ML17321A932

Review of Licensee...Responses to NRC Generic Ltr 83-28 (Required Actions Based on Generic Implications of Salem ATWS Events),Item 1.2, `Post-Trip Review:Data & Info Capabilities' for DC Cook..., Technical Evaluation Rept

ML17321A932
Person / Time
Site:	Cook
Issue date:	10/17/1985
From:	SCIENCE APPLICATIONS INTERNATIONAL CORP. (FORMERLY
To:	NRC
Shared Package
ML17321A931	List: ML17321A932
References
CON-NRC-03-82-096, CON-NRC-3-82-96 GL-83-28, SAIC-85-1524-4, NUDOCS 8510310032
Download: ML17321A932 (15)

Text

SAIC-85/1524-4 REVIEWOFLICENSEEANDAPPLICANT RESPONSES TONRCGENERICLETTER83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"POST-TRIP REVIEW:DATAANDINFORMATION CAPABILITIES" FORDONALDC.COOKNUCLEARPOWERPLANT,UNITS152(50-315,50-316)Technical Evaluation ReportPreparedbyScienceApplications International Corporation 1710Goodridge DriveMcLean,Virginia22102PreparedforU.S.NuclearRegulatory Commission Washington, D.C.20555ContractNo.NRC-03-82-096 8510310032'51017~

PDRADQCK05000315.

PPDR FOREWORDThisreportcontainsthetechnical evaluation oftheDonaldC.CookNuclearPowerPlant,Units152responsetoGenericLetter83-28(Required ActionsBasedonGenericImplications ofSalemATWSEvents),Item1.2"PostTripReview:DataandInformation Capabilities."

Forthepurposesofthisevaluation, thereviewcriteria, presented inpart2ofthisreport,weredividedintofives'eparate categories.

Theseare:1.Theparameters monitored bythesequenceofeventsandthetimehistoryrecorders, 2.Theperformance characteristics ofthesequenceofeventsrecorders, 3.Theperformance characteristics ofthetimehistoryrecorders, 4.Thedataoutputformat,and5.Thelong-term dataretention capability forpost-trip reviewmaterial.

Allavailable responses toGenericLetter83-28wereevaluated.

Theplantforwhichthisreportisapplicable wasfoundtohaveadequately responded to,andmet,categories 2and4.Thereportdescribes thespecificmethodsusedtodetermine thecate-gorization oftheresponses toGenericLetter83-28.Sincethisevaluation reportwasintendedtoapplytomorethanonenuclearpowerplantspecifics regarding howeachplantmet(orfailedtomeet)thereviewcriteriaarenotpresented.

Instead,.

theevaluation presentsacategorization oftheresponses according towhichcategories ofreviewcriteriaaresatisfied andwhicharenot.Theevaluations arebasedonspecificcriteria(Section2)derivedfromtherequirements asstatedinthegenericletter.

TABLEOFCONTENTSSectionPageIntroductf ono~~~~~~~~~~~~~~~~~~~~~~~~11.Background.

................~~~~~~~~~22.ReviewCriteria.............,,,

33.Evaluation.................

~~~~~~~~~84.Conclusions

~~~~~~~~~~~~~~~~~~~~~~~~~95.References.................

4.FOP/0~~potu+e~Pb<Pete~~10~I/

INTRODUCTION SAIChasreviewedtheutility's responsetoGenericLetter83-28,item1.2"Post-Trip Review:DataandInformation Capability."

Theresponse(seereferences) contained sufficient information todetermine thatthedataandinformation capabilities attheseplantsareacceptable inthefollowing areas.~Thesequence-of-events recorder(s) performance charac-teristics.

~Theoutputformatoftherecordeddata.However,thedataandinformation capabilities, asdescribed inthesubmittal, eitherfailtomeetthereviewcriteriaorprovideinsufficient information toallowdetermination oftheadequacyofthedataandinformation capabilities inthefollowing areas.~Theparameters monitored byboththesequence-of-events andtimehistoryrecorders.

~Thetimehistoryrecorder(s) performance characteris-tics.~Thelong-term dataretention, recordkeeping,capa-bility.

