ML17325B600: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:NRCForm366U.S.NUCLEARREGULATORYCOMMISSION(6-1998)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/charactersforeachblock)APPROVEDBYOMBNo.3150.0104EXPIRES06/30/2001ESTIMATEDBURDENPERRESPONSETOCOMPLYWITHTHISMANDATORYINFORMATIONCOLLECTIONREOVESD50.0HRS.REPORTEDLESSONSLEARNEDAREINCORPORATEDBJTOTHEUCEJISINGPROCESSANDFEDBACKTOINDUSTRY.FORWARDCOMMENTSREGARDUIGBURDENESTSJATETOTHEII&ORMATIONANORECORDSMANAGEMENTBRANCHIT4AS),V.S.NVCLEARRFGUIATORYCOMMISSION.WASHBJGTON.OC205S54XI.ANOTOTHEPAPERWORKREDUCTIONPROJECTtst50410l),OFFICEOFMANAGEMENTANDBUCGEf,WASIeNGTceLDC2050$FACILITYNAMEI1)CookNuclearPlantUnit1DOCKETNUMBERr2)05000-315PAGEI5)1of3TITLEI4)AuxiliaryBuildingESFVentilationSystemMayNotbeCapableofMaintainingESFRoomTemperaturesPost-AccidentMONTH04DAYYEAR201999EVENTDATE(5)YEAR1999LERNUMBER(8)SEQUENTIALNUMBER012REVISIONNUMBER00REPORTDATE(7)MONTHDAYYEAR05201999ILID.C.Cook,Unit2AILINAM05000-316DCNUMBEROTHERFACILITIESINVOLVED(8)OPERATINGMODE(9)POWERLEVEL(10)0%20.2201(b)20.2203(a)(1)20.2203(a)(2)(i)20.2203(a)(2)(v)20.2203(a)(3)(i)20.2203(a)(3)(ii)50.73(a)(2)(l)50.73(a)(2)(ii)50.73(a)(2)(iii)50.73(a)(2)(viii)50.73(a)(2)(x)73.71THISREPORTISSUBMITTEDPURSUANTTOTHEREQUIREMENTSOF10CFRII:(Checkoneormore)(11)20.2203(a)(2)(ii)20.2203(a)(2)(iii)20.2203(a)(2)(iv)20.2203(a)(4)50.36(c)(1)50.36(c)(2)LICENSEECONTACTFORTHISLER(12)50.73(a)(2)(iv)50.73(a)(2)(v)50.73(a)(2)(vii)OTHERSpecii/yInAbstractbekrrrornNRCForm366ANAMEMs.BrendaW.O'ourke,ComplianceEngineerTELEPHONENUMBER(IIK5udeAreaCode)(616)465-5901x2604COMPLETEONELINEFOREACHCOMPONENTFAILUREDESCRIBEDINTHISREPORT(13).CAUSESYSTEMCOMPONENTMANUFACTURERREPORTABLETOEPIXCAUSESYSTEMCOMPONENTMANUFACTURERREPORTABLETOEPIXSUPPLEMENTALREPORTEXPECTED(14XYES(IfYes,completeEXPECTEDSUBMISSIONDATE)NOEXPECTEDSUBMISSIONDATE15MONTH10DAY311999Abstract(Limitto1400spaces,I.e.,approximately15singie-spacedtypewrittenlines)(16)OnApril20,1999,duringperformanceoftheExpandedSystemReadinessReview(ESRR)fortheAuxiliaryBuildingVentilationSystems,itwasconcludedthatthereisinsufficientassurancethattheEngineeredSafetyFeaturesVentilation(AES)systemiscapableofperformingitssafetyandaccidentmitigationfunction.Thisconclusionwasbasedonapreliminaryevaluationofnumerousidentifiedsystemdeficienciestakenintheaggregate.Specifically,significanterrorsincalculationsforauxiliarybuildingEngineeredSafetyFeaturescubicletemperaturesexpectedduringpostulatedaccidentscenarios,vulnerabilityofAESdampercontrolairsystemmodificationtosinglefailure;andlackofmissileprotectionfortheComponentCoolingWaterpumpareasupplyfans.Basedonthecombinedeffectsofthesedeficiencies,theabilityoftheAESsystemtomaintainauxiliarybuildingtemperaturestowithinsafety-relatedequipmentdesigntemperaturesunderaccidentconditionscannotbeassured.Thepreliminarycausesforidentifiedconditionsare:inadequatecontrolofsystemdesigninputs;failuretoadequatelyimplementsinglefailuredesigncriteriaduringthemodificationprocess;andlackofacleardefinitionindesignandlicensingdocumentsregardingdesignrequirementsforsystemprotectionagainstmissileeffects.AcomprehensiveactionplanisbeingdevelopedtodeterminetheauxiliarybuildingdesigntemperaturesrequiredtobemaintainedbytheAESventilationsystem.Inaddition,asinglefailureanalysisfortheAESventilationsystemwillbeperformedtoidentifyfailuresthatcouldpreventthesystemfromperformingitsdesignandsafetyfunction.Basedontheresultsofthecompletedevaluation,informationregardingthesafetysignificance,andcorrectiveandpreventiveactionswillbeprovidedinanupdatetothisLER.9905260279990520PDRADOCK050003'l5SPDR
