ML993220023

Letter Forwarding Rev 1 to NRC-generated Proposed Change to Improved Standard Technical Specification NUREG-1431:NRC Traveler Number TSB-020 Which Was Requested for Review and Approval by Letter from Wd Beckner to Jd Davis Dated May 21, 199

ML993220023
Person / Time
Site:	Nuclear Energy Institute
Issue date:	11/01/1999
From:	Beckner W Technical Specifications Branch
To:	Jennifer Davis Nuclear Energy Institute
References
Download: ML993220023 (37)

Text

November 1, 1999

Mr. James Davis Nuclear Energy Institute 1776 Eye Street, N. W.

Suite 300 Washington, DC 20006-2496

Dear Mr. Davis:

Enclosed is revision 1 to an NRC-generated proposed change to the Improved Standard Technical Specification NUREG-1431: NRC traveler number TSB-020 which was requested for review and approval by letter from W.D. Beckner to J. D. Davis dated May 21, 1999.

The proposed changes made by this revision more clearly document the basis for accepting the inclusion of allowable values rather than trip setpoints as the Limiting Safety System Setting (LSSS) in technical specifications. Insert #3 in the enclosure represents the major addition from the previously proposed revision which is also added to the STS bases for the other plants in addition to the Westinghouse plants bases. We advised attendees at the joint NRC/Technical Specifications Task Force (TSTF) Owners Group meeting held October 13-14, 1999, that we intended to issue this revision. This continues to be a High Priority request.

Please contact me at (301) 415-1161 or e-mail wdb@nrc.qov if you have any questions or need further information on these proposed changes.

Sincerely, Original Signed By W. D. Beckner, Chief Technical Specifications Branch Division of Regulatory Improvement Programs Project No. 689 Office of Nuclear Reactor Regulation

Enclosure:

As stated

cc: N. Clarkson, BWOG H. Pontious, BWROG DISTRIBUTION: - Hard Copy T. Weber, CEOG "\\ FILE CENTER D. Bushbaum, WOG PUBLIC D. Hoffman, EXCEL RTSB Reading File V. Gilbert, NEI

DISTRIBUTION: via E-mail RPZimmerman ECMarinos GMTracy JRutberg SJCollins CSSchulten JESilber MVFederline WDBeckner JACalvo BWSheron JBirmingham DBMatthews JRStrosnider MEMayfield RTSB Staff SFNewberry ?LMauck CERossi WITS 199900021 F. Burrows RLDennig HCGarg DOCUMENT NAME: G:\\RTSB\\SCHULTEN\\tsb-020r.wpd *see previous concurrences OFFICE DRIP/RTSB DRIP/RTSB DRIP/RGEB C:DRIP/RTSB D:DRIP:NRR NAME CSSchulten* RLDennia* JLBirmingham* WDBeckner DBMatthews-4v DATE 10/28 /99 10/28/99.10/28/9911/ 1 /99 10/1201/99 OFFICIAL RECORD COPY

ý'D ý_ RL-4c'e i: F03.

'PA UNITED STATES 0 NUCLEAR REGULATORY COMMISSION "WASHINGTON, D.C. 20555-0001

November 1, 1999

Mr. James Davis Nuclear Energy Institute 1776 Eye Street, N. W.

Suite 300 Washington, DC 20006-2496

Dear Mr. Davis:

Enclosed is revision 1 to an NRC-generated proposed change to the Improved Standard Technical Specification NUREG-1431: NRC traveler number TSB-020 which was requested for review and approval by letter from W.D. Beckner to J. D. Davis dated May 21, 1999.

The proposed changes made by this revision more clearly document the basis for accepting the inclusion of allowable values rather than trip setpoints as the Limiting Safety System Setting (LSSS) in technical specifications. Insert #3 in the enclosure represents the major addition from the previously proposed revision which is also added to the STS bases for the other plants in addition to the Westinghouse plants bases. We advised attendees at the joint NRC/Technical Specifications Task Force (TSTF) Owners Group meeting held October 13-14, 1999, that we intended to issue this revision. This continues to be a High Priority request.

Please contact me at (301) 415-1161 or e-mail wdb.nrc.qov if you have any questions or need further information on these proposed changes.

Sincerely,

W. D. Beckner, Chief Technical Specifications Branch Division of Regulatory Improvement Programs Office of Nuclear Reactor Regulation

Project No. 689

Enclosure:

As stated

cc: N. Clarkson, BWOG H. Pontious, BWROG T. Weber, CEOG D. Bushbaum, WOG D. Hoffman, EXCEL V. Gilbert, NEI Nuclear Energy Institute Project No. 689

cc: Mr. Ralph Beedle Ms. Lynnette Hendricks, Director Senior Vice President Plant Support and Chief Nuclear Officer Nuclear Energy Institute Nuclear Energy Institute Suite 400 Suite 400 1776 1 Street, NW 1776 I Street, NW Washington, DC 20006-3708 Washington, DC 20006-3708

Mr. Alex Marion, Director Mr. Charles B. Brinkman, Director Programs Washington Operations Nuclear Energy Institute ABB-Combustion Engineering, Inc.

Suite 400 12300 Twinbrook Parkway, Suite 330 1776 I Street, NW Rockville, Maryland 20852 Washington, DC 20006-3708

Mr. David Modeen, Director Engineering Nuclear Energy Institute Suite 400 1776 I Street, NW Washington, DC 20006-3708

Mr. Anthony Pietrangelo, Director Licensing Nuclear Energy Institute Suite 400 1776 I Street, NW Washington, DC 20006-3708

Mr. Hank Sepp, Manager Regulatory and Licensing Engineering Westinghouse Electric Corporation P.O. Box 355 Pittsburgh, Pennsylvania 15230

Mr. Jim Davis, Director Operations Nuclear Energy Institute Suite 400 1776 I Street, NW Washington, DC 20006-3708 Technical Specifications Branch proposed TSTF TSB-020, R.1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications

TSTF Change Justification Description Table 3.3.1-1, "Reactor.Trip System Instrumentation" and Table 3.3.2-1, "Engineered Safety Feature Actuation Instrumentation" are modified to replace the requirement for a "TRIP SETPOINT" with a requirement for a "NOMINAL TRIP SETPOINT." The Trip Setpoint column changes include deleting setpoint inequality signs. Additionally, a footnote is added to both the Allowable Value and Trip Setpoint columns of the tables which allows: (1) the actual trip setpoint to be set more conservative than the Nominal Trip Setpoint specified in TS in response to plant conditions, and (2) states an "as-found" trip setpoint is operable when its is outside the calibration tolerance band if the as-found value has not exceeded the associated TS Allowable Value and the channel is re-adjusted to within the established calibration tolerances. The Bases discussion are revised to provide conforming discussion to the LCO changes and to more clearly and accurately discuss the relation between the nominal trip setpoint, the allowable value and the plant approved setpoint methodology. Also, the Allowable Value is clarified to be the Limiting Safety System Setting required by 10 CFR 50.36.

Revision 1 The proposed changes made by this revision more clearly document the basis for accepting the inclusion of allowable values rather than ýrnp setpoints as the Limiting Safety System Setting in technical specifications. Attachment.#3 represents the major addition from the previously proposed revision which is also added to thr; STS bases for the other plants in addition to the Westinghouse plants bases.

Enclosure 1 of 34 pages Technical Specifications Branch proposed TSTF TSB - 020, R.1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications

Reactor Trip System (RTS) Instrumentation, LCO 3.3.1 (NUREG-1431)

(I) Insert I A channel is OPERABLE with a trip setpoint value outside its calibration tolerance band provided the trip setpoint "as-found" value does not exceed its associated Allowable Value and provided the trip setpoint "as-left" value is adjusted to a value within the "as-left" calibration tolerance band of the Nominal Trip Setpoint. A trip setpoint may be set more conservative than the Nominal Trip Setpoint as necessary in response to plant conditions.

Engineered Safety Feature Actuation System (ESFAS) Instrumentation, LCO 3.3.2 (NUREG-1431)

(k) A channel is OPERABLE with a trip setpoint value outside its calibration tolerance band Insert 2

provided the trip setpoint "as-found" value does not exceed its associated Allowable Value and provided the trip setpoint "as-left" value is adjusted to a value within the "as-left" calibration tolerance band of the Nominal Trip Setpoint. A trip setpoint may be set more conservative than the Nominal Trip Setpoint as necessary in response to plant conditions.

B 3.3.1 Reactor Trip System (RTS) Instrumentation BASES (NUREG-1431);

B 3.3.1 Reactor Protection System (RPS) Instrumentation BASES (NUREG-1430);

B 3.3.1.1 Reactor Protection System (RPS) Instrumentation BASES(NUREG-1433, NUREG-1434);

B 3.3.1 Reactor Protective System (RPS) Instrumentation BASES (NUREG-1432)

Technical specifications are required by 10CFR50.36 to contain LSSS defined by the regulation Insert 3 as "... settings for automatic protective devices... so chosen that automatic protective action will correct the abnormal situation before a Safety Limit (SL) is exceeded." The Analytic Limit is the limit of the process variable at which a safety action is initiated, as established by the safety analysis, to ensure that a SL is not exceeded. Any automatic protection action that occurs on reaching the Analytic Limit therefore ensures that the SL is not exceeded. However, in practice, the actual settings for automatic protective devices must be chosen to be more conservative than the Analytic Limit to account for instrument loop uncertainties related to the setting at which the automatic protective action would actually occur.

