ML18026A279

Rev 4 to App R Safe Shutdown Path 2 Analysis for Fires in Control Room Fire Zones

ML18026A279
Person / Time
Site:	Susquehanna
Issue date:	10/30/1996
From:	Butler F, Gorman T, Jebsen E PENNSYLVANIA POWER & LIGHT CO.
To:
Shared Package
ML18026A281	List: ML18026A279 ML18026A468 PLA-4505, Provides Util Interpretation & Application of App R,Spurious Operations Criteria at Susquehanna Ses.Closure of Listed Issues Re App R Safe Shutdown for Sses,Requested to Satisfy Remaining Issues
References
EC-013-0859, EC-013-0859-R04, EC-13-859, EC-13-859-R4, NUDOCS 9612160357
Download: ML18026A279 (128)

Text

Qg NUCLEAR ENGINEERING.

CALCULATION/ STUDY COVER SHEET and NUCLEAR RECORDS TRANSMITTALSHEET File ¹ R2-1 1.'age 1 of147 Total.

. '2. TYPE:

~Stud

>3. NUMBER: EC-013-0859,

>4. REVISION:

4 h

5. TRANSMITTAL¹:

Pl(P

') 8. UNIT:

3

• >7. QUALITYCLASS; P

• >8! DISCIPLINE:

E

). 9. DESCRIPTION:

A endix R Safe Shutdown Path 2 Anal sis for fires in the

. Control Roo'm Fire Zones-SUPERSEDED BY:

EC-

10. Alternate Number.

SEA-EE-061 12: Computer Code or Model used:

13. Application:

A endix R

>14 Affected Systems

013

• 'fN/A then line 15 is mandatory.

• >15. NON-SYSTEM DESIGNATOR:

k

16. Affected Documents:

013H

11. Cycle Fiche P

Disks P

Am't

17.

References:

'LA-4505

18. Equipment / Component ¹:

-19. DBD Number:

DBD 019,.DBD 076

>20.

PREPARED BY Print Name Thomas'A. Gorman Si nature

%21. REVIEWED BY Print Name Eric R. Jebsen Si nature

%22. APPROVED BY/ DATE Print Name F.G. Butler Si nature

/a ao

23. ACCEPTED BY PP&L/ DATE Print Name Si nature NR-DCS SIGNATURE/DATE TQBECDMPLETEDBYNUCLEARRECDRDS p E C E

) q E p ADDA NEW COVER PAGE FOR EACH REVISION FORM NfPM-QA4221-1, Revision 1

96i2f60357 96i206 PDR ADQCK 05000387 F

PDR h

NUCLEA

'ie Fields IELDS

I

,I 0

e

Page1 a

~

~

~

. ENGINEERING CALCULATIONSTUDY REVISION DESCRIPTION SHEET REVISION NO' CALCULATIONNUMBER:

EC-013-0859 This form shall be used to record the purpose oi reason for the revision, indicate the revised pages and I or affected sections and give a short description of the revision.

Check (x) the appropriate function to add, replace or remove the affected pages.

Revised

'ages

,1a 2to29 29a to 29d 38 1448 to 1474 1475 8 1476 Affected Sections A

d d

X X

R p

I X

X R

m v

Description I Purpose of Revision Replace. page 1; put rev. 0 in back-up Add page 1a Replace old pages 2 thru 29 with new pages 2 thru 29 Add pages 29a thru 29d Replace old page 38 with new page 38 Replace old pages 1448 thru 1474 with new pages 1448 thru 1474 Add pages 1475 and 1476 REVISION TYPE:

(check one) 0

.SUPERSEDED BYCALCULATIONNUMBER EC-Q FULL REVISION g}

PAGE FOR PAGE FORM NEPM-QA4221-2, Revision 1

T l

0

~

y 1

1 l

il 1I t

\\

'f I

l I

"I p

t Ir

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire O.

Section TABLEOF CONTENTS Title

1.0 INTRODUCTION

. 2.0 3.0 OBJECTIVE CONCLUSIONS ANDRECOMMENDATIONS 6

4.0 ASSUMPTIONS/INPUTS 5.0

, METHODS

= 6.0

~

REFERENCES 13

".7.0 RESULTS I

17

~Aendicee

,C Control Room Appe'ndix R Compliance Report Appendix R Cable Hit Resolution Worksheets Resolution ofMOV"Hot Short" Issue 29 76 1448 EC-013%859 Revision'4 Page 2

Susquehanna Steam Electric Station Appendix-R Analysis for a Control Room Fire 1.0

1.1 INTRODUCTION

a Puruoae This calculation identifies Station (SSES)

Control compliances (i.e. "hits").

followingfire zones:

those cables routed in the Susquehanna Steam Electric Room fire area that are potential Appendix R non-The Control Room fire area CS-9 consists of the 0-26A 0-26I 0-26N 0-26E 0-26J 0-26P 0-26F 0-26G 26H

'-26K 0-26L 0-26M 0-26R In the context of this report, "Control Room" refers to Fire Area.CS-9 in its entirety.

. For a fire in anyone of these-fire zones, credit is takeri for Safe Shutdown Path,2, Alternate Shutdown using the Remote Shutdown Panel (refer to section 1.3).

This report evaluates the Path 2 cable/component noncompliances ("hits") in Fire Area CS-9 and identifies the method of achieving Appendix R compliance for each.

Appendix A provides a summary ofthis information. Appendix B provides the individual hit resolution worksheets for the Path 2 cable hits in the Control Room. Appendix C evaluates the,NRC IN 92-18 MOVHot Short Concern for the

'SES Control Room fire.

1.2 B~ack round In October of 1987,,Pennsylvania Power and Light Company (PPEcL) completed the re-analysis of Appendix R Compliance Assessment for a fire in the'Control

. Room (Reference 6.2.12).

This analysis identified specific-areas of non-compliance with respect to Appendix R cables required for Safe Shutdown Path 2 (termed "cable'its")

routed in the Control Room.

Circuit isolation and coniporient cable failure modes were evaluated and recommendations for achieving compliance were identified in the report '

Subsequent to this, the Appendix R Closeout Project Team was formed.

This team's role was to implement the recommendations provided in the original issue of the analysis..In performing the actions necessary to implement the recommendations made in the analysis, modifications were performed, procedural aetio'ns were put in place

and, in some

cases, additional analysis providing justification for the acceptability of the existing condition was provided:

In most cases, the information included in this analysis required recourse to'either a DCP, EC-0134859 Revision 4 Page g

0 1

't J

A k

b

'r II I

p I

U P

I I

Il e

'L l

Susiluehanna Steam Electric Station

= Appendix R Analysis for a Control Room Fire an operating procedure or another analysis to fullyunderstand the final disposition for the noncompliance.

This calculation was revised to update this Appendix R Control Room Fire Analysis by incorporating the information from each ofthe above-mentioned areas

'nd consolidating it into one composite location.

I Revisions 2 and 3 to this calculation were prepared to address NRC Information Notice 92-18 related to MOV "Hot Shorts".

Revision 4 was prepared to address the revised Spurious Actuation Criteria agreed to between PAL and the'NRC.

Discussions were held between PPEcL and the NRC on numerous occasions relative to spurious operations criteria. On January 25, 1996 a meeting was held in PP8cL's Allentown offiice to discuss the spurious actuation criteria to be applied to the evaluation offires in fire areas outside ofthe Main Control Room.

The results

. of this discussion was transmitted to the NRC in PLA-4442.

This PLA also transmitted revision 3 of this calculation. which contained the evaluation of the NRC IN 92-18 MOV"Hot Short" issue.

Upon review of this submittal, NRC initiated a telephone conversation on July 25, 1996 in which they informed PP&L that they wanted PAL to apply the same, spurious actuation criteria discussed for the areas. outside the Main Control Room to the evalaution of fires in the Main Control Room.

After a review of the feasibility of honoring this request, PP8cL requested a follow up telephone coversation on September 4, 1996 to clarify the NRC's request.

1.3 In this telecon, the NRC confirmed that the Control Room fire analysis should apply the criteria from Generic Letter, 86-10 paragraph 5.3.10 to Control Room circuits isolated from the Main Control Room, should use the criteria from PL'A-4442 for all non-isolated circuits and should add consideration for spurious initiation of systems that could result in an inadvertent and uncontrolled RPV overfill condition. The revised Spurious Operation Criteria was transmitted to the NRC under PLA-4505.

'F Control Room-Fire Shutdown Scenario Path 2 For a Control Room fire, plant shutdown is accomphshed by use ofthe Alternative Shutdown Path controlled from the Remote Shutdown Panel (RSP).

This shutdown path is defined as "Path 2".

For a

serious Control Room fire necessitating evacuation, a manual plant scram is initiated, the MDIV's

'are'anually

closed, the Reactor Feedwater'umps are tripped and the Reactor Feedwater Pump discharge valves are closed prior to evacuating the Control Room.

Although NRC GL 86-10 Section 3.8.4 typically allows the operator to perform a plant SCRAM prior to evacuating the Main Control Room, the NRC has stated in a telecon on September 4, 1996,-that they would grant us.an EC-013-0859 Revision 4 Page g

/

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire additional operator action of closing the, MSIV's prior to evacuating the Main Control Room.

Our request to have the NRC of6cially confirm this position and grant us this additional operator action prior to Main Control Room evacuation was documented in PLA-4505.

In addition, PLA-4505 requested that the NRC.also approve the additional pre-evacuation operator actions described above.

These additional operator actions are necessary to prevent an RPV overfill condition caused by a feedwater flow controller failure (high) during feedwater coastdown after closing the MSIV's, s

I The discussion addressing the requirements of NRC GL 86-10 Section 3.8.4

-regarding operator actions performed prior to leaving the Main Control Room is.

contained. in section 7 of this calculation under the heading for the MSIV's and Feed water.

In the Path 2 safe shutdown scenario, Reactor Coola'nt makeup is provided by the

'CIC System.

The reactor depressurization function is provided by opening orie of three specific SRVs or cycling'them from the RSP.

In addition, the ability to manually initiate ADS from-the relay rooms'has been preserved.

The decay heat removal function is provided by RHR operating in the'shutdown cooling mode.

The Reactor Recirculation pumps are assured tripped.'he MSIVs isolate on loss of ofF-site power, manual isolation signal, or low

'vacuum in the main condenser.

The manual isolation signal is provided for in the Plant Procedures ON-100/200-009, and the analysis is simplified ifthe MSIVs are

'losed or can be closed for all shutdown paths.

This simplifies the analysis by making shutdown paths the same regardless of whether or not off-site power is available.

The NRC has stated that for SSES 'manual closure ofthe MSIV's by the

.operator prior to evacuating the Main Control Room is an acceptable action.

In addition to the analysis simplification features described above, this action, along with closing the Feedwater Pump discharge valves'and tripping the Feedwater Turbines, mitigates the efFects of a spurious RPV injection from the Feedwater System.

'he support functions either remove heat or supply power to the front line process system functions of reactivity control,, reactor 'oolant

makeup, reactor depressurization and decay heat removal.

Cooling for equipment's provided by the Emergency Service Water System.

RHRSW provides cooling water for the RHR System.

Power is supplied by the Emergency Diesel Generators (in the case of a LOOP) and the batteries to the various components within the AC and. DC Electrical

Distribution System.

h s

• EC-0134859 Revision 4 Page Q

'I 0

l

.Susquehanna Steam Electric Station Aypendix R Analysis for a Control Room Fire t

'rea cooling for the RCIC Rooms, the RHR pumps, the ESWS pumps and the Emergency Diesel Generators is provided by the ECCS'Room

Coolers, ESWHVAC and EDGHVAC Systems, respectively.

2.0 OBJECTIVE This calculation revision serves to consolidate all information related.to, the analysis performed to demonstrate compliance for the Susquehanna Steam Electric

'tation (SSES) with the requirements of 10CFR50 Appendix R for a Control Room Fire. This calculation was revised to:

I

'a.

Incorporate changes to the safe shutdown component and cable data resulting from plant modifications.

b.

Incorporate changes to include the final method of resolution (i.e.

hit disposition) for the Appendix R non-compliances identified in the original analysis.

c.'-'Incorporate as-built information from'the modifications performed, in response to those dispositions crediting plant changes as a

method of achieving compliance in the original issue of.this analysis.

d."

Consolidate

.information from various studies that are inter-related and collectively address the method ofachieving Appendix R compliance for a fire in the Control Room.'.

Document the'implementation ofthe Spurious Operations Criteria provided by PPEcL to the NRC in Attachment Ato PLA-4505.

i This calculation revision encompasses the criteria and assumptions for a Control Room fire evaluation outlined in'EC-013-0814 (Reference 6.2.10), and serves to

~

supersede that document in its entirety.

Changes made within this revision ofthis calculation are indicated by a revision bar in the right hand column.

Editorial and format changes are not noted with a revision bar.

3.0 CONCLUSION

S ANDRECOMMENDATIONS The results compiled in Section 7 demonstrate that measures are currently in place, to address each of the potential Appendix R non-compliances (i.e. cable hits)-

identified for a Control'Room fire. A rigorous review ofthe cable hits in Fire Area

'S-9 has identified that each cable hit is adequately addressed by one or more of the following methods:

a.

A modification was implemented to change the,circuit to provide circuit isolation.

EC-0134859 Revision 4 Page

I 0

Sustiuehanna Steam Electric Station Appendix R Analysis for a Control Room Fire b.

An existing analysis has concluded that cable failure will not prevent safe shutdown.

c.

Procedural actions are in place to manually operate equipment to satisfy the Path 2 safe shutdown.

d.

Deviation requests are in place that justify the acceptability of the existing configuration.

The review performed, as documented herein, concludes that the Susquehanna Steam Electric Station is in full compliance with the requirements of 10CFR50.48 and Appendix R with respect to safe shutdown in the event of a Control Room fire. The results ofthe analysis performed to address the MOV"Hot Short" Issue, NRC Information Notice 92-18, is contained in Appendix C.

4.0 ASSUMPTIONS/INPUTS 4.1 Re lato Evaluation Criteria The criteria used to analyze for a fire in the Control Room and the ability to meet 10CFR50.48 Appendix R requirements to accomplish and maintain shutdown are as follows:

4.1.1

= PP8cL is committed to 10CFR50.48, Appendix R Sections III.G, J, and O..

Section III.Gcontains the requirements for fire protection capability.

4.1.2 Section III:G.3 discusses the option of providing alternate shutdown if Section III;G.2 separation requirements cannot be met.

+

4.1.3 Section III.Ldiscusses the requirements for alternate shutdown capability.

While not a direct commitment, it is invoked via Section III.G.3.

Therefore,Section III.Lrequirements apply to the analysis for a Control Room fire.

4.1.4 Generic Letter 86-10, Item 3.8.4 provides NRC guidance related to Control Room fire considerations.

The NRC has stated that for SSES an operator action to close the MSIV's in the event of a Main Control Room Fire prior to evacuation is

. accceptable.

This position has been transmitted to the NRC for formal acceptance in PLA-4505.

PLA-4505 also requested approval from the NRC to trip the Feedwater Pump Turbine and close the Feedwater Pump discharge valves prior to evacuating the Contol Room.

EC-013-0859 Revision 4 Page 7

I

Susquehanna Steam Electric Station Appendix'R Analysis for a Control Room Fire 4.2 Safe Shutdown Re uirements for a Control Room Fire

."4.2.2 4.2.3 4.2.4 4.2.5 4.2.6 4.2.7 4.3 For the first'72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> post-fire, the analysis considers shutdown with and without the availability of oQsite power.