{{#Wiki_filter:NRCForm366U.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/characters foreachblock)APPROVEDBYOMBNo.3150.0104 EXPIRES06/30/2001 ESTIMATED BURDENPERRESPONSETOCOMPLYWITHTHISMANDATORY INFORMATION COLLECTION REOVESD50.0HRS.REPORTEDLESSONSLEARNEDAREINCORPORATED BJTOTHEUCEJISING PROCESSANDFEDBACKTOINDUSTRY.
FORWARDCOMMENTSREGARDUIG BURDENESTSJATETOTHEII&ORMATION ANORECORDSMANAGEMENT BRANCHIT4AS),V.S.NVCLEARRFGUIATORY COMMISSION.
WASHBJGTON.
OC205S54XI.
ANOTOTHEPAPERWORK REDUCTION PROJECTtst50410l),
OFFICEOFMANAGEMENT ANDBUCGEf,WASIeNGTceL DC2050$FACILITYNAMEI1)CookNuclearPlantUnit1DOCKETNUMBERr2)05000-315 PAGEI5)1of3TITLEI4)Auxiliary BuildingESFVentilation SystemMayNotbeCapableofMaintaining ESFRoomTemperatures Post-Accident MONTH04DAYYEAR201999EVENTDATE(5)YEAR1999LERNUMBER(8)SEQUENTIAL NUMBER012REVISIONNUMBER00REPORTDATE(7)MONTHDAYYEAR05201999ILID.C.Cook,Unit2AILINAM05000-316 DCNUMBEROTHERFACILITIES INVOLVED(8)OPERATING MODE(9)POWERLEVEL(10) 0%20.2201(b)20.2203(a)(1) 20.2203(a)(2)(i) 20.2203(a)(2)(v) 20.2203(a)(3)(i) 20.2203(a)(3)(ii) 50.73(a)(2)(l) 50.73(a)(2)(ii) 50.73(a)(2)(iii) 50.73(a)(2)(viii) 50.73(a)(2)(x) 73.71THISREPORTISSUBMITTED PURSUANTTOTHEREQUIREMENTS OF10CFRII:(Checkoneormore)(11)20.2203(a)(2)(ii) 20.2203(a)(2)(iii) 20.2203(a)(2)(iv) 20.2203(a)(4) 50.36(c)(1) 50.36(c)(2)
LICENSEECONTACTFORTHISLER(12)50.73(a)(2)(iv) 50.73(a)(2)(v) 50.73(a)(2)(vii)
OTHERSpecii/yInAbstractbekrrrornNRCForm366ANAMEMs.BrendaW.O'ourke,Compliance EngineerTELEPHONE NUMBER(IIK5udeAreaCode)(616)465-5901x2604COMPLETEONELINEFOREACHCOMPONENT FAILUREDESCRIBED INTHISREPORT(13).CAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE TOEPIXCAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE TOEPIXSUPPLEMENTAL REPORTEXPECTED(14XYES(IfYes,completeEXPECTEDSUBMISSION DATE)NOEXPECTEDSUBMISSION DATE15MONTH10DAY311999Abstract(Limitto1400spaces,I.e.,approximately 15singie-spaced typewritten lines)(16)OnApril20,1999,duringperformance oftheExpandedSystemReadiness Review(ESRR)fortheAuxiliary BuildingVentilation Systems,itwasconcluded thatthereisinsufficient assurance thattheEngineered SafetyFeaturesVentilation (AES)systemiscapableofperforming itssafetyandaccidentmitigation function.
Thisconclusion wasbasedonapreliminary evaluation ofnumerousidentified systemdeficiencies takenintheaggregate.
Specifically, significant errorsincalculations forauxiliary buildingEngineered SafetyFeaturescubicletemperatures expectedduringpostulated accidentscenarios, vulnerability ofAESdampercontrolairsystemmodification tosinglefailure;andlackofmissileprotection fortheComponent CoolingWaterpumpareasupplyfans.Basedonthecombinedeffectsofthesedeficiencies, theabilityoftheAESsystemtomaintainauxiliary buildingtemperatures towithinsafety-related equipment designtemperatures underaccidentconditions cannotbeassured.Thepreliminary causesforidentified conditions are:inadequate controlofsystemdesigninputs;failuretoadequately implement singlefailuredesigncriteriaduringthemodification process;andlackofacleardefinition indesignandlicensing documents regarding designrequirements forsystemprotection againstmissileeffects.Acomprehensive actionplanisbeingdeveloped todetermine theauxiliary buildingdesigntemperatures requiredtobemaintained bytheAESventilation system.Inaddition, asinglefailureanalysisfortheAESventilation systemwillbeperformed toidentifyfailuresthatcouldpreventthesystemfromperforming itsdesignandsafetyfunction.
Basedontheresultsofthecompleted evaluation, information regarding thesafetysignificance, andcorrective andpreventive actionswillbeprovidedinanupdatetothisLER.9905260279 990520PDRADOCK050003'l5 SPDR


