ML17349A417: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
Line 28: Line 28:
==SUMMARY==
==SUMMARY==
...      ~  .  ~..... ~....                1 1.1  Introductory Comments        . . . . . . . .      . . . . . . . 1 1.2 Summary of Technical Evaluation Report              .  . . . . . . 2
...      ~  .  ~..... ~....                1 1.1  Introductory Comments        . . . . . . . .      . . . . . . . 1 1.2 Summary of Technical Evaluation Report              .  . . . . . . 2
: 2. CONTRACTOR AUDIT 2.1
: 2. CONTRACTOR AUDIT 2.1 Information Audited at      The  Site    .
                            ...........
Information Audited at      The  Site    .
                                                         ~
                                                         ~
                                                        .  .
                                                                 ~ ~....
                                                                 ~ ~....
                                                             . . . . . . . 4 4
                                                             . . . . . . . 4 4
Line 45: Line 42:
   ~
   ~
I 0
I 0
,
e
e


Line 69: Line 65:
The structure of the report follows that required in the Task Order. Thus this introduction is followed by a summary of the site visit audit in Section 2, and by the SCIENTECH/ERZ findings in Section 3. The references appear in Section 4 and the Appendix contains the IPE evaluation and data summary sheet.
The structure of the report follows that required in the Task Order. Thus this introduction is followed by a summary of the site visit audit in Section 2, and by the SCIENTECH/ERZ findings in Section 3. The references appear in Section 4 and the Appendix contains the IPE evaluation and data summary sheet.
IPE Back-End Review                        December 21, 1991, Rev. 1
IPE Back-End Review                        December 21, 1991, Rev. 1
                                                              -


(>>'
(>>'
Line 189: Line 184:
IPE Back-End Review                    13        December 21, 1991, Rev. 1
IPE Back-End Review                    13        December 21, 1991, Rev. 1


'
Technical Evaluation Report Table  3 provides a simplified binning approach to the Turkey point plant damage states. For comparison,. the Turkey Point IPE plant damage state designators are also listed.
Technical Evaluation Report Table  3 provides a simplified binning approach to the Turkey point plant damage states. For comparison,. the Turkey Point IPE plant damage state designators are also listed.
3 g 2 '    Containment    ant  oe Rla si8 Probabilistic quantification of severe accident progression is performed, using an event tree/fault tree approach. The CET structure is simple and consists of the eight top events/questions listed below. (Note sample CETs on pages 4-76 and 4-77  of the submittal.)
3 g 2 '    Containment    ant  oe Rla si8 Probabilistic quantification of severe accident progression is performed, using an event tree/fault tree approach. The CET structure is simple and consists of the eight top events/questions listed below. (Note sample CETs on pages 4-76 and 4-77  of the submittal.)
Line 215: Line 209:
IPE Back-End Review                        15        December 21, 1991, Rev. 1
IPE Back-End Review                        15        December 21, 1991, Rev. 1


Technical Evaluation Report Legend for TABLE 3 A  Large LOCA S  -  Small  LOCA T  -  Transients E  ECCS    Failure in Injection
Technical Evaluation Report Legend for TABLE 3 A  Large LOCA S  -  Small  LOCA T  -  Transients E  ECCS    Failure in Injection L ECCS      Failure in Recirculation F  -  Fans Operational C  'Sprays  Operational C'- Sprays Available in Injection CB1  Interfacing LOCA sequences CB2  -  Unisolated  SGTR  events In  each  individual box of the table, the numerical values are from    Table  4.6-27, page 4-17, and the nomenclature is defined  in Table 4.3-2, page 4-34, and Table 4.3-3, page 4-35.
  -
L ECCS      Failure in Recirculation F  -  Fans Operational C  'Sprays  Operational C'- Sprays Available in Injection CB1  Interfacing LOCA sequences CB2  -  Unisolated  SGTR  events In  each  individual box of the table, the numerical values are from    Table  4.6-27, page 4-17, and the nomenclature is defined  in Table 4.3-2, page 4-34, and Table 4.3-3, page 4-35.
I:  S-LOCA, SGC, ECCS  Fails in Inject.(P < 1000 psi)
I:  S-LOCA, SGC, ECCS  Fails in Inject.(P < 1000 psi)
II:    S-LOCA, SGC, ECCS  Fails in Recirc. (350<P<1000)
II:    S-LOCA, SGC, ECCS  Fails in Recirc. (350<P<1000)
Line 338: Line 330:
Please provide a narrative that describes the process.
Please provide a narrative that describes the process.
Include the criteria that were used to determine if the containment failure was a rupture or a leak and the uses made of Figure 4.6-2 through Figure 4.6-5. There was confusion as to how the containment failure was calculated, how the determination was made and whether it  was a rupture or a leak. The method used to determine the timing or probability of containment failure was not clear in the submittal. This includes confusion over the definition of "24-hour period." Why measure the success time at 24 hours from initiation of the accident, and not at the beginning of core damage?
Include the criteria that were used to determine if the containment failure was a rupture or a leak and the uses made of Figure 4.6-2 through Figure 4.6-5. There was confusion as to how the containment failure was calculated, how the determination was made and whether it  was a rupture or a leak. The method used to determine the timing or probability of containment failure was not clear in the submittal. This includes confusion over the definition of "24-hour period." Why measure the success time at 24 hours from initiation of the accident, and not at the beginning of core damage?
            -
Are the following statements correct?
Are the following statements correct?
failure at say If MAAP calculates ata 24              ) 26 hours, then the pressure          hours is compared to the failure probability curve and the probability plugged into the FT/CET. (No failures go beyond IPE Back-End Review                26        December 21, 1991, Rev. 1
failure at say If MAAP calculates ata 24              ) 26 hours, then the pressure          hours is compared to the failure probability curve and the probability plugged into the FT/CET. (No failures go beyond IPE Back-End Review                26        December 21, 1991, Rev. 1
Line 349: Line 340:
4    In several areas of the Back-End analysis, values were used as input without justification. For many, justification is
4    In several areas of the Back-End analysis, values were used as input without justification. For many, justification is
   ~
   ~
unnecessary, as these values are accepted by the technical community as a whole. However, there are values important to the outcome of the IPE that remain controversial. Of course you can choose the value you believe,to be appropriate, but a justification is warranted. Please
unnecessary, as these values are accepted by the technical community as a whole. However, there are values important to the outcome of the IPE that remain controversial. Of course you can choose the value you believe,to be appropriate, but a justification is warranted. Please provide a justification for any values used that could be viewed as controversial. Include justifications for the following: (1) The basis for not releasing the Tellurium in-vessel (EPRI document, IPE Reference 4.6-2) is not correct. It  is correct that the Te is held back by unreacted Zr. However, in a typical accident sequence, 30 to 50 percent of Zr is oxidized in-vessel. Therefore, similar quantities of Te are expected to be released in-vessel. It is not necessarily conservative to assume all Te is to be released ex-vessel.      Why not use the NUREG/CR-4881 recommended values for    in-vessel?,  (2) Why were refractory species dropped from    consideration  in the radiological source-term assessment? (3) What is the justification for the values selected for FCCID (0.3 for  for Te and 0.05 for Sr)?    (4) Please provide your rationale source-term reduction factors EFAERCOR, and EFAERCCI.
    -
provide a justification for any values used that could be viewed as controversial. Include justifications for the following: (1) The basis for not releasing the Tellurium in-vessel (EPRI document, IPE Reference 4.6-2) is not correct. It  is correct that the Te is held back by unreacted Zr. However, in a typical accident sequence, 30 to 50 percent of Zr is oxidized in-vessel. Therefore, similar quantities of Te are expected to be released in-vessel. It is not necessarily conservative to assume all Te is to be released ex-vessel.      Why not use the NUREG/CR-4881 recommended values for    in-vessel?,  (2) Why were refractory species dropped from    consideration  in the radiological source-term assessment? (3) What is the justification for the values selected for FCCID (0.3 for  for Te and 0.05 for Sr)?    (4) Please provide your rationale source-term reduction factors EFAERCOR, and EFAERCCI.
IPE Back-End Review                27        December 21, 1991, Rev. 1
IPE Back-End Review                27        December 21, 1991, Rev. 1



Latest revision as of 21:41, 3 February 2020

IPE Back-End Audit,Task 3,Technical Evaluation Rept,December 21,1991,Rev 1
ML17349A417
Person / Time
Site: Turkey Point  NextEra Energy icon.png
Issue date: 12/21/1991
From: Khatibrahbar, Meyer J, Vijaykumar R
ENERGY RESOURCES CO., INC., SCIENTECH, INC.
To:
NRC
Shared Package
ML17349A413 List:
References
CON-NRC-04-91-068, CON-NRC-4-91-68 SCIE-NRC-207-91, NUDOCS 9210210147
Download: ML17349A417 (51)


Text

ENCLOSURE 5 e SCZE NRC 207-91 TURKEY POINT ZPE BACK END AUDIT Task 3 TECHNICAL EVALUATION REPORT December 21, 1991 Rev. 1 J. Heyer M. Khatib-Rahbar R. Vigaykumar Prepared for the

'.S. Nuclear Regulatory Commission under Contract NRC-Oi-91-068-01 SCZENTECHg Ines Enirgy Research, Inc.

