ML15110A280: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
Line 17: Line 17:
=Text=
=Text=
{{#Wiki_filter:QF0212, Revision 5 (FP-SC-RSI-04)
{{#Wiki_filter:QF0212, Revision 5 (FP-SC-RSI-04)
Page 1 of 1Xcel EnergySHIPPING DOCUMENTNORTHERN STATES POWER -MND/B/A Xcel EnergyMonticello Nuclear Plant, 2807 W Hwy. 75, Monticello, MN 55362Date: 4-14-15Shipping DocumentTracking Number:Ship To:USNRC11555 Rockville PikeRockville, MD 20852-2738 Attention Of: Document Control Desk (103)Carrier:
Page 1 of 1 Xcel Energy SHIPPING DOCUMENT NORTHERN STATES POWER -MN D/B/A Xcel Energy Monticello Nuclear Plant, 2807 W Hwy. 75, Monticello, MN 55362 Date: 4-14-15 Shipping Document Tracking Number: Ship To: USNRC 11555 Rockville Pike Rockville, MD 20852-2738 Attention Of: Document Control Desk (103)Carrier: UPS -Standard Overnight RMA No: Pro I Tracking No: PO / Contract No: Packaging:
UPS -Standard Overnight RMA No:Pro I Tracking No: PO / Contract No:Packaging:
Number of Packages:
Number of Packages:
1 Weight:Dangerous Goods/ UN/NA No: Insurance Est. ValueHazardous Materials?
1 Weight: Dangerous Goods/ UN/NA No: Insurance Est. Value Hazardous Materials?
Required?
Required?Reason for Shipment:
Reason for Shipment:
Overnight Shipment to USNRC Melody Imholte -Please ensure tracking number is communicated to me -melody.imholte@xenuclear.com Item No. Qt.. Unit j Description Catalog iDQ 1 Box Tech Spec Updates Request ar By signin s s pin d me t you re dec aring, to the best of your knowledge, that the matena b in Wshipped is in compliance with Xcel Energy Corporate Policies.
Overnight Shipment to USNRCMelody Imholte -Please ensure tracking number is communicated to me -melody.imholte@xenuclear.com Item No. Qt.. Unit j Description Catalog iDQ1 Box Tech Spec UpdatesRequest arBy signin s s pin d me t you re dec aring, to the best of your knowledge, that the matena b in Wshipped is incompliance with Xcel Energy Corporate Policies.
Please print and sign your name legibly.SWIP Making Shipment:
Please print and sign your name legibly.SWIP Making Shipment:
Date:Received By: Date:For will-call use onlyUse of this form as a procedural aid does not require retention as a quality record.'4ool&f
Date: Received By: Date: For will-call use only Use of this form as a procedural aid does not require retention as a quality record.'4ool&f
~OPERATING LICENSE AND TECHNICAL SPECIFICATIONS UPDATING INSTRUCTIONS TECHNICAL SPECIFICATIONS REMOVE ___SERPage Amendment Document Type N'a Am-en'dment 3 186 Operating
~OPERATING LICENSE AND
.... .1871 -License '
: 2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
: 2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
: 3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version.
: 3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version. Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. For Bases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 100a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 187 Programs and Manuals 5.5 5.5 Programs and Manuals 5.5.11 Primary Containment Leakage Rate Testing Program (continued)
Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. ForBases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 100a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 187 Programs and Manuals5.55.5 Programs and Manuals5.5.11 Primary Containment Leakage Rate Testing Program (continued)
: d. Leakage rate acceptance criteria are: 1. Containment leakage rate acceptance criterion is < 1.0 La. During the first unit startup following testing in accordance with this program, the leakage rate acceptance criteria are < 0.60 La for the Type B and C tests and < 0.75 La for Type A tests.2. Air lock testing acceptance criterion is an overall air lock leakage rate of _< 0.05 La when tested at _> Pa.e. The resilient seals of each 18 inch primary containment purge and vent valve shall be replaced at least once every 9 years. The provisions of SR 3.0.2 are applicable to this requirement.
: d. Leakage rate acceptance criteria are:1. Containment leakage rate acceptance criterion is < 1.0 La. During thefirst unit startup following testing in accordance with this program, theleakage rate acceptance criteria are < 0.60 La for the Type B and Ctests and < 0.75 La for Type A tests.2. Air lock testing acceptance criterion is an overall air lock leakage rateof _< 0.05 La when tested at _> Pa.e. The resilient seals of each 18 inch primary containment purge and ventvalve shall be replaced at least once every 9 years. The provisions ofSR 3.0.2 are applicable to this requirement.
If a common mode failure attributable to the resilient seals is identified based on the results of SR 3.6.1.3.11, the resilient seals of all 18 inch primary containment purge and vent valves shall be replaced.f. The provisions of SR 3.0.3 are applicable to the Primary Containment Leakage Rate Testing Program.5.5.12 Battery Monitoring and Maintenance Program This Program provides for battery restoration and maintenance, based on the recommendations of IEEE Standard 450-1995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-Acid Batteries for Stationary Applications," or of the battery manufacturer of the following:
If a common mode failureattributable to the resilient seals is identified based on the results ofSR 3.6.1.3.11, the resilient seals of all 18 inch primary containment purgeand vent valves shall be replaced.
: a. Actions to restore battery cells with float voltage < 2.13 V; and b. Actions to equalize and test battery cells that had been discovered with electrolyte level below the minimum established design limit.Monticello 5.5-11 Amendment No. 4 4 6 ,, 4 8 , 6 0 , 187 TECHNICAL SPECIFICATION BASES UPDATING INSTRUCTIONS MNGP TECHNICAL SPECIFICATION BASES REMOVE !IN'SERT Page(s) Revision Document Type &#xfd;Paqe(s) Revision Table 1 33 List of Effective Table 1 34 Sections /Specifications Table 2 33 Record of Table 2 34 Revisions B 2.1.1-1 through 4 Bases B 2.1 .1-1 thirough 34 B 2.1.1-4 Spec. 2.1.1 13 2.1.1-4 B 3.3.6.1-1 through 4 Bases :B 3.3.6.1-1 through 34 B 3.3.6.1-23 Spec. 3.3.6.1 B 3.3.6.1-24 B 3.5.1-1 through 29 Bases B 3.5.1-1 through 34 B 3.5.1-19 Spec. 3.5.1 ;B 3.5.1-20 Destroy removed pages.Revision 34 TABLE 1 (Page 1 of 1)MONTICELLO NUCLEAR GENERATING PLANT BASES LIST OF EFFECTIVE SECTIONS/SPECIFICATIONS Section/Specification Revision No.B 2.1.1 34 B 2.1.2 6 B 3.0 27 B 3.1.1 0 B 3.1.2 0 B 3.1.3 11 B 3.1.4 19 B 3.1.5 0 B 3.1.6 29 B 3.1.7 4 B 3.1.8 4 B 3.2.1 29 B 3.2.2 0 B 3.2.3 0 B 3.3.1.1 32 B 3.3.1.2 0 B 3.3.2.1 26 B 3.3.2.2 29 B 3.3.3.1 3 B 3.3.3.2 3 B 3.3.4.1 0 B 3.3.5.1 29 B 3.3.5.2 0 B 3.3.6.1 34 B 3.3.6.2 0 B 3.3.6.3 3 B 3.3.7.1 4 B 3.3.7.2 4 B 3.3.8.1 22 B 3.3.8.2 0 B 3.4.1 32 B 3.4.2 0 B 3.4.3 25 B 3.4.4 0 B 3.4.5 0 B 3.4.6 4 B 3.4.7 0 B 3.4.8 0 B 3.4.9 25 B 3.4.10 0 B 3.5.1 34 B 3.5.2 0 B 3.5.3 0 B 3.6.1.1 29 B 3.6.1.2 29 B 3.6.1.3 29 Section/Specification B 3.6.1.4 B 3.6.1.5 B 3.6.1.6 B 3.6.1.7 B 3.6.1.8 B 3.6.2.1 B 3.6.2.2 B 3.6.2.3 B 3.6.3.1 B 3.6.4.1 B 3.6.4.2 B 3.6.4.3 B 3.7.1 B 3.7.2 B 3.7.3 B 3.7.4 B 3.7.5 B 3.7.6 B 3.7.7 B 3.7.8 B 3.8.1 B 3.8.2 B 3.8.3 B 3.8.4 B 3.8.5 B 3.8.6 B 3.8.7 B 3.8.8 Revision No.0 25 0 0 29 30 0 0 0 0 0 31 29 0 17 31 8 4 29 0 33 27 33 7 4 0 0 4 B 3.9.1 B 3.9.2 B 3.9.3 B 3.9.4 B 3.9.5 B 3.9.6 B 3.9.7 B 3.9.8 B 3.10.1 B 3.10.2 B 3.10.3 B 3.10.4 B 3.10.5 B 3.10.6 B 3.10.7 B 3.10.8 0 0 0 0 0 0 21 0 28 0 3 0 0 0 0 0 Rev. 34 TABLE 2 (Page 1 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Number Section/Specification 0 1 2 3 All B 3.8.3 B 3.5.1 4 B 3.3.3.1, B 3.3.3.2, B 3.3.6.3, B 3.10.3 B 2.1.1, B 2.1.2, B 3.1.6, B 3.1.7, B 3.1.8, B 3.3.6.1, B 3.3.7.1, B 3.3.7.2, B 3.4.6, B 3.6.1.3, B 3.7.4, B 3.7.5, B 3.7.6, B 3.8.2, B 3.8.5, B 3.8.8 B 3.3.5.1 B 3.8.1(1)B 2.1.2 B 3.3.2.1 B.3.8.1, B 3.8.2 Description of Revision Amendment 146 -Original ITS Revision SR 3.8.3.3, Diesel Fuel Oil Testing Description LCO 3.5.1, ACTION D, changed description of LPCI injection pathway.Miscellaneous ITS Bases Clarifications/Corrections Amendment 148 -Bases Changes implementing Full Scope AST.Amendment 151 -Extend Surveillance Interval and AV for the LPCI Loop Select TD Relays.Clarify RCS Safety Limit values.Correct that initial MCPR values are specified in the COLR.Clarify that the 2R and 1AR transformers are considered as a single off-site source when 1AR is supplied from 345 kV Bus 1.5 6 7 1. Replaces page B 3.8.1-25 in Sharepoint version of the TS. Page inadvertently deleted during implementation of Amendment 148 (CAP 01095053).
