment.

5.4-5 Revision 1 WLS 1&2 - UFSAR 5.4.1.3.5 Bearing Integrity The design requirements for the reactor coolant pump bearings provide long life with negligible wear.

The vibration warning level and high-vibration level alarm set-points are, in part, based on evaluation of the effect of vibration on bearing life.

The bearings provide adequate stiffness to control shaft motion, protect the pump impeller and shaft labyrinths from wear, and avoid contact between the motor stator and rotor. The bearing loads are maintained within the load capabilities of hydrodynamic journal bearings even under the severe conditions experienced during seismic events. The bearing/shaft design and loadings are established by analysis and testing.

The frame vibration detectors provide indication of bearing performance. Control room indicators and alarms provide indication for operator action.

The bearing cooling provisions include a temperature monitoring system. The system operates continuously and has at least four redundant indicators per pump. Upon initiation of failure, the system indicates and alarms in the control room as a high bearing water temperature. All of the pumps trip when the high temperature setpoint is reached.

5.4.1.3.6 Integrity of Rotating Components The rotating components of the pump and motor are analyzed for dynamic characteristics, including natural frequencies, stability, and forced responses to normal operation loads, and for several postulated fault conditions associated with the rotating masses. The fault conditions include seized rotor events, and integrity of the rotating components, including the flywheel.

5.4.1.3.6.1 Natural Frequency and Critical Speeds The damped natural frequency of the reactor coolant pump rotating assembly is greater than 120 percent of the normal operating speed.

Determination of the damped natural frequency of the reactor coolant pump rotor bearing system model includes the effects of the bearing films, can annular fluid interaction, motor magnetic phenomena, and pump structure. The damped natural frequencies for the AP1000 reactor coolant pump exhibit sufficient energy dissipation to be stable. The high degree of damping provides smooth pump operation.

The pump is analyzed for the response of the rotor and stator to external forcing functions. The support and connection of the pump to the steam generator and piping are considered in the analysis. The responses are evaluated using criteria including critical loads, stress deformation, wear, and displacement limits to establish the actual system critical speeds.

5.4.1.3.6.2 Rotor Seizure The design of the pump is such as to preclude the instantaneous stopping of any rotating component of the pump or motor. The rotating inertia and power supplied to the motor would overcome interference between the impeller, bearings, flywheel assemblies, motor rotor, or rotor can and the surrounding components for a perid of time. A change in the condition of any of the components sufficient to cause an interference would be indicated by the instrumentation monitoring speed, vibration, temperature, or current.

The reactor coolant system and reactor coolant pump are analyzed for a locked rotor event. To analyze the mechanical and structural effects of a rapid slow down of the rotating assembly, a failure

5.4-6 Revision 1 WLS 1&2 - UFSAR of the rotating assembly is postulated that results in deformation that causes an interference with the surrounding reactor coolant pump components. For such an interference, the pump and motor are postulated to come to a complete stop in a very short time period. This assumption bounds other postulated mechanisms for a rapid slowdown of the rotor, including impeller rub and rotor or stator can failure. The connection of the pump with the steam generator and discharge piping is analyzed for the vibration of the pump, hydraulic effects, and the torque due to the rapid slow down of the rotating assembly. The stresses in the pump casing, motor housing, steam generator channel head, and piping are analyzed using ASME Code,Section III, Service Level D limits for this condition.

The transient analysis of thermal and hydraulic effects of a postulated locked rotor event is based on a nonmechanistic, instantaneous stop of the impeller. This conservative assumption bounds any slower stop and provides a comparison with the same analysis done for other nuclear power plants.

The transient analysis considers the effect of the locked rotor on the reactor core and the reactor coolant system pressure. The results of the transient analysis are found in Chapter 15 and show that the reactor coolant system pressure does not exceed the system design pressure.

5.4.1.3.6.3 Flywheel Integrity The reactor coolant pump in the AP1000 complies with the requirement of General Design Criterion (GDC) Number 4. That Criterion states that components important to safety be protected against the effects of missiles.

The flywheel assemblies are located within and surrounded by the heavy walls of the stator closure, stator main flange, casing, thermal barrier, or lower stator flange. In the event of a postulated worst-case flywheel assembly failure, the surrounding structure can, by a large margin, contain the energy of the fragments without causing a rupture of the pressure boundary. The analysis in Reference 10 of the capacity of the housing to contain the fragments of the flywheel is done using the energy absorption equations of Hagg and Sankey (Reference 2).

Compliance with the requirement of GDC 4 related to missiles can be demonstrated without reference to flywheel integrity, nevertheless, the intent of the guidelines of Regulatory Guide 1.14 is followed in the design and fabrication of the flywheel. The guidelines in Regulatory Guide 1.14 apply to steel flywheels. Since the bi-metallic design of the AP1000 reactor coolant pump flywheel does not respond in the same manner as homogeneous steel, many of the guidelines in the Regulatory Guide are not directly applicable.

The reactor coolant pump flywheel assemblies are fabricated from a tungsten heavy alloy, Type 403 stainless steel, and 18Mn-18Cr alloy steel (ASTM A289, Grade 8). Heavy alloy segments (ASTM B777, Class 4) are fitted to a stainless steel hub (ASTM A336, Grade F6); these segments are not relied upon structurally. The segments are held into place by an interference fit retainer cylinder of 18Mn-18Cr alloy steel placed over the outside of the assembly. The assembly is hermetically sealed from primary coolant by endplates and an outer thin shell of Alloy 625. Ni/Fe/Cr Alloy 600 is not used for this application.

The bi-metallic flywheel design will be manufactured using multiple processes and materials. In accordance with Regulatory Guide 1.14, each structural component of the bi-metallic flywheel will be inspected prior to final assembly according to its fabrication and the procedures outlined in Section III, NB-2500 of the ASME Code. The Type 403 stainless steel inner hub material will be subject to impact testing using three Charpy V-notch tests per ASTM A370, magnetic particle examination per ASTM A788 Supplemental Requirement S18, and ultrasonic examination per ASTM A788 Supplemental Requirement S20, Acceptance Levels BR and S. The retainer ring will be subject to fracture toughness testing per ASTM E399, magnetic particle examination per ASTM A788 Supplemental Requirement S18, and ultrasonic examination per ASTM A788 Supplemental Requirement S20, Acceptance Levels BR and S. Following finishing operations on the flywheel

5.4-7 Revision 1 WLS 1&2 - UFSAR assembly the outside surface of the retainer ring and the inside surfaces of the inner hub are subject to liquid penetrant inspections in conformance with the requirements of ASTM-E-165 (Reference 4).

In-process controls used during the construction of the flywheel assemblies also provide for the quality of the completed assemblies.

The design speed of the flywheel is defined as 125 percent of the synchronous speed of the motor.

The design speed envelopes all expected overspeed conditions. At the normal speed the calculated maximum primary stress in the flywheel assemblies is less than one third of minimum yield strength.

At the design speed the calculated maximum primary stress in the flywheel assemblies is less than two thirds of minimum yield strength.

An analysis of the flywheel failure modes of ductile failure, nonductile failure and excessive deformation of the flywheel is performed to evaluate the flywheel design. The analysis is performed to determine that the critical flywheel failure speeds, based on these failure modes, are greater than the design speed. The critical flywheel failure speeds are not the same as the critical speed identified for the rotor. The critical flywheel failure speeds are greater than the design speed. The overspeed condition for a postulated pipe rupture accident is less than the critical flywheel failure speeds.

The flywheel assemblies are sealed within a welded nickel-chromium-iron alloy enclosure to prevent contact with the reactor coolant or any other fluid. The enclosure minimizes the potential for corrosion of the flywheel and contamination of the reactor coolant. The enclosure material specifications are ASTM-B-443 and ASTM-B-564. Even though the welds of the flywheel enclosure are not external pressure boundary welds, these welds are made using procedures and specifications that follow the rules of the ASME Code. A dye penetrant test of the enclosure welds is performed in conformance with these requirements. The final assemblies are leak tested using a leak test hole located in the inner hub.

No credit is taken in the analysis of the flywheel missile generation for the retention of the fragments by the enclosure. A leak in the enclosure during operation could result in an out-of-balance flywheel assembly. An out-of-balance flywheel exhibits an increase in vibration, which is monitored by vibration instrumentation.

The flywheel enclosure contributes only a small portion of the energy in a rotating flywheel assembly.

The stress in the welds of the flywheel enclosure components for normal and design speeds are within the criteria in subsection NG of the ASME Code, which is used as a guideline.

Pipe rupture overspeed is based on a break of the largest branch line pipe connected to the reactor coolant system piping that is not qualified for leak-before-break criteria. The exclusion of the reactor coolant loop piping and branch line piping of 6 inches or larger size from the basis of the pump loss of coolant accident overspeed condition is based on the provision in GDC 4 to exclude dynamic effects of pipe rupture when a leak-before-break analysis demonstrates that appropriate criteria are satisfied. See Subsection 3.6.3 for a discussion of leak-before-break analyses. The criteria of Subsection 3.6.2 are used to determine pipe break size and location for those piping systems that do not satisfy the requirements for mechanistic pipe break criteria.

In addition to material specification and non destructive testing requirement, each flywheel is subject to a spin test at 125 percent overspeed, followed by visual inspection, during manufacture. This demonstrates quality of the flywheel. Since the basis for the safety of the flywheel is retention of the fragments within the reactor coolant pump pressure boundary, periodic inservice inspections of the flywheel assemblies are not required to ensure that the basis for safe operation is maintained.

Because of the configuration of the flywheel assemblies, inservice inspection of the flywheel assemblies may not result in significant inspection results. Inspection of the flywheel assemblies

5.4-8 Revision 1 WLS 1&2 - UFSAR would require removal of the assemblies from the shaft, removal of the enclosures, rewelding of the enclosure, reassembly, and balancing of the pump shaft. Opening of the pump assembly for a periodic inspection of the enclosure would result in an increased occupational radiation exposure and would not be consistent with goals relative to maintaining exposure as low as reasonably achievable.

Also, opening the pump may increase the potential for entry of foreign objects into the motor area.

For these reasons, routine, periodic inspection of the flywheel assemblies in the AP1000 reactor coolant pump is not recommended.

5.4.1.3.6.4 Other Rotating Components The rotating components (other than the flywheel), including the impeller, auxiliary impeller, rotor, and rotor can, are evaluated for potential missile generation. In the event of fracture, the fragments from these components are contained by the surrounding pressure housing. The impeller is contained by the pump casing. The rotor and rotor can are contained by the stator, stator can, and motor housing.

The auxiliary impeller is contained by the motor housing. In each case, the energy of the postulated fragments is less than that required to penetrate through the pressure boundary.

5.4.1.4 Tests and Inspections Reactor coolant pump construction is subject to a quality assurance program. The pressure boundary components meet requirements established by the ASME Code. In addition, the flywheel is subject to quality assurance requirements. Table 5.4-3 outlines the inspection included in the reactor coolant pump quality assurance program.

The reactor coolant pump inservice inspection program is according to the ASME Code,Section XI.

The design enables removal of the pump internals for inspection of the pump casing, if required. As noted earlier, routine inspections of the impeller, flywheel, and motor internals are not required for safe operation of the pump.

5.4.1.4.1 Reactor Coolant System Flow Rate Verification Initial verification of the reactor coolant system flow rate is made during the plant initial test program.

Reactor coolant system flow rates are measured during the pre-core load hot functional tests, and during the startup tests. The objective of these tests is to verify that the reactor coolant system flow rate meets the flow rate range of Technical Specification 3.4.1.

After the pre-core reactor coolant system flow rate measurement is taken, analytical adjustments are made to the pre-core measured reactor coolant system flow rate to predict a post-core reactor coolant system flow rate. Calculations of the reactor coolant system flow rate with and without the core are performed. The calculation of the pre-core load reactor coolant system flow rate is compared with results of the pre-core load flow testing, and this information will be used in the calculation of the post-core load reactor coolant system flow rate as appropriate. The predicted post-core load reactor coolant system flow rate is checked to verify that it satisfies Technical Specification 3.4.1. Verifications are also made that the post-core load reactor coolant system flow rates satisfy Technical Specification 3.4.1 flow limits during startup testing.

5.4.2 Steam Generators 5.4.2.1 Design Bases The steam generator channel head, tubesheet, and tubes are a portion of the reactor coolant pressure boundary. The tubes transfer heat to the steam system while retaining radioactive contaminants in the primary system. The steam generator removes heat from the reactor coolant

5.4-9 Revision 1 WLS 1&2 - UFSAR system during power operation and anticipated transients and under natural circulation conditions.

The steam generator heat transfer function and associated secondary water and steam systems are not required to provide a safety-related safe shutdown of the plant.

The steam generator secondary shell functions as containment boundary during operation and during shutdown when access opening closures are in place.

Tables 5.4-4 and 5.4-5 give steam generator design data. AP1000 equipment, seismic and ASME Boiler and Pressure Vessel Code classifications of the steam generator components are discussed in Section 3.2. ASME Code and Code Case compliance are discussed in Subsection 5.2.1. The ASME Code classification for the secondary side is specified as Class 2. The pressure-retaining parts of the steam generator, including the primary and secondary pressure boundaries, are designed to satisfy the criteria specified in Section III of the ASME Code for Class 1 components.

Subsection 3.9.3 discusses the design stress limits, loads, and combined loading conditions.

Subsection 3.9.1 discusses the transient conditions applicable to the steam generator. The number of transients is based on 60 years of operation.

In addition to the loading conditions associated with pressure and temperature variations for transient and anticipated accident conditions, the steam generator is evaluated for fluid borne and structural vibration originating with the reactor coolant pump. The steam generator is also evaluated for the load on the primary outlet nozzles resulting from a postulated locked reactor coolant pump rotor. See Subsection 5.4.1.3.6 for a discussion of the locked rotor postulation.

Chapter 11 gives estimates of radioactivity levels anticipated in the secondary side of the steam generators during normal operation and the bases for the estimates. Chapter 15 discusses the accident analysis of a steam generator tube rupture.

The water chemistry on the primary side, selected to provide the necessary boron content for reactivity control, should minimize corrosion of reactor coolant system surfaces. The effectiveness of the water chemistry in the control of the secondary side corrosion is discussed in Chapter 10.

Compatibility of steam generator tubing with both primary and secondary coolants is discussed further in Subsection 5.4.2.4.3.

The steam generator is designed to minimize the potential for mechanical or flow-induced vibration.

Tube support adequacy is discussed in Subsection 5.4.2.3.3. The tubes and tubesheet are analyzed and confirmed to withstand the maximum accident loading conditions defined in Subsection 3.9.3.

Further consideration is given in Subsection 5.4.2.3.4 to the effect of tube-wall thinning on accident condition stresses.

5.4.2.2 Design Description The AP1000 steam generator is a vertical-shell U-tube evaporator with integral moisture separating equipment. Figure 5.4-2 shows the steam generator, indicating several of its design features.

The design of the Model Delta-125 steam generator, except for the configuration of the channel head, is similar to an upgraded Model Delta-75 steam generator. The Delta-75 steam generator has been placed in operation as a replacement steam generator.

Steam generator design features are described in the following paragraphs.

On the primary side, the reactor coolant flow enters the primary chamber via the hot leg nozzle. The lower portion of the primary chamber is elliptical and merges into a cylindrical portion, which mates to the tubesheet. This arrangement provides enhanced access to all tubes, including those at the

5.4-10 Revision 1 WLS 1&2 - UFSAR periphery of the bundle, with robotics equipment. This feature enhances the ability to inspect, replace and repair portions of the AP1000 unit compared to the more spherical primary chamber of earlier designs. The head is divided into inlet and outlet chambers by a vertical divider plate extending from the apex of the head to the tubesheet.

The reactor coolant flow enters the inverted U-tubes, transferring heat to the secondary side during its traverse, and returns to the cold leg side of the primary chamber. The flow exits the steam generator via two cold leg nozzles to which the reactor coolant pumps are directly attached. A high-integrity, nickel-chromium-iron (Alloy 690) weld is made to the nickel-chromium-iron alloy buttered ends of these nozzles.

A passive residual heat removal (PRHR) nozzle attaches to the bottom of the channel head of the loop 1 steam generator on the cold leg portion of the head. This nozzle provides recirculated flow from the passive residual heat removal heat exchanger to cool the primary side under emergency conditions. A separate nozzle on one of the steam generator channel heads is connected to a line from the chemical and volume control system. The nozzle provides for purification flow and makeup flow from the chemical and volume control system to the reactor coolant system.

The AP1000 steam generator channel head has provisions to drain the head. To minimize deposits of radioactive corrosion products on the channel head surfaces and to enhance the decontamination of these surfaces, the channel head cladding is machined or electropolished for a smooth surface. The primary manways provide enhanced primary chamber access compared to previous model steam generators.

Should steam generator replacement using a channel head cut be required, the arrangement of the AP1000 steam generator channel head facilitates steam generator replacement in two ways. It is completely unobstructed around its circumference for mounting cutting equipment. And is long enough to permit post-weld heat treatment with minimal effect of tubesheet acting as a heat sink.

The tubes are fabricated of nickel-chromium-iron Alloy 690. The tubes undergo thermal treatment following tube-forming operations. The tubes are tack-expanded, welded, and expanded over the full depth of the tubesheet. Full depth expansion was selected because of its capability to minimize secondary water access to the tube-to-tube-sheet crevice. The method by which the tubes are expanded into the tubesheet is determined based on consideration of the residual stresses and the resultant susceptibility of the tube to degradation. Residual stresses (and the expanded tubes susceptibility to degradation) are limited, in part, through tight control of the pre-expansion clearance between the tube and tubesheet hole.

Support of the tubes is provided by ferritic stainless steel tube support plates. The holes in the tube support plates are broached with a hole geometry to promote flow along the tube and to provide an appropriate interface between the tube support plate and the tube. Figure 5.4-3 shows the support plate hole geometry. Anti-vibration bars installed in the U-bend portion of the tube bundle minimize the potential for excessive vibration.

Steam is generated on the shell side, flows upward, and exits through the outlet nozzle at the top of the vessel. Feedwater enters the steam generator at an elevation above the top of the U-tubes through a feedwater nozzle. The feedwater enters a feedring via a welded thermal sleeve connection and leaves it through nozzles attached to the top of the feedring. The nozzles are fabricated of an alloy that is very resistant to erosion and corrosion with the expected secondary water chemistry and flow rate through the nozzles. After exiting the nozzles, the feedwater flow mixes with saturated water removed by the moisture separators. The flow then enters the downcomer annulus between the wrapper and the shell.

5.4-11 Revision 1 WLS 1&2 - UFSAR Fluid instabilities and water hammer phenomena are important considerations in the design of steam generators. Water level instabilities can occur from density wave instabilities which could affect steam generator performance. Density wave instability is avoided in the AP1000 steam generator by including appropriate pressure losses in the downcomer and the risers that lead to negative damping factors.

Steam generator bubble collapse water hammer has occurred in certain early pressurized water reactor steam generator designs having feedrings equipped with bottom discharge holes. Prevention and mitigation of feedline-related water hammer has been accomplished through an improved design and operation of the feedwater delivery system. The AP1000 steam generator and feedwater system incorporate features designed to eliminate the conditions linked to the occurrence of steam generator water hammer. The steam generator features include introducing feedwater into the steam generator at an elevation above the top of the tube bundle and below the normal water level by a top discharge feedring. The top discharge of the feedring helps to reduce the potential for vapor formation in the feedring. This minimizes the potential for conditions that can result in water hammer in the feedwater piping. The feedwater system features (Subsection 10.4.7 discusses in more detail) designed to prevent and mitigate water hammer include a short, horizontal or downward sloping feedwater pipe at steam generator inlet.

These features minimize the potential for trapping pockets of steam which could lead to water hammer events.

Stratification and striping are reduced by an upturning elbow inside the steam generator which raises the feedring relative to the feedwater nozzle. The elevated feedring reduces the potential for stratified flow by allowing the cooler, more dense feedwater to fill the nozzle/elbow arrangement before rising into the feedring.

The potential for water hammer, stratification, and striping is additionally reduced by the use of a separate startup feedwater nozzle. The startup feedwater nozzle is located at an elevation that is the same as the main feedwater nozzle and is rotated circumferentially away from the main feedwater nozzle. A startup feedwater spray system independent of the main feedwater feedring is used to introduce startup feedwater into the steam generator. The layout of the startup feedwater piping includes the same features as the main feedwater line to minimize the potential for waterhammer.

The startup feedwater system is used to introduce water into the secondary side of the steam generator as described in Subsection 10.4.7.2.3.

At the bottom of the wrapper, the water is directed toward the center of the tube bundle by the lowest tube support plate. This recirculation arrangement serves to minimize the low-velocity zones having the potential for sludge deposition.

As the water passes the tube bundle, it is converted to a steam-water mixture. Subsequently, the steam-water mixture from the tube bundle rises into the steam drum section, where centrifugal moisture separators remove most of the entrained water from the steam. The steam continues to the secondary separators, or dryers, for further moisture removal, increasing its quality to a designed minimum of 99.75 percent (0.25 percent by weight maximum moisture). Water separated from the steam combines with entering feedwater and recirculates through the steam generator. A sludge collector located amidst the inner primary separator risers provides a preferred region for sludge settling away, from the tubesheet and tube support plates. The dry, saturated steam exits the steam generator through the outlet nozzle, which has a steam-flow restrictor. (See Subsection 5.4.4.)

5.4.2.3 Design Evaluation Integrity of the pressure retaining function of the steam generator is provided by compliance with the ASME Code. The evaluation of the stress levels and fatigue usage for the steam generator pressure

5.4-12 Revision 1 WLS 1&2 - UFSAR boundary is calculated for the specified loading conditions and demonstrates that the values are less than the allowable limits. These calculations are documented in a stress report as required by the ASME Code. Corrosion allowances which are consistent with material erosion/corrosion resistance and service environment (velocity, chemistry, etc.) are employed throughout the design.

Meeting the heat transfer requirements and tube vibration and tube wall integrity requirements in addition to the ASME Code requirements is discussed in the following subsections:

5.4.2.3.1 Forced Convection The steam generator transfers to the secondary coolant loop the heat generated during power operation in the reactor and by the reactor coolant pumps. The evaluation of the steam generator thermal performance, including required heat transfer area and steam flow, uses conservative assumptions for parameters such as primary flow rates and heat transfer coefficients. The effective heat transfer coefficient is determined by the physical characteristics of the AP1000 steam generator and the fluid conditions in the primary and secondary systems for the nominal 100 percent design case. It includes a conservative allowance for fouling and uncertainty. Tables 5.4-4 and 5.4-5 show the nominal design requirements and parameters. Table 5.1-1 lists additional parameters used to evaluate the steam generator design.

5.4.2.3.2 Natural Circulation Flow When the normal feedwater supply is not available, water may be supplied to the steam generators by the startup feedwater system. The startup feedwater system is a nonsafety-related system that provides a nonsafety-related source of decay heat removal. In addition, the system is used during startup and shutdown and other times when the normal feedwater system is not available.

When the steam generator is supplied with water from the startup feedwater system, the steam generator has enough surface area and a small enough primary-side hydraulic resistance to remove decay heat from the reactor coolant by natural circulation without operation of the reactor coolant pumps.

If the passive residual heat removal system activates, the passive residual heat removal nozzle connection to the steam generator passes coolant flow from the passive residual heat removal heat exchanger into the cold leg side of the channel head. Coolant is drawn through the reactor coolant pumps into the cold legs and then into the reactor vessel.