1.BackroundOnFebruary25,1984,bothofthescramcircuitbreakersatUnit1oftheSalemNuclearPowerPlantfailedtoopenuponanautomatic reactortripsignalfromthereactorprotection system.Thisincidentoccurredduringtheplantstartupandthereactorwastrippedmanuallybytheoperator,.

about30secondsaftertheinitiation oftheautomatic tripsignal.Thefailureofthecircuitbreakershasbeendetermined toberelatedtothestickingoftheundervoltagetripattachment.

Pri~rtothisincident; onFebruary22,1983;atUnit1oftheSalemNuclearPowerPlantanautomatic tripsignalwasgenerated basedonsteamgenerator low-lowlevelduringplantstartup.Inthiscasethereactorwastrippedmanuallybytheoperatoralmostcoinci-dentallywiththeautomatic trip.Atthattime,becausetheutilitydidnothavearequirement forthesystematic evaluation ofthereactortrip,noinvestigation wasperformed todetermine whetherthereactorwastrippedautomatically asexpectedormanually.

Theutilities'ritten procedures requiredonlythatthecauseofthetripbedetermined andidentified theresponsible personnel thatcouldauthorize arestartifthecauseofthetripisknown.Following thesecondtripwhichclearlyindicated theproblemwiththetripbreakers, thequestionwasraisedonwhetherthecircuitbreakershadfunctioned properlyduringtheearlierincident.

Themostusefulsourceofinformation inthiscase,namelythesequenceofeventsprintoutwhichwouldhaveindicated whetherthereactorwastrippedautomatically ormanuallyduringtheFebruary22incident, wasnotretainedaftertheincident.

Thus,nojudgmentonthe,properfunctioning ofthetripsystemduringtheearlierincidentcouldbemade.Following theseincidents; onFebruary28,1983;theNRCExecutive

'.~wDirectorforOperations (EDO),directedthestafftoinvestigate andreportonthegenericimplications oftheseoccurrences atUnit1oftheSalemNuclearPowerPlant.Theresultsofthestaff'sinquiryintothegenericimplications oftheSalemUnitincidents isreportedinNUREG-1000, "GenericImplications ofATWSEventsattheSalemNuclearPowerPlant."Basedontheresultsofthisstudy,asetofrequiredactionsweredeveloped andincludedinGenericLetter83-28whichwasissuedonJuly8,1983andsenttoalllicensees ofoperating

reactors, applicants foroperating license,andconstruction permitholders.Therequiredactionsinthisgenericletterconsistoffourcategories.

Theseare:(1)Post-Trip Review,(2)Equipment Classification andVenderInterface, (3)PostMaintenance Testing,and(4)ReactorTripSystemReliability Improvements.

Thefirstrequiredactionofthegenericletter,Post-Trip Review,isthesubjectofthisTERandconsistsofactionitem1.1"ProgramDescription andProcedure" andactionitem1.2"DataandInformation Capability."

Inthenextsectionthereviewcriteriausedtoassesstheadequacyoftheutilities'esponses totherequirements ofactionitem1.2willbediscussed.

~2.ReviewCriteriaTheintentofthePostTripReviewrequirements ofGenericLetter83-28istoensurethatthelicenseehasadequateprocedures anddataandinformation sourcestounderstand thecause(s)andprogression ofareactortrip.Thisunderstanding shouldgobeyondasimpleidentification ofthecourseoftheevent.Itshouldincludethe'apability todetermine therootcauseofthereactortripandtodetermine whethersafetylimitshavebeenexceededandifsotowhatextent.Sufficient information aboutthereactortripeventshouldbeavailable sothatadecisionontheacceptability ofareactorrestartcanbemade.Thefollowing arethereviewcriteriadeveloped fortherequirements ofGenericLetter83-28,actionitem1.2:Theequipment thatprovidesthedigitalsequenceofevents(SOE)recordandtheanalogtimehistoryrecordsofanunscheduled shutdownshouldpro-videareliablesourceofthenecessary information tobeusedintheposttripreview.Eachplantvariablewhichisnecessary todetermine thecause(s)andprogression oftheevent(s)following aplanttripshouldbemonitored byatleastonerecorder[suchasasequence-of-events recorderoraplantprocesscomputerfordigitalparameters; andstripcharts,aplantprocesscomputeroranalogrecorderforanalog(timehistory)variables].