: f. The provisions of SR 3.0.3 are applicable to the Primary Containment Leakage Rate Testing Program.5.5.12 Battery Monitoring and Maintenance ProgramThis Program provides for battery restoration and maintenance, based on therecommendations of IEEE Standard 450-1995, "IEEE Recommended Practicefor Maintenance,  
Rev. 34 TABLE 2 (Page 2 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 7 (con't) B.3.8.4 Correct the float voltage for the 125 VDC batteries in SR 3.8.4.1.B.3.8.4 Amendment 153 -Specify in SR 3.8.4.2 that the Division 2 battery charger supplies-> 110 amps.8 B.3.5.1 Amendment 155 -Revise SR 3.5.1.3 to correct Alternate Nitrogen System supply pressure to ADS and clarify OPERABILITY during bottle changeout.
: Testing, and Replacement of Vented Lead-Acid Batteries forStationary Applications,"
B.3.7.4, Amendment 154 -Revise Bases for B.3.7.5 Specification 3.7.5 to reflect adoption of TSTF-477, which allows both CRV subsystems to be inoperable for 72 hours. Clarify the OPERABILITY requirements of certain CRV fans currently required to support CREF subsystem operation.
or of the battery manufacturer of the following:
: a. Actions to restore battery cells with float voltage < 2.13 V; andb. Actions to equalize and test battery cells that had been discovered withelectrolyte level below the minimum established design limit.Monticello 5.5-11Amendment No. 446,,48, 60, 187 TECHNICAL SPECIFICATION BASESUPDATING INSTRUCTIONS MNGP TECHNICAL SPECIFICATION BASESREMOVE !IN'SERTPage(s) Revision Document Type &#xfd;Paqe(s)
RevisionTable 1 33 List of Effective Table 1 34Sections
/Specifications Table 2 33 Record of Table 2 34Revisions B 2.1.1-1 through 4 Bases B 2.1 .1-1 thirough 34B 2.1.1-4 Spec. 2.1.1 13 2.1.1-4B 3.3.6.1-1 through 4 Bases :B 3.3.6.1-1 through 34B 3.3.6.1-23 Spec. 3.3.6.1 B 3.3.6.1-24 B 3.5.1-1 through 29 Bases B 3.5.1-1 through 34B 3.5.1-19 Spec. 3.5.1 ;B 3.5.1-20Destroy removed pages.Revision 34 TABLE 1 (Page 1 of 1)MONTICELLO NUCLEAR GENERATING PLANTBASES LIST OF EFFECTIVE SECTIONS/SPECIFICATIONS Section/Specification Revision No.B 2.1.1 34B 2.1.2 6B 3.0 27B 3.1.1 0B 3.1.2 0B 3.1.3 11B 3.1.4 19B 3.1.5 0B 3.1.6 29B 3.1.7 4B 3.1.8 4B 3.2.1 29B 3.2.2 0B 3.2.3 0B 3.3.1.1 32B 3.3.1.2 0B 3.3.2.1 26B 3.3.2.2 29B 3.3.3.1 3B 3.3.3.2 3B 3.3.4.1 0B 3.3.5.1 29B 3.3.5.2 0B 3.3.6.1 34B 3.3.6.2 0B 3.3.6.3 3B 3.3.7.1 4B 3.3.7.2 4B 3.3.8.1 22B 3.3.8.2 0B 3.4.1 32B 3.4.2 0B 3.4.3 25B 3.4.4 0B 3.4.5 0B 3.4.6 4B 3.4.7 0B 3.4.8 0B 3.4.9 25B 3.4.10 0B 3.5.1 34B 3.5.2 0B 3.5.3 0B 3.6.1.1 29B 3.6.1.2 29B 3.6.1.3 29Section/Specification B 3.6.1.4B 3.6.1.5B 3.6.1.6B 3.6.1.7B 3.6.1.8B 3.6.2.1B 3.6.2.2B 3.6.2.3B 3.6.3.1B 3.6.4.1B 3.6.4.2B 3.6.4.3B 3.7.1B 3.7.2B 3.7.3B 3.7.4B 3.7.5B 3.7.6B 3.7.7B 3.7.8B 3.8.1B 3.8.2B 3.8.3B 3.8.4B 3.8.5B 3.8.6B 3.8.7B 3.8.8Revision No.025002930000003129017318429033273374004B 3.9.1B 3.9.2B 3.9.3B 3.9.4B 3.9.5B 3.9.6B 3.9.7B 3.9.8B 3.10.1B 3.10.2B 3.10.3B 3.10.4B 3.10.5B 3.10.6B 3.10.7B 3.10.8000000210280300000Rev. 34 TABLE 2 (Page 1 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision AffectedNumber Section/Specification 0123AllB 3.8.3B 3.5.14B 3.3.3.1,B 3.3.3.2,B 3.3.6.3,B 3.10.3B 2.1.1,B 2.1.2,B 3.1.6,B 3.1.7,B 3.1.8,B 3.3.6.1,B 3.3.7.1,B 3.3.7.2,B 3.4.6,B 3.6.1.3,B 3.7.4,B 3.7.5,B 3.7.6,B 3.8.2,B 3.8.5,B 3.8.8B 3.3.5.1B 3.8.1(1)B 2.1.2B 3.3.2.1B.3.8.1,B 3.8.2Description of RevisionAmendment 146 -Original ITS RevisionSR 3.8.3.3, Diesel Fuel Oil Testing Description LCO 3.5.1, ACTION D, changed description ofLPCI injection pathway.Miscellaneous ITS BasesClarifications/Corrections Amendment 148 -Bases Changesimplementing Full Scope AST.Amendment 151 -Extend Surveillance Intervaland AV for the LPCI Loop Select TD Relays.Clarify RCS Safety Limit values.Correct that initial MCPR values are specified inthe COLR.Clarify that the 2R and 1AR transformers areconsidered as a single off-site source when1AR is supplied from 345 kV Bus 1.5671. Replaces page B 3.8.1-25 in Sharepoint version of the TS. Page inadvertently deleted during implementation of Amendment 148 (CAP 01095053).
Rev. 34 TABLE 2 (Page 2 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of RevisionNumber Section/Specification 7 (con't) B.3.8.4 Correct the float voltage for the 125 VDCbatteries in SR 3.8.4.1.B.3.8.4 Amendment 153 -Specify in SR 3.8.4.2 thatthe Division 2 battery charger supplies-> 110 amps.8 B.3.5.1 Amendment 155 -Revise SR 3.5.1.3 to correctAlternate Nitrogen System supply pressureto ADS and clarify OPERABILITY during bottlechangeout.
B.3.7.4, Amendment 154 -Revise Bases forB.3.7.5 Specification 3.7.5 to reflect adoption ofTSTF-477, which allows both CRV subsystems to be inoperable for 72 hours. Clarify theOPERABILITY requirements of certain CRVfans currently required to support CREFsubsystem operation.
9 B 3.5.1 Clarify RHR intertie discussion.
9 B 3.5.1 Clarify RHR intertie discussion.
B 3.5.1 Clarify Action M to indicate that the plant maynot be in a condition outside the accidentanalysis but is in a condition not specifically justified for continued operation.
B 3.5.1 Clarify Action M to indicate that the plant may not be in a condition outside the accident analysis but is in a condition not specifically justified for continued operation.
B 3.6.1.3 Add Action E to describe actions for when theMSIVs are not within leakage limits and re-labelsubsequent actions.10 B 3.5.1 Add HPCI "Keep-fill" discussion.