The Trip Setpoint is a predetermined setting for a protective device chosen to ensure automatic actuation prior to the process variable reaching the Analytic Limit and thus ensuring that the SL would not be exceeded. As such, the Trip Setpoint accounts for uncertainties in setting the device (e.g. calibration), uncertainties in how the device might actually perform (e.g.,

repeatability), changes in the point of action of the device over time (e.g., drift during surveillance intervals), and any other factors which may influence its actual performance (e.g harsh accident environments). In this manner, the Trip Setpoint plays an important role in

Enclosure 2 of 34 pages Technical Specifications Branch proposed TSTF TSB - 020, R.1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications

ensuring that SLs are not exceeded. As such, the Trip Setpoint meets the definition of an LSSS (Ref. 10) and could be used to meet the requirement that they be contained in the technical specifications.

Technical specifications contain values related to the operability of equipment required for safe operation of the facility. Operable is defined in technical specifications as "... being capable of performing its safety function(s)." For automatic protective devices, the required safety function is to ensure that a SL is not exceeded and therefore the LSSS as defined by 10CFR50.36 is the same as the operability limit for these devices. However, use of the Trip Setpoint to define operability in technical specifications and its corresponding designation as the LSSS required by 1 OCFR50.36 would be an overly restrictive requirement if it were applied as an operability limit for the "as found" value of a protective device setting during a surveillance. This would result in technical specification compliance problems, as well as reports and corrective actions required by the rule which are not necessary to ensure safety. For example, an automatic protective device with a setting that has been found to be different from the Trip Setpoint due to some drift of the setting may still be operable since drift is to be expected. This expected drift would have been specifically accounted for in the setpoint methodology for calculating the Trip Setpoint and thus the automatic protective action would still have ensured that the SL would not be exceeded with the "as found" setting of the protective device. Therefore, the device would still be operable since it would have performed its safety function and the only corrective action required would be to reset the device to the Trip Setpoint to account for further drift during the next surveillance interval.

Use of the Trip Setpoint to define "as found" operability and its designation as the LSSS under the expected circumstances described above would result in actions required by both the rule and technical specifications that are clearly not warranted. However, there is also some point beyond which the device would have not been able to perform its function due, for example, to greater than expected drift. This value needs to be specified in the technical specifications in order to define operability of the devices and is designated as the Allowable Value which, as stated above, is the same as the LSSS.

The Allowable Value specified in Table 3.3.1-1 (Table 3.3.1.1-1 for NUREG-1433 and NUREG 1434) serves as the LSSS such that a channel is OPERABLE if the trip setpoint is found not to exceed the Allowable value during the CHANNEL OPERATIONAL TEST (COT) (CHANNEL FUNCTIONAL TEST (CFT) for NUREG-1433 and NUREG-1434}. As such, the Allowable Value differs from the Trip Setpoint by an amount primarily equal to the expected instrument loop uncertainties, such as drift, during the surveillance interval. In this manner, the actual setting of the device will still meet the LSSS definition and ensure that a Safety Limit is not exceeded at any given point of time as long as the device has not drifted beyond that expected during the surveillance interval. If the actual setting of the device is found to have exceeded the Allowable Value the device would be considered inoperable from a technical specification perspective.

This requires corrective action including those actions required by 10CFR50.36 when automatic

2

Enclosure 3 of 34 pages Technical Specifications Branch proposed TSTF TSB - 020, R.1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications

protective devices do not function as required. Note that, although the channel is "OPERABLE" under these circumstances, the trip setpoint should be left adjusted to a value within the established trip setpoint calibration tolerance band, in accordance with uncertainty assumptions stated in the referenced setpoint methodology (as-left criteria), and confirmed to be operating within the statistical allowances of the uncertainty terms assigned.

[Note: Alternatively, a TS format incorporating an Allowable Value only column may be proposed by a licensee. In this case the trip setpoint value of Table 3.3.1-1 is located in the TS Bases or in a licensee-controlled document outside the TS. Changes to the trip setpoint value would be controlled by 10CFR50.59 or administratively as appropriate, and adjusted per the setpoint methodology and applicable surveillance requirements. At their option, the licensee may include the trip setpoint in Table 3.3.1-1 as shown, or as suggested by the licensees' setpoint methodology or license.]

B 3.3.1 Reactor Trip System (RTS) Instrumentation BASES (NUREG-1431)

Insert 4 is determined by either "as-found" calibration data evaluated during the CHANNEL CALIBRATION or by qualitative assessment of field transmitter or sensor as related to the channel behavior observed during performance of the CHANNEL CHECK.

B 3.3.1 Reactor Trip System (RTS) Instrumentation BASES (NUREG-1431) which incorporates all of the known uncertainties applicable to each channel. The magnitudes Insert 5 of these uncertainties are factored into the determination of each trip setpoint and corresponding Allowable value. The trip setpoint entered into the bistable is more conservative than that specified by the Allowable Value (LSSS) to account for measurement errors detectable by the COT. The Allowable Value serves as the Technical Specification operability limit forthe purpose of the COT. One example of such a change in measurement error is drift during the surveillance interval. If the measured setpoint does not exceed the Allowable Value, the bistable is considered OPERABLE.

The trip setpoint is the value at which the bistable is set and is the expected value to be achieved during calibration. The trip setpoint value ensures the LSSS and the safety analysis limits are met for surveillance interval selected when a channel is adjusted based on stated channel uncertainties. Any bistable is considered to be properly adjusted when the "as left" setpoint value is within the band for CHANNEL CALIBRATION uncertainty allowance (i.e.,

• rack calibration + comparator setting uncertainties). The trip setpoint value of Table 3.3.1-1 is therefore considered a "nominal" value (i.e., expressed as a value without inequalities) for the purposes of COT and CHANNEL CALIBRATION.

3

Enclosure 4 of 34 pages Technical Specifications Branch proposed TSTF TSB - 020, R.1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications B 3.3.2, Engineered Safety Feature Actuation System (ESFAS) Instrumentation BASES (NUREG-1431)

The Allowable Value in Insert 6 ESFAS action to prevent exceeding acceptable limits such that the consequences of Design conjunction with the trip setpoint and LCO establishes the threshold for

Basis Accidents (DBAs) will be acceptable.

The Allowable Value is considered a limiting value such that a channel is OPERABLE if the setpoint is found not to exceed the Allowable Value during the CHANNEL OPERATIONAL TEST (COT). Note that, although a channel is "OPERABLE" under these circumstances, the ESFAS setpoint must be left adjusted to within the established calibration tolerance band of the ESFAS setpoint in accordance with the uncertainty assumptions stated in the referenced setpoint methodology, (as-left criteria) and confirmed to be operating within the statistical allowances of the uncertainty terms assigned.

B 3.3.2, Engineered Safety Feature Actuation System (ESFAS) Instrumentation BASES (NUREG-1431) is determined by either "as-found" calibration data evaluated during the CHANNEL Insert 7

CALIBRATION or by qualitative assessment of field transmitter or sensor, as related to the channel behavior observed during performance of the CHANNEL CHECK.

B 3.3.2, Engineered Safety Feature Actuation System (ESFAS) Instrumentation BASES (NUREG-1431)

A detailed description of the methodology used to calculate the Allowable Value and ESFAS Insert 8

setpoints including their explicit uncertainties, is provided in the "RTS/ESFAS Setpoint Methodology Study" (Ref. 6) which incorporates all of the known uncertainties applicable to each channel. The magnitudes of these uncertainties are factored into the determination of each ESFAS setpoint and corresponding Allowable Value. The nominal ESFAS setpoint entered into the bistable is more conservative than that specified by the Allowable Value to account for measurement errors detectable by the COT. The Allowable Value serves as the Technical Specification operability limit for the purpose of the COT. One example of such a change in measurement error is drift during the surveillance interval. If the measured setpoint does not exceed the Allowable Value, the bistable is considered OPERABLE.

The ESFAS setpoints are the values at which the bistables are set and is the expected value to be achieved during calibration. The ESFAS setpoint value ensures the safety analysis limits are met for the surveillance interval selected when a channel is adjusted based on stated channel uncertainties. Any bistable is considered to be properly adjusted when the "as-left" setpoint

4

Enclosure 5 of 34 pages Technical Specifications Branch proposed TSTF TSB - 020, R. 1 Reactor Trip System and Engineered Safety Feature Actuation Instrumentation Westinghouse Standard Technical Specifications

value is within the band for CHANNEL CALIBRATION uncertainty allowance (i.e. calibration tolerance uncertainties). The ESFAS setpoint value of Table 3.3.1-1 is therefore considered a "nominal value (i.e., expressed as a value without inequalities) for the purposes of the COT and CHANNEL CALIBRATION.