5.4.2.3.3 Mechanical and Flow-Induced Vibration under Normal Operating Conditions Potential sources of tube excitation are considered, including primary fluid flow within the U-tubes, mechanically induced vibration, and secondary fluid flow on the outside of the U-tubes. The effects of primary fluid flow and mechanically induced vibration, including those developed by the reactor coolant pump, are acceptable during normal operation. The primary source of potential tube degradation due to vibration is the hydrodynamic excitation of the tubes by the secondary fluid. This area has been emphasized in both analyses and tests, including evaluation of steam generator operating experience.

Three potential tube vibration mechanisms related to hydrodynamic excitation of the tubes have been identified and evaluated. These include potential flow-induced vibrations resulting from vortex shedding, turbulence, and fluid-elastic vibration mechanisms.

Nonuniform, two-phase turbulent flow exists throughout most of the tube bundle. Therefore, vortex shedding is possible only for the outer few rows of the inlet region. Moderate tube response caused by vortex shedding is observed in some carefully controlled laboratory tests on idealized tube arrays.

5.4-13 Revision 1 WLS 1&2 - UFSAR However, no evidence of tube response caused by vortex shedding is observed in steam generator scale model tests simulating the inlet region. Bounding calculations consistent with laboratory test parameters confirmed that vibration amplitudes would be acceptably small, even if the carefully controlled laboratory conditions were unexpectedly reproduced in the steam generator.

Flow-induced vibrations due to flow turbulence are also small: Root mean square amplitudes are less than allowances used in tube sizing. These vibrations cause stresses that are two orders of magnitude below fatigue limits for the tubing material. Therefore, neither unacceptable tube wear nor fatigue degradation due to secondary flow turbulence is anticipated.

Tube fluid elastic excitation is potentially more significant than either vortex shedding or turbulence.

Relatively large tube amplitudes can feed back proportionally large tube driving forces if an instability threshold is exceeded. Tube support spacing, in both the tube support plates in the straight leg region and the anti-vibration bars in the U-bend region, provides tube response frequencies such that the instability threshold is not exceeded. This approach provides large margins against initiation of fluid elastic vibration for tubes effectively supported by the tube support system.

Small clearances between the tubes and the supporting structure are required for steam generator fabrication. These clearances introduce the potential that any given tube support location may not be totally effective in restraining tube motion if there is a finite gap around the tube at that location.

Fluid-elastic tube response within available support clearances is therefore theoretically possible if secondary flow conditions exceed the instability threshold when no support is assumed at the location with a gap around the tube. This potential has been investigated both with tests and analyses for both the U-bend and straight leg regions.

AP1000 steam generator tube wear potential is expected to be within available design margins even for limiting tube fit-up conditions, based on previous experience. The AP1000 steam generator includes a number of features that minimize the potential for tube wear at tube supports and antivibration bars. Provisions to minimize the potential for wear include optimal spacing between the tube supports and the configuration of the anti-vibration bar assemblies. Tube wear is minimized in the tube support plate design by the configuration of the broached hole through the support plate, the surface finish of the broached hole in the tube support plate, the clearance between the tube and the hole in the tube support plate, and tube support plate material selection.

Tube bending stresses corresponding to tube vibration response remain more than two orders of magnitude below fatigue limits as a consequence of vibration amplitudes constrained by the tube supports. These analyses and tests for limiting postulated fit-up conditions include simultaneous contributions from flow turbulence.

As outlined, analyses and tests demonstrate that unacceptable tube degradation resulting from tube vibration is not expected for the AP1000 steam generators. Operating experience with steam generators having the same size tubes and similar flow conditions supports this conclusion.

The U-bend fatigue (discussed in NRC Bulletin 88-02) is not a consideration in the AP1000 steam generators. The mechanism considered in Bulletin 88-02 requires denting of the top tube support plate. But this is not expected with the stainless steel tube support plates in the AP1000 steam generator. Additionally, the location of anti-vibration bars is controlled by in-process dimensional inspection.

5.4.2.3.4 Allowable Tube Wall Thinning under Accident Conditions An evaluation determined the extent of tube wall thinning that can be tolerated under accident conditions. The worst-case loading conditions are assumed to be imposed upon uniformly thinned

5.4-14 Revision 1 WLS 1&2 - UFSAR tubes at the most critical location in the steam generator. Under such a postulated design basis accident, vibration is short enough duration that there is no endurance issue to be considered.

The steam generator tubes, existing originally at their minimum wall thickness and reduced by a conservative general corrosion and erosion loss, provide an adequate safety margin (sufficient wall thickness) in addition to the minimum required for a maximum stress less than the allowable stress limit, as defined by the ASME Code.

Studies have been made on AP1000 sized tubing under accident loadings. The results show that the maximum Level D Service condition stress due to combined pipe rupture and safe shutdown earthquake loads is less than the allowable limit. The tube thickness required to achieve the acceptable stress is less than the minimum AP1000 steam generator tube wall thickness, which is reduced to account for assumed general corrosion and erosion rate. Thus, an adequate safety margin is exhibited. The general corrosion rate is based on a conservative weight-loss rate for Alloy 690 TT tubing in flowing, 650°F primary-side reactor coolant fluid. The estimated weight loss, based on testing when equated to a thinning rate and projected over a 60-year design objective, is much less than the assumed corrosion allowance of 3 mils. This leaves the remainder of the general corrosion allowance for thinning on the secondary side.

5.4.2.4 Steam Generator Materials 5.4.2.4.1 Selection and Fabrication of Materials The pressure boundary materials used in the steam generator are selected and fabricated in accordance with the requirements of Section II and III of the ASME Code. Subsection 5.2.3 contains a general discussion of material specifications. Table 5.2-1 lists the types of materials. Fabrication of reactor coolant pressure boundary materials is also discussed in Subsection 5.2.3, particularly in Subsections 5.2.3.3 and 5.2.3.4.

Industry-wide corrosion testing and specification development programs have justified the selection of thermally treated Alloy 690, a nickel-chromium-iron alloy (ASME SB-163), for the steam generator tubes. The channel head divider plate is also Alloy 690 (ASME SB-168). The interior surfaces of the reactor coolant channel head, nozzles, and manways are clad with austenitic stainless steel. The primary side of the tubesheet is weld clad with nickel-chromium-iron alloy (ASME SFA-5.14). The tubes are then seal welded to the tubesheet cladding. These fusion welds, comply with Sections III and IX of the ASME Code. The welds are dye-penetrant inspected and leak-tested before each tube is expanded the full depth of the tubesheet bore.

Nickel-chromium-iron alloy in various forms is used for parts where high velocities could otherwise lead to erosion/corrosion. These include the nozzles on the feedwater ring and startup feedwater sparger.

Subsection 5.2.1 discusses authorization for use of ASME Code cases used in material selection.

Subsection 1.9.1 discusses the extent of conformance with Regulatory Guides 1.84, Design and Fabrication Code Case Acceptability ASME Section III, Division 1.

During manufacture, the primary and secondary sides of the steam generator are cleaned according to written procedures following the guidance of Regulatory Guide 1.37, Quality Assurance Requirements for Cleaning of Fluid Systems and Associated Components of Water-Cooled Nuclear Power Plants, and ASME NQA-1 Part II. Onsite cleaning and cleanliness control also follow the guidance of Regulatory Guide 1.37 (discussed in Subsection 1.9.1). Cleaning process specifications are discussed in Subsection 5.2.3.4.

5.4-15 Revision 1 WLS 1&2 - UFSAR Subsection 5.2.3.3 discusses the fracture toughness of the materials. Adequate fracture toughness of ferritic materials in the reactor coolant pressure boundary is provided by compliance with 10 CFR 50, Appendix G, Fracture Toughness Requirements, and Paragraph NB-2300 of Section III of the ASME Code.

The heat and lot of tubing material for each steam generator tube is recorded and documented as part of the quality assurance records. Archive samples of each heat and lot of steam generator tubing material are provided for use in future materials testing programs or as inservice inspection calibration standards. A minimum of 7 feet of tubing in the final heat treat condition is supplied.

The exterior of the steam generator surface may be submerged following a postulated actuation of the automatic depressurization system (ADS). During this event, water may be present on the outside of the steam generator without affecting the heat transfer or pressure boundary capabilities of the AP1000 steam generator.

5.4.2.4.2 Steam Generator Design Effects on Materials Several features in the AP1000 steam generator minimize crevice areas and the deposition of contaminants from the secondary-side flow. Such crevices and deposits could otherwise produce a local environment allowing potential chemical concentration and material corrosion.

The portion of the tube within the tubesheet is expanded to close the crevice between the tube and tubesheet. The length of the expansion is carefully controlled to minimize the potential of an over-expanded condition above the tubesheet and to minimize the extent of unexpanded tube at the top of the tubesheet.

The tube support plates are made of corrosion resistant Type 405 stainless steel alloy. A three-lobed, or trifoil, tube hole design provides flow adjacent to the tube outer surface. This provides high sweeping velocities at the tube and tube support plate intersections. The trifoil tube support plate provides in-plane and out-of-plane strength. The sweeping velocities through the support plate reduce sludge accumulation in the tube-to-tube support crevices. Figure 5.4-3 shows the trifoil broached holes. This support plate design contributes to a high circulation ratio. The increased flow from a high circulation ratio circulation results in increased flow in the interior of the bundle, as well as horizontal velocity across the tubesheet, which reduces the tendency for sludge deposition.

The effect of the total bundle flow on the vibrational stability of the tube bundle has been analyzed, with consideration given to flow-induced excitation frequencies. The maximum unsupported span length of tubing in the U-bend region and the optimal number of anti-vibration bars has been determined, using advanced statistical techniques and vibration modeling. The anti-vibration bars are fabricated from Type 405 stainless steel. The construction minimizes the gaps between the anti-vibration bars and tubes.

Additional measures in the AP1000 steam generator design minimize areas of dryout in the steam generator and sludge accumulations in low-velocity areas. The wrapper design results in significant water velocities across the tubesheet.

A high capacity blowdown system is capable of continuous blowdown of the steam generators at a moderate volume and intermittent flow. The intakes of the blowdown system are at the tube bundle periphery.

A passive sludge collector, which provides a low flow settling zone, is in the upper shell region located among the inner primary moisture separator risers. The sludge collector, or mud drum, provides a location for particulate to settle remote from the tubesheet and tube support plates. The mud drum can be cleaned during a plant shutdown.

5.4-16 Revision 1 WLS 1&2 - UFSAR Several methods can be used to clean operating steam generators of secondary-side deposits.

Sludge lancing is a procedure in which a hydraulic jet inserted through an access opening (handhole) loosens deposits and the loose material is flushed out of the steam generator. A minimum of four 6-inch access ports are provided for sludge lancing, inspection of the tube bundle by portable inspection equipment, and retrieval of loose objects. They are located above the tubesheet 90° apart (two on the tubelane and two at 90° from the tube lane) to provide access to the secondary face of the tubesheet. Also, a minimum of two 4-inch ports located on the secondary shell in line with the tubelane and above the top tube support plate provide access to the U-Bend area. A blowdown hole, located at the bottom of the secondary side drain channel permits continuous blowdown and monitoring of secondary water chemistry. The materials of the secondary side of the steam generator are also compatible with chemical cleaning.

5.4.2.4.3 Compatibility of Steam Generator Tubing with Primary and Secondary Coolants The industry corrosion tests mentioned in Subsection 5.4.2.4.1, subjected the steam generator tubing material thermally treated Alloy 690 ASME SB-163, to simulated steam generator water chemistry. These tests indicated that the loss due to general corrosion over the 60-year operating design objective is small compared to the tube wall thickness. Testing to investigate the susceptibility of heat exchanger construction materials to stress corrosion in caustic and chloride aqueous solutions indicate that Alloy 690 TT provides as good or better corrosion resistance as either Alloy 600 TT or nickel-iron-chromium Alloy 800. Alloy 690 TT also resists general corrosion in severe operating water conditions.

Some operating experience has revealed areas on secondary surfaces where localized corrosion rates were significantly greater than the low general corrosion rates. Both intergranular stress corrosion and tube wall thinning were experienced in localized areas, although not simultaneously at the same location or under the same environmental conditions (water chemistry, sludge composition).

The all volatile treatment (AVT) control program minimizes the possibility of the tube wall thinning phenomenon. Successful AVT operation requires maintenance of low concentrations of impurities in the steam generator water. This reduces the potential for formation of highly concentrated solutions in low-flow zones, which is a precursor of corrosion. By restricting the total alkalinity in the steam generator and prohibiting extended operation with free alkalinity, the all volatile treatment program minimizes the possibility for intergranular corrosion in localized areas due to excessive levels of free caustic.

Laboratory testing shows that Alloy 690 TT tubing is compatible with the AVT environment.

Isothermal corrosion testing in high-purity water shows that Alloy 690 TT exhibiting normal microstructure tested at normal engineering stress levels is not susceptible to intergranular stress corrosion cracking in extended exposure to high-temperature water. These tests also show that no general type corrosion occurred. Field experience with Alloy 690 TT tubing in operation since 1989 has been excellent.

Model boiler tests evaluate similar AVT chemistry guidelines adopted by Westinghouse and EPRI.

Conformance to the guidelines enhances tube corrosion performance. The secondary water chemistry guidelines for AP1000 are found in Chapter 10. Action levels for secondary side water chemistry during power operation are given in Table 10.3.5-1. Extensive operating data has been accumulated for all volatile treatment chemistry.

A comprehensive program of steam generator inspections, including the recommendations of Regulatory Guide 1.83, Inservice Inspection of Pressurized Water Reactor Steam Generator Tubes,

5.4-17 Revision 1 WLS 1&2 - UFSAR with the exceptions as stated in Subsection 1.9.1, provides for detection of any degradation that might occur in the steam generator tubing.

Included with the standard operating condition water chemistry controls are chemistry controls during zero power (including shutdown, no-load, heatup, cooldown, and refueling operations). The startup feedwater nozzle may be used to supply hydrazine, ammonia, and other chemicals to control secondary pH and oxygen during wet layup. This nozzle, in combination with the blowdown line, can also be used to remove sensible heat from the steam generator during cooldown. Sparging the steam generator with nitrogen through the blowdown line also promotes secondary recirculation at zero power. This recirculation can be used, in conjunction with the addition of cleaning agents into the secondary side, to remove magnetite, copper, or other deposited contaminants. The AP1000 steam generator is also configured for pressure pulse cleaning and water slap methods to remove deposits on the secondary side.

High margins against primary water stress corrosion cracking exist with the specification of thermally treated Alloy 690 tubing. Alloy 690 TT is resistant to primary water stress corrosion cracking over the range of anticipated operating environments. The tubing is thermally treated according to a laboratory-derived treatment process and is generally consistent with industry-accepted and EPRI procedures.

The tube support plates are fabricated of ferritic stainless steel. Laboratory tests show that this material is resistant to corrosion in the AVT environment. If corrosion of ferritic stainless steel were to occur because of the concentration of contaminants, the volume of the corrosion products is essentially equivalent to the volume of the parent material consumed. This would be expected to preclude denting. The support plates are also designed with trifoil tube holes rather than cylindrical holes. The trifoil tube hole (see Figure 5.4-3) design promotes high velocity flow along the tube and is expected to minimize the accumulation of impurities at the support plate location.

5.4.2.5 Steam Generator Inservice Inspection The steam generator is designed to permit inspection of pressure boundary parts, including individual tubes. Preservice inspection of the AP1000 steam generators is performed according to the ASME Code. Inservice inspection complies with the requirements of 10 CFR 50.55a.

The design includes a number of openings to provide access to both the primary and secondary sides of the steam generator. The openings include four 18-inch diameter manways, one for access to each chamber of the reactor coolant channel head and two in the steam drum for inspection and maintenance of the upper shell internals. In addition, there are a minimum of four 6-inch diameter handholes in the shell, located just above the tubesheet secondary surface are provided. A minimum of two 4-inch diameter inspection openings are provided at each end of the tubelane between the upper tube support plate and the row 1 tubes. Additional access to the tube bundle U-bend is provided through the internal deck plate at the bottom of the primary separators. For proper functioning of the steam generator, some of the deck-plate openings are covered with hatch plates welded in place that are removable by grinding, gouging, or other methods to cut off the welds.

Regulatory Guide 1.83 provides recommendations on the inspection of tubes. The recommendations cover inspection equipment, baseline inspections, tube selection, sampling and frequency of inspection, methods of recording, and required actions based on findings. Any eddy current inspection performed in the manufacturing facility is conducted by personnel qualified to the requirements for inspectors performing inservice inspection of operating units. The manufacturing facility inspection is conducted using the same equipment as, or equipment similar to, that used during inservice inspection of operating units. Exceptions to Regulatory Guide 1.83 are noted in Subsection 1.9.1.

5.4-18 Revision 1 WLS 1&2 - UFSAR The steam generators permit access to tubes for inspection, repair, or plugging, if necessary, per the guidelines described in Regulatory Guide 1.83. Tooling to install mechanical and welded plugs, tube repair sleeves, or effect other repair processes remotely can be delivered robotically. The AP1000 steam generator includes features to enhance robotics inspection of steam generator tubes without manned entry of the channel head. These include a cylindrical section of the channel head, primary manways, and provisions to facilitate the remote installation of nozzle dams. Computer simulation using designs of existing robotically delivered inspection and maintenance equipment verifies that tubes can be accessed. To facilitate tube identification for manual activities, the tube location for a fraction of the tubes is scribed on the tubesheet.

The minimum requirements for inservice inspection of steam generators, including tube repair criteria, are discussed in Subsection 5.4.15 considering NRC requirements and industry recommendations. The steam generator tube integrity is verified in accordance with a Steam Generator Tube Surveillance Program. The Steam Generator Tube Surveillance Program is discussed in Subsection 5.4.15.Section XI of the ASME Code provides general acceptance criteria for indications of tube degradation in the steam generator.

A steam generator tube surveillance program is implemented in accordance with the recommendations and guidance of Nuclear Energy Institute (NEI) 97-06, Steam Generator Program Guidelines (Reference 201). A program for periodic monitoring of degradation of steam generator internals is also implemented in accordance with NEI 97-06. Applicable Electric Power Research Institute (EPRI) Steam Generator Management Program (SGMP) guidelines are followed as described in the NEI 97-06. The Programs are in compliance with applicable sections of ASME Section XI.

NEI 97-06 and the referenced EPRI SGMP guidelines provide recommendations concerning the inspection of tubes, which cover inspection equipment, baseline inspections, tube selection, sampling and frequency of inspection, methods of recording, required actions based on findings, and tube plugging. The minimum requirements for inservice inspection of steam generators, including plugging criteria, are established in Technical Specification 5.5.4.

The tube surveillance and degradation monitoring programs include provisions to maintain the compatibility of steam generator tubing with primary and secondary coolant to limit the steam generators susceptibility to corrosion. These provisions are in accordance with NEI 97-06.

5.4.2.6 Quality Assurance The steam generator is constructed to a quality assurance program that meets the requirements of the ASME Code and ASME NQA-1-1994 Edition. Table 5.4-6 outlines the testing included in the steam generator quality assurance program.

The radiographic inspection and acceptance standard comply with the requirements of Section III of the ASME Code per applicable Code Year and Addenda.

Liquid penetrant inspection and acceptance standards comply with the requirements of Section III of the ASME Code per applicable Code Year and Addenda. Liquid penetrant inspection is performed on weld-deposited tubesheet cladding, channel head cladding, divider-plate-to-tubesheet and to channel head weldments, tube-to-tubesheet weldments, and weld-deposit cladding.

Magnetic particle inspection and acceptance standards comply with the requirements of Section III of the ASME Code per applicable Code Year and Addenda. Magnetic particle inspection is performed on the tubesheet forging, channel head forging, nozzle forging, and the following weldments:

5.4-19 Revision 1 WLS 1&2 - UFSAR z

Nozzle to shell (if not integral) z Support brackets z

Instrument connection (secondary) z Temporary attachments, after removal z

Accessible pressure retaining welds after hydrostatic test Ultrasonic inspection and acceptance standards comply with the requirements of Section III of the ASME Code per applicable Code Year and Addenda. Ultrasonic tests are performed on the tubesheet forgings, tubesheet cladding, secondary shells and heads plates and forgings, and nozzle forgings.

The heat transfer tubing is subjected to eddy current testing and ultrasonic examination.

Hydrostatic tests comply with Section III of the ASME Code.

Non-destructive examination of pressure boundary and associated weldments will be performed in accordance with the applicable Code Year and Addenda of ASME Section III, Subsections NB and NC.

5.4.3 Reactor Coolant System Piping 5.4.3.1 Design Bases The reactor coolant system piping accommodates the system pressures and temperatures attained under all expected modes of plant operation or anticipated system interactions. The piping in the reactor coolant system is AP1000 equipment Class A (ANS Safety Class 1, Quality Group A) (see Subsection 3.3.2) and is designed and fabricated according to ASME Code,Section III, Class 1 requirements. Lines with a 3/8-inch or less flow restricting orifice qualify as AP1000 equipment Class B (ANS Safety Class 2, Quality Group B) and are designed and fabricated with ASME Code,Section III, Class 2 requirements. If one of these lines breaks, the chemical volume control charging pumps are capable of providing makeup flow while maintaining pressurizer water level. Stresses are maintained within the limits of Section III of the ASME Code. Code and material requirements are provided in Section 5.2. Inservice inspection of Class 1 components is discussed in Subsection 5.2.4.

Materials of construction are specified to minimize corrosion/erosion and to provide compatibility with the operating environment including the expected radiation level. The welding, cutting, heat treating and other processes used to minimize sensitization of stainless steel are discussed in Subsection 5.2.3.

The thickness of reactor coolant system piping satisfies the design requirements of the ASME Code,Section III, Subsection NB. The analysis of piping of nominal pipe size of 6 inches or greater which demonstrates leak-before-break characteristics, as outlined in Subsection 3.6.3, does not include loads due to the dynamic effects of pipe rupture. The minimum pipe bend radius is 1.5-nominal pipe diameters, and ovality meets the requirements of the ASME Code.

Butt welds, branch connection nozzle welds, and boss welds are of a full-penetration design. Flanges conform to ANSI B16.5. Socket weld fittings and socket joints conform to ANSI B16.11.