B 3.6.1.3 Add Action E to describe actions for when the MSIVs are not within leakage limits and re-label subsequent actions.10 B 3.5.1 Add HPCI "Keep-fill" discussion.
B 3.9.7 Clarify Action A.1 for what is meant byinoperable.
B 3.9.7 Clarify Action A.1 for what is meant by inoperable.
11 B 3.1.3, Amendment 158- Change control rod notchB 3.1.4 testing frequency from every 7 days to onlyonce per 31 days in accordance with TSTF-475, Revision 1.Rev. 34 TABLE 2 (Page 3 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of RevisionNumber Section/Specification 12 B 3.3.1.1, Amendment 159 -PRNMS.B 3.3.2.1,B 3.4.1B 3.3.5.1 Amendment 161 -LPCI Recirculation RiserDifferential Pressure  
11 B 3.1.3, Amendment 158- Change control rod notch B 3.1.4 testing frequency from every 7 days to only once per 31 days in accordance with TSTF-475, Revision 1.Rev. 34 TABLE 2 (Page 3 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 12 B 3.3.1.1, Amendment 159 -PRNMS.B 3.3.2.1, B 3.4.1 B 3.3.5.1 Amendment 161 -LPCI Recirculation Riser Differential Pressure -High (Break Size)allowable value and channel calibration interval change.13 B 3.0 Amendment 157 -Add Bases for new LCO 3.0.9 for the unavailability of barriers, reflecting adoption of TSTF-427.B 3.4.9 Clarify that the shift in Figure 3.4.9-1 includes both delta RTNDT and margin.B 3.5.1 Amendment 162 -Add new Conditions to Specification 3.5.1 for restoration of various low-pressure ECCS subsystem out-of-service combinations.
-High (Break Size)allowable value and channel calibration intervalchange.13 B 3.0 Amendment 157 -Add Bases for new LCO3.0.9 for the unavailability of barriers, reflecting adoption of TSTF-427.
B 3.4.9 Clarify that the shift in Figure 3.4.9-1 includesboth delta RTNDT and margin.B 3.5.1 Amendment 162 -Add new Conditions toSpecification 3.5.1 for restoration of variouslow-pressure ECCS subsystem out-of-service combinations.
14 B 3.0 Section B 3.0 reissued in entirety.
14 B 3.0 Section B 3.0 reissued in entirety.
Pagenumbers at end of LCO Applicability over-lapped SR Applicability page numbers(CAP 01192534).
Page numbers at end of LCO Applicability over-lapped SR Applicability page numbers (CAP 01192534).
15 B 3.7.4 Amendment 160 -Revise Bases for thespecification reflecting adoption of a ControlRoom Envelope Habitability program inaccordance with TSTF-448.
15 B 3.7.4 Amendment 160 -Revise Bases for the specification reflecting adoption of a Control Room Envelope Habitability program in accordance with TSTF-448.16 B 3.3.1.1 Replace IRM -Neutron Flux -High High (1 .a)for calibrating IRMs by a heat balance by referring to IRM/APRM overlap and APRM Setdown Scram meeting reactivity requirements.
16 B 3.3.1.1 Replace IRM -Neutron Flux -High High (1 .a)for calibrating IRMs by a heat balance byreferring to IRM/APRM overlap and APRMSetdown Scram meeting reactivity requirements.
B 3.7.7 Correct Turbine Bypass Valve capacity.17 B 3.7.3 Correct EDG-ESW Background description.
B 3.7.7 Correct Turbine Bypass Valve capacity.
Rev. 34 TABLE 2 (Page 4 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 18 B 3.6.1.3 Clarify PCIV definition.
17 B 3.7.3 Correct EDG-ESW Background description.
19 B 3.1.4 Clarify spacing requirements of adjacent slow control rods.B 3.8.1, Revise Bases to reflect separation of 1ARS B 3.8.2 Transformer and Bus 1.20 B 3.5.1 Reissue section, missing text on HPCI keep-fill discussion. (CAP 01328422)21 B 3.9.7 Correct prior clarification to Action A.1 for what is meant by inoperable. (CAP 01257096)22 B 3.3.8.1 Amendment 169 -Revise licensing basis to reflect removal of the capability to automatically transfer to the 1AR Transformer as a source of power to the essential buses on degraded voltage and instead directly transfer to the EDGs.23 B 3.3.5.1 Amendment 170 -Revised to reflect ancillary change related to ADS 20-minute Bypass Timer.24 B 3.3.1.1 Amendment 171 -Revised to provide restoration period before declaring the APRMs inoperable when SR 3.3.1.1.2 is not met.25 B 3.4.3, Amendment 168 -Revised surveillance B 3.5.1, requirements within these specifications to B 3.6.1.5 allow crediting overlapping testing rather than requiring a lift-test during plant startup.B 3.4.9 Amendment 172 -Revised specification to adopt PTLR.26 B 3.1.6 Amendment 173 -Revised to reflect B 3.3.2.1 incorporation of TSTF-476 for improved BPWS.Rev. 34 TABLE 2 (Page 5 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Number 27 28 29 Affected Section/Specification B 3.0 B 3.8.2 B 3.10.1 B 3.1.6 B 3.2.1 B 3.3.1.1 B 3.3.2.2 B 3.3.5.1 B 3.4.1 B 3.5.1 B 3.6.1.1 B 3.6.1.2 B 3.6.1.3 B 3.6.1.8 B 3.7.1 B 3.7.7 B 3.6.2.1 B 3.8.3 B 3.6.4.3 B 3.7.4 Description of Revision Clarify application of SR 3.0.2 and SR 3.0.3 to IST tests to clarify compliance to Enforcement Guidance Memorandum (EGM) 12-001 (CAP 01389604).
Rev. 34 TABLE 2 (Page 4 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of RevisionNumber Section/Specification 18 B 3.6.1.3 Clarify PCIV definition.
Correct referenced SR number from SR 3.8.1.8 to SR 3.8.1.6.Amendment 174 -Revised specification to incorporate TSTF-484, to allow scram time testing in conjunction with hydrostatic testing.Amendment 177- Implement Extended Power Uprate.Revised TS Bases to indicate local Suppression Pool temperature limits were eliminated with Amendment 126.Amendment 178 -Revised specification to relocate stored fuel and lube oil volumes to TS bases and replace with duration requirements in accordance with TSTF-501.Amendment 181 -Revised specifications to reflect reduced runtime for SBGT and CREF from 10 hours to 15 minutes in accordance with TSTF-522.30 31 Rev. 34 TABLE 2 (Page 6 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 32 B 3.3.1.1, Amendment 180 -Implement Maximum B 3.4.1 Extended Load Line Limit Analysis, Plus (MELLLA+)33 B 3.8.1, Add EDG Fuel Oil Transfer System train B 3.8.3 description for each EDG.34 B 2.1.1, Amendment 185 -Reduce the Reactor Steam B 3.3.6.1 Dome Pressure specified in the Reactor Core Safety Limits, resolved GE Part 21 condition for a potential to violate the safety limit during a Pressure Regulator Failure Downscale event.B 3.5.1 Amendment 184 -Removes former Condition F which allowed both Core Spray subsystems to be inoperable for 72 hours.Rev. 34 Reactor Core SLs B 2.1.1 B 2.0 SAFETY LIMITS (SLs)B 2.1.1 Reactor Core SLs BASES BACKGROUND USAR Section 1.2.2 (Ref. 1) requires the reactor core and associated systems to be designed to accommodate plant operational transients or maneuvers that might be expected without compromising safety and without fuel damage. Therefore, SLs ensure that specified acceptable fuel design limits are not exceeded during steady state operation, normal operational transients, and anticipated operational occurrences (AOOs).The fuel cladding integrity SL is set such that no significant fuel damage is calculated to occur if the limit is not violated.
19 B 3.1.4 Clarify spacing requirements of adjacent slowcontrol rods.B 3.8.1, Revise Bases to reflect separation of 1ARSB 3.8.2 Transformer and Bus 1.20 B 3.5.1 Reissue section, missing text on HPCI keep-fill discussion.  
Because fuel damage is not directly observable, a stepback approach is used to establish an SL, such that the MCPR is not less than the limit specified in Specification 2.1.1.2. MCPR greater than the specified limit represents a conservative margin relative to the conditions required to maintain fuel cladding integrity.
(CAP 01328422) 21 B 3.9.7 Correct prior clarification to Action A.1 for whatis meant by inoperable.  
The fuel cladding is one of the physical barriers that separate the radioactive materials from the environs.