Eachdeviceusedtorecordananalogordigitalplantvariableshouldbedescribed insufficient detailsothatadetermination canbemadeastowhetherthefollowing performance characteristics aremet:

~Eachsequence-of-events recordershouldbecapableofdetecting andrecording thesequenceofeventswithasufficient timediscrimination capability toensurethatthetimeresponses asso-ciatedwitheachmonitored safety-related systemcanbeascer-tained,andthatadetermination canbemadeastowhetherthetimeresponseiswithinacceptable limitsbasedonFSARChapter15AccidentAnalyses.

Therecommended guideline fortheSOEtimediscrimination isapproximately 100msec.IfcurrentSOErecorders donothavethistimediscrimination capability thelicenseeorapplicant shouldshowthatthecurrenttimediscrimi-nationcapability issufficient foranadequatereconstruction ofthecourseofthereactortrip.Asaminimumthisshouldincludetheabilitytoadequately reconstruct theaccidentscenarios pre-sentedinChapter15oftheplantFSAR.~Eachanalogtimehistorydatarecordershouldhaveasampleinter-valsmallenoughsothattheincidentcanbeaccurately reconstructed following areactortrip.Asaminimum,thelicenseeorapplicant shouldbeabletoreconstruct thecourseoftheaccidentsequences evaluated intheaccidentanalysisoftheplantFSAR(Chapter15).Therecommended guideline forthesampleintervalis10sec.Ifthetimehistoryequipment doesnotmeetthisguideline, thelicenseeorapplicant shouldshowthatthecurrenttimehistorycapability issufficient toaccurately recon-structtheaccidentsequences presented inChapter15oftheFSAR.~Tosupporttheposttripanalysisofthecauseofthetripandtheproperfunctioning ofinvolvedsafetyrelatedequipment, eachanalogtimehistorydatarecordershouldbec'apableofupdatingandretaining information fromapproximately fiveminutespriortothetripuntilatleasttenminutesafterthetrip.Theinformation gatheredbythesequence-of-events andtimehistorydatacollectors shouldbestoredinamannerthatwillallowforretrieval andanalysis.

Thedatamayberetainedineitherhardcopy(computer

printout, stripchartoutput;etc.)orinanaccessible memory(magnetic discortape).Thisinformation shouldbepresented inareadableandmeaningful format,taking intoconsideration goodhumanfactorspractices (suchasthoseoutlinedinNUREG-0700).

~Allequipment usedtorecordsequenceofeventsandtimehistoryinformat'ion shouldbepoweredfromareliableandnon-interruptibl epowersource.Thepowersourceusedneednotbesafetyrelated.Thesequenceofeventsandtimehistoryrecording equipment shouldmonitorsufficient digitalandanalogparameters, respectively, toassurethatthecourseofthereactortripcanbereconstructed.

Theparameters monitored shouldprovidesufficient information todetermine therootcauseofthereactortrip,theprogression ofthereactortrip,andtheresponseoftheplantparameters andsystemstothereactortrip.Specifically, allinputparameters associated withreactortrips,safetyinjections andothersafety-related systemsaswellasoutputparameters sufficient torecordtheproperfunctioning ofthesesystemsshouldberecordedforuseintheposttripreview.Theparameters deemednecessary, asaminimum,toperformapost-trip review(onethatwoulddetermine iftheplantremainedwithinitsdesignenvelope) arepresented onTables1.2-'1and1.2-2.Iftheappli-cants'rlicensees'OE recorders andtimehistoryrecorders donotmonitoralloftheparameters suggested inthesetablestheapplicant orlicenseeshouldshowthattheexistingsetofmonitored parameters aresufficient toestablish thattheplantremainedwithinthedesignenvelopefortheappro-priateaccidentconditions; suchasthoseanalyzedinChapter15oftheplantSafetyAnalysisReport.Information gatheredduringtheposttripreviewisrequiredinputforfutureposttripreviews.Datafromallunscheduled shutdowns providesavaluablereference sourceforthedetermination oftheacceptability oftheplantvitalparameter andequipment responsetofutureunscheduled shut-downs.Itistherefore necessary thatinformation gatheredduringallposttripreviewsbemaintained inanaccessible mannerforthelifeoftheplant.