NRCFORM366AU.S.NUCLEARREGULATORYCOMMISSION(6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATIONFACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2)05000-315YEARLERNUMBER(6)SEQUENTIALNUMBERREVISIONNUMBERPAGE(3)2of3TEXT(Ifmorespaceisrequired,useadditionalcopiesofNRCForm(366A)(17)ConditionsPriortoEventUnit1wasinMode5,ColdShutdownUnit2wasinMode5,ColdShutdown199901200DescritionofEventOnApril20,1999,duringperformanceoftheExpandedSystemReadinessReview(ESRR)fortheAuxiliaryBuildingVentilationSystems,itwasconcludedthatthereisinsufficientassurancethattheEngineeredSafetyFeaturesVentilation(AES)systemiscapableofperformingitssafetyandaccidentmitigationfunction.Thisconclusionwasbasedonapreliminaryevaluationofnumerousidentifiedsystemdeficienciestakenintheaggregate.Specifically,significanterrorsincalculationsforauxiliarybuildingEngineeredSafetyFeatures(ESF)cubicletemperaturesexpectedduringpostulatedaccidentscenarios,combinedwithsmalldesignmarginsthatexistedbetweencalculatedroomtemperaturesanddesignrequirements;vulnerabilityofAESdampercontrolairsystemmodificationtosinglefailure;andlackofmissileprotectionfortheComponentCoolingWater(CCW)pumpareasupplyfanswhichcouldresultinasinglecatastrophicfailure-generatedmissileimpactingbothtrainsofAES.Basedonthecombinedaffectsofthesedeficiencies,theabilityoftheUnit1and2AESsystemstomaintainauxiliarybuildingtemperaturestowithinsafety-relatedequipmentdesigntemperaturesunderallaccidentconditionscannotbeassured.Inaccordancewiththerequirementsof10CFR50.72(b)(2)(iii)(D),a4hournotificationwasmadetotheNRConApril20,1999,at1645hours,foranyeventorconditionthatalonecouldhavepreventedthefulfillmentofthesafetyfunctionofstructuresorsystemsthatareneededtomitigatetheconsequencesofanaccident.CauseofEventThepreliminarycausefortheuseofnon-conservativeandincorrectassumptionsinauxiliarybuildingheatloadcalculationsisduetoinadequatecontrolofsystemdesigninputs.ThisissuewaspreviouslyidentifiedinAEP:NRC:1260GH,datedMarch19,1999,"EnforcementActions98-150,98-151,98-152and98-186,ReplytoNoticeofViolationDatedOctober13,1998."ThepreliminarycauseforAESdamperdesignsinglefailurevulnerabilityisfailureofthedesignchangeprocesstoidentifythepotentialadverseimpactontheAESsystemcreatedbythemodificationtothedampercontrolairsystemin1997.ThepreliminarycauseforCCWpumpareasupplyfansusceptibilitytomissileeffectsislackofacleardefinitionindesignandlicensingdocumentsregardingAESdesignrequirementsforprotectionagainstmissileeffects.AnalsisofEventThisLERissubmittedinaccordancewith10CFR50.73(a)(2)(v)(D)foraconditionthatcouldpreventthefulfillmentofthesafetyfunctionsoftheAESsystemthatareneededtomitigatetheconsequencesofanaccident:TheAESsystemsafetyandaccidentmitigationfunctionistoprovidesufficientcoolingtotheauxiliarybuildinggeneralareasandESFequipmentroomsrequiredtooperateduringaccidentconditions.ThisincludestheCCW,ContainmentSpray,ResidualHeatRemoval,ChargingandSafetyInjectionequipmentrooms.TheAESsystemalsomaintainstheauxiliarybuildingatanegativepressurerelativetotheoutsideenvironmenttoensureradioactivecontaminationreleasedduringanaccidentiscontainedwithintheauxiliarybuilding,filteredandexhaustedtotheenvironmentviaamonitored,releasepath.Inaddition,TechnicalSpecification3.7.6.1requiresthattwoindependentAESventilationsystemfan/filterexhausttrainsbeoperableinModes1through4.Calculationsweredevelopedtoestablishtheauxiliarybuildingheatloads,ESFcubicleroomandgeneralareatemperaturesduringnormal,shutdownandaccidentconditions.DuringtheESRRreviewofthesecalculations,numerousdiscrepancieswereidentified.Forexample,calculationofauxiliarybuildingareatemperatureduringaccidentconditionsNRCFORM366A(6-1996)
NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2) 05000-315 YEARLERNUMBER(6)SEQUENTIAL NUMBERREVISIONNUMBERPAGE(3)2of3TEXT(Ifmorespaceisrequired, useadditional copiesofNRCForm(366A)(17)Conditions PriortoEventUnit1wasinMode5,ColdShutdownUnit2wasinMode5,ColdShutdown199901200DescritionofEventOnApril20,1999,duringperformance oftheExpandedSystemReadiness Review(ESRR)fortheAuxiliary BuildingVentilation Systems,itwasconcluded thatthereisinsufficient assurance thattheEngineered SafetyFeaturesVentilation (AES)systemiscapableofperforming itssafetyandaccidentmitigation function.
NRCFORM366AU.S.NUCLEARREGULATORYCOMMISSION(6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATIONFACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2)05000-315YEARLERNUMBER(6)SEQUENTIALNUMBERREVISIONNUMBERPAGE(3)3of3199901200TEXT(ifmorespaceisrequired,useadditionalcopiesofNRCForm(366A)(17)didnotincludetheheatloadfortheCCWsystempiping.Thisequipmentisconsideredasignificantheatloadintheauxiliarybuildingandexcludingitfromthecalculationcouldresultinnon-conservativeauxiliarybuildingareatemperaturevalues.Inaddition,thesevaluesserveasinputassumptionstootherauxiliarybuildingventilationcalculations.Asaresult,actualauxiliarybuildingareaandESFcubicleroomtemperaturescouldimpactthequalificationoftheESFequipmentlocatedintheareasservedbytheAESandCCWpumpareaventilationsystems.TheAESventilationsystemconsistsoftwofan/filterexhausttrains(oneinstandby)whichdrawsairfromtheauxiliarybuildingthroughtheequipmentcubiclesfromacommonventduct,anddischargestheexhausttotheoutsideatmosphereviatheventstack.Eachtrainconsistsofaroughingfilter,highefficiencyparticulateair(HEPA)filters,andanormallyclosedpneumaticallyoperatedfacedamper.Inaddition,eachtraincontainsabypassductwithanormallyopenpneumaticallyoperatedbypassdamperwhichdirectsairflowaroundthecharcoaladsorbers.Duringnormaloperation,onefan/filterunitoperatescontinuously,directingtheexhaustairthroughtheroughingandHEPAfilters,bypassingthecharcoalfilters,anddischargingtotheunitvent.Thisoperationaidsinairdistributionwithintheauxiliarybuilding,isolatestheatmosphereinthecubiciesbyinducingadraftthroughtheenteringportalsandremovesanyheatgeneratedwithintheenclosures.In1997,amodificationtothedampercontrolairsystemincludedtheinstallationofsolenoidvalvesintheairlinestothefaceandbypassdampers.Duringtheperformanceofsurveillancetest12OHP4030STP.25A/8,ontwoseparateoccasions,thefacedampersolenoidvalvefailed,resultinginthefacedamperfailingtoopenwhilethebypassdampersremainedclosed.Fornon-Slinitiatedevents,afailureofthefacedampersolenoidtoopenthe'facedamperorthebypassdampersolenoidtoopenthebypassdamperinresponsetoacontrolsignalcouldresultinboththefaceandbypass.dampersbeingintheclosedposition,blockingallairflowthroughtheaffectedtrain.IntheeventofaPhaseBIsolationsignal,thestandbytrainisenergizedandthebypassdampersautomaticallycloseandthefacedampersopentoexhaustairdirectlythroughthecharcoalfilters,roughingandHEPAfilters.AlthoughthesinglefailureofeitherthebypassorfacedampersolenoidvalvewouldrenderonetrainofAESinoperable,itwouldnotimpactthecapabilityofthestandbyfan/filtertrainfromperformingitssafetyandaccidentmitigationfunction.TheAESsystemdesignincludesthreevaneaxialsupplyfanslocatedintheCCWequipmentroomwhicharelocatedsidebyside,andconnectedtoacommonintakeplenumanddischargeduct.Becausevaneaxialfansaresusceptibletofanbladefailures,thefanbladesareapotentialmissilesourcewhichcouldimpactthefunctionofadjacentsafetyrelatedcomponents.Asaresult,failureoftheCCWpumpareasupplyfanscouldimpacttheabilityoftheAESsystemtomaintainESFcubicletemperaturestowithinequipmentdesigntemperatures,impactingthequalificationoftheESFequipment.BecauseofthenumeroussystemdeficienciesidentifiedduringtheESRR,acomprehensiveactionplanisbeingdevelopedtoevaluatetheidentifiedconditions.UntiltheaggregateeffectoftheseconditionsonAESsystemperformanceisevaluated,theoverallsafetyimpactcannotbedetermined.CorrectiveActionsAcomprehensiveactionplanisbeingdevelopedtodeterminetheauxiliarybuildingdesigntemperaturesrequiredtobemaintainedbytheauxiliarybuildingventilationsystems:Inaddition,asinglefailureanalysisfortheAESventilationsystemwillbeperformedtoidentifyfailureswhichcouldpreventthesystemfromperformingitsdesignandsafetyfunction.Basedontheresultsofthecompletedevaluation,additionalinformationregardingsafetysignificance,includingcorrectiveandpreventiveactionswillbeprovidedinanupdatetothisLER.PreviousSimilarEventsLER315/97-023-00NRCFORM366A(6-1998)}}
Thisconclusion wasbasedonapreliminary evaluation ofnumerousidentified systemdeficiencies takenintheaggregate.
Specifically, significant errorsincalculations forauxiliary buildingEngineered SafetyFeatures(ESF)cubicletemperatures expectedduringpostulated accidentscenarios, combinedwithsmalldesignmarginsthatexistedbetweencalculated roomtemperatures anddesignrequirements; vulnerability ofAESdampercontrolairsystemmodification tosinglefailure;andlackofmissileprotection fortheComponent CoolingWater(CCW)pumpareasupplyfanswhichcouldresultinasinglecatastrophic failure-generated missileimpacting bothtrainsofAES.Basedonthecombinedaffectsofthesedeficiencies, theabilityoftheUnit1and2AESsystemstomaintainauxiliary buildingtemperatures towithinsafety-related equipment designtemperatures underallaccidentconditions cannotbeassured.Inaccordance withtherequirements of10CFR50.72(b)(2)(iii)(D),
a4hournotification wasmadetotheNRConApril20,1999,at1645hours,foranyeventorcondition thatalonecouldhaveprevented thefulfillment ofthesafetyfunctionofstructures orsystemsthatareneededtomitigatetheconsequences ofanaccident.
CauseofEventThepreliminary causefortheuseofnon-conservative andincorrect assumptions inauxiliary buildingheatloadcalculations isduetoinadequate controlofsystemdesigninputs.Thisissuewaspreviously identified inAEP:NRC:1260GH, datedMarch19,1999,"Enforcement Actions98-150,98-151,98-152and98-186,ReplytoNoticeofViolation DatedOctober13,1998."Thepreliminary causeforAESdamperdesignsinglefailurevulnerability isfailureofthedesignchangeprocesstoidentifythepotential adverseimpactontheAESsystemcreatedbythemodification tothedampercontrolairsystemin1997.Thepreliminary causeforCCWpumpareasupplyfansusceptibility tomissileeffectsislackofacleardefinition indesignandlicensing documents regarding AESdesignrequirements forprotection againstmissileeffects.AnalsisofEventThisLERissubmitted inaccordance with10CFR50.73(a)(2)(v)(D) foracondition thatcouldpreventthefulfillment ofthesafetyfunctions oftheAESsystemthatareneededtomitigatetheconsequences ofanaccident:
TheAESsystemsafetyandaccidentmitigation functionistoprovidesufficient coolingtotheauxiliary buildinggeneralareasandESFequipment roomsrequiredtooperateduringaccidentconditions.
ThisincludestheCCW,Containment Spray,ResidualHeatRemoval,ChargingandSafetyInjection equipment rooms.TheAESsystemalsomaintains theauxiliary buildingatanegativepressurerelativetotheoutsideenvironment toensureradioactive contamination releasedduringanaccidentiscontained withintheauxiliary
: building, filteredandexhausted totheenvironment viaamonitored, releasepath.Inaddition, Technical Specification 3.7.6.1requiresthattwoindependent AESventilation systemfan/filter exhausttrainsbeoperableinModes1through4.Calculations weredeveloped toestablish theauxiliary buildingheatloads,ESFcubicleroomandgeneralareatemperatures duringnormal,shutdownandaccidentconditions.
DuringtheESRRreviewofthesecalculations, numerousdiscrepancies wereidentified.
Forexample,calculation ofauxiliary buildingareatemperature duringaccidentconditions NRCFORM366A(6-1996)
NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2) 05000-315 YEARLERNUMBER(6)SEQUENTIAL NUMBERREVISIONNUMBERPAGE(3)3of3199901200TEXT(ifmorespaceisrequired, useadditional copiesofNRCForm(366A)(17)didnotincludetheheatloadfortheCCWsystempiping.Thisequipment isconsidered asignificant heatloadintheauxiliary buildingandexcluding itfromthecalculation couldresultinnon-conservative auxiliary buildingareatemperature values.Inaddition, thesevaluesserveasinputassumptions tootherauxiliary buildingventilation calculations.
Asaresult,actualauxiliary buildingareaandESFcubicleroomtemperatures couldimpactthequalification oftheESFequipment locatedintheareasservedbytheAESandCCWpumpareaventilation systems.TheAESventilation systemconsistsoftwofan/filter exhausttrains(oneinstandby)whichdrawsairfromtheauxiliary buildingthroughtheequipment cubiclesfromacommonventduct,anddischarges theexhausttotheoutsideatmosphere viatheventstack.Eachtrainconsistsofaroughingfilter,highefficiency particulate air(HEPA)filters,andanormallyclosedpneumatically operatedfacedamper.Inaddition, eachtraincontainsabypassductwithanormallyopenpneumatically operatedbypassdamperwhichdirectsairflowaroundthecharcoaladsorbers.
Duringnormaloperation, onefan/filter unitoperatescontinuously, directing theexhaustairthroughtheroughingandHEPAfilters,bypassing thecharcoalfilters,anddischarging totheunitvent.Thisoperation aidsinairdistribution withintheauxiliary
: building, isolatestheatmosphere inthecubiciesbyinducingadraftthroughtheenteringportalsandremovesanyheatgenerated withintheenclosures.
In1997,amodification tothedampercontrolairsystemincludedtheinstallation ofsolenoidvalvesintheairlinestothefaceandbypassdampers.Duringtheperformance ofsurveillance test12OHP4030STP.25A/8, ontwoseparateoccasions, thefacedampersolenoidvalvefailed,resulting inthefacedamperfailingtoopenwhilethebypassdampersremainedclosed.Fornon-Slinitiated events,afailureofthefacedampersolenoidtoopenthe'facedamperorthebypassdampersolenoidtoopenthebypassdamperinresponsetoacontrolsignalcouldresultinboththefaceandbypass.dampersbeingintheclosedposition, blockingallairflowthroughtheaffectedtrain.IntheeventofaPhaseBIsolation signal,thestandbytrainisenergized andthebypassdampersautomatically closeandthefacedampersopentoexhaustairdirectlythroughthecharcoalfilters,roughingandHEPAfilters.AlthoughthesinglefailureofeitherthebypassorfacedampersolenoidvalvewouldrenderonetrainofAESinoperable, itwouldnotimpactthecapability ofthestandbyfan/filter trainfromperforming itssafetyandaccidentmitigation function.
TheAESsystemdesignincludesthreevaneaxial supplyfanslocatedintheCCWequipment roomwhicharelocatedsidebyside,andconnected toacommonintakeplenumanddischarge duct.Becausevaneaxial fansaresusceptible tofanbladefailures, thefanbladesareapotential missilesourcewhichcouldimpactthefunctionofadjacentsafetyrelatedcomponents.
Asaresult,failureoftheCCWpumpareasupplyfanscouldimpacttheabilityoftheAESsystemtomaintainESFcubicletemperatures towithinequipment designtemperatures, impacting thequalification oftheESFequipment.
Becauseofthenumeroussystemdeficiencies identified duringtheESRR,acomprehensive actionplanisbeingdeveloped toevaluatetheidentified conditions.
Untiltheaggregate effectoftheseconditions onAESsystemperformance isevaluated, theoverallsafetyimpactcannotbedetermined.
Corrective ActionsAcomprehensive actionplanisbeingdeveloped todetermine theauxiliary buildingdesigntemperatures requiredtobemaintained bytheauxiliary buildingventilation systems:Inaddition, asinglefailureanalysisfortheAESventilation systemwillbeperformed toidentifyfailureswhichcouldpreventthesystemfromperforming itsdesignandsafetyfunction.
Basedontheresultsofthecompleted evaluation, additional information regarding safetysignificance, including corrective andpreventive actionswillbeprovidedinanupdatetothisLER.PreviousSimilarEventsLER315/97-023-00 NRCFORM366A(6-1998)}}