(CAP 01257096) 22 B 3.3.8.1 Amendment 169 -Revise licensing basis toreflect removal of the capability to automatically transfer to the 1AR Transformer as a source ofpower to the essential buses on degradedvoltage and instead directly transfer to theEDGs.23 B 3.3.5.1 Amendment 170 -Revised to reflect ancillary change related to ADS 20-minute BypassTimer.24 B 3.3.1.1 Amendment 171 -Revised to providerestoration period before declaring the APRMsinoperable when SR 3.3.1.1.2 is not met.25 B 3.4.3, Amendment 168 -Revised surveillance B 3.5.1, requirements within these specifications toB 3.6.1.5 allow crediting overlapping testing rather thanrequiring a lift-test during plant startup.B 3.4.9 Amendment 172 -Revised specification toadopt PTLR.26 B 3.1.6 Amendment 173 -Revised to reflectB 3.3.2.1 incorporation of TSTF-476 for improved BPWS.Rev. 34 TABLE 2 (Page 5 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS RevisionNumber272829AffectedSection/Specification B 3.0B 3.8.2B 3.10.1B 3.1.6B 3.2.1B 3.3.1.1B 3.3.2.2B 3.3.5.1B 3.4.1B 3.5.1B 3.6.1.1B 3.6.1.2B 3.6.1.3B 3.6.1.8B 3.7.1B 3.7.7B 3.6.2.1B 3.8.3B 3.6.4.3B 3.7.4Description of RevisionClarify application of SR 3.0.2 and SR 3.0.3 toIST tests to clarify compliance to Enforcement Guidance Memorandum (EGM) 12-001(CAP 01389604).
The integrity of this cladding barrier is related to its relative freedom from perforations or cracking.Although some corrosion or use related cracking may occur during the life of the cladding, fission product migration from this source is incrementally cumulative and continuously measurable.
Correct referenced SR number from SR 3.8.1.8to SR 3.8.1.6.Amendment 174 -Revised specification toincorporate TSTF-484, to allow scram timetesting in conjunction with hydrostatic testing.Amendment 177- Implement Extended PowerUprate.Revised TS Bases to indicate local Suppression Pool temperature limits were eliminated withAmendment 126.Amendment 178 -Revised specification torelocate stored fuel and lube oil volumes to TSbases and replace with duration requirements inaccordance with TSTF-501.
Fuel cladding perforations, however, can result from thermal stresses, which occur from reactor operation significantly above design conditions.
Amendment 181 -Revised specifications toreflect reduced runtime for SBGT and CREFfrom 10 hours to 15 minutes in accordance withTSTF-522.
While fission product migration from cladding perforation is just as measurable as that from use related cracking, the thermally caused cladding perforations signal a threshold beyond which still greater thermal stresses may cause gross, rather than incremental, cladding deterioration.
3031Rev. 34 TABLE 2 (Page 6 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of RevisionNumber Section/Specification 32 B 3.3.1.1, Amendment 180 -Implement MaximumB 3.4.1 Extended Load Line Limit Analysis, Plus(MELLLA+)
Therefore, the fuel cladding SL is defined with a margin to the conditions that would produce onset of transition boiling (i.e., MCPR = 1.00). These conditions represent a significant departure from the condition intended by design for planned operation.
33 B 3.8.1, Add EDG Fuel Oil Transfer System trainB 3.8.3 description for each EDG.34 B 2.1.1, Amendment 185 -Reduce the Reactor SteamB 3.3.6.1 Dome Pressure specified in the Reactor CoreSafety Limits, resolved GE Part 21 condition fora potential to violate the safety limit during aPressure Regulator Failure Downscale event.B 3.5.1 Amendment 184 -Removes former Condition Fwhich allowed both Core Spray subsystems tobe inoperable for 72 hours.Rev. 34 Reactor Core SLsB 2.1.1B 2.0 SAFETY LIMITS (SLs)B 2.1.1 Reactor Core SLsBASESBACKGROUND USAR Section 1.2.2 (Ref. 1) requires the reactor core and associated systems to be designed to accommodate plant operational transients ormaneuvers that might be expected without compromising safety andwithout fuel damage. Therefore, SLs ensure that specified acceptable fuel design limits are not exceeded during steady state operation, normaloperational transients, and anticipated operational occurrences (AOOs).The fuel cladding integrity SL is set such that no significant fuel damageis calculated to occur if the limit is not violated.
The MCPR fuel cladding integrity SL ensures that during normal operation and during AOOs, at least 99.9% of the fuel rods in the core do not experience transition boiling.Operation above the boundary of the nucleate boiling regime could result in excessive cladding temperature because of the onset of transition boiling and the resultant sharp reduction in heat transfer coefficient.
Because fuel damage isnot directly observable, a stepback approach is used to establish an SL,such that the MCPR is not less than the limit specified inSpecification 2.1.1.2.
Inside the steam film, high cladding temperatures are reached, and a cladding water (zirconium water) reaction may take place. This chemical Monticello B 2.1.1-1 Revision No. 34 Monticello B 2.1.1-1 Revision No. 34 Reactor Core SLs B 2.1.1 BASES BACKGROUND (continued) reaction results in oxidation of the fuel cladding to a structurally weaker form. This weaker form may lose its integrity, resulting in an uncontrolled release of activity to the reactor coolant.The reactor vessel water level SL ensures that adequate core cooling capability is maintained during all MODES of reactor operation.
MCPR greater than the specified limit represents aconservative margin relative to the conditions required to maintain fuelcladding integrity.
Establishment of Emergency Core Cooling System initiation setpoints higher than this SL provides margin such that the SL will not be reached or exceeded.APPLICABLE The fuel cladding must not sustain damage as a result of normal SAFETY operation and AOOs. The reactor core SLs are established to preclude ANALYSES violation of the fuel design criterion that a MCPR limit is to be established, such that at least 99.9% of the fuel rods in the core would not be expected to experience the onset of transition boiling.The Reactor Protection System setpoints (LCO 3.3.1.1, "Reactor Protection System (RPS) Instrumentation"), in combination with the other LCOs, are designed to prevent any anticipated combination of transient conditions for Reactor Coolant System water level, pressure, and THERMAL POWER level that would result in reaching the MCPR Safety Limit.The approved pressure range (700 to 1400 psia) of the GEXL 14 critical power correlation is applied to resolve a 10 CFR Part 21 condition concerning a potential to violate Reactor Core Safety Limit 2.1.1.1 during a Pressure Regulator Failure Maximum Demand (Open) transient (Reference 5). Application of this correlation, which applies to the GE14 fuel in the core, allows reduction of the reactor steam dome pressure from 785 to 686 psig, precluding violation of the safety limit for this event. This change in reactor steam dome pressure was approved in Amendment 185 (Reference 7).2.1.1.1 Fuel Cladding Inte.grity The GEXL14 critical power correlation is applicable for all critical power calculations at pressures  
The fuel cladding is one of the physical barriers that separate theradioactive materials from the environs.
> 686 psig and core flows > 10% of rated flow (Reference 6). For operation at low pressures or low flows, another basis is used, as follows: Since the pressure drop in the bypass region is essentially all elevation head, the core pressure drop at low power and flows will always be > 4.56 psi. Analyses (Ref. 2) show that with a bundle flow of 28 x 103 lb/hr, bundle pressure drop is nearly independent of bundle power and has a value of 3.5 psi. Thus, the bundle flow with a 4.56 psi driving head will be > 28 x 103 lb/hr. Full scale ATLAS test Monticello B 2.1.1-2 Revision No. 34 Reactor Core SLs B 2.1.1 BASES APPLICABLE SAFETY ANALYSES (continued) data taken at pressures from 0 psig to 785 psig indicate that the fuel assembly critical power at this flow is approximately 3.35 MWt. With the design peaking factors, this corresponds to a THERMAL POWER> 50 % RTP. Thus, a THERMAL POWER limit of 25% RTP for reactor pressure < 686 psig or < 10% core flow is conservative.
The integrity of this claddingbarrier is related to its relative freedom from perforations or cracking.
2.1.1.2 MCPR The fuel cladding integrity SL is set such that no significant fuel damage is calculated to occur if the limit is not violated.
Although some corrosion or use related cracking may occur during the lifeof the cladding, fission product migration from this source is incrementally cumulative and continuously measurable.
Since the parameters that result in fuel damage are not directly observable during reactor operation, the thermal and hydraulic conditions that result in the onset of transition boiling have been used to mark the beginning of the region in which fuel damage could occur. Although it is recognized that the onset of transition boiling would not result in damage to BWR fuel rods, the critical power at which boiling transition is calculated to occur has been adopted as a convenient limit. However, the uncertainties in monitoring the core operating state and in the procedures used to calculate the critical power result in an uncertainty in the value of the critical power. Therefore, the fuel cladding integrity SL is defined as the critical power ratio in the limiting fuel assembly for which more than 99.9% of the fuel rods in the core are expected to avoid boiling transition, considering the power distribution within the core and all uncertainties.
Fuel cladding perforations,
The MCPR SL is determined using a statistical model that combines all the uncertainties in operating parameters and the procedures used to calculate critical power. The probability of the occurrence of boiling transition is determined using the approved General Electric Critical Power correlations.
: however, can result from thermal stresses, which occur from reactoroperation significantly above design conditions.
While fission product migration from cladding perforation is just asmeasurable as that from use related cracking, the thermally causedcladding perforations signal a threshold beyond which still greater thermalstresses may cause gross, rather than incremental, claddingdeterioration.
