ML17321A932: Difference between revisions
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
||
Line 18: | Line 18: | ||
=Text= | =Text= | ||
{{#Wiki_filter:SAIC-85/1524- | {{#Wiki_filter:SAIC-85/1524-4 REVIEWOFLICENSEEANDAPPLICANT RESPONSES TONRCGENERICLETTER83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"POST-TRIP REVIEW:DATAANDINFORMATION CAPABILITIES" FORDONALDC.COOKNUCLEARPOWERPLANT,UNITS152(50-315,50-316)Technical Evaluation ReportPreparedbyScienceApplications International Corporation 1710Goodridge DriveMcLean,Virginia22102PreparedforU.S.NuclearRegulatory Commission Washington, D.C.20555ContractNo.NRC-03-82-096 8510310032'51017~ | ||
PDRADQCK05000315. | |||
PPDR FOREWORDThisreportcontainsthetechnical evaluation oftheDonaldC.CookNuclearPowerPlant,Units152responsetoGenericLetter83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"PostTripReview:DataandInformation Capabilities." | |||
1.BackroundOnFebruary25,1984, | Forthepurposesofthisevaluation, thereviewcriteria, presented inpart2ofthisreport,weredividedintofives'eparate categories. | ||
~Eachsequence-of- | Theseare:1.Theparameters monitored bythesequenceofeventsandthetimehistoryrecorders, 2.Theperformance characteristics ofthesequenceofeventsrecorders, 3.Theperformance characteristics ofthetimehistoryrecorders, 4.Thedataoutputformat,and5.Thelong-term dataretention capability forpost-trip reviewmaterial. | ||
Table1.2-1. | Allavailable responses toGenericLetter83-28wereevaluated. | ||
Table1.2-2. | Theplantforwhichthisreportisapplicable wasfoundtohaveadequately responded to,andmet,categories 2and4.Thereportdescribes thespecificmethodsusedtodetermine thecate-gorization oftheresponses toGenericLetter83-28.Sincethisevaluation reportwasintendedtoapplytomorethanonenuclearpowerplantspecifics regarding howeachplantmet(orfailedtomeet)thereviewcriteriaarenotpresented. | ||
3. | Instead,. | ||
4. | theevaluation presentsacategorization oftheresponses according towhichcategories ofreviewcriteriaaresatisfied andwhicharenot.Theevaluations arebasedonspecificcriteria(Section2)derivedfromtherequirements asstatedinthegenericletter. | ||
TABLEOFCONTENTSSectionPageIntroductf ono~~~~~~~~~~~~~~~~~~~~~~~~11.Background. | |||
IV\ | ................~~~~~~~~~22.ReviewCriteria.............,,, | ||
33.Evaluation................. | |||
~~~~~~~~~84.Conclusions | |||
~~~~~~~~~~~~~~~~~~~~~~~~~95.References................. | |||
4.FOP/0~~potu+e~Pb<Pete~~10~I/ | |||
INTRODUCTION SAIChasreviewedtheutility's responsetoGenericLetter83-28,item1.2"Post-Trip Review:DataandInformation Capability." | |||
Theresponse(seereferences) contained sufficient information todetermine thatthedataandinformation capabilities attheseplantsareacceptable inthefollowing areas.~Thesequence-of-events recorder(s) performance charac-teristics. | |||
~Theoutputformatoftherecordeddata.However,thedataandinformation capabilities, asdescribed inthesubmittal, eitherfailtomeetthereviewcriteriaorprovideinsufficient information toallowdetermination oftheadequacyofthedataandinformation capabilities inthefollowing areas.~Theparameters monitored byboththesequence-of-events andtimehistoryrecorders. | |||
~Thetimehistoryrecorder(s) performance characteris-tics.~Thelong-term dataretention, recordkeeping,capa-bility. | |||
1.BackroundOnFebruary25,1984,bothofthescramcircuitbreakersatUnit1oftheSalemNuclearPowerPlantfailedtoopenuponanautomatic reactortripsignalfromthereactorprotection system.Thisincidentoccurredduringtheplantstartupandthereactorwastrippedmanuallybytheoperator,. | |||
about30secondsaftertheinitiation oftheautomatic tripsignal.Thefailureofthecircuitbreakershasbeendetermined toberelatedtothestickingoftheundervoltagetripattachment. | |||
Pri~rtothisincident; onFebruary22,1983;atUnit1oftheSalemNuclearPowerPlantanautomatic tripsignalwasgenerated basedonsteamgenerator low-lowlevelduringplantstartup.Inthiscasethereactorwastrippedmanuallybytheoperatoralmostcoinci-dentallywiththeautomatic trip.Atthattime,becausetheutilitydidnothavearequirement forthesystematic evaluation ofthereactortrip,noinvestigation wasperformed todetermine whetherthereactorwastrippedautomatically asexpectedormanually. | |||
Theutilities'ritten procedures requiredonlythatthecauseofthetripbedetermined andidentified theresponsible personnel thatcouldauthorize arestartifthecauseofthetripisknown.Following thesecondtripwhichclearlyindicated theproblemwiththetripbreakers, thequestionwasraisedonwhetherthecircuitbreakershadfunctioned properlyduringtheearlierincident. | |||
Themostusefulsourceofinformation inthiscase,namelythesequenceofeventsprintoutwhichwouldhaveindicated whetherthereactorwastrippedautomatically ormanuallyduringtheFebruary22incident, wasnotretainedaftertheincident. | |||