Revision as of 09:14, 29 June 2018

LER 99-012-00:on 990420,concluded That Auxiliary Bldg ESF Ventilation Sys Not Capable of Maintaining ESF Room Temps post-accident.Caused by Inadequate Control of Sys Design Inputs.Comprehensive Action Plan Being Developed
ML17325B600
Person / Time
Site: Cook American Electric Power icon.png
Issue date: 05/20/1999
From: OROURKE B W
INDIANA MICHIGAN POWER CO.
To:
Shared Package
ML17325B598 List:
References
LER-99-012, LER-99-12, NUDOCS 9905260279
Download: ML17325B600 (4)


Text

NRCForm366U.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/characters foreachblock)APPROVEDBYOMBNo.3150.0104 EXPIRES06/30/2001 ESTIMATED BURDENPERRESPONSETOCOMPLYWITHTHISMANDATORY INFORMATION COLLECTION REOVESD50.0HRS.REPORTEDLESSONSLEARNEDAREINCORPORATED BJTOTHEUCEJISING PROCESSANDFEDBACKTOINDUSTRY.

FORWARDCOMMENTSREGARDUIG BURDENESTSJATETOTHEII&ORMATION ANORECORDSMANAGEMENT BRANCHIT4AS),V.S.NVCLEARRFGUIATORY COMMISSION.

WASHBJGTON.

OC205S54XI.

ANOTOTHEPAPERWORK REDUCTION PROJECTtst50410l),

OFFICEOFMANAGEMENT ANDBUCGEf,WASIeNGTceL DC2050$FACILITYNAMEI1)CookNuclearPlantUnit1DOCKETNUMBERr2)05000-315 PAGEI5)1of3TITLEI4)Auxiliary BuildingESFVentilation SystemMayNotbeCapableofMaintaining ESFRoomTemperatures Post-Accident MONTH04DAYYEAR201999EVENTDATE(5)YEAR1999LERNUMBER(8)SEQUENTIAL NUMBER012REVISIONNUMBER00REPORTDATE(7)MONTHDAYYEAR05201999ILID.C.Cook,Unit2AILINAM05000-316 DCNUMBEROTHERFACILITIES INVOLVED(8)OPERATING MODE(9)POWERLEVEL(10) 0%20.2201(b)20.2203(a)(1) 20.2203(a)(2)(i) 20.2203(a)(2)(v) 20.2203(a)(3)(i) 20.2203(a)(3)(ii) 50.73(a)(2)(l) 50.73(a)(2)(ii) 50.73(a)(2)(iii) 50.73(a)(2)(viii) 50.73(a)(2)(x) 73.71THISREPORTISSUBMITTED PURSUANTTOTHEREQUIREMENTS OF10CFRII:(Checkoneormore)(11)20.2203(a)(2)(ii) 20.2203(a)(2)(iii) 20.2203(a)(2)(iv) 20.2203(a)(4) 50.36(c)(1) 50.36(c)(2)

LICENSEECONTACTFORTHISLER(12)50.73(a)(2)(iv) 50.73(a)(2)(v) 50.73(a)(2)(vii)

OTHERSpecii/yInAbstractbekrrrornNRCForm366ANAMEMs.BrendaW.O'ourke,Compliance EngineerTELEPHONE NUMBER(IIK5udeAreaCode)(616)465-5901x2604COMPLETEONELINEFOREACHCOMPONENT FAILUREDESCRIBED INTHISREPORT(13).CAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE TOEPIXCAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE TOEPIXSUPPLEMENTAL REPORTEXPECTED(14XYES(IfYes,completeEXPECTEDSUBMISSION DATE)NOEXPECTEDSUBMISSION DATE15MONTH10DAY311999Abstract(Limitto1400spaces,I.e.,approximately 15singie-spaced typewritten lines)(16)OnApril20,1999,duringperformance oftheExpandedSystemReadiness Review(ESRR)fortheAuxiliary BuildingVentilation Systems,itwasconcluded thatthereisinsufficient assurance thattheEngineered SafetyFeaturesVentilation (AES)systemiscapableofperforming itssafetyandaccidentmitigation function.