Table1.2-1.PWRParameterListSOERecorderTimeHistoryRecorderParameter Sinalx(1)xx(1)xx(1)xx(2)(1)x(1)x(1)x(1)x(1)x(3)xx(1)x(1)x(1)x(3)ReactorTripSafetyinjection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop, On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder.

(3):Acceptable recorderopionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder.

Table1.2-2.BMRParameter ListSOERecorderTimeHistoryRecorderParameter

/Sinalxxxxxx(1).x(1}(2)x(1)(2)x(1)x(1)xx(1}X(3)x(1)x(1)(3)(4)ReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerHainSteamRadiation Containment (DryMell)Radiation OrywellPressure(Containment Pressure)-

Suppression PoolTemperature PrimarySystemPressurePrimarySystemLevelMSIVPositionTurbineStopValve/Control ValvePositionTurbineBypassValvePositionFeedwater FlowSteamFlowRecirculation; Flow,PumpStatusScramOischarge LevelCondenser VacuumACandOCSystemStatus(BusVoltage)SafetyInjection; Flow,Pump/Valve StatusDieselGenerator Status(On/Off,Start/Stop)

(1):Tripparameters.

(2):Parameter mayberecordedbyeitheranSOEortimehistoryrecorder.

(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder.

(b)systemflowrecordedonatimehistoryrecorder, or(c)equipment statusrecordedonanSOErecorder.

(4):Includesrecording ofparameters forallapplicable systemsfromthefollowing:

HPCI,LPCI,LPCS.IC.RCIC.

3.Evaluation Theparameters identified inpart2ofthisreportasapartofthereviewcriteriaarethosedeemednecessary toperformanadequatepost-trip review.Therecording oftheseparameters onequipment thatmeetstheguidelines ofthereviewcriteriawillresultinasourceofinfor'mation thatcanbeusedtodetermine thecauseofthereactortripandtheplantresponsetothetrip,including theresponses ofimportant plantsystems.Theparameters identified inthissubmittal asbeingrecordedbythesequenceofeventsandtimehistoryrecorders donotcorrespond totheparameters specified inpart2ofthisreport.Thereviewcriteriarequirethattheequipment beingusedtorecordthesequenceofeventsandtimehistorydatarequiredforapost-trip reviewmeetcertainPerformance characteristics.

Thesecharacteristics areintendedtoensurethat,iftheproperparameters arerecorded, therecord-ingequipment willpr'ovideanadequatesourceofinformation foraneffec-tivepost-trip review.Theinformation providedinthissubmittal doesnotindicatethatthetimehistoryequipment usedwouldmeettheintentoftheperformancecriteriaoutlinedinpart2ofthisreport.Information suppliedinthesubmittal doesindicatethattheSOEequipment meetstheperformance criteriaspecified inpart2ofthisreport.Thedataandinformation recordedforuseinthepast-trip reviewshouldbeoutputinaformatthatallowsforeaseofidentification anduseofthedatatomeetthereviewcriterion thatcallsforinformation inareadableandmeaningful format.Theinformation contained inthissubmittal indicates thatthiscriterion ismet.Thedataandinformation usedduri'ngapost-trip reviewshouldberetainedaspartoftheplantfiles.Thisinformation couldproveusefulduringfuturepost-trip reviews.Therefore, onecriterion isthatinfor-mationusedduringapost-trip reviewbemaintained inanaccessible mannerforthelifeoftheplant.Theinformation contained withinthissubmittal doesnotindicatethatthiscriterion willbemet.

4.Conclusion Theinformation suppliedinresponsetoGenericLetter83-28indicates thatthecurrentpost-trip reviewdataandinformation capabilities areadeauateinthefollowing areas:1.Therecordeddataisoutputinareadableandmeaningful format.2.Thesequenceofeventsrecorders meettheminimumperformance characteristics.

Theinformation suppliedinresponsetoGenericLetter83-28doesnotindicatethatthepost-trip reviewdataandinformation capabilities areadequateinthefollowing areas:l.8asedupontheinformation contained inthesubmittal, alloftheparameters specified inpart2ofthisreportthatshouldberecordedforuseinapost-trip reviewarenotrecorded.