Thus,nojudgmentonthe,properfunctioning ofthetripsystemduringtheearlierincidentcouldbemade.Following theseincidents; onFebruary28,1983;theNRCExecutive | |||
'.~wDirectorforOperations (EDO),directedthestafftoinvestigate andreportonthegenericimplications oftheseoccurrences atUnit1oftheSalemNuclearPowerPlant.Theresultsofthestaff'sinquiryintothegenericimplications oftheSalemUnitincidents isreportedinNUREG-1000, "GenericImplications ofATWSEventsattheSalemNuclearPowerPlant."Basedontheresultsofthisstudy,asetofrequiredactionsweredeveloped andincludedinGenericLetter83-28whichwasissuedonJuly8,1983andsenttoalllicensees ofoperating | |||
: reactors, applicants foroperating license,andconstruction permitholders.Therequiredactionsinthisgenericletterconsistoffourcategories. | |||
Theseare:(1)Post-Trip Review,(2)Equipment Classification andVenderInterface, (3)PostMaintenance Testing,and(4)ReactorTripSystemReliability Improvements. | |||
Thefirstrequiredactionofthegenericletter,Post-Trip Review,isthesubjectofthisTERandconsistsofactionitem1.1"ProgramDescription andProcedure" andactionitem1.2"DataandInformation Capability." | |||
Inthenextsectionthereviewcriteriausedtoassesstheadequacyoftheutilities'esponses totherequirements ofactionitem1.2willbediscussed. | |||
~2.ReviewCriteriaTheintentofthePostTripReviewrequirements ofGenericLetter83-28istoensurethatthelicenseehasadequateprocedures anddataandinformation sourcestounderstand thecause(s)andprogression ofareactortrip.Thisunderstanding shouldgobeyondasimpleidentification ofthecourseoftheevent.Itshouldincludethe'apability todetermine therootcauseofthereactortripandtodetermine whethersafetylimitshavebeenexceededandifsotowhatextent.Sufficient information aboutthereactortripeventshouldbeavailable sothatadecisionontheacceptability ofareactorrestartcanbemade.Thefollowing arethereviewcriteriadeveloped fortherequirements ofGenericLetter83-28,actionitem1.2:Theequipment thatprovidesthedigitalsequenceofevents(SOE)recordandtheanalogtimehistoryrecordsofanunscheduled shutdownshouldpro-videareliablesourceofthenecessary information tobeusedintheposttripreview.Eachplantvariablewhichisnecessary todetermine thecause(s)andprogression oftheevent(s)following aplanttripshouldbemonitored byatleastonerecorder[suchasasequence-of-events recorderoraplantprocesscomputerfordigitalparameters; andstripcharts,aplantprocesscomputeroranalogrecorderforanalog(timehistory)variables]. | |||
Eachdeviceusedtorecordananalogordigitalplantvariableshouldbedescribed insufficient detailsothatadetermination canbemadeastowhetherthefollowing performance characteristics aremet: | |||
~Eachsequence-of-events recordershouldbecapableofdetecting andrecording thesequenceofeventswithasufficient timediscrimination capability toensurethatthetimeresponses asso-ciatedwitheachmonitored safety-related systemcanbeascer-tained,andthatadetermination canbemadeastowhetherthetimeresponseiswithinacceptable limitsbasedonFSARChapter15AccidentAnalyses. | |||
Therecommended guideline fortheSOEtimediscrimination isapproximately 100msec.IfcurrentSOErecorders donothavethistimediscrimination capability thelicenseeorapplicant shouldshowthatthecurrenttimediscrimi-nationcapability issufficient foranadequatereconstruction ofthecourseofthereactortrip.Asaminimumthisshouldincludetheabilitytoadequately reconstruct theaccidentscenarios pre-sentedinChapter15oftheplantFSAR.~Eachanalogtimehistorydatarecordershouldhaveasampleinter-valsmallenoughsothattheincidentcanbeaccurately reconstructed following areactortrip.Asaminimum,thelicenseeorapplicant shouldbeabletoreconstruct thecourseoftheaccidentsequences evaluated intheaccidentanalysisoftheplantFSAR(Chapter15).Therecommended guideline forthesampleintervalis10sec.Ifthetimehistoryequipment doesnotmeetthisguideline, thelicenseeorapplicant shouldshowthatthecurrenttimehistorycapability issufficient toaccurately recon-structtheaccidentsequences presented inChapter15oftheFSAR.~Tosupporttheposttripanalysisofthecauseofthetripandtheproperfunctioning ofinvolvedsafetyrelatedequipment, eachanalogtimehistorydatarecordershouldbec'apableofupdatingandretaining information fromapproximately fiveminutespriortothetripuntilatleasttenminutesafterthetrip.Theinformation gatheredbythesequence-of-events andtimehistorydatacollectors shouldbestoredinamannerthatwillallowforretrieval andanalysis. | |||
Thedatamayberetainedineitherhardcopy(computer | |||
: printout, stripchartoutput;etc.)orinanaccessible memory(magnetic discortape).Thisinformation shouldbepresented inareadableandmeaningful format,taking intoconsideration goodhumanfactorspractices (suchasthoseoutlinedinNUREG-0700). | |||