5.4-20 Revision 1 WLS 1&2 - UFSAR 5.4.3.2 Design Description 5.4.3.2.1 Piping Elements The reactor coolant system piping includes those sections of reactor coolant hot leg and cold leg piping interconnecting the reactor vessel, steam generators, and reactor coolant pumps. It also includes piping connected to the reactor coolant loop piping and primary components. Figure 5.1-5 shows the Piping and Instrumentation Drawing (P&ID) of the reactor coolant system. The boundary of the reactor coolant system includes the second of two isolation or shut off valves and the piping between those valves. A single ASME Code safety valve may also represent the boundary of the reactor coolant system. The connected piping in the reactor coolant system includes the following:

z Chemical and volume control system (CVS) purification return line from the system isolation valve up to a nozzle on the steam generator channel head z

Chemical and volume control system purification line from the branch connection on the pressurizer spray line to the system isolation valve z

Pressurizer spray lines from the reactor coolant cold legs up to the spray nozzle on the pressurizer vessel z

Normal residual heat removal system (RNS) pump suction line from one reactor coolant hot leg up to the designated isolation valve z

Normal residual heat removal system discharge line from the designated check valve to the connection to the core makeup tank return lines to the reactor vessel direct injection nozzle z

Accumulator lines from the designated check valve to the reactor vessel direct injection nozzle z

Passive core cooling system (PXS) lines from the cold legs to the core make-up tanks and back to the reactor vessel direct injection nozzles z

Drain, sample and instrument lines to the designated isolation valve.

z Pressurizer surge line from one reactor coolant loop hot leg to the pressurizer vessel surge nozzle z

Pressurizer spray scoop, reactor coolant temperature element installation boss, and the temperature element well itself z

All branch connection nozzles attached to reactor coolant loops z

Pressure relief lines in the pressurizer safety and relief valve module from nozzles on top of the pressurizer vessel up to and including the pressurizer safety valves z

Automatic depressurization system (ADS) lines from the pressurizer relief lines to the stages 1, 2, and 3 automatic depressurization system valves z

Automatic depressurization system lines from the connection with the hot leg up to the fourth stage valves z

Auxiliary spray line from the isolation valve up to the main pressurizer spray line

5.4-21 Revision 1 WLS 1&2 - UFSAR z

Passive core cooling system lines from the hot leg to the passive residual heat removal heat exchanger, and back to the nozzle on the steam generator channel head z

Vent line from the reactor vessel head to the system isolation valves z

In-containment refueling water storage tank injection lines from the designated valves to the reactor vessel direct injection nozzle Table 5.4-7 gives principal design data for the reactor coolant piping.

A discussion of the codes used in the fabrication of reactor coolant piping and fittings appears in Section 5.2.

Reactor coolant system piping is fabricated of austenitic stainless steel. The piping is forged seamless without longitudinal or electroslag welds. It complies with the requirements of the ASME Code,Section II (Parts A and C),Section III, and Section IX. The reactor coolant system piping does not contain any cast fittings. Changes in direction are accomplished in most cases using bent pipe instead of elbows to minimize the number of welds, fittings, and short radius turns.

5.4.3.2.2 Piping Connections Joints and connections are welded, except for the pressurizer safety valves, the reactor head vent line, miscellaneous vents and drains, and orifice flanges, where flanged joints are used. Fillet welds may be used to connect small instrument lines to socket weld connections. Piping connections for auxiliary systems are above the horizontal centerline of the reactor coolant loop piping, except for the following:

z The residual heat removal pump suction line, which is located at the bottom of a hot leg pipe.

This enables the water level in the reactor coolant system to be lowered in the reactor coolant loop pipe while continuing to operate the residual heat removal system, should this be required for maintenance.

z The pressurizer level channel nozzles with a 0.375-inch or less flow restrictor and the hot leg level channel nozzle with a 0.375-inch flow restrictor located in the hot leg piping.

z The sample connection located at 45 degrees below the horizontal centerline of each hot leg.

z The cold leg-narrow range thermowells attached at the horizontal centerline.

z The wide-range thermowell tap and three of the six narrow-range thermowell taps in each hot leg.

5.4.3.2.3 Encroachment into Coolant Flow Parts encroaching into the primary coolant loop flow path are limited to the following:

z The spray line inlet connections extend into the cold leg piping in the form of a scoop so that the velocity head of the reactor coolant loop flow adds to the spray driving force.

z The narrow-range and wide-range temperature detectors are in resistance temperature detector wells that extend into both the hot and cold legs of the reactor coolant loop piping.

5.4-22 Revision 1 WLS 1&2 - UFSAR 5.4.3.3 Design Evaluation The loading combinations, stress limits, and analytical methods for the structural evaluation of the reactor coolant system piping and supports for design conditions, normal conditions, anticipated transients, and postulated accident conditions are discussed in Subsection 3.9.3. The requirements for dynamic testing and analysis are discussed in Subsection 3.9.2. The reactor coolant system design transients for normal operation, anticipated transients and postulated accident conditions are discussed in Subsection 3.9.1.

The pressurizer surge line has been specifically designed and instrumented to minimize the potential for thermal stratification that could increase cyclic stresses and fatigue usage. At the connection of the surge line to the hot leg, the surge line is sloped 24 degrees from horizontal. The connection to the reactor coolant hot leg is in the portion of the loop piping that is at an angle with horizontal and adjacent to the steam generator inlet nozzle. The run between the hot leg and pressurizer continuously slopes up. The surge line has an angle of at least 2.5 degrees to horizontal. The pressurizer surge line is shown in Figure 5.4-4. Changes of direction in the surge line are made using pipe bends instead of elbow fittings.

The surge line temperature is monitored for indication of thermal stratification. The temperature is monitored at three locations using strap-on resistance temperature detectors. One location is on the vertical section of pipe directly under the pressurizer. The other two locations are on the top and bottom of the pipe at the same diameter on a more horizontal section of pipe near the pressurizer.

Temperatures in the spray lines from the cold legs of one loop are measured and indicated. Alarms from these signals actuate to warn the operator of low spray water temperature or to indicate insufficient flow in the spray lines.

5.4.3.4 Material Corrosion/Erosion Evaluation The pipe material is selected to minimize corrosion in the reactor coolant water chemistry. (See Subsection 5.2.3.) A periodic analysis of the coolant chemistry is performed to verify that the reactor coolant water quality meets the specifications. Water quality is maintained to minimize corrosion by using the chemical and volume control system and sampling system, described in Chapter 9.

Contamination of stainless steel and nickel-chromium-iron alloys by copper, low-melting-temperature alloys, mercury, and lead is prohibited during fabrication, installation, and operation.

The austenitic stainless steel surfaces are cleaned to an appropriate halogen limit. The austenitic stainless steel piping is very resistant to erosion due to single-phase fluid flow. The flow rate in the reactor coolant loop piping and branch connections during normal operation and anticipated transients is significantly below the threshold value for erosion due to water for austenitic stainless steel.

The material selection, water chemistry specification, and residual stress in the piping minimize the potential for stress corrosion cracking. (See Subsection 5.2.3.) Reactor coolant system piping is stress-relieved subsequent to bending or other fabrication operations which could result in significant residual stress in the pipe. Processes such as welding or heat treating which apply heat to stainless steel are controlled to minimize the potential for sensitization of the stainless steel.

Pressure boundary welds out to the second valve that delineates the reactor coolant system boundary are accessible for inservice examination as required by ASME Code,Section XI, and are fitted with removable insulation. Reactor coolant system piping is seamless and does not have any longitudinal welds.

5.4-23 Revision 1 WLS 1&2 - UFSAR 5.4.3.5 Test and Inspections The reactor coolant system piping construction is subject to a quality assurance program. The pressure boundary components meet requirements established by the ASME Code and ASME NQA-1. The testing included in the reactor coolant system piping quality assurance program is outlined in Table 5.4-8.

A transverse tension test conforming with the supplementary requirements S2 of material specification ASME SA-376 applies to each heat of pipe material.

Ultrasonic examination is performed throughout 100 percent of the wall volume of each pipe, fitting, and other forgings according to the applicable requirements of Section III of the ASME Code for reactor coolant system piping. Unacceptable defects are eliminated according to the requirements of the ASME Code. The surfaces of weld areas are smooth enough to permit preservice and inservice non-destructive examination.

The ends of pipe sections and branch ends are machined to provide a smooth weld transition adjacent to the weld.

A liquid penetrant examination is performed on accessible surfaces, including weld surfaces, of each finished pipe and fitting according to the criteria of the ASME Code,Section III. Acceptance standards are according to the applicable requirements of the ASME Code,Section III. Liquid penetrant examinations are done on the area of pipe bends before the bending operation and after the subsequent heat treatment. Since reactor coolant system piping is austenitic stainless steel, magnetic particle testing for surface examination is not an option. Fillet weld joints are examined by liquid penetrant examination method.

Radiographic examination is performed on circumferential butt welds and on branch connection nozzle welds exceeding 4-inch nominal pipe size.

The examination of a weld repair is repeated as required for the original weld. Except, when the defect was originally detected by the liquid penetrant method, and when the repair cavity does not exceed the lesser of 0.38 inch or 10 percent of the thickness, it need be re-examined only by the liquid penetrant method.

5.4.4 Main Steam Line Flow Restriction 5.4.4.1 Design Bases The outlet nozzle of the steam generator has a flow restrictor that limits steam flow in the unlikely event of a break in the main steam line. A large increase in steam flow results in choked flow in the restrictor which limits further increase in flow. In a steam line qualified for mechanistic pipe break, a sudden rupture resulting in a large increase in steam flow is not expected. The flow restrictor performs the following functions:

z Limits rapid rise in containment pressure z

Limits the rate of heat removal from the reactor to keep the cooldown rate within acceptable limits z

Reduces thrust forces on the main steam line piping z

Limits pressure differentials on internal steam generator components, particularly the tube support plates

5.4-24 Revision 1 WLS 1&2 - UFSAR The restrictor is configured to minimize the unrecovered pressure loss across the restrictor during normal operation.

5.4.4.2 Design Description The flow restrictor consists of seven nickel-chromium-iron Alloy 690 (ASME SB-564) venturi inserts which are installed in holes in an integral steam outlet nozzle forging. The inserts are arranged with one venturi at the centerline of the outlet nozzle, and the other six are equally spaced around it. After insertion into the nozzle forging holes, the venturi inserts are welded to the nickel-chromium-iron alloy buttering on the inner surface of the forging.

5.4.4.3 Design Evaluation The flow restrictor design has been analyzed to determine its structural adequacy. The equivalent throat area of the steam generator outlet is 1.4 square feet. The resultant pressure drop through the restrictor at 100 percent steam flow is approximately 20 psi. This is based on a design flow rate of 7.49 x 106 pounds per hour. Materials of construction of the flow restrictor are in accordance with Code Class 1 Section III of the ASME Code. The material of the inserts is not an ASME Code pressure boundary, nor is it welded to an ASME Code pressure boundary. The method for seismic analysis is dynamic.

5.4.4.4 Inspections Since the restrictor is not part of the steam system pressure boundary, inservice inspections are not required.

5.4.5 Pressurizer The pressurizer provides a point in the reactor coolant system where liquid and vapor are maintained in equilibrium under saturated conditions for pressure control of the reactor coolant system during steady-state operations and transients. The pressurizer provides a controlled volume from which level can be measured.

The pressurizer contains the water inventory used to maintain reactor coolant system volume in the event of a minor system leak for a reasonable period without replenishment. The pressurizer surge line connects the pressurizer to one reactor coolant hot leg. This allows continuous coolant volume and pressure adjustments between the reactor coolant system and the pressurizer.

5.4.5.1 Design Bases The pressurizer is sized to meet following requirements:

z The combined saturated water volume and steam expansion volume is sufficient to provide the desired pressure response to system volume changes.

z The water volume is sufficient to prevent a reactor trip during a step-load increase of 10 percent of full power, with automatic reactor control.

z The water volume is sufficient to prevent uncovering of the heaters following reactor trip and turbine trip, with normal operation of control systems and no failures of nuclear steam supply systems.

5.4-25 Revision 1 WLS 1&2 - UFSAR z

The steam volume is large enough to accommodate the surge resulting from a step load reduction from 100 percent power to house loads without reactor trip, assuming normal operation of control systems.

z The steam volume is large enough to prevent water relief through the safety valves following a complete loss of load with the high water level initiating a reactor trip, without steam dump.

z A low pressurizer pressure engineered safety features actuation signal will not be activated because of a reactor trip and turbine trip, assuming normal operation of control and makeup systems and no failures of the nuclear steam supply systems.

The pressurizer is sized to have sufficient volume to accomplish the preceding requirements without power-operated relief valves. The AP1000 pressurizer has approximately 40 percent more volume than the pressurizers for previous plants with similar power levels. This increased volume provides plant operating flexibility and minimizes challenges to the safety relief valves.

The pressurizer and surge line provide the connection of the reactor coolant system to the safety relief valves and the automatic depressurization system valves. The safety relief valves provide overpressure protection for the reactor coolant system. The automatic depressurization system is provided to reduce reactor coolant system pressure in stages to allow stored water in the in-containment refueling water storage tank to flow into the reactor coolant system to provide cooling.

The pressurizer surge nozzle and the surge line between the pressurizer and one hot leg are sized to maintain the pressure drop between the reactor coolant system and the safety valves within allowable limits during a design discharge flow from the safety valves or the valves of the automatic depressurization system. Requirements for the surge line and piping connecting the pressurizer to safety and automatic depressurization valves is discussed in Subsection 5.4.3.

Section 3.2 discusses the AP1000 equipment classification, seismic category and ASME Code classification of the pressurizer. ASME Code and Code Case compliance is discussed in Subsection 5.2.1.

The design stress limits, loads, and combined loading conditions are discussed in Subsection 3.9.3.

Design transients for the components of the reactor coolant system are discussed in Subsection 3.9.1. The pressurizer surge nozzle and surge line are designed to withstand the thermal stresses resulting from volume surges occurring during operation. The evaluation of design transients for the pressurizer addresses the potential for thermal stratification at the surge nozzle.

The pressurizer provides a location for high point venting of noncondensable gases from the reactor coolant system. The gas accumulations in the pressurizer can be removed by remote manual operation of the first-stage automatic depressurization system valves following an accident.

Degassing of the pressurizer using the automatic depressurization valves will not be required on a routine basis for normal and moderate frequency events. See Subsection 5.4.12 for a discussion of high-point vents.

5.4.5.2 Design Description 5.4.5.2.1 Pressurizer The pressurizer is a vertical, cylindrical vessel having hemispherical top and bottom heads constructed of low alloy steel. Internal surfaces exposed to the reactor coolant are clad austenitic stainless steel. Material specifications are provided in Table 5.2-1 for the pressurizer.

5.4-26 Revision 1 WLS 1&2 - UFSAR The general configuration of the pressurizer is shown in Figure 5.4-5. The design data for the pressurizer are given in Table 5.4-9. Codes and material requirements are provided in Section 5.2.

Nickel-chromium-iron alloys are not used for heater wells or instrument nozzles.

The spray line nozzles and the automatic depressurization and safety valve connections are located in the top head of the pressurizer vessel. Spray flow is modulated by automatically controlled air-operated valves. The spray valves can also be operated manually from the control room. In the bottom head at the connection of the surge line to the surge nozzle a thermal sleeve protects the nozzle from thermal transients.

A retaining screen above the surge nozzle prevents passage of any foreign matter from the pressurizer to the reactor coolant system. Baffles in the lower section of the pressurizer prevent an in-surge of cold water from flowing directly to the steam/water interface. The baffles also assist in mixing the incoming water with the water in the pressurizer. The retaining screen and baffles also act as a diffuser. The baffles also support the heaters to limit vibration.

Electric direct-immersion heaters are installed in vertically oriented heater wells located in the pressurizer bottom head. The heater wells are welded to the bottom head and form part of the pressure boundary. The heaters can be removed for maintenance or replacement.

The heaters are grouped into a control group and backup groups. The heaters in the control group are proportional heaters which are supplied with continuously variable power to match heating needs. The heaters in the backup group are either off or at full power. The power supply to the heaters is a 480-volt 60 Hz. three-phase circuit. Each heater is connected to one leg of a delta-connected circuit and is rated at 480 volts with one-phase current. The capacity of the control and backup groups is defined in Table 5.4-10.

A manway in the upper shell provides access to the internal space of the pressurizer in order to inspect or maintain the spray nozzle. The manway closure is a gasketed cover held in place with threaded fasteners. Periodic planned inspections of the pressurizer interior are not required.

Brackets on the upper shell attach the structure (a ring girder) of the pressurizer safety and relief valve (PSARV) module. The pressurizer safety and relief valve module includes the safety valves and the first three stages of automatic depressurization system valves. The support brackets on the pressurizer represent the primary vertical load path to the building structure. Sway struts between the ring girder and pressurizer compartment walls also provide lateral support to the upper portion of the pressurizer. See Subsection 5.4.10 for additional details.

Four steel columns attach to pads on the lower head to provide vertical support for the vessel. The columns are based at elevation 107'-2". Lateral support for the lower portion of the vessel is provided by sway struts between the columns and compartment walls.

The AP1000 pressurizer has metallic reflective insulation (MRI) installed on the external surfaces.

The insulation is designed to reduce heat losses from the pressurizer, to reduce heat load on the containment cooling system, and to limit temperatures in nearby concrete or components. During normal operating conditions, the insulation has an average maximum heat transfer rate of 65 BTU/hr-ft2 at a containment design temperature of 120°F.

5.4.5.2.2 Instrumentation Instrument connections are provided in the pressurizer shell to measure important parameters. Eight level taps are provided for four channels of level measurement. Level taps are also used for connection to the pressure measurement instrumentation. Two temperature taps monitor water/

steam temperature. A sample tap connection is provided for connection to the sampling system to

5.4-27 Revision 1 WLS 1&2 - UFSAR monitor coolant chemistry. The instrument and sample taps are constructed of stainless steel and designed for a socket weld of the connecting lines to the taps. The sample and instrument taps incorporate an integral flow restrictor with a diameter of 0.38 inch or smaller.

See Chapter 7 for details of the instrumentation associated with pressurizer pressure, level, and temperature.

5.4.5.2.3 Operation During steady-state operation at 100 percent power, approximately 50 percent of the pressurizer volume is water and 50 percent is steam. Electric immersion heaters in the bottom of the vessel keep the water at saturation temperature. The heaters also maintain a constant operating pressure.

A small continuous spray flow is provided through a manual bypass valve around each power-operated spray valve to minimize the boron concentration difference between the pressurizer liquid and the reactor coolant. This continuous flow also prevents excessive cooling of the spray piping.

Proportional heaters in the control group are continuously on during normal operation to compensate for the continuous introduction of cooler spray water and for losses to ambient.

These conditions result in a continuous outsurge in most cases during normal operation and anticipated transients. The outsurge minimizes the potential for thermal stratification in the surge line.

During an outsurge of water from the pressurizer, flashing of water to steam and generation of steam by automatic actuation of the heaters keep the pressure above the low-pressure engineered safety features actuation setpoint. During an in-surge from the reactor coolant system, the spray system (which is fed from two cold legs) condenses steam in the pressurizer. This prevents the pressurizer pressure from reaching the high-pressure reactor trip setpoint. The heaters are energized on high water level during in-surge to heat the subcooled surge water entering the pressurizer from the reactor coolant loop.

During heatup and cooldown of the plant, when the potential for thermal stratification in the pressurizer is the greatest, the pressurizer may be operated with a continuous outsurge of water from the pressurizer. This is achieved by continuous maximum spray flow and energizing of all of the backup pressurizer heater groups. The temperature difference between the pressurizer and hot leg is minimized by maintaining the lowest reactor coolant system pressure possible consistent with operation of a reactor coolant pump. This mode of operation minimizes the frequency and magnitude of thermal shock to the surge line nozzle and lower pressurizer head, and the potential for stratification in the pressurizer and surge line. The design analyses of the pressurizer include consideration of transients on the lower head and shell regions to account for these possible insurge/

outsurge events.

The pressurizer is the initial source of water to keep the reactor coolant system full of water in the event of a small loss of coolant. Pressurizer level and pressure measurements indicate if other sources of water, including the chemical volume and control system and passive safety systems, must be used to supply additional reactor coolant.

Power to the pressurizer heaters is blocked when the core makeup tanks are actuated. This action reduces the potential for steam generator overfill for a steam generator tube rupture accident.

5.4-28 Revision 1 WLS 1&2 - UFSAR 5.4.5.3 Design Evaluation 5.4.5.3.1 System Pressure Control The reactor coolant system pressure is controlled by the pressurizer whenever a steam volume is present in the pressurizer.

A design basis safety limit has been set so that the reactor coolant system pressure does not exceed the maximum transient value based on the design pressure as allowed under the ASME Code,Section III. Evaluation of plant conditions of operation considered for design indicates that this safety limit is not reached. The safety valves provide overpressure protection. See Subsection 5.2.2.

During startup and shutdown, the rate of temperature change in the reactor coolant system is controlled automatically by the steam dump system. Heatup rate is controlled by energy input from the reactor coolant pumps and by the modulation of the steam dump valves. Pressurizer heatup rate is controlled by the electrical heaters in the pressurizer.

When the pressurizer is filled with water, i.e., during initial system heatup or near the end of the second phase of plant cooldown, reactor coolant system pressure is controlled by the letdown flowrate.

The AP1000 pressurizer heaters are powered from the 480 V ac system. During loss of offsite power events concurrent with a turbine trip, selected pressurizer heater buses are capable of being powered from the onsite diesel generators via manual alignment. This permits use of the pressurizer for control purposes when power is supplied by the diesel-generators. The power supplied by the diesel-generators is sufficient to establish and maintain natural circulation in hot standby condition in conformance with the requirement of 10 CFR 50.34 (f)(2)(xiii).

If loss of offsite power occurs and onsite power is available, the pressurizer heaters and startup feedwater pumps can operate to provide natural circulation and cooling through the steam generators.

Should the onsite diesel generators not be available during loss of offsite power events, core decay heat is removed from the reactor coolant system using the passive residual heat removal heat exchanger. The decay heat is transferred to the in-containment refueling water storage tank (IRWST) water. The passive core cooling system does not require the use of pressurizer heaters to maintain pressure control. The passive containment cooling system functions to maintain the plant in a safe condition.

NUREG-0737, Action Item II.E.3.1, outlines four requirements for emergency power supply to the pressurizer heaters for purposes of establishing natural circulation in the reactor coolant system during a loss of offsite power. NUREG-0737 does not address scenarios involving natural circulation cooling for a loss of all ac power, which is a design basis for the AP1000. Under these circumstances, cooling is provided by the passive residual heat removal system. Upon a loss of all ac power, the heaters are not available to maintain the pressurizer inventory in a saturated condition. That condition is not needed for the plant to be maintained in a safe condition. On this basis, compliance with the requirements of the action item is not required to provide for the safety of the AP1000.

Nevertheless, AP1000 compliance with the intent of these requirements is summarized in the following paragraphs.

The heaters are powered from separate electrical buses for each heater group. Two groups of heaters can be administratively loaded onto the non-Class 1E diesel-generator-backed buses (Figure 8.3.1-1).

5.4-29 Revision 1 WLS 1&2 - UFSAR Analysis of AP1000 steady-state heat losses indicates that a heater capacity of about 166 kW is sufficient to provide saturated conditions in the pressurizer. Each AP1000 heater group has a capacity greater than 166 kW (see Table 5.4-10). One group alone can maintain control over reactor coolant system pressure and subcooling.

Established administrative procedures are followed for re-energizing groups. Associated actions can be controlled from either the main control room or the shutdown panel. It is not necessary to shed other loads in order to manually load a heater group.

Based on analysis of other pressurizer water reactors, the reactor coolant system sensible heat capacity is such that adequate subcooling can be maintained in the reactor coolant system for four hours without heat input from the pressurizer heaters. Thus, the time required to accomplish connection of the heaters to the emergency buses is consistent with timely initiation of natural circulation conditions.

Since the buses supplying the heaters for the diesel generators are not Class 1E, the 480 V breakers supplying the heaters are not required to be qualified in accordance with safety-related requirements.

5.4.5.3.2 Pressurizer Level Control The normal operating water volume at full-load conditions is approximately 50 percent of the free internal vessel volume. Under part-load conditions the water volume in the pressurizer is reduced proportionally with reductions in plant load to approximately 25 percent of the free internal vessel volume at the zero-power condition.