11821 Parklawn Drive 6290 Montrose Road Rockville, Maryland 20852 Rockville, Maryland 20852 9210210147 921015 H PDR ADOCK 05000250 '

P., PDR

0 Technical 'Evaluation Report TABLE OF CONTENTS

1. INTRODUCTION AND

SUMMARY

... ~ . ~..... ~.... 1 1.1 Introductory Comments . . . . . . . . . . . . . . . 1 1.2 Summary of Technical Evaluation Report . . . . . . . 2

2. CONTRACTOR AUDIT 2.1 Information Audited at The Site .

~

~ ~....

. . . . . . . 4 4

2.1.1 General Findings ~ ~, ~ ~ 4 2.1.2 Specific Items ~ ~ ~ ~ ~ 4 2.2 Personnel Interviewed. ~ ~ ~ ~ ~ 9

2. 3 Walkdowns ~ ~ ~ ~ ~ 9
3. CONTRACTOR FINDINGS REVIEW . . . . ... . . . . . . 10 3.1 Review of IPE Submittal . . . . . . . . . . . . . . 10 3.1.1 Review of The Plant and Containment Design Features That Contribute to The Progression of Severe Accidents . . . . . . . . . . . . 10 3.1.2 Audit of Licensee's Sequence Binning, Containment Event Trees, and Accident Progression Analysis . . . . . . . . . . . . 12 3.1.3 Comparison of Results with Other Studies . . 23 3.2 Outstanding Issues 24 3.2.1 Comments on CPI 24 3.2.2 Round 2 Questions and Requests for Information . . . .,. . . . . . . . . . . . 25
4. REFERENCES .................... 29 APPENDIX ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 31 IPE Back-End Review i December 21, 1991, Rev. 1

Technical Evaluation'Report LIST OF TABLBS Table 1 Comparison of Turkey Point, Zion, and Surry Plant and Containment Design Features That Contribute to the Progression of Severe Accidents . . . . . . . . . . 11 Table 2 Comparison of Containment Capacities . . . . . . . 12 Table 3 Plant Damage States for Turkey Point . . . . . . . 15 Table 4 Turkey Point IPE Containment Matrix . . . . .-. . . 21 Table 5 Containment Failure as a Percentage of Total CDF:

Comparison to Surry NUREG-1150'Results . . . . . . 24 IPE Back-End Review December 21, 1991, Rev. 1

~

I 0

e

Technical Evaluation Report 1o .INTRODUCTION AND BUlQQQLY 1 1 INTRODUCTORY COMMENTS final report sets out our technical evaluation of the

'his Back-End portion of the Turkey Point Individual Plant Examination (ZPE) performed by Florida Power & Light (FP&L)., The audit carried out by SCIENTECH, Znc., and Energy Research, Znc., (ERZ) was divided into three parts: initial review of the submittal document[1] in preparation for a site visit (Task 1); the site visit itself (Task 2);, and,the followup assessment of the Turkey Point ZPE, based on the original submittal, the site visit, and FP&L responses to questions from NRC (Task 3).

On November 5, 1991, NRC received the Task 1 report, "Preliminary Evaluation of Turkey Point Individual Plant Examination (ZPE)

Back-End Submittal." In parallel with this effort, SCIENTECH/ERI helped NRC to formulate Round 1 questions to which FP&L distributed formal responses during the site visit of November 19-21, 1991. (See Section 2 of this report for a description of the visit.) During the site visit, a number of concerns that were raised in the Task 1 report were resolved, based on the information presented by FP&L and contained in the Round 1 responses[2]. However, the resolution of each of these issues was based for the most part on oral presentations. Other issues were left open.

Subsequently, the plan was to codify those issues that had been resolved orally by obtaining formal responses to Round 2 questions developed by NRC staff and contractors., Suggested questions for this second round were forwarded by SCIENTECH/ERZ to NRC on November 25, 1991. Additional questions aimed at issue clarification were formulated and submitted to FP&L in a conference call from NRC on December 19, 1991. Because of the unavailability of key FP&L personnel, the questions aimed at clarification were not answered. The NRC staff decided to fold these latter queries into the Round 2 questions, which had not yet been issued.

-Thus, this Task 3 report does not reflect any benefit that might have derived from SCIENTECH/ERI reviewing and evaluating the formal FP&L responses to the Round 2 questions. Instead, this report is based on what was contained in the original submittal, in the formal Round 1 responses, in materials handed out during the site visit, but not necessarily on what was discussed informally during the site visit. It is SCZENTECH/ERI's view that, eventually, the FP&L responses to the Round 2 questions will document and substantiate much of what has been resolved orally. However, for purposes here, the issues remain unresolved.

IPE Back-End Review December 21, 1991,,Rev. 1

Technical Evaluation Report e 1~2 ,SUMH?LRY OP TECHNICAL EVALUATION REPORT The presentation of the Back-End materials in the utility submittal is sound and relatively easy to evaluate. FP&L should be commended for presenting a Back-End structure that can be evaluated in a relatively straightforward manner. Gaps, open issues, and confusing sections do exist, but, on the whole, the submittal meets the spirit of what was requested in NUREG-1335 and the Generic Letter (88-20 and supplements[3, 4, 5, 6]).

Other. than in the areas summarized below, the Turkey Point IPE submittal (Back-End) is technically sound, consistent with the level of effort appropriate for this activity. Insights from PRAs performed previously were used to guide development, both of the IPE we evaluated as well as our own performance as auditors.

The NUREG-1150 study[7] was one of the sources. NUREG-1150 results and EPRI recommendations on how to use the MAAP computer code[8] were also used extensively in the submittal. In Section 3.1.3 of this report, specific comparisons are drawn between the Turkey Point plant and the similar Westinghouse PWRs with their large, dry containment buildings. The major difference between Turkey Point and Surry, is the former's relatively high probability of late containment failure. The Turkey Point late containment failure probability is 60 percent. As discussed in Section 3.1.3, a portion of this late failure may be due to an artifact of the methodology.

The site visit demonstrated that much more analysis has been done, and that FP&L staff understanding of severe accidents is considerably greater than reflected in the original submittal.

This has a particular bearing on questions raised about two subjects: (1) hydrogen distribution and combustion and the ensuing challenges to the containment, and (2) the issues and systems involved in the Interfacing Systems Loss-of-Cooling Accident (ISLOCA) and unisolated steam generator tube rupture (SGTR). However, questions about these two areas must remain open until NRC receives formal responses that document their resolution by FP&L.

The key issues about which questions remain unresolved are the following:

Hydrogen and the challenge of combustion to containment integrity Containment vulnerabilities and the potential for containment performance improvements (CPIs)

Frequency and source term of the ISLOCA and the unisolated SGTR IPE Back-End Review December 21, 1991, Rev. 1

Technical Evaluation Report 0 Justification and clarification of values used to develop the radiological source terms.

These issues are described in detail in Section 3.2. Questions about them are to be sent to FPSL.

The structure of the report follows that required in the Task Order. Thus this introduction is followed by a summary of the site visit audit in Section 2, and by the SCIENTECH/ERZ findings in Section 3. The references appear in Section 4 and the Appendix contains the IPE evaluation and data summary sheet.

IPE Back-End Review December 21, 1991, Rev. 1

(>>'

0

Technical Evaluation Report 2 ~ CONTRACTOR AUDIT 2~1 INFORMATION AUDITBD AT THB BITB During the site visit, vhi'ch took place November 19, 20, and 21, 1991 members of the FP&L staff vere asked the questions that appear in the SCIENTECH/ERI Task 1 report, Sections 4 and 5.