Therefore, the fuel cladding SL is defined with a margin tothe conditions that would produce onset of transition boiling (i.e.,MCPR = 1.00). These conditions represent a significant departure fromthe condition intended by design for planned operation.
The MCPR fuelcladding integrity SL ensures that during normal operation and duringAOOs, at least 99.9% of the fuel rods in the core do not experience transition boiling.Operation above the boundary of the nucleate boiling regime could resultin excessive cladding temperature because of the onset of transition boiling and the resultant sharp reduction in heat transfer coefficient.
Inside the steam film, high cladding temperatures are reached, and acladding water (zirconium water) reaction may take place. This chemicalMonticello B 2.1.1-1 Revision No. 34Monticello B 2.1.1-1Revision No. 34 Reactor Core SLsB 2.1.1BASESBACKGROUND (continued) reaction results in oxidation of the fuel cladding to a structurally weakerform. This weaker form may lose its integrity, resulting in an uncontrolled release of activity to the reactor coolant.The reactor vessel water level SL ensures that adequate core coolingcapability is maintained during all MODES of reactor operation.
Establishment of Emergency Core Cooling System initiation setpoints higher than this SL provides margin such that the SL will not be reachedor exceeded.
APPLICABLE The fuel cladding must not sustain damage as a result of normalSAFETY operation and AOOs. The reactor core SLs are established to precludeANALYSES violation of the fuel design criterion that a MCPR limit is to be established, such that at least 99.9% of the fuel rods in the core would not beexpected to experience the onset of transition boiling.The Reactor Protection System setpoints (LCO 3.3.1.1, "ReactorProtection System (RPS) Instrumentation"),
in combination with the otherLCOs, are designed to prevent any anticipated combination of transient conditions for Reactor Coolant System water level, pressure, andTHERMAL POWER level that would result in reaching the MCPR SafetyLimit.The approved pressure range (700 to 1400 psia) of the GEXL 14 criticalpower correlation is applied to resolve a 10 CFR Part 21 condition concerning a potential to violate Reactor Core Safety Limit 2.1.1.1 duringa Pressure Regulator Failure Maximum Demand (Open) transient (Reference 5). Application of this correlation, which applies to the GE14fuel in the core, allows reduction of the reactor steam dome pressure from785 to 686 psig, precluding violation of the safety limit for this event. Thischange in reactor steam dome pressure was approved in Amendment 185 (Reference 7).2.1.1.1 Fuel Cladding Inte.grity The GEXL14 critical power correlation is applicable for all critical powercalculations at pressures  
> 686 psig and core flows > 10% of rated flow(Reference 6). For operation at low pressures or low flows, another basisis used, as follows:Since the pressure drop in the bypass region is essentially allelevation head, the core pressure drop at low power and flows willalways be > 4.56 psi. Analyses (Ref. 2) show that with a bundle flowof 28 x 103 lb/hr, bundle pressure drop is nearly independent ofbundle power and has a value of 3.5 psi. Thus, the bundle flow witha 4.56 psi driving head will be > 28 x 103 lb/hr. Full scale ATLAS testMonticello B 2.1.1-2Revision No. 34 Reactor Core SLsB 2.1.1BASESAPPLICABLE SAFETY ANALYSES (continued) data taken at pressures from 0 psig to 785 psig indicate that the fuelassembly critical power at this flow is approximately 3.35 MWt. Withthe design peaking factors, this corresponds to a THERMAL POWER> 50 % RTP. Thus, a THERMAL POWER limit of 25% RTP forreactor pressure  
< 686 psig or < 10% core flow is conservative.
2.1.1.2 MCPRThe fuel cladding integrity SL is set such that no significant fuel damageis calculated to occur if the limit is not violated.
Since the parameters thatresult in fuel damage are not directly observable during reactor operation, the thermal and hydraulic conditions that result in the onset of transition boiling have been used to mark the beginning of the region in which fueldamage could occur. Although it is recognized that the onset of transition boiling would not result in damage to BWR fuel rods, the critical power atwhich boiling transition is calculated to occur has been adopted as aconvenient limit. However, the uncertainties in monitoring the coreoperating state and in the procedures used to calculate the critical powerresult in an uncertainty in the value of the critical power. Therefore, thefuel cladding integrity SL is defined as the critical power ratio in thelimiting fuel assembly for which more than 99.9% of the fuel rods in thecore are expected to avoid boiling transition, considering the powerdistribution within the core and all uncertainties.
The MCPR SL is determined using a statistical model that combines allthe uncertainties in operating parameters and the procedures used tocalculate critical power. The probability of the occurrence of boilingtransition is determined using the approved General Electric CriticalPower correlations.
Details of the fuel cladding integrity SL calculation are given in Reference  
Details of the fuel cladding integrity SL calculation are given in Reference  
: 2. Reference 3 includes a tabulation of theuncertainties used in the determination of the MCPR SL and of thenominal values of the parameters used in the MCPR SL statistical analysis.
: 2. Reference 3 includes a tabulation of the uncertainties used in the determination of the MCPR SL and of the nominal values of the parameters used in the MCPR SL statistical analysis.2.1.1.3 Reactor Vessel Water Level During MODES 1 and 2 the reactor vessel water level is required to be above the top of the active irradiated fuel to provide core cooling capability.
2.1.1.3 Reactor Vessel Water LevelDuring MODES 1 and 2 the reactor vessel water level is required to beabove the top of the active irradiated fuel to provide core coolingcapability.
With fuel in the reactor vessel during periods when the reactor is shut down, consideration must be given to water level requirements due to the effect of decay heat. If the water level should drop below the top of the active irradiated fuel during this period, the ability to remove decay heat is reduced. This reduction in cooling capability could lead to elevated cladding temperatures and clad perforation in the event that the water level becomes < 2/3 of the core height. The reactor vessel water level SL has been established at the top of the active irradiated fuel to Monticello B 2.1.1-3 Revision No. 34 Reactor Core SLs B 2.1.1 BASES APPLICABLE SAFETY ANALYSES (continued) provide a point that can be monitored and to also provide adequate margin for effective action.SAFETY LIMITS The reactor core SLs are established to protect the integrity of the fuel clad barrier to prevent the release of radioactive materials to the environs.SL 2.1.1.1 and SL 2.1.1.2 ensure that the core operates within the fuel design criteria.
With fuel in the reactor vessel during periods when the reactoris shut down, consideration must be given to water level requirements due to the effect of decay heat. If the water level should drop below thetop of the active irradiated fuel during this period, the ability to removedecay heat is reduced.
SL 2.1.1.3 ensures that the reactor vessel water level is greater than the top of the active irradiated fuel in order to prevent elevated clad temperatures and resultant clad perforations.
This reduction in cooling capability could lead toelevated cladding temperatures and clad perforation in the event that thewater level becomes < 2/3 of the core height. The reactor vessel waterlevel SL has been established at the top of the active irradiated fuel toMonticello B 2.1.1-3Revision No. 34 Reactor Core SLsB 2.1.1BASESAPPLICABLE SAFETY ANALYSES (continued) provide a point that can be monitored and to also provide adequatemargin for effective action.SAFETY LIMITS The reactor core SLs are established to protect the integrity of the fuelclad barrier to prevent the release of radioactive materials to the environs.
APPLICABILITY SLs 2.1.1.1, 2.1.1.2, and 2.1.41.3 are applicable in all MODES.SAFETY LIMIT Exceeding an SL may cause fuel damage and create a potential for VIOLATIONS radioactive releases in excess of 10 CFR 50.67, "Accident source term," limits (Ref. 4). Therefore, it is required to insert all insertable control rods and restore compliance with the SLs within 2 hours. The 2 hour Completion Time ensures that the operators take prompt remedial action and also ensures that the probability of an accident occurring during this period is minimal.REFERENCES  
SL 2.1.1.1 and SL 2.1.1.2 ensure that the core operates within the fueldesign criteria.
: 1. USAR, Section 1.2.2.2. NEDE-2401 1-P-A, "General Electric Standard Application for Reactor Fuel" (revision specified in Specification 5.6.3).3. NEDE-31152P, "General Electric Fuel Bundle Designs," Revision 8, April 2001.4. 10 CFR 50.67.5. GE Part 21 Notification SC05-03, "Potential to Exceed Low Pressure Technical Specification Safety Limit," dated March 29, 2005.6. NRC Letter to A. Lingenfelter (GNF), 'Final Safety Evaluation for Global Nuclear Fuel (GNF) Topical Report (TR) NEDC-32851P, Revision 2, "GEXL14 Correlation for GE14 Fuel," (TAC No. MD5486)'dated August 3, 2007.7. Amendment No. 185, "Issuance of Amendment to Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits," dated November 25, 2014. (ADAMS Accession No. ML14281A318)
SL 2.1.1.3 ensures that the reactor vessel water level isgreater than the top of the active irradiated fuel in order to preventelevated clad temperatures and resultant clad perforations.