5.4.5.3.3 Pressure Setpoints The reactor coolant system design and operating pressure, together with the safety valve setpoints, heater actuation setpoints, pressurizer spray valve setpoints, and protection system pressure setpoints, are listed in Table 5.4-11. When operating in load regulation mode, the pressurizer spray and backup heaters are on continuously. This continuous operation decreases the number of actuations of the backup heaters and spray valves, thereby extending the component lifetimes.

The selected design margin considers core thermal lag, coolant transport times and pressure drops, instrumentation and control response characteristics, and system relief valve characteristics. The design pressure allows for operating transient pressure changes.

The low pressurizer pressure engineered safety features actuation signal does not require a coincident low pressurizer water level signal.

5.4.5.3.4 Pressurizer Spray Two separate, automatically controlled spray valves with remote manual overrides are used to initiate pressurizer spray.

In parallel with each spray valve is a manual throttle valve. The throttle permits a small, continuous flow through both spray lines to reduce thermal stresses and thermal shock when the spray valves open. Flow through this valve helps to maintain uniform water chemistry and temperature in the pressurizer. Temperature sensors with low temperature alarms are located in each spray line to alert the operator to insufficient bypass flow.

The layout of the common spray line piping routed to the pressurizer forms a water seal that prevents steam buildup back to the control valves. The design spray rate is selected to prevent the pressurizer

5.4-30 Revision 1 WLS 1&2 - UFSAR pressure from reaching the reactor trip setpoint during a step reduction in power level of 10 percent of full load.

The pressurizer spray lines and valves are large enough to provide the required spray flowrate under the driving force of the differential pressure between the surge line connection in the hot leg and the spray line connection in the cold leg. The spray line inlet connections extend into the cold leg piping in the form of a scoop in order to use the velocity head of the reactor coolant loop flow to add to the spray driving force. The spray line also assists in equalizing the boron concentration between the reactor coolant loops and the pressurizer.

A flowpath from the chemical and volume control system to the pressurizer spray line is also provided. This path provides auxiliary spray to the vapor space of the pressurizer during cooldown, hot standby, and hot shutdown when the reactor coolant pumps are not operating. The pressurizer spray connection and the spray piping can withstand the thermal stresses resulting from the introduction of cold spray water.

5.4.5.4 Tests and Inspections The pressurizer construction is subject to a quality assurance program. The pressure boundary components meet requirements established by the ASME Code and ASME NQA-1. Table 5.4-12 outlines the testing included in the pressurizer quality assurance program.

The design of the pressurizer permits the inspection program prescribed by the ASME Code,Section XI. To implement the requirements of the ASME Code,Section XI, the following welds, when present, are designed and constructed to present a smooth transition surface between the parent metal and the weld metal. The weld surface is ground smooth for ultrasonic inspection.

z Surge nozzle to the lower head z

Safety and spray nozzles to the upper head z

Nozzle to safe end attachment welds z

The girth full-penetration welds The liner within the safe end nozzle region extends beyond the weld region to maintain a uniform geometry for ultrasonic inspection.

Peripheral support rings are furnished for the removable insulation modules.

5.4.6 Automatic Depressurization System Valves The automatic depressurization system (ADS) valves are part of the reactor coolant system and interface with the passive core cooling system (PXS). Twenty valves are divided into four depressurization stages. These stages connect to the reactor coolant system at three different locations. The automatic depressurization system first, second, and third stage valves are included as part of the pressurizer safety and relief valve (PSARV) module and are connected to nozzles on top of the pressurizer. The fourth stage valves connect to the hot leg of each reactor coolant loop.

The reactor coolant system P&ID, Figure 5.1-5, shows the arrangement of the valves.

Opening of the automatic depressurization system valves is required for the passive core cooling system to function as required to provide emergency core cooling following postulated accident conditions. Operation of the passive core cooling system, including setpoints for the opening of the automatic depressurization system valves is discussed in Section 6.3.

5.4-31 Revision 1 WLS 1&2 - UFSAR The first stage valves may also be used, as required following an accident, to remove noncondensable gases from the steam space of the pressurizer. (See Subsection 5.4.11.)

5.4.6.1 Design Bases Subsection 5.4.8 discusses the general design basis, design evaluation, and testing and inspection for reactor coolant system valves, including the automatic depressurization system valves. The automatic depressurization system valves are seismic Category 1, AP1000 equipment Class A components. (See Subsection 3.2.2.) The fourth stage valves are interlocked so that they can not be opened until reactor coolant system pressure has been substantially reduced. The design criteria and bases, functional requirements, mechanical design, and testing and inspection of the passive core cooling system are included in Section 6.3. The design requirements for the passive core cooling system also apply to automatic depressurization valves except where the requirements for reactor coolant system valves are more restrictive.

5.4.6.2 Design Description The first stage automatic depressurization system valves are motor-operated 4-inch valves. The second and third stage automatic depressurization system valves are motor-operated 8-inch valves.

The fourth stage automatic depressurization system valves are 14 inch squib valves arranged in series with normally-open, dc powered, motor-operator valves. See Section 6.3 for a discussion of the sizing of the automatic depressurization system valves.

The control system for the opening of the automatic depressurization system valves, as part of the passive core cooling system, has an appropriate level of diverse and redundant features to minimize the inadvertent opening of the valves.

For each stage 1-3 discharge path a pair of valves are placed in series to minimize the potential for an inadvertent discharge of the automatic depressurization system valves. The fourth stage valves are interlocked so that they cannot be opened until reactor coolant system pressure has been substantially reduced.

The first, second, and third stage valves are located on the pressurizer safety and relief valve module clustered into two groups. Each group has one pair of valves for each stage. The two groups are on different elevations and are separated by a steel plate.

Vacuum breakers are provided in the AP1000 ADS discharge lines to help prevent water hammer following ADS operation. The vacuum breakers limit the pressure reduction that could be caused by steam condensation in the discharge line and thus limit the potential for liquid backflow from the in-containment refueling water storage tank following ADS operation.

A bypass test line is connected to the inlet and outlet of the first, second, and third stage upstream isolation valves. This bypass line can control the differential pressure across the upstream valves during inservice testing. The bypass test solenoid valves do not have a safety-related function to open.

5.4-32 Revision 1 WLS 1&2 - UFSAR 5.4.6.3 Design Verification The automatic depressurization system valves are verified to meet their safety-related functional requirements by the following:

z Valve equipment qualification z

Pre-operational valve operational verification z

In-service valve operational verification Automatic depressurization system valve qualification is addressed in Subsection 5.4.8.1.2 for the stage 1/2/3 motor operated valves and in Subsection 5.4.8.1.3 for the stage 4 squib valves. The equipment qualification includes type testing which verifies the automatic depressurization system valve operability and flow capacity. Automatic depressurization system valve pre-operational valve operational verification is addressed in Subsection 14.2.9.1. Automatic depressurization system valve in-service valve operational verification is addressed in Subsection 3.9.6.2.2 and Table 3.9-16.

5.4.6.4 Inspection and Testing Requirements The requirements for tests and inspections for reactor coolant system valves is found in Subsection 5.4.8.4. In addition, tests for the automatic depressurization system valves and piping are conducted during preoperational testing of the passive core cooling system, as discussed in Sections 6.3 and 14.2.

5.4.6.4.1 Flow Testing Initial verification of the resistance of the automatic depressurization system piping and valves is performed during the plant initial test program. A low pressure flow test and associated analysis is conducted to determine the total piping flow resistance of each automatic depressurization system valve group connected to the pressurizer (i.e. stages 1-3) from the pressurizer through the outlet of the downstream valve. The reactor coolant system shall be at cold conditions with the pressurizer full of water. The normal residual heat removal pumps will be used to provide injection flow into the reactor coolant system, discharging through the ADS valves.

Inspections and associated analysis of the piping flow paths from the discharge of the automatic depressurization system valve groups connected to the pressurizer (i.e., stages 1-3) to the spargers are conducted to verify the line routings are consistent with the line routings used for design flow resistance calculations. The calculated piping flow resistances from the pressurizer through the sparger, with valves of each group open are bounded by the resistances used in the Chapter 15 safety analysis.

Inspection of the piping flow paths from each hot leg through the automatic depressurization stage 4 valves is conducted. The calculated flow resistances with valves in each group open are bounded by the resistances used in the Chapter 15 safety analysis.

5.4.7 Normal Residual Heat Removal System The normal residual heat removal system (RNS) performs the following major functions:

z Reactor Coolant System Shutdown Heat Removal - Remove heat from the core and the reactor coolant system during shutdown operations.

5.4-33 Revision 1 WLS 1&2 - UFSAR z

Shutdown Purification - Provide reactor coolant system and refueling cavity purification flow to the chemical and volume control system during refueling operations.

z In-containment Refueling Water Storage Tank Cooling - Provide cooling for the in-containment refueling water storage tank.

z Reactor Coolant System Makeup - Provide low pressure makeup to the reactor coolant system.

z Post-Accident Recovery - Remove heat from the core and the reactor coolant system following successful mitigation of an accident by the passive core cooling system.

z Low Temperature Overpressure Protection - Provide low temperature overpressure protection (LTOP) for the reactor coolant system during refueling, startup, and shutdown operations.

z Long-Term, Post-Accident Containment Inventory Makeup Flowpath - Provide long-term, post-accident makeup flowpath to the containment inventory.

z Spent Fuel Pool Cooling - Provide backup for cooling the spent fuel pool.

5.4.7.1 Design Bases 5.4.7.1.1 Safety Design Bases The safety-related functions provided by the normal residual heat removal system include containment isolation of normal residual heat removal system lines penetrating containment, preservation of the reactor coolant system pressure boundary and a flow path for long term post-accident makeup to the containment inventory. The containment isolation valves perform the containment isolation function according to the criteria specified in Subsection 6.2.3. The system preserves the reactor coolant system pressure boundary according to the criteria specified in Subsection 5.4.8.

The normal residual heat removal system piping and components outside containment are an AP1000 Class C, Seismic Category I pressure boundary. This classification recognizes the importance of pressure boundary integrity even though these components have no safety-related functions.

5.4.7.1.2 Nonsafety Design Bases Subsection 5.4.7 outlines the principal functions of the normal residual heat removal system. The normal residual heat removal system is designed to be reliable. This reliability is achieved by using redundant equipment and a simplified system design. The normal residual heat removal system is not a safety-related system. It is not required to operate to mitigate design basis events.

The normal residual heat removal system is designed for a single nuclear power unit and is not shared between units. The normal residual heat removal system is operated from the main control room.

The normal residual heat removal system provides the capability to cool the spent fuel pool during times when it is not needed for removing heat from the reactor coolant system.

5.4-34 Revision 1 WLS 1&2 - UFSAR 5.4.7.1.2.1 Shutdown Heat Removal The normal residual heat removal system removes both residual and sensible heat from the core and the reactor coolant system. It reduces the temperature of the reactor coolant system during the second phase of plant cooldown. The first phase of cooldown is accomplished by transferring heat from the reactor coolant system via the steam generators to the main steam system (MSS).

Following cooldown, the normal residual heat removal system removes heat from the core and the reactor coolant system during the plant shutdown, until the plant is started up.

The normal residual heat removal system reduces the temperature of the reactor coolant system from 350° to 125°F within 96 hours0.00111 days <br />0.0267 hours <br />1.587302e-4 weeks <br />3.6528e-5 months <br /> after shutdown. The system maintains the reactor coolant temperature at or below 125°F for the plant shutdown. The system performs this function based on the following:

z Operation of the system with both subsystems of normal residual heat removal system pumps and heat exchangers available.

z Initiation of normal residual heat removal system operation at four hours following reactor shutdown, after the first phase of cooldown by the main steam system has reduced the reactor coolant system temperature to less than or equal to 350°F and 450 psig.

z The component cooling water system supply temperature to the normal residual heat removal system heat exchangers is based on maximum normal ambient wet bulb temperature as defined in Chapter 2, Table 2.0-201. The maximum normal ambient temperature is assumed for shutdown cooling.

z Operation of the system is consistent with reactor coolant system cooldown rate limits and consistent with maintaining the component cooling water below design limits during cooldown.

z Core decay heat generation is based on the decay heat curve for a three-region core having burnups consistent with a 24-month or 18-month refueling schedule and based on the ANSI/ANS-5.1-1994 decay heat curve (Reference 5).

z A failure of an active component during normal cooldown does not preclude the ability to cool down, but lengthens the time required to reach 125°F. Furthermore, if such a single failure occurs while the reactor vessel head is removed, the reactor coolant temperature remains below boiling temperature.

z The system operates at a constant normal residual heat removal flow rate throughout refueling operations. This includes the time when the level in the reactor coolant system is reduced to a midloop level to facilitate draining of the steam generators or removal of a reactor coolant pump. Operation of the system at the minimum level that the reactor coolant system can attain using the normal reactor coolant system draining connections and procedures results in no incipient vortex formation which would cause air entrainment into the pump suction.

z The pump suction line is self-venting with continually upward sloped pipe from the pump suction to the hot leg. This arrangement prevents entrapment of air and minimizes system venting efforts for startup.

z Features are included that permit mid-loop operations to be performed from the main control room.

5.4-35 Revision 1 WLS 1&2 - UFSAR 5.4.7.1.2.2 Shutdown Purification The normal residual heat removal system provides reactor coolant system flow to the chemical and volume control system during refueling operations. The purification flow rate is consistent with the purification flow rate specified in Table 9.3.6-1.

5.4.7.1.2.3 In-Containment Refueling Water Storage Tank Cooling The normal residual heat removal system provides cooling for the in-containment refueling water storage tank during operation of the passive residual heat removal heat exchanger or during normal plant operations when required. The system is manually initiated by the operator. The normal residual heat removal system limits the in-containment refueling water storage tank water temperature to less than boiling temperature during extended operation of the passive residual heat removal system and not greater than 120°F during normal operation. The system performs this function based on the following:

z Operation of the system with both subsystems of normal residual heat removal system pumps and heat exchangers available.

z The component cooling water system supply temperature to the normal residual heat removal system heat exchangers is based on an ambient design wet bulb temperature of no greater than 86.1°F (0 percent exceedance). The 86.1°F value is assumed for normal conditions and transients that start at normal conditions.

Since the normal residual heat removal system is not a safety-related system, its operation is not credited in Chapter 15 Accident Analyses.

5.4.7.1.2.4 Low Pressure Reactor Coolant System Makeup and Cooling The normal residual heat removal system provides low pressure makeup from the cask loading pit to the reactor coolant system. The system is manually initiated by the operator following receipt of an automatic depressurization signal. If the system is available, it provides reactor coolant system makeup once the pressure in the reactor coolant system falls below the shutoff head of the normal residual heat removal system pumps. The system provides makeup from the cask loading pit to the reactor coolant system and provides additional margin for core cooling. The normal residual heat removal system is not required to mitigate design basis accidents, and therefore its operation is not considered in Chapter 15 Accident Analyses.

5.4.7.1.2.5 Low Temperature Overpressure Protection The normal residual heat removal system provides a low temperature overpressure protection function for the reactor coolant system during refueling, startup, and shutdown operations. The system is designed to limit the reactor coolant system pressure to the lower of either the limits specified in 10 CFR 50, Appendix G, or 110 percent of the normal residual heat removal system design pressure.

5.4.7.1.2.6 Spent Fuel Pool Cooling The normal residual heat removal system has the capability to supplement or take over the cooling of the spent fuel pool when it is not needed for normal shutdown cooling.

5.4-36 Revision 1 WLS 1&2 - UFSAR 5.4.7.2

System Description

Figure 5.4-6 shows a simplified sketch of the normal residual heat removal system. Figure 5.4-7 shows the piping and instrumentation diagram for the normal residual heat removal system.

Table 5.4-13 gives the important system design parameters.

The inside containment portions of the system from the reactor coolant system up to and including the containment isolation valves outside containment are designed for full reactor coolant system pressure. The portion of the system outside containment, including the pumps, valves and heat exchangers, has a design pressure and temperature such that full reactor coolant system pressure is below the ultimate rupture strength of the piping.

The normal residual heat removal system consists of two mechanical trains of equipment. Each train includes one residual heat removal pump and one residual heat removal heat exchanger. The two trains of equipment share a common suction line from the reactor coolant system and a common discharge header. The normal residual heat removal system includes the piping, valves and instrumentation necessary for system operation.

The normal residual heat removal system suction header is connected to a reactor coolant system hot leg with a single step-nozzle connection. The step-nozzle connection is employed to minimize the likelihood of air ingestion into the residual heat removal pumps during reactor coolant system mid-loop operations. The suction header then splits into lines with two parallel sets of two normally closed, motor-operated isolation valves in series. This arrangement allows for normal residual heat removal system operation following a single failure of an isolation valve to open and also allows for normal residual heat removal system isolation following a single failure of an isolation valve to close.

The lines join into a common suction line inside containment. A single line from the inside-containment refueling water storage tank is connected to the suction header before it leaves containment.

Once outside containment, the suction header contains a single normally closed, motor-operated isolation valve. Downstream of the suction header isolation valve, the header branches into two separate lines, one to each pump. Each branch line has a normally open, manual isolation valve upstream of the residual heat removal pumps. These valves are provided for pump maintenance.

The normal residual heat removal system suction header is continuously sloped from the reactor coolant system hot leg to the pump suction. This eliminates any local high points where air could collect and cause low net positive suction head, pump binding and a loss of residual heat removal capability.

The discharge of each residual heat removal pump is directed to its respective residual heat removal heat exchanger. The outlet of each residual heat removal heat exchanger is routed to the common discharge header, which contains a normally closed, motor-operated isolation valve. For pump protection, a miniflow line with an orifice is included from downstream of the residual heat removal heat exchanger to upstream of the residual heat removal pump suction. This line is sized to provide sufficient pump flow when the pressure in the reactor coolant system is above the residual heat removal pump shutoff head.

Once inside containment, the common discharge header contains a check valve that acts as a containment isolation valve. Downstream of the check valve, the discharge header branches into two lines, one to each passive core cooling system direct vessel injection nozzle. These branch lines each contain a stop check valve and check valve in series that serve as the reactor coolant system pressure boundary. A line to the chemical and volume control system demineralizers branches from one of the direct vessel injection lines. This line is used for shutdown purification of the reactor

5.4-37 Revision 1 WLS 1&2 - UFSAR coolant system. Another line branches from the same direct vessel injection line to the in-containment refueling water storage tank which is used when cooling the tank.

One safety relief valve is located on the normal residual heat removal system suction header inside containment. This valve provides low temperature overpressure protection of the reactor coolant system. Subsection 5.4.9 describes the sizing basis of this valve. Another safety relief valve outside of containment provides protection against excess pressure for the piping and components.

When the normal residual heat removal system is in operation, the water chemistry is the same as that of the reactor coolant. Sampling may be performed using the normal residual heat removal heat exchangers channel head drain connections. Sampling of the reactor coolant system using these connections is available at shutdown. Sampling of the in-containment refueling water storage tank is available during normal plant operation.

5.4.7.2.1 Design Features Addressing Shutdown and Mid-Loop Operations The following is a summary of the specific AP1000 design features that address Generic Letter (GL) 88-17 regarding mid-loop operations. In addition, these features support improved safety during shutdown.

Loop Piping Offset - As shown in Figure 5.3-6, the reactor coolant system hot legs and cold legs are vertically offset. This permits draining of the steam generators for nozzle dam insertion with hot leg level much higher than traditional designs. The reactor coolant system must be drained to a level which is sufficient to provide a vent path from the pressurizer to the steam generators. This is nominally 80 percent level in the hot leg. This loop piping offset also allows a reactor coolant pump to be replaced without removing a full core.

Step-nozzle Connection - The normal residual heat removal system employs a step-nozzle connection to the reactor coolant system hot leg. The step-nozzle connection has two effects on mid-loop operation. One effect is to substantially lower the RCS hot leg level at which a vortex occurs in the residual heat removal pump suction line due to the lower fluid velocity in the hot leg nozzle. This increases the margin from the nominal mid-loop level to the level where air entrainment into the pump suction begins.

Another effect of the step-nozzle is that, if a vortex should occur, the maximum air entrainment into the pump suction has been shown experimentally to be no greater than 5 percent. This level of air ingestion will make air binding of the pump much less likely.

Normal Residual Heat Removal Throttling During Mid-Loop - The normal residual heat removal pumps are designed to minimize susceptibility to cavitation. Normally, the normal residual heat removal system operates without the need for throttling a residual heat removal control valve when the level in the reactor coolant system is reduced to a mid-loop level. If the reactor coolant system is at saturated conditions and mid-loop level, some throttling of a flow control valve is necessary to maintain adequate net positive suction head.

Self-Venting Suction Line - The residual heat removal pump suction line is sloped continuously upward from the pump to the reactor coolant system hot leg with no local high points. This eliminates potential problems with refilling the pump suction line if a residual heat removal pump is stopped when cavitating due to excessive air entrainment. With the self-venting suction line, the line will refill and the pumps can be immediately restarted once an adequate level in the hot leg is re-established.

Wide Range Pressurizer Level - A nonsafety-related independent pressurizer level transmitter, calibrated for low temperature conditions, provides water level indication during startup, shutdown, and refueling operations in the main control room and at the remote shutdown workstation. The

5.4-38 Revision 1 WLS 1&2 - UFSAR upper level tap is connected to an ADS valve inlet header above the top of the pressurizer. The lower level tap is connected to the bottom of the hot leg. This provides level indication for the entire pressurizer and a continuous reading as the level in the pressurizer decreases to mid-loop levels during shutdown operations.

Hot Leg Level Instrumentation - The AP1000 reactor coolant system contains level instrumentation in each hot leg with indication in the main control room. In addition to the wide-range pressurizer level instrumentation (used during cold plant operation) which provides continuous level indication in the main control room from the normal level in the pressurizer, two narrow-range hot leg level instruments are available. Alarms are provided to alert the operator when the reactor coolant system hot leg level is approaching a low level. The isolation valves in the line used to drain the reactor coolant system close on a low reactor coolant system level during shutdown operations. Operations required during mid-loop are performed by the operator in the main control room. The level monitoring and control features significantly improve the reliability of the AP1000 during mid-loop operations.

Reactor Vessel Outlet Temperature - Reactor coolant system hot leg wide range temperature instruments are provided in each hot leg for normal residual heat removal system operation with normal inventory. The normal residual heat removal temperature instruments, upstream of the heat exchangers, indicate reactor coolant system hot leg temperature when in reduced inventory conditions. In addition, at least two incore thermocouple channels are available to measure the core exit temperature during midloop residual heat removal operation. These two thermocouple channels are associated with separate electrical divisions.

ADS Valves - The automatic depressurization system first-, second-, and third-stage valves, connected to the top of the pressurizer, are open whenever the core makeup tanks are blocked during shutdown conditions while the reactor vessel upper internals are in place. This provides a vent path to preclude pressurization of the reactor coolant system during shutdown conditions when decay heat removal is lost. This also allows the in-containment refueling water storage tank to automatically provide injection flow if it is actuated on a loss of decay heat removal.

The capability to restore containment integrity during shutdown conditions is provided. The containment equipment hatches are equipped with guide rails that allow reinstallation of the hatches to re-establish containment integrity. The containment design also includes penetrations for temporary cables and hoses needed for shutdown operations.