2.Timehistoryrecorders, asdescribed inthesubmittal, donotmeettheminimumperformance characteristics.

3.Thedataretention procedures, asdescribed inthesubmittal, maynotensurethattheinformation recordedforthepost-trip reviewismaintained inanaccessible mannerforthelifeoftheplant.Itispossiblethatthecurrentdataandinformation capabilities atthisnuclearpowerplantareadequatetomeettheintentofthesereviewcriteria, butwerenotcompletely described.

Underthesecircumstances, thelicenseeshouldprovideanupdated,morecomplete, description toshowinmoredetailthedataandinformation capabilities atthisnuclearpowerplant.Iftheinformation providedaccurately represents allcurrentdataandinformation capabilities, thenthelicenseeshouldshowthatthedataandinformation capabilities meettheintentofthecriteriainpart2ofthisreport,ordetailfuturemodifications thatwouldenablethelicenseetomeettheintentoftheevaluation criteria.

REFERENCES NRCGenericLetter83-28."Lettertoalllicensees ofoperating

reactors, applicants foroperating license,andholdersofconstruction permitsregarding RequiredActionsBasedonGenericImplications ofSalemASSEvents."July8,1983.NUREG-1000, GenericImplications ofATMSEventsattheSalemNuclearPowerPlant,April1983.LetterfromM.P.Alexich,IndianaandMichiganElectricCompany,toD.G.Eisenhut, NRC,ofNovember4,1983,Accession Number8311110162 inresponsetoGenericLetter83-28ofJuly8,1983,withattachment.

10 D.C.Cook1.Parameters recorded:

Unsatisfactory Seeattachedtablefordiscrepancies.

2.SOErecorders performance characteristics:

Satisfactory HathawayOperations SequenceMonitor;2mstimediscrimination poweredfromabalanceofplant(non1E)inverterEsterline AngusTurbineEventMonitor:20mstimediscrimination poweredfromabalanceofplant(non1E)inverterHathawayOscillograph:

5-10mstimediscrimination poweredfromabal-anceofplant(non1E)inverterSequenceofEventsRecorder:

(plantcomputer)16.7msectimediscrimination powered.throughaninvertersuppliedbyABbatteryand'600voltbusllB.3.Timehistoryrecorders performance characteristics:

Unsatisfactory-Plantprocesscomputer:

Allparameters arerecordedat8secintervals for2minutesbeforeand3minutesafterthetrip;someat2secintervals for6secpre-andpost-trip Stripcharts:minimalinformation provided4.Dataoutputformat:Satisfactory SOE:Hathawayequipment isstripcharttypeseparatechartsforeacheventwithon/offindication vs.timeSOErecorder:

outputincludestime,descriptor andsensorID,Analog:outputincludestime,parameter name,ptIDandparameter value5.Dataretention capability:

Unsatisfactory Dataisretainedbutforanunspecified period.

IV\Desirable PWRParameters forPost-Trip Review(circledparameters arenotrecorded)

SOERecorderTimeHistoryRecorderParameter Sinal(1)xQx(1)xQx(1)xx2(1)Qx(1)x(1)x(1)x(1)x3QxQx(1)x(1)x(1)x3QxQxQxReactorTripSafetyIn)ection Containment Isolation TurbineTripControlRodPositionNeutronFlux,PowerContainment PressureContainment Radiation Containment SumpLevelPrimarySystemPressurePrimarySystemTemperature Pressurizer LevelReactorCoolantPumpStatusPrimarySystemFlowSafetyInj.;Flow,Pump/Valve StatusMSIVPositionSteamGenerator PressureSteamGenerator LevelFeedwater FlowSteamFlowAuxiliary Feedwater System;Flow,Pump/Value StatusACandDCSystemStatus(BusVoltage)DieselGenerator Status(Start/Stop.

On/Off)PORVPosition(1):Tripparameters (2):Parameter maybemonitored byeitheranSOEortimehistoryrecorder.

(3):Acceptable recorderoptionsare:(a)systemflowrecordedonanSOErecorder, (b)systemflowrecordedonatimehistoryrecorder.

or(c)equipment statusrecordedonanSOErecorder.