5

Enclosure 6 of 34 pages RTS Instrumentation T-368-OZ, zQ -1 3.3.1

Table 3.3.1-1 (page 1 of 8)

C Reactor Trip System ZnstruMenttion

APPLICASLE MCES at OTHER RINCTION SPECIFDll REWIRED C=01TION$ UC?Jil[PMMTUMVEILLARM ALLIWASLE

?ONI0TIONS VALUE T*) STON~~ 2 CUANNELS STI0NS REQUIREMENTS

1. Narut Reactor Trip 1,2 3 St 3.3.1.14 MA

3 (b) 6(b) s(b) NA C 33 3.3.1.14 NA UA 2.Power Range Z Neutron FLux

0. Nigh 1,2 4 3 SR 3.3.1.1 4 SU 3.3.1.2 0 t111.23% V931J IRTP

SR 3.3.1.7 SR 3.3.1.16 SR 3.3.1.11

b. Low S SR 3.3.1.1 S 127.232 4 SR 3.3.1.8 ITP 45)% ATP SR 3.3.1.11 SR 3.3.1.16

3. Power Range Neutron Flux uRate

a. Nis% Positive 1.2 4 I SR 3.3.1. s 16.m8% RTP rate SRt 3.3.1.11 wfth ties constant with constant time C k M seec

b. Nigh Negative 4 £ SR 3.3.1.7 S 16.31% RTP Rate SR 3.3.1.11 with time SR 3.3.1.16 constant Asx AlTP with time Constant

.4. intermediate Range ice), 2(d) 13sec Neutron Flux-2 F,G St 3.3.1.1 S 9313% RTP S4 3.3.1.8 S z253% RTP 2(e) SR 3.3.1.11

S 93132 RTP 1253% RTP

(continued)

(a) Riev'ewr's Note: Unit specific Mptemontatfons mey contain only Atloable Value depending on Setpoint Study methodology us by the unit.

(b) Vith Reactor Trip Breakers (iTIs) closed and Rod Control System capable of rod withdrawal.

(c) Below the P-10 (Power &anoe Neutron flux) interlocks.

(d) Above the P-6 (Intermediete Range Neutron flux) interlocks.

(e) eow the P-6 (Intermediate ange Neutron Flux) interlocks..

C WOG STS 3.3-15 Rev 1, 04/07/95

Enclosure 7 of 34 pages RTS Instrumentation 3.3.1

Reactor Trip System InstrumentatlonTable 3.3.1-1 (pep 2 of 8)

C

APPLICABLE NODES OR OTHER SPECIFIED REQUIRED CMITIONS nwREOIKENT$SURVEILLANCE FUNCTION COMMITONS CHANNEL$ ALLOIAý CHANNELS dOIITIONS REOUIRENINTI VALUEN~~

5. Soure Range 2 (e) 1.j Sa 3.3.1.1 Neutron Flux St 3.3.1.1 SK 3.3.1.11 SM 3.3.1.16 S 11.4 53 ES C (.0 153 3(b) 4 (b). 5 (b) 2 Je1 St 3.3.1.1 SU 3.3.1.1 SL 3.3.1.11 3(f). 4(f), 5(f) St 3.3.1.16 S S 3.3.1.1 N/A IVA SR 3.3.1.11

6. Overtemerature AT 1,2 Refer to Refer to SK 3.3.1.1 Note I Note I St 3.3.1.3 (Page (Page SM 3.3.1.6 3.3-21) 3.3-21)

SR 3.3.1.7 SR 3.3.1.12 SR 3.3.1.16

7. Overpower AT 1.2 1 SR 3.3.1.1 Refer to Refer to SN 3.3.1.7 Note 2 Note 2 SR 3.3.1.12 (Pale 3.3-22)(Page C SR 3.3.1.16 3.3-22)

(continued)

(a) tevieweres Note: Unit specific methodology used by the unit. ibpuVentations wmy contain only Allowable Value depeding on Setpoint Study

(b) With MTis closed and Rod Control Systm capable of rod withdrawl.

Me) Below the P-6 (Intermediate Range Neutron Flux) Interlocks.

(f) 11ith-the RTIs open. In this condition, source ranee Fiunction does not provide reactor trip but does provide (irfput to the Boron Dilution Protection System (LCO 3.3.9), an3 indication.

.11 WOG STS 3.3-16 Rev 1, 04/07/95

________Enclosure 8 of 34 pages.

RTS Instrumentation 3.3.1

Reactor Trip System IrtrtmentationTable 3.3.1-I (pose 3 of 8)

&ii

APPLICABLE NItS OR OTHER SPECIFIE REIREUD rSVIEILLANUCE ALLUIMetzet, )q/?J)

AUNCTrON CONDITIONS CHANNEILS 3fTPOINTCI)ci

S. Pressurizer Pressume

a. Lmo its) n SR 3.3.1.1 i 11 611003

SR 3.3.1.7 SR 3.3.1.10

b. Nigh i R 3.3.1.16 1.2 M42 nS 3.3.1.1 S M%36 Sit 3.3.1.10 St 3.3.1.7 SRt 3.3.1.16

9. Pressurizer Voter its) 3 I SR 3.3.1.1 L~vet -Nigh SA 3.3.1.7 S MAN3.522 SR 3.3.1.10

10. Reactor Coolant Flow - Low

Ir+ a. Single Loop 1Ch) 3 per U SR 3.3.1.1 loop U 3.3.1.7 1 M8.222 ttM SR 3.3.1.10 Sit 3.3.1.16

b. Two Loops ¶(I) 3 per

• SR 3.3.1.1 loop Si 3.3.1.7 1 (5.232 r,

$1 3.3.1.10 St 3.3.1.16

(continued)

( e) oevoewerys Note: Unit specific isPlamsnmttl= way contain only Altowabte Value depeing on Setpofnt Stud* wethodotogy used by the unit.

(C) Above the P-7 (Low Power Reactor Trips Block) interlock.

(h) Above the P-8 (Power Range Neutron Ftrm) interlock.

MI) Above the P-7 (Low Power Reactor Trips Stock) interlock ?? d below the P8 (Power RangeetrM Flux) Interlock.

Pj3 t 0c:*

C WOG STS 3.3-17 Rev I, 04/07/95

Enclosure 9 of 34 pages

-rSB-ozc R.1 RTS Instrumentation 3.3.1

Reactor Trip Systm lInstrumntatimnTable 3.3.14 (page 4 of 8)

C I

APPLICABLI NIES OR OTHER 2 OMWA SPECIFIED CMNELSI SUVEILLANCE ALLOW% TRIP 9ýý>

FUNCTION CONDITIONS CONI(DTIONS ItEUI RENENTS VALUE UTPOINT(O)

OIANNELS IIT1CNS RESJIRENENTS

11. Reactor Coolant PWp (ACP) Braker Position

a. Single Loop 1Ch) I per NA o R 3.3.1.1 MA

b. Two Loops IMPa N SR 331

'(I) NA NA

12. Undervoltage M2 per NI S 3.3.1.9 1 1476M V ( V R~fs SRt 3.3.1.10 Sk 3.3.1.16

13. Underfrequsncy Ift) 132 per N SR 3.3.1.9 R~es bum i 07.13z 1.57532 f SR 3.3.1.10

14. Stem SR 3.3.1.16 Generator (SO) 1,2 [4 per S SR 3.3.1.1 It W0AS 02.331 Voter Level -Low SR 3.3.1.?

LoW SR 3.3.1.10

15. SG Vater $ 3.3.1.16 Leve - Low 1.2 2 per So a C S SR 3.3.1.1 't 00.421 02-33X4 SR 3.3.1.10 SR 3.3.1.?

Coincident vith 1,2 2 per so I fiR 3.3.1.1 SR 3.3.1.16 Stem FIow/

• SR 3.3.1+.? S 942.532 Feedwater Flow SR 3.3.1.10 flow at RTPfull stem Nimetch SR 3.3.1.16 f low at ITP

(cent itusd)

(a) Reviewer#s Note: Unit specif i fiplmentationsw my contain only Allowable Value depending on Setpofnt Study methodology ued by the unit.

Wg) Above the P-7 (Low Power Reactor Trips Block) interlock.

(h) Above the P-8 (Power Range Neutron Flux) interlock.

()Above the P (Low Pow Reactor Trips SLock) interlock and below the P-. (Power Range Neutron Flux) Interlock.