Procedures direct the operator in the proper conduct of midloop operation and aid in identifying and correcting abnormal conditions that might occur during shutdown operations.

5.4.7.2.2 Design Features Addressing Intersystem LOCA The AP1000 has addressed the intersystem LOCA section of SECY 90-016 with a number of design features. These design features are:

Codes and Standards/Seismic Protection - The portions of the normal residual heat removal system located outside containment (that serve no active safety functions) are classified as AP1000 Equipment Class C so that the design, manufacture, installation, and inspection of this pressure boundary is in accordance with the following industry codes and standards and regulatory requirements: 10 CFR 50, Appendix B; Regulatory Guide 1.26 Quality Group C; and ASME Boiler and Pressure Vessel Code,Section III, Class 3. The pressure boundary is classified as Seismic Category I.

Increased Design Pressure - The portions of the normal residual heat removal system from the reactor coolant system to the containment isolation valves outside containment are designed to the

5.4-39 Revision 1 WLS 1&2 - UFSAR operating pressure of the reactor coolant system. The portions of the system downstream of the suction line containment isolation valve and upstream of the discharge line containment isolation valve are designed so that its ultimate rupture strength is not less than the operating pressure of the reactor coolant system. Specifically, the piping is designed as schedule 80S, and the flanges, valves, and fittings are specified to be greater than or equal to ANS class 900. The design pressure of the normal residual heat removal system is 900 psi, which is approximately 40 percent of operating reactor coolant system pressure.

Reactor Coolant System Isolation Valve - The AP1000 normal residual heat removal system contains an isolation valve in the pump suction line from the reactor coolant system. This motor-operated containment isolation valve is designed to the reactor coolant system pressure. It provides an additional barrier between the reactor coolant system and lower pressure portions of the normal residual heat removal system.

Normal Residual Heat Removal System Relief Valve - The inside containment AP1000 normal residual heat removal system relief valve is connected to the residual heat removal pump suction line. This valve is designed to provide low-temperature overpressure protection of the reactor coolant system as described in Subsection 5.2.2. It is connected to the high pressure portion of the pump suction line and reduces the risk of overpressurizing the low pressure portions of the system.

Features Preventing Inadvertent Opening of Isolation Valves - The reactor coolant system isolation valves are interlocked to prevent their opening at reactor coolant system pressures above 450 psig. Section 7.6 discusses this interlock. The power to these valves is administratively blocked during normal power operation.

RCS Pressure Indication and High Alarm - The AP1000 Normal residual heat removal system contains an instrumentation channel that indicates pressure in each normal residual heat removal pump suction line. A high pressure alarm is provided in the main control room to alert the operator to a condition of rising RCS pressure that could eventually exceed the design pressure of the normal residual heat removal system.

Closed valves connecting to spent fuel pool - The cross-connecting piping between the normal residual heat removal system and the spent fuel pool cooling system is isolated by normally closed valves.

5.4.7.3 Component Description The descriptions of the normal residual heat removal system components are provided in the following subsections. Table 5.4-14 lists the key equipment parameters for the normal residual heat removal system components.

5.4.7.3.1 Normal Residual Heat Removal Pumps (MP01 A&B)

Two residual heat removal pumps are provided. These pumps are single stage, vertical in-line, bottom suction centrifugal pumps. They are coupled with a motor shaft driven by an ac powered induction motor.

Each pump is sized to provide the flow required by its respective heat exchanger for removal of its design basis heat load. Redundant pumps and heat exchangers provide sufficient cooling to prevent RCS boiling if one subsystem is inoperative. A continuously open miniflow line is also provided to protect the pump from operation at low flow conditions.

5.4-40 Revision 1 WLS 1&2 - UFSAR 5.4.7.3.2 Normal Residual Heat Removal Heat Exchangers (ME01 A&B)

Two residual heat removal heat exchangers are installed to provide redundant residual heat removal capability. These heat exchangers are vertically mounted, shell and U-tube design. Reactor coolant flow circulates through the stainless steel tubes while component cooling water circulates through the carbon steel shell. The tubes are welded to the tubesheet.

5.4.7.3.3 Normal Residual Heat Removal Valves The normal residual heat removal system packed valves designated for radioactive service are provided with stem packing designs that provide enhanced resistance to leakage. Leakage to the atmosphere is essentially zero for these valves.

Manual and motor-operated valves have backseats to facilitate repacking and to limit stem leakage when the valves are open. The basic material of construction for valves is stainless steel.

5.4.7.3.3.1 Reactor Coolant System Inner/Outer Isolation Valves (V001 A&B, V002 A&B)

There are two parallel sets of two valves in series for a total of four valves. These valves are normally closed, motor-operated valves and are located inside the containment. These valves form the reactor coolant pressure boundary. They are opened only for normal cooldown after reactor coolant system depressurization to 450 psig. They are controlled from the main control room and fail in the as-is position. These valves are protected from inadvertently opening when the reactor coolant system pressure is above 450 psig by an interlock. Power to these valves is administratively blocked during normal power operations.

5.4.7.3.3.2 In-Containment Refueling Water Storage Tank Suction Line Isolation Valve (V023)

There is one motor-operated valve located inside containment in the line from the in-containment refueling water storage tank to the pump suction header. This valve is designed for full reactor coolant system pressure. It also acts as a containment isolation valve.

5.4.7.3.3.3 Residual Heat Removal Isolation Valve (V011)

There is one motor-operated valve in the pump discharge header outside of containment. This valve is designed for full reactor coolant system pressure. It also acts as a containment isolation valve.

5.4.7.3.3.4 In-Containment Refueling Water Storage Tank Return Isolation Valve (V024)

There is one normally closed motor-operated valve located inside containment in the discharge line to the in-containment refueling water storage tank. This valve is aligned for full-flow testing of the residual heat removal pumps or for operations involving cooling of the in-containment refueling water storage tank.

5.4.7.3.3.5 Cask Loading Pit Isolation Valve (V055)

There is one normally closed motor-operated valve in the line between the cask loading pit and the residual heat removal pump suction line. This valve can be opened by the operator to provide low pressure injection from the cask loading pit to the reactor coolant system during an accident.

5.4-41 Revision 1 WLS 1&2 - UFSAR 5.4.7.3.3.6 Normal Residual Heat Removal Pump Miniflow Isolation Valves (V057A&B)

There is one normally open air-operated valve in each of the residual heat removal pump miniflow lines. During plant cooldown the operator can close these valves to increase the circulating flow rate of the reactor coolant through the residual heat removal heat exchangers to decrease the reactor coolant system cooldown time. These valves automatically open on low flow in the residual heat removal heat exchanger discharge line.

5.4.7.4 System Operation and Performance Operation of the normal residual heat removal system is described in the following sections. System operations are controlled and monitored from the main control room, including mid-loop operations.

The reactor coolant system is equipped with mid-loop level instrumentation with remote readout in the main control room. This instrumentation is used for monitoring mid-loop operations from the main control room.

5.4.7.4.1 Plant Startup Plant startup includes the operations that bring the reactor plant from a cold shutdown condition to no-load operating temperature and pressure, and subsequently to power operation.

During cold shutdown conditions, both residual heat removal pumps and heat exchangers operate to circulate reactor coolant and remove decay heat. The residual heat removal pumps are switched off when plant startup begins. The normal residual heat removal system remains aligned to the reactor coolant system to maintain a low pressure letdown path to the chemical and volume control system.

This alignment provides reactor coolant system purification flow and low temperature over-pressure protection of the reactor coolant system. As the reactor coolant pumps are started, their thermal input begins heating the reactor coolant inventory. Once the pressurizer steam bubble formation is complete, the normal residual heat removal system suction header isolation valve and the discharge header isolation valve are closed and tested for leakage. The valve arrangement is then set for normal operation, as shown in Figure 5.4-6.

5.4.7.4.2 Plant Cooldown Plant cooldown is the operation that brings the reactor plant from normal operating temperature and pressure to refueling conditions.

The initial phase of plant cooldown consists of reactor coolant cooldown and depressurization. Heat is transferred from the reactor coolant system via the steam generators to the main steam system.

Depressurization is accomplished by spraying reactor coolant into the pressurizer, which cools and condenses the pressurizer steam bubble.

When the reactor coolant temperature and pressure have been reduced to 350°F and 450 psig, respectively (approximately four hours after reactor shutdown), the second phase of plant cooldown is initiated with the normal residual heat removal system being placed in service.

Before starting the residual heat removal pumps, the in-containment refueling water storage tank isolation valve is closed. Then the normal residual heat removal system suction header isolation valve and the discharge header isolation valve are opened. When the pressure in the reactor coolant system has been reduced to below 450 psig, the inner/outer isolation valves are opened.

Once the proper valve alignment has been performed and component cooling water flow has been initiated to both residual heat removal heat exchangers, normal residual heat removal system

5.4-42 Revision 1 WLS 1&2 - UFSAR operation may begin. The pumps are started and the cooldown proceeds. The cooldown rate is controlled by throttling the flow through the heat exchanger based on reactor coolant temperature.

This mode of operation continues for the duration of the cooldown until the reactor coolant system temperature is reduced to 140°F and the system is depressurized. The reactor coolant system may then be opened for either maintenance or refueling. Cooldown continues until the reactor coolant system temperature is lowered to 125°F (about 96 hours0.00111 days <br />0.0267 hours <br />1.587302e-4 weeks <br />3.6528e-5 months <br /> after reactor shutdown).

During the cooldown operations, the reactor coolant system water level is drained to a mid-loop level to facilitate steam generator draining and maintenance activities. For normal refuelings, the level to which the reactor coolant system is drained is that which allows air to be vented into the steam generators from the pressurizer. This level is nominally an 80 percent water level in the hot leg. The design of the AP1000 normal residual heat removal system is such that throttling of the residual heat removal pump flow during mid-loop operations to avoid air-entrainment into the pump suction is not required.

At the appropriate time during the cooldown, the operator lowers the water level in the reactor coolant system by placing the chemical and volume control system letdown control valve into the refueling draindown mode. At this time the makeup pumps are turned off; and the letdown flow control valve controls the drain rate to the liquid waste processing system. The drain rate proceeds initially at the maximum drain rate and is substantially reduced once the level in the reactor coolant system is lowered to the top of the hot leg. The letdown flow control valve as well as the letdown line containment isolation valve receives a signal to automatically close once the appropriate level is attained. Alarms actuate in the main control room if the level continues to drop to alert the operator to manually isolate the letdown line.

5.4.7.4.3 Refueling Both residual heat removal pumps and heat exchangers remain operating during refueling. Water transfers from the in-containment refueling water storage tank to the refueling cavity are performed by the spent fuel pool cooling system (SFS). This function has traditionally been performed by residual heat removal systems. That capability still exists if the need arises. To improve clarity in the refueling cavity and reduce operational radiation exposure, the spent fuel pool cooling system is used to flood the refueling cavity without flooding through the reactor vessel.

As decay heat decreases and as fuel is moved to the spent fuel pool, one residual heat removal pump and heat exchanger may be taken out of service. However, the valves remain aligned should the need arise to start this pump quickly in case of a failure of the operating residual heat removal pump.

5.4.7.4.4 Accident Recovery Operations Upon actuation of automatic depressurization, the normal residual heat removal system can be employed to provide low-pressure reactor coolant system makeup. Provided that radiation levels inside containment are below a high radiation value and after resetting the safeguards actuation signal to the valves as necessary, the operator may open the cask loading pit suction valves and the residual heat removal discharge isolation valve and start the residual heat removal pumps. Water is pumped from the cask loading pit to the direct vessel injection lines. Operation of the normal residual heat removal system will not prevent the passive core cooling system from performing its safety functions.

5.4-43 Revision 1 WLS 1&2 - UFSAR 5.4.7.4.5 Spent Fuel Pool Cooling The normal residual heat removal system has the capability of being connected to supplement or take over the cooling function of the spent fuel pool cooling system. The normally closed valves in the cross-connecting piping are opened. One normal residual heat removal pump is started. Spent fuel pool water is drawn through the pump, passed through a heat exchanger and returned to the pool.

This mode of cooling is available when the normal residual heat removal system is not needed for normal shutdown cooling. The spent fuel pool water flow path between the spent fuel pool and the normal residual heat removal system is independent of the flow path used for spent fuel pool cooling by the spent fuel pool cooling system.

5.4.7.4.6 Fire Leading to MODE 5, Cold Shutdown In the event of loss of normal component cooling system function where it is desired to transfer to MODE 5, Cold Shutdown, to facilitate maintenance, the fire protection system can provide the source of cooling water for a normal residual heat removal system pump and heat exchanger as described in Subsection 9.2.2.4.5.5.

5.4.7.5 Design Evaluation Since the normal residual heat removal system is connected to the reactor coolant system, portions of the system that create the reactor coolant system pressure boundary are designed according to ANSI/ANS 51.1 (Reference 6) with regards to maintaining the reactor coolant system pressure boundary integrity.

Since the normal residual heat removal system penetrates the containment boundary, the containment penetration lines are designed according to the containment isolation criteria identified in Subsection 6.2.3.

Safety-related makeup water can be provided through the normal residual heat removal system for long-term post-accident containment makeup. This makeup is provided through the manual containment isolation test connection valve in the discharge of the normal residual heat removal system.

The normal residual heat removal system components and piping are compatible with the radioactive fluids they contain.

The design of the normal residual heat removal system has been compared with the acceptance criteria set forth in Subsection 5.4.7, Residual Heat Removal System, Revision 3, of the NRCs Standard Review Plan. The specific General Design Criteria identified in the Standard Review Plan section are General Design Criteria 2, 4, 5, 19, and 34. Additionally, positions of Regulatory Guides 1.1, 1.29, and 1.68 were also reviewed to determine the degree of compliance between the AP1000 and the acceptance criteria. Branch Technical Position RSB 5-1 was also reviewed as appropriate.

Discussions of the conformance with Regulatory Guides and Branch Technical Positions are found in Section 1.9. Compliance with General Design Criteria is found Section 3.1.

5.4-44 Revision 1 WLS 1&2 - UFSAR 5.4.7.6 Inspection and Testing Requirements 5.4.7.6.1 Preoperational Inspection and Testing Preoperational tests are conducted to verify proper operation of the normal residual heat removal system (RNS). The preoperational tests include valve inspection and testing, flow testing, and verification of heat removal capability.

5.4.7.6.1.1 Valve Inspection and Testing The inspection requirements of the normal residual heat removal system valves that constitute the reactor coolant pressure boundary are consistent with those identified in Subsection 5.2.4. The inspection requirements of the normal residual heat removal system valves that isolate the lines penetrating containment are consistent with those identified in Section 6.6.

The low temperature overpressure protection relief valve, RNS-V021, located on the normal residual heat removal system suction relief line, is bench tested with water. Valve set pressure is verified to be less than or equal to the value assumed in the low temperature overpressure protection analysis.

Relieving capacity of the valve is certified in accordance with the ASME code,Section III, NC-7000.

5.4.7.6.1.2 Flow Testing Each installed normal residual heat removal system pump is tested to measure the flow through the normal residual heat removal system heat exchangers when aligned to cool the reactor coolant system. Testing will be performed with the pump suction aligned to the reactor coolant system hot leg and the discharge aligned to the passive core cooling system direct vessel injection lines. Flow will be measured using instrumentation in the pump discharge line. Testing will confirm that each pump provides at least the required flow rate shown in Table 5.4-14. This is the minimum flow rate required to ensure that the normal residual heat removal system can meet its functional requirement of cooling the reactor during shutdown operations.

Each installed normal residual heat removal system pump is also tested to measure the flow when aligned to deliver low pressure makeup to the reactor coolant system. Testing will be performed with the pump suction aligned to the cask loading pit and the discharge aligned to the passive core cooling system direct vessel injection lines. Flow will be measured using instrumentation in the pump discharge line. The reactor coolant system will be at atmospheric pressure for this test. Testing will confirm that each pump provides at least the required flow rate shown in Table 5.4-14. This is the minimum flow rate required to ensure that the normal residual heat removal system can meet its functional requirement to prevent 4th stage ADS actuation for small breaks.

5.4.7.6.1.3 Heat Removal Capability Analysis Heat exchanger manufacturers test results and heat exchanger data will be used to perform an analysis to verify that the heat removal capability of each normal residual heat removal system heat exchanger, as measured by the product of the heat transfer coefficient and the effective heat transfer area, UA, is equal to or greater than the required value shown in Table 5.4-14. This is the minimum value required to ensure that the normal residual heat removal system can meet its functional requirement of cooling the reactor during shutdown operations.

5.4.7.7 Instrumentation Requirements The normal residual heat removal system contains instrumentation to monitor system performance.

System parameters necessary for system operation are monitored in the main control room including the following:

5.4-45 Revision 1 WLS 1&2 - UFSAR z

Residual heat removal flow; z

Residual heat removal heat exchanger inlet and system outlet temperatures; and, z

Residual heat removal pump discharge pressure.

In addition, the reactor coolant system contains instrumentation to control and monitor the operations of the normal residual heat removal system. These include the following:

z Reactor coolant system wide range pressure; and, z

Reactor coolant system hot leg level.

Instrumentation is also provided to enable mid-loop operations to be performed from the main control room.

The motor-operated valves connected to the reactor coolant system hot leg are interlocked to prevent them from opening when reactor coolant system pressure exceeds 450 psig. These valves are also interlocked to prevent their being opened unless the isolation valve from the in-containment refueling water storage tank to the residual heat removal pump suction header is closed. Section 7.6 describes this interlock.

5.4.8 Valves Valves in the reactor coolant system and safety-related valves in connecting systems provide the primary means for the flow of water into and out of the reactor coolant system. In the following paragraphs the design basis, description, evaluation and testing of ASME Code Class 1, 2 and 3 valves is discussed. This discussion includes safety-related valves not in the reactor coolant system because the valve requirements are independent of the system.

5.4.8.1 Design Bases Valves within the reactor coolant system and safety-related valves in connected systems are designed, manufactured, and tested to meet the requirements of the ASME Code,Section III. As noted in Section 5.2, valves out to and including the second valve that is normally closed or capable of automatic or remote closure are part of the reactor coolant system. The reactor coolant pressure boundary valves are manufactured to the ASME Code Class 1 requirements. Valves of 1 inch and smaller in lines connected to the reactor coolant system are manufactured to Class 2 requirements when the flow is limited by a flow-limiting orifice.

Containment isolation valves are manufactured to ASME Code, Class 2 requirements. Other AP1000 equipment Class C safety-related valves are manufactured to ASME Code, Class 3 requirements.

Safety-related valves in auxiliary systems are manufactured to ASME Code Class 2 and 3 requirements depending on their function and classification as outlined in Subsection 3.2.2.

Table 5.4-15 provides design data for the reactor coolant pressure boundary valves. Valves and operators are sized to provide valve operation under the full range of design basis flow and pressure drop conditions, including recovery from potential mispositioning of the valves. Operating modes, normal operating and worst-case differential pressures, fluid temperature ranges, and environmental effects are considered in sizing valves and valve operators. Table 5.4-16 gives the normal and maximum differential pressure expected during opening and closing of motor-operated valves in the reactor coolant pressure boundary. Check valves considered part of the reactor coolant system are located inside the containment.

• NRC Staff approval is required prior to implementing a change in this information.

5.4-46 Revision 1 WLS 1&2 - UFSAR 5.4.8.1.1 Check Valves Design and Qualification Design basis and required operating conditions for safety-related check valves are established based on design conditions including the required system operating cycles to be experienced by the valve, environmental conditions under which the valve is required to function, and severe transient loadings expected during the life of the valve. The design conditions considered may include water hammer and pipe break transients, sealing and leakage requirements, operating fluid conditions (including flow, velocity, temperature, and temperature gradient), maintenance requirements, time between major refurbishments, corrosion requirements, vibratory loading, planned testing methods, and test frequency, and periods of idle operation. Design conditions may include other requirements identified during plant detail design. The maximum loading resulting from the design conditions and transients are evaluated in accordance with the ASME Code,Section III Class 1 design requirements.

Active safety-related check valves include the capability to verify the movement of each check valves obturator during inservice testing by observing a direct instrumentation indication of the valve position or by using non-intrusive test methods. This instrumentation provides nonintrusive check valve indication and may be either permanently or temporarily installed.

Check valve model and size selection are based on the systems flow conditions, installed location of the valve with respect to flow disturbance, and orientation of the valve in the piping system. Design features, surface finish, and materials can accommodate provisions for nonintrusive determination of disk position and potential valve degradation over time. Valve internal parts are designed with self-aligning features for the purpose of assured alignment after each valve opening. Qualification testing provides for the adequacy of the safety-related check valves under design conditions. This testing includes test data from the manufacturer, field test data and empirical test data supported by test or test (such as prototype) of similar valves where similarity is justified by technical data. Sampling size for the qualification test is justified by technical data.

For safety-related active check valves with extended structures functional qualification will be performed to demonstrate by test, by analysis or by a combination thereof, the ability to operate at the safety-related design conditions. This functional qualification will demonstrate the valve operability during and after loads representative of the maximum seismic and vibratory event. Check valve internal parts are analyzed for maximum design basis loading conditions in accordance with the requirements in ASME Code,Section III.

5.4.8.1.2 Motor-Operated Valves Design and Qualification

[Design basis and required operating conditions are established for active safety-related motor-operated valves. Based on the design conditions the motor-operated valves will have a structural analysis performed to demonstrate their components are within the structural limits at the design conditions. The motor-operated valves are designed for a range of conditions up to the design conditions which includes fluid flow, differential pressure (including line break, if necessary), system pressure and temperature, ambient temperature, operating voltage range and stroke time. The sizing of the motor operators on the valves take into account diagnostic equipment accuracies, changes in output capability for increasing differential pressures and flow and ambient temperature and reduction in motor voltage, control switch repeatability, friction variations and other changes in parameters that could result in an increase in operating loads or a decrease in operator output.]*

Valves that are subjected to large temperature changes during operation and can have water or high pressure fluid trapped in the bonnet cavity are evaluated for pressure locking. Provisions are provided, as required to reduce the susceptibility to bonnet overpressurization, pressure locking, and thermal binding.

[The motor-operated valves have a functional qualification performed to demonstrate by test, by analysis or by a combination thereof, the ability to operate over a range up to the design conditions.

• NRC Staff approval is required prior to implementing a change in this information.

5.4-47 Revision 1 WLS 1&2 - UFSAR This functional qualification will demonstrate the motor-operated valve capability during and after loads representative of the maximum seismic or vibratory event (as required to perform their intended function), demonstrate the valve sealing capability, demonstrate capability under cold and hot operating conditions, demonstrate capability under maximum pipe end loads and demonstrate flow interruption and functional capability. The testing includes test data provided by the manufacturer, field test data, empirical data supported by testing or analysis of prototype tests of similar motor-operated valves that support the qualification where similarity must be justified by technical data. The qualification must be used for validating the required thrust and torque as applicable to operate the valve and the output capability of the motor operator.]*

Motor-operated valves are designed to be able to change their position from an improper position (mis-positioned) either prior to or during accidents. The recovery from mis-positioning is considered a nonsafety-related function. The nonsafety-related capability to recover from valve mis-positioning is provided for plant operational availability considerations. Systems with safety-related functions that contain motor-operated valves are designed to tolerate mis-positioning as a single failure or redundant features are provided to preclude mis-positioning. These features include multiple position indicators and alarms, technical specification surveillance, power lock-out, and confirmatory open or close signals.