Monticello B 2.1.1-4 -Last Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 B 3.3 INSTRUMENTATION B 3.3.6.1 Primary Containment Isolation Instrumentation BASES BACKGROUND The primary containment isolation instrumentation automatically initiates closure of appropriate primary containment isolation valves (PCIVs). The function of the PCIVs, in combination with other accident mitigation systems, is to limit fission product release during and following postulated Design Basis Accidents (DBAs). Primary containment isolation within the time limits specified for those isolation valves designed to close automatically ensures that the release of radioactive material to the environment will be consistent with the assumptions used in the analyses for a DBA.The isolation instrumentation includes the sensors, relays, and switches that are necessary to cause initiation of primary containment and reactor coolant pressure boundary (RCPB) isolation.
APPLICABILITY SLs 2.1.1.1, 2.1.1.2, and 2.1.41.3 are applicable in all MODES.SAFETY LIMIT Exceeding an SL may cause fuel damage and create a potential forVIOLATIONS radioactive releases in excess of 10 CFR 50.67, "Accident source term,"limits (Ref. 4). Therefore, it is required to insert all insertable control rodsand restore compliance with the SLs within 2 hours. The 2 hourCompletion Time ensures that the operators take prompt remedial actionand also ensures that the probability of an accident occurring during thisperiod is minimal.REFERENCES  
Most channels include electronic equipment (e.g., trip units) that compares measured input signals with pre-established setpoints.
: 1. USAR, Section 1.2.2.2. NEDE-2401 1-P-A, "General Electric Standard Application for ReactorFuel" (revision specified in Specification 5.6.3).3. NEDE-31152P, "General Electric Fuel Bundle Designs,"
When the setpoint is exceeded, the channel output relay actuates, which then outputs a primary containment isolation signal to the isolation logic. Functional diversity is provided by monitoring a wide range of independent parameters.
Revision 8,April 2001.4. 10 CFR 50.67.5. GE Part 21 Notification SC05-03, "Potential to Exceed Low PressureTechnical Specification Safety Limit," dated March 29, 2005.6. NRC Letter to A. Lingenfelter (GNF), 'Final Safety Evaluation forGlobal Nuclear Fuel (GNF) Topical Report (TR) NEDC-32851P, Revision 2, "GEXL14 Correlation for GE14 Fuel," (TAC No. MD5486)'dated August 3, 2007.7. Amendment No. 185, "Issuance of Amendment to Reduce theReactor Steam Dome Pressure Specified in the Reactor Core SafetyLimits,"
The input parameters to the isolation logics are (a) reactor vessel water level, (b) area ambient temperatures, (c) main steam line (MSL) flow measurement, (d) Standby Liquid Control (SLC) System initiation, (e) main steam line pressure, (f) high pressure coolant injection (HPCI)and reactor core isolation cooling (RCIC) steam line flow, (g) drywell pressure, (h) HPCI and RCIC steam line pressure, (i) reactor water cleanup (RWCU) flow, and (j) reactor steam dome pressure.
dated November 25, 2014. (ADAMS Accession No. ML14281A318)
Redundant sensor input signals from each parameter are provided for initiation of isolation.
Monticello B 2.1.1-4 -LastRevision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1B 3.3 INSTRUMENTATION B 3.3.6.1 Primary Containment Isolation Instrumentation BASESBACKGROUND The primary containment isolation instrumentation automatically initiates closure of appropriate primary containment isolation valves (PCIVs).
Thefunction of the PCIVs, in combination with other accident mitigation
: systems, is to limit fission product release during and following postulated Design Basis Accidents (DBAs). Primary containment isolation within thetime limits specified for those isolation valves designed to closeautomatically ensures that the release of radioactive material to theenvironment will be consistent with the assumptions used in the analysesfor a DBA.The isolation instrumentation includes the sensors, relays, and switchesthat are necessary to cause initiation of primary containment and reactorcoolant pressure boundary (RCPB) isolation.
Most channels includeelectronic equipment (e.g., trip units) that compares measured inputsignals with pre-established setpoints.
When the setpoint is exceeded, the channel output relay actuates, which then outputs a primarycontainment isolation signal to the isolation logic. Functional diversity isprovided by monitoring a wide range of independent parameters.
Theinput parameters to the isolation logics are (a) reactor vessel water level,(b) area ambient temperatures, (c) main steam line (MSL) flowmeasurement, (d) Standby Liquid Control (SLC) System initiation, (e) main steam line pressure, (f) high pressure coolant injection (HPCI)and reactor core isolation cooling (RCIC) steam line flow, (g) drywellpressure, (h) HPCI and RCIC steam line pressure, (i) reactor watercleanup (RWCU) flow, and (j) reactor steam dome pressure.
Redundant sensor input signals from each parameter are provided for initiation ofisolation.
The only exception is SLC System initiation.
The only exception is SLC System initiation.
Primary containment isolation instrumentation has inputs to the trip logicof the isolation functions listed below.1. Main Steam Line Isolation Reactor Vessel Water Level -Low Low and Main Steam Line Pressure  
Primary containment isolation instrumentation has inputs to the trip logic of the isolation functions listed below.1. Main Steam Line Isolation Reactor Vessel Water Level -Low Low and Main Steam Line Pressure -Low Functions receive inputs from four channels.
-Low Functions receive inputs from four channels.
One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of all main steam isolation valves (MSIVs), MSL drain valves, and reactor sample isolation valves. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system.The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of all main steam isolation valves (MSIVs), MSL drain valves, and recirculation sample isolation valves.Monticello B 3.3.6.1 -1 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued)
One channelassociated with each Function inputs to one of four trip strings.
The Main Steam Line Flow -High Function uses 16 flow channels, four for each steam line. One channel from each steam line inputs to one of the four trip strings. Two trip strings make up each trip system and both trip systems must trip to cause an isolation of the MSIVs, MSL drain valves, and reactor sample isolation valves. Each trip string has four inputs (one per MSL), any one of which will trip the trip string. The trip strings are arranged in a one-out-of-two taken twice logic. This is effectively a one-out-of-eight taken twice logic arrangement to initiate isolation.
Two tripstrings make up a trip system and both trip systems must trip to cause anisolation of all main steam isolation valves (MSIVs),
MSL drain valves,and reactor sample isolation valves. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system.The trip strings are arranged in a one-out-of-two taken twice logic toinitiate isolation of all main steam isolation valves (MSIVs),
MSL drainvalves, and recirculation sample isolation valves.Monticello B 3.3.6.1 -1Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESBACKGROUND (continued)
The Main Steam Line Flow -High Function uses 16 flow channels, fourfor each steam line. One channel from each steam line inputs to one ofthe four trip strings.
Two trip strings make up each trip system and bothtrip systems must trip to cause an isolation of the MSIVs, MSL drainvalves, and reactor sample isolation valves. Each trip string has fourinputs (one per MSL), any one of which will trip the trip string. The tripstrings are arranged in a one-out-of-two taken twice logic. This iseffectively a one-out-of-eight taken twice logic arrangement to initiateisolation.
The Main Steam Line Tunnel Temperature  
The Main Steam Line Tunnel Temperature  
-High Function receives inputfrom 16 channels (four from each of the four tunnel areas). The logic isarranged similar to the Main Steam Line Flow -High Function.
-High Function receives input from 16 channels (four from each of the four tunnel areas). The logic is arranged similar to the Main Steam Line Flow -High Function.
Onechannel from each steam tunnel area inputs to one of four trip strings.Two trip strings make up a trip system, and both trip systems must trip tocause isolation.
One channel from each steam tunnel area inputs to one of four trip strings.Two trip strings make up a trip system, and both trip systems must trip to cause isolation.
MSL Isolation Functions isolate the Group 1 valves.2. Primary Containment Isolation The Reactor Vessel Water Level -Low and Drywell Pressure  
MSL Isolation Functions isolate the Group 1 valves.2. Primary Containment Isolation The Reactor Vessel Water Level -Low and Drywell Pressure -High Functions receive inputs from four channels.
-HighFunctions receive inputs from four channels.
One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the Group 2 primary containment isolation valves (i.e., drywell and sump).Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation.
One channel associated with each Function inputs to one of four trip strings.
Primary Containment Isolation Drywell Pressure -High and Reactor Vessel Water Level -Low Functions isolate the Group 2 drywell and sump isolation valves.3, 4. High Pressure Coolant Iniection System Isolation and Reactor Core Isolation Cooling System Isolation The HPCI and RCIC Steam Line Flow -High Functions receive input from two channels for each system. Each channel output for each system is connected to a time delay relay that provides an output signal to two trip systems. The output signal is arranged so that any channel that trips will provide a trip signal to the trip system (one-out-of-two logic in each trip system). Each trip system associated with HPCI or RCIC will provide a closure signal to the associated system isolation valves. The HPCI Monticello B 3.3.6.1-2 Revision No. 34 Monticello B 3.3.6.1-2 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued)
Two trip strings makeup a trip system and both trip systems must trip to cause an isolation ofthe Group 2 primary containment isolation valves (i.e., drywell and sump).Any channel will trip the associated trip string. Only one trip string musttrip to trip the associated trip system. The trip strings are arranged in aone-out-of-two taken twice logic to initiate isolation.