Information audited at the site pertained to the following subject categories:

CPI Role of uncertainties and "conservative"'alculations Source terms Hydrogen burn ISLOCA Containment Isolation Containment event trees (CETs)

Containment failure calculations Pressure and temperature histories The discussion below is topical, consistent with the above list.

Some general findings are presented first.

Staffing and Lpvel of Bffort. FP&L employs five to six persons, who are fully dedicated to the FP&L IPE program at Turkey Point and St. Lucie. These same people will do the IPEEE for all units, which demonstrates the FP&L commitment to the IPE program.

One concern, however, is how the Turkey Point operations staff can absorb and assimilate all that has been developed by 'tself the headquarter's staff located at the Juno Beach FP&L Office.

The contractor is SAIC, with a fixed-price, $ 1.2M contract. The peer review was performed by Aaron Engineering. FP&L estimated the total level of effort to be about twice the contractor effort, or $ 2.4M. Only one SAIC employee vas present forHuman the duration of the site visit meetings. (SAIC's expert in Reliability)

2. 1 2 Bpocific Items 2.1.1.1 Containment Performance l

Improvements

. The original submittal did not recognize the potential for containment performance improvement (CPI). Generic Letter 88-20, Supplement 3[6], and the references in SECY-91-084[9] were discussed with members of the FP&L staff, vho will consider adding CPI to the submittal modification.

IPE Back-End Review December 21, 1991, Rev. 1

.Technical Evaluation. Report 2 ' 1 2 Role of Unoertainties And >>Conservative>> Calculate.ons Direct Containment Heating (DCH) sensitivity assessments were discussed as examples of the determination of uncertainty. MAAP base cases were run with best-estimate values, including 0.03 dispeisal,. (This value is recommended by EPRI in their report on MAAP(8], page A-2, item 14.) Then other cases were run. (Note evidence of this on page 4-169 of the submittal.) For example, a sensitivity study was done with the value at 1.0 for the SBO seal LOCA.

The FP&L staff described the reactor cavity area and indicated the location of the'sump pumps and instrument tube passageway, which is conducive to flooding.

According to the FP&L staff, the situation that presents the greatest uncertainty is in-vessel cooling of a damaged core when the cavity is flooded, but coolant is not recovered in-vessel.

The assumption is that the vessel would always fail.

For all plant damage states, a 50-percent probability is assumed that a eoolable debris bed is not formed in-vessel (PRCOOLDBV).

The rationale for this percentile, according to the FP&L staff, is that PRCOOLDBV is equally indeterminate for all PDSs.

In the submittal it is considered conservative to include release paths through the steam generator in the small-break LOCA bins.

'(Note page 4-34 of the submittal.) Such action is considered conservative because (1) it takes a longer time to cause core damage with SGTR and thereby more time is available for prevention or mitigative actions and (2) the Emergency Operating Procedures (EOPs) call for SG isolation.

The site-visit discussions were helpful in better understanding the sensitivity analyses performed and the justification for some of the "conservative" assumptions that were made by FP&L.

2. 1.1.3. Source Terms During the site visit, source-term issues centered on the points raised on pages 11-13 of SCIENTECH/ERI's Task 1 report. FP&L claimed no double-counting, as the values used are based on specific MAAP analysis. NUREG-1150 values were not used.

FP&L stated no adequate reason for using zero for FCOR for Te-only that MAAP assumed it. (Note page 4-210 of the submittal.)

As to why certain source-term groups were dropped, FP&L said that MAAP does up to 12 groups. In this Turkey Point analysis, seven groups were, dropped after SAIC said their bearing on the study would be negligible.

IPE Back-End Review December 21, 1991, Rev. 1

Technical Evaluation Report Discussions at the site were informative. However, some of the values used and approaches taken by FP&L personnel could not be justified.'.1.1.4.

Hydrogen burn Although not adequately cited in the submittal, sensitivity analyses were performed in an attempt to bound the hydrogen burn issue. For example, in the case of high-pressure vessel failure,

FP&L tried to bound the hydrogen burn pressurization in the following ways: by (1) producing a maximum amount, which meant delaying core melt and vessel failure, changing the melt temperature (3,100K) and latent heat (5,000 BTU/ibm), and (2) forcing a burn by lowering the auto ignition temperature to 400K.

(See page 4-170. of the submittal, MAAP runs T1IIIH10, 11, 12.)

These MAAP runs did not fail the containment. FP&I also performed hand calculations of hydrogen burns. No sensitivity analysis was performed on hydrogen generation from steel oxidation.

According to FP&L, local hydrogen concentrations are not a problem because (1) steam inerts, (2) steam drives the mixing, resulting in the dilution of any concentrations, and (3) the Turkey Point "containment is a relatively open one.

Ed Chow of the NRC staff asked concentrations. Staff members if said FP&L had sought out local that they had not. Even if they had local burns, they claimed, there was no important equipment in those locations.

FP&L staff members said the utility had considered hydrogen ignition sources -other than those from AC power. Note that MAAP auto ignition is 983K. FP&L used 400K in a sensitivity analysis.

According to FP&L, the sensitivity analyses did not result in any containment failures.

The site-visit discussions showed that much more has been done in this area than reflected in the submittal.

if these assessments It were would strengthen formally described the IPE considerably in an IPE modification.

2~1~1~5 ZBLOCA Far more analysis and assessment have gone into the ISLOCA evaluation than the IPE submittal indicated. This weakness compensated when the submittal is modified. NRC and SCIENTECH might'e viewed drawings that showed the possible ISLOCA routes, the most probable one leading to the RWST. The RWST capacity (shared between units 3 and 4) allows for about 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> of injection, even though one tank has failed via ISLOCA. Because an operator action is required, FP&L did not take any credit for shared capacity. ISLOCA is a good candidate for accident management.

IPE Back-End Review 6 December 21, 1991, Rev. 1

Technical Evaluation Report e Note that FP&L personnel were not sure if the 4.4 percent contribution to core damage from ISLOCAs vas from 'the dominant contributor, namely, from failure at the refueling water storage tank (RWST), or from the whole set.

As in the case of the hydrogen, above, the site-visit discussions revealed that much more has been done in this area than is refl'ected in the IPE submittal. However, the ISLOCA is

~

potentially such an important issue that even more needs to be done, especially to characterize the ISLOCA source term, vhich probably meets the IPE generic letter screening criteria. (Note the further discussion of this matter in Section 3.1.2.1.)

2.1.1.6 Containment Isolation In the containment isolation analysis, all cut sets vere looked at. Purge was not included. The purge lines are isolated automatically upon signal. The only operator role. is to verify closure. Thus the probability that the purge lines vere open was considered so small it did not enter into the formulation of containment isolation probability..

The site-visit discussions dispelled the concerns raised after reviewing the FP&L responses to Round 1 (Back-End) questions 4 and 5. The response to question 4 gives the impression that a manual action is necessary in order to isolate the'containment when in the purge mode. However, the containment is automatically isolated upon receipt of various signals. The only manual operation is a check that the containment has, in fact, been isolated.

2.1.1.7 Containment Bvent Trees (CETs)

CETs were quantified for the most part from NUREG-1150 results.

Sensitivity analyses were performed using MAAP. (MAAP was also used to determine the containment pressure loadings and failure times.)

The CET displayed on page 4-77 of the submittal vas not used in any of the analyses.

FP&L stated that 'some of the fault trees (FTs) were incomplete.

(Note, for example, page 4-84 of the submittal.) FP&L staff said that, if modification is made to incompleteness the submittal, the FTs will be does not affect completed. They said that this the results.

The site-visit discussions clarified these previously open issues.

IPE Back-End Review December 21, 1991, Rev. 1

Technical Evaluation Report Some ambiguity surrounds the FP&L calculation of containment failure. What FP&L did in fact is not consistent with what they claimed they did in the submittal. (The methodology described in Figures 4.6-2, 4.6-4, and 4.6-5 was not,used.) Instead, a simpler approach was taken. Point values of MAAP-generated containment pressures were compared against probabilities (as a function of pressure) of the containment failing.

When FP&L personnel used NUREG-1150 Surry data in their analysis, they used the 20/21 scaling (ratio of the Turkey Point containment volume-to-power ratio to the Surry containment volume-to-power ratio). SCIENTECH/ERI believes that a better scaling is 22/19, derived from the ratio of Turkey Point to Surry fuel and cladding masses. FP&L agreed that the 22/19 scaling was more accurate, but asserted that their analysis was sound nevertheless.