Since recovery from mis-positioning is a nonsafety-related function, equipment qualification testing and inservice testing is not required for the recovery from mis-position function.

Provisions are made, where possible, for in-situ testing of motor-operated valves at a range of conditions up to the maximum design basis operating conditions in the safety-related design direction (open or close). Where an alternative to in-situ testing is required, the justification of the alternative method to design condition differential testing is documented as part of the valve test program.

5.4.8.1.3 Other Power-Operated Valves Including Explosively Actuated Valves Design and Qualification Design basis and required operating conditions are established for power-operated (POV) and explosively actuated valve assemblies with an active safety-related function. Power-operated valve assemblies include pneumatic-hydraulic-, air piston-, and solenoid-operated assemblies.

Explosively-actuated valves have the valve disk welded to the valve seat and are actuated by an explosive charge fired by an electrical signal.

[The power-operated safety related valves will have a structural analysis performed to demonstrate their components are within the structural limits at the design conditions. Power operated valve assemblies and explosively actuated valves are designed to accept the maximum compression, tension, and torsional loads which the assembly is capable of producing in combination with other loads such as pressure, thermal, or externally applied loads. The maximum loading resulting from the design conditions and transients is evaluated in accordance with the ASME Code,Section III Class 1 design requirements. Packing adjustment limits are identified to reduce the potential for stem binding.

The power-operated valves are designed to operated at design operating conditions which include fluid flow, differential pressure (including pipe break, if necessary), system pressure, fluid temperature, ambient temperature, fluid supply conditions (or electrical power supply), spring force and stroke time requirements. The power operated valves, depending on their design and actuation mode, have the operators sized to account for diagnostic equipment accuracies, changes in output capability for increasing differential pressures and flow, friction variations and changes in other parameters that could result in an increase in operating loads or a decrease in operator output.

The power-operated, safety-related valves have a functional qualification performed to demonstrate by test, by analysis or by a combination thereof, the ability to operate at the design conditions.

• NRC Staff approval is required prior to implementing a change in this information.

5.4-48 Revision 1 WLS 1&2 - UFSAR Qualification testing of each size, type, and model is performed under a range of differential pressures and maximum achievable flow conditions up to the design conditions. This functional qualification will demonstrate the power-operated valves capability during and after loads representative of the maximum seismic or vibratory event (as required to perform their intended function), demonstrate the valve sealing capability, demonstrate capability under cold and hot operating conditions, demonstrate capability under maximum pipe end loads and demonstrate flow interruption and functional capability. The testing includes test data from the manufacturer, field test data, empirical data supported by test, or analysis of prototype tests of similar power-operated valves that support qualification of the power-operated valve. Similarity must be justified by technical data.

Solenoid-operated valves are verified to satisfy the applicable requirements for Class 1E components. Solenoid-operated valves are verified to perform their safety-related design requirements over a range of electrical power supply conditions including minimum and maximum voltage.]*

5.4.8.2 Design Description The materials of construction are selected to minimize the effects of corrosion and erosion and are compatible with the environment. The valves in contact with reactor coolant fluid shall be constructed of stainless steel materials or alloys acceptable for the fluid chemistry.

Safety-related valves do not have full penetration welds within the valve body walls except that explosive actuated valves may be fabricated using full penetration welds of the valve bodies.

Valves and actuators are furnished as a matched system capable of operating over the entire range of design basis conditions. The function of the valve and operator including switch settings for motor-operated valves are qualified by testing, analysis or a combination thereof.

Valves that have stem packing are constructed with packing material compatible with the system fluid and stem material. Where the design permits, valves greater than 2 inch diameter have live load packing to maintain a compressive packing force. Valves supplied with stem packing are supplied with a backseat which may be utilized to minimize stem leakage. The backseat capability does not rely on system pressure to achieve a satisfactory seal. Valve designs such as main steam isolation valves, safety relief valves, packless valves and small solenoid valves by nature of the design of these valves do not have backseat capability. Motor operated valves are not backseated during normal operation. The backseating of the valve must not compromise the structural integrity of the valve and the backseats are capable of retaining the valve stem against full system pressure and maximum thrust produced by the actuator.

Gate valves at the interface with the reactor coolant system and connected safety-related systems are either of the wedge or parallel disc design and have essentially straight through flow. The wedge design is flex-wedge; solid wedge designs are not used. Gate valves have backseats. Gate valves that are susceptible to overpressurization as the result of the heatup of trapped fluid shall be provided with venting capability to alleviate the issue. The valve shall be of outside screw and yoke design.

Gate valves are not used in flow regulation or throttling service.

Globe valves are either T or Y type of either a standard or balanced plug design. Valves that are used for throttling service are designed with a disc or disc/cage assembly that will provide the required flow characteristic. Motor operated and manual valves are of the outside screw and yoke design.

Check valves are typically swing type, but tilt disk, nozzle check, and lift check may be used. Check valves containing radioactive fluid are fabricated of stainless steel. These valves do not have body penetration other than the inlet, outlet and bonnet. The check hinge is serviced through the bonnet.

Operating parts are contained within the body. The disc of swing check valves has limited rotation to provide a change of seating surface and alignment after each valve opening.

5.4-49 Revision 1 WLS 1&2 - UFSAR 5.4.8.3 Design Evaluation ASME Code, Class 1 valves meet the design requirements of ASME Code,Section III, Article NB-3000. ASME Code, Class 2 valves meet the design requirements of ASME Code,Section III, Article NC-3000. ASME Code Class 3 valves meet the design requirements of ASME Code,Section III, Article ND-3000. The AP1000 equipment Classes A, B, and C valves, which are manufactured to ASME Code Classes 1, 2, and 3 respectively, meet established functional requirements. The functional requirements include operability, differential pressure during opening or closure, and seat leakage. The functional requirements are consistent with the guidelines in Regulatory Guide 1.148 and ANSI N278.1-1975 (Reference 7).

The design transients for the valves including the number and the duration of each type of cycle are identified in Subsection 3.9.1.1.

Valves with extended structures have testing or analysis performed to demonstrate that the natural frequency is greater than 33 hz. In addition, a structural analysis is performed to verify the design loading will not effect the intended operation of the valve.

Qualification testing of each power operated valve which includes motor-operated, air operated, hydraulic operated, solenoid operated and explosive actuated valves demonstrates the capability of the operator to operate over the full range of expected plant operating conditions. Qualification testing also demonstrates the closing, opening, and seating capability of the valve against the maximum pressure differential and flow within a specified time over the entire operating range.

Requirements for qualification testing of power-operated active valves are based on QME-1 (Reference 8). The testing programs in Section 3.10 demonstrate the capability of the valves to operate, as required, during anticipated and postulated plant conditions.

Reactor coolant chemistry parameters are compatible with valve construction materials.

5.4.8.4 Tests and Inspections The nondestructive examinations for the reactor coolant pressure boundary valves meet the more stringent requirements of the ASME Code,Section III, or ANSI B16.34 (Reference 9). The nondestructive examination required is evaluated for each type and class of valve. The examinations consist of the following:

z Radiographic Examination - Classes 1 and 2 valve bodies, bonnets, and discs which of cast material are radiographically examined in accordance with the ASME Code,Section III.

The procedure and acceptance standards are according to the requirements for Class 1 in the ASME Code,Section III.

z Ultrasonic Examination - Classes 1 and 2 valve bodies, bonnets, and discs and Classes 1, 2, and 3 valve stems of 1 inch nominal diameter or larger fabricated of wrought or forged material are ultrasonically examined. The procedures and acceptance standards are according to the requirements for Class 1 in the ASME Code,Section III.

z Liquid Penetrant Examination - Bodies, bonnets, discs, and stems, including machined surfaces on these parts, are liquid-penetrant examined in accordance with the ASME Code,Section III. The procedures and acceptance standards are according to the requirements for Class 1 in the ASME Code,Section III.

Hydrostatic pressure boundary test and seat leakage are performed on the reactor coolant pressure boundary valves. The valves are subjected to the following tests as appropriate following manufacture: hydrostatic pressure boundary test, disc hydrostatic test, backseat leakage test,

5.4-50 Revision 1 WLS 1&2 - UFSAR packing leakage test, stem leakage test, and main seat leakage test. Valves used for containment isolation are subjected to a pneumatic seat leakage test. Each diaphragm actuator assembly is subjected to a pneumatic leakage test.

Preoperational testing is performed on the valves to verify operability during design basis operating conditions. The preoperational testing is described in the following sections. The requirements of NRC Generic Letter 89-10 are used as guidelines to develop the preservice test program for valve operability. Except when test alternatives are justified, design conditions are used for the operability testing.

Subsection 5.2.4 discusses inservice inspection for ASME Code Class 1 valves. Section 6.6 discusses inservice inspection for ASME Code Class 2 and 3 components. Valves are accessible for disassembly and internal visual inspection to the extent practical. Subsection 3.9.6 discusses the inservice testing program for active valves.

5.4.8.5 Preoperational Testing Results of preoperational testing will be used to demonstrate that the results of testing under in situ or installed conditions can be used to confirm the capacity of the valve to operate under design conditions as discussed in Section 14.4.

5.4.8.5.1 Check Valves Active check valves are tested in the open and close direction. Testing a check valve confirms the valve operability to move to the position to fulfill the safety-related mission during applicable plant modes. The test shows that the check valve opens in response to flow and closes when the flow is stopped. Operability testing of the valves is described in Subsection 3.9.3.2.2. Full-flow testing during applicable plant modes of check valves or sufficient flow to fully open the check valve to demonstrate valve operability under design conditions is permitted in most cases by the system design. Where this testing cannot be accomplished, an alternate method of demonstrating operability is developed, and justified. A demonstration of reverse-flow isolation of the check valves that is that the check valve closes when the flow is stopped is performed using direct means or diagnostics. The testing includes the effects of rapid pump starts and stops as required by expected system operating conditions.

The valves to be tested, the safety-related functions of the valves, and the type of testing to be done to verify the capability of the valves to perform the safety-related functions are outlined in valve inservice test requirements found in Subsection 3.9.6 and Table 3.9-16. The valves to be tested, safety-related functions, and test requirements for preoperational testing are the same as outlined in inservice test requirements.

During pre-operational testing the following is verified to demonstrate the acceptability of the functional performance.

z The valves are verified to fully open or fully closed under design flow conditions.

z The disc movement from full open to full close is free.

z The valve leakage when fully closed is within established limits, as applicable.

z The disc is stable in the full open position at the system operating flow, conditions.

z The valve disc position can be verified without disassembly of the valve.

• NRC Staff approval is required prior to implementing a change in this information.

5.4-51 Revision 1 WLS 1&2 - UFSAR z

The valve design features, surface finish and materials can accommodate nonintrusive diagnostic testing methods.

z The testing requirements in the inservice test plan can be accommodated in the piping system design.

5.4.8.5.2 Motor-Operated Valves

[Active safety-related motor-operated valves are tested to verify that the valves open and close under static and safety-related design conditions. Where the safety-related design conditions cannot be achieved, the testing is performed at the maximum achievable dynamic conditions. During the testing critical parameters needed to determine the required closing and opening loads are measured.

These parameters include thrust, torque, travel, differential pressure, system pressure, fluid flow, voltage, temperature, operating time and thrust/torque at seating, unwedging and at control switch trip. The data collected during the testing on the parameters is used to determine the required operator loads and output capability for the design operating conditions in conjunction with the diagnostic equipment inaccuracies, load changes for increasing differential pressures and flow and ambient temperature and reduction in motor voltage, control switch repeatability, friction variations and changes in other parameters that could result in an increase in operating loads or decrease in operator output capability. The resulting operating loads including uncertainties are then compared to the structural capabilities of the motor-operated valve.]* Active safety-related motor-operated valves are tested prior to operation for operability as described in Subsection 3.9.3.2.2.

Pre-operational testing and evaluation is used to demonstrate the acceptability of the valves functional performance including the following.

z The valves are verified to open and close as applicable at a range of safety-related conditions up to the design conditions to perform their safety function.

z The control switch settings must be adequate to provide margin for diagnostic accuracy, control switch repeatability, load sensitive behavior and degradation.

z The motor operator capability at degraded voltage must exceed the required operating loads and the loads at the control switch settings including diagnostic equipment inaccuracies, load changes for increasing differential pressures and flow, control switch repeatability, friction variations and other parameters that could result in an increase in operating loads or decrease in operator output capability.

z The maximum operating loads including diagnostic equipment inaccuracies, load changes for increasing differential pressures and flow, control switch repeatability, friction variations and other parameters that could result in an increase in operating loads or decrease in operator output capability are verified not to exceed the allowable structural capability limits of the motor-operated valve components.

z The stroke time measurements during opening and closing must be within the design requirements if stroke time is important to the safety function.

z The remote position indication is verified against the local position indication.

z The valve leakage when fully closed is within established limits, as applicable.

• NRC Staff approval is required prior to implementing a change in this information.

5.4-52 Revision 1 WLS 1&2 - UFSAR 5.4.8.5.3 Power-Operated Valves

[Active safety related power-operated valve assemblies are tested to verify that the valve opens and closes under static and design conditions. Where the design conditions cannot be achieved, the testing is performed at the maximum achievable dynamic conditions. During the testing, critical parameters needed to determine the required closing and opening loads are measured. These parameters include seat load, torque or thrust, travel, spring rate, differential pressure, system pressure, fluid flow, temperature, power supply, operating time and minimum supply pressure. The data collected during the testing on the parameters is used to determine the required operating loads for the design operating conditions in conjunction with the diagnostic equipment inaccuracies and other parameters that could result in an increase in operating loads or decrease in operator output capability. The resulting operating loads including uncertainties are then compared to the structural capabilities of the power-operated valve.]*

During pre-operational testing the following are verified to demonstrate the acceptability of the functional performance.

z The valves are verified to open and close as applicable at a range of conditions up to the design conditions to perform its safety function.

z For air-operated valves and hydraulically-operated valves the operator capability at minimum supply pressure, power supply or loss of motive force exceed the required operating loads including diagnostic equipment inaccuracies and other parameters that could result in an increase in operating loads or decrease in operator output capability.

z For solenoid-operated valves the valve must be capable of opening or closing the valve at the minimum power supply.

z For air-operated valves and hydraulically-operated valves the maximum operating loads including diagnostic equipment inaccuracies and other parameters that could result in an increase in operating loads are verified not to exceed the allowable structural capability limits of the power-operated valve components.

z The stroke time measurements during opening and closing must be within the design requirements for safety-related functions.

z The remote position indication is verified against the local position indication.

z The valve leakage when fully closed is within established limits, as applicable.

5.4.9 Reactor Coolant System Pressure Relief Devices Safety valves connected to the pressurizer provide overpressure protection for the reactor coolant system during power operation. The relief valve on the suction line of the normal residual heat removal system (RNS) provides low temperature overpressure protection consistent with the guidelines of NRC Branch Technical Position RSB 5-2. The following discusses the requirements for the valves. Sizing of the safety valves is discussed in Subsection 5.2.2.

Power-operated relief valves are not provided in the AP1000 reactor coolant system. Non-reclosing pressure relief devices are not used for pressure relief on the AP1000 reactor coolant system.

Section 10.3 discusses safety valves for the main steam system. The automatic depressurization valves which are also connected to the pressurizer and are the interface with the passive core cooling system, are not pressure relief devices. (See Subsection 5.4.6.)

5.4-53 Revision 1 WLS 1&2 - UFSAR 5.4.9.1 Design Bases The combined capacity of the pressurizer safety valves can accommodate the maximum pressurizer surge resulting from complete loss of load. The safety valve on the suction line of the normal residual heat removal system can accommodate the flow from both makeup pumps with no letdown and a water-solid reactor coolant system during low-temperature modes. Table 5.4-17 gives design parameters for the pressurizer safety valves and the residual heat removal system relief valve.

Use of the pressurizer safety valves and the normal residual heat removal relief valve at elevated temperatures in post-accident environments is not anticipated.

5.4.9.2 Design Description The pressurizer safety valves and the normal residual heat removal system relief valve are spring loaded, self-actuated by direct fluid pressure, and have backpressure compensation features. These valves are designed to reclose and prevent further flow of fluid after normal conditions have been restored. The pressurizer safety valves are of the totally enclosed pop type. The normal residual heat removal relief valve is designed for water relief.

The pressurizer safety valves are incorporated in the pressurizer safety and relief valve (PSARV) module, which provides the connection to the pressurizer nozzles. The routing of pipe between the pressurizer and the safety valves does not include a loop seal. Any condensation of steam in the connecting pipe up to the valve rains back to the pressurizer. Condensate does not collect as a slug of water to be discharged during the initial opening of the valve. The discharge of the safety valve is routed through a rupture disk to containment atmosphere. The rupture disk is provided to contain leakage past the valve, is designed for a substantially lower set pressure than the safety valve set pressure, and does not function as a relief device. The reactor coolant system Piping and Instrumentation Drawing (Figure 5.1-5) shows the arrangement of the safety valves.

The relief valve in the normal residual heat removal system is located between the suction line of the pump and the valve that isolates the residual heat removal system from the reactor coolant system.

The discharge from that valve is directed to the containment atmosphere. Subsection 5.4.7 discusses the residual heat removal system. Figure 5.4-6 shows a simplified sketch of the normal residual heat removal system.

In accordance with the requirements of 10 CFR 50.34(f)(2)(xi), positive position indication is provided for the pressurizer safety valves and the normal residual heat removal system relief valve, which provide overpressure protection for the reactor coolant pressure boundary.

Temperatures in the safety valve discharge lines are measured, and an indication and a high temperature alarm are provided in the control room. An increase in a discharge line temperature is an indication of leakage or relief through the associated valve. Leakage past the pressurizer safety valve during normal operation is collected and directed to the reactor coolant drain tank. Section 7.5 discusses the functional requirements for the instrumentation required to monitor the safety valves.

5.4.9.3 Design Evaluation The pressurizer safety valves prevent reactor coolant system pressure from exceeding 110 percent of system design pressure, in compliance with the ASME Code,Section III. The relief valve on the suction line of the normal residual heat removal system protects that system from exceeding 110 percent of the design pressure of the system and from exceeding the pressure-temperature limits determined from ASME Code, Appendix G, analyses.

5.4-54 Revision 1 WLS 1&2 - UFSAR The reactor coolant system pressure transients are described in Subsection 15.2.3 and are the basis for the ASME Code Overpressure Protection Report. In the analysis of overpressure events, the pressurizer safety valves are assumed to actuate at 2500 psia. The safety valve flowrate assumed is based on full flow at 2575 psia, assuming 3 percent accumulation.

In certain design basis events described in Chapter 15, the pressurizer safety valves are predicted to operate with very low flow rates. For these events, the reactor coolant system pressure is slowly increasing as a result of the mismatch between the decay heat removal rate from the passive residual heat removal heat exchanger and the core decay heat. This slow pressurization of the reactor coolant system results in a small amount of steam flow through the safety valves. Under these conditions, the safety valves do not fully open and would not experience significant cycling.

Operation of the safety valves under these conditions could result in small leakage from the valve (much less than the capacity of the normal makeup system), but does not impair the valve overpressure protection capability.

The relief valve on the normal residual heat removal system has an accumulation of 10 percent of the set pressure. The set pressure is the lower of the pressure based on the design pressure of the residual heat removal system and the pressure based on the reactor vessel low temperature pressure limit. The pressure limit determined based on the design pressure includes the effect of the pressure rise across the pump. The set pressure in Table 5.4-17 is based on the reactor vessel low temperature pressure limit. The lowest permissible set pressure is based on the required net positive suction head for the reactor coolant pump.

5.4.9.4 Tests and Inspections The safety and relief valves are the subject of a variety of tests to validate the design and to verify pressure boundary and functional integrity. For valves that are required to function during a Service Level D condition, static deflection tests are performed to demonstrate operability. Section 3.10 describes these tests.

Safety valves similar to those connected to the pressurizer have been tested within the Electric Power Research Institute (EPRI) safety and relief valve test program. Capacity data for the specific AP1000 safety valve size has been correlated with the EPRI test data to demonstrate that the valve is adequate for steam flow and water flow, even though water flow is not anticipated through the pressurizer safety valves. The completion of this program addresses the requirements of 10 CFR 50.34(f)(2)(x) as related to reactor coolant system relief and safety valve testing. The normal residual heat removal system relief valve is designed for water relief and is not a reactor coolant system pressure relief device since it has a set pressure less than reactor coolant system design pressure. Therefore, the valve selected for the normal residual heat removal system relief valve is independent from the Electric Power Research Institute safety and relief valve test program.

Reactor coolant system pressure relief devices are subjected to preservice and inservice hydrostatic tests, seat leakage tests, operational tests, and inspections, as required. The preservice and inservice inspection and testing programs for valves are described in Subsections 3.9.6 and 5.2.4 and Section 6.6. The test program for the safety valves complies with the requirements of ASME Appendix I of the OM Code.

The pressure boundary portion of the valves are required to be inservice inspected according to the rules of Section XI of the ASME Code. There are no full-penetration welds within the valve body walls. Valves are accessible for disassembly and internal visual inspection.

Type testing of the pressurizer safety valves is performed to verify that the pressurizer safety valves operate with low flow at pressures near the valve set pressure. Type tests are performed to correlate the leakage through the safety valves as a function of inlet pressure, at pressures near the valve set

5.4-55 Revision 1 WLS 1&2 - UFSAR pressure. This testing is performed to verify that the safety valves operate in a stable manner at low flow rates. The testing correlates leakage through the valve as a function of inlet pressure and demonstrates that the leakage through the safety valves at set pressure conditions will be greater than or equal to that modeled in the accident analyses. The testing demonstrates that the valves leak at a flow rate of at least 0.35 lbm/sec at a pressure below the valve full-open pressure. The valve full-open pressure is the pressure at which the safety valve opens with significant blowdown flow. The duration of the testing need not duplicate the times indicated in the accident analysis results but should last for a sufficient time to demonstrate stable valve operation. Stable valve performance without excessive valve cycling or chattering for a 15 minute time duration is sufficient. Following this testing, the valve integrity is demonstrated, and the valve leakage is required to be less than the makeup capability of the chemical and volume control system makeup pumps.

5.4.10 Component Supports 5.4.10.1 Design Bases Component supports provide deadweight support for the piping and equipment, allow lateral thermal movement of the loop during plant operation, and restrain the loops and components during accident and seismic conditions. Subsection 3.9.3 discusses the loading combinations and design stress limits. Support design is according to the ASME Code,Section III, Subsection NF.

The design provides for the integrity of the reactor coolant pressure boundary for normal, seismic, and accident conditions. The design also maintains the piping stresses less than ASME Code limits and less than the limits required to support mechanistic pipe break discussed in Subsection 3.6.3.

Section 3.9 presents the results of piping and supports stress evaluations. The loads associated with the dynamic effects of postulated pipe rupture for pipes 6" and larger, which satisfied the requirements for mechanistic pipe break, are not included. See Subsection 3.6.3.

The edition of the ASME code,Section III, subsection NF, which is used as the baseline requirement, address the guidance of Regulatory Guides 1.124 and 1.130. The plant design is in conformance with these requirements of the ASME Code. Conformance with Regulatory Guides 1.124 and 1.130 is discussed in detail in Section 1.9. The embedded portions of the component supports are designed according to AISC N690 and ACI 349, as discussed in Subsection 3.8.3.