C WOG STS 3.3-18 Rev 1, 04/07/95

Enclosure 10 of 34 pa es RTS Instrumentationl 3.3.1

Reactor Trip System InstrimentationTable 3.3.1-1 (page 5 of 8)

C

APPLICABLE NODES OR OTRER FUCTION SPECIFIED REWIRED C=TINSUUVIROUL3MVEILLANCE ALLM24F CIMITIONS cUAKIELS

VND1TI0NS REGUIREMINTS VALE(.)SITP0ZNRTC Oc Pi

16. Turbine Trip

a. Low Fluid aIl 1CJ) 3 P SNt 3.3.1.10 Pressure Sk 3.3.1.15 pill 9psi

b. Turbine Stop 4 I 1132 op"e P[C13% open Valve Closure P St SRt 3.3.1.11 3.3.1.10

17. Safety 1,2 2 tralns a 3$ 3.3.1.j3::VA UA Injection (SI) irput from Engineered Safety Feature Actuation System CESFAS)

18. Reactor Trip System Interlocks

a. Intermediate Range Neutron 2 R 3.3.1.11 I 16E-113 M 11-103 flux. P.6 SM 3.3.1.13 amp 9 p C b. Low Power I Iper T SN 3.3.1.11 MANA Reactor Trips train St 3.3.1.13 Block, P-7 C. Power Range Neutron Flux, 1 4 I SNS SN 3.3.1.13 RTP 3.3.1.11 S 150.-232 ( 143x3 RTP P-S

d. Power Range I I S4 3.3.1.11 S 0S2.23k (13032 RTP P.9 Neutron flux, SR 3.3.1.13 NtTP

e. Power Range Neutron Mot, 1,2 $ SR 3.3.1.11 t MO.8M2 P-1O SR 3.3.1.13 RITP and pow1032 Nr S 012.233 RTP

f. Turbine Impulse I 2 T SR 3.3.1.13 S V12.23%

Pressure, P-13 $43.3.1.10 turbine U 3.3.1.13 power

(continued)

(a) Reviewer's Note: Unit specific eiplemetntations my contain only Allowable Value depsding an Setpoint methodology used by the unit. Study

e) Below the P-6 (Intermediate Range Neutron flux) Interlocks.

(j) Ao the.. (Power Range Neutron Flux) interlock.

M.~) :vI C.

WOG STS 3.3-19 Rev 1, 04/07/95

Enclosure 11 of 34 pages RTS Instrumentation 3.3.1

Reactor Trip System lmtruentationTable 3.3.1-1 (pege 6 of 8)

C

APPLICABLE NODES

.OR OTHER FLNCTION SPECIFID REWIIRED UVEILLAXCE ALLOLMOLE COOITli0$. CNANNELSCMIIONs REOIREMENTSVALUE(q) SETOINT("S)(

19. eactor TOIP 1,2 2 trains I 11R 3.3.1.4 NA Sreakerse~' 3(b) 4 Cb) Sb) 2 trains C U 3.3.1.4 NA

20. Reactor Trip 'le Ieach U U 3.3.1.4 NlA NA Breaker per ITS Undervottae &W 3(b) 4(b), 5 0b) IIA Shunt Trip C SMt 3.3.1.4MA lediani wV per ITS

21. Automtie Trip 1,2 2 trains S St 3.3.1.5 MA MA Logic 3(b) &b)), 5 0b) ilA 2 trains C SO 3.3.1.5 NA

(a) evietwr's Mote: Unit specific uPtlmnntations my contain only Allowable Value dependin@ on Setpoint Study methodology used by the unit.

(b) With ITST closed and Rod Control System capable of rod withdrawtl.

(k) Incldfn any reactor trip bypass breakers that are racked In end closed for bypassing an iTS.

-A

I I.

I C WOG STS 3.3-20 Rev 1, 04/07/95

Enclosure 12 of 34 pages

o. ~7"8-O O,(R.I ESFAS Instrumentation 3.3.2 K

EngSneered afety Feature Actuation "ystm InstumsntationTable 3.3.2-1 (page 2 of 8)

APPLICABLE NODES t

FUNCTION SPECIFIED REQUIRED CONDITONS ttaUIRMENTShlEILLAICE ALLOWABLE TRIPN~

ObOITIONS CHANNELS VALUE 5t) S!TP0INT~~(1) cosn:mgs RE@UIRENEUTS

1. Safety Injoction (continud)

I. 01igh Stem Flow in Two Stem Lines 1.2,3() 2 per 3.3.2.1 (a) (f) stem SR 3.3.2.5 St 3.3.2.9 3.3.2.10 Coincident with.1,23(d) 1 per a It SR 3.3.2.1 at l fa O 973Pi Stem Line atom 3.3.2.5 Pressure - Low line SR 3.3.2.9

$S 3.3.2.10

2. Containimnt Spray

a. Manual Initiation 1.2,3.4 2 per a SR 3.3.2.8IA train, 2 trains INA

b. Autmatic Actuation Logic 1,2.3.4 2 tralin C SR 3.3.2.2 IA and Actuation sit 3.3.2.4 VA helays 3.3.2.6 4 C. Contairtmnt Pressure Sk SR

( Nigh -3 1.2,3 5 (NHigh igh) I SR 3.3.2.1 S [12.313 [12.052 3.3.2.5 SR 3.3.2.9 St 3.3.2.10 Sfsh-3 (Two Loop SR Plants) 1.2,3 [32 sets 3.3.2.1 S [12.313 [02.05S of [22 SR 3.3.2.5 pig psi@

SR 3.3.1.9 SRt 3.3.2.10

(cont inmed)

(a) Reviewer's Note: Unit specific Implementation may contain only Allowable Value depending en Setpolnt Study.

Cc) Time constants used in the leadflag methodology used by the unit.

controller are t, It 502 soconds and t S [53 soconds.

(d) Above the P-12 (T.,-Low Low) interlock.

(e) Less than or equal to a fraction defined as AP correspondfng to [4(3% full *teo= flow below [M202 load, and AP increasing linearly from [443% full steam flow at 12032 load to [11432 full steam flow at [1003% toad.

(f) Less than or equalt to a function defined and AP corresponding to U11432 full steam flow above 100i load.

Ulad and then a AP increasin linearly as AP corresponding to [t402 full tteam flow between [2 and 9M02 from [IX42 stem flow at 20ol% toad to [11032 full steam fLow at

[10032 toad.

1

WOG STS 3.3-33 Rev 1, 04/07/95

Enclosure 13 of 34 pages ESFAS Instrumentation 7--S -02Z, Q -I 3.3.2

Engineered Safety Feature Actuation System InstrumntationTable 3.3.2-1 (page 3 of 8)

APPLICABLE NMo at OTHER NbMIIJAI FUNCTION SPECIFIED RCEUIRED SURVEILLANCE ALLOWARLE TRIP MWNITIOU CHAUNNELS CONITIONS REQUIREENTS

3. Contalneent Isolation

a. Phase A Isolation

(1) Manual Initiation 1,2.3.4 2 a Sa 3.3.2.8IA

(2) Autoatli 1,2,3,4 2 trafnsC Sa 3.3.2.2 IA MA Actuation St 3.3.2.4 Logic and SR 3.3.2.6 Actuation Relays

(3) safety Injection Refer to Function I (Safety Injection) for alt initiation functions and requirements.

b. Phase I Isolation

(1) Manual 1,2,3,4 2 per I SR 3.3.2.8KA Initiation train, 2 trains (2) Automatic 1.2.3,4 2 trains )

Actuation C SR 3.3.2.2 NA NA Logic and SR 3.3.2.4 Actuation SR 3.3.2.6 Relays

(3) Contaef nt Pressure

Nigh -3 1,2,3 t4] 3.3.2.1 S 912.313 6 [12.053 (Nigh Nigh) U SR 3.3.2.5 SR SR 3.3.2.9 pelf / psi$

SR 3.3.2.10

4. Stem Line Isolation

a. Manual Initiation1,2Mi),3ci) 2 P SR 3.3.2.8 IA NA

b. Autoostfi 2 trains S SR 3.3.2.2 NA Actuation Logic R 3.3.2.4 *A and Actuation SA 3.3.2.6 ReLays

(continued)

(a) Reviewer's Note: Unit specific iptementations my contain only Allowable Value depending on Setpoint Study methodotogy used by the unit.

Mi) W KSNIVs ere closed and (de-activatedM.

-I Wo~s 1' 3.3-34Rev 1, 04/07/95

Enclosure 14 of 34 pages ESFAS Instrumentation "7".5 8 - P.1 3.3.2

Engineered Safety Feature Actuation System InetrumntationTable 3.3.2-1 (page 4 of 83)

APPLICABLE MOES OR OTHER FUnCTIOW SPECIFIED REQUIRED S3VEILLANCE ALL0MW3 TRIP CONDITIONS CHANNELS CONDITIONS REQUIREMENTS VALUE.N) SETPOInTca) (0./

4. Stem Line Isolation (continued)

C. Contairment 1.20C) t42 S ER 3.3.2.1 S E6.612 16.353 Pressure-HNIh 2 P() St 3.3.2.5 psig psal St 3.3.2.9 Sa 3.3.2.10

d. Stem Line Pressure

(1) Low 1,3cb)( 3 per 3.3.2.1 a 16353" ) 6753(0) 3Cb)Cf) Stem SR 3.3.2.5 pat peal line 3.3.2.9 SR 3.3.2.10 SR (2) Negative 3 per Sk 3.3.2.1 Rate - High stem Sa 3.3.2.5 S t121. 6 3ch) gli1a (h) psi/ese peil/se line S SR3.3.2.9

'I.3.3.2.10

e. Nigh Steam Flow in 2 per S SR 3.3.2.1 Me) Mf)

Two Stem Lines 3") stem SU 3.3.2.5 Line SK 3.3.2.9 SR 3.3.2.10 Coincident with 1,2(c), 1 per D SR 3.3.2.1 I 1050.636F 1 155310F T.,-Low Low 3(d)(0).loop SR 3.3.2.5 SR 3.3.2.9 3.3.2.10

(continued)

(a) Reviewer's Note: Unit specific isptmentatfons gay contain only Allowable Value depending en Setpoint Study (b) Above the P-11 (Pressurizer Pressure) interlock. methodology used by the unfit.