Steam Supply Line Pressure -Low Function receives input from four channels.
Primary Containment Isolation Drywell Pressure  
The outputs are arranged in a one-out-of-two-twice logic in one trip system. The trip system isolates all HPCI isolation valves. The RCIC Steam Supply Line Pressure -Low Function receives input from four channels.
-High and ReactorVessel Water Level -Low Functions isolate the Group 2 drywell andsump isolation valves.3, 4. High Pressure Coolant Iniection System Isolation and Reactor CoreIsolation Cooling System Isolation The HPCI and RCIC Steam Line Flow -High Functions receive input fromtwo channels for each system. Each channel output for each system isconnected to a time delay relay that provides an output signal to two tripsystems.
The outputs are arranged in a one-out-of-two twice logic. The output of the logic is directed to two trip systems. Each trip system is able, by itself, to isolate all RCIC isolation valves. The HPCI and RCIC Steam Line Area Temperature  
The output signal is arranged so that any channel that trips willprovide a trip signal to the trip system (one-out-of-two logic in each tripsystem).
-High Functions receive input from 16 channels for each system. The outputs of the 16 channels are grouped in four sets of four detectors.
Each trip system associated with HPCI or RCIC will provide aclosure signal to the associated system isolation valves. The HPCIMonticello B 3.3.6.1-2 Revision No. 34Monticello B 3.3.6.1-2 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESBACKGROUND (continued)
Each set is arranged in one-out-two-twice logic. The outputs of each set provide trip signals to each of two separate isolation trip systems. Each trip system is able, by itself, to isolate all HPCI and RCIC isolation valves, as applicable.
Steam Supply Line Pressure  
HPCI Functions isolate the Group 4 valves and RCIC Functions isolate the Group 5 valves.5. Reactor Water Cleanup System Isolation The RWCU Room Temperature  
-Low Function receives input from fourchannels.
-High, Reactor Vessel Water Level -Low Low, Drywell Pressure -High, and RWCU Flow -High Functions receive inputs from four channels.
The outputs are arranged in a one-out-of-two-twice logic in onetrip system. The trip system isolates all HPCI isolation valves. The RCICSteam Supply Line Pressure  
One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the RWCU valves.Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of all RWCU isolation valves. The SLC System Initiation Function receives input from the SLC initiation switch. The switch provides trip signal inputs to both trip systems in any position other than "OFF." For the purpose of this Specification, the SLC initiation switch is considered to provide one channel input into each trip system. Each of the two trip systems is connected to one of the two valves on each RWCU penetration.
-Low Function receives input from fourchannels.
RWCU Functions isolate the Group 3 valves.6. Shutdown Coolinq System Isolation The Reactor Vessel Water Level -Low Function receives input from four reactor vessel water level channels.
The outputs are arranged in a one-out-of-two twice logic. Theoutput of the logic is directed to two trip systems.
One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the RHR Monticello B 3.3.6.1-3 Revision No. 34 Monticello B 3.3.6.1-3 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued) shutdown cooling supply isolation valves. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of the RHR shutdown cooling supply isolation valves. The Reactor Steam Dome Pressure -High Function receives input from two channels, both of which provide input to two trip systems.Any trip channel will trip both trip systems to initiate isolation of the RHR shutdown cooling supply isolation valves.Shutdown Cooling System Isolation Functions isolate the Group 2 RHR shutdown cooling supply isolation valves.7. Traversing Incore Probe (TIP) System Isolation The Reactor Vessel Water Level -Low and Drywell Pressure -High Functions receive inputs from four channels.
Each trip system isable, by itself, to isolate all RCIC isolation valves. The HPCI and RCICSteam Line Area Temperature  
One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to initiate a TIP drive isolation signal. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate a TIP drive isolation signal.When either Function actuates, the TIP drive mechanisms will withdraw the TIPs, if inserted, and close the inboard TIP System isolation ball valves when the TIPs are fully withdrawn.
-High Functions receive input from16 channels for each system. The outputs of the 16 channels aregrouped in four sets of four detectors.
The outboard TIP System isolation valves are manual shear valves.TIP System Isolation Functions isolate the Group 2 valves (TIP inboard isolation ball valves).APPLICABLE The isolation signals generated by the primary containment isolation SAFETY instrumentation are implicitly assumed in the safety analyses of ANALYSES, LCO, References 1 and 2 to initiate closure of valves to limit offsite doses.and APPLICABILITY Refer to LCO 3.6.1.3, "Primary Containment Isolation Valves (PCIVs)," Applicable Safety Analyses Bases for more detail of the safety analyses.Primary containment isolation instrumentation satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii).
Each set is arranged in one-out-two-twice logic. The outputs of each set provide trip signals to each oftwo separate isolation trip systems.
Certain instrumentation Functions are retained for other reasons and are described below in the individual Functions discussion.
Each trip system is able, by itself, toisolate all HPCI and RCIC isolation valves, as applicable.
Monticello B 3.3.6.1-4 Revision No. 34 Monticello B 3.3.6.1-4 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
HPCI Functions isolate the Group 4 valves and RCIC Functions isolatethe Group 5 valves.5. Reactor Water Cleanup System Isolation The RWCU Room Temperature  
The OPERABILITY of the primary containment instrumentation is dependent on the OPERABILITY of the individual instrumentation channel Functions specified in Table 3.3.6.1-1.
-High, Reactor Vessel Water Level -LowLow, Drywell Pressure  
Each Function must have a required number of OPERABLE channels, with their setpoints within the specified Allowable Values, where appropriate.
-High, and RWCU Flow -High Functions receiveinputs from four channels.
The actual setpoint is calibrated consistent with applicable setpoint methodology assumptions.
One channel associated with each Functioninputs to one of four trip strings.
Allowable Values are specified for each Primary Containment Isolation Function specified in the Table. Nominal trip setpoints are specified in the setpoint calculations.
Two trip strings make up a trip systemand both trip systems must trip to cause an isolation of the RWCU valves.Any channel will trip the associated trip string. Only one trip string musttrip to trip the associated trip system. The trip strings are arranged in aone-out-of-two taken twice logic to initiate isolation of all RWCU isolation valves. The SLC System Initiation Function receives input from the SLCinitiation switch. The switch provides trip signal inputs to both tripsystems in any position other than "OFF." For the purpose of thisSpecification, the SLC initiation switch is considered to provide onechannel input into each trip system. Each of the two trip systems isconnected to one of the two valves on each RWCU penetration.
The nominal setpoints are selected to ensure that the setpoints do not exceed the Allowable Value between CHANNEL CALIBRATIONS.
RWCU Functions isolate the Group 3 valves.6. Shutdown Coolinq System Isolation The Reactor Vessel Water Level -Low Function receives input from fourreactor vessel water level channels.
Operation with a trip setpoint less conservative than the nominal trip setpoint, but within its Allowable Value, is acceptable.
One channel associated with eachFunction inputs to one of four trip strings.
A channel is inoperable if its actual trip setpoint is not within its required Allowable Value. Trip setpoints are those predetermined values of output at which an action should take place. The setpoints are compared to the actual process parameter (e.g., reactor vessel water level), and when the measured output value of the process parameter exceeds the setpoint, the associated device (e.g., trip unit) changes state. The analytic limits are derived from the limiting values of the process parameters obtained from the safety analysis.
Two trip strings make up a tripsystem and both trip systems must trip to cause an isolation of the RHRMonticello B 3.3.6.1-3 Revision No. 34Monticello B 3.3.6.1-3 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESBACKGROUND (continued) shutdown cooling supply isolation valves. Any channel will trip theassociated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twicelogic to initiate isolation of the RHR shutdown cooling supply isolation valves. The Reactor Steam Dome Pressure  
The Allowable Values and nominal trip setpoints (NTSP) are derived, using the General Electric setpoint methodology guidance, as specified in the Monticello setpoint methodology.
-High Function receivesinput from two channels, both of which provide input to two trip systems.Any trip channel will trip both trip systems to initiate isolation of the RHRshutdown cooling supply isolation valves.Shutdown Cooling System Isolation Functions isolate the Group 2 RHRshutdown cooling supply isolation valves.7. Traversing Incore Probe (TIP) System Isolation The Reactor Vessel Water Level -Low and Drywell Pressure  
The Allowable Values are derived from the analytic limits. The difference between the analytic limit and the Allowable Value allows for channel instrument accuracy, calibration accuracy, process measurement accuracy, and primary element accuracy.
-HighFunctions receive inputs from four channels.
The margin between the Allowable Value and the NTSP allows for instrument drift that might occur during the established surveillance period. Two separate verifications are performed for the calculated NTSP. The first, a Spurious Trip Avoidance Test, evaluates the impact of the NTSP on plant availability.
One channel associated with each Function inputs to one of four trip strings.