5.4.10.2 Design Description The support structures are welded, structural steel sections. Linear structures (tension and compression struts, columns, and beams) are used except for the reactor vessel supports, which are plate-and-shell-type structures. Attachments to the supported equipment are either integral (welded to the component) or non-integral (pinned to, bolted to, or borne against the components). The supports-to-concrete attachments are either brackets welded to heavy embedded plates or anchor bolts or are embedded fabricated assemblies.

The supports permit thermal growth of the supported systems but restrain vertical and lateral movement resulting from seismic and pipe-break loadings. This is accomplished by using pinned ends in the vertical support columns, girders, bumper pedestals, and hydraulic snubbers, and lateral struts.

Because of manufacturing and construction tolerances, ample adjustment for the support structures provides proper erection alignment and fit-up. This is accomplished by shimming or grouting at the supports-to-concrete interface and by shimming at the supports-to-equipment interface.

The supports for the various components are described in the following paragraphs.

5.4-56 Revision 1 WLS 1&2 - UFSAR 5.4.10.2.1 Reactor Pressure Vessel The reactor vessel supports consist of four individual, air-cooled steel box structures located beneath the inlet nozzles (See Figure 3.8.3-4). The boxes are air-cooled to achieve a concrete design temperature of 200°F. To reduce heat transfer from the nozzle to the concrete, cooled air is baffled vertically through the support, and the heated air is vented at the top.

Vertical and horizontal loads are transmitted from the reactor vessel nozzle pad to the box structure through an integral recessed pocket at the top of the box. The nozzle pad bears on permanently lubricated wear plates that allow radial thermal movements of the nozzle with minimal friction resistance to the movement. The vessel support boxes transfer loads from the reactor pressure vessel to vertical and horizontal embedments in the primary shield wall concrete.

5.4.10.2.2 Steam Generator As shown in Figure 3.8.3-5, each steam generator support consists of the following:

Vertical Support The vertical support consists of a single vertical column extending from the steam generator compartment floor to the bottom of each steam generator channel head. The column is constructed of a heavy wide flange section, and is pinned at both ends to permit thermal movement of each steam generator during plant heatup and cooldown. The column is located so that it allows full access to the steam generator for routine maintenance activities. It is located far enough from the reactor coolant pump motors to permit pump maintenance and inservice inspection.

Lower Lateral Support The lower horizontal support is located at the bottom of the channel head. It consists of a tension/

compression strut oriented nearly perpendicular to the hot leg. The strut is pinned at both the wall bracket and the steam generator channel head to permit movement of the steam generator during plant heatup and cooldown.

Upper Lateral Support The upper horizontal support in the direction of the hot leg is located on the upper shell just above the transition cone. It consists of two large hydraulic snubbers oriented parallel with the hot leg centerline. One snubber is mounted on each side of the generator on top of the steam generator compartment wall. The hydraulic snubbers are valved to permit relatively unrestricted steam generator movement during thermal transient conditions, and to lock up and act as a rigid strut under dynamic loads.

The upper steam generator horizontal support in the direction normal to the hot leg is located on the lower shell just below the transition cone. It consists of two rigid struts oriented perpendicular to the hot leg. The two rigid struts are mounted on the steam generator compartment wall at the elevation of the operating deck. The steam generator loads are transferred to the struts and snubbers through trunnions on the generator shell.

5.4.10.2.3 Reactor Coolant Pump The reactor coolant pumps are supported entirely by the steam generators; consequently, there are no reactor coolant pump supports.

5.4-57 Revision 1 WLS 1&2 - UFSAR 5.4.10.2.4 Pressurizer The supports for the pressurizer, as shown in Figure 3.8.3-6, consist of the following:

z Four steel columns attached to the lower head to provide vertical support for the pressurizer.

Struts connected to the lower head and surrounding walls provide lateral support.

z The upper lateral support consists of a box-type ring girder that surrounds the pressurizer.

The support connects to the corners of the pressurizer cubicle walls with eight standard sway struts. The girder rests on and is supported vertically by the pressurizer valve support brackets. The pressurizer upper support also supports the pressurizer safety relief piping and valve module, in addition to providing lateral support to the pressurizer.

5.4.10.2.5 Control Rod Drive Mechanism Supports The support for the control rod drive mechanism is provided by the integrated head package, as described in Subsection 3.9.7.

5.4.10.3 Design Evaluation An evaluation verifies the design adequacy and structural integrity of the reactor coolant loop and the primary equipment supports system. This evaluation compares the analytical results with established criteria for acceptability. Structural analyses demonstrate design adequacy for safety and reliability of the plant in case of a seismic disturbance, and/or loss of coolant accident conditions. Loads that the system is expected to encounter during its lifetime (thermal, weight, and pressure) are applied, and stresses are compared to allowable values. Subsection 3.9.3 discusses the modeling and analysis methods.

5.4.10.4 Tests and Inspections Nondestructive examinations are performed according to the procedures of the ASME Code,Section V, except as modified by the ASME Code,Section III, Subsection NF.

5.4.11 Pressurizer Relief Discharge The AP1000 does not have a pressurizer relief discharge system. The AP1000 has neither power operated pressurizer relief valves nor a pressurizer relief discharge tank. Some of the functions provided by the pressurizer relief discharge system in previous nuclear power plants are provided by portions of other systems in the AP1000.

The safety valves connected to the top of the pressurizer provide for overpressure protection of the reactor coolant system. First-, second-, and third-stage automatic depressurization system valves provide for depressurization of the reactor coolant system and venting of noncondensable gases in the pressurizer following an accident. These functions are discussed in Subsections 5.2.2, 5.4.12, and in Section 6.3. The AP1000 does not have power operated relief valves connected to the pressurizer.

The discharge of the safety valves is directed through a rupture disk to containment atmosphere.

The discharge of the first-, second-, and third-stage automatic depressurization system valves is directed to the in-containment refueling water storage tank. For the automatic depressurization system valves, the following discussion considers only the gas venting function. Only the first stage automatic depressurization valves are used to vent non-condensible gases following an accident.

The sizing considerations and design basis for the in-containment refueling water storage tank for the

5.4-58 Revision 1 WLS 1&2 - UFSAR depressurization function are discussed throughout Section 6.3. The provisions to minimize the differential pressure between the containment atmosphere and the interior of the in-containment refueling water storage tank are also discussed in Subsection 6.3.2.

The safety valve on the normal residual heat removal system, which provides low temperature overpressure protection, discharges into the containment atmosphere. See Subsection 5.4.7 for a discussion of the connections to and location of the safety valve in the normal residual heat removal system.

5.4.11.1 Design Bases The containment has the capability to absorb the pressure increase and heat load resulting from the discharge of the safety valves to containment atmosphere. The in-containment refueling water storage tank has the capability to absorb the pressure increase and heat load from the discharge, including the water seal, steam and gases, from a first-stage automatic depressurization system valve when used to vent noncondensable gases from the pressurizer following an accident. The venting of noncondensable gases from the pressurizer following an accident is not a safety-related function.

5.4.11.2

System Description

Each safety valve discharge is directed to a rupture disk at the end of the discharge piping. A small pipe is connected to the discharge piping to drain away condensed steam leaking past the safety valve. The discharge is directed away from any safety related equipment, structures, or supports that could be damaged to the extent that emergency plant shutdown is prevented by such a discharge.

The discharge from each of two groups of automatic depressurization system valves is connected to a separate sparger below the water level in the in-containment refueling water storage tank. The piping and instrumentation diagram for the connection between the automatic depressurization system valves and the in-containment refueling water storage tank is shown in Figure 6.3-1. The in-containment refueling water storage tank is a stainless steel lined compartment integrated into the containment interior structure. The discharge of water, steam, and gases from the first-stage automatic depressurization system valves when used to vent noncondensable gases does not result in pressure in excess of the in-containment refueling water storage tank design pressure.

Additionally, vents on the top of the tank protect the tank from overpressure, as described in Subsection 6.3.2.

Overflow provisions prevent overfilling of the tank. The overflow is directed into the refueling cavity.

The in-containment refueling water storage tank does not have a cover gas and does not require a connection to the waste gas processing system. The normal residual heat removal system provides nonsafety-related cooling of the in-containment refueling water storage tank.

5.4.11.3 Safety Evaluation The design of the control for the reactor coolant system and the volume of the pressurizer is such that a discharge from the safety valves is not expected. The containment design pressure, which is based on loss of coolant accident considerations, is greatly in excess of the pressure that would result from the discharge of a pressurizer safety valve. The heat load resulting from a discharge of a pressurizer safety valve is considerably less than the capacity of the passive containment cooling system or the fan coolers. See Section 6.2.

Venting of noncondensable gases, including entrained steam and water from the loop seals in the lines to the automatic depressurizations system valves, from the pressurizer into spargers below the water line in the in-containment refueling water storage tank does not result in a significant increase

5.4-59 Revision 1 WLS 1&2 - UFSAR in the pressure or water temperature. The in-containment refueling water storage tank is not susceptible to vacuum conditions resulting from the cooling of hot water in the tank, as described in Subsection 6.3.2. The in-containment refueling water storage tank has capacity in excess of that required for venting of noncondensable gases from the pressurizer following an accident.

5.4.11.4 Instrumentation Requirements The instrumentation for the safety valve discharge pipe, containment, and in-containment refueling water storage tank are discussed in Subsections 5.2.5, 5.4.9, and in Sections 6.2 and 6.3, respectively. Separate instrumentation for the monitoring of the discharge of noncondensable gases is not required.

5.4.11.5 Inspection and Testing Requirements Sections 6.2 and 6.3 discuss the requirements for inspection and testing of the containment and in-containment refueling water storage tank, including operational testing of the spargers. Separate testing is not required for the noncondensable gas venting function.

5.4.12 Reactor Coolant System High Point Vents The requirements for high point vents are provided for the AP1000 by the reactor vessel head vent valves and the automatic depressurization system valves. The primary function of the reactor vessel head vent is for use during plant startup to properly fill the reactor coolant system and vessel head.

Both reactor vessel head vent valves and the automatic depressurization system valves may be activated and controlled from the main control room. The AP1000 does not require use of a reactor vessel head vent to provide safety-related core cooling following a postulated accident.

The reactor vessel head vent valves (Figure 5.4-8) can remove noncondensable gases or steam from the reactor vessel head to mitigate a possible condition of inadequate core cooling or impaired natural circulation through the steam generators resulting from the accumulation of noncondensable gases in the reactor coolant system. The design of the reactor vessel head vent system is in accordance with the requirements of 10 CFR 50.34 (f)(2)(vi).

The reactor vessel head vent valves can be operated from the main control room to provide an emergency letdown path which is used to prevent pressurizer overfill following long-term loss of heat sink events. An orifice is provided downstream of each set of head vent valves to limit the emergency letdown flow rate.

The first stage valves of the automatic depressurization system are attached to the pressurizer and provide the capability of removing noncondensable gases from the pressurizer steam space following an accident. Venting of noncondensable gases from the pressurizer steam space is not required to provide safety-related core cooling following a postulated accident. Gas accumulations are removed by remote manual operation of the first stage automatic depressurization system valves.

The discharge of the automatic depressurization system valves is directed to the in-containment refueling water storage tank. Subsection 5.4.6 and Section 6.3 discuss the automatic depressurization system valves and discharge system.

The passive residual heat removal heat exchanger piping and the core makeup tank inlet piping in the passive core cooling system include high point vents that provide the capability of removing noncondensable gases that could interfere with heat exchanger or core makeup tank operation.

These gases are normally expected to accumulate when the reactor coolant system is refilled and pressurized following refueling shutdown. Any noncondensable gases that collect in these high points can be manually vented.

5.4-60 Revision 1 WLS 1&2 - UFSAR The discharge of the passive residual heat removal heat exchanger high point vent is directed to the in-containment refueling water storage tank. The discharge of the core makeup tank high point vent is directed to the reactor coolant drain tank. Section 6.3 discusses the passive residual heat removal heat exchanger and venting capability, which is part of the passive core cooling system.

5.4.12.1 Design Bases The reactor vessel head vent arrangement is designed to remove noncondensable gases or steam from the reactor coolant system via remote manual operations from the main control room through a pair of valves. The system discharges to the in-containment refueling water storage tank (IRWST).

The reactor vessel head vent system is designed to provide an emergency letdown path that can be used to prevent long-term pressurizer overfill following loss of heat sink events. The reactor vessel head vent is designed to limit the emergency letdown flow rate to within the capabilities of the normal makeup system. The reactor vessel head vent system can also vent noncondensable gases from the reactor head in case of a severe accident.

The system vents the reactor vessel head by using only safety-related equipment. The reactor vessel head vent system satisfies applicable requirements and industry standards, including ASME Code classifications, safety classifications, single-failure criteria, and environmental qualification.

The piping and equipment from the vessel head vent up to and including the second isolation valve are designed and fabricated according to ASME CodesSection III, Class 1 requirements. The remainder of the piping and equipment are design and fabricated in accordance with ASME Code,Section III, Class 3 requirements.

The supports and support structures conform with the applicable requirements of the ASME Code.

The Class 1 piping used for the reactor vessel head vent is 1-inch schedule 160. In accordance with ASME Section III it is analyzed following the procedures of NC-3600 for Class 2 piping.

The piping stresses meet the requirements of ASME Code,Section III, NC-3600, with a design temperature of 650°F and a design pressure of 2485 psig.

The automatic depressurization system functions as a part of the passive core cooling system. The first stage automatic depressurization system valves are connected to the pressurizer. The valves are designed, constructed, and inspected to ASME Code Class 1 and seismic Category I requirements. Subsection 5.4.6 and Section 6.3 discuss the design bases for the automatic depressurization system and automatic depressurization system valves.

The primary function of the passive residual heat removal heat exchanger and core makeup tank high point vents is to prevent accumulation of noncondensable gases from the reactor coolant system that could interfere with operation of the passive core cooling system. Section 6.3 discusses the design bases for the passive residual heat removal heat exchanger, the core makeup tanks, and their vent lines.

5.4.12.2

System Description

The reactor vessel head vent arrangement consists of two flow paths, each with redundant isolation valves. Orifices are located downstream of each set of head vent isolation valves to limit the reactor vessel head vent flow rate. Table 5.4-18 lists the equipment design parameters. The reactor vessel head vent arrangement is shown on the reactor coolant system piping and instrumentation diagram (Figure 5.1-5).

5.4-61 Revision 1 WLS 1&2 - UFSAR The head vent arrangement consists of two parallel paths of two 1-inch, open/close, solenoid-operated isolation valves connected to a 1-inch vent pipe located near the center of the reactor vessel head. The system design with two valves in series in each flow path minimizes the possibility of reactor coolant pressure boundary leakage. The solenoid-operated isolation valves are powered by the safety-related Class 1E DC and UPS system. The solenoid-operated isolation valves are fail-closed, normally closed valves. The valves are included in the valve operability program and are qualified to IEEE-323, IEEE-344, and IEEE-382.

The vent system piping is supported such that the resulting loads and stresses on the piping and on the vent connection to the vessel head are acceptable.

The automatic depressurization system valves are included as part of the pressurizer safety and relief valve module attached to the top of the pressurizer and are connected to the pressurizer nozzles. The automatic depressurization system includes a group of valves attached to the reactor coolant system hot leg that are not used to vent noncondensable gases. The pressurizer safety and relief valve module is supported by an attachment to the top of the pressurizer and provides support for the automatic depressurization system valves. The automatic depressurization system valves are active valves required to provide safe shutdown or to mitigate the consequences of postulated accidents. Subsection 5.4.6 discusses the function control and power requirements for the automatic depressurization system valves.

5.4.12.3 Safety Evaluation The reactor vessel head vent system is designed so that a single failure of the remotely operated vent valves, power supply, or control system does not prevent isolation of the vent path. The two isolation valves in the active flow path provide a redundant method of isolating the venting system.

With two valves in series, the failure of any one valve does not inadvertently open a vent path or prevent isolation of a flow path. The Chapter 15 accident analysis and supporting analyses are performed consistent with the reactor vessel head vent system design parameters provided in Table 5.4-18.

The reactor vessel head vent system has two normally de-energized valves in series in each flow path. This arrangement eliminates the possibility of opening a flow path due to the spurious movement of one valve.

A break of the reactor vessel head vent system line would result in a small loss of coolant accident of not greater than one-inch diameter. Such a break is similar to those analyzed in Subsection 15.6.5.

Since a break in the head vent line would behave similarly to the hot leg break case presented in Subsection 15.6.5, the results presented therein apply to a reactor vessel head vent system line break. This postulated vent line results in no calculated core uncovery.

Subsection 5.4.6 and Section 6.3 discuss the evaluation of the automatic depressurization system valves. Inadvertent opening of an automatic depressurization system valve is included in the transients considered for specification of the inadvertent reactor coolant system depressurization in Subsection 3.9.1.

Section 6.3 discusses the evaluation of the passive residual heat removal heat exchanger and core makeup tanks. These high point vent lines contain two manual isolation valves in series, so that a single failure of either valve to reclose following venting operation does not prevent isolation of the flow path. The high point vent line from the passive residual heat removal heat exchanger to the in-containment refueling water storage tank contains a flow-restricting orifice such that postulated break flow is within the makeup capability of the chemical and volume control system and therefore would not normally require actuation of the passive safety systems.

5.4-62 Revision 1 WLS 1&2 - UFSAR 5.4.12.4 Inspection and Testing Requirements Inservice inspection of ASME Code Classes 2 and 3 components is conducted according to Section 6.6. Subsection 3.9.6 discusses inservice testing and inspection of valves. Subsection 5.2.4 discusses inservice inspection and testing of ASME Code, Class 1 components that are part of the reactor coolant pressure boundary.

The requirements for tests and inspections for reactor coolant system valves is found in Subsection 5.4.8.4. In addition, tests for the reactor vessel head vent valves and piping are conducted during preoperational testing of the reactor coolant system, as discussed in Section 14.2.

5.4.12.4.1 Flow Testing Initial verification of the capacity of the reactor vessel head vent valves is performed during the plant initial test program. A low pressure flow test and associated analysis is conducted to determine the capacity of each reactor vessel head vent flow path. The reactor coolant system is at cold conditions with the pressurizer full of water. The normal residual heat removal pumps are used to provide injection flow into the reactor coolant system, discharging through the reactor vessel head vent valves. The measured flow rate at low pressure is such that the head vent flow capacity is at least 8.2 lbm/sec at an RCS pressure of 1250 psia.

5.4.12.5 Instrumentation Requirements The reactor head vent valves can be operated from the control room or the remote shutdown workstation. The isolation valves in the vent line and automatic depressurization system valves have position sensors. The position indication from each solenoid-operated isolation valve is monitored in the control room.

5.4.13 Core Makeup Tank The core makeup tank (CMT) in the passive core cooling system stores cold borated water under system pressure for high pressure reactor coolant makeup. See Section 6.3 for a discussion of the operation of the core makeup tank in the passive core cooling system and the connections to the core makeup tank.

5.4.13.1 Design Bases The core makeup tank is designed and fabricated according to the ASME Code,Section III as a Class 1 component. See Subsection 5.2.1. The boundaries of the ASME Code include the pressure-containing materials up to, but excluding, the circumferential welds at nozzle safe ends. The manway cover and bolting materials are included within this boundary. The core makeup tank is AP1000 equipment Class A (ANS Safety Class 1, Quality Group A). Stresses are maintained within the limits of the ASME Code,Section III. Section 5.2 provides the ASME Code and material requirements.

Subsection 5.2.4 discusses inservice inspection.

Materials of construction are specified to minimize corrosion/erosion and to provide compatibility with the operating environment, including the expected radiation level. Subsection 5.2.3 discusses the welding, cutting, heat treating and other processes used to minimize sensitization of stainless steel.

Instrumentation nozzles are welded to the clad inside wall of the vessel according to ASME Code,Section III. Butt welds, branch connection nozzle welds, and boss welds are of a full-penetration design. Flanges conform to ANSI B16.5.

5.4-63 Revision 1 WLS 1&2 - UFSAR The transients used to evaluate the core makeup tank are based on the system design transients described in Subsection 3.9.1.1. In addition to normal reactor coolant system transients, two additional Service Level B transients affect only the core makeup tank. There are an assumed 30 occurrences of the first transient, leakage at power, in the plant lifetime. This event covers situations which a small leak draws in hot reactor coolant system fluid. There are an assumed 10 occurrences in the plant lifetime of the second transient, increase in containment temperature above normal operating range.

5.4.13.2 Design Description The core makeup tank is a low-alloy steel vessel with 308L stainless steel internal cladding. The minimum free internal volume for the core makeup tank is 2500 cubic feet. The normal full-power temperature and pressure in the core makeup tank are 70° to 120°F and 2250 psia, respectively. The tank is designed to withstand the design environment of 2500 psia and 650°F. The core makeup tank is a vertically mounted, cylindrical pressure vessel with hemispherical top and bottom heads.

The core makeup tank is supported on columns. One nozzle on the lower head connects the tank to the reactor vessel direct vessel injection (DVI) piping. One nozzle in the center of the upper head connects the tank to a line connected to one of the RCS cold legs. The top nozzle incorporates a diffuser inside the tank. The diffuser has the same diameter and thickness as the connecting piping.

The bottom of the diffuser is plugged and holes are drilled in the side. The diffuser forces the steam flow to turn 90 degrees which limits the steam penetration into the coolant in the core makeup tank.

The core makeup tank includes a manway and cover in the shell to allow access to the tank interior.

To maintain system pressure, the flowpath from the reactor coolant system cold leg to the upper head of the core makeup tank is normally open. The core makeup tank discharge piping flow path from the lower head to the reactor vessel is blocked by two normally closed, fail-open, parallel isolation valves.

See Section 6.3 for a description of the system operation.

The tank includes nozzles and flanges for connection to level detection instrumentation.

Two sample lines, one in the upper head and the other in the lower head, are provided for sampling the solution in the core makeup tank. A fill connection is provided for core makeup tank make up water from the chemical and volume control system.

5.4.13.3 Design Evaluation Subsection 3.9.3 discusses the loading combinations, stress limits, and analytical methods for the structural evaluation of the reactor coolant system core makeup tank for design conditions, normal conditions, anticipated transients, and postulated accident conditions. Subsection 3.9.2 discusses the requirements for dynamic testing and analysis. The reactor coolant system design transients for normal operation, anticipated transients and postulated accident conditions are discussed in Subsection 3.9.1.

Stress intensities resulting from design loads do not exceed the limits specified in ASME Code,Section III. The rules for the evaluation of the faulted conditions are defined in Appendix F of the ASME Code,Section III. Only those stress limits applicable for an elastic system analysis are used for the external load analysis.

5.4.13.4 Material Corrosion/Erosion Evaluation Those portions of the core makeup tank in contact with reactor coolant are fabricated from or clad with stainless steel. The water chemistry of the core makeup tank, comparable to reactor coolant, causes minimal corrosion of the stainless steel. Erosion is not an issue, since there is normally no

5.4-64 Revision 1 WLS 1&2 - UFSAR flow. A periodic analysis of the coolant chemical composition verifies that the reactor coolant quality meets the specifications, as discussed in Subsection 5.2.3.

Contamination of stainless steel and nickel-chromium-iron alloys by copper, low-melting-temperature alloys, mercury, and lead is prohibited. The material selection, water chemistry specification, and residual stress in the piping minimize the potential for stress corrosion cracking, as discussed in Subsection 5.2.3.

