05000423/LER-1996-036, :on 960926,discovered That SR Valves Were Controlled by non-safety Equipment.Caused by Design Error. Upgraded Qualification for 38 Control Circuits: Difference between revisions

From kanterella
Jump to navigation Jump to search
StriderTol Bot change
StriderTol Bot change
 
Line 1: Line 1:
{{Adams
#REDIRECT [[05000423/LER-1996-036]]
| number = ML20210J798
| issue date = 07/25/1997
| title = :on 960926,discovered That SR Valves Were Controlled by non-safety Equipment.Caused by Design Error. Upgraded Qualification for 38 Control Circuits
| author name = Smith D
| author affiliation = NORTHEAST NUCLEAR ENERGY CO.
| addressee name =
| addressee affiliation =
| docket = 05000423
| license number =
| contact person =
| document report number = LER-96-036, LER-96-36, NUDOCS 9708190060
| package number = ML20210J793
| document type = LICENSEE EVENT REPORT (SEE ALSO AO RO), TEXT-SAFETY REPORT
| page count = 5
}}
{{LER
| Title = :on 960926,discovered That SR Valves Were Controlled by non-safety Equipment.Caused by Design Error. Upgraded Qualification for 38 Control Circuits
| Plant =
| Reporting criterion = 10 CFR 50.73(a)(2)(vii)
| Power level =
| Mode =
| Docket = 05000423
| LER year = 1996
| LER number = 36
| LER revision = 0
| Event date =
| Report date =
| ENS =
| abstract =
}}
 
=text=
{{#Wiki_filter:_
NHC f OHM 3b6 U.S. NUCLE All HE GUL A10HY COMMISSION APenovtD BY oms No. 31bo 0104 (4-9b)
EKPiMEs 04!30/9a 2'#@&Ma*#4JMinsP!fq'aN#21''ntM
*""J"?,r i'AM 'L'NtP**'M',e '"te
'M LICENS!E EVENT REPORT (LER) m,d't 'gfrt,'t,q'mlt*~,,'%~,'ag f#u % ' E UP4'l % d'fs004"#i! M P"'*
(See reverse f or required r' umber of i
l digits /charat.tersfor each block) f ActLi1Y hAMG tti pocElf0#UM M a m PAut (31 Millstone Nuclear Power Station Unit 3 05000423 1 of 5 TITLt 141 Safety Related Valves Controlled by Non Safety Equiprnent EVENT DATE (6)
LER NUMBER (6) liEPORT DATE t7)
OTHE R F ACILITIES INVOLVED (B)
MONTH DAY YLAR YEAR SEQUENilAL REVISION MONTH DAY YEAR
# Aciuty NaMt occatt e uwMn NUMBER NUMBER 09 20 90 90 030 02 07 25 97 OPl.R4 TING 5
THIS REPORT IS SUBMITIED PURSUANT TO THE REQUIREMENTS OF to CFR 61 (Check one or more) (11)
MODE 19) 20.22011tn 20,2203(aH2Hv) 60.73(aH2)h) 60.73(aH2Hym)
POWER 000 20.2203(aH1) 20.2203(aH3)D) 60.73taH2Hiu 60.73taH2Hal LEVEL (10) 20.2203(aH2)h) 20.2203(aH3)Ds) 60.73taH2Hm) 73,71 20.2203(aH2Heu 20 2203teH4) 60,73(aH2)Dv)
OTHER
~
20.2203(aH2Hm!
60.36(cH1) 60,73(aH2Hv)
Specif y in Abste et below
~
20.2203(aH2)bv) 60.361cH2)
X 60.73(a)(2Hvii)