(c) Time constants used in the lead/tag controller are t, I 1503 secon and ý S 1g5 secmnds.

Md) Above the P-12 CT.,-Low Low) interlock.

Me) Less than or qcual to a furntlon defined as AV corresponding to W4) full steam flow below [203X load, AP increasing linearly from 1442 full steam flow at 1203 load to 11142% full steam flow at t103% toad, and (f) Less than or equal to a functien defined as AP corresponding to [U031 full team flow between [03% and 1203K ALP orresponLing to [114% full steom flow above 100% Load.

toad and then a AP Increasing linearty froam &01% stem flow Lt 120]% load to 11103% full steam flow at (g) Below the P-11 (Pressurizer Pressure) Interlock. [1003% load.

(h) TinLe constant utilized in the rate/lag controller is S 1503 secnds.

C0) ExCept When all sIVs are closed and Ede-activstedl.

co~

(.

WOG STS 3.3-35 Rev 1, 04/07/95

---...... ----- -..................-.... E -nc losure 15 of 34 pages 7'8-O2-0) R.1 E$FAS Instrumentation 3.3.2

Engineered Safety Feature Actuation sot=m InttrMntatfonTable 3.3.2-1 (page 5 of 8)

APPLICABLE "waES a OTtER FUICTION SPECIFIED REQUIRED C:ONITIONS REQUIREtEN(ITSSUUVEILLANCE coITIONS VALUEA) SETPOIT(l)a(*-)

CHANNELS cONDITIONS REOUIRENEHTS

4. Stem Line Isolation (contirwed)

f. Nigh Stem Flow 1.2,Ci)# 2 per

• SR 3.3.2.1 ft)(f) in Two Stem 3(I) stem 3.3.2.5 Lines line Sit 3.3.2.9 SIR 3.3.2.10 Coincident with 1.2.0I)

Stem Line 3(f) 1per

• Sit 3.3.2.1 i Wsil p67s3iC) Pais ?I polll Pressure - Low stem line SR 3.3.2.5 SK 3.3.2.9 SR 3.3.2.10

I. Nigh Stem Flow 1.2(1). 2 per 3.3.2.1 S r252X of 3(i) stem 3.3.2.5 full stem il-"full stem flow line SA SiR 3.3.2,9 flow at no at no load SiR 3.3.2.10 load stem stem pressure pressure Coincident with Refer to Function I (Safety Injection) for all initiation Safety Injection functions and raqirment.

and J

Coincident with 1,2(f). 9 per

• Sit 3.3.2.1 I [550.6*F t5533*F T.,-Low Low loop SR 3.3.2.5 3 (d)CI) SRt 3.3.2.9 St 3.3.2.i0

h. Nigh High Stem 2 per

• SR Sit 3.3.2.1 S 1303% of Flow 3(1) stem 3.3.2.5 full stem line SA 3.3.2.9 flow at utitstem flow at Sit 3.3.2.10 full load full Load pressurestem stem pressure Coincident with Refer to Function I (Safety Injection) for all initiation Safety Injection funmctions and requirments.

(continued)

(a) RevfeVer's Note: Unit specific iqNluentat1ms my contain only Allowable Value dcepe ins an Setpelnt Study methodology used by the wdt.

(dy Above the P-t2 CT, -Low Low) interlock.

C-) - A n Oll -SIVs are closed and Ide-activatea.

)

.WOG STS 3.3-36 Rev 1, 04/07/95

Enclosure 16 of 34 pages 7 OzO, PJ WSFAS Instrumentation S4Pd" 3.3.2

Engineered safety Feature Actuation System InstrimmntationTable 3.3.2-1 (page 6 of 83)

APPLICABLE NES OR OTHER MOMrH PrL..

IUNCTION SPEC]IIED REQUIRE SURVEILLANCE ALLOVIAULES;ETPDllKr(a)X)-TRIP CONDITIONS CHANNELS CONDITIONS REQUIREMENTS vMlE() SETPOIHTCa)O

S. Turbine Trip ad reed"ater Isolation

a. Automatic 1.2(J) 2 trains 10 St 3.3.2.2 NA IA Actuation Logic U 3.3.2.4 and Actuation R 3.3.2.6 Relays

b. so water 1,20j) 013 per 3 M) SR 3.3.2.1 Level - Nigh High gJI(j) So 3.3.2.5 S £34.2fl (32.422 (P-14) SA sU 3.3.2.9 sit 3.3.2.10

9. Safety Injection Refer to Function I (Safety Injection) for ill initiation functions and requirements.

6. Auxiliary Feedater

I-"s a. Automtic 1.2,3 2 trainsS SRt 3.3.2.2 NANA Actuation Logic SRt 3.3.2.4 and, Actuation SR 3.3.2.6 Relays (Solid State Protection System)

b. Autoatic 1.2,3 2 trainsS ;R 3.3.2.3NA*A Actuation Logic and Actuation Relays (salance of Plant ESFAS)

c. So Water 1.2.3 03 per 3.3.2.1 S0.411 932.21%

Level - Low Low So S SR 3.3.2.5 SR 3.3.2.9 SR 3.3.2.10 SR

(continued)

(a) Reviewer's Note: Unit specific iqmlementations my contain only Allowable Valu depending on Setpofnt Study Q() Except wen all methodology Loed by the unit. NFIVs, NFRVs, land associated bypass valves]

are closed e (de-activateW for isolated by a closed meul valve).

f

WOG STS 3.3-37 Rev 1, 04/07/95

Enclosure 17 of 34 pages ESFAS Instrumentation 3.3.2

Table 3.3.2-1 (page 7 of 8)

Engineered Safety Feature Actuation Systm Instrummntation -4

APPLICABLE

OTHRK FUNCTION SPECFIED REQUIRE URVEILLANCE ALLOWABLE TRIP CONDITIONS CHANNELS CONDITIONS REGUIREKENTS vAUE(I) S!TP0INTCa)LI.)

6. AutIfolry Feedmater (continued)

d. Safety Injection Refer to Furnction I (Safety Injection) for all Initiation functions amd requireaents.

e. Loss of Offsite Power 1.213 533 per bus F SR 3.3.2.7 I Z29123 v N 3.3.2.9 with S 0.8 6$970, 8 SR 3.3.2.10 sec time datoy sec tim delay

f. Wihdervotrage 1.2 133 per I sR 3.3.2.7 S1693 bus kmr?03% bu Reactor Coolant but 3.3.2.9 voltage voltage sk 3.3.2.10

g. Trip of all main 1.2 123 per 3.3.2.8 St 3 Palo r3 Paig Feedoter Puqp PuW J SR3.3.2.9 3.3.2.10 h; Aux Liry 1,2.3 Feedwater Pump M23 F SR 3.3.2.1 a 20.53) W1 Sut ion Trarafer SR 3.3.2.7 Ipsia) -rpsio) on Suct Ian R 3.3.2.9 Pressure - Low

7. Automatic Swftchover to Containmnt Sump

a. Automatic 1.2.3,4 2 trainsC SR 3.3.2.2 NA *A Actuation Logic St 3.3.2.4 and Actuation SR 3.3.2.6 ReLays

b. Refueling Water 1,2,3.4 K SRt 3.3.2.1 I 015% and (r[) nd Storage Tank SRt 3.3.2.5 S 912 S 13 CRWST) Level -Low SR 3.3.2.9 Low Sit 3.3.2.10

Coincident with Refer to Function I (Safety Injection) for all Initiation Safety Injection functions and raquiromnts.

(continued)

(a) Revlewer~s Note: Unit specific ptaementationr my contain onLy Allowable Value depending an Setpoint Study methodology used by the unmit.

WOG STS 3.3-38 9 Rev 1, 04/07/95

Enclosure 18 of 34 pages T, 6-o02 0

! ESFAS Instrumentation 3.3.2

Engineered Safety Feature Actuation System lnstrnmentatimnTable 3.3.2-1 (page 8 of 8)

APPLICABLE SPECIFIED 21UNIR WAVEILLANCE ALLOWMLE [RIP OTHERNNOM1AJ..

FUNCTION ONDITIONS CHANNELS CODITIONS &EWIREMNES VALUE(s) U T

7. Automatif Switchovor to Conitwuent Sumt (continued)

. RUST Level--Low 1..3.4 4S r R 3.3.2.1 1 115]1 118Ix Low SR 3.3.2.5 SA 3.3.2.9 SR 3.3.2.10 Coincident with Refer to Function I (Safety Injection) for all initiatimn Safety Injection furctions and requirements.

and

Coincident with 1,2.3,4 4 K St 3.3.2.1 i 1300 in. rfn.