After 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, offsite power can be assumed restored:

I A LOCA, seismic event, or any other.'Design Basis Accident is not considered to occur concurrent with a fire. The fire is considered to be the single failure.

The reactor is tripped in the Control Room. The MSIV's are closed in the Control Room.

The Feedwater Pump Turbines are tripped and the Feedwater Pump discharge valves are closed in the Control Room.

Additional. operator actioris prior to Control Room evacuation were not assumed.

The automatic actuation of equipment (e.g., generators, valves, pumps etc.) is assumed potentially lost if control circuits could be adversely affected by the Control Room fir'e.

Spurious inadvertent actuation of equipment is considered in the analysis.

The spurious actuation criteria applied was transmitted to the NRC in PLA-4505 for formal acc'eptance.

This criteria is summarized in section 4.4.4 a'nd explained in more detailed in the Appendix R Compliance Manual, Calculation EC-013-0843. A separate analysis to document the results ofthe evaluation to address NRC IN 92-18 related to MOV"Hot Shorts" is contained in Appendix C.'eturn to'the Control Room post fire is acceptable provided the specific conditions described in NRC'Generic Letter 86-10 are met.

This option, however, was not used in this.analysis due to th'e difficultyofmeeting the necessa'ry conditions.

Damage to=systems in the Control Roo'm due to a Control-Room fire cannot be predicted.

Therefore, a bounding analysis was performed to demonstrate that safe shutdown to cold shutdown'could be achieved from outside the main Control-Room. The as'sumption of"limited fire" damage was not used in this analysis.

For the equipment required for shutdown at the Remote Shutdown Panel, a review was performed to determine the existence of proper isolation 'and circuit independence from the affects of the Control Room fire. For those cases where isolation was not

adequate, measures were taken (modifications, procedural

. actions, etc.) to ensure the ability to operate the component, when required Procedural Actions and Re airs 4.3.1 Manual actions, other than those discussed in section 4;2.3, may be credited to rest'ore power, assure valve lineups, isolate cable faults, etc. provided these actions can be performed outside ofthe main control room and with available manpower.

h EC-0134859 Revision 4 Page p

c' I

4

/

4 1

4

'I 0

'I

'I 1'

~

~

Susquehanna Steam Electric Station Appendix,R Analysis for a Control Room Fire

'I 4.3.2 No "repairs" are allowed to achieve hot shutdown.

Repairs to Cold Shutdown

'ystems are acceptable provided specific detailed procedures, and dedicated repair parts are available onsite and the time required to make the repairs is reconciled with the Shutdown scenario..

a Note:

The NRC designates 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> as the require) time to be able to reach cold shutdown.

4.4 Circuit Failure Criteria 4.4.1 The followingfire damage to electrical equipment was considered:

s a) hot shorts b) open circuits

,c) shorts to ground 4.4.2 Ifall possible'ailure states of the equipment (valves fail open or closed) were evaluated and found acceptable, the specific circuit failure modes were considered to have no impact on safe shutdown.

4.4.3, =Hot short conditions were not postulated to,be cleared by the fire condition..Only manual actions to'solate the circuit or other appropriate manual actions were considered to mitigate the spurious signal. Equipment damage due to hot shorts as postulated in NRC IN 92-18 has been addressed by a separate analysis contained in A'ppendix C.

4.4.4 For fires in the main Control Room, SectIon III.L*requiresthat spurious operation

'fequipment that can affect safe shutdown functions be considered.

The spurious operation criteria for circuits isolated from the main Control Room is contained in NRC Generic Letter 86-10'paragraph 5.3.10. 'That criteria reads as follows:

~

The safe shutdown'capability should not be adversely affected by any one spurious actuation or signal resulting from a fire in any plant area; and

~

The safe shutdown capability should not be adversely affected by a fire in any plant area which results in the loss. ofall automatic function (signal, logic) from the circuits located in the area in conjunction with the one worst case spurious actuation or signal resulting from the fire; and

, ~

The safe shutdown capability should not be adversely affected by a fire in any

- plant area which results in spurious actuation ofthe redundant valves in any one high-low pressure interface line.

For application ofthis criteria for all situations other than Hi/Lo pressure interfaces, it is assumed that one spurious operation occurs prior to actuating the transfer switch at the RSP.

This spurious operation,may be as a result ofa hot I,

'EC-013-0859 Revision 4 Page g

0 I

0 I

h

T r

Susquehanna Steam Electric Station

, Appendix R'Analysis for a Control Room Fire short on a circuit'that is isolated from the main Control Room or on one that is not. It is not necessary to postulate spurious operation ofequipment in each of these two categories: i.e isolated and non-isolated circuits.

For circuits remaining in the main Control Room that are not isolated, all potential spurious operations must be addressed on a one-at-a-time basis.

Each individual spurious operation must be identified and a mitigating action to prevent an impact to safe shutdown must be developed.

In developing this mitigating action, however, it is not acceptable to ignore a potential hot short on one piece of equipment as a mitigating action. for another piece ofequipment.

The act ofactuating the transfer switch at the RSP is the mitigating action to address any spurious operation for circuits isolated from the main Control Room.

For circuits not.isolated form the main Control Room, some other means of mitigitingthe effects ofthe potential spurious operation must be available.

I Examples ofways to mitigate either prior to or during the process ofthe fire the effects ofeach spurious operation are as follows:

~

Provide a fire barrier or wrap

~

Route the circuit ofconcern in a dedicated raceway that does not contain any other normally energized circuits'that could cause a hot short '

Reroute or relocate the circuit/component

~

Provide a Procedural Action, such as:

- Have the breaker-for the component ofconcern normally racked out

'or fuses removed) so that inadvertent operation is'not,possible.

[Note:

For Hi/Lo pressure interface components, a 3 phase hot short on the ac power cable or 2 hot shorts ofthe'proper polarity oil the dc power

.cable must still be evaluated.]

- Perform an action in response to the. fire condition to mitigate the impact ofthe spurious operation.

[Note: Ifthis action involves manually operating an MOVusing the hand wheel, it must be demonstrated that fire damage did not result in a hot short with the potential to damage the valve (i.e. NRC IN 92-18 concern)]

- ~

Identify'other equipment, that can prevent the spuriously operated component from affecting safe shutdown For a more detailed explanation of the spurious operation criteria applied in the control room fire analysis see Calculation EC-013-0843 and PLA-4505.

4.4.5 For three-phase AC circuits, the probability of getting a hot short on all three

'hases in the proper sequence to cause spurious operation ofa motor is considered sufficiently.low as to not require evaluation except for any cases involving High/Low pressure interfaces.

For ungrounded DC circuits ifit can be shown that EC-013-0859 Revision 4 Page /0

I

Susquehanna Stcam Electric Station Appendix R Analysis for a Control Room Fire only two hot shorts ofthe proper, polarity without grounding could cause spurious'peration, no further evaluation is necessary except for any cases involving High/Low pressure interfaces.

4.5 Confirmin Anal sis

. 4.5.1 The Control Rod Drive System (scram function) was evaluated in Calculation EC-013-0849 (Reference 6.2.13) and dispositioned as not a concern to, accomplish the scram function. This system was not addressed in this calculation.

~

= 5.0 METHODS 5.1 The components required for safe shutdow'n for path 2

are developed in calculation EC-013-0979 (Reference 6.2.1),

Safe Shutdown Paths for Fires Outside and Inside of Control Room.

The cables required,to support the performance of. the components on this path were developed in calculation EC-013-0883 (Reference 6.2.15),

Safe Shutdown Cable Selection.

The complete listing ofcomponents/cables to be analyzed'fora Control Room fire was generated from the Appendix R Compliance Database Management System (ARCDMS)

(Reference 6.9.1).

This report is included herein as Appendix A and identifies all the cable hits for Path 2 in the Control Room.

I In order to ensure the accuracy and completeness of this listing, as a part of the preparation of revision 1 to this calculation, a line by line comparison was performed between Appendix A of calculation EC-013-0859 Revision 0 and the Appendix A contained herein.

Any differences identified were reconciled.

Any changes made to Appendix A subsequent to revision 1 were specifically checked as a part ofthat revision.

5.2 Each component and associated cable identified in Section 5.1 was'reviewed to.

determine whether proper isolation of the cable exists. Ifisolation with separate'ontrol power fusing exists, component operability is assured outside the Control Room. Appendix C addresses the MOVhot short concerns ofNRC IN 92-18.

'I Jl'solation capability was determined based on a review of schematic diagrams and

"" was documented in one ofthe followinglocations:

I a.

Existing Worksheets in Appendix B b.

Appendix AofRevision 0 ofthis calculation c.

Calculation EC-013-0854 (Reference 6.2.10)

I Collectively, the above-mentioned documents determine the isolation capability for all ofthe Path 2 cables in the Control Room.

EC-013-0859 Revision 4

,Page /j

II p

It

't

, Susquehanna Steam Electric Station Appen

'.3 dix R Analysis for a Control Room Fire I

Many of the cables originally identified as not having proper isolation have been resolved by DCPs that modified the component circuitry to provide control remote

'rom the control room'and isolation from cable, faults caused by the Control Room

'ire.

The specific DCP references are identified in Appendix A and Section 6.6.

The remaining cables that were not directly isolated were reviewed to analyze the effects of electrical faults/failures'(hits) on the

cables, The" failure, mqdes considered are as follows:

I a)

Shorts-to-Ground

,, b) Hot Shorts c)

'" Open Circuits 5.4 The effect on component operation was then analyzed and the resulting effect on system operation was evaluated.- Ifit could be shown that the failures did not'ffect plant safe shutdown using Path 2 capabilities, it was so documented on the'able hit worksheet and no further action was required.

t For those systems. that could-result in an inadvertent overfilling of the RPV, the impacts were addressed on a system basis.

The systems identified as having this potential are:

Feedwater; Condensate; CRD; Standby Liquid Control; HPCI; RCIC; RKVLPCI(ofthe non-safe shutdown division); Core Spray.

Each ofthese systems was analyzed separately for its impact on safe shutdown.

For any impacts a separate mitigating action was identified.

The above referenced system impact

'valuations.

are contained in section 7.

For cables whose failure could affect safe shutdown, the following methods were employed to resolve the cable "hit".

1 a)

Determined if.a DCP is 'necessary to modify the circuit to provide circuit isolation.

b) Determined ifprior analysis has been performed that assures that failure will not prevent safe shutdown.

1

. c). Determined ifprocedural actions were in, place. (e.g.,'operating procedure to

'trip a power supply breaker) to satisfy Path 2 safe shutdown.

d) Reviewed and referenced deviation requests that justify the acceptability ofthe existing configuration.

5.5 The results of-the analysis for the cable hits and their final disposition wer6

'ocumented on the Appendix R Analysis Cable Hit Worksheets, provided herein as Appendix B.

5.6 A summary of the method of compliance for each cable hit was completed and provided in Appendix A; This report documents the cable hits for a Control Room'C-0134859 Revision 4 Page /g.

0 0

I 0

Susquehanna Stcam Electric Station Appendix R Analysis for a Control Room Fire t

fire, the final disposition, the supporting analysis document reference, if appropriate, and the dispositioning document reference l

5.7, A summary ofthe results ofthe analysis and evaluations is contained in Section 7.

, 6.0

.,REFERENCES The following references were used to conduct this study.

Only those references identified by a revision bar were reviewed for this latest revision ofthis calculation.

6.1 Re lato Documents 6:1.1 10CFR Part 50.48 and 10CFR 50, Appendix R 6;1.2 Generic Letter 86-10 0

6.1.3 ISSUE Inspection Procedure 64100,,'.1.4 SER, dated August 9, 1989.

6.1.5 PLA-4505, Spurious Operation Criteria for Fires at SSES 6.2 Calculations I

/

New No.

Rev.

6.2..1 EC-013-0979 0

Old No.

SE-B-NA-016 6.2.3 EC-013-0845 0

SEA-EE-051 6.2.4 EC-013-0860 0

SEA-EE-020

. 6.2;5 EC-013-0964 0

6.2.6 EC-013-0624 0

SE-B-NA-038 SE-AAA-059 6.2.7 EC-013-0725 0-SEA-EE-078 6.2.8 EC-013-0863 0

SEA-EE-060 6.2.9 EC-013-0814 0

SEA-EE-057 6.2.2 EC-013-0858 0

SEA-EE-019 Title Safe Shutdown Paths for Fires Outside and Inside Control Room

'ppendix R Required Cables for the MSIV's Appendix R.ADS/SRV Spurious Cable Analysis Evaluation ofReactor Recirculation System

,=- Cables for Appendix R Compliance Main Steam Line Drain Valves Appendix R - Coordination Calculation for Diesel Generator Synchronization Circuits Appendix R Evaluation ofNCRs 88-0007 through 88-0012

'ppendix R--Hit Resolution for CSHVAC Components/Cables Appendix R - S/D Path 2 Analysis in CR Fire Zones '(addItional components)

'C-013-0859 Revision 4 Page /P

0

'i Sus'quehanna Steam Electric Station Appendix R An'alysis for a Control Room Fire 6.2.12 EC-013-'0849,0 SEA-EE-017

. 6.2.13 EC-013-0883 0

6.2;14 EC-013-0873 0

SEA-EE-012 SEA-EE-033

'.2.15 EC-013-0788 0

SEA-EE-447 6.3

~Drawin s

6.2.10 EC-013-0854 0

SEA-EE-018, 6.2.11 EC-013-0846 0

SEA-EE-052 Verification ofEquipment Isolation at the RSP in the event ofa CR fire Evaluatiori ofAppendix R Ventilation System Non-Compliances Acct ofFire on the Operation ofSDV Vent and Drain Valves Safe Shutdown Cable Selection

~

Evaluation to Ensure Isolation ofRCS Flow Diversio'n in the Event ofa Plant Fire Disposition ofEDR G10122 - Appendix R Flow Diversion Components - HPCI 6.3.1 E-296,E-297, SSES,Unit 1 &Common, G.E./Bechtel Cable No. Cross-Reference, dated 3/06/86.

'.3.2 E-298,E-299, SSES Unit 1 &Common, G.E./Bechtel Cable No. Cross-Reference, dated 3/06/86.

6.3.3

'E-294, Revision 5, Open, List ofRaceway Wrapped with Fire Barrier Material Unit 1 and Common.

6.3.4 E-295; Revision 4, 10/09/86, List ofRaceway Wrapped with Fire Barrier Material Unit 2.

6.3.5 ElP0600, Interim Drawing Change Notice, IDCNNo. 2, dated 6/17/87.

6.3.6 Panel Module Wiring List M1-H12-538-2 M1-H12-226 Ml-H12-586 Ml-H12-543, M1-H12-562 M1-H12-530 Ml-H12-563 Ml-H12-1082 Ml-H12-590 Jl-867 Ml-H12-589 Ml-H12-529

, Ml-H12-553 M1-H12-704 Rev.

5 3

14 17

~

'12 15 13 3'0 4'll 9

10 14 Date 8/15/85 6/15/83 8/15/85 6/3/83 9/9/85 5/8/80 1/13/86 7/11/85 9/9/85 10/81 1/31/85 8/2/83

=

4/10/85 10/16/84 Panel Module 0700 070'1

'702 0703

0704, 0705

. 0706

~Control Room

'ontrol Room Control Room Control Room 0700 0701 0702 EC-0134859 Revision 4 Page /Q

'I

Susquehanna Stcam Electric Station Appendix R Analysis for a Control Room Fire 6.3.7 Raceway Schedule D~iN E-72 E-73 E-74 E-76 E-77 E-78 6.3.8 Circuit Schedule Rev.