Thisconclusion wasbasedonapreliminary evaluation ofnumerousidentified systemdeficiencies takenintheaggregate.

Specifically, significant errorsincalculations forauxiliary buildingEngineered SafetyFeaturescubicletemperatures expectedduringpostulated accidentscenarios, vulnerability ofAESdampercontrolairsystemmodification tosinglefailure;andlackofmissileprotection fortheComponent CoolingWaterpumpareasupplyfans.Basedonthecombinedeffectsofthesedeficiencies, theabilityoftheAESsystemtomaintainauxiliary buildingtemperatures towithinsafety-related equipment designtemperatures underaccidentconditions cannotbeassured.Thepreliminary causesforidentified conditions are:inadequate controlofsystemdesigninputs;failuretoadequately implement singlefailuredesigncriteriaduringthemodification process;andlackofacleardefinition indesignandlicensing documents regarding designrequirements forsystemprotection againstmissileeffects.Acomprehensive actionplanisbeingdeveloped todetermine theauxiliary buildingdesigntemperatures requiredtobemaintained bytheAESventilation system.Inaddition, asinglefailureanalysisfortheAESventilation systemwillbeperformed toidentifyfailuresthatcouldpreventthesystemfromperforming itsdesignandsafetyfunction.

Basedontheresultsofthecompleted evaluation, information regarding thesafetysignificance, andcorrective andpreventive actionswillbeprovidedinanupdatetothisLER.9905260279 990520PDRADOCK050003'l5 SPDR

NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2) 05000-315 YEARLERNUMBER(6)SEQUENTIAL NUMBERREVISIONNUMBERPAGE(3)2of3TEXT(Ifmorespaceisrequired, useadditional copiesofNRCForm(366A)(17)Conditions PriortoEventUnit1wasinMode5,ColdShutdownUnit2wasinMode5,ColdShutdown199901200DescritionofEventOnApril20,1999,duringperformance oftheExpandedSystemReadiness Review(ESRR)fortheAuxiliary BuildingVentilation Systems,itwasconcluded thatthereisinsufficient assurance thattheEngineered SafetyFeaturesVentilation (AES)systemiscapableofperforming itssafetyandaccidentmitigation function.

Thisconclusion wasbasedonapreliminary evaluation ofnumerousidentified systemdeficiencies takenintheaggregate.

Specifically, significant errorsincalculations forauxiliary buildingEngineered SafetyFeatures(ESF)cubicletemperatures expectedduringpostulated accidentscenarios, combinedwithsmalldesignmarginsthatexistedbetweencalculated roomtemperatures anddesignrequirements; vulnerability ofAESdampercontrolairsystemmodification tosinglefailure;andlackofmissileprotection fortheComponent CoolingWater(CCW)pumpareasupplyfanswhichcouldresultinasinglecatastrophic failure-generated missileimpacting bothtrainsofAES.Basedonthecombinedaffectsofthesedeficiencies, theabilityoftheUnit1and2AESsystemstomaintainauxiliary buildingtemperatures towithinsafety-related equipment designtemperatures underallaccidentconditions cannotbeassured.Inaccordance withtherequirements of10CFR50.72(b)(2)(iii)(D),

a4hournotification wasmadetotheNRConApril20,1999,at1645hours,foranyeventorcondition thatalonecouldhaveprevented thefulfillment ofthesafetyfunctionofstructures orsystemsthatareneededtomitigatetheconsequences ofanaccident.

CauseofEventThepreliminary causefortheuseofnon-conservative andincorrect assumptions inauxiliary buildingheatloadcalculations isduetoinadequate controlofsystemdesigninputs.Thisissuewaspreviously identified inAEP:NRC:1260GH, datedMarch19,1999,"Enforcement Actions98-150,98-151,98-152and98-186,ReplytoNoticeofViolation DatedOctober13,1998."Thepreliminary causeforAESdamperdesignsinglefailurevulnerability isfailureofthedesignchangeprocesstoidentifythepotential adverseimpactontheAESsystemcreatedbythemodification tothedampercontrolairsystemin1997.Thepreliminary causeforCCWpumpareasupplyfansusceptibility tomissileeffectsislackofacleardefinition indesignandlicensing documents regarding AESdesignrequirements forprotection againstmissileeffects.AnalsisofEventThisLERissubmitted inaccordance with10CFR50.73(a)(2)(v)(D) foracondition thatcouldpreventthefulfillment ofthesafetyfunctions oftheAESsystemthatareneededtomitigatetheconsequences ofanaccident:

TheAESsystemsafetyandaccidentmitigation functionistoprovidesufficient coolingtotheauxiliary buildinggeneralareasandESFequipment roomsrequiredtooperateduringaccidentconditions.