Regarding failure via penetrations, they noted that all of the penetrations are below the 58-foot level, except those for the steam piping. Thus, high temperatures, high in the containment building, would not affect penetrations.

It remains unclear how FP&L determined if a containment failure was characterized as a rupture or a leak. According to FP&L, if MAAP calculates a failure at, say, 26 hours3.009259e-4 days <br />0.00722 hours <br />4.298942e-5 weeks <br />9.893e-6 months <br />, then the pressure at 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is compared to the failure probability curve and the probability is plugged into the FT/CET. Early failures are all caused by ruptures. The causes of late failures are evenly divided between leak and rupture. Note that the MAAP hole size is constant.

Asked why there is a relatively high probability of late containment failure with no vessel breach for a number of the plant damage states, FP&L responded that containm'ent cooling has failed a generic result according to EPRI guidance.

There are no containment basemat failures. The maximum penetration is 2 feet.

The site-visit discussions left some matters unresolved.

Clarifications have been requested.

2.1.1.9 Pressure and Temperature Histories FP&L provided a set of MAAP-generated histories for SCIENTECH/ERI consideration. A summary of the site visit with suggested followup questions was provided to NRC on November 25, 1991. For the most part, these questions are duplicated here in Section 3 ' '

0 'PE Back-End Review December 21, 1991, Rev. 1

Technical Evaluation Report 2 ~2 PBRSONNBL INTERVIEWED =.

During the .Back-End portion of the site audit, the FPEL personnel interviewed were Ching N. Guey of the Reliability and Risk Assessment Group (Juno Beach) and Jay N. Kabadi of the Nuclear Fuels Group (Juno Beach). Both individuals seemed knovledgeable and capable.

2' %ALKDONNS During the site visit, both units vere operating, precluding entry into the containment buildings, and limiting the Back-End walkdowns. Most systems and structures of interest vere inaccessible. Bill Milstead of the NRC staff and Jim Meyer of SCIENTECH did valk down the auxiliary building systems and the piping routes of the RWST for the possible ISLOCA.

IPE Back-End Review December 21, 1991, Rev. 1-

Technical Evaluation Report 0 3 ~ CONTRACTOR FZHDZHQS RBVZEN 3 1 REVZE% OP ZPB BUBMZTTAL 3 ~ Xol Review of The Plant and Contaiaaent Design teatures That Contribute to The Progression of Severe Accidents Table 1 summarizes the Turkey Point plant and containment system design features that could contribute to core melt progression and containment system response. Also listed are the design data for Surry (PWR with a subatmospheric containment) and Zion (PWR with a large dry containment), two of the reference plants used for the recently published NUREG-1150 risk study)7].

Containment pressure capacity is one of the most. important attributes with direct impact on severe accident mitigation. The Turkey Point containment (Units 3 and 4) is constructed from pre-stressed concrete with a steel liner (for leak tightness).

Comparisons of Turkey Point, Surry, and Zion containment capacities are enumerated in Table 2.

The following observations were made based on comparisons of the design features listed in Table 1:

~ . The Reactor Coolant System (RCS) for Turkey Point is similar to those of the other two Westinghouse PWRs (similar RCS volume-to-power ratios). This indicates that the reactor coolant system time windows (e.g.,

time to reach uncovery, boil-off) during severe accidents is similar for the three plants.

The ratio of total fuel and zirconium mass to containment free volume as shown in Table 1 is about 15 to 40 percent larger at Turkey Point than=-at the Zion and Surry plants. This ratio indicates the potential severity of High Pressure Melt Ejection (HPME)/Direct Containment Heating (DCH), given similar cavity and configurations. The cavity and the shape 'ontainment of the keyway influence the potential for debris being trapped in their passages, through the cavity up into the upper containment compartments.

The Turkey Point lower cavity and keyway configuration appears to be somewhere between Surry (nondispersive) and Zion (dispersive), in terms of its ability to trap core debris following RPV failure at high pressures.

Therefore, a direct scaling of Surry pressurization loads to Turkey Point, based on a ratio of debris mass to containment free volume, is' good (but indicator of the Turkey Point containment not'onservative) vulnerability to HPME/DCH pressurization.

IPE Back-End Review 10 December 21, 1991, Rev. 1

Technical Evaluation'eport 0 TABLE 1 Comparison of Turkey Point, Sion, . and Burry plant And Containment Design Peatures That Contribute to The Progression of Severe Accidents Feature Turkey Point Zion Surry Power Level, MW(t) 2,200 3,250 2,441 Volume of RCS Water, M3 261 360 260 Mass of Fuel, Tons 79 98.5 80 Mass of Zicalloy, Ton 19 ~ 4, 20 16 '

Containment Volume, M3 43,891 77,070 50,970 Water Volume/Power, RCS M3/MW(t) 0. 12 0 '1 0. 11 Containment Volume/Power, M3/MW (t) 20 24 21 Zr Mass/Containment Volume, 0.4 0.3 0.3 Kg/M3 Fuel Mass/Containment Volume Kg/M3 1' 1.3 1.6 Maximum H2 Generation from 859 886 723 Zr Oxidation, Kg

-H2 Generation from Fe Based on 20% Fe Not Known 91 156 Oxidation, Kg Total H2 Generation, Kg >859 977 879 Power Specific Hydrogen Generation, Kg/MW(t) >0.4 0.3 0.4 Maximum Hydrogen Concent.

in Containment, Moles/M3 >0. 01 0.006 0.008 Containment Dispersive partially dispersive non-dispersive Characteristics dispersive IPE Back-End Review December 21, 1991, Rev. 1

Technical Evaluation Report The potential vulnerabilities of the Turkey Point containment to hydrogen combustion are more pronounced than for both Surry and Zion (due.to larger power-specific maximum hydrogen mass and maximum hydrogen molar concentrations in Turkey Point).

The containment design pressure and failure pressure for Turkey Point are 0.5 MPa (59 psig) and,1.10 MPa (145 psig), respectively (about 0.1 MPa (14 psi) higher than at Surry and Zion). This indicates that Turkey Point has a more robust containment than either of the two reference plants.

. Late containment pressurization (as well as ex-vessel fission product releases) by noncondensable gases is influenced by the gaseous content of the basemat concrete. The concrete type at Turkey Point is limestone. At Surry, it is basalt, and, at Zion, it is limestone.

TABLE 2 Comparison of Containment Capacities Containment T. Point Surry Zion Design Pressure 0.5 MPa 0.41 MPa 0. 41 MPa (59 psig) (45 psig) (47 psig)

Failure Pressure 1 '0 (145 psig) 0.97 (126 MPa psig) 1.02 (134 MPa psig) 3~1~2 Audit of Licenseeis Sequence Binning, Containment Event Trees, and Accident Progression Analysi's 3.1.2.1 Plant Dama e State De nition The Plant Damage States (PDSs) binning attributes include:

Core Melt Timing a o e e a d ve o ss s (less than 2 hours): ECCS fails in injection.

e a d Co e e t S o ve o ss s &

(2 to 6 hours): ECCS fails in injection.

tg "'" " ')' ~

in recirculation.

IPE Back-End Review 12 December 21, 1991, Rev. 1

Technical Evaluation Report

- ~ RCS .Pressure (Pressure > 2000 psig)

P /g)

~w (Pressure < 200 psig)

~ Containment Pressure Boundary Status Zml~

s te ass

~ Containment Safeguard Status sOe toa, w'& w/ofans rasoe te eto ut a

~ Cavity Condition

/~<~de (RWST in) ected)

The PDS binning process appears reasonable. However, the Interfacing Systems LOCA (ISLOCA) and SGTR sequences, which are referred to as Containment Bypass (CB) states, are not listed either separately or together as part of the dominant plant damage'states (i.e., in Table 4.6-27 of Reference 1). The ISLOCA and the SGTR damage states appear to have a significant frequency, and should be listed as part of the dominant plant damage states in Table 4.6-27, page 4-171.

ISLOCAs and SGTRs should be identified, classified, and reported in the PDS summary tables. Furthermore, fission product release characteristics of these sequences are sufficiently different (from other early failure modes) that would require a separate quantification. (Source term calculations for these sequences appear in several studies, including NUREG-1150 and NUREG/CR-4629.) ISLOCAs and SGTRs often dominate the early risk of severe accidents. Therefore, both their frequencies and radiological release characteristics should be reported.