~Allequipment usedtorecordsequenceofeventsandtimehistoryinformat'ion shouldbepoweredfromareliableandnon-interruptibl epowersource.Thepowersourceusedneednotbesafetyrelated.Thesequenceofeventsandtimehistoryrecording equipment shouldmonitorsufficient digitalandanalogparameters, respectively, toassurethatthecourseofthereactortripcanbereconstructed. | |||
Theparameters monitored shouldprovidesufficient information todetermine therootcauseofthereactortrip,theprogression ofthereactortrip,andtheresponseoftheplantparameters andsystemstothereactortrip.Specifically, allinputparameters associated withreactortrips,safetyinjections andothersafety-related systemsaswellasoutputparameters sufficient torecordtheproperfunctioning ofthesesystemsshouldberecordedforuseintheposttripreview.Theparameters deemednecessary, asaminimum,toperformapost-trip review(onethatwoulddetermine iftheplantremainedwithinitsdesignenvelope) arepresented onTables1.2-'1and1.2-2.Iftheappli-cants'rlicensees'OE recorders andtimehistoryrecorders donotmonitoralloftheparameters suggested inthesetablestheapplicant orlicenseeshouldshowthattheexistingsetofmonitored parameters aresufficient toestablish thattheplantremainedwithinthedesignenvelopefortheappro-priateaccidentconditions; suchasthoseanalyzedinChapter15oftheplantSafetyAnalysisReport.Information gatheredduringtheposttripreviewisrequiredinputforfutureposttripreviews.Datafromallunscheduled shutdowns providesavaluablereference sourceforthedetermination oftheacceptability oftheplantvitalparameter andequipment responsetofutureunscheduled shut-downs.Itistherefore necessary thatinformation gatheredduringallposttripreviewsbemaintained inanaccessible mannerforthelifeoftheplant. | |||
Table1.2-1.PWRParameterListSOERecorderTimeHistoryRecorderParameter Sinalx(1)xx(1)xx(1)xx(2)(1)x(1)x(1)x(1)x(1)x(3)xx(1)x(1)x(1)x(3)ReactorTripSafetyinjection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop, On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder. | |||
(3):Acceptable recorderopionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder. | |||
Table1.2-2.BMRParameter ListSOERecorderTimeHistoryRecorderParameter | |||
/Sinalxxxxxx(1).x(1}(2)x(1)(2)x(1)x(1)xx(1}X(3)x(1)x(1)(3)(4)ReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerHainSteamRadiation Containment (DryMell)Radiation OrywellPressure(Containment Pressure)- | |||
Suppression PoolTemperature PrimarySystemPressurePrimarySystemLevelMSIVPositionTurbineStopValve/Control ValvePositionTurbineBypassValvePositionFeedwater FlowSteamFlowRecirculation; Flow,PumpStatusScramOischarge LevelCondenser VacuumACandOCSystemStatus(BusVoltage)SafetyInjection; Flow,Pump/Valve StatusDieselGenerator Status(On/Off,Start/Stop) | |||
(1):Tripparameters. | |||
(2):Parameter mayberecordedbyeitheranSOEortimehistoryrecorder. | |||
(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder. | |||
(b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder. | |||
(4):Includesrecording ofparameters forallapplicable systemsfromthefollowing: | |||
HPCI,LPCI,LPCS.IC.RCIC. | |||
3.Evaluation Theparameters identified inpart2ofthisreportasapartofthereviewcriteriaarethosedeemednecessary toperformanadequatepost-trip review.Therecording oftheseparameters onequipment thatmeetstheguidelines ofthereviewcriteriawillresultinasourceofinfor'mation thatcanbeusedtodetermine thecauseofthereactortripandtheplantresponsetothetrip,including theresponses ofimportant plantsystems.Theparameters identified inthissubmittal asbeingrecordedbythesequenceofeventsandtimehistoryrecorders donotcorrespond totheparameters specified inpart2ofthisreport.Thereviewcriteriarequirethattheequipment beingusedtorecordthesequenceofeventsandtimehistorydatarequiredforapost-trip reviewmeetcertainPerformance characteristics. | |||
Thesecharacteristics areintendedtoensurethat,iftheproperparameters arerecorded, therecord-ingequipment willpr'ovideanadequatesourceofinformation foraneffec-tivepost-trip review.Theinformation providedinthissubmittal doesnotindicatethatthetimehistoryequipment usedwouldmeettheintentoftheperformancecriteriaoutlinedinpart2ofthisreport.Information suppliedinthesubmittal doesindicatethattheSOEequipment meetstheperformance criteriaspecified inpart2ofthisreport.Thedataandinformation recordedforuseinthepast-trip reviewshouldbeoutputinaformatthatallowsforeaseofidentification anduseofthedatatomeetthereviewcriterion thatcallsforinformation inareadableandmeaningful format.Theinformation contained inthissubmittal indicates thatthiscriterion ismet.Thedataandinformation usedduri'ngapost-trip reviewshouldberetainedaspartoftheplantfiles.Thisinformation couldproveusefulduringfuturepost-trip reviews.Therefore, onecriterion isthatinfor-mationusedduringapost-trip reviewbemaintained inanaccessible mannerforthelifeoftheplant.Theinformation contained withinthissubmittal doesnotindicatethatthiscriterion willbemet. | |||