65 64 62

. 50 49 53 Date.

1/2/86 11/6/85 8/2/84 8/31/84 1/3/85 5/29/84 D~iN:

E-82 E-83 E-84

- E-86 E-87 E-88

Rev,

. 60 59 56'6 43 49 Date 1/2/86 1.1/6/85 8/2/84 8/3 1'/84 1/3/85 5/29/84 6.3.9 Schematic Diagrams - Sheets'and revisions as noted in the Appendix B

'orksheets.

6.3.10 DCN 88-0933 - ESW Flow Indication P

6.3;11 M-1002, Revision 3, Appendix R - Safe Shutdown Component List N

6.4 Procedures Procedure.

Rev.

Title' 6.4.1 EO-100-102 6.'4.2 EO-200-102 6.4.3 EO-100-112 6.4.4 EO-200-112 6.4.5 GO-100-002 6.4.6 GO-200-002 6.4.7 ON-013-001 6.4.8 ON-030-001 6.4.9 ON-054-001 6.4.10 ON-100-009

,6.4.11 ON-104-001 6.4.12-ON-200-009 6.4.13 OP-024-001 7

7 7

7 22 24 4

p 3

3 3

3 3

10 RPV Control

'RPV Control Rapid Depressurization Rapid Depressurization

~

Plant Startup, Heatup and Power Operation Plant Startup, Heatup and Power Operation, Response to Fire Local, Operation ofControl Structure HVAC Loss ofEmergency, Service Water (ESW)

Control Room Evacuation Unit 1 Response to Loss ofQuite Power

, Control Room Evacuation Diesel Generators EC-0134859 Revision 4 Page /W

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire 6.4.14 OP-054-001 8

6.4.15 OP-149-002 22 6.4.16 OP-249-002 25 6.4.17 OP-100-00.1 6.4.18 OP-200-001

. 6.5

.Deviation Re uests I

~

Emergency Service Water System (ESW)

RHR Operation in Shutdown Cooling Mode RHR Operation in Shutdown Cooling Mode Remote Shutdown - Normal Plant Operating Lineup Remote Shutdown - Normal Plant Operating Lineup

'I 6.5.1'eviation Request No. 2, Revision 4, "Suppression Pool Temperature Indication".

6.5.2 Deviation Request No. 37, Revision 4, "Control:Room Raised Floor and Control.

Structure Cable Chase Fire Protection".

/

6.6 Modifications.

DCP 6.6.1 86-3008C 6.6.2 86-'3008D 6.6.3 86-3008E

6.6.4, 86-3008F 6.6.5 86-3009C 6.6.6, 86-3009D 6.6.7 86-3009E 6.6.8 86-3009F

. 6.6,9 86-3010C 6.6.10 86-3010D 6.6.11 88-3016H 6.6.12 88-3016I I

6.6.13 88-3016J 6,6.14 88-3016K 6.6.15 88-3016L 6.6.16 88-30'16M 6.6.17 88-3016N 6.6.18 88-3017A 6.6.19 88-3017E 6.6.20 88-3017F 6.6.21 88-3018E

. 6.6.22 88-3018F-I Title HVACFan Operation Transferred from Control Room RHR Pump Room Cooling Fan Operation Transferred from Control Room HVACFan Operation Transferred from Contrdl Room Unit 1 RHR SW Pump Room Fan Control HVACFan Operation Transferred from Control Room RHR Pump Room Cooling Fan Operation Transferred from Control Room HVACFan Operation Transferred from Control Room Unit 2 RHR SW Pump Room Fan Control HVACFan Operation Transferred from Control Room-Common Unit ESW Pump Room Fan Control Add 2nd Location for CS HVAC Operation ESW Loop A and Loop B Diesel Generator Coolers Supply and Return Isolation Valves Diesel "A"Operation - ModifyWiring on Local'ontrol Switch Diesel "B"Operation - ModifyWiring on Local Control'witch Diesel "C" Operation - ModifyWiring on'Local Control Switch Diesel "D"Operation - ModifyWiring on Local Control Switch DG E ModifyWiring on Local Control Switch Emergency Switchgear Room Cooling Fan

. RHR HX SW Valves HV-11210B and HV-11215B - Unit'1 RWCU Isolatio'n Valves - Fire in the Control Room Appendix R Cable isolation for RHR SW Valves RWCU Valve Isolation for Control Room Fire (U2)

EC-0134859 Revision 4 Page /C

0

s Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire 6.7 'n ineerin Work Re uests EWR 6.7.1 M80821

. 6.7.2 M80805 6.7.3 M80546 Title I

Ap'pendix R - Cables/Components for Emergency Diesel

'enerator Operation Unit 1 - RWCU Valve'Isolation Appendix R - ESW Issues Analysis 6.9 Databases V

6.9.1 Appendix R Compliance Database Management System (ARCDMS), dated November 1, 1994 (including outstanding change'mechanisms through August 23, 1995) 6.9.2 SEIS Equipment Index, dated 7/22/87.

6.10 Miscellaneous V'.10.1 PAL Memorandum No. EE1233, dated 9/24/87,'ppendix R'Activity10-Raceways Recommended to be Protected.

6.11 Non-Conformance Re orts 6.11.1 NCR 87-0,725 6.11.2 NCR 87-0726 6.11.'3 NCR 87-0744 6.11.4 NCR 87-0745, 7.0:

RESULTS 7.1 Cable Hit Resolution Re oit Develo ment v

v I

As a part of revision i to this calculation, the Cable Hit Resolution Report

~

(Appendix A) generated from the Appendix R Compliance Database Management System (ARCDMS) was verified "line by line" to ensure consistency with Appendix A ofthe previous'revision (Reference 6.2.12).

DifFerences between the two reports were reviewed and justified.

Any'hanges to this information as a result ofsubsequent revisions were checked as a part ofthat revision.

l J'

EC-013-0859 Revision 4 Page /7

I 0

K I

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire-7.2 Cable Hit Worksheet Develo ment J

Revision 1 of this calculation reviewed and updated all cable hit worksheets affected by the implementing actions taken as a part of the Appendix R Closeout Project.

Cable hit worksheets for the CSHVAC cable hits were extracted from.calculation EC-013-0863 (Reference 6.2.8).

Some cable hit worksheets for cables for certain RCIC components were extracted from calculation EC-013-0814 (Reference 6.2.9).

These worksheets were included in Appendix B so that all worksheets for the Control Room Analysis would be contained in one location.

t In some cases, a separate study addresses the specific cable hits (e.gts certain cable hits for RBHVAC, Flow Diversion, SPM and RCIC). In such" cases, a worksheet was not developed for the specific cable hit,and instead, the respective applicable calculation was referenced iiiAppendix A. =

In some cases, a cable hit is associated with a number ofdifferent components.

In many such cases, only one cable hit worksheet was generated and each of the components was identified on the worksheet.

7.3 Cable Hit Evaluation Summa b.S stem-The following is a discussion on a system basis of the implemented solutions for

'esolvirig Path 2 cable hits or potential system impacts identified or postulated for Control Room fire:

7.3.1 ADS Calculation EC-'013-0845 (Reference 6.2.3) concluded that for a fire in the Control Room to spuriously actuate ADS at least two (2) hot shorts in conjunction with the spurious operation of a CS or RHR pump must occur simultaneously..

The ADS circuit for one division.requires that pressure permissive contacts (K9A and K10A) be closed when the low pressure system is available.

Therefore, spurious operation ofADS due to a fire in the Control Room is not considered credible.

As a more plausible but still not credible event, it can be postulated that a Control Room fire could result in two selective hot shorts on'the ADS actuation circuitry such that, upon initiation of the RHR pump by the operator from the'emote' Shutdown Panel, a spurious ADS actuation could occur. In the unlikely event that this were to occu'r, the effect of this eventloss,of motive steam to drive RCIC,

'ould be mitigated by use ofthe RHR System in the LPCI 'mode from the Remote Shutdown Panel to achieve a Path 2 safe shutdown.

Eventually, RHR could be

~ +

s EC-013-0859 Revision 4

,Page /g

L Susquehanna Steam Electric Station Appendiz R Analysis for a Control Room Pire placed into the Alternate Shutdown Cooling mode for accomplishing the decay heat removal function.

,Therefore, the loss of RCIC at the Remote Shutdown Panel due to a spurious ADS, even though considered to be a non-credible event, would not affect the

'bilityto achieve and maintain safe shutdown.

.732 Conderisate'\\

Inadvertent injection by the condensate system could be postulated as a result of a Control Room fire.

This inadvertent injection, however, would'ot be possible until the reactor pressure was reduced to below 600 psig.

The normal operating

.pressure'or the SSES reactor is 1050 psia which corresponds to a temperature'f 550 F.

'The condensatesystem shutoff head of 615 psia corresponds to a

temperature of489'.

This represents a temperature difference of 61 F.

At a vessel cooldown rate of 90'i hour, it would take approximately 40 minutes before vessel pressure would reach the level at which condensate could inject.

Since this condition willnot occur until the vessel is at a lower pressure and a very low power level, an analysis'will be performed to determine ifthe SRV discharge piping can sustain the loads from this condition.

Since adequate time exists to perform an operator action to prevent or mitigate the effects ofthis condition, this, remains as an option should the'results of the analysis described above not be favorable.

'ince a LOOP will cause a loss of power to the 13.8 kv switchgear, this operator action will only be required ifa LOOP does not occur with the fire.

Therefore, should this action be required to be performed, normal lighting should be available.

As a result, emergency lighting to meet the requirements of Appendix R Section III.J need not be installed's long as it can be shown that the fire will not damage normal lighting.

7.3.3 CRD The postulated concern for the CRD system circuits that-are not isolated from the

-main Control Room is the inadvertent and uncont'rolled" injection into the RPV resulting in a vessel overfill condition at high pressure.

This condition for CRD would re'suit in an injection rate of less than 100 gpm.

An injection rate of this magnitude would allow greater than 30 minutes for the operator to respond.

The operator would respond by taking control of the unit at the RSP.

The impact of inadvertent, CRD injection would be mitigated by throttling.back on the RCIC injection rate at high pressures and the RHR SDC injection rate at low pressures.

'herefore, ina'dvertent injection by the CRD system will have "no impact on safe shutdown.

'C<13-0859 Revision 4 Page

S V

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire 7.3.4 CSHVAC.

A fire in,the Control Room could damage cables for Control. Structure HVAC equipment, by causing grounds, open circuits, or hot shorts.

'The cable failures were analyzed in Calculation EC-013-0863 (Reference 6.2.8) and those that could prevent the proper functioning of equipment, and potentially result in the, loss of, CSHVAC, were identified.

Amodification was performed (DCP 88-3016H) to provide a backup control panel to ensure that in case of a Control Room fire, the CSHVAC system components required for Pa'th 2 safe shutdown would remain functional.

The "new" Control Structure HVAC Alternate Control Panel OC879 was installed in Area 21, Elevation 783'-0" and provides for local operation arid for isolation from Control Room damaged circuits. During normal plant operation, the transfer switches are in the normal position and the control switches are in the auto position.

In addition to the alternate HVAC panel, Plant Procedure ON-100/200-009 requires an operator to secure any, battery equalizing charges in progress and to implement Procedure, ON-030-001 to restore Battery Ro'om Ventilation, iflost due to a fire in the Control Room.

For the case of a fire in the Control Room, procedural actions contained in Procedure ON-030-001 assure that the smoke from the Control Room fire willnot acct those areas of the Control Structure that must be habitable for remote operation ofthe CSHVAC System.

By performing the above-mentioned procedural actions and controlling CSHVAC at Panel OC879, the availability ofCSHVAC to support Safe Shutdown Path 2 for a Control Room fire is preserved.

7.3.5 CSS In the event of a fire in the Control Room, certain cables for the Core Spray System automatic initiation logic could fault, potentially resulting in the spurious actuation ofa Core Spray Pump.

ll Core Spray System circuits'are not isolated from the Main Control Room.

By

'ssuming a number of independent spurious operations on the Core Spray System components, a vessel'overfill condition caused by inadvertent injection could be' postulated.

Should this condition occur, it would not occur until the RPV was at low pressure and safe shutdown could still be accomplished by further depressurizing the RPV with the SRV's available at the RSP, using RHR in the LPCI mode and, ultimately, using RHR in the Alternate Shutdown Cooling mode:

Any excess water flow from the Core Spray System resulting from this condition

\\

EC-0134859 Revision 4 Page ZO

0

/

0

Susquehanna Stcam Electric Station Appendix R.Analysis for a Control Room Fire t

E could be integrated with the shutdown approach described above with no impact to safe shutdown.

7.3.6 EDG HVAC Ventilation Fans OV512A, B, C, D are required for cooling ofthe Diesel Generator Rooms and c'ould be lost due to a fire in the Control Room.

Without the fan running the room temperature could exceed the recommended operating design temperature of the equipment, and could prev'ent.the system from performing its intended safe shutdown function.

l

.In the original design, a Control Room fire-induced fault could-either blow the control circuit fuse or create an open circuit, thereby disabling fan control from the

'ontrol Room..

However, new temperature switches (TSHL-08271A, B, C and D), one in each Diesel Generator Room, have been installed (per DCP 86-3010C) to automatically start the respective room fan when room temperature exceeds the switch-setp oint:

This modification isolates the Control Room portion of the circuitry and thus assures that the Diesel Generator Room fans willoperate to support safe shutdown Path 2 in the event of a Control Room fire. No operator response is required as the fan automatically starts on high temperature.

C I

.7.3.7 Electrical I

/

A. Diesel Generators I

Diesel Generators A, B, C and D are standby power supplies which provide Class lE power to the Appendix R Safe Shutdown equipment in the event of total loss of'ooffsite power.

A fiAh diesel, diesel generator is available as a substitute if.any one of the four diesel units is temporarily 'out of service.

However, no credit is taken for Diesel Generator E to achieve Appendix R compliance.

Each of the diesel generators'an be 'operated at their respective local generator and engine control panels (OC519A'thro'ugh E and OC521A through E).or at the plant operating benchboard (OC653) in the main Control Room. A local-remote selector switch enables the operator to transfer control from the main Control Room to the local panels by isolating the control circuits from'C653.

1

/

In the original design, the selector switch in the Control Room panel isolated only one side ofthe remote control circuits.

Thus, a Control Room fire which results in conductor shorts or shorts to ground at OC653 could have disabled EC-013-0859 Revision 4 Page 7 /

I l'

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire I

the engine or generator control circuits and prevented operation from the local control panels for a Path 2 safe shutdown.

Since a loss of oAsite power was assumed for this fire, the unavailability ofthe diesel generator during a Control Room fire would adversely aFect safe shutdown capability."

Modifications (DCP 88-3016J, K, L, M and N) were performed to completely isolate both sides ofthe Control Room circuits.

This design ensures that local control of the diesel generators remains available in the event of a Control Room fire. Procedure ON-100/200-009 contains the operator action to locally start the Diesel Generators, ifrequired, in response to a loss ofoffsite power..

B. 4.16KV Safeguards Switchgears In the event ofa Control Room fire, certain cables for control and indication of the breakers from the Emergency Diesel Generators to the 4.16 kV ESS Switchgears could fail resulting in the loss of power to the buses.

However, this cable fault can be isolated by operation of a local control switch.

Procedures ON-100/200-009 require an operator to'manually close the breaker at the switchgear in order to re-energize the bus, should the breaker fail to close automatically.