Contairment Sup SR 3.3.2.5 above above Level-High SR 3.3.2.9 at. r[32 ft *i. 9 ]ft 84 3.3.2.10 I 8. ESFAS Interlocks

a. Reactor Trip, P-4 1.2.3 1 per F SR 3.3.2.11 NA MA train, 2 trains

b. Pressurizer 1.2.3 3 L SR 3.3.2.1 S [19962 % psg Pre~ssure P-11 SR 3.3.2.5 psloP SA 3.3.2.9

c. T,.-Low Low, P-12 1.2.3 112 per L SR 3.3.2.1 1 3550.638F J1532UF loop SR 3.3.2.5 Sa 3.3.2.9

Ca) Rviewerts Note: Unit specific fmplementations miy contain only Allowsbtl Value depending on Setpoint Study methodology used by the unit.

(4.)

(

WOG STS 3.3-39 Rev 1, 04/07/95

Enclosure 19 of 34 pages RTS Instrumentation B 3.3.1

( B 3.3 INSTRUMENTATION B 3.3.1 Reactor Trip System (RTS) Instrumentation

BASES

BACKGROUND The RTS initiates a unit shutdown, based on the values of "core fuel design limits and Reactor Coolant System (RCS) selected unittparameters, to protect against violating the pressure boundary during anticipated operational occurrences (AOOs) and to assist the Engineered Safety Features (ESF)

Systems in mitigating accidents.

The protection and monitoring systems have been designed to assure safe operation of the reactor. This is achieved by specifying limiting safety system settings (LSSS) in terms of'parameters directly monitored by the RTS, as well as specifying LCOs on other reactor system parameters and equipment performance.

t'3etpo=n;], in he defined in this specification as the [Tr-ip SJ-threshold for protective system action to prevent exceedin conjunction with the LCOs, establish the

( acceptable limits during Desttn Basis Accidents iDBAs). n

During AOOs, which are those events expected to occur one or more times during the unit life, the acceptable limits are:

1. The Departure from Nucleate Boiling Ratio (DNBR) shall be maintained above the Safety Limit (SL) value to prevent departure from nucleate boiling (DNB);

2. Fuel centerline melt shall not occur; and

3. The RCS pressure SL of 2750 psia shall not be exceeded.

Operation within the SLs of Specification 2.0, 'Safety timits (SLs)," also maintains the above values and assures that offsite dose will be within the 10.CFR 50 and I0 CFR 100 criteria during AQOs.

Accidents are events that are analyzed even though they are not expected to occur durin the unit life. The acceptable limit during accidents is tat offsite dose shall be maintained within anacceptable fraction of 10 CFR 100 limits. Different accident categories are allowed a

(continued)

WOG STS B 3.3-1 Rev 1, 04/07/95

Enclosure 20 of 34 pages RTS Instrumentatio'n "7rS6 - Ozo ', I B 3.3.1

BASES

BACKGROUND different fraction of these limits, based on probability of (continued) occurrence. Meeting the acceptable dose limit for an accident category is considered having acceptable consequences for that event.

The RTS instrumentation is segmented into four distinct but Chapter [7] (Ref. 1), and as identified interconnected modules as illustrated in Figure[ ], FSAR, below:

1..Field transmitters or process sensors: provide a measurable electronic signal based upon the physical characteristics of the parameter being measured;

2. Signal Process Control and Protection System, including Analog Protection System, Nuclear Instrumentation System (HIS), field contacts, and protection channel sets: provides signal conditioning, bistable setpoint comparison, process output to protection system devices, and control algorithm actuation, compatible electrical signal board/control room/miscellaneous indications;

3. Solid State Protection System (SSPS), including input, logic, and output bays: initiates proper unit shutdown and/or ESF actuation in accordance with the

• from defined loglic, the signal process control and protection system; which is based on the bistable outputs and

4. Reactor trip switchgear, including reactor trip means to interrupt breakers (RTBs) and bypass breakers: provides the mechanisms (CRD~s) and allows the rod cluster control power to the control rod drive assemblies (RCCAs), orrods," to fall into the core and shut down the reactor. The bypass breakers allow testing of the RTBs at power.

Field Transmitters or Sensors To meet the design demands for redundancy and reliability, more than one, and often as many as four, field transmitters or sensors are used to measure unit parameters. To account for the calibration tolerances and instrument drift, which are assumed to occur between caljbrations, statistical allowances are provided in the.lritp/etpoint and Allowable x

(continued)

WOG STS B 3.3-2 Rev 1, 04/07/95

- - Enc1ourG 21---.34g.e.&.....

RTS Instrumentation B 3.3.1

BASES

BACKGROUND Field Transmitters or Sensors (continued)

Signal Process Control and Protection System Generally, three orfour channels of process control parameters measured by the field instruments. The process equipment are used for the signal processing of unit Control equipment provides signal conditioning, comparable output signals for instruments located on the main control board, and comparison of measured input signals with setpoints established by safety analyses. These setpoints are defined in (Ref. 2), and Chapter [15] (Ref. 3). If the measured value FSAR, Chapter [73 (Ref. 1), Chapter [6]

of a unit parameter exceeds the predetermined setpoint, an output from a bistable is forwarded to the SSPS for decision eva uation. Channel separation is maintained up to and

( require four channels of sensor measurement and signal through the input bays. However, not all unit parameters processing. Some unit parameters provide input only to the SSPS, while others provide input to the SSPS, the main control board, the unit computer, and one or more control systems.

Generally, if a parameter is used only for input to the protection circuits, three channels with a two-out-of-three logic.are sufficient-toprovide the required reliability and not result in a partial Function trip, the Function is redundancy. If one channel fails n a direction that would OPERABLE with a two-out-of-two logic. If one channel fails, still such that a partial Function trip occurs, a trip will not occur and the Function is still OPERABLE with a one-out-of-two logic.

Generally, if a parameter is used for input to the SSPS and a control function, four channels with a two-out-of-four logic are sufficient to provide the required reliability and redundancy. The circuit must'be able to withstand both an input fa iure to the control system, which may then require the protection function actuation, and a single failure in the other channels providing the protection function actuation. Again, a single failure will neither cause nor

(continued)

WOG STS B 3.3-3 Rev 1, 04/07/95

Enclosure 22 of 34 pages RTS Instrumentation/

B 3.3.1

BASES

BACKGROUND Signal Process Control and Protection System (continued)

prevent the protection function actuation. These requirements are described in IEEE-279-1971 (Ref. 4). The actual number of channels required for each unit parameter is specified in Reference 1.

Two logic channels are required to ensure no single random failure of a logic channel will disable the RTS. The logic channels are designed such that testing required while the reactor Is at power may be accomplished without causing trip. Provisionsto allow removing logic channels from service during maintenance are unnecessary because of the logic system's designed reliability.

he rip netpo n-s are the nominal values at which the properly adjusted when the *as left" value Is bistables are set. Any bistable is considered to be "band for CHANNEL CALIBRATION accuracy (i.e., +/- rack within thee calibration + comparator setting accuracy).

Y -TheY/rip detpoints used in the bistables are based on the analytipal limits stated in Reference 1. The selection of x theseTrip?Xetpoints is such that adequate protection is provided when all sensor and processing time delays are taken into account. To allow for calibration tolerances, instrumentation uncertainties, instrument drift, and severe environment errors for those RTS channels that must function o bars environments as defined by 10 CFR 50.49 (Ref. 5),

Table 3.3.1-1 inthaccornpanying LCO are conservative ~and Allowable Vaues specified in T9.a4 s iton of the methodology used to calculate thes, 3eiwith respect to the analytical limits. A d X $etpoints, including their explicit uncertainties, is ript ridd in Ref. 6 The actua/Fo-mlnal Irip betpoint entered into the the PRTS/ESFAS Set oint Methodology Study*

SAllowable Value to account for changes in random measurementt S* ~errors detectable by9 C-OT:. One example of such a hnet If the measured setpotnt does. not~excee~d the Allowable error is+drift during the surveillance interval. Smeasurement

Value, the bistable ts considered OPERABLE.

(continued)

WOG STS B 3.3-4 Rev 1, 04/07/95

Enclosure 23 of 34 pages RTS Instrumentation I X:5 b-CUZUJ B 3.3.1

I BASES

BACKGROUND 4Trft Set ooint s Eh'a?A _owble V;Luev(_cont in,-led ir -4etpoints I ththe A "sure that SLs are not violated during AOs (and that the consequences of DBAs will be acceptable, providing the unit is operated from within the LCOs at the Onset of the AOO or DBA and the equipment functions as designed). Nlote-that in the' are the LSSS.,accompanying LCO 3.3.1, the Trip Setpoints '?f Table 3.3.-Z

Each channel of the process control equipment can be tested within the specified allowance requirements of Reference 2. on line to verify that the signal or setpoint accuraty is Once a designated channel is taken out of service for testing a simulated signal is injected in place of the field instrument signal. The process equipment for the channel in test is then tested, verified, and calibrated.

SRs for the channels are specified in the SRs section.

Table$3.3.1- ' hReference "6,ý.which incorporates a11 of the known. are based on, the methodology described in\\

r r d t t thei d teitto n processing equipment for these channels are assumed to? o f t hes e u n e t nt s CID eat magnitudes.

Solid State Protection System The SSPS equipment is used for the decision logtc processing of outputs from the sfgnal processng equipment bistables.