(Generic'etter 88-20 lists sequences that should be reported, including "Any functional sequence that has a core damage frequency greater than or equal to 1E-6 per reactor year and that leads to containment failure which can result in a radioactive release magnitude greater than or equal to BWR-3 or PWR-4 release categories of WASH-1400." It appears that ISLOCAs and SGTRs fulfillthese criteria.

IPE Back-End Review 13 December 21, 1991, Rev. 1

Technical Evaluation Report Table 3 provides a simplified binning approach to the Turkey point plant damage states. For comparison,. the Turkey Point IPE plant damage state designators are also listed.

3 g 2 ' Containment ant oe Rla si8 Probabilistic quantification of severe accident progression is performed, using an event tree/fault tree approach. The CET structure is simple and consists of the eight top events/questions listed below. (Note sample CETs on pages 4-76 and 4-77 of the submittal.)

RCS depressurization Coolant recovery in vessel No vessel failure Early containment failure Debris bed coolability ex-vessel Late containment failure Fission product release Containment failure mode.

Two nodes in the tree refer to events that occur before vessel failure.

Mode DP addresses the issue of RCS depressurization either through operator action or through the effect of natural circulation-induced hot leg or surge line breaks. However, in the actual quantification of the trees, no credit is taken for operator action to depressurize the RCS.

Node REC addresses coolant recovery in-vessel. Coolant recovery is assumed to be possible, due either to RCS depressurization leading to the operation of Low Head Safety Injection (LHSI) pumps, or through the recovery of AC power, which causes the safety injection pumps to operate. For all plant damage states, a conditional probability of 0.743 has been assigned for success of coolant recovery in<<vessel. This split fraction value has not been justified in the Turkey Point IPE submittal.

IPE Back-End Review 14 December 21, 1991, Rev. 1

Technical Evaluation Report TABLE 3 Plant Damage Btates for Turkey Point I ECCS Fans n F it a il N Sprays Sprays t0 u r N r e FCC "N

1.97E-6 (V-B)

[0.44%]

1.26E-5 5.14E-7 2.66E-6 (VI-B) (VZ-A) (VI-D)

[2 '%] [0.1%] [0. 59%]

1.29E-6 2 ~ 13E-5 (I-C) (I-H)

[0. 28%] [5.2%]

4.95E-7 3 ~ 4E-4 L (II-C) (ZZ-E)

[0. 1%] [76%]

2.37E-5 5. 42E-7 6.92E-7 (IIZ-C) (III-D) (III-H)

[5.27%] [0.12%] [0.15%]

L CB1 6.24E-6 [1.40%]

CB2 1.27E-5 [2.82%]*

Entire SGTR CDF placed in CB2.

Total Internal CDF 4.49E-4, CDF listed in Table 3.1 of Reference 1 4.28E-4 Bee legend for table on the next page.

IPE Back-End Review 15 December 21, 1991, Rev. 1

Technical Evaluation Report Legend for TABLE 3 A Large LOCA S - Small LOCA T - Transients E ECCS Failure in Injection L ECCS Failure in Recirculation F - Fans Operational C 'Sprays Operational C'- Sprays Available in Injection CB1 Interfacing LOCA sequences CB2 - Unisolated SGTR events In each individual box of the table, the numerical values are from Table 4.6-27, page 4-17, and the nomenclature is defined in Table 4.3-2, page 4-34, and Table 4.3-3, page 4-35.

I: S-LOCA, SGC, ECCS Fails in Inject.(P < 1000 psi)

II: S-LOCA, SGC, ECCS Fails in Recirc. (350<P<1000)

III:

IV:

Transients, NSGC, ECCS Fails in Injec.(P>2000)

SLOCA, ECCS Fails in Recirculation (P<200)

V: L-LOCA, ECCS Fails in Injection (P<200)

VI: L-LOCA, ECCS Fails in Recirculation (P<200)

SGTR: No Heat Sink, No HHSI (P a 1400 psi)

IPE Back-End Review 16 December 21, 1991, Rev. 1

Technical Evaluation Report e Mode VB raises a question about the possibility of vessel failure. If coolant is recovered in-vessel, a 50-percent chance

-is assumed that core dam'age would be arrested, thus preventing vessel failure for all plant damage states.. It should be noted that the possibility of arresting core damage upon coolant recovery is a complex phenomenon that depends on the extent of core damage and the actual time at which the coolant was injected into the vessel. Detailed analyses were conducted as a part of NUREG-1150. The analysts compared the extent of core damage at the time the in-vessel recovery occurred. The results are reported in Reference 10. In addition, a remote possibility exists that adding water to a degraded core can lead to early containment failure (i.e., in-vessel fuel coolant interactions, and increased hydrogen production). The event tree in the Turkey Point IPE does not consider this possibility.

Node CFE addresses early containment failure. The method of determination of the split fraction for early containment failure has been described in some detail in the IPE document, but, based on responses to questions asked during the site visit and the actual split fractions .presented in the CET, the method prescribed in the document is not it is believed that rigorously followed.

The uncertainty in the containment pressurization loads appears to have been neglected. In addition, from Surry to Turkey Point to obtain it the appears that the scaling containment loads was 0 not an based Finally, on the accurate choice underestimation (HPME) .

of of scaling Surry loads parameters as due a

to reference High (see Section 3.1.1).

plant might lead to Pressure Melt Ejection Mode DC addresses the coolability of debris in the containment.

The fault tree shown in the IPE document (See Figure 4.5-7) appears to be incomplete. In addition, the fault tree does not include the case of gravity pours into water (low pressure at vessel breach) with no ex-vessel steam explosion.. NUREG-1150[7]

experts assigned a low conditional probability of debris bed coolability to this case. On the other hand, in the Turkey Point IPE, a split fraction of 0.42 to 0.44 for coolability of molten debris was assumed. This estimate is not supported in the submittal, or by recent experimental data from Sandia National Laboratories. Furthermore, a molten pool/debris bed depth criterion for coolability on the concrete floor was also suggested in Appendix 1 to the IPE Generic Letter[3).

Mode CFL addresses late containment failure. As in the case of Node CFE, the actual method of determination of the split fraction (based on discussions during the site visit) was not the same as that described in the IPE submittal.

One important concern about quantification of the CET is that a large fraction of the sequences that entail coolant recovery failure in-vessel with no vessel breach leads to late containment even with fans and sprays operating (i.e., PDS IIIC). This may IPE Back-End Review 17 December 21, 1991, Rev. 1

Technical Evaluation Report introduce an artificial vulnerability that may not be applicable to all severe accident conditions, and may cause problems if the present IPE submittal is used as a basis for the Turkey Point accident management process.

Mode PPR addresses fission product removal. Mode CPH addresses containment failure mode. The fault tree presented in Figure 4.5-10 of the submittal is valid only for large-sized failure (rupture).

A similar CET is depicted for impaired containment scenarios in Figure 4.5-2. However, this tree is not used to actually evaluate the accident sequences for the impaired containment.

Instead, the original CET for the intact containment is used until the top event that raises questions conditional about early containment failure is encountered. At this node, a probability of 0.001 is assigned to containment isolation failure. The supporting analyses for assignment of this split fraction are neither documented, nor discussed in the submittal. However, as part of the site visit, the review team was shown analyses that supported the 0.001 split fraction.

CET top events are developed using fault trees that represent the relationship of severe accident processes, systems operation, and operator actions. (See page's 4-78 through 4-89 of the submittal.) The logic trees are quantified by classifying basic events as follows:

Type 1 ~

Phenomena-related, subject to large uncertainties Type 2 ~ Phenomena-related, influenced by plant-specific features Type 3 o System-related, defined by PDSs or human response issues Type 4: True of false; dependent on previous CET event node.

In the quantification of Type 3 questions, it is desirable to to take into account Equipment Qualification (EQ) issues relating the impact of a degraded core/containment environment on successful operation of the Engineered Safety Systems (e.g., fans, sprays).

Table 4.6-29 of the submittal provides a description of each basic event. (See pages 4<<173 through 4-182.) These event types appear to include relevant severe accident uncertainty issues.

Section 4.6.8.3 provides the values of conditional probabilities for most of the basic events. The conditional probability estimates were assigned based on results obtained from MAAP calculations, and other PRAs. For the most part, NUREG-1150 results are used to assign the conditional probabilities. But several deviations are noted. For instance, in the Turkey Point IPE, the conditional probability that the hot leg and the surge IPE Back-End Review 18 December 21, 1991, Rev. 1

Technical Evaluation Report line remain intact, given a high-pressure accident sequence (Event PRHLSLOK in the fault tree for node DP) is 0.175 (unlikely event). This estimated split fraction is outside the NUREG-1150 expert-a'ssigned range of 0.3 to 0.5.