'I I

To prevent failures in the following associated circuits (of a common power source) cables from causing loss of 4.16KV Safeguards Switchgear

1A201, 1A202,

1A203, 1A204,

2A201, 2A202,

2A203, and

2A204, circuit coordination between the primary and secondary side fuses of the potential transformer was performed in Calculation EC-013-0624 (Reference 6.2.6) for the following cables:

Cable

1) NK1A0401G

2) NKIA0402G

3) NKIA0403G

4) NK1A0404G

5) NK2A0401G

6) NK2A0402G

7) NK2A0403G

8) NK2A0404G

~Com onent 4.16KV Safeguards Switchgear 1A201

'4.16KV Safeguards Switchgear 1A202 4.16KV Safeguards Switchgear 1A203 4.16KV Safeguards Switchgear 1A204 4.16KV Safeguards Switchgear 2A201 4.16KV Safeguards Switchgear 2A202 4.16KV Safeguards Switchgear 2A203 4.16KV Safeguards Switchgear 2A204 The calculation concluded that adequate circuit coordination currently exists.'

Thus, a fire in the Control Room willnot impact the availability ofthe 4.16KV Switchgears to support safe shutdown due to associated circuits concerns.

EC-013-0859 Revision 4 Page Z.2

I

'h

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire

'.3.8 ESW,HVAC Ventilation Fans 1V506A, B and 2V506A, B are required for cooling ofthe RHR Service Water Pump Rooms.

Fans OV521A, B, C and D are required for cooling of the ESWS Pump Rooms.

Each of these fans could be lost due to a fire in the Control Room.

Without the fans running, the respective room temperature could exceed the recommended operating design temperature of the equipment, and could prevent the system fr'om performing its intended safe shutdown function.

In the original design, a Control Room fire-induced fault could either blow the control circuit fuse or create an open circuit, thereby disabling fan control from the Control Room.

However, new temperature switches in the respective pump rooms have been installed, as noted below, to automatically start the respective room fan when room temperature exceeds the switch setpoint.'Com 1V506A 1V506B 2V506A 2V506B OV521A OV521B OV521C OV521D D~escri tioo RHRSW Pump Room Fan

~

RHRSW Pump Room Fan RHRSW Pump Room Fan RHRSW Pump Room Fan ESSW Pump Room Fan ESSWiPump Room Fan ESSW Pump Room Fan,

'SSW Pump Room Fan,,

Temp Switches TSHL-18201A TSHL-,1 8201B TSHL-28201A TSHL-28201B TSHL-08206A TSHL-08206B TSHL-08206C TSHL-08206D DCP Reference 86-3008F 86-3008F 86-3009F 86-3009F 86-3010D 86-3010D 86-3010D 86-3010D 1

These modifications isolate the Control Room portion of the circuitry, 'thereby assuring the operability ofthe pump room fans to support Safe Shutdown Path 2 in the event of a Control Room fire. No operator response is required as the fans automatically start on high temperature.

7.3.9 ESWS The Emergency Service, Water (ESW) System provides cooling water to the Emergency Diesel Generators which are required for Appendix R Safe Shutdown.

Each loop supplies cooling w'ater to the diesel coolers through separate inlet and outlet motor operated valves.

Control of the valves is from the Main Control Room Panel OC653 In 1988, an evaluation was performed which indicated that a fire in the Main Control Room could have caused control cables associated with either the ESW valve controls on OC653 or the auto-loop transfer logic to be damaged,

thereby, impacting the operability of ESW.

The valves on both loops could have also

'puriously closed due to a short in the control. cables.

Such spurious closure ofthe EC-013-0859 Revision 4 Page gg

E 5

,(

. ~

Susquehanna Stcam. Electric Station Appendix R Analysis for a Control Room Fire valves would had to have been immediately corrected whenever the diesel engine is running to support Appendix R safe shutdown.

h To prevent loss of Emergency Service Water to the Diesel Generator-coolers, isolation, of the following cables and local control for the following valves'was "necessary.

Cable

~

Valve AKOS0404C, G HV-01112A AKOS0405C, G HV-01122A BKOS0406C, G HV-01112B, BKOS0407C, G HV-01122B CKOS0408C, G HV-01'112C CKOS0409C, G HV-01122C DKOS0410C, G HV-01112D DKOS0411C, G HV-01122D e

A modification was implemented (DCP 88-30161) which removed control of the ESW valves from the main Control Room panel OC653, and located it to new control pariels OC521A, B, C and D.

Therefore, a fire in the Control Room will not impact the operability ofthe ESW System to support Safe Shutdown Path 2.

7.3.10 Feedwater

'he concern for the spurious operation of the feedwater circuits that are not isolated from the main Control Room is the inadvertent and uncontrolled injection by the feedwater system resulting in a vessel overfill condition at high pressure.

'As mitigating action, the NRC has stated that the use of an immediate operator action to close the MSIV's prior to evacuating the'main Control. Room is an acceptable mitigating action. Closing the MSIV's willremove the motive steam to the feedwater turbine and steam driven pump.'his alone, however, will not stop feedwater injection and prevent any impact to safe shutdown.

. Ifafter performing this action, the feedwater flow controller were to fail high in conjunction with a loss of the 54" feedwater trip there is a sufficient amount of steam available in the'main steam system to continue to drive the feedwater turbine driven pump such that a vessel overfill condition would result in less than 1,minute.

To prevent 'this condition an additional operator action to close the feedwater pump discharge valve prior to evacuating the Control Room is necessary. 'This is' currently an immediate operator action in the Control Room Evacuation Procedure, ON-100/200-009.

This 'additional action, however, will not prevent the undesired condition from occurring since the circuits for feedwater pump discharge valves are not isolated

'C-013-0859 Revision 4 Page

0 J

~

~

e I

Susquehanna Steam Electric Station Appendiz R Analysis for a Control Room Fire from the Control Room and; as such, are susceptible to post evacuation hot shorts.

As" a positive action to assure that this condition does not occur, the,feedwater turbines must also be tripped by the operator prior to evacuating the Control

, Room.

It has been verified that a hot short cannot restart the feedwater turbine once it has been tripped.

This is true since re-starting the turbine requires that the operator drive the motor speed changer to zero, press the tuibine reset button and, then, increase turbine speed with the motor'speed.changer.

In addition, the feedwater pump discharge'valve for the particular turbine must also spuriously open.

This combination ofcable faults is considered to be too remote to be credible.

. Each of these actions at the "operating benchboard, 1/2C651, in the same vicinity where the unit. is scrammed.

Therefore, both of these actions could be performed in. rapid sequence'following the action of manually scramming the unit.'he combined time.to perform 'these actions in conjunction with the reactor scram, and closing the MSIV's is estimated to be on the order of 1 minute.

y 7.3.11 Flow Diversion A. Reactor Head Vent Valves In the event of a'ontrol Room fire, inadvertent RCS blowdown via the spurious opening of the Reactor Head Vent Valves HV-B21-1F001, 1F002 (Unit 1), 2F001 and 2F002 (Unit 2) is p'revented by normally depowering,the 1F001 and 2F001 valves.

Startup procedures GO-100-002 and GO-200-002 require an operator to liftlead 1R at the MCCs specified below.'alve

~S HV-B21-1F001 MCC,1B236 Cubicle 102 HV-B21-2F001 MCC 2B236 Cubicle 102 H

Since these valves "are de-powered closed during normal plant operation,'a Control Room fire cannot result in spurious actuation of both'series valves.

This precludes the possibility offlow diversion via the Reactor Head Vent line.

B. Main Steam Line Drain Isolation Valves Spurious opening or failure to close the Main Steam Line Drain Isolation

'alves HV-B21-1F016, 1F019, 2F016 and 2F019 is possible as a result of a Co'ntrol Room fire. However, Calculation EC-013-0964 (Reference 6.2.5) has determined that the flow diversion that would result in the event both isolation valves were to open would be insufficient to impact Path 2 safe shutdown capability. 'dequate steam generated by decay heat would be-available,to EC-013-0859 Revision 4 Page

t

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire

/

support RCIC operation despite the flow diversion to the', HP Condenser.

Therefore, the spurious opening ofboth valves in series would not impact Safe Shutdown Path 2.

For the condition described in Appendix C, Resolution of the MOV,"Hot Short" Issue, prior to entering RHR in the Alternate Shutdown Cooling mode, it'must be assured that the main steam line drain is isolated from the HP Condenser..

Calculation EC-,083-0530, Effect of Flow Diversion through the Open Main Steam Line Drain Valves, has determined'that, when using

'Alternate Shutdown Cooling, this line must be isolated in approximately 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> in order to prevent an impact to the ECCS systems taking suction from the Suppression Pool.

In order to isolate this system, either the F019 or the F021 and F033,valves must be closed.'his operator action applies to both, units.

An operator action has been added to drawing E-690 to capture this required operator action.

Since this action is not required for a minimum of 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> after the event, 8

hour battery powered emergency lights would not be effective in aiding the operator.

-Due to the simplicity of this action, hand-held lighting routinely carried by the operators is considered to be adequate for this action.

Reactor Water Clean-up Isolation Valves-To isolate the RWCU System for a fire in the Control Room, either isolation valve HV-G33-1F001 (2F001) or HV-G33-1F004 (2F004),is required to close and not spuriously open to preclude RCS flow diversion.

In the original design, neither valve was isolated for a Control Room fire. A Control Room fire could have resulted in cable faults leading to the inability to close or the potential spurious opening of the two Reactor Water Cleanup Isolation Valves

-HV-G33-'1F001, 1F004, 2F001 and 2F004.

This condition in conjunctio'n with the spurious opening of the HV-G33-1F033/2F033 valve would create a flow diversion.

I

, Although the RWCU letdown line has pressure switches on either side of the F033 valve that willactivate to de-energize and close this valve protecting the piping system in the event of an inadvertent opening of the F033 valve, a modification (DCP 88-3017F and 18F) was implemented to provide valves HV-G33-1F004 and 'HV-G33-2F001 with circuit, isolation through a new isolation control transfer switch at the Remote Shutdown Panel.

The transfer'witch is dedicated to valves HV-G33-1F004 and HV-G33-2F001.

The dedicated transfer switch provides the operator at the Remote Shutdown Panel with the flexibilityto determine when letdown through the RWCU System is to be terminated or restored.

EC-013-0859 Revision 4 Page 2 +

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire The circuit isolation ensures that the valve is protected from spurious operation in the event of a Control Room fire. The valve opening circuit, closing circuit position indication and thermal overload bypass circuits were modified with remote shutdown isolation contacts such that all Control Room components

, and devices are isolated upon transfer to the Remote Shutdown Panel 1C201 (2C201).

D. Suppression Pool Filter Pump Suction Valves The potential for spurious actuation ofboth valves HV-15766 and HV-15768 (Unit 1) or HV-25766 and HV-25768 (Unit 2) was evaluated in Calculation EC-013-0725 (Reference 6.2.7).

Due to a lack of circuit isolation, a Control Room fire can result in inadvertent flow diversion via the Suppression Pool.

Filter Pump Suction Valves.

Therefore, an operator action to close these valves should a decrease in suppression pool level occur has been included in the plant procedures.

See Calculation EC-013-0725 for the details.

7.3.12 HP,CI Calculation EC-013-0788 evaluated the impact on plant 'safe shutdown of a spurious initiation of HPCI during a Control Room fire.'purious initiation of HPCI would only be a concern ifthe reactor high level trip was defeated by the same fire'.

This condition can be postulated to occur from a combination of a hot shorts and/or two shorts to ground on the start and/or control circuitry for selected components.

Should this condition occur, action must be, taken to mitigate the efFects of the event within approximately 3 minutes. 'o address this, a plant modification will be implemented to prevent the condition from occurring.

See Calculation EC-013-0788 for the. details.

The condition of three independent hot-shorts causing spurious operation of the system and the condition of sequential selected cable faults on the HPCI control circuitry that initiates the system for 25.to 30 seconds and then is overcome by a fault to ground which disables,.the 54" trip within.the next 30 to 40 seconds have been reviewed'with the NRC and are considered to be a non-credible event that are not required to be included in the Appendix R design basis.

7.3.13. MSIVs In the event of a Control Room fire, various cables for the Inboard Main Steam Isolation Valves (HV-B21-1F022A, B, C and D and HV-B21-2F022A,', C and D) and Outboard Main Steam Isolatio'n Valves (HV-B21-1F028A, B, C and D and HV-2F028A, B, C and D) could experience a fire-induced fault to cause the EC-013-0859 Revision 4 Page "Z7

1 p

~

I I ~

t' 1

I 0

~ I E

t g

II I

I"

Susquehanna Stcam Electric Station Appendix R Analysis for a Control Room Fire MSIV's to remain open.

An inadvertent opening of two,MSIV's in any, single main steam line could result in an undesired RCS blowdown.

These cable faults, however, would not prevent closure of the MSIV's should a trip signal from a'rocess variable, such as low condenser vacuum or low, low, low'eactor vessel level, be received.

l I

To address the condition of an inadvertent and uncontrolled injection'f the feedwater system, the NRC has stated that man'ual closure of the MSIV's will be allowed for SSES as an immediate operator action.

This action will remove the motive steam from the feedwater turbine driven,pump and prevent injection by

'eedwater.

To use an immediate operator action, other than a reactor scram, for

, the Control Room fire scenario Generic Letter 86-10 requires a demonstration of the capability to'perform the action and an assurance that a subsequ'ent.spurious operation cannot negate the e6ects ofthe manual action.

For the action of manually closing the MSIV's prior to evacuating the main Control Room, it has been'verfied that a subsequent spurious operation cannot negate the effect (i.e a subsequent hot short or series of hot shorts cannot reopen these valves).,

This action is currently included in Procedure ON-100/200-009, Evacuation of the Control Room, as an immediate operator action.

Since the location from which the reactor is scrammed is within a few feet of the location from which the MSIV's will be closed, it is reasonable to assume that this action can'be accomplished in a short period of time by a single operator.

As such, this additional immediate operator can be performed in the event of a Control Room fi're. The combined time for performing this action in conjunction with the reactor scram and the actions itemized above for the feedwater system is estimated to be on the order of 1 minute.

As a'n added precaution to assure these valves are closed, Procedures ON-100-009 and.ON-200-009 require an operator to trip the following breakers in the event of a Control Room fire.

Breaker 1Y201A-CB2A and 1Y201B-CB8B 2Y201A-'CB2A and 2Y201B-CB8B J

h Valves HV-B21-1F022A, B, C and D HV-B21-1F028A, B, C and D HV.-B21-2F022A, B, C and D HV-B21-2F028A, B, C and D Removing power to the MSIVs ensures that, the outboard and inboard MSIVs are closed in the event ofa Control Room fire.

EC-013-0859 Revision 4

~ Page g g

1 D

4 0

t II C

i i'

l lt

4 Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire s

II 7.3'.14 RBHVAC I

4'he Reactor Building Ventilation System fans are required operable to provide

=

cooling to various rooms to support Safe Shutdown Path 2.

Without the fan running, the room temperature could exceed the recommended operating design temperature of the equipment, and could prevent equipment within.the respective room from performing its intended safe shutdoWn function.

Temp DCP

~Com D~escri tion

'witches Reference.

1V210B RHR Pump Room Unit Cooler Fan TSHL-17660B 86-3008D 2V210A RHR Pump Room Unit Cooler Fan

• TSHL-27660A,86-3009D 1V208A RCIC Pump Room Unit Cooler Fan TSHL-17661A 86-3008E 2V208A RCIC Pump Room Unit Cooler Fan TSHL-27661A 86-3009E 1V222A Emg. Swgr. Room Unit Cooler Fan TSHL-17631A 86-3008C 2V222A 'mg. Swgr. Room Unit Cooler Fan TSHL-27631A 86-3009C s

/

Cable-Hit Worksheets for the above-mentioned components are provided in Appendix B

with the exception 'of the following cables:

FKOV1451M, FKlB2541C, D, E, F (for 1V222B) and FK2V2541F (for 2V222B).