LICENSEE CONT ACT FOR THIS LER (12)
NAMI flLLPMONE NVMMR lt'*clude A*es Coost David A, Smith, MP3 Nuclear Licensing Manager (080)437 5840 COMPLETE ONE LINE FOR EACH COMPONENT FAILURE DESCRIBED IN THIS REPORT (13)
CAU$t
&YSitM COMPONEN1 MANUF ACTUHER Nt POHT ABLE CAust sYsT(M COMPONE NT M ANUF AC TURE R hie U.NesLL to NPHDs To NPRDs SUPPLEMENT AL REPORT EXPECTED (14)
EXPECTED MONTH oAY YEAR YES X NO SUBMISSION Of ves, complete EXPECTED SUBMISSION DATE),
DATE (15)
ABSTRACT (Limit to 1400 spaces. l.a., approximately 16 single spaced typewrittenlines) (16)
On September 20,1990, with the unit in Mode 5 of an extended outage,whde performing an engineering evaluation,as part of the ConfigurationManagement Program, an initial determinationwas made that the High Pressure Safety injection (SlH) and Low l
Pressure Safety injection (SIL) systems were subject to degraded performance due to possible mis position;ngof normally closed s fety related air operated valves. Mis-positioningof these 21 valves can be postulated to occur under post accidentharsh l
$nvironmentalconditionsdue to failure of non quahfiedpower and controlcircuits. As a result, the potential diversion of SlH and/or SIL flow under accident conditions may be more than the margin allowed within the Loss of Coolant Accident analysis. This condition was reported at 1434 hours on September 26,1990, pursuant to 10CFR50.72(b)(1)(iii)(D) as a condition that could hiive prevented the fulfillment of the safety function of a system needed to mitigate the consequences of an accident. Subsequently,17 Cdditional air or solenoid operated valves have been identified within the following systems: Reactor Plant Component Coohng Water, Containment Vacuum, Reactor Plant Samphng, Post Accident Samphng, and Main Steam to the auxiliary feedwater steam turbine.
The cause of the reported condition is a design erro.. The initial plant design did not adequately consider the potential mis.
positioning of these valves under harsh environmental conditions or active failure. This design error appears to have been a risult of inadequate interface between the Nuclear Steam Supply System provider and the Architect / Engineer (A/E) or internally within the A/E organization.
The potential for valve mis positioning or active failure and the resulting effects has been evaluated. The quahfication for 38
:- vilve control circuits will be upgraded, or other corrective actions taken to prevent mis-positioning.
9708190060 970725"
~
PDR ADOCK 05000423 S
PDR.
 