To meet the redundancy re uirements, two trains of SSPS, each performing the samelduncttons, are provided. gf one train is purposes, thesecond traen will provide reactor trip and/or taken out of service for maintenance or test ESF actuation for the unit. If both tdaes are taken out of service oriplaced tn test, ' reactor trip will result. Each train ts packaged In its owncabinet for physical and electrical separation to satisfy separation and independence requirements. The systemhas been desgned to trp t he event of ahloss of power, directing the unit toa safe shutdown condition.

I (continued)

WOG STS B 3.3-5 Rev 1, 04/07/95

Enc-icsure-24- -e-f pages ESFAS Instrumentation B 3.3.2

B 3.3 INSTRUMENTATION B 3.3.2 Engineered Safety Feature Actuation System (ESFAS) Instrumentation

BASES

BACKGROUND The ESFAS initiates necessary safety systems, based on the values of selected unit parameters, to protect against violating core design limits and the Reactor Coolant System (RCS)*pressure boundary, and to mitigate accidents.

The ESFAS instrumentation is segmented into three distinct but interconnected modules as identified below:

-e. Field transmitters or process sensors and instrumentation: provide a. measurable electronic signal based on the physical characteristics of the parameter being measured;

• Signal processing equipment including analog protection system, field contacts, and protection setpoint comparison,' process algorithm actuation, sets: provide signal conditioning, bistable Schannel

( compatible electrical.signal output to protection system devices, and control board/control room/

miscellaneous indications; and

• Solid State Protection System (SSPS) including input, logic, and output bays:. initiates the proper unit shutdown or engineered safety feature (ESF) actuation in accordance with the defined logic and based on the bistable outputs from the signal process control and protection system.

Field Transmitters or Sensors To meet the design demands for redundancy and reliability, more than one, and often as. many as four, field transmitters or sensors are used to measure unit parameters. In many cases, field transmitters'or sensors that input to the ESFAS cases, the same channels also provide control system inputs. are shared with the Reactor Trip System (RTS). In some "To account for calibration tolerances and instrument drift, which are assumed to occur between calibrations, statistical allowances are provided'in the Trip Setpoint and Allowable

.(continued)

WOG STS B 3.3-61 Rev 1, 04/07/95

Encloure. 225 of. 34 pages ESFAS Instrumentation T S8-ozo e, 2.)

B 3.3.2

BASES

BACKGROUND Field Transmitters or Sensors (continued)

Values. The OPERABILITY of each transmitter or sensor OF A s -a Sbe evaluated when its was found" calibration data are cmared against its documented acceotanee criteria, /

Sional Processing Eguigment Generally, three or four channels of process control parameters measured by the field instruments. The process equipment are used for the signal processing of unit control equipment provides signal conditioning, comparable output signals for instruments located on the main control board, and comparison of measured input signals with setpoints established by safety analyses. These setpoints are defined in FSAR, Chapter [6] (Ref. 1), Chapter [7]

(Ref. 2), and Chapter (15] (Ref. 3). If the measured value of a unit parameter exceeds the predetermined setpoint, an evaluation. Channel separation is out put from a bistable ts forwarded to the SSPS for decision through the input bays. However, not all unit parameters maintained up to and require four channels of sensor measurement and signal processing. Some unit parameters'provide input only to the SSPS, while others provide input to the SSPS, the main control board, the unit computer, and one or more control systems.

Generally, if a parameter is used only for input to the protection circuits, three channels with a two-out-of-three logic are sufficlent to provide the required reliability and not result in redundancyq If one channel fails in a direction that would OPERABLE with a two-out-of-two logic. If one channel fails a partial Function trip, the Function is still such that a partial Function trip occurs, a trip will not occur and the Function is still OPERABLE with a one-out-of two logic.

Generally, if a parameter is used for input to the SSPS and

.a logic are sufficient to provide the required reliability and control function, four channels with a two-out-of-four redundancy. The circuit must be able to withstand both an theprotection function actuation, and a single failure in input failure to the control system, which may then require the other channels providing the protection function

(continued)

WOG STS B 3.3-62 Rev 1, 04/07/95

Enclosure 26 of 34 pages ESFAS Instrumentati6n "7TS8-OZ..

B 3.3.2

BASES

BACKGROUND Signal Processing EouiDment (continued)

prevent the protection function actuation. actuation. Again, a single failure will neither cause nor

These requirements are described in IEEE-279-1971 (Ref. 4).

The actual number of channels required for. each unit parameter is specified in Reference 2.

"The Trip Setpoints are'the nominal values at whi cte considered to be properly adjusted when the 'as left* value is bistables are set. Any bistable Is 2band for CHANNEL CALIBRATION accuracy. within the

The Trip Setpoints used in the bistables are based on the analytical limits stated in Reference 2. The selection of provided when all'sensor and processing time delays are these Trip Setpoints is such that adequate protection is

( instrumentation-uncertainties, instrument drift, and severe taken into account. To allow forcallbration tolerances, environment errors for those ESFAS channels that must functtnfn harsh environments as defined by)10 CFR 50.49 itn Table3.3.2-ln te accompanying LCO are conservativ (Ref. 5), the l r e o tsan Allowable Values specified descripion o the methodology used to calculate the Trip " ?a dusweth respect to te ana ytical limits eta ed Setpoints, including their explicit uncertainties, is pr.vided in the 'RTS(ESFAS Setpoint Methodology Study*

"bi?stable (Ref. 6). The actua nominal Trip Setpoint entered into the is more conservative than that specified by the Allowable Value to account for changes in random measurement errors detectable by a COT. One example of such a change in measurement error is drift during the surveillance interval.

If the measured setpoint does not exceed the Allowable Value, the bistable is considered OPERARIF Sep,--=A L.with theTAllowable Value ensure that Sep ints rextA Ce Of k 4 *ýc the consequences of'Design Basis Accidents (DBAs) will be acceptable, providing the unit Is operated from within the LCOs at the onset of the DBA and the equipment functions as designed.

(continued)

WOG STS B 3.3-63 Rev 1, 04/07/95

Enclosure 27 of 34 pages 7-3"56 - 02-0,R.

ESFAS Instrumentation B 3.3.2

BASES BACKGROUND :1 an (continued) processing equipment and setpoint accuracy is Each channel can be tested on line to verify that the signal specified allowance requirements of Reference 2. Once a within the designated channel is taken out of service for testing, a simulated signal is injected in place of the field test is Instrument signal. The process equipment for the channel in then tested verified, and calibrated. SRs for the channels are specified in the SR section.

uncertainties applicableThe magnitudes. Reference 6, whichninthe oownc.aes lof the e unc ant Sof these-uncertainties atfcoeInoi dernt ios (of'each.Trip Setpioint. All.fied snsos....sgna

[pro -cessihg equipment for thes hnesaeassumed to

[operate within the altowancs fthese uncertainty-""j magnitudes.T

Solid State Protection System The SSPS equipment Is used for the decision logic processing )

To meet the redundancy requirements, two trains of SSPS, of outputs from the signal processing equipment bistables.

each performing thesame functions, are provided. If one train is taken out of service for maintenance or test purposes, the second train will provide ESF actuation for the unit. If both trains are taken out of service or placed in test, a reactor trip will result. Each train is packaged in its own cabinet for physical and electrical separation to satisfy separation and independence requirements.

The SSPS performs the decision logic for most ESF equipment actuation; generates the electrical output signals that initiate the required actuation; and provides the status, permissive, and annunciator output signals to the main control room of the unit.

The bistable outputs from the signal processing equipment matrices that represent combinations indicative of various are sensed by the SSPS equipment and combined into logic

( (continued)

)

WOG STS B 3.3-64 Rev 1, 04/07/95

Enclosure 28 of 34 pages ESFAS Instrumentation B 3.3.2

BASES

SURVEILLANCE 5.. 2.11 (continued)

REQUIREMENTS Trip Interlock, and the Frequency is once per RTB cycle.

demonstrating that undetected failure of the P-4 interlock This Frequency is based on operating experience sometimes occurs when the RTB is cycled.

The SR is modified by a Note that excludes verification of setpoints during the TADOT. The Function tested has no associated setpoint.

REFERENCES I. FSAR, Chapter [6].

2. FSAR, Chapter [7].

3. FSAR, Chapter [i1].

4. IEEE-279-1971.

5. 10 CFR 50.49.

6. RT*WWAS-Setpoint Methodology Study.

7. NUREG-1218, April 1988.

8. WCAP-10271-P-A, Supplement 2, Rev. 1, June 1990.

9. Technical Requirements Manual, Section 15, "Response Times."

- a

WOG STS B 3.3-120 Rev 1, 04/07/95

Enclosure 29 of 34 pages RPS Instrumentation B 3.3.1

B 3.3 INSTRUMENTATION B 3.3.1 Reactor Protection System (RPS) Instrumentation

BASES

BACKGROUND The RPS initiates a reactor trip to protect against Coolant System (RCS) pressure boundary during anticipated violating the core fuel design limits and the Reactor operational occurrences (AOOs). By tripping the reactor, Systems fn mitigating accidents.the RPS also assists the Engineered Safety Feature (ESF)

The protection and monitoring systems have been designed to assure safe operation of the reactor. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored by the RPS, as well as the LCOs on other reactor system parameters and equipment performance.