3.1.2.3 ccident ro ression al s

  • In the Turkey Point IPE, the dominant plant damage states are assessed deterministically using the MAAP computer code. The MAAP calculations include both "baseline" analyses and "sensitivities." The (key) MAAP input parameters are discussed in Section 4.6.4 of Reference 1. However, the technical bases either for the selected parameters, for the most part, are nonexistent or controversial. It would have been desirable, as part of the sensitivity calculations, to acknowledge the possibility of exceeding the considered range of parametric a values. Sensitivity analyses have been performed by varying few of the more significant parameters listed in Section 4.6.4 .of Reference 1, as discussed below.

The MAAP parameters varied in the Turkey Point IPE include: (1) coefficient of cavity flooding (determines debris dispersal),debris(2) debris cooling CHF constant (determines heat transfer from to water), (3) fraction of debris that participates in DCH and (4) compartments participating in DCH. Several MAAP code parameters of interest have not undergone sensitivity analyses.

The developers of MAAP code have recommended that sensitivity analysis of these parameters be included as a part of the IPE process[8]. The parameters might include the time required to fail the RPV lower head (after core plate failure), containment failure area, long-term revaporization rate from the primary system, and water penetration into regions packed with solid debris.

Sensitivities .on the time required to fail the reactor pressure

, vessel lower head provide insights on the effect of debris-water interactions on RCS repressurization, and subsequent impact on containment.. For accident sequences where the long-term revaporization from the primary system dominates fission product release, varying the core dump fraction provides insights on the impact of heating loads on the fission product revaporization, and RCS heatup. Allowing reflood and water ingress into the debris in-vessel will permit investigation of the hazards and benefits of recovery of a damaged core. Performing all the would sensitivity analyses listed in Reference 8 of the submittal have been helpful in assessing the uncertainties associated with severe accident progression as part of the CET analysis.

IPE Back-End Review 19 December 21, 1991, Rev. 1

Technical Evaluation Report 3~1~2~4 s o educ oloaso s The results of CET analyses lead to an extensive number of end-states, which are in turn binned for source-term analyses.

This process is analogous to the one for defining PDSs for level 1 and level 2 analyses. Outcomes of the CETs are classified into a manageable number of releases, which are characterized by similarities in accident progression and source-term characteristics. The definition of release classes, categories and bins should contain as much information as possible on the accident sequence signatures and the status of the containment systems. However, the possible number of r'elease bins to be evaluated increases almost exponentially with the degree of

-detail included in the bin definitions. As an example, the NUREG-1150 analysis of Surry includes information on 10 different parameters of interest in accident progression. This results in an extensive number of release bins.

The Turkey Point IPE submittal[1] defined 27 release bins, including intact containment/recovered states. (Note Table 4.7-1, pages 4-206 and 4-207 of the submittal.) The l'ack of separate bins for bypass sequences is a concern. (Bypass states were binned together with other early releases.)

For simplification, the 27 bins were condensed into a smaller

,number of bins, considered adequate for gaining some understanding of the resulting Containment Matrix (C-Matrix).

(The submittal C-Matrix is displayed in Table 4.6-30, pages 4-185 and 4-186 of the submittal.) The key bin attributes include the following:

Containment status and failure mode NCP: Intact containment Containment failure time. Two failure times are considered; early failure and late failure.

A,B,Cs Late containment failure D,E: Early containment failure Occurrence of CCI A! No CCI (no VB)

B: No CCI C: CCI D! No CCI

'g o CCI Table 4 lists the C-matrix for the dominant PDSs in the Turkey Point IPE.

failure is It can be seen from the C-matrix that the late the dominant mode of containment failure for all PDSs.

Additionally, a large fraction of the sequences that entail IPE Back-End Review . -20 December 21, 1991, Rev. 1

Technical Evaluation Report TABLE 4 Turkey Point IPE Containmont. Xatrix TIME OF LATE INTACT CONT FAILURE CCZ? CCZ?

No VB No Yes No Yes PDS** B D NCF SLC'IIE) 0 '9 0.51 <0.01 0 01 0 '8 TEFC (IZZC) 0 ~ 21 0.35 0.42 <0 01 F 0 '1 SE (ZH) 0 '7 0.52 <0. 01 0 F 01 ALFC 0.37 0 '7 0.36 <0.01 (VIB)

ALF (VZD) 0 '7 0.27 0.36 <0.01 AEFC (VB) 0 '7 0 '7 0.36 <0.01 SEF (ZC) 0.47 0.51 <0.01 0 '1 TE (ZIIH) 0 '1 0. 01 0 '7 0 '1 TEF 0 '1 0.35 0.42 <0 ~ 01 0 '1 (ZIID)

ALFC'VZA) 0.37 0.27 0.36 <0.01

/

SLFC 0.01 0 F 51 <0.01 0.02 0.46 (IIC)

Zn-Vessel Recovery

    • The parenthetical PDS IPE Back-End Review 21 December 21, 1991, Rev. 1

Technical Evaluation Report coolant recovery in-vessel with no vessel breach are found to lead to late containment failure even with fans and sprays operating (e.g., plant damage state III C).. This is an important area of concern and could have an adverse impact on the use of the present IPE submittal for application to accident management.

3 ~ 1+2 ~ 5 o u 8 8 The Turkey Point IPE radiological release estimates are based on the simplified approach of NUREG/CR-4551f10] (NUREG-1150), and NUREG/CR-4881 f 11]. Taking this approach, the radiological releases are decomposed into several phases and quantified based on several base-case calculations for key release and transport attributes. However, in implementing this approach to assess Point IPE, the following modifications were introduced, the'urkey

,which appear to be incorrect. (Note submittal values and definition of terms on pages 4-210 and 4-211 of the submittal, respectively.)

~ The in-vessel contribution to total source term was reduced by a factor, EFAERCOR(i), which is defined as "escape fraction for aerosol agglomeration uncertainties." The aerosol'gglomeration effects were

~al e~d credited in arriving at the FCOV(i) parameter.

Therefore,= by introduction of this factor, the effect of aerosol agglomeration was double-counted..

~ The ex-vessel contribution to total source term was

@iso reduced by a similar factor, EFAERCCI(i). Here again, the effects of aerosol agglomeration were already included in FCONC (FCONCE 6 FCONCL) parameters.

This again is double-counting.

~ An escape fraction, EFLEAK, was introduced to discriminate between containment failures due to leakage and gross ruptures. It is not clear how EFLEAK values were estimated in the Turkey Point IPE because these values were not reported in NUREG/CR-4881 or other NRC documents. In addition, the parameter FRDH appears to have been misinterpreted as "Fraction of core participating in DCH," while e'e it is actually the ass participating in DCH.

fraction of the e co The release fractions for five representative radiological groups from various studies of reference plants are listed in Table 4.7-2 (see page 4-208 of the-submittal). Pool DF values of 10,in 3, and l.are recommended in NUREG/CR-4881. The numbers cited Table 4.7-2 are not consistent with these recommendations.

Furthermore, the following comments apply to the Turkey Point release calculation input constants of Table 4.7-3 (see page 4-210):

IPE Back-End Review 22 December 21, 1991, Rev. 1

e Technical Evaluation Report O. FCOR values for Te are set to zero based on MAAP Tez releases; most of the. released Te is expected to be present as TeO . This fraction for in-vessel release should differ krom I and Cs only because of its dependence on Zr oxidation. Otherwise, it should be in the same range as I and Cs. Because IPEs are expected to be used for accident management applications, important accident. signatures must be captured.

The FCCID values (FCCID is the fraction of initial inventory released from the melt during CCI for dry cavity cases) are set to 0.3 for Te and 0.05 for Sr.

Both these estimates are low. More reasonable values for the inventory of material remaining after vessel failure would be 1.0 for Te and 0.3 for Sr.

Furthermore, the FCCID values for Sr are physically inconsistent with FCOR values. (FCOR is the fraction of the initial core inventory released from the fuel prior to vessel failure.) Ex-vessel releases should be at least as high as in-vessel releases.