ThisincludestheCCW,Containment Spray,ResidualHeatRemoval,ChargingandSafetyInjection equipment rooms.TheAESsystemalsomaintains theauxiliary buildingatanegativepressurerelativetotheoutsideenvironment toensureradioactive contamination releasedduringanaccidentiscontained withintheauxiliary

building, filteredandexhausted totheenvironment viaamonitored, releasepath.Inaddition, Technical Specification 3.7.6.1requiresthattwoindependent AESventilation systemfan/filter exhausttrainsbeoperableinModes1through4.Calculations weredeveloped toestablish theauxiliary buildingheatloads,ESFcubicleroomandgeneralareatemperatures duringnormal,shutdownandaccidentconditions.

DuringtheESRRreviewofthesecalculations, numerousdiscrepancies wereidentified.

Forexample,calculation ofauxiliary buildingareatemperature duringaccidentconditions NRCFORM366A(6-1996)

NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION (6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBER(2) 05000-315 YEARLERNUMBER(6)SEQUENTIAL NUMBERREVISIONNUMBERPAGE(3)3of3199901200TEXT(ifmorespaceisrequired, useadditional copiesofNRCForm(366A)(17)didnotincludetheheatloadfortheCCWsystempiping.Thisequipment isconsidered asignificant heatloadintheauxiliary buildingandexcluding itfromthecalculation couldresultinnon-conservative auxiliary buildingareatemperature values.Inaddition, thesevaluesserveasinputassumptions tootherauxiliary buildingventilation calculations.

Asaresult,actualauxiliary buildingareaandESFcubicleroomtemperatures couldimpactthequalification oftheESFequipment locatedintheareasservedbytheAESandCCWpumpareaventilation systems.TheAESventilation systemconsistsoftwofan/filter exhausttrains(oneinstandby)whichdrawsairfromtheauxiliary buildingthroughtheequipment cubiclesfromacommonventduct,anddischarges theexhausttotheoutsideatmosphere viatheventstack.Eachtrainconsistsofaroughingfilter,highefficiency particulate air(HEPA)filters,andanormallyclosedpneumatically operatedfacedamper.Inaddition, eachtraincontainsabypassductwithanormallyopenpneumatically operatedbypassdamperwhichdirectsairflowaroundthecharcoaladsorbers.

Duringnormaloperation, onefan/filter unitoperatescontinuously, directing theexhaustairthroughtheroughingandHEPAfilters,bypassing thecharcoalfilters,anddischarging totheunitvent.Thisoperation aidsinairdistribution withintheauxiliary

building, isolatestheatmosphere inthecubiciesbyinducingadraftthroughtheenteringportalsandremovesanyheatgenerated withintheenclosures.

In1997,amodification tothedampercontrolairsystemincludedtheinstallation ofsolenoidvalvesintheairlinestothefaceandbypassdampers.Duringtheperformance ofsurveillance test12OHP4030STP.25A/8, ontwoseparateoccasions, thefacedampersolenoidvalvefailed,resulting inthefacedamperfailingtoopenwhilethebypassdampersremainedclosed.Fornon-Slinitiated events,afailureofthefacedampersolenoidtoopenthe'facedamperorthebypassdampersolenoidtoopenthebypassdamperinresponsetoacontrolsignalcouldresultinboththefaceandbypass.dampersbeingintheclosedposition, blockingallairflowthroughtheaffectedtrain.IntheeventofaPhaseBIsolation signal,thestandbytrainisenergized andthebypassdampersautomatically closeandthefacedampersopentoexhaustairdirectlythroughthecharcoalfilters,roughingandHEPAfilters.AlthoughthesinglefailureofeitherthebypassorfacedampersolenoidvalvewouldrenderonetrainofAESinoperable, itwouldnotimpactthecapability ofthestandbyfan/filter trainfromperforming itssafetyandaccidentmitigation function.

TheAESsystemdesignincludesthreevaneaxial supplyfanslocatedintheCCWequipment roomwhicharelocatedsidebyside,andconnected toacommonintakeplenumanddischarge duct.Becausevaneaxial fansaresusceptible tofanbladefailures, thefanbladesareapotential missilesourcewhichcouldimpactthefunctionofadjacentsafetyrelatedcomponents.

Asaresult,failureoftheCCWpumpareasupplyfanscouldimpacttheabilityoftheAESsystemtomaintainESFcubicletemperatures towithinequipment designtemperatures, impacting thequalification oftheESFequipment.

Becauseofthenumeroussystemdeficiencies identified duringtheESRR,acomprehensive actionplanisbeingdeveloped toevaluatetheidentified conditions.

Untiltheaggregate effectoftheseconditions onAESsystemperformance isevaluated, theoverallsafetyimpactcannotbedetermined.

Corrective ActionsAcomprehensive actionplanisbeingdeveloped todetermine theauxiliary buildingdesigntemperatures requiredtobemaintained bytheauxiliary buildingventilation systems:Inaddition, asinglefailureanalysisfortheAESventilation systemwillbeperformed toidentifyfailureswhichcouldpreventthesystemfromperforming itsdesignandsafetyfunction.

Basedontheresultsofthecompleted evaluation, additional information regarding safetysignificance, including corrective andpreventive actionswillbeprovidedinanupdatetothisLER.PreviousSimilarEventsLER315/97-023-00 NRCFORM366A(6-1998)