L he LSSS, defined in this Specification as the Allowable hreshold for protective system action to prevent exceeding ) alue, in conjunction with the LCOs, establishes the tmits'during Desian Rasis Arcidnt DBAs During AOOs, which are those events expected to occur one or more times during the unit's life, the acceptable limit is:

a. The departure from nucleate boiling ratio (DNBR) shall be maintained above the Safety Limit (SL) value;

b. Fuel centerline melt shall not occur; and

c. The RCS pressure SL of 2750 psia shall not be exceeded.

Maintaining the parameters within the above values ensures that the offsite dose will be within the 10 CFR 20 and 10 CFR 100 criteria during AO0s.

Accidents are events that are analyzed even though they are not expected to occur during the unit's life. The acceptable limit during accidents is that the offsite dose shall be maintained within 10 CFR 100 limits. Meeting the acceptable'dose limit for an accident category is considered having acceptable consequences for that event.

(continued)

BWOG STS 8 3.3-1 Rev 1, 04/07/95

Enclosure 30 of 34 pages RPS Instrumentation B 3.3.1.1

B 3.3 INSTRUMENTATION B 3.3.1.1 Reactor Protection System (RPS) Instrumentation

BASES

BACKGROUND The RPS initiates a reactor scram when one or more monitored parameters exceed their specified limits, to preserve the integrity of the fuel cladding and the Reactor Coolant System (RCS) and minimize the energy that must be absorbed following a loss of coolant accident (LOCA). This can be accomplished either automatically or manually.

The protection and monitoring functions of the RPS have been designed tO ensure safe operation of the reactor. This is achieved by specifying limiting safety system settings as well as LCOs on other reactor system larameters and (LSSS) in terms of parameters directly monitored by the RPS,

[ppecification as the Allowable Values, which, in equipment performance. Fe LSSS are defined in this T3 -?r with the LCOs, establish the threshold for protective system conjunction action to prevent exceeding acceptable limits, including Safety Limits (SLs) during Design Basis Accidents (DBAs). 1 The RPS, as shown in the FSAR, Figure [ ] (Ref. 1), includes necessary to cause initiation of a reactor scram. sensors, relays, bypass circuits, and switches that are Functional diversity is provided by monitoring a wide range of dependent and independent parameters. The input parameters to the scram logic are from instrumentation that monitors reactor vessel water level, reactor vessel pressure, neutron flux, main steam line isolation valve position, turbine control valve (TCV) fast closure, trip oil pressure, turbine stop valve (TSV) position, drywell pressure, and scram discharge volume (SDV) water level, as well as reactor mode switch in shutdown position and manual scram signals. There are at least four redundant sensor exception of the reactor mode switch in input signals from each of these parameters (with the signal). Most channels include electronic equipment (e.g., shutdown scram trip'units) that compares measured input signals with pre-established setpoints. When the setpoint is exceeded, trip signal to the trip logic. Table B 3.3.1.1-1 summarizes the channel output relay actuates, which then outputs an RPS the diversity of sensors capable of initiating scrams during anticipated operating transients typically analyzed.

(continued)

BWR/4 STS B 3.3-1 Rev 1, 04/07/95

Enclosure 31 of 34 pages RPS Instrumentation B 3.3.1.1

B 3.3 INSTRUMENTATION B 3.3.1.1 Reactor Protection System (RPS) Instrumentation

BASES

BACKGROUND The RPS initiates a reactor scram when one or more monitored parameters exceed their specified limit, to preserve the System (RCS), and minimize the energy that must be absorbed integrity of the fuel cladding and the Reactor Coolant following a loss of coolant accident (LOCA). This can be accomplished either automatically or manually.

The protection and monitoring functions of the RPS have been designed to ensure safe operation of the reactor. This is achieved by'specifying limiting safety system settings as well as LCOs on other reactor st arameters and (LSSS) in terms of parameters directly monitored by the RPS, equipment performa /e.The pecification as the Allowable Values, which, in conjunction LSSS are defined in this- --

"ith the LCOs, establish the threshold for protective system iafety Limits (SLs), during Design Rasi; Ar.i4dnt) ction to prevent exceeding acceptable limits, includsing

The RPS, as shown in the FSAR, Figure [ ] (Ref. 1), includes necessary to cause initiation of a reactor scram. sensors, relays, bypass circuits, and switches that are Functional diversity is provided by monitoring a wide range of dependent and independent parameters. The input parameters to the scram logic are from instrumentation that monitors reactor vessel water level; reactor vessel pressure; neutron flux main steam line isolation valve position;lturbine control valve (TCV) fast closure, trip oil pressure low;.turbine stop valve (TSV) trip oil pressure, low; drywell pressure and scram discharge volume (SDV) water level; as well as reactor mode switch in shutdown position and manual scram signals. There are at least four redundant sensor input signals from each of these parameters (with the exception of the reactor mode switch in shutdown scram signal). Most channels include electronic equipment (e.g.,

trip units) that compares measured input signals with pre-established setpoints. When a setpoint is exceeded, the channel output relay actuates, which then outputs an RPS the diversity of sensors capable of initiating scrams during trip signal to the trip logic. Table B 3.3.1.1-1 summarizes anticipated operating transients typically analyzed.

(continued)

BWR/6 STS B 3.3-1 Rev 1, 04/07/95

Enclosure 32 of 34 pages

-7Y6 - (%ý o/ );?elj. I RPS Instrumentation-Operating (Digital)

B 3.3.1

B 3.3 INSTRUMENTATION B 3.3.1 Reactor Protective System (RPS) Instrumentation-Operating (Digital)

BASES

BACKGROUND The RPS initiates a reactor trip to protect against violating the core specified acceptable fuel design limits and breaching the reactor coolant pressure boundary (RCPB) during anticipated operational occurrences (AOOs). By tripping'thereactor, the RPS also assists the Engineered Safety Features (ESF) systems in mitigating accidents.

The protection and monitoring systems have been designed to ensure safe operationof the reactor. This is achieved by specifying limiting safety system settings (LSSS) in terms of parameters directly monitored by the RPS, as well as LCOs on other reactor system parameters and equipment performance.

The LSSS, defined in this Specification as the Allowable Value, inconJunction with the LCOs, establish the thresholdd for protective system action to prevent exceeding acceptable) limits during Design Basis Accidents (DBAs).

During AOOs, which are those events expected to occur one or more times during the plant life, the acceptable limits are:

The departure from nucleate boiling ratio (DNBR) shall be maintained above the Safety Limit (SL) value to prevent departure from nucleate boiling (DNB);

• Fuel centerline melting shall not occur; and

• The Reactor Coolant System (RCS) pressure SL of 2750 psia shall not be exceeded.

Maintaining the parameters within the above values ensures that the offsite-dose will be within the 10 CFR 50 (Ref. 1) and 10 CFR 100 (Ref. 2) criteria during AOOs.

Accidents are events that are analyzed even though they are not expected to occur during the plant life. The acceptable maintained within-an acceptable fraction of 10 CFR 100 limit during accidents Is that the offsite dose shall be (Ref. 2) limits. Different accident categories allow a different fraction of these limits based on probability of

(continued)

CEOG STS B 3.3-1 Rev 1, 04/07/95

Enclosure 33 of 34 pages

"-rS3- 0 Z0, R, /

RPS Instrumentation-Operating (Analog)

B 3.3.1

B 3.3 INSTRUMENTATION

'3/4 B 3.3.1 Reactor Protective System (RPS) Instrumentation-Operating (Analog)

BASES

BACKGROUND The RPS initiates a reactor trip to protect against violating the core specified acceptable fuel design limits and breaching the reactor coolant pressure boundary during reactor, the RPS also assists the Engineered Safety Features anticipated operational occurrences (AOOs). By tripping the systems in mitigating accidents.

The protection and monitoring systems have been designed to ensure safe operatfon of the reactor. This is achieved by specifying limiting safety system settings (LSSS) in'terms of parameters directly monitored by the RPS, as well as LCOs on other reactor system parameters and equipment performance.

The LSSS, defined in this Specification as the Allowable Value, in conjunction with the LCOs, establish the threshold for protective system action to prevent exceeding acceptable limits during Design Basis Accidents (DBAs).

/

more times during the plant life, the acceptable limits are:During AOOs, which are those events expected to occur one or

The departure from nucleate boiling ratio (DNBR) shall be maintained above the Safety Limit (SL) value to prevent departure from nucleate boiling;

• Fuel centerline melting shall not occur; and

• The Reactor Coolant System (RCS) pressure SL of 2750 psla shall not be exceeded.

Maintaining the parameters within the above values ensures that the offslte dose will be within the 10 CFR 50 (Ref. 1) and 10 CFR 100 (Ref. 2) criteria during AOOs.

Accidents are events that are analyzed even though they are not expected to occur during the plant life. The acceptable maintained within an acceptable fraction of 10 CFR 100 limit during accidents is that the offslte dose shall be different fraction of these limits based on probability of (Ref. 2) limits. Different accident categories allow a

( (continued)

CEOG STS B 3.3-1 Rev 1, 04/07/95

Enclosure 34 of 34 pages