4.Conclusion Theinformation suppliedinresponsetoGenericLetter83-28indicates thatthecurrentpost-trip reviewdataandinformation capabilities areadeauateinthefollowing areas:1.Therecordeddataisoutputinareadableandmeaningful format.2.Thesequenceofeventsrecorders meettheminimumperformance characteristics. | |||
Theinformation suppliedinresponsetoGenericLetter83-28doesnotindicatethatthepost-trip reviewdataandinformation capabilities areadequateinthefollowing areas:l.8asedupontheinformation contained inthesubmittal, alloftheparameters specified inpart2ofthisreportthatshouldberecordedforuseinapost-trip reviewarenotrecorded. | |||
2.Timehistoryrecorders, asdescribed inthesubmittal, donotmeettheminimumperformance characteristics. | |||
3.Thedataretention procedures, asdescribed inthesubmittal, maynotensurethattheinformation recordedforthepost-trip reviewismaintained inanaccessible mannerforthelifeoftheplant.Itispossiblethatthecurrentdataandinformation capabilities atthisnuclearpowerplantareadequatetomeettheintentofthesereviewcriteria, butwerenotcompletely described. | |||
Underthesecircumstances, thelicenseeshouldprovideanupdated,morecomplete, description toshowinmoredetailthedataandinformation capabilities atthisnuclearpowerplant.Iftheinformation providedaccurately represents allcurrentdataandinformation capabilities, thenthelicenseeshouldshowthatthedataandinformation capabilities meettheintentofthecriteriainpart2ofthisreport,ordetailfuturemodifications thatwouldenablethelicenseetomeettheintentoftheevaluation criteria. | |||
REFERENCES NRCGenericLetter83-28."Lettertoalllicensees ofoperating | |||
: reactors, applicants foroperating license,andholdersofconstruction permitsregarding RequiredActionsBasedonGenericImplications ofSalemASSEvents."July8,1983.NUREG-1000, GenericImplications ofATMSEventsattheSalemNuclearPowerPlant,April1983.LetterfromM.P.Alexich,IndianaandMichiganElectricCompany,toD.G.Eisenhut, NRC,ofNovember4,1983,Accession Number8311110162 inresponsetoGenericLetter83-28ofJuly8,1983,withattachment. | |||
10 D.C.Cook1.Parameters recorded: | |||
Unsatisfactory Seeattachedtablefordiscrepancies. | |||
2.SOErecorders performance characteristics: | |||
Satisfactory HathawayOperations SequenceMonitor;2mstimediscrimination poweredfromabalanceofplant(non1E)inverterEsterline AngusTurbineEventMonitor:20mstimediscrimination poweredfromabalanceofplant(non1E)inverterHathawayOscillograph: | |||
5-10mstimediscrimination poweredfromabal-anceofplant(non1E)inverterSequenceofEventsRecorder: | |||
(plantcomputer)16.7msectimediscrimination powered.throughaninvertersuppliedbyABbatteryand'600voltbusllB.3.Timehistoryrecorders performance characteristics: | |||
Unsatisfactory-Plantprocesscomputer: | |||
Allparameters arerecordedat8secintervals for2minutesbeforeand3minutesafterthetrip;someat2secintervals for6secpre-andpost-trip Stripcharts:minimalinformation provided4.Dataoutputformat:Satisfactory SOE:Hathawayequipment isstripcharttypeseparatechartsforeacheventwithon/offindication vs.timeSOErecorder: | |||
outputincludestime,descriptor andsensorID,Analog:outputincludestime,parameter name,ptIDandparameter value5.Dataretention capability: | |||
Unsatisfactory Dataisretainedbutforanunspecified period. | |||
IV\Desirable PWRParameters forPost-Trip Review(circledparameters arenotrecorded) | |||
SOERecorderTimeHistoryRecorderParameter Sinal(1)xQx(1)xQx(1)xx2(1)Qx(1)x(1)x(1)x(1)x3QxQx(1)x(1)x(1)x3QxQxQxReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop. | |||
On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder. | |||
(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder. | |||
or(c)equipment statusrecordedonanSOErecorder.}} |
Revision as of 09:42, 29 June 2018
ML17321A932 | |
Person / Time | |
---|---|
Site: | Cook ![]() |
Issue date: | 10/17/1985 |
From: | SCIENCE APPLICATIONS INTERNATIONAL CORP. (FORMERLY |
To: | NRC |
Shared Package | |
ML17321A931 | List: |
References | |
CON-NRC-03-82-096, CON-NRC-3-82-96 GL-83-28, SAIC-85-1524-4, NUDOCS 8510310032 | |
Download: ML17321A932 (15) | |
Text
SAIC-85/1524-4 REVIEWOFLICENSEEANDAPPLICANT RESPONSES TONRCGENERICLETTER83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"POST-TRIP REVIEW:DATAANDINFORMATION CAPABILITIES" FORDONALDC.COOKNUCLEARPOWERPLANT,UNITS152(50-315,50-316)Technical Evaluation ReportPreparedbyScienceApplications International Corporation 1710Goodridge DriveMcLean,Virginia22102PreparedforU.S.NuclearRegulatory Commission Washington, D.C.20555ContractNo.NRC-03-82-096 8510310032'51017~
PDRADQCK05000315.