LRC 70;M 366A U.s. NuCLI AR Rt ouLAloRY Commission LICENSEE EVENT REPORT (LER)
TEXT CONTINUATION r ACilliV NAMi t1[
DOCKET NUMBLR(2)
L ER NUMBER (6)
PAoL (3)
YEAR sEQutN'IAL HIVibiON Millstoiio Nuclear Power Station Unit 3 05000423 NuvetR NuwmL 2 of 5 90 030 02 TLKT l11more weceis requued. use additions /cornes of NRC form 366Al l17) 1.
Qascription of Event On September 20,1990, with the unit in Mode 5 of an extended outage, while performing an engineering evaluation as part of the Configuration Management Prograrn, an initialdeterminationwas made that the High Pressure Safety injaction (SlH) [
I and Low Pressure Safety injection (SIL) systems were subject to degraded performance due to possible mis-positioning of normally closed, safety related, air operated valves (AOVs). Mis positicmngof these valves can be postulated to occur as i
a r:sult of possible failures related to non-qualified power and control circuits. The 21 valves originally identified to be l
cff:cted were the accumulator fill valves (3SIL*AV8878A/B/C/D), the SlH to Sll isolation test valves (OSIL*AV 8872A/B/C/D), accumulator test line isolation valves (3SIL*AV 8877A/B/C/D), accumulator injection fill line isolation valves (3SIL'AV8879A/B/C/D), charging pump test supply isolation valve (3SlH*AV8882), SlH pump hot leg test line isolation valves (3SIL'AV8889A/C), and the Residual Heat Removal syrtem pump hot leg test line isolation valves (3SlH*AV8889B/D) Spurious operation of these valves, coupled with assumed failure of the non-safety related downstream piping, could result in diversion of Emergency Core Cooling Systam (ECCS) flow.
Tha 21 SlH/SIL valves are controlled by momentary contact push-button switches in the control room which include a s::1-in circM utilizing contacts from the valve limit switch located inside containment. The associated control circuit penetrations utilize terminal blocks inside containment. These configurations are not currently qualified for post cccident harsh environmental conditions. This circuit design could result in spurious valve operation due to the effects of harsh environmental conditions following a design basis accident (DBA).
Following initialidentification of this condition, it was reported at 1434 hours on September 26,1996, pursuant to 10CFR50.72(b)(1)(lii)(D). It was also reported, pursuant to 10CFR50.73(a)(2)(vii)(D) as a condition that could have pr; vented the fulfillment of the safety function of a system needed to mitigate the consequences of an accident.
S2venteen ad(tional safety related air operated and solenoid operded valves have been identified where failures of non-qualified control circuits could degrade performance of a safety system function These additional valves are located in the following systems: Reactor Plant Component Cooling Water (CCP), Containment Vacuum, Reactor Plant Simpling (SSR), Post Accident Sampling (SSP), and Main Steam to the auxiliary feedwater steam turbine. The s:venteen additional valves are the turbine dnven auxiliary feedwater pump-turbine exhaust condensate drain line isolation valve (3 MSS *AOV65), three temperature control valves in the CCP Sp tem (3CCP*1V32A/B/C), the Containment Vacuum System inboard containment boundary valve (3CVS*AOV23), six Post Accident Sample System simple isolation valves, and six Reactor Plant Sampling System sample isolation valves.
Mis-operation of the Reactor Plant Component Cooling Water valves could degrade performance of the CCP system when required for Safety Grade Cold Shutdown. The affected Containment Vacuum System valve is a containment boundary valve and mis positioning would degrade the redundant containment boundary. Mis-positioning of the R: actor Plard Sampling System and Post Accident Sampling System valves could degrade ECCS performance by cr:ating a flow diversion path via the 3/8 inch safety-related sampling lines between redundant system trains, 11,
 