The second verification, an LER Avoidance Test, calculates the probability of avoiding a Licensee Event Report (or exceeding the Allowable Value) due to instrument drift. These two verifications are statistical evaluations to provide additional assurance of the acceptability of the NTSP and may require changes to the NTSP. Use of these methods and verifications provides the assurance that if the setpoint is found conservative to the Allowable Value during surveillance testing, the instrumentation would have provided the required trip function by the time the process reached the analytic limit for the applicable events.Certain Emergency Core Cooling Systems (ECCS) valves (e.g., RHR test line suppression pool cooling isolation) also serve the dual function of automatic PCIVs. The signals that isolate these valves are also associated with the automatic initiation of the ECCS. The instrumentation requirements and ACTIONS associated with these signals are addressed Monticello B 3.3.6.1-5 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) in LCO 3.3.5.1, "Emergency Core Cooling Systems (ECCS)Instrumentation," and are not included in this LCO.In general, the individual Functions are required to be OPERABLE in MODES 1, 2, and 3 consistent with the Applicability for LCO 3.6.1.1,"Primary Containment." Functions that have different Applicabilities are discussed below in the individual Functions discussion.
Two trip strings makeup a trip system and both trip systems must trip to initiate a TIP driveisolation signal. Any channel will trip the associated trip string. Only onetrip string must trip to trip the associated trip system. The trip strings arearranged in a one-out-of-two taken twice logic to initiate a TIP driveisolation signal.When either Function  
The specific Applicable Safety Analyses, LCO, and Applicability discussions are listed below on a Function by Function basis.Main Steam Line Isolation l.a. Reactor Vessel Water Level -Low Low Low reactor pressure vessel (RPV) water level indicates that the capability to cool the fuel may be threatened.
: actuates, the TIP drive mechanisms will withdrawthe TIPs, if inserted, and close the inboard TIP System isolation ballvalves when the TIPs are fully withdrawn.
Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of the MSIVs and other interfaces with the reactor vessel occurs to prevent offsite dose limits from being exceeded.
The outboard TIP Systemisolation valves are manual shear valves.TIP System Isolation Functions isolate the Group 2 valves (TIP inboardisolation ball valves).APPLICABLE The isolation signals generated by the primary containment isolation SAFETY instrumentation are implicitly assumed in the safety analyses ofANALYSES, LCO, References 1 and 2 to initiate closure of valves to limit offsite doses.and APPLICABILITY Refer to LCO 3.6.1.3, "Primary Containment Isolation Valves (PCIVs),"
The Reactor Vessel Water Level-Low Low Function is one of the many Functions assumed to be OPERABLE and capable of providing isolation signals. The Reactor Vessel Water Level -Low Low Function associated with isolation is assumed in the analysis of the recirculation line break (Ref. 1). The isolation of the MSLs on Low Low supports actions to ensure that offsite dose limits are not exceeded for a DBA.Reactor vessel water level signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Level -Low Low Allowable Value is chosen to be the same as the ECCS Reactor Vessel Water Level -Low Low Allowable Value (LCO 3.3.5.1) to ensure that the MSLs isolate on a potential loss of coolant accident (LOCA) to prevent offsite doses from exceeding 10 CFR 50.67 limits.This Function isolates the Group 1 valves.Monticello B 3~3~6.1-6 Revision No. 34 Monticello S3.3.6.1-6 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 1.b. Main Steam Line Pressure -Low Low MSL pressure indicates that there may be a problem with the turbine pressure regulation, which could result in a low reactor vessel water level condition and the RPV cooling down more than 100&deg;F/hr if the pressure loss is allowed to continue.
Applicable Safety Analyses Bases for more detail of the safety analyses.
The Main Steam Line Pressure -Low Function is directly assumed in the analysis of the pressure regulator failure (Ref. 3). For this event, the closure of the MSIVs ensures that the RPV temperature change limit (100&deg;F/hr) is not reached. In addition, this Function supports actions to ensure that Safety Limit 2.1.1.1 is not exceeded. (This Function closes the MSIVs prior to pressure decreasing below 686 psig, which results in a scram due to MSIV closure, thus reducing reactor power to < 25% RTP.)The MSL low pressure signals are initiated from. four pressure switches that are connected to the MSL header close to the turbine stop valves.The pressure switches are arranged such that, even though physically separated from each other, each pressure switch is able to detect low MSL pressure.
Primary containment isolation instrumentation satisfies Criterion 3 of10 CFR 50.36(c)(2)(ii).
Four channels of Main Steam Line Pressure -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be high enough to prevent excessive RPV depressurization.
Certain instrumentation Functions are retained forother reasons and are described below in the individual Functions discussion.
The Main Steam Line Pressure -Low Function is only required to be OPERABLE in MODE 1 since this is when the assumed transient can occur (Ref. 3).This Function isolates the Group 1 valves.1.c. Main Steam Line Flow -Hiqh Main Steam Line Flow -High is provided to detect a break of the MSL and to initiate closure of the MSIVs. If the steam were allowed to continue flowing out of the break, the reactor would depressurize and the core could uncover. If the RPV water level decreases too far, fuel damage could occur. Therefore, the isolation is initiated on high flow to prevent or minimize core damage. The Main Steam Line Flow -High Function is one of the Functions assumed in the analysis of the main steam line break (MSLB) (Ref. 2). The isolation action, along with the scram function of the Reactor Protection System (RPS), ensures that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46 and offsite doses do not exceed the 10 CFR 50.67 limits.Monticello B 3.3.6.1-7 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Monticello B 3.3.6.1-4 Revision No. 34Monticello B 3.3.6.1-4 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
The MSL flow signals are initiated from 16 differential pressure indicating switches that are connected to the four MSLs (differential pressure indicating switches sense differential pressure across a flow restrictor).
The OPERABILITY of the primary containment instrumentation isdependent on the OPERABILITY of the individual instrumentation channel Functions specified in Table 3.3.6.1-1.
The differential pressure indicating switches are arranged such that, even though physically separated from each other, all four connected to one MSL would be able to detect the high flow. Four channels of Main Steam Line Flow -High Function for each MSL (two channels per trip system)are available and are required to be OPERABLE so that no single instrument failure will preclude detecting a break in any individual MSL.The Allowable Value is chosen to ensure that offsite dose limits are not exceeded due to the break.This Function isolates the Group 1 valves.1 .d. Main Steam Line Tunnel Temperature  
Each Function must havea required number of OPERABLE  
-High Main steam line tunnel temperature is provided to detect a leak in the RCPB in the steam tunnel and provides diversity to the high flow instrumentation.
: channels, with their setpoints within thespecified Allowable Values, where appropriate.
Temperature is sensed in four different areas of the steam tunnel above each main steam line. The isolation occurs when a very small leak has occurred in any of the four areas. If the small leak is allowed to continue without isolation, offsite dose limits may be reached.However, credit for these instruments is not taken in any transient or accident analysis in the USAR, since bounding analyses are performed for large breaks, such as MSLBs.Main steam line tunnel temperature signals are initiated from bimetallic temperature switches located in the four areas being monitored.
The actual setpoint iscalibrated consistent with applicable setpoint methodology assumptions.
Even though physically separated from each other, any temperature switch in any of the four areas is able to detect a leak. Therefore, sixteen channels of Main Steam Line Tunnel Temperature  
Allowable Values are specified for each Primary Containment Isolation Function specified in the Table. Nominal trip setpoints are specified in thesetpoint calculations.
-High Function are available but only eight channels (two channels in each of the four trip strings) are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Main Steam Line Tunnel Temperature  
The nominal setpoints are selected to ensure thatthe setpoints do not exceed the Allowable Value between CHANNELCALIBRATIONS.
-High Allowable Value is chosen to detect a leak equivalent to between 5 gpm and 10 gpm.This Function isolates the Group 1 valves.Monticello B 3.3.6.1-8 Revision No. 34 Monticello B 3.3.6.1-8 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Operation with a trip setpoint less conservative thanthe nominal trip setpoint, but within its Allowable Value, is acceptable.
Primary Containment Isolation 2.a. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.
Achannel is inoperable if its actual trip setpoint is not within its requiredAllowable Value. Trip setpoints are those predetermined values of outputat which an action should take place. The setpoints are compared to theactual process parameter (e.g., reactor vessel water level), and when themeasured output value of the process parameter exceeds the setpoint, the associated device (e.g., trip unit) changes state. The analytic limitsare derived from the limiting values of the process parameters obtainedfrom the safety analysis.
The valves whose penetrations communicate with the primary containment are isolated to limit the release of fission products.The isolation of the primary containment on low RPV water level supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.
The Allowable Values and nominal trip setpoints (NTSP) are derived, using the General Electric setpoint methodology
The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakage paths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from level transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Low Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1, "Reactor Protection System (RPS) Instrumentation"), since isolation of these valves is not critical to orderly plant shutdown.This Function isolates the Group 2 drywell and sump isolation valves.2.b. Drywell Pressure -Hiqh High drywell pressure can indicate a break in the RCPB inside the primary containment.
: guidance, as specified in the Monticello setpoint methodology.
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.