PPDR FOREWORDThisreportcontainsthetechnical evaluation oftheDonaldC.CookNuclearPowerPlant,Units152responsetoGenericLetter83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"PostTripReview:DataandInformation Capabilities."
Forthepurposesofthisevaluation, thereviewcriteria, presented inpart2ofthisreport,weredividedintofives'eparate categories.
Theseare:1.Theparameters monitored bythesequenceofeventsandthetimehistoryrecorders, 2.Theperformance characteristics ofthesequenceofeventsrecorders, 3.Theperformance characteristics ofthetimehistoryrecorders, 4.Thedataoutputformat,and5.Thelong-term dataretention capability forpost-trip reviewmaterial.
Allavailable responses toGenericLetter83-28wereevaluated.
Theplantforwhichthisreportisapplicable wasfoundtohaveadequately responded to,andmet,categories 2and4.Thereportdescribes thespecificmethodsusedtodetermine thecate-gorization oftheresponses toGenericLetter83-28.Sincethisevaluation reportwasintendedtoapplytomorethanonenuclearpowerplantspecifics regarding howeachplantmet(orfailedtomeet)thereviewcriteriaarenotpresented.
Instead,.
theevaluation presentsacategorization oftheresponses according towhichcategories ofreviewcriteriaaresatisfied andwhicharenot.Theevaluations arebasedonspecificcriteria(Section2)derivedfromtherequirements asstatedinthegenericletter.
TABLEOFCONTENTSSectionPageIntroductf ono~~~~~~~~~~~~~~~~~~~~~~~~11.Background.
................~~~~~~~~~22.ReviewCriteria.............,,,
33.Evaluation.................
~~~~~~~~~84.Conclusions
~~~~~~~~~~~~~~~~~~~~~~~~~95.References.................
4.FOP/0~~potu+e~Pb<Pete~~10~I/
INTRODUCTION SAIChasreviewedtheutility's responsetoGenericLetter83-28,item1.2"Post-Trip Review:DataandInformation Capability."
Theresponse(seereferences) contained sufficient information todetermine thatthedataandinformation capabilities attheseplantsareacceptable inthefollowing areas.~Thesequence-of-events recorder(s) performance charac-teristics.
~Theoutputformatoftherecordeddata.However,thedataandinformation capabilities, asdescribed inthesubmittal, eitherfailtomeetthereviewcriteriaorprovideinsufficient information toallowdetermination oftheadequacyofthedataandinformation capabilities inthefollowing areas.~Theparameters monitored byboththesequence-of-events andtimehistoryrecorders.
~Thetimehistoryrecorder(s) performance characteris-tics.~Thelong-term dataretention, recordkeeping,capa-bility.
1.BackroundOnFebruary25,1984,bothofthescramcircuitbreakersatUnit1oftheSalemNuclearPowerPlantfailedtoopenuponanautomatic reactortripsignalfromthereactorprotection system.Thisincidentoccurredduringtheplantstartupandthereactorwastrippedmanuallybytheoperator,.
about30secondsaftertheinitiation oftheautomatic tripsignal.Thefailureofthecircuitbreakershasbeendetermined toberelatedtothestickingoftheundervoltagetripattachment.
Pri~rtothisincident; onFebruary22,1983;atUnit1oftheSalemNuclearPowerPlantanautomatic tripsignalwasgenerated basedonsteamgenerator low-lowlevelduringplantstartup.Inthiscasethereactorwastrippedmanuallybytheoperatoralmostcoinci-dentallywiththeautomatic trip.Atthattime,becausetheutilitydidnothavearequirement forthesystematic evaluation ofthereactortrip,noinvestigation wasperformed todetermine whetherthereactorwastrippedautomatically asexpectedormanually.