==Cause of Event==
The cause of the reported conditions is a design error. The initial plant design did not adequately consider the potential mis-positioning of these valves under harsh environmental conditions or active failure. This design error appears to h:ve been a result of inadequate interface between t"e Nuclear Steam Supply System provider and the Architect / Engineer (AT.; or inter' ally within the A/E org snization.~
 
N!.c f oRV 366A U.S. NuCL E AR I.E GuL AT oRY CoM Mis sioN LICENSEE EVENT REPORT (LER)
TEXT CONTINUATION F ACILliY N AME (1) ooCKET NUMBER (2)
LER NuMBE R (G)
PAGE (3)
YEAR sEOutN1 AL HEvisioN Millstone Nuclear Power Station Unit 3 05000423 NUMBE R NUMBE R 3 of 5 l 96 036 02 T EX1 (11more space is requaed, vse additronalcopics of NRC form 366A) t11)
These are historical conditions identified as part of the Configuration Management Program review process l
111. Analysis of Event 3SIL*AV8878A to D are normally closed valves and are located in each accumulator fill line inside the containment.
Th3 valves can be opened by an operator from the main control board when borated makeup water is required to be cdded to the accumulators. These valves are Category I components for the purpose of maintaining pressure boundary integnty. However, they are powered and controlled via circuitry which is not class 1E.
3SIL*AV8889B/D,3SIL*AV8877A/B/C/D 3SIL*AV8879A/B/C/D. 3SIL*AV8872A/B/C/D, and 3SlH*AV8882, 3SlH*AV8889A/C, are located in check valve test lines and are normally closed except for check valve leakage monitonng. The valves are opened by an operator from the main control board for the purpose of performing these procedures to identify check valve leakage. These valves are designed with a restricted port to limit the maxirnum flow l rcte when fully open with full system pressure across the valve. These valves are Category I corponents for the purpose of maintaining pressure boundary integnty. However, they are powered and controlled via circuitry which is not class 1E.
The turbine driven auxiliary feedwater pump-turbine exhaust condensate drain line isolation valve (3 MSS *AOVGS) is normally open to drain any condensate collected in the exhaust line while the turbine is in standby. The valve fails closed on loss of power or loss of instrument air, and closes on a turbine start. The CCP System temperature control valves (3CCP*TV32A/B/C) modulate to maintain cooling water temperature within predetermined limits. These valves f;il to the position of maximum coolir.g on loss of instrument air. The Containment Vacuum System inboard containment boundary valve (3CVS*AOV23) is a normally closed valve which fails closed on loss of power or loss of instrument air The associated outboard containment boundary valve is a manuallocked closed valve. The Reactor Plant Sampling System and PASS System valves are normally closed solenoid valves located inside containment which f il closed on loss of power, An interpretation of the Institute of Electncal and Electronics Engineers (IEEE) standards conducted by the Nuclear St:am Supply System (NSSS) provider had determined that there were no credible failure mechanisms for the non-l safety related control system which operates these valves. However, the onginal NSSS design did not specifically cddress failures of these control circuits due to postulated harsh environmental effects. Therefore, it can not be cssured that these valves will remain in their proper fail safe position in the event of a design basis accident. Dunng a DBA, a failure could potentially lead to the diversion of safety injection flow and possibly result in pump runout.
The Millstone Unit 3 Safety Evaluation Report (SER) states, for protection systems, that the unit conforms to the design basis requirements of IEEE Standard 3791972, 'IEEE Trial Use Guide for the Application of the Single Failure Cnterion to Nuclear Power Generating Station Protection Systems." IEEE Standard 379 as supplemented by Regulatory Guide 153,' Application of the Single Failure Criterion to Nuclear Power Plant Protection Systems, Revision 0, June 1973,*
r:: quires that protective system components which are not qualified for seismic events or accident environments be assumed to failif such failure adversely affects safety system performance. Lack of equipment qualification may serve cs a basis to assume failure With the possible f ailures of non-qualified equipment assumed, the protection system must then be capable of performing those functions required to mitigate the consequences of the specific event.
10CFR50.49, " Environmental qualification of electric equipment important to safety for nuclear power plants? requires th"t nonsafety-related electric equipment whose failure under postulated environmental conditions could prevent satisfactory accomplishment of safety functions are included in the plant environmental qualification program.l l
x
 
,U.s. NUCLEAR F.EoulAT oRY commission LICENSEE EVENT REPORT (LER)
TEXT CONTINUATION l
F AclLITY NAME (1) oocKET NuMsER (2)
LER NuMsER16)
PAoE (3)
I YEAR SEQulNTIAL REv!SloN Millstone Nuclear Power Station Unit 3 05000423 NuMBti NUMBER 4 og $
l 90 030 02 1EKT fit more space is required, vse additionalcopies of NRC form 366A) 111)
Th3 potential safety consequences of this condition are significant in that credib multiple failures of these non-qualified power and control circuits causing a potentialloss of the ability to mitigate the consequences of an accident. This could result in off site dose consequences potentially in excess of 10CFR100 limits.
However, the likelihood of such a common mode failure is considered to be remote, because most of the affected non-qualified equipment is similar in design and construction to other fully qualified components.
:- For the SlH/SIL valves, no significant diversion of ECCS flow can occur unless concurrent failure of the connected 3/4 inch and 1 inch test and drain piping is assumed. Although this piping is not considered safety related, the piping design pressures are significantly greater than would be experienced and the water volume would be contained by normally closed isolation valves downstream. For the Containment Vacuum System (3CVS*AOV23) valve, the line
:- r maine isolated by a locked closed manual valve. The normally open turbine steam exhaust line drain (3 MSS'AOV65) valve is on a 3/4 inch diameter line, and is located on a relatively low energy steam line. The Reactor Plant Component Cooling Water System (3CCP'TV32A/B/C) valves, and Main Steam System valve are located in accessible areas outside containment. Although not credited, these valves can readily be vented to their safe position by manual action.
For the Reactor Plant Sampling System and Post Accident Sampling System valves, significant diversion of flow would not be expected due to the small diameter (3/8 inch) of the sample lines.
 