These cable hits are dispositioned in Calculation EC-013-0846 (Reference 6.2.12).

In the original design, a Control Room fire-induced fault'to certain cables for these.

fans could either'low the control circuit fitse or create an open circuit, thereby disabling fan control from the Control Room. However, new temperature switches in the individual rooms have been installed; as noted below, to'utomatically start the fan when the room temperature exceeds the switch setpoint.

e The temperature switch co'ntrol scheme does not require any operator response as the fan automatically starts on 'high temperature to maintain room temperature within design limits.

Therefore, a fire in the Control Room. will not impact the availability of the RBHVAC System to support Path'2 Safe Shutdown.

/

7.3.15 RCIC e

I II The RCIC components required for Path 2 safe shutdown are properly is'olated from'a Control P.oom fire.

The potential impact of spurious operation of RCIC components resulting from the fire-induced damage to cables for the RCIC automatic actuation logic was evaluated and determined not to impact. safe shutdown.

Sufficient time exists to take control of the RCIC system at the RSP and to mitigate the effects of any spurious operations affecting the RCIC system.

See Calculation EC-0i3-0788 for details:

EC-013-0859 Revision 4 Page

I 0

f 0

'I

'Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire

,7.3.16 RHR The circuitry'for the majority of the RHR components required for Path 2 Safe Shutdown are properly isolated from a Control Room fire.

However', several" cables for the RHR automatic actuation lo'gic and one cable for valve HV-E11-2F008 are not isolated.

Fire-induced faults to select RHR automatic actuation logic cables could result in inadvertent spurious actuation of RHR safe, shutdown components.,

In addition, fire damage to the 2F008 cable could preclude operability ofthe valve from the RSP.

These cables are. routed in the space below the Control Room. raised floor (in Fire Zones 0-26G and 0-26J) and in the "cable shaft under the north and south soffits (Fire Zones 0-26M and 0-26R).

Deviation Request No. 37 was issued and,subsequently approved by. an SER justifying that the fire protection features provided under the Control Room raised floor and cable chases and cable shafts as described in the deviation request are adequate for the existing cable installation and provide an equivalent degree of safety as required by Appendix R.

The, deviation request concluded that the addition of raceway wrapping and fully-automatic fire suppression systems in Fire Areas CS-9 to meet the requirements of 10CFR50 Appendix, R,Section III.G.2 would not significantly increase the level offire protection in these fire areas.

Another potential concern for the non-safe shutdown division ofthe RHR System who'se.circuits are not isolated from the main Control Room is inadvertent and uncontrolled injection'nto the RPV.

By assuming a number of independent spurious operations on these RHR System components, a vessel overfill condition could be postulated.

Should this condition occur, however, it would not-occur

" until the RPV was at low pressure and safe shutdown could still be accomplished by further depressurizing'the RPV with'the SRV's available at the. RSP, using'HR in the LPCI mode and, ultimately, using,RHR in'the Alternate Shutdown, Cooling mode.

Any excess water flow from the Core Spray System resulting from this condition could be integrated with the shutdown approach described above with no impact to safe shutdown.

C Therefore, adequate measures are in place to mitigate against the potential for, and consequences of, a possible fire in the Control Room from impacting the RHR cables that are not isolated.

7.3.17 RHRSW The Unit 1 and Unit 2 Residual Heat Removal Heat Exchanger Service Water Valves HV-11210B and HV-11215B (Unit 1) and HV-21210A and HV-21215A (Unit 2) are Appendix R Path 2 Safe Shutdown components that=must have the capability of being operated outside the Control Room.

For a fire in the Control '

EC-0134859 Revision 4 Page gg~

I I

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire I,

l Room, these valves are provided with control capability at the Remote Shutdown Panels 1C201B and 2C201B to support RHR Shutdown Cooling.

In the original design, all ofthe "control circuitr'y for these valves from the Control Room could be isolated at the RSP except for the thermal overload bypass circuitry to Control Room Panel OC697.

In the event of a fire in the Control Room, the cable for the bypass circuit could have short circuited to ground causing the valve's control circuit fuse to blow which would have compromised the operability ofthe valves at the RSP.

't DCPs 88-3017E and 18E, added isolation circuitry to valves HV-.11210B and HV-11215B and HV-21210A and HV-21215A thermal overload bypass circuitry to assure the control capability ofthe valves at the RSP during an Appendix R Path 2 shutdown.

Thus, a fire in the Control Room willnot impact the ability to operate these valves from the RSP to support Path 2 safe shutdow'n..

e 7.3.18 RRS In order to support. Path 2 Safe Shutdown in the event ofa Control Room fire, the Reactor Recirculation Pumps are required to be automatically or manually tripped prior to pla'cing RHR into the Shutdown Cooling mode.

'I A. Two cables, one for each of the Unit 1 and 2 Reactor Recirculation Pumps

. (1P401A and 1P401B) are routed in cable shafts under the north and south soffits-(Fire Zones 0-26M and 0-26R) ofFire Area CS-9.

Deviation Request No. 37 was issued and subsequently approved per an SER justifying that the fire protection features provided under the control room, raised floor and the cable chases and c'able shafts are adequate for the existing cable installation and provide an equivalent degree of safety as required by Appendix R.

The deviation request concluded that the addition of raceway wrapping and fully-automatic fire suppression systems in Fire Areas CS-9 to meet the requirements of 10CFR50 Appendix R, Section III.G.2 would not significantly increase the level offire protection in thes'e fire areas.

B. A fire in the Control Room (in Fire Zone 0-26H) could damage-certain cables for the Units 1 an'd 2 Reactor Recirculation Pumps resulting in the inadvertent spurious operation of the respective pump(s).

In,the unlikely event of this occurrence, Procedure

'ON-100/200-009 requires an operator to trip the'eactor Recirculation Pumps motor generator set (2 per unit) locally at the respective 13.8KV.cubicles for the drive motors.

This ensures that a fire in the Control Room that results in the, spurious start of the RRS pumps can be tripped. manually thereby preserving Safe Shutdown Path 2 functionality.

EC-013-0859 Revision 4 Page

P

~

0

Susquehanna Stcam Electric Station Appendix R Analysis for a Control Room Fire 7.3.19 Standby Liquid Control The, postulated concern for the Standby Liquid Control system circuits that are not isolated from the main Control Room is the inadvertent and uncontrolled injection into the RPV resulting in a vessel overfill condition at high pressure.

This condition would result in an injection rate of less than 100 gpm.

The available quantity offlow from this system is also limited to the inventory in the SLC Tank.

An injection rate of this magnitude would allow'greater than 30 minutes for the operator to respond.

The operator would respond by taking control ofthe unit at the RSP.

The impact of inadvertent SLC injection would be mitigated by throttling back. on the RCIC injection rate at high pressures and the,RHR SDC injection rate at low pressures.

Therefore, 'inadvertent injection by the SLC system willhave no impact on safe shutdown.

7.3.20 SPM Suppression pool temperature monitoring for the remote shutdown panels is provided by the SPM System for each unit. While two redundant divisions of the system are provided for e'ach unit and displayed at the units remote shutdown panel, there is a possibility that cable failure induced by a Control Room fire could result in the loss of suppression pool temperature indication at the remote shutdown panels.

In the event that both divisions of suppression pool temperature indication at the remote shutdown panel fail, alternative indirectmethods are available and acceptable to provide suppression pool temperature status.

Suppression pool temperature can be inferred from suppression chamber atmosphere temperature and atmosphere pressure indication which are available at the remote shutdown panel.

Because the chamber remains a relatively constant volume, the pool heat-up or cooldown rate willbe related to these two air parameters.

Deviation Request No. 2 was issued and subsequently accepted by the NRC in an SER justifying the acceptability of utilizing the alternative means. of monitoring suppression pool temperature.

Therefore, no further action is necessary.

7.3.21 SRVs In the event of a fire in a Control Room fire zone requiring evacuation and plant shutdown from the Remote Shutdown Panels, a SRV is required to be opened'ntermittently per Calculation EC-013-0845 (Reference 6.2.3) while the remaining ADS/SRVs are required to remain closed.

For this Path 2 shutdown method, one out ofthree SRVs willbe cycled to open and close manually by the operator at the Remote Shutdown Panel in order to depressurize the reactor vessel while maintaining sufficient steam pressure supply to the RCIC pump turbine.

EC-013-0859 Revision 4 Page

'I t

E

~i 0

lw I

1 I

1 0

Susquehanna Steam Electric Station Appendix R Analysis for a Control Room Fire A fire-induced cable failure resulting in the spurious opening of one SRV has been determined to have an insignificant affect on the steam supply to the.RCIC pump turbine. In addition to this, symptom based Procedures EO-100-102 and EO-100-'12, require the operator to open additional SRV valves should this be necessary to depressurize the reactor to allow the use of low pressure injection systems.

This can be accomplished by depressurizing using an ADS/SRV controlled by an individual keylock switch in the relay room. The individual keylock switch circuits in'the r'clay rooms are independent of the 'Control Room and will function

'egardless offire damage in the Control Room.

Procedures. ON-100-009 and ON-200-009 provide the direction for an operator to manually control the ADS SRV's from the relay rooms.'

EC-013-0859 Revision 4 Page ZP a(

I 0

't 4

O.

hI

Fire Ar Evaluation for: CS-9 Required Shutdown Path: 2 Appe dix A Control Room Appendix R Compliance Report Dat

/10/29 Page 9 S stem

.'ffected Unit

.- Com onent

'::,Cable Fire Zone Dis osition:,.

Analysis"-

Documen't;-

Dispositioning:.,

Do'cument":.:'.'LOWDIV HV01120C HV01120D HV01122A HV01122B HV01122C HV01122D 1

HV15766 HV15768 CKOS0417C DKOS0419C AKOS0405C BKOS0407C CKOS0409C DKOS0411C EK1EC5101 EK1Q403?K EK1Q4169C EK1Q4169F FK1EC5208 FK1Q0628G FK1 Q4170C 0-26G Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26M Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26G Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26M Circuit modified to provide isolation from Control Room 0-26H Circuit modified to provide isolation from Control Room 0-26H Operator Action Required 0-26H Operator Action Required 0-26N Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required Appendix B Appendix B Appendix B Ap endixB Appendix B Appendix B Appendix B Appendix B Appendix B Appendix B EC-013-0725 EC-013-0?25 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 DCP 88-3016I DCP 88-3016I DCP 88-30161 DCP 88-30161 DCP 88-30161 DCP 88-3016I DCP 88-3016I DCP 88-3016I DCP 88-3016I DCP 88-30161 ON-100-009 ON-1 00-009 ON-1 00-009 ON-1 00-009 ON-1 00-009 ON-100-009 ON-1 00-009 ON-1 00-009 FK1Q4170F HVB211F001 EK1Q160?C HVB211F002 FK1 Q1608C HVB211F016 EK1P62204 HVB211F019 FK1P62315 HVG331F001 EK1P64202 HVG331F004 FK1 P6F202 0-26H Operator Action Required 0-26H Willnot impact shutdown 0-26H Willnot impact shutdown 0-26H Spurious valve operation willnot impact shutdown 0-26H Spurious valve operation willnot impact shutdown 0-26H Modified HV-G33-1F004 circuitry to ensure operability 0-26H Modified HV-G33-1F004 circuitry to ensure operabili EC-013-0725 Appendix B Appendix B EC-013-0964 EC-013-0964 Appendix B Appendix B ON-1 00-009 GO-1 00-002 GO-1 00-002 ON-1 00-009 ON-1 00-009 DCP 88-3017F DCP 88-3017F FLOWDIV 2

HV25766 HV25768 EK2E0002A EK2Q4037K EK2Q4169C EK2Q4169F FK2E0014A FK2Q0628G FK2Q4170C FK2Q4170F 0-26H Operator Action Required 0=261 Operator Action Required 0-26R Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required 0-26H Operator Action Required EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 EC-013-0725 ON-200-009 ON-200-.009 ON-200-009 ON-200-009 ON-200-009 ON-200-009 ON-200-009 ON-200-009 ON-200-009 ON-200-009 HVB212F001 EK2Q160?C HVB212F002 FK2Q1608C HVB212FO'I6 EK2P0178A 0-26H Willnot impact shutdown 0-26H Redundant valve is available 0-26H Spurious valve operation will not im act shutdown Appendix B EC-013-0725 EC-013-0964 GO-200-002 ON-200-009 ON-200-009

0 e

APPENDIX C RESOLUTION. OF THE MOV"HOT SHORT" ISSUE NRC INFORMATIONNOTICE 92-18 I

EC-013-0859 Page /+g

0

1.0 Purpose

The purpose ofthis calculation is to document the final disposition ofthe MOV"Hot Short" issue described in NRC Information Notice (IN) 92-18, Potential for Loss of Remote Shutdown Capability During a Control Room Fire.

The resolution ofthis issue for SSES is possible due to the redundancy provided in Path 2,

. the safe shutdown path used to mitigate the effects offires in the main Control Room..

The normal line up expected to be 'used for the Control Room fire scenario is to use RCIC for vessel make up, to use RCIC assisted by SRV's to control the reactor pressure,'to use RHR Suppression Pool Cooling during the time when steam is being dumped into the Suppression Pool and to use RHR'in the Shutdown Cooling mode after the reactor has been depressurized to less than 98 psig.'hould a single hot short damage any one ofthe valves required'for this expected line up, the following options are available using the equipment and procedures provided at the Remote Shutdown Panel

~ IfRCIC is lost, then reactor pressure can be quickly reduced to the level where injection using RHR in the LPCI mode is possible.

~ Ifthe normal RHR Shutdown Cooling mode is lost, then RHR can be used in the

, Alternate Shutdown Cooling mode.,

~ IfRHR Suppression Pool Cooling is lost, the RHR in the Alternate Shutdown Cooling mode can be used.

This calculation uses the redundancy available in Path 2 to determine the minimum number ofPath 2 valves that must be protected from a hot short occurring and damaging the valve prior to transfer ofcontrol to the Remote Shutdown Panel. By preventing damage to this minimum set ofvalves, it willbe assured that the requirements ofAppendix R can be met even ifa damaging hot short were to occur.

2.0 Description ofProblem:

• 'I The postulated condition ofconcern is that a fire in the Control Room can cause "Hot Shorts", i.e. short circuits between control wiring and power sources, for certain'motor-operated valves (MOV's) needed to shut the reactor down and'to maintain it in a safe condition. Ifa fire in the Control Room forces the operators to leave the Control Room,

'these MOV's can be operated from the Remote Shutdown Panel (RSP). Hot Shorts, combined with the absence ofthermal overload protection, however, could cause valve damage before the operator has actuated the transfer switches and taken control ofthese valves at the'RSP.

EC-013-0859 Page /~y

I I

Thermal overload protection for MOV's at SSES is bypassed in order to meet the requirements ofRegulatory Guide 1.106, Thermal Overlo'ad Protection for Electric Motors on Motor-Operated Valves. The intent ofthis requirement is to,assure that thermal overloads do not prevent the MOV's from performing their safety-function during an accident. At SSES, the location ofthe thermal overload contacts in the MOVcontrol circuitry would be ineffective in mitigating the effects ofhot shorts even'f the thermal

'verloads were not bypassed.

/

Similarly, the'location in the MOVcontrol circuitry oflimitswitch and torque. switch contacts renders these protective devices ineffective in mitigating the effects ofMOVhot shorts.