Theutilities'ritten procedures requiredonlythatthecauseofthetripbedetermined andidentified theresponsible personnel thatcouldauthorize arestartifthecauseofthetripisknown.Following thesecondtripwhichclearlyindicated theproblemwiththetripbreakers, thequestionwasraisedonwhetherthecircuitbreakershadfunctioned properlyduringtheearlierincident.
Themostusefulsourceofinformation inthiscase,namelythesequenceofeventsprintoutwhichwouldhaveindicated whetherthereactorwastrippedautomatically ormanuallyduringtheFebruary22incident, wasnotretainedaftertheincident.
Thus,nojudgmentonthe,properfunctioning ofthetripsystemduringtheearlierincidentcouldbemade.Following theseincidents; onFebruary28,1983;theNRCExecutive
'.~wDirectorforOperations (EDO),directedthestafftoinvestigate andreportonthegenericimplications oftheseoccurrences atUnit1oftheSalemNuclearPowerPlant.Theresultsofthestaff'sinquiryintothegenericimplications oftheSalemUnitincidents isreportedinNUREG-1000, "GenericImplications ofATWSEventsattheSalemNuclearPowerPlant."Basedontheresultsofthisstudy,asetofrequiredactionsweredeveloped andincludedinGenericLetter83-28whichwasissuedonJuly8,1983andsenttoalllicensees ofoperating
- reactors, applicants foroperating license,andconstruction permitholders.Therequiredactionsinthisgenericletterconsistoffourcategories.
Theseare:(1)Post-Trip Review,(2)Equipment Classification andVenderInterface, (3)PostMaintenance Testing,and(4)ReactorTripSystemReliability Improvements.
Thefirstrequiredactionofthegenericletter,Post-Trip Review,isthesubjectofthisTERandconsistsofactionitem1.1"ProgramDescription andProcedure" andactionitem1.2"DataandInformation Capability."
Inthenextsectionthereviewcriteriausedtoassesstheadequacyoftheutilities'esponses totherequirements ofactionitem1.2willbediscussed.
~2.ReviewCriteriaTheintentofthePostTripReviewrequirements ofGenericLetter83-28istoensurethatthelicenseehasadequateprocedures anddataandinformation sourcestounderstand thecause(s)andprogression ofareactortrip.Thisunderstanding shouldgobeyondasimpleidentification ofthecourseoftheevent.Itshouldincludethe'apability todetermine therootcauseofthereactortripandtodetermine whethersafetylimitshavebeenexceededandifsotowhatextent.Sufficient information aboutthereactortripeventshouldbeavailable sothatadecisionontheacceptability ofareactorrestartcanbemade.Thefollowing arethereviewcriteriadeveloped fortherequirements ofGenericLetter83-28,actionitem1.2:Theequipment thatprovidesthedigitalsequenceofevents(SOE)recordandtheanalogtimehistoryrecordsofanunscheduled shutdownshouldpro-videareliablesourceofthenecessary information tobeusedintheposttripreview.Eachplantvariablewhichisnecessary todetermine thecause(s)andprogression oftheevent(s)following aplanttripshouldbemonitored byatleastonerecorder[suchasasequence-of-events recorderoraplantprocesscomputerfordigitalparameters; andstripcharts,aplantprocesscomputeroranalogrecorderforanalog(timehistory)variables].
Eachdeviceusedtorecordananalogordigitalplantvariableshouldbedescribed insufficient detailsothatadetermination canbemadeastowhetherthefollowing performance characteristics aremet:
~Eachsequence-of-events recordershouldbecapableofdetecting andrecording thesequenceofeventswithasufficient timediscrimination capability toensurethatthetimeresponses asso-ciatedwitheachmonitored safety-related systemcanbeascer-tained,andthatadetermination canbemadeastowhetherthetimeresponseiswithinacceptable limitsbasedonFSARChapter15AccidentAnalyses.
Therecommended guideline fortheSOEtimediscrimination isapproximately 100msec.IfcurrentSOErecorders donothavethistimediscrimination capability thelicenseeorapplicant shouldshowthatthecurrenttimediscrimi-nationcapability issufficient foranadequatereconstruction ofthecourseofthereactortrip.Asaminimumthisshouldincludetheabilitytoadequately reconstruct theaccidentscenarios pre-sentedinChapter15oftheplantFSAR.~Eachanalogtimehistorydatarecordershouldhaveasampleinter-valsmallenoughsothattheincidentcanbeaccurately reconstructed following areactortrip.Asaminimum,thelicenseeorapplicant shouldbeabletoreconstruct thecourseoftheaccidentsequences evaluated intheaccidentanalysisoftheplantFSAR(Chapter15).Therecommended guideline forthesampleintervalis10sec.Ifthetimehistoryequipment doesnotmeetthisguideline, thelicenseeorapplicant shouldshowthatthecurrenttimehistorycapability issufficient toaccurately recon-structtheaccidentsequences presented inChapter15oftheFSAR.~Tosupporttheposttripanalysisofthecauseofthetripandtheproperfunctioning ofinvolvedsafetyrelatedequipment, eachanalogtimehistorydatarecordershouldbec'apableofupdatingandretaining information fromapproximately fiveminutespriortothetripuntilatleasttenminutesafterthetrip.Theinformation gatheredbythesequence-of-events andtimehistorydatacollectors shouldbestoredinamannerthatwillallowforretrieval andanalysis.