==IV. Corrective Action==
S!fety related valves (air operated and solenoid operated) controlled by non safety-grade components whose failure could adversely affect safety system performance have been identified. Initially 21 valves located in the SlH and SIL Systems were identified. Further review has identified an additional 17 valves in the following systems: Reactor Plant Component Cooling Water, Containment Vacuum, Reactor Plant Sampling, Post Accident Sampling and Main Steam to the auxiliary feedwater steam turbine. Recurrence of this type of condition is not expected due to enhancements in th3 design control process made since this occurrence. This completes reviews of plant systems for this condition.
Th3 following corrective action will be token:
1.
For systems whose safety performance may be unacceptably reduced as a result of air operated oi solenoid operated valves (controlled by non-safety grade, non-qualified components) mis-positioning due to exposure to harsh environmental conditions or active failure, corrective actions will be taken to restore performance to within the l design basis prior to entry into Mode 4.
V.
 
==Additional Information==
None fdC FORM 366AN951
 
U.S. Nucl::r Regul: tory Commission B16590/Page 2 Atta6hment: 1)
NNECO's commitments in response to LER 96 036 02 2)
LER 96 036 02 cc:
H. J.
Miller, Region l Administrator A. C. Corne, Senior Resident inspector, Millstone Unit No. 3 J, W. Andersen, NRC Project Manager, Millstone Unit No. 3 W. D. Travers, Dr., Director, Special Projects
?
l l
 
Docket No 50 g3 B16590 Millstone Nuclear Power Station, Unit No. 3 NNECO's Commitments in Response To (LER 96-036 02)
July 25,1997
_a
 
4 List of Regulatory Commitments The following table identifies those actions committed to by NNECO in this document. Please notify the Manager - Nuclear Licensing at the Millstone Nuclear Power Station Unit No. 3 of any questions regarding this document or any associated regulatory commitments.
Number
 
==Commitment==
Due None None N/A o
 
6 4
Docket No. 50-423 B16590 I
Millstone Nuclear Power Station, Unit No. 3 NNECO's Submittal of
&ER 96-036-02)
July 25,1997
 
%Ac toRM 366A U.s. NUCLEAH REoVLAToAY Commission
{4 9f4 UCENSEE EVENT REPORT (LER)
TEXT CONTINUATION F ACILITY NAME (1)
DOCKET NUMBER (2)
LER NUMBER (6)
PAoE 131 YEAR sE QUE N11AL REV1SloN Millstone Nuclear Power Station Unit 3 05000423 NUMBE H NUMBE R S of 5 i
96 030 02 l
TlKT rit more spaceis required. use additoonetcol es of NRC form.166A) l11) d
 
==Similar Events==
LERs discussing inadequate design control related conditions are identified below. Various elements of the Configuration Management Program are being conducted to detect design and licensing basis problems. The LERs att LER 96-007-02
* Containment Recirculation Spray, Quench Spray, and Safety injection Systems Outside Design Basis
{
Due to Design Errors.'
r LER 96-013-00 ' Residual Heat Removal (RHR) System Design Deficiency Due to NonconservativeOriginal Design i
Assumption? (Loss of control air causes RHR heat exchanger (HX) throttle control valves to fail open overstressing the Reactor Plant Component Cooling Water System piping connected to the HX.)
LER 96-045-00
* Electrical Separation Design Conflict with FSAR?
LER 97-010-00
* Electrical Calculation Discrepancies in Minimum Voltage Analysis for Class 1E Electrical Systems?
LER 97-01100
* Hydrogen Recombiner Heaters Potentially Outside of Design Basis Under Degraded Voltage Conoitions?
LER 97-015-00 'PotentialVortexing of Recirculation Spray System Pumps?
Manuf acturer Data Ells System Code High Pressure Safety injection System........80 Residual Heat Removal / Low Pressure....
..BP Safety injection System Containment Vacuum System...
.... B F -
Component Cooling Water System...
...CC l
Main Steam System....
....SB Post Accident (Monitoring) Sampling..
......lP System Reactor Sampling System (Sampling..
..KN
:- and Water Quality System)
Ells Component Code V alv e, S olenoid, Flow......................................F SV
' V al y e, S a m ple................................................ S M V V al v e, Te s t....................................................TV Val v e, I s ola t io n............................................... l S V-
}}
 
{{LER-Nav}}

Latest revision as of 02:27, 24 May 2025