In addition, the quantified source terms do not include ISLOCA and SGTR sequences. These PDSs are expected to be significant (in terms of frequency and release. magnitude), and should be treated separately. Furthermore, although small as fractions of initial inventory, but large in terms of actual quantity of material, radiological estimates for more refractory species may be important to equipment survivability during severe accidents.

3 ' ~ 3 COMPARISON OF RESULTS %ZTH OTHER BTUDZES Table 5 shows a comparison of the conditional probabilities of the various containment failure modes set out in the Turkey Point IPE submittal and the Surry NUREG-1150 study. In. NUREG-1150, separate results were shown for internal initiators as well as for all initiators (internal, fire and seismic events). It should be noted that the Surry seismic results shown here are based on the EPRI characterization of seismic hazards. The separation of bypass and early containment failure is tentative and awaits a response from FP&L.

The core melt frequency from internal events is about a factor of two larger than for Surry (using the core damage value after "charging pump modification"). The largest containment-response difference is that the Surry conditional probability for late failure is about 6 percent; the corresponding value for Turkey Point is about 60 percent. The high conditional probability for late containment failure at Turkey Point appears to be partially an artifact of the IPE assumed demarcation time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> after accident initiation. The containment failure time is on the referenced time of core dama e itiat on.generally'ased IPE Back-End Review 23 December 21, 1991, Rev. 1

Technical Evaluation Report Therefore, better insights may have been gained reference time point had been used for all plant ifdamage the same states.

3 ' OUTSTANDING ISSUES At this writing, formalized Round 2 questions on the Back-End IPE are being forwarded to FP&L. These questions and requests for information are provided below. Zt is anticipated that, for the most part, the FP&L responses will be a documentation and clarification of matters discussed during the site audit, but not contained in the utility submittal[1). As discussed in Section 1 of this report, hydrogen combustion and ISLOCA issues fall into this category. However, there is one relatively unexplored issue that needs further consideration by FP&L, namely, containment performance improvements (CPIs). (Hydrogen combustion and its control are central to CPI, although the program and its intent go beyond the issue.) The comments and questions below include ones about CPI.

TABLE 5 Containment Failure as a Percentage of Total CDF:

Comparison to Surry NUREQ-1150 Results Containment Failure Surry/NUREG-1150 Turkey Point IPE CDF Internal Fire Total*

(per reactor year) 4 'E-5 1.1E-5 4 'E-4 Early 1.6 Late 29 58 '

Late/No Vessel Breach NA NA 2.9 Bypass 12 4 ~ 4+

Isolation 0~1 Intact 81 69 32 '

  • 1.0 X 10-4 (after modification) per year
      • Included in Early Failure

+ Tentative, pending FP&L Response 3.2.1 Comments on CPZ There has been no attempt to address containment performance improvements, much less recommend any procedural or hardware changes that would mitigate the consequences of severe accidents.

Specifically, the FP&L IPE submittal does not appear responsive to the issues raised in the CPI program, or to reflect the specific guidance provided in Generic Letter 88-20, Supplement IPE Back-End Review 24 December 21, 1991, Rev. 1

Technical Evaluation Report No. 3[6]. The CPI program for PWR dry containments addressed five potential containment performance improvements:

depressurization, cavity flooding, hydrogen control, mitigation of ISLOCA, and containment venting[12, 13, 14]. Although recognized that, of all containment types, the PWR dry is the it is least vulnerable to severe accidents, there may be opportunities to further reduce risk, such as that posed by hydrogen. The Generic Letter Supplement specifically cites hydrogen combustion:

Iicensees with dry containmente are expected to evaluate containment, and equipment vulnerabilitiee to localired hydrogen combustion and the need for improvements (including accident management procedures) as part of the ZPE.

Because each containment is different .and the Turkey Point containment may be more susceptible to significant hydrogen burning than some of the plants studied in the CPI program, a more aggressive look at potential hydrogen vulnerability seems appropriate. Yet, from submittal page 6.0-1, note that "...the level 2 or 'Back-End'nalysis was not examined for

'vulnerabilities'."

The Florida Power & Light submittal does not appear to support a vigorous accident management program that might lead -to development of new "Back-End" emergency operating procedures or other operator action guidelines. Florida Power & .Light claims that they cannot address Back-End fixes because of the is large uncertainties in the Back-End analysis. Yet there no uncertainty assessment (qualitative or quantitative) in the IPE submittal. One of the reasons for seriously considering containment performance improvements is to circumvent large uncertainties that otherwise compromise statements about the low-risk profile of the plant.

3.2.2 Round 2 Questions and Requests for Information

1. The subject of local hydrogen pocketing and detonation was addressed in discussion of the Back-End Analysis during the IPE Evaluation Team plant visit on November 19-21, 1991.

Members of the FP&L staff stated that their evaluation of the post-accident timing and containment internal configuration indicated that the potential for pocketing and and detonation is small. Please document these discussions the reasoning for your conclusion that the potential for pocketing and detonation is small and may be neglected in the Back-End Analysis. What hydrogen combustion-related sensitivity analyses were performed'? Why were they not included in the IPE submittal'? (Hydrogen and associated activities are key concerns of the the Containment Performance.

Improvement program.) Drawings of containment showing the Instrumental Tunnel, Reactor Cavity Compartment, Loop Compartment, Annular Compartment and Containment Upper Compartment should be provided with potential release points IPE Back-End Review 25 December 21, 1991, Rev. 1 1

0 Technical Evaluation Report and vent paths from the release compartments to adjacent compartments indicated. 'Estimates of the vent area from release compartments should also be provided.

2~ ,In order to conclude that FPEL has satisfied the intent of the IPE program, please'evaluate the Back-End results to identify containment .vulnerabilities. Please discuss the evaluation, methods and finding, and list the 10 most frequent causes of containment failure (e.g., vulnerabilities). Consider these vulnerabilities in light of candidates for containment performance improvement identified in the CPI program documentation.

believe that, specific improvements are not warranted, If you please state why. If you think that some ideas have potential and you plan to integrate them into the upcoming accident management, please st'ate so.

3. During the IPE review team site visit to Turkey Point clarifications were made by FP&L personnel about information provided in the formal submittal that helped the reviewers better understand the IPE. Please provide clarifications that address the following so that they might be included in the record:

0 a ~ The EPRI document[8] '(your Reference 4.6-2),

"Recommended Sensitivity Analyses For An Individual Plant Examination using MAAP 3.0B," was used extensively in the submittal. Please provide a summary of what values were used from this report in your base-case MAAP analyses and your sensitivity- analyses. For example, were all the values listed in Appendix A to this EPRI document used in 'your base cases?

b. The method used to determine the timing or probability of containment failure was not clear in the submittal.

Please provide a narrative that describes the process.

Include the criteria that were used to determine if the containment failure was a rupture or a leak and the uses made of Figure 4.6-2 through Figure 4.6-5. There was confusion as to how the containment failure was calculated, how the determination was made and whether it was a rupture or a leak. The method used to determine the timing or probability of containment failure was not clear in the submittal. This includes confusion over the definition of "24-hour period." Why measure the success time at 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from initiation of the accident, and not at the beginning of core damage?

Are the following statements correct?

failure at say If MAAP calculates ata 24 ) 26 hours3.009259e-4 days <br />0.00722 hours <br />4.298942e-5 weeks <br />9.893e-6 months <br />, then the pressure hours is compared to the failure probability curve and the probability plugged into the FT/CET. (No failures go beyond IPE Back-End Review 26 December 21, 1991, Rev. 1

Technical Evaluation Report 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. This, however, seems inconsistent with values on Page 4-168.) Early failures are all ruptures and the late ones are evenly divided between leaks and ruptures. Note that the MAAP hole size is constant.

Ce Some of the containment logic trees are incomplete, that is, some basic events are described in the text narrative (e.g., pages 4.0-127, 128) but are not on the trees themselves (e.g., Figure 4.5-7). Please provide complete logic trees.

d. For the radionuclide release calculations described in Section 4.7, please summarize the origin of the values used in the calculations. Were they determined from specific MAAP runs for Turkey Point, from MAAP best-estimate input values, or from recommendations made by SAIC or found in NUREG-1150?
e. The analyses of the ISLOCA and unisolated SGTRs in the submittal were confusing. Please provide a narrative of how they were analyzed, what the PDS frequencies are estimated to be, and what the estimated fission product releases to the environment are.
f. It is confusing to have figures in the submittal that are not used. Please either state the purpose of Figure 4.5-2, or remove it. Also, please provide the correct text for Section 4.6.8.4.2.