5.4.13.5 Test and Inspections Charpy V-notch tests and drop-weight fracture toughness tests are performed as required.

Orientation of test specimens is according to the ASME Code,Section III, except that the material is not considered to be subjected to high irradiation.

Compliance with the sensitization requirement is demonstrated by passing the susceptibility to intergranular attack test of ASTM A-262, Practice E, including the oxalic acid screening test according to Practice A. Inservice inspection requirements for Class 1 are discussed in Subsection 5.2.4.

In addition, materials and welds are inspected according to the requirements of the ASME Code,Section III Class 1.

5.4.14 Passive Residual Heat Removal Heat Exchanger The passive residual heat removal heat exchanger (PRHR HX) is the component of the passive core cooling system that removes core decay heat for any postulated non-loss of coolant accident event where a loss of cooling capability via the steam generators occurs. Section 6.3 discusses the operation of the passive residual heat removal heat exchanger in the passive core cooling system.

5.4.14.1 Design Bases The passive residual heat removal heat exchanger automatically actuates to remove core decay heat for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> as discussed in Section 6.3, assuming the condensate from steam generated in the in-containment refueling water storage tank (IRWST) is returned to the tank. The passive residual heat removal heat exchanger is designed to withstand the design environment of 2500 psia and 650°F.

The passive residual heat removal heat exchanger and the in-containment refueling water storage tank are designed to delay significant steam release to the containment for at least one hour. The passive residual heat removal heat exchanger will remove sufficient decay heat from the reactor coolant system to satisfy the applicable post-accident safety evaluation criteria detailed in Chapter 15 for at least 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. In addition, the passive residual heat removal heat exchanger will cool the reactor coolant system, with reactor coolant pumps operating or in the natural circulation mode, so that the reactor coolant system pressure can be lowered to reduce stress levels in the system if required. See Section 6.3 for a discussion of the capability of the passive core cooling system.

The passive residual heat removal heat exchanger is designed and fabricated according to the ASME Code,Section III, as a Class 1 component. Those portions of the passive residual heat exchanger that support the primary-side pressure boundary and falls under the jurisdiction of ASME Code,Section III, Subsection NF are AP1000 equipment Class A (ANS Safety Class 1, Quality Group A). Stresses for ASME Code,Section III equipment and supports are maintained within the limits of Section III of the Code. Section 5.2 provides ASME Code,Section III and material requirements. Subsection 5.2.4 discusses inservice inspection.

5.4-65 Revision 1 WLS 1&2 - UFSAR Materials of construction are specified to minimize corrosion/erosion and to provide compatibility with the operating environment, including the expected radiation level. Subsection 5.2.3 discusses the welding, cutting, heat treating and other processes used to minimize sensitization of stainless steel.

5.4.14.2 Design Description The passive residual heat removal heat exchanger consists of an upper and lower tubesheet mounted through the wall of the in-containment refueling water storage tank. A series of 0.75-inch outer diameter C-shaped tubes connect the tubesheets shown in Figure 6.3-5. The primary coolant passes through the tubes, which transfer decay heat to the in-containment refueling water storage tank water and generate enough thermal driving head to maintain the flow through the heat exchanger during natural circulation. The design minimizes the diameter of the tubesheets and allows ample flow area between the tubes in the in-containment refueling water storage tank.

The horizontal lengths of the tubes and lateral support spacing in the vertical section allow for the potential temperature difference between the tubes at cold conditions and the tubes at hot conditions.

The tubes are supported in the in-containment refueling water storage tank interior with a frame structure.

The passive residual heat removal heat exchanger is welded to the in-containment refueling water storage tank.

5.4.14.3 Design Evaluation Subsection 3.9.3 discusses the loading combinations, stress limits, and analytical methods for the structural evaluation of the passive residual heat removal heat exchanger for design conditions, normal conditions, anticipated transients, and postulated accident conditions. Operation of passive residual heat removal heat exchanger is evaluated using Service Levels B, C, and D plant conditions.

In addition to loads due to conditions in the reactor coolant system and operation of the passive residual heat removal heat exchanger, the passive residual heat removal heat exchanger is evaluated for hydraulic loads due to discharge of steam from the automatic depressurization system valves into a sparger in the in-containment refueling water storage tank. These loads are evaluated using Service Level B limits and are not combined with any other Service Level C or D conditions.

Seismic, loss of coolant accident, sparger activation and flow-induced vibration loads are derived using dynamic models of the passive residual heat removal heat exchanger. The dynamic analysis considers the hydraulic interaction between the coolant (steam or water) and the system structural elements.

Subsection 3.9.2 discusses the requirements for dynamic testing and analysis. Subsection 3.9.1 discusses the reactor coolant system design transients for normal operation, anticipated transients, and postulated accident conditions. In addition to reactor coolant system design transients, there are two additional Service Level B transients that affect only the passive residual heat removal heat exchanger. In the plant lifetime, there are an assumed 30 occurrences of the first transient, leakage at power. This event covers situations in which a small leak in the manway cover draws in hot reactor coolant system fluid. There are an assumed 10 occurrences in the plant lifetime of the second transient, increase in in-containment refueling water storage tank temperature, due an event which activates passive core cooling.

Stress intensities resulting from design loads do not exceed the limits specified in ASME Code,Section III. The rules evaluating the Service Level D conditions are defined in Appendix F of the ASME Code,Section III. Only those stress limits applicable for an elastic system analysis are used for the external load analysis.

5.4-66 Revision 1 WLS 1&2 - UFSAR During normal plant operation the system is pressurized to the reactor coolant system hot leg pressure at the temperature of the in-containment refueling water storage tank. The pressure transients during normal plant operation are the same as those for the reactor coolant system hot leg.

There is no flow through the passive residual heat removal heat exchanger during normal plant operation. The tubesheet temperatures are calculated to provide sufficient temperature drop between the tubesheet and the attachment to the tank. Section 6.3 describes the passive residual heat removal heat exchanger performance characteristics.

5.4.14.4 Material Corrosion/Erosion Evaluation Those portions of the passive residual heat removal heat exchanger in contact with reactor coolant are fabricated from or clad with corrosion-resistant material. The use of severely sensitized austenitic stainless steel in the pressure boundary of the reactor coolant system is prohibited. A periodic analysis of the coolant chemical composition verifies that the reactor coolant quality meets the specifications discussed in Subsection 5.2.3.

Sulphur, lead, copper, mercury, aluminum, antimony, arsenic, and other low-melting-point elements and their alloys and compounds are restricted in their use as construction materials, erection aids, cleaning agents, and coatings for finished surfaces of the passive residual heat removal heat exchanger that are in contact with reactor coolant system fluid or in-containment refueling water storage tank. Contamination of stainless steel and nickel-chromium-iron alloys by copper, low-melting-temperature alloys, mercury, and lead is prohibited. The material selection, water chemistry specification, and residual stress in the piping minimize the potential for stress corrosion cracking, as discussed in Subsection 5.2.3.

Stainless steel and nickel-chromium-iron alloys used in the passive residual heat removal heat exchanger are procured to ASME specifications.

5.4.14.5 Testing and Inspections The passive residual heat removal heat exchanger is designed and manufactured to permit inservice inspection as specified in the ASME Code,Section XI. Methods and techniques developed for steam generator tube eddy current inspection can be used for the passive residual heat removal heat exchanger tubes.

Access for inspection and maintenance is possible through manways in the top and bottom channel heads without draining the in-containment refueling water storage tank.

The design of the passive residual heat removal heat exchanger incorporates a flexible member at the heat exchanger to in-containment refueling water storage tank interface to minimize the load imposed on the wall of the in-containment refueling water storage tank resulting from thermal expansion on the tubesheet.

Hydrostatic tests are performed in accordance with the requirements of the ASME Code,Section III, using working fluids meeting the appropriate water chemistry specifications.

5.4.15 Combined License Information The Steam Generator Tube Surveillance Program is addressed in Subsection 5.4.2.5.

5.4-67 Revision 1 WLS 1&2 - UFSAR 5.4.16 References 1.

Not used.

2.

Hagg, A. C. and Sankey, G. O., The Containment of Disk Burst Fragments by Cylindrical Shells, ASME Journal of Engineering for Power, April 1974, pp. 114-123.

3.

Not used.

4.

ASTM-E-165-95, Practice for Liquid Penetrant Inspection Method.

5.

ANSI/ANS-5.1-1994, Decay Heat Power in Light Water Reactors.

6.

ANSI/ANS-51.1-1983, Nuclear Safety Criteria for the Design of Stationary Pressurized Water Reactor Plants.

7.

ANSI N278.1-1975, Self-Operated and Power-Operated Safety-Relief Valves Functional Specification Standard.

8.

ASME QME-1-2007 Edition, Qualification of Active Mechanical Equipment Used in Nuclear Power Plants.

9.

ANSI B16.34-1996, Valves - Flanged and Buttwelding End.

10.

Curtiss-Wright Electro-Mechanical Corporation Report AP1000RCP-06-009-P, Revision 2 (Proprietary), and AP1000RCP-06-009-NP, Revision 2 (Non-Proprietary), Structural Analysis Summary for the AP1000 Reactor Coolant Pump High Inertia Flywheel, July 2009.

201.

Nuclear Energy Institute, Steam Generator Program Guidelines, NEI 97-06, Revision 2, May 2005.

5.4-68 Revision 1 WLS 1&2 - UFSAR Note:

1.

An elevated component cooling water supply temperature of up to 110°F may occur for a 6-hour period.

Table 5.4-1 Reactor Coolant Pump Design Parameters Unit design pressure (psia) 2500 Unit design temperature (°F) 650 Estimated Unit overall height (ft) 22 Component cooling water flow (gpm) 650 Maximum continuous component cooling water inlet temperature (°F)(1) 95 Total estimated weight motor and casing, dry (lb) 200,000 Pump Design flow (gpm) 78,750 Developed head (feet) 365 Pump discharge nozzle, inside diameter (inches) 22 Pump suction nozzle, inside diameter (inches) 26 Speed (synchronous)(rpm) 1800 Motor Type Squirrel Cage Induction Voltage (V) 6900 Phase 3

Frequency (Hz) 60 Insulation class Class H or N Current (amp)

Starting Variable Nominal input, cold reactor coolant Variable Motor/pump rotor minimum required moment of inertia Sufficient to provide flow coastdown as given in Figure 15.3.2-1

5.4-69 Revision 1 WLS 1&2 - UFSAR Table 5.4-2 Not Used.

5.4-70 Revision 1 WLS 1&2 - UFSAR Notes:

(a)

RT - radiographic, UT - ultrasonic, PT - dye penetrant, MT - magnetic particle (b)

See Subsection 5.4.1.3.3.

Table 5.4-3 Reactor Coolant Pump Quality Assurance Program RT(a)

UT(a)

PT(a)

MT(a)

Castings - Casing (or pressure boundary)

X X

Flywheel X

X X

Forgings X

X Plate X

Weldments Circumferential X

X X

Instrument connections X

Motor terminals(b)

X X

5.4-71 Revision 1 WLS 1&2 - UFSAR Table 5.4-4 Steam Generator Design Requirements Type Vertical U-tube Feedring-type Design pressure, reactor coolant side (psia) 2500 Design pressure, steam side (psia) 1200 Design pressure, primary to secondary (psi) 1600 Design temperature, reactor coolant side (°F) 650 Design temperature, steam side (°F) 600 S/G Power, MWt/unit 1707.5 Total heat transfer surface area (ft2) 123,538 Steam nozzle outlet pressure, psia 836 Steam flow, lb/hr per S/G 7.49x106 Total steam flow, lb/hr 14.97x106 Maximum moisture carryover (weight percent) maximum 0.25 No load temperature, °F 557 Feedwater temperature, °F 440 Number of tubes per unit 10,025 Tube outer diameter, inch 0.688 Tube wall thickness, inch 0.040 Tube pitch, inches 0.980 (triangular)

5.4-72 Revision 1 WLS 1&2 - UFSAR Notes:

Measured from steam nozzle to the flat, exterior portion of the channel head.

Base metal thickness.

Table 5.4-5 Steam Generator Design Parameters (Nominal Values)

Tube pitch, inches 0.980 (triangular)

Overall length, inches 884.26*

Upper shell I.D., inches 210 Lower shell I.D., inches 165 Tubesheet thickness, inches 31.13**

Primary water volume, ft3 2077 Water volume in tubes, ft3 1489 Water volume in plenums, ft3 588 Secondary water volume, ft3 3646 Secondary steam volume, ft3 5222 Secondary water mass, lbm 175,758 Design fouling factor, hr-°F-ft2/BTU 9.0 x 10-5

5.4-73 Revision 1 WLS 1&2 - UFSAR Notes:

(a)

RT - Radiographic, UT - Ultrasonic, PT - Dye penetrant, MT - Magnetic particle, ET - Eddy current.

(b)

Flat surfaces only Table 5.4-6 Steam Generator Quality Assurance Program RT(a)

UT(a)

PT(a)

MT(a)

ET(a)

Base Metals Tubesheet Forging Yes Yes Channel Head Forging Plate Casting Yes Yes Yes Yes Yes Secondary Shell and Head Forgings Plate Yes Yes Yes Tubes Yes Yes Nozzles (Forgings)

Yes Yes Safe ends Yes Yes Welds Channel head if fabricated Yes Yes Pressure boundary, longitudinal if fabricated Yes Yes Pressure boundary, circumferential Yes Yes Primary nozzles to fabricated head Yes Yes Primary nozzles to forged head Yes Yes Manways to fabricated head or shell Yes Yes Manways to forged head or shell Yes Yes Steam and feedwater nozzles to fabricated shell Yes Yes Steam and feedwater nozzles to forged shell Yes Yes Support brackets Yes Tube to tubesheet Yes Instrument connections (secondary)

Yes Temporary attachments after removal Yes After hydrostatic test (all major pressure boundary welds and complete cast channel head where accessible)

Yes Weld deposit on primary nozzles Yes Yes Safe end to nozzle Yes Yes Cladding Tubesheet Yes(b)

Yes Channel head Yes Yes Cladding (channel head-tubesheet joint cladding restoration)

Yes Yes

5.4-74 Revision 1 WLS 1&2 - UFSAR Table 5.4-7 Reactor Coolant System Piping Design Reactor Coolant Loop Piping Design Pressure (psig) 2485 Design Temperature (°F) 650 Reactor Inlet Piping Inside Diameter (ID) 22 Nominal Wall Thickness 2.56 Reactor Outlet Piping Inside Diameter (ID) 31 Nominal Wall Thickness 3.25 Pressurizer Surge Line Design Pressure (psig) 2485 Design Temperature (°F) 680 Pressurizer Surge Line Piping Nominal Pipe Size 18 Nominal Wall Thickness 1.78 Pressurizer Safety Valve and ADS Valve Inlet Line Design Pressure (psig) 2485 Design Temperature (°F) 680 Other Rector Coolant Branch Lines Design Pressure (psig) 2485 Design Temperature (°F) 650

5.4-75 Revision 1 WLS 1&2 - UFSAR Notes:

(a)

RT - Radiographic; UT - Ultrasonic; PT - Dye Penetrant (b)

No RT is required for branch nozzle connections of 4 inch nominal size smaller.

Table 5.4-8 Reactor Coolant System Piping Quality Assurance Program RT(a)

UT(a)

PT(a)

Pipe (Forged Seamless)

Yes Yes Fittings Yes Yes Weldments Circumferential Butt Welds Yes Yes Branch Nozzle Connections Yes(b)

Yes Fillet Weld Instrument Connections Yes

5.4-76 Revision 1 WLS 1&2 - UFSAR Table 5.4-9 Pressurizer Design Data Design pressure (psig) 2485 Design temperature (°F) 680 Surge line nozzle nominal diameter (in.)

18 Spray line nozzle nominal diameter (in.)

4 Safety valve nozzle nominal diameter (in.)

14 Internal volume (ft3) 2100

5.4-77 Revision 1 WLS 1&2 - UFSAR Table 5.4-10 Pressurizer Heater Group Parameters Voltage (Vac) 480 Frequency (Hz.)

60 Power Capacity (kW)

Control Group 370 Backup Group A 245 Backup Group B 245 Backup Group C 370 Backup Group D 370

5.4-78 Revision 1 WLS 1&2 - UFSAR Table 5.4-11 Reactor Coolant System Design Pressure Settings Base Load Mode (Psig)

Hydrostatic test pressure 3106 Design pressure 2485 Safety valves (begin to open) 2485 High pressure reactor trip 2385 High pressure alarm 2310 Pressurizer spray valves (full open) 2310 Pressurizer spray valves (begin to open) 2260 Proportional heaters (begin to operate) 2250 Operating pressure 2235 Proportional heater (full operation) 2220 Backup heaters on 2210 Low pressure alarm 2210 Low pressure safeguards actuation 1795

5.4-79 Revision 1 WLS 1&2 - UFSAR Notes:

(a)

RT - Radiographic, UT - Ultrasonic, PT - Dye Penetrant, MT - Magnetic Particle.

(b)

Eddy current testing can be used in lieu of UT.

(c)

MT or PT.

Table 5.4-12 Pressurizer Quality Assurance Program RT(a)

UT(a)

PT(a)

MT(a)

Heads Forged head Yes Cladding Yes Yes Shell Forgings Yes Yes Cladding Yes Yes Heaters Tubing Yes(b)

Yes Centering of element Yes Nozzle (Forgings)

Yes Yes(c)

Yes(c)

Weldments Shell, circumferential Yes Yes Nozzle to head (if fabricated)

Yes Yes Cladding Yes Yes Nozzle safe end Yes Yes Instrument nozzle Yes Temporary attachments (after removal)

Yes Boundary welds (after shop hydrostatic tests)

Yes Support brackets Yes

5.4-80 Revision 1 WLS 1&2 - UFSAR Note:

(a)

The maximum CCS temperature during cooldown is 110°F.

Table 5.4-13 Design Bases for Normal Residual Heat Removal System Operation RNS initiation, hours after reactor shutdown 4

RCS initial pressure (psig) 450 RCS initial temperature (°F) 350 CCS Design Temperature (°F)(a) 95 Cooldown time, (hours after shutdown) 96 RCS temperature at end of cooldown (°F) 125

5.4-81 Revision 1 WLS 1&2 - UFSAR Note:

(1)

Design heat removal capacity is based on decay heat at 96 hours0.00111 days <br />0.0267 hours <br />1.587302e-4 weeks <br />3.6528e-5 months <br /> after reactor shutdown.

Table 5.4-14 Normal Residual Heat Removal System Component Data Normal RHR Pumps (per pump)

Minimum Flow Required for Shutdown Cooling (gpm) 1400 Minimum Flow Required for Low Pressure Makeup (gpm) 1100 Design Flow (gpm) 1500 Design Head (ft) 360 Normal RHR Heat Exchangers Minimum UA Required for Shutdown Cooling (BTU/hr-°F) 2.2 x 106 Design Heat Removal Capacity (BTU/hr)(1) 23 x 106 Tube Side Shell Side Design Flow (lb/hr) 750,000 1,405,000 Inlet Temperature (°F) 125 87.5 Outlet Temperature (°F) 94 104 Fluid Reactor Coolant CCS

5.4-82 Revision 1 WLS 1&2 - UFSAR Table 5.4-15 Reactor Coolant System Valve Design Parameters Design pressure (psig) 2485 Preoperational plant hydrotest (psig) 3106 Design temperature (°F)

Reactor coolant system 650 Pressurizer safety valves and ADS valves 680

5.4-83 Revision 1 WLS 1&2 - UFSAR Notes:

(a)

Normal expected operating pressures.

(b)

Valves are prevented from closing until ADS signal is reset.

(c)

First stage ADS valve can be manually actuated for controlled depressurizations or gas venting.

(d)

Valves are administratively blocked from opening at the motor control center.

(e)

Fourth stage ADS block valves are normally open.

Table 5.4-16 Reactor Coolant System Motor-operated Valves Design Opening and Closing Pressures Normal P (PSIG)(a)

Design P (PSIG)

OPEN CLOSE OPEN CLOSE First Stage ADS Valves (RCS-PL-V001A & B) 2235 2235(b,c) 2485 2485 First Stage ADS Isolation Valves (RCS-PL-V011A & B) 2235 2235 2485 2485 Second Stage ADS Valves (RCS-PL-V002A & B) 1200 100(b) 2485 1200 Second Stage ADS Isolation Valves (RCS-PL-V012A & B) 1200 100 2485 1200 Third Stage ADS Valves (RCS-PL-V003A & B) 500 100 2485 1200 Third Stage ADS Isolation Valves (RCS-PL-V013A & B) 500 100 2485 1200 Fourth Stage ADS Isolation Valves (RCS-PL-V014A & B)

N/A(e) 0 200(e) 200 CVS Purification Isolation Valves (CVS-PL-V001,-V002,-003) 2235 2235 2485 2485 Normal RHR Inner/Outer Isolation Valves (RNS-PL-V001A,B -V002A,B)(d) 450 450 600 600

5.4-84 Revision 1 WLS 1&2 - UFSAR Note:

See text (Subsection 5.4.9.3) for discussion of set pressure Table 5.4-17 Pressurizer Safety Valves - Design Parameters Number 2

Minimum required relieving capacity per valve (lb/hr) 750,000 at 3% accumulation Set pressure (psig) 2485 +/-25 psi Design temperature (°F) 680 Fluid Saturated steam Backpressure Normal (psig) 3 to 5 Expected maximum during discharge (psig) 500 Environmental conditions Ambient temperature (°F) 50 to 120 Relative humidity (percent) 0 to 100 Residual Heat Removal Relief Valve - Design Parameters Number 1

Nominal relieving capacity per valve, ASME flowrate (gpm) 850 Nominal set pressure (psig) 500*

Full-open pressure, with accumulation (psig) 550*

Design temperature (°F) 400 Fluid Reactor coolant Backpressure Normal (psig) 3 to 5 Expected maximum during discharge (psig) 21 Environmental conditions Ambient temperature (°F) 50 to 120 Relative humidity (percent) 0 to 100

5.4-85 Revision 1 WLS 1&2 - UFSAR Table 5.4-18 Reactor Vessel Head Vent System Design Parameters System design pressure, psig 2485 System design temperature, °F 650 Number of remotely-operated valves 4

Vent line, nominal diameter, inches 1

Head vent capacity, lbm/sec (assuming a single failure, RCS pressure at 1250 psia) 8.2

5.4-86 Revision 1 WLS 1&2 - UFSAR Figure 5.4-1 Reactor Coolant Pump

5.4-87 Revision 1 WLS 1&2 - UFSAR Figure 5.4-2 Steam Generator

5.4-88 Revision 1 WLS 1&2 - UFSAR Figure 5.4-3 Support Plate Geometry (Trifoil Holes)

5.4-89 Revision 1 WLS 1&2 - UFSAR Figure 5.4-4 Surge Line

5.4-90 Revision 1 WLS 1&2 - UFSAR Figure 5.4-5 Pressurizer

5.4-91 Revision 1 WLS 1&2 - UFSAR Figure 5.4-6 Normal Residual Heat Removal System

WLS 1&2 - UFSAR 5.4-92 Revision 1 Figure 5.4-7 Normal Residual Heat Removal System Piping and Instrument Diagram 5.4-93 Revision 1 WLS 1&2 - UFSAR Figure 5.4-8 Reactor Vessel Head Vent System