I 3.0

Background:

f The initial approach to address this'issue was to identify those MOV's required to support safe shutdown for Control Room fires and to determine which were susceptible to the postulated failure mode.

The information'related to this step was compiled in Calculation EC-013-0730, This calculation determined that,39 valves on Unit 1 and 40 valves on Unit 2 that were required to support safe shutdown were susceptible to the postulated MOV failure mode.

,Those valves determined to be susceptible to damage due to hot shorts were slated for a modification to relocate the torque and limitswitches to a location within the control circuitry where they would be effective in interrupting a hot short due to a Control Room

'ire and preventing valve motor damage:

Since the original circuit review ofthe affected valves determined the valves did not have a sufficient number ofspare conductors to accomplish the required circuit changes, new cable would have to be run for many ofthese valves.

This significantly escalated the cost ofthe work. The total cost for all ofthis work was estimated to be approximately $8.0 million.

I Due to the large cost ofresolving this issue using physical modifications, additional evaluations were determined to be required to assess the safety significance ofthis issue.

Two calculations, were prepared to hssess the safety significance ofthis issue.

Calculation

'C-013-0983 performed a risk analysis ofthe MOVHot Short issue.

The results ofthis

.calculation and the fire hazards analysis'documented in Calculation EC-013-0555 determined that the safety significance ofthis issue was extremely small. Based on these results, Deviation Request No. 41 was prepared and issued to the NRC on June 21, 1993 as an attachment to PLA-3980.

'C-013-0859, Page /+p >

I II

'f 1

Ih

'I l

N f

t I'

In early 1995, the NRC verbally requested some clarifications on the information contained in Deviation Request No. 41. The response to this NRC request for additional information was transmitted to the NRC by PPkL in PLA-4341 dated August 2, 1995.

I In a meeting on January 25, 1996 with the NRC in Allentown, the NRC informed PPEcL that they would be rejecting Deviation Request No. 41; Their reasoning was that other utilities had already dealt with this issue successfully without incurring significant costs.

. This calculation provides the final resolution for this issus for SSES.

Based on a series ofdiscussion with the NRC, a revised spurious operations. criteria for Associated Circuits was developed.

This criteria was transmitted to the NRC in PLA-

- 4505. This criteria has been applied in the evaluation contained in this appendix of the impact ofMOV"Hot Shorts" resulting from Control Room fires.

4.0 Results and

Conclusions:

~

This calculation evaluates the list ofpotential problem valves with respect to the MOVhot short issue as documented in Calculation EC-013-0730 and performs a system evaluation ofthe valves and determines for each ofthe valves which other valves, must be able to be operated in order to achieve and maintain safe shutdown for a Control Room fire.

Table 1 provides a summary ofthe disposition for each valve on Unit 1. Table 2 provides a summary ofthe disposition for each valve on Unit 2. For each of.the valves identified in Tables 1 and 2 that required some mitigating action to preclude an impact to safe shutdown capability, a review ofthe possible solutions for each valve was performed.

l Table 3 provides a summary ofthe potential solutions for each ofthese valves.

Table 4 provides a summary ofthe recommended solution for each valve.

Calculation EC-013-0730 identified 39 problem valves for Unit 1 and 40 problem valv'es for Unit 2. The system review documented within this appendix has reduced the number ofproblem valves to 12 for Unit 1 and 12 for Unit 2. Ofthese 24 valves, the modification review performed in this calculation has determin'ed that all ofthese valves can be'odified to mitigate the effects ofMOV hot shorts by making wiring adjustments without running new cables.

The preferred solution for each ofthese valves is to install interposing relays, since this solution eliminates the potential for damaging hot shorts for all fires except those occurring in the MCC.

4 The option oF relocating the torque and limitswitches solves the problem for the fire in the main Control Room, but creates a susceptible condition for fires elsewhere in the plant.

Should the torque and limit switch relocation option be the only feasible option,for a particular MOV, the potential for a hot short in other areas of the plant causing valve damage must be investigated and it must be determined that such damage willnot impact 8

h EC-013-0859 Page /~~ j-

0 0

~ the ability to achieve and maintain safe shutdown.

This evaluation is to be conducted as a part ofthe engineering performed for each valve modification.

5.0

References:

5.1 Calculation EC-013-0730, Rev..0, Appendix R Safe Shutdown Path 2 MOVHot Short Spurious Actuation.

5.2 Calculation EC-013-0555, Rev. 1, Appendix-R Hot Shorts, in the Control Room.

5.3,Calculation EC-013-0983, Rev. 0, Risk Analysis ofAppendix R MOVHot Short Modifications.

5.4 Calculation EC-013-0725, Rev. 2, Evaluation ofthe Containment Instrument Gas Valves and Suppression Pool Clean-up Valves, 5.5 Calculation EC-VALV-1043, Rev. 0, MOVEvaluation for Spurious Oper'ation due to Hot Short 5.6 PLA-3980 dated June 21, 1993 transmitting Deviation Request No. 41.

I 5.7 PLA-4341 dated August 2, 1995.

5.8 PLA-4505 Associated Circuits-Spurious Operation Issue.

6.0 Disposition Discussion:

6.1 Assumptions arid Requirements:

.6.1.1. Safe Shutdown as a result offires in the main Control Room is classified as Alternate Shutdown.

As such, the requirements of 10CFR50 Appendix R Section III.L apply-6.1.2. For fires in the main Control Room Section III.Lrequires that spurious operatioq of equipment that can affect safe shutdown functions be considered.

The spurious operation criteria for circuits isolated from the main Control Room is contained in NRC Generic Letter 86-10 paragraph 5.3.10.

That criteria reads as'follows:

~

The safe shutdown capability should not be adversely affected by any one spurious actuation or signal resulting from a fire in any plant area; and

~

The safe shutdown capability should not be adversely affected by a fire in any plant area which results in the loss ofall automatic function (signal, logic) from the circuits EC-013-0859 Page /~~

0

located in the area in conjunction with the one worst case spurious actuation or signal

~

resulting from the fire; and

~

The safe shutdown capability should not be adversely, affected by a fire in any plant area which results in spurious actuation ofthe redundant valves in any one high-low pressure interface line.

For application ofthis criteria for all situations other than Hi/Lopressure interfaces, it is

. assumed that one spurious operation occurs prior to actuating the transfer switch at the RSP., This spurious operation ma'y be as a result. ofa hot short on a circuit that is isolate'd from the main Control Room or on one that is not: It is not necessar'y to postulate spurious operation ofequipment in each ofthe'se two categories: i.e isolated and non-isolated circuits.

For circuits remaining in'he main Control Room that are not isolated, all potential spurious operations must be addressed on a one-at-a-time basis.

Each individual spurious operation inust be identified and a mitigating action to prevent an impact to safe shutdown must be developed.

In developing this mitigating action, however, it is not acceptable to ignore a potential hot short on one piece ofequipment as a mitigating action for another piece ofequipment.

I The act ofactuating the transfer switch at the RSP is the mitigating action to address any spurious operation for circuits isolated from the main Control Room. For circuits not isolated form the main Control Room, some other means ofmitigitingthe effects ofthe potential spurious operation must be'available.

6.1.3. This appendix addresses the additional mitigating actions necessary to assure that

. MOVdamage as a result ofhot shorts willnot prevent achieving safe shutdown using the systems and components described in the body ofthis calculation.

6.2 Additional MitigatingActions for A'ssuring Safe Shutdown:

6.2.1. The MOV's impacted by this issue are listed in Table 1 for Unit 1 and Table 2 for-Unit 2. The MOV's listed pertain to the followingsystems and perform the following functions in support ofsafe shutdown'...

~

RCIC-performs the RPV pressure control and inventory make-up functions.

~

RHR-performs the decay heat removal function.

~

RHRSW/ESW-performs the decay heat removal function.

~

Suppression Pool Drain valves-one ofthese two series valves must remain closed to prevent a flow diversion from the suppresion pool that could affect the RPV inventory control function and decay heat removal function.

,I EC-013-0859 Page jpgg a

0 0

~

Reactor Recirc. Pump Suction Valve-this valve must be closed prior to entering shutdown cooling to prevent short-cycling ofthe shutdown cooling flow.

~

Reactor, Water Clean-up Valve-this valve must be closed to prevent a loss ofRPV inventory through the RWCU line'to either Liquid Radwaste or the Condenser.

l Should these primary safe shutdown capabilities be affected by MOViHotShorts that

~ damage the equipment, there are other available modes ofoperation allowed for the

~ systems listed above.

For example, the SRV provided at'he RSP can'perform the pressure control function described'for RCIC above and RHR can perform the inventory'.

make-up function described above for RCIC.

I This calculation willdemonstrate how these redundant capabilities willbe used to mitigate the effects ofMOVhot shorts.

Through the use ofthese redundant capabilities, this calculation willdemonstrate how compliance with Appendix R is achieved.

6'.2.2. RCIC System Valves: The valves listed in tables 1 and 2 related'to the RCIC system could be damaged as a result ofthe postulated phenomenon. Ifany one ofthese valves i's damaged, RCIC may not be available for use at the RSP.

This would impact the RPV pressure control and inventory make-up safe shutdown functions.

Ifthis were to happen, however, the reactor could be depressurized using the available SRV's at the RSP and vessel inventory make-up could be accomplished using RHR in the LPCI mode. By using RHR in the alternate shutdown cooling mode in accordance with ON-149/249-001, Suppression Pool Cooling can be accomplished using the same flow path.

See Figure 1A attached for the Unit 1 flowpath and Figure 1B attached for the Unit 2 flow path.

Prior to entering Alternate Shutdown Cooling, ON-149/249-001 requires that the. main steam drain line valves be closed.

Calculation EC-083-0530, Effect ofFlow Diversion Through the Open Main Steam Line Drains, determined that these valves would be required to be closed within 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> ofentering Alternate Shutdown Cooling to prevent an adverse impact to Suppression Pool level. Since the main steam line drain valves'are normally open, but are required closed and these valves could be prevented from.

automatically closing by the Control Room fire, these valves may be required to b' manually closed locally.

Since this action is not required for a minimum of 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> after the start ofthe event-, 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> battery powered emergency lights would not be effective in aiding the operator.

Due to the presence ofdiesel backed essential lighting in the general area that is unlikely to be' damaged by a Control Room fire and due to the simplicity ofthe required action, hand-held lighting typically carried by the operator is considered to be adequate for this action.

EC-013-0859 Page.~'-,">+

~

I'

Therefore, damage to any ofthe valves listed in tables 1 or 2 related to the RCIC system willnot impact the ability to achieve or-maintain safe shutdown ofthe reactor.

Therefore, no further action needs to be taken for'these valves.

\\

6.2.3. RHR System Valves: As stated in Section 1 ofthis appendix, impacts to the RHR system can be mitigated by relying on RHR Alternate Shutdown Cooling where normal shutdown cooling and suppression pool cooling is impacted or by relying on RCIC when impacts to the main RHR flowpath valves are impacted:

6.2.3.1. HV-151-F008/009 and HV-251-F008/009: These valves are the shutdown cooling containment isolation valves. By relying on RHR Alternate Shutdown Cooling, these valves which normally must open to establish a,flow path fo'r normal shutdown cooling are only required, for this scenario, to remain closed and to prevent a Hi/Lo pressure interface flowdiversion from the reactor.

A"review ofthe electrical schematics for these valves has determined that a hot short in the main Contr'ol Room cannot cause the spurious opening ofHV-151-F008/009 or HV-251-F008/009.

This is true because ofthe location of'the contacts for the low pressure permissive for these valves. Withinthe circuit, these contacts, which are physically located in the reactor building, are located below the hot short location and would, therefore, prevent the spurious opening ofthe valve until,the reactor pressure was less than 98 psig. Prior to reaching 98 psig, the transfer switches at the RSP would have been actuated and spurious operation would be.

prevented.'amage to any ofthese valves willnot impact the ability to achieve or maintain safe shutdown ofthe reactor.

Therefore, no further action needs to be taken for these valves.

6.2-.3.2. HV-151-F006A/B/C/D and HV-251-F006A/B/C/D: These valves are the shutdown cooling pump suction valves.

They are normally closed.

By relying on RHR Alternate Shutdown Cooling, the need for these valves can be i'educed: For this scenario, these valves must remain closed.

Therefore, the only. concern is flow diversion from the RHR flowpath, since the F008 and F009 valves remain closed inRHR Alternate

=

Shutdown Cooling.,

I On unit 1, the F006B valve can be operated at the RSP.

On unit 2; the F006A.valve can be operated at the RSP. Allvalves (F006 A/B/C/Dfor each unit) are electrically isolated from the Control Room by transfer switches at the RSP.

Since the criteria ofGeneric Letter 86-10 paragraph 5.3.10 requires the as'sumption ofany

~ one spurious operation for circuits that are isolated from the main Control Room, it must be assumed that only one ofthese valves spuriously operates. Ifthe F006B on unit 1 were to spuriously open, flow diversion from the RHR flowpath would be prevented by the EC-013-0859, Page/ ~

N

combined eFect ofthe F006A, C, D and the F008 valves. Therefore, spur'ious operation of,the F006B valve is not a concern.,

Ifeither the F006A, C or D valves were to spuriously open,'he F006B on unit 1 would remain closed and prevent a flow diversion from the RHR flow path.

Therefore, spurious opening of any ofthese valves is not a concern..

The situation on unit 2 is identical for the F006A valve Damage to any one ofthese valves willnot impact the ability to achieve or maintain safe shutdown ofthe r'eactor.

Therefore, no further action needs to be taken for these valves.

6.2.3,3 HV-151-F024B/028B and HV-251-F024A/028A: These valves are the Suppression Pool Cooling'return line isolation valves.

These valves are normally closed.

Ifeither ofthese valves were to be damaged by an MOVHot Short, RHR Suppression Pool Cooling would be impacted.

t.

The loss ofSuppression Pool Cooling, however, can be mitigated by the use ofRHR in the Alternate Shutdown Cooling mode ofoperation by taking suction on'the Suppression Pool through the F004 valve and routing the flowthrough the RHR heat exchanger.

As such, the Suppression Pool Cooling return valves are only required to remai'n in their normally closed position to prevent flow diversion from the RHR flowpath.

Since both ofthese valves and the HV-151-F027B'and the HV-251-F027A valves on unit 1 and 2, r'espectively, are isolated from the main Control Room by transfer switches, flow diversion due to a sihgle spurious operation is not possible.

Damage to any, one ofthese valves willnot impact the ability to achieve or maintain safe shutdown ofthe reactor.

Therefore, no further action needs to be taken for these valves.

6.2.3.4. HV-151-F007B and HV-251-F007A: These valves are the RHR Pump minimum flowvalves.

They are normally open.

They are desired open until RHR flow reaches approximately '2400 gpm.

Ifa spurious operation result in the inability to close, these valves,'this willdivert approximately 1000 gpm fiowfrom the RHR flow path. This willnot impact safe shutdown since approximately 9000 gpm willstill be available.

This amount offlow is

'ufhcient to support shutdown.

The diverted flowwillreturn to the Suppression Pool.

'h f

Ifa spurious operation results in the inability to open this valve, this could a6ect the operator's ability to slowly fillthe RHR discharge piping should the LOOP,,which must be

, postulated as a part.ofthis Appendix R scenario, result in a system draindown due to loss ofkeepfill. The operator, however, can still accomplish the sloC fillingofthe discharge EC-013-'0859 Page j7'/-g g

b I

'L I'

1 1

I I

t, L

'I f

A

'I piping, required as a mitigating action to deal with the loss ofkeepfill, without damaging the pump provided he throttles opens the F048 valve shortly after starting the pump.