Thedatamayberetainedineitherhardcopy(computer
- printout, stripchartoutput;etc.)orinanaccessible memory(magnetic discortape).Thisinformation shouldbepresented inareadableandmeaningful format,taking intoconsideration goodhumanfactorspractices (suchasthoseoutlinedinNUREG-0700).
~Allequipment usedtorecordsequenceofeventsandtimehistoryinformat'ion shouldbepoweredfromareliableandnon-interruptibl epowersource.Thepowersourceusedneednotbesafetyrelated.Thesequenceofeventsandtimehistoryrecording equipment shouldmonitorsufficient digitalandanalogparameters, respectively, toassurethatthecourseofthereactortripcanbereconstructed.
Theparameters monitored shouldprovidesufficient information todetermine therootcauseofthereactortrip,theprogression ofthereactortrip,andtheresponseoftheplantparameters andsystemstothereactortrip.Specifically, allinputparameters associated withreactortrips,safetyinjections andothersafety-related systemsaswellasoutputparameters sufficient torecordtheproperfunctioning ofthesesystemsshouldberecordedforuseintheposttripreview.Theparameters deemednecessary, asaminimum,toperformapost-trip review(onethatwoulddetermine iftheplantremainedwithinitsdesignenvelope) arepresented onTables1.2-'1and1.2-2.Iftheappli-cants'rlicensees'OE recorders andtimehistoryrecorders donotmonitoralloftheparameters suggested inthesetablestheapplicant orlicenseeshouldshowthattheexistingsetofmonitored parameters aresufficient toestablish thattheplantremainedwithinthedesignenvelopefortheappro-priateaccidentconditions; suchasthoseanalyzedinChapter15oftheplantSafetyAnalysisReport.Information gatheredduringtheposttripreviewisrequiredinputforfutureposttripreviews.Datafromallunscheduled shutdowns providesavaluablereference sourceforthedetermination oftheacceptability oftheplantvitalparameter andequipment responsetofutureunscheduled shut-downs.Itistherefore necessary thatinformation gatheredduringallposttripreviewsbemaintained inanaccessible mannerforthelifeoftheplant.
Table1.2-1.PWRParameterListSOERecorderTimeHistoryRecorderParameter Sinalx(1)xx(1)xx(1)xx(2)(1)x(1)x(1)x(1)x(1)x(3)xx(1)x(1)x(1)x(3)ReactorTripSafetyinjection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop, On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder.
(3):Acceptable recorderopionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder.
Table1.2-2.BMRParameter ListSOERecorderTimeHistoryRecorderParameter
/Sinalxxxxxx(1).x(1}(2)x(1)(2)x(1)x(1)xx(1}X(3)x(1)x(1)(3)(4)ReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerHainSteamRadiation Containment (DryMell)Radiation OrywellPressure(Containment Pressure)-
Suppression PoolTemperature PrimarySystemPressurePrimarySystemLevelMSIVPositionTurbineStopValve/Control ValvePositionTurbineBypassValvePositionFeedwater FlowSteamFlowRecirculation; Flow,PumpStatusScramOischarge LevelCondenser VacuumACandOCSystemStatus(BusVoltage)SafetyInjection; Flow,Pump/Valve StatusDieselGenerator Status(On/Off,Start/Stop)
(1):Tripparameters.
(2):Parameter mayberecordedbyeitheranSOEortimehistoryrecorder.
(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder.
(b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder.
(4):Includesrecording ofparameters forallapplicable systemsfromthefollowing:
3.Evaluation Theparameters identified inpart2ofthisreportasapartofthereviewcriteriaarethosedeemednecessary toperformanadequatepost-trip review.Therecording oftheseparameters onequipment thatmeetstheguidelines ofthereviewcriteriawillresultinasourceofinfor'mation thatcanbeusedtodetermine thecauseofthereactortripandtheplantresponsetothetrip,including theresponses ofimportant plantsystems.Theparameters identified inthissubmittal asbeingrecordedbythesequenceofeventsandtimehistoryrecorders donotcorrespond totheparameters specified inpart2ofthisreport.Thereviewcriteriarequirethattheequipment beingusedtorecordthesequenceofeventsandtimehistorydatarequiredforapost-trip reviewmeetcertainPerformance characteristics.