4 In several areas of the Back-End analysis, values were used as input without justification. For many, justification is

~

unnecessary, as these values are accepted by the technical community as a whole. However, there are values important to the outcome of the IPE that remain controversial. Of course you can choose the value you believe,to be appropriate, but a justification is warranted. Please provide a justification for any values used that could be viewed as controversial. Include justifications for the following: (1) The basis for not releasing the Tellurium in-vessel (EPRI document, IPE Reference 4.6-2) is not correct. It is correct that the Te is held back by unreacted Zr. However, in a typical accident sequence, 30 to 50 percent of Zr is oxidized in-vessel. Therefore, similar quantities of Te are expected to be released in-vessel. It is not necessarily conservative to assume all Te is to be released ex-vessel. Why not use the NUREG/CR-4881 recommended values for in-vessel?, (2) Why were refractory species dropped from consideration in the radiological source-term assessment? (3) What is the justification for the values selected for FCCID (0.3 for for Te and 0.05 for Sr)? (4) Please provide your rationale source-term reduction factors EFAERCOR, and EFAERCCI.

IPE Back-End Review 27 December 21, 1991, Rev. 1

Technical Evaluation Report

5. What 'is the basis for assignment of split fraction to the node "coolant recovered in-vessel" (REC)? The same split fraction (a success probability value of 0.743) is assigned to all PDSs. Why? 'H Explain why all the sequences that entail coolant recovery in-vessel and 'no vessel breach lead to late containment failure? (Generally, even for in-vessel coolant in)ection, one does not expect a late containment failure for'amage states that include operability of containment heat removal systems.)
6. What is the approximate probability of flooding the reactor cavity, conditional on a core'melt?

IPE Back-End Review 28 December 21, 1991, Rev. 1

Technical Evaluation Report 4 ~ REFERBHCES Point Plant Units 3 and 4 Probabilistic Risk Assessment - Individual Plant Examination," Final Report, prepared by Florida Power & Light, June 1991.

2~ Responses to questions, and "Attachment for Questions,"

Florida Power & Light, (no date).

'Turkey 3~ "Individual Plant Examination for Severe Accident Vulnerabilities - 10 CFR Part 50.54(f)," U.S. Nuclear Regulatory Commission, Generic Letter No. 88-20, November 23, 1988.

S 4 ~ <Initiation of the Individual Plant Examination for Severe Accident Vulnerabilities, 10 CFR Part 50.54(f)," U.S.

Nuclear Regulatory Commission, Generic Letter No. 88-20, Supplement No. 1, August 29, 1989.

5~ "Accident Management Strategies for Consideration in the Individual Plant Examination Process," U.S. Nuclear Regulatory Commission, Generic Letter 88-20, Supplement No. 2, April 4, 1990.

"Completion of Containment Performance Improvement Program and Forwarding of Insights for Use in the Individual Plant Examination for Severe Accident Vulnerabilities," U.S.

Nuclear Regulatory Commission, Generic Letter No. 88-20, Supplement No. 3, July 6, 1990.

7~ "Severe Accident Risk: An Assessment of Five U.S. Nuclear Power Plants," NUREG-1150, 1990.

8. "Recommended Sensitivity Analyses for an Individual Plant Examination Using MAAP 3.0B," Gabor, Kenton & Associates, Inc., for Electric Power Research Institute, March 14, 1991.

9~ "Status of Implementation Plan for Closure of Severe Accident Issues and Status of The Individual Plant Examination Program," U.S. Nuclear Regulatory Commission, SECY-91-084, March 28, 1991.

10 >Evaluation of Severe Accident Risks: Surry Unit 1," U.S.

Nuclear Regulatory Commission, NUREG-4551, Vol 3, Part 1, June 1990.

Nourbakhsh, H., M. Khatib-Rahbar, and R. E. Davis, "Fission Product Release Characteristics into Containments under Design Basis and Severe Accident Conditions," NUREG/CR-4881, March 1988.

IPE Back-End Review 29 December 21, 1991, Rev. 1

Technical Evaluation Report Kelley, D. L., et al., "Quantitative Analysis of Potential Performance Improvements for The Dry PWR Containment,"

NUREG/CR-5575, Idaho National Engineering Laboratory, August 1990.

13 Gido, R. G., et al., "PWR Dry Containment Parametric Studies," NUREG/CR-5630, Sandia National Laboratories, April 1991.

14. Yang; J. W., et al., "Hydrogen Combustion, Control, and.

Value-Impact Analysis for PWR Dry Containments,"

NUREG/CR-5662, Brookhaven National Laboratory, June 1991.

IPE Back-End Review 30 December 21, 1991, Rev. 1

Technical Evaluation Report APPENDIX 4~1 ant at d ant s 4~1~1 Plant-Specific Analysis Yes 4~1~2 Unique Vessel features None found 4~1~3 Most Likely Vessel tailure Mode Lower vessel head penetration tube failure 4~1~4 Unique Containment Features None found, except relatively high probability for cavity flooding 2 Plant Models and Methods for h sical rocesses 4~2~1 Codes Exercised during The Analysis MAAP 3.0B 16 4 ' ' Referenced Codes or Models Models embodied in the NUREG-1150 SURSOR Code 2 ' References on Phenomenological Treatment NUREG/CR-4551, NUREG/CR-4881, NUREG-1150, NUREG-0956 IDCOR Issue Papers 4 ' ' Phenomenology Considered HPME/DCH In-vessel and ex-vessel steam explosion Fission product revaporization Reflooding of degraded core Core concrete interaction IPE Back-End Review 31 December 21, 1991, Rev. 1

Technical Evaluation Report Hydrogen combustion (although not addressed directly in the CETs) 4 '

4~3~ l @saber of Plant Damage States 52 4 ' ' Binning Factors Time of core melt RCS pressure at vessel breach Containment safeguards systems Cavity condition (flooded, dry)

RCS retention on structures for aerosols (not included) 4 ' Conta nment ailure Character sation 4 '+i Structural Calculations Limited calculations and NUREG-1150 as reference (Note submittal page 4-72) 4 ' ' Ultimate Containment Failure Pressure V ~lll1lf 4 ' ' Additional Radionuclide Transport and Retention Structures Auxiliary Building retention was not credited.

4 ' Co tainment ent e 4.5.1 -

Conditional Probability That The Containment Zs Not Zsolated 1 'E-3 4' ' Sumher of CBTs 2 different CETs for each PDS ZPE Back-End Review 32 December 21, 1991, Rev. 1

Technical Evaluation Report 4 ' ' Qualitative or Quantitative Treatment of Uncertainties Not treated, although sensitivity studies vere performed 5' C-Xatrix Provided (See submittal pages 4-184-4-185) 4~6 ad onuclide ease a ac 4 ~ 6 ~ S. Xothod to Determine Source Terms NUREG/CR-4551, NUREG/CR-4881, NUREG-1150, NUREG-0956 MAAP results 4 ' ' Code or Referenced Source Term Analysis

.NUREG-1150 (NUREG/CR-4551)

NUREG/CR-4881 4 ' ' Number of Release Categories 27 7 Containment Performance m rovomonts pwg BE; Not Addressed IPE Back-Endeview'4 December 21, 1991, Rev. 1

Technical Evaluation Report 4 ' 3 Ruaber of Modes in Smallest And Largest CET 4 aS+i List CET Top Events PDS'- Plant Damage State DP Depressurized REC- Coolant Recovered In Vessel VF No Vessel Failure CFE No Early Containment Failure DL No Ex-Vessel Coolable Debris Bed Formed CFL- No Late Containment Failure FPR- Fission Product Removal CFM -, Containment Failure Mode 4 4~5~5 Dominant Containment Failure Hode for SBO Late failure by overpressurization 4~5 c dent ro rassion and CRT uant cat on 4~5~1 Calculated or Template Containment Loads Template loads from Surry (NUREG-1150)

Additional loads based on MAAP 4~5~2 Technique Used to Treat Equipment Survivability 1

None (See assumptions made in FP&L response to BE-3, Reference [2].)

4 ' ' Equipment Identified as Susceptible to Severe Accident Environments None identified (See assumptions made in FP&L response to BE-3, [2].)

4 ' ' Dominant Contributors to Containment Isolation Sequences Not provided 4~5~5 Dominant Contributors to Containment Bypass Sequences Interfacing LOCA and some SGTR sequences IPE Back-End Review 33 December 21, 1991, Rev. 1