II Damage to these valves willnot impact the abilityto achieve or maintain safe shutdown of the reactor.

Therefore, no further action needs to be taken for these valves.

6.2,3,5. HV-151-F016B and HV-251-F016A: These valves are the normally closed,

, outboard Containment isolation valves for the Unit 1 division IIand Unit 2 division I RHR Containment Spray System.- The inboard Containment isolation valves are HV-151-F021B on unit 1 and HV-251-F021A on unit 2 are normally closed. valves.

Only the F016 valves are isolated from the main Control Room by transfer switches at the Remote Shutdown Panel.

When the. transfer switch for the F016 valves are actuated at the RSP, a close signal is given to the valve. In addition, the open and close control circuits from the main Control Room are isolated.

Since the F021 valves are not isolated from the main Control Room, they are considered to be vulnerable to hot shorts occuring'after the actuation ofthe transfer switches at the RSP.

Ifthe F016 valve were to spuriously open and be damaged by a hot short that drives the motor to failure, the ability to close the valve willno longer be available at the RSP.

RCIC would still be available to provide vessel make up. Should the F021 valve, which is not isolated frotn the main Control Room, subsequently spuriously open, then a flow diversion from the RHR flowpath for'ither Suppression Pool Cooling or Shutdown Cooling to the RHR Drywell Sprays could occur..With respect to the flow diversion from the RHR Suppression Pool Cooling flowpath, suppression pool cooling could still be accomplished since the water would flow from the drywell sprays to the diaphr'agm slab elevation through the downcomers and into the suppression pool. In the case ofthe RHR

, Shutdown Cooling flowpath, however, this flow diversion could result in a drain down of the reactor vessel to the suppression pool.

To prevent this undersireable consequence, the ability to close the F016 valve. must be preserved by eliminating the potential for a hot short to damage the valve. This will preserve the ability to close the F016 valve from the Remote Shutdown Panel.

As long as this valve is closed prior to entering RHR Shutdown Cooling, the negative consequences associated with a spurious opening ofthe F016 and F021 valves willbe averted.

Therefore, a modification must be perform'ed to prevent'damage to the 1F016B and 2F016A valves.

I 6.2.3.6. Remainin RHR S stem Valves F003'004'015 F017'047'048: The remaining valves on the RHR system are required to be capable ofbeing operated to establish the Alternate Shutdown Cooling flowpath for RHR.'

single spurious operation

, ofany one ofthese valves would prevent the use ofRHR in either the Suppression Pool Cooling, the LPCI or the Alternate Shutdown Cooling modes ofoperation.

That is, all EC-013-0859 Page /4> '7

1 b

p I

I k

1 I

(

/

h r

I I

I e

1 I

r

'0

five valves are required to be available to support operation ofthe system for Decay Heat

~

~

Removal or low pressure make-up.

'f the single spurious operation, however, were postulated to occur on one ofthese valves,

'RCIC operation would still be available.

Therefore, the vessel inventory make-up function

= would be addressed.

As such, some time:would be available to correct the condition either by manually repositioning the valve or by some other corrective action. The time

. available would be the amount oftime before RHR must be placed in Suppression Pool Cooling to remove the heat being placed in the pool by RCIC operation.

At the RSP, RCIC has the capability oftaking suctio'n from either the Condensate Storage Tank or the Suppression Pool. When taking suction from the Suppression Pool, RCIC can operate for approximately 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> before the pool temperatures willreach the level where potential damage to the pump could occur. At this point ifthe operators were to-transfer suction to the Condensate Storage Tank, there would be a minimum of6.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> ofoperation ifthe CST were at its minimum Tech Spec level. Therefore, there would be approximately 10.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> available to manually open any valve that might be spuriously closed by a Control Room fire hot short.

Therefore, damage to these valves must be prevented so that they may be either manually opened or operated at the RSP to support RHR system operation".

k 6.2.4 RHRSW/ESW System Valves: The RHRSW valves required for safe shutdown are the RHR Hx inlet-and outlet valves: HV-11210B and HV;11215B; HV-21210A and HV-21215A. These valves must be open to allow RHRSW flowthrough the RHR"Hx.

The ESW valves required for safe shutdown are the spray pond return valves: HV-

'1222B and HV-01224B1; HV-01222A and HV-01224A1. The 22A/B valves for the bypass return line are normally open and must close in this scenario.

The 24A1/Bl valves are normally closed and must open for this scenario.

Since the diesel generators must be available for the Control Room fire, ESW must also be available to provide cooling to the diesels.

Due to the short time duration the the diesels can run without cooling (approximatelt 4-5 minutes), local manual operation ofthese valves may not be feasible.

J r

Spurious closure ofeither valve on a given unit willafFect the decay heat removal capability ofthe RHR System. Therefore, damage to these valves must be prevented so that they may be oper'ated either at the RSP or by manual means locally to support RHRSW/ESW system operation.

6.2.5. Suppression Pool Drain Valves: The Suppression Pool Drain Valves are the Containment Isolation Valves for the system: HV-15766 and 15768; HV-25766 and HV-25768.

These'valves are normally closed and one valve in each line must remain closed'to prevent a flow diversion from the Suppression Pool. These valves are not isolated from EC-013-0859 Page/ j'

0 0

f,

a 6.2.7. Reactor Water Clean-up'Valves:

The Reactor Water Clean-up system must be, isolated from the RPV in order to assure a flow'diversion to either liquid radwaste or the Condenser does not occur. To prevent this for the fire jn the main Control Room, an operator action has been included in ON-1/200-009 to open a breaker to close valve HV-

'44-F033 on unit 1 and HV-244-F033 on unit 2. (Reference Drawing E"-690).

I a

6.3. Options for Resolution: The valves listed in Table 3 are the minimum set of Path 2

, motor operated valves required to achieve and maintain safe shutdown for a control room fire which have the potential for spurious operation as a result of a hot short.

With a hot short in the control room, the protective features ofthe limitswitches and torque switches

'or the valve and the motor operator are bypassed.'he standard motor operated control circuit design for these valves is shown in Figure 2.

Two standard designs are shown.

The specific design for the valve is dependent on whether or not the motor operator has a locking type worm gear for the torque switch.

In order to achieve safe shutdown, operation of these motor operated valves either at the remote shutdown panel or locally for the postulated hot short scenario must be assured.

Operation of these valves can be assured by,demonstrating the feasibility of an operator action'or by one of the following modifications listed above and described below.

The evaluation to determine the feasibility of opening the valves using the handwheel is documented in Calculation EC-VALV-1043.

For those valves which have existing interposing relays in the control circuitry, the control room logic continues to energize the interposing relays and the limitswitch and torque switch contacts are rewired into contactor portion of the circuitry so that the postulated hot short, does not negate the protection of the valve or motor operator.

The'rewiring is shown in Figure 3. For those valves which do not.have the feature ofthe locking worm gear, there is a spare conductor in the, cable from the motor control center to the valve operator.

The spare conductor permits the limit and torque switches to be rewired into the control circuitry between the control room contacts and the open and close'coils ofthe contactors so that the valve and motor operator protection is functional for the postulated hot short. The rewiring is shown in Figure 4. For those valves which do not have existing interposing relays or a spare conductor, in the cable(s) from the motor control center to the motor operator, interposing relays may be added to the control circuitry so'that the circuitry is as shown in Figure 3...

In performing the review documented in EC-VALV-1043, the Nuclear Technology-Valve Group determined that all afFected valves are locking valves.

The'electrical circuitry shown on the valve schematics that would be typical ofa non-locking valve is not required for these valves.

Therefore, all affected valves-may have spare conductors that can be'sed to relocate the torque and limitswitches provided the 42F contact in the circuit is not performing another function.

a

. EC-013-0859 Page/g~ o

4 /

0 H

6.4; Recommended Solution: The recommended solution for each ofthe valves is to install interposing relays.

This solution is recommeded because it best eliminates the problem.

The solution ofrelocating the torque and limit switches solves the problem for

'he Control Room, but leaves open the possibility for the same problem in another area of the plant.

1 The range ofsolutions examined for each valve are listed in Table 3. The solution that can

'. be accomplished, ifthe recommended solution ofinstalling interposing relays is determined to not be feasible due to spatial limitations, is summarized in Table 4. Ifthe solution in Table 4 ofrelocating the torque and limitswitches is selected, an Appendix R review ofthe new configuration must be performed to verify that the circuit modification does not result in an unacceptable Appendix R non-compliance elsewhere.

I There are a total of24 valves listed in Table 4.

12 ofthese valves are associated with each unit. For all ofthe valves, the circuit changes necessary to mitigate the sects'of Control Room MOVhot shorts can be accomplished using the existing cables by rewiring the circuits. The following summarizes the types ofchanges-available for this population of valves:

I Torque/Limit Switch Relocation:

9 valves have spare conductors in the existing cable running from the MCC to the valve. This willallow the relocation ofthe Torque/Limit Switches as depicted in Figure 4 without having to pull any new cables.

7 valves have existing wiring identical to that depicted in Figure 2 for a non-locking valve. These valves have been determined in Calculation EC-VALV'-1043 to be locking valves.

Therefore, the circuitry could have been wired identical to

.. that depicted in Figure 2 for a locking valve., This means that the 42F.contact located near the torque switch may be eliminated.

This willprovide a spare conduc'tor that can be used to relocate the Torque/Limit Switches in a manner.'dentical to that depicted in Figure 4.

Rewiring ofExisting Interposing Relays:

3 valves require that the existing 42F contact remain in the circuit because it functions as a seal-in around a spring return hand switch. These 3 valves, however, have existing interposing relays. By rewiring these interposing relays in a manner identical to that depicted in Figure 3; the changes necessary to mitigate the e6ects ofthe MOVhot short can be accomplished without adding any additional cables.

EC-013-0859 Page

.~ /

4

\\

~

~

~

~

A

'k n

Remaining 3 valves:.

HV-251-F004A, RHR Suppression Pool Suction Valve: For this valve, the 42F coritact in series with the torque switch'also function as a seal-in around the hand-switch. The hand-switch is a maintain contact switch that would not require a seal

-in to assure complete stroking ofthe valve. With the contact in'its current

" configuration, it willprevent the valve from being reversed prior to completing a full stroke. Allofthe F004 valves on Unit 2 are wired in this manner, while all of the valves on Unit 1 are wired without this feature.

HV-.151-F047B and HV-251-F047A, RHR Hx. Inlet Valves, are wired similarly to the F004A valve described above.

For all ofthese valves, the non-reversible feature is not required.

This has been determined by a review ofthe GE E11 and A4l drawings.

Therefore, these'valves may also eliminate the 42F contact in series with the torque switch and may.be rewired to relocate the torque and limitswitches as depicted in Figure 4.

?

N EC-0,1 3-0859

>>ge /4~~

4 I

0 0

II TABLE1" UNIT 1 MOTOR OPERATED VALVES

.VALVENO.

.-SYSTEM ';DISPOSITION

~ '>>,DISPOSITION BASIS HV-143-F023B HV-144-F004 RX RECIRC RWCU Damage to Valve due to Hot Shorts must be prevented.

Operator Action Required See discussion in section 6.2.6,of Appendix C An Operator Action to open breaker 1Y219-18 has been included on Drawing E490 and is 'contained in OffNormal Procedure ON-100-009.'his action will close valve HV-144-F033.

See discussion in section 6.2.7 of Appendix C.

HV-01222B ESW Damage to Valve due to See discussion in section 6.2.4 of Hot Shorts must be Appendix C prevented.

HV-01224 B1 ESW.

Damage to Valve due to Hot Shorts must be prevented.'ee discussion in section 6.2.4 of Appendix C HV-15766 HV-15768 SUPP.

POOL DRAIN SUPP. POOL DRAIN Operator Action Required An Operator Action to close the 157025, valve is required.

See discussion in section 6.2.5 of Appendix C.

Operator Action An Operator Action to close the 157025 Required valve is required.

See discussion in section 6.2.5 of Appendix C.

HV-149-F007, HV-149-.F008

'V-149-F010, HV-149-F012 HV-149-F013 FV-149-F019

'RCIC RCIC RCIC RCIC RCIC RCIC No impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown

\\

No Impact to Shutdown See discussion in section 6.2.2 of Appendix C, See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C, See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C'ee discussion in section 6.2.2 of Appendix C HV-149-F022 HV-149-F031 RCIC RCIC No Impact to Shutdown See discussion in section 6:2.2 of Appendix C No Impact to Shutdown See discussion in section 6.2.2 of Appendix C EC-013-0859 Page g~

C t

I

/

4

't

'll

/

0 I

VALVENO HV-150-F045 HV-150-F046

'YSTEM RCIC RCIC

DISPOSITION No Impact to Shutdown No Impact to Shutdown

'. ".DISPOSITION BASIS See discussiqn in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C HV-149-F059 HV-149-F060

RCIC, RCIC No Impact to Shutdown, See discussion in section 6.2.2 of Appendix', C No Impact to Shutdown See discussion in section 6.2.2 of Appendix C HV-149-F062 HV-149-F084 i HV-15012 RCIC RCIC RCIC No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown See discussion in section 6.2.2 of App'endix C See discussion in section 6.2.2 of Appendix C See discussion in section'6.2.2 of Appendix C HV-11210B "RHRSW

'Damage to Valve due to See discussion in section 6.2.4 of Hot Shorts must be Appendix C prevented.

'V-11215B HV-151-F003B HV-151-F004B RHRSW RHR RHR Damage to Valve due to Hot Shorts must be prevented.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flowpath.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

See discussion in section 6.2.4 of Appendix C See discussion in section,6.2.3.6 of Appendix C.

See discussion in s'ection 6.2.3.6 of Appendix C.

HV-151-F006A RHR No Impact to Shutdown See discussion in section 6.2.3.2 of Appendix C HV-151-F006C HV-151-F006B HV-151-F006 D HV-151-F007B RHR RHR RHR RHR No Impact to,Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.4 of Appendix C HV-151-F008 RHR No Impact to Shutdown See discussion in section 6.2.3.1 of Appendix C HV-151-F009 RHR No Impact to Shutdown See discussion in section 6.2.3.1 of

'ppendix C

/

EC-013-0859 Page/~~&

k

~

0

VAI.VENO HV-151-F015B HV-151-F016 B HV-151-F017 B HV-151-F024 B HV-151-F028B HV-151-F047B HV-151-F048B SYSTEM RHR RHR RHR RHR RHR RHR RHR DISPOSlTION Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow,path.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

No Impact to Shutdown No Impact to Shutdown Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

Damage to Valve due to Hot Shorts must be prevented to prevent bypassing the RHR Hx.

';DISPOSITION BASIS See discussion in section 6.2.3.6 of Appendix C.

A modification to prevent damage to this valve is required.

See discussion in section 6.2.3.5 of Appendix C.

See discussion in section 6.2.3.6 of Appendix C.

See discussion in section 6.2.3.3 of Appendix C See discussion in section 6.2.3.3 of Appendix C See discussion in section 6.2.3.6 of Appendix C.

See discussion in section 6.2.3.6 of Appendix C.

EC-013-0859 Page /~g

'l ll

'I 1

1 l

t

'I t

<g I

4

TABLE2 UNIT2 MOTOR OPERATED VALVES VALVENO.

HV-243-F023A HV-243-F023B HV-244-F001 HV-01222A HV-01224A1 HV-25766 HV-25768 HV-249-F007 HV-249-F008 HV-249-F010 FV-249-F012 HV-249-F013

-SYSTEM RX RECIRC RX RECIRC RWCU ESW ESW SUPP. POOL

DRAIN SUPP.