Thesecharacteristics areintendedtoensurethat,iftheproperparameters arerecorded, therecord-ingequipment willpr'ovideanadequatesourceofinformation foraneffec-tivepost-trip review.Theinformation providedinthissubmittal doesnotindicatethatthetimehistoryequipment usedwouldmeettheintentoftheperformancecriteriaoutlinedinpart2ofthisreport.Information suppliedinthesubmittal doesindicatethattheSOEequipment meetstheperformance criteriaspecified inpart2ofthisreport.Thedataandinformation recordedforuseinthepast-trip reviewshouldbeoutputinaformatthatallowsforeaseofidentification anduseofthedatatomeetthereviewcriterion thatcallsforinformation inareadableandmeaningful format.Theinformation contained inthissubmittal indicates thatthiscriterion ismet.Thedataandinformation usedduri'ngapost-trip reviewshouldberetainedaspartoftheplantfiles.Thisinformation couldproveusefulduringfuturepost-trip reviews.Therefore, onecriterion isthatinfor-mationusedduringapost-trip reviewbemaintained inanaccessible mannerforthelifeoftheplant.Theinformation contained withinthissubmittal doesnotindicatethatthiscriterion willbemet.
4.Conclusion Theinformation suppliedinresponsetoGenericLetter83-28indicates thatthecurrentpost-trip reviewdataandinformation capabilities areadeauateinthefollowing areas:1.Therecordeddataisoutputinareadableandmeaningful format.2.Thesequenceofeventsrecorders meettheminimumperformance characteristics.
Theinformation suppliedinresponsetoGenericLetter83-28doesnotindicatethatthepost-trip reviewdataandinformation capabilities areadequateinthefollowing areas:l.8asedupontheinformation contained inthesubmittal, alloftheparameters specified inpart2ofthisreportthatshouldberecordedforuseinapost-trip reviewarenotrecorded.
2.Timehistoryrecorders, asdescribed inthesubmittal, donotmeettheminimumperformance characteristics.
3.Thedataretention procedures, asdescribed inthesubmittal, maynotensurethattheinformation recordedforthepost-trip reviewismaintained inanaccessible mannerforthelifeoftheplant.Itispossiblethatthecurrentdataandinformation capabilities atthisnuclearpowerplantareadequatetomeettheintentofthesereviewcriteria, butwerenotcompletely described.
Underthesecircumstances, thelicenseeshouldprovideanupdated,morecomplete, description toshowinmoredetailthedataandinformation capabilities atthisnuclearpowerplant.Iftheinformation providedaccurately represents allcurrentdataandinformation capabilities, thenthelicenseeshouldshowthatthedataandinformation capabilities meettheintentofthecriteriainpart2ofthisreport,ordetailfuturemodifications thatwouldenablethelicenseetomeettheintentoftheevaluation criteria.
REFERENCES NRCGenericLetter83-28."Lettertoalllicensees ofoperating
- reactors, applicants foroperating license,andholdersofconstruction permitsregarding RequiredActionsBasedonGenericImplications ofSalemASSEvents."July8,1983.NUREG-1000, GenericImplications ofATMSEventsattheSalemNuclearPowerPlant,April1983.LetterfromM.P.Alexich,IndianaandMichiganElectricCompany,toD.G.Eisenhut, NRC,ofNovember4,1983,Accession Number8311110162 inresponsetoGenericLetter83-28ofJuly8,1983,withattachment.
10 D.C.Cook1.Parameters recorded:
Unsatisfactory Seeattachedtablefordiscrepancies.
2.SOErecorders performance characteristics:
Satisfactory HathawayOperations SequenceMonitor;2mstimediscrimination poweredfromabalanceofplant(non1E)inverterEsterline AngusTurbineEventMonitor:20mstimediscrimination poweredfromabalanceofplant(non1E)inverterHathawayOscillograph:
5-10mstimediscrimination poweredfromabal-anceofplant(non1E)inverterSequenceofEventsRecorder:
(plantcomputer)16.7msectimediscrimination powered.throughaninvertersuppliedbyABbatteryand'600voltbusllB.3.Timehistoryrecorders performance characteristics:
Unsatisfactory-Plantprocesscomputer:
Allparameters arerecordedat8secintervals for2minutesbeforeand3minutesafterthetrip;someat2secintervals for6secpre-andpost-trip Stripcharts:minimalinformation provided4.Dataoutputformat:Satisfactory SOE:Hathawayequipment isstripcharttypeseparatechartsforeacheventwithon/offindication vs.timeSOErecorder:
outputincludestime,descriptor andsensorID,Analog:outputincludestime,parameter name,ptIDandparameter value5.Dataretention capability:
Unsatisfactory Dataisretainedbutforanunspecified period.
IV\Desirable PWRParameters forPost-Trip Review(circledparameters arenotrecorded)
SOERecorderTimeHistoryRecorderParameter Sinal(1)xQx(1)xQx(1)xx2(1)Qx(1)x(1)x(1)x(1)x3QxQx(1)x(1)x(1)x3QxQxQxReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop.
On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder.
(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder.
or(c)equipment statusrecordedonanSOErecorder.