POOL DRAIN RCIC RCIC RCIC RCIC RCIC

.DISPOSITION

'amage to Valve due to Hot Shorts must be prevented.

Damage to Valve due to Hot Shorts must be prevented.

Operator Action Required Damage to Valve due to Hot Shorts must be

. prevented.

Damage to Valve due to Hot Shorts must be prevented.

Operator Action Required Operator Action Required No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown

. '.DISPOSITION BASIS See discussion in section 6.2.6 of Appendix C See discussion in section 6.2.6 of Appendix C An Operator Action to open breaker 2Y219-18 has been included on Drawing E-690 and is contained in Off Normal Procedure ON-'200-009.

This action will close valve HV-244-F033.

See discussion in section 6.2.7.of Appendix C.

See discussion in section 6.2.4 of Appendix C See discussion in section 6.2.4 of Appendix C An Operator Action to close the 257025 valve is required.

See discussion in section 6.2.5 of Appendix C.

An Operator Action to close the 257025 valve is required.

See discussion in section 6.2.5 of Appendix C:

See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C HV-249-F019 HV-249-F022 HV-249-F031 r

EC-013-0859.

Page J-,'L-RCIC RCIC RCIC No Impact to Shutdown, No Impact to Shutdown No Impact to Shutdown See discussfon in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of

e 0

L

-~

VALVENO HV-250-F045 HV-250-F046 HV-249-F059 HV-249-F060 HV-249-F062 HV-249-F084 HV-25012 HV-2121 0A HV-21215A HV-251-F003A HV-251-F004A

'"'YSTEM RCIC RCIC RCIC RCIC RCIC RCIC RCIC RHRSW RHRSW

~ RHR RHR

'.;:.DISPOSITION No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to. Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown Damage to Valve due to Hot Shorts must be prevented.

Damage to Valve due to Hot Shorts must be prevented.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow Path.

'::DISPOSITION BASIS

'ppendix C

See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.2 of Appendix C See discussion in section 6.2.4 of Appendix C See discussion in section 6.2.4 of Appendix C See discussion in section 6.2.3.6 of Appendix C.

See discussion in section 6.2.3S of Appendix C.

HV-251-F006A RHR No Impact to Shutdown See discussion in section 6.2.3.2 of Appendix C HV-251-F006C HV-251-F006B HV-251-F006D HV-251-F007A HV-251-F008 RHR RHR RHR RHR RHR No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown No Impact to Shutdown

, No Impact to Shutdown See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.2 of Appendix C See discussion in section 6.2.3.4 of Appendix C See discussion in section 6.2.3.1 of Appendix C HV-251-F009 RHR

/

No Impact to Shutdown See discussion in section 6.2.3.1 of EC-013-0859 Page/~7

I h

'd J

I

'I P

'N V

l I

/

I I

I I

1U

t

~VALVENO.

SYSTEM

.:; '," "'DISPOSITION;::.::..'DISPOSITIOM BASIS

'ppendix C

HV-251-F015A HV-251-F016A HV-251-F017A'V-251-F024A HV-251-F028A HV-251-F047A RHR RHR RHR RHR RHR

'HR Damage to Valve due to Hot Shorts must be prevented to'preserve the RHR flow path.'amage to Valve due to Hot Shorts must be prevented to preserve the RHR flowpath.

, Damage to Valve due to Hot Shorts must be prevented to preserve the RHR flow path.

No Impact to Shutdown No Impact to Shutdown

, Damage to Valve due to Hot Shoits must be prevented to preserve the RHR flow path.

See discussion in section 6.2.3.6 of Appendix C.

A modification to prevent damage to this valve is required.

See discussion in section 6.2.3.5 of Appendix C.

See discussion in section 6.2.6 of Appendix C.

See discussion in section 6.2.3.3 of Appendix C See discussion in section 6.2.3.3 of Appendix C See discussion in section 6.2.3.6 of Appendix C.

HV-251-F048A RHR Damage to Valve due to Hot Shorts must be prevented to prevent bypassing the RHR Hx.

See discussion in section 6.2.3.6 of Appendix C.

EC-013-0859 Page/~~'

0

Table 3-Appendix R-MOVHot Short Valves v

Device

'MOVNo.

Systcm-Schcmatic-Drawing Relays exist in thc Motor Control Center'pare-:"

Coridiicto'rs'in the existing Field Cable to

, ', Device'....,,.

,Re'qiitre

. Addition of Interposing Relays Ma'niial, Opc'ratIon of Valve,Using Haiidwhcxcl

.: =Possible...:

HV-EII-IF003 B HV-151-F003B U-I RHR E-153 SH. 11 X

HV-'151-F015B U-'I RHR HV-EI 1-1 F015B HV-EiI-IF016 B HV-151-F016B U-I RHR HV-ElI-IF004B HV-151-F004B U-I RHR E-153 SH. 10 E-153 SH. 16 E-153 SH. 114 X

X HV-ElI-IF017B HV-151-F017B U-I,RHR E-'153 SH. 14 X

U-I RHR HV-El'I-IF048B HV-151-F048B HV-ElI-IF047B HV-151-F047B '-I RHR E-153 SH. 107 E-153 SH. 9

-X X

HV-I1210B

'V-11215B HV-11210B HV-11215B U-I RHRSW U-I RHRSW E-150 SH. 11 E-150 SH. 12-X HV-B31-IF023B HV-143-F023B U-I RX RECIRC E-151 SH. 8 X

N/A HV-01222B HV41222B

'HV-01224B I HV-01224B I ESW ESW E-150 SH. 4 E-150 SH. 8 X

X HV-ElI-2F003A HV-251-F003 A U-2 RHR E-153 SH. 56 X

HV-EI I-2F004A HV-251-F004A U-2 RHR HV-ElI-2F015A HV-251-F015A U-2 RHR E-153 SH. 55 E-153 SHv 61 X

X

= EC-013-OS59 Page /~'y" ra

~ ~

Device HV-El1-2F016A HV-E1 1-2F017A HV-E11-2F047A HV-EI 1-2F048A MOVNo.

HV-251-F01'V-251-F017A HV-251-F047A HV-251-F048A System U-2 RHR U-2 RHR U-2 RHR U-2 RHR Schematic Draiving E-153 SH. 100 E-153 SH. 59 E-153 SH. 108 E-153 SH. 54 Relays exist in the Motor Control Center Spare Conductors in the existing Field Cable to Dcvicc'-

. Require Additiotiof Interposing Relays X

X Manual Operation of Valve Using Handwheel

. Possible X

HV-21210A HV-21215A HV-21210A HV-21215A U-2 RHRSW U-2 RHRSW E-150 SH. 23 E-150 SH. 22 X

HV-B31-2F023A HV-243-F023A U-2 RX RECIRC E-151 SH. 24 X

N/A HV-01222A HV-01224A1 HV41222A HV41224A1 ESW ESW E-150 SH. 32 E-150 SH. 33 X

'n "X'nthis column means that a spare conductor exists in the valve electric circuitry. A"Y"in this column means that the valve circuitry is wired for, a non-locking operator when, in fact, the operator is locking. Therefore, a spare contact exists in the circuitry that may be eliminated. This willfree up a conductor for use in relocating the Torque/Limit Switches. A"Z" means the non-reversible feature on this valve can be removed.

EC-013-0859 Page/+70

I h

ll k t

1 f

r" N

1 P,

I

/

/

I\\

y I

I I'

J

\\

I

~

TABLE4 RECOMMENDED SOLUTION FOR RE UIRED VALVES

'Device MOVNo.

System Schematic Drawing Possible Disposition HV-EII-IF003B HV-151-F003B HV-EII-IF004B HV-151-F004B HV-E11-IF015B HV-151-F015B HV-EI1-1 F016B HV-151-F016B HV-EII-IF017B HV-151-F017B HV-EI 1-1 F047B HV-151-F047B HV-E11-1F048B HV-151-F04 8B U-1 RHR U-1 RHR U-I RHR U-1 RHR U-I'RHR U-1 RHR U-I RHR E-153 SH. 11 E-153 SH. 10 E-153 SH. 16 E-153 SH. 114

.E-153 SH. 14 E-153 SH. 107 E-153 SH..9 Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Ssvitches Rewire Exist. Inte sin Relays Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches HV-11210B HV-11210B HV-11215B HV-11215B U-I RHRSW U-1 RHRSW E-150 SH. 11 E-150 SH. 12 Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches HV-B31-IF023B HV-143-F023B U-I RX RECIRC E-'151 SH. 8 Relocate Tor ue/Limit Switches 0

HV41222B HV-01222B HV41224BI HVA1224BI HV-E11-2F003A HV-251-F003 A HV-El1-2F004A HV-251-F004A HV-EII-2F015A HV-251-F015A HV-E11-2F016A HV-151-F016A ESW ESW U-2 RHR U-2 RHR U-2 RHR U-2 RHR E-150 SH. 4 E-150 SH. 8 E-153 SH. 56 E-153 SH. 55 E-153 SH.

61'-153 SH. 100 Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches Relocate Tor uc/Limit Switches Rewire Exist. Inte osin Relays Relocate Tor uc/Limit Switches U-2 RHR HV-E1 I-2F017A

~ HV-251-F017A HV-E1 1-2F047A HV-251-F047A U-2 RHR E-153 SH. 59 E-153 SH. 108 Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches HV-21210A HV-21210A HV-E11-2F048A HV-251-F048A U-2 RHR U-2 RHRSW E-153 SH. 54 E-150 SH. 23 Relocate Tor ue/Limit Switches Relocate Tor ue/Limit Switches HV-21215A HV-21215A U-2 RHRSW E-150 SH. 22 Relocate Tor ue/Limit Switches HV41222A HV-01222A ESW HV-B31-2F023A HV-243-F023A U-2 RX RECIRC E-151 SH. 24 E-150 SH. 32 Relocate Tor ue/Limit Switches Relocate Tor uc/Limit Switches HVA1224AI HVA1224AI ESW E-150 SH. 33 Rewire Exist. Inte osin Relavs The recommended disposition is to install i'nterposing relays. The disposition provided below is provided as an option should insufficient space bc available to install thc relays. Ifthis disposition is used,

~ an Appendix R review must be performed as a part ofthe modification package preparation to assure that

, thc change does not create a new Appendix R non-compliance in an area outside ofthe main Control Room.

EC-013-0859 Page/M7/

0 0

L.C.

12 23 TO FPC 20 22 19 49 40 C)

MN: COND.

LRW.

L.C.

6A IA KEEP FILL.

pA 160A RPV I 60B 5pB 2IB 6

P ORIF IC 17 VAL 28A-SAMPLE 7A 5A ECIR LO 67 B

COND XFR ISB 17B

+ 4 28B FROM 48 FPC

/

53A.

24 ULL'FLPII TEST

34A, 3 I A

. LO 7A A =,C-671 ';

D B

+% 24 3IB j 34B B

LO 7B i 53B 34B TO RCIC RHR CONDENSATE DEACTIVATED 34C 31C I

LO

+ 6A O

6B +%

~ 0 310 34O I

I L'0 LIJ I-DO TO RCIC CONDENSATE

~ DEACTIVATED REQUIRED VALVES CAN BE OPERATEO AT R.S.P

- VALVE ISOLATEO FROM C.R.'

VALVE ISOLATEO FROM C.R.

b CAN BE OPERATEO AT R.S.P.

Fl'GURE /A FLO&'ATH RHR ALTERNATESHUTOONV COOLING UNI'T Pl p(- ~>Q -('>g.Q

'8<~ 277~

RHRUI...FLWPATH,SHD,CLG,P

A e

0

wr

~

'L.C.

12 23 TO, FPC 20 22 19 49 40 8

MN. COND.

LRW L.C.

6A IA KEEP FILL PA I 60A RPV 160B 50B 218 6

KEEP ILL ORIFIC 17 VAL 8A 4 4 7A 5

ECIR A

LO 67 COND XFR 158 178 88 FROM 48 FPC Q.X M

ULL FLOW TEST 34A

.3 I A LO'A A

C 671' B

o tt

3IB, 34B LO 7B 53B 34B TO RCIC RHR CONDENSATE z;

DEACTIVATED I-W I-o 34C 31C I

LO C

%% 6A o

O 6B 4 0

310

. 34O I

LO I-4J I-O TO RCIC

~ CONDENSATE

~+ DEACTIVATED

- REQUIRED VALVES CAN BE OPERATEO AT R.S.P.-

- VALVE ISOLATEO FROM C.R.

I

- VALVE ISOLATEO FROM C.R.

8 CAN BE OPERATEO AT R.S.P.

F2GURE /B FLOP PATH RHR ALTERNATE SHUTDOWN'N COOLIN6.

UNIT f2

RHRU2,

,FLWPATH,SHD,CLG,P

I f

k h

ll

13-0859 page /+7/

0

(

pg S Transfer Switch at Remote Shutdown Panel HS-CR - Control Room Control Switch HS-RSP - Remote Shutdown Panel Control Switch Note: Scheme shown for manual control. at Remote Shutdown Panel 49 Thermal Overhad 95 Thermal Overload Bypass 49 Thermal Overload 95 Thermal Overhad Bypass ZS Open when Valve is 100%

CLOSED TS Open on HIGH Closing Torque ZS Open when Valve is 100%

OPEN ZS Open when Valve is 100%

cLosED TS Open on HIGH Closing 42F Torque ZS Open when Valve is 100%

OPEN HSS HSS HSS HSS HSS HSS HSS HSS HSS HS-RSP Close HSS i HS-CR i

Close Control Room HSS LHS-CR Open HSS HS-RSP Open HSS HS-RSP.*:

Close HSS HS-CR LHS-CR Close Open Control Room HSS HSS i

HS-RSP Open-42R 42F 42R 42F 42F 42R 42F 42R

~CLOSE Valve Operator With Locking Worm Gear OPEN~

Fi ure2

~CLOSE Valve Operator Without Locking Worm Gear OPEN~

'I P

/

I v

I

'I 1I

\\

f

EC-013-0859 page ~kg e '<<~<<

E Note: Valve Operator with Locking Worm hown Valve Operator without Locking Worm Gear

~

imilar HSS I

I I,

I I

I I

HSS HSS HSS 1

I I

I I

Ij 49 Thermal Overload II'S I

Openwhen I

Valve is I

100%

I GLosED I

I 95 Thermal Overload Bypass TS Open on HIGH Closing "

Torque I

I ZS Open when Valve ls I

100%

I QPEN I

I

. HSS LHS-RSP Close HSS i HS-CR i

Close Control Room HSS HS-CR Open HSS l Hs-RsP Open 42FX 42RX Interposing Relays 42R 42F 42FX 42RX 42F 42R CLOSE OPEN CLOSE OPEN~

Valve Operator With Locking Worm Gear Fi ure3

E V

EC-01" 9

page

~

Note: Valve Operator with Locking Worm G Valve Operator without Locking Worm Gear I

own milar 49 Thermal Overhad 95 Thermal Overload Bypass I

HSS I

I I

I I

I I

HSS

.I I

I r

ZS

+ Open when I

Valve is I

100%

I CLOSED L

TS-Open on HIGH Closing Torque 42R HSS HSS HSS HS-RSP' HS-CR HS-CR Close l

Close l

Open Control Room HSS HSS HSS S-RSP Open I

ZS Open when I

Valve is I

100%

I QPEN I

42F 42F 42R

~CLOSE, OPEN~

Valve Operator With Locking Worm Gear Fi ure4

l lt t

'E Al l,

I

~ ~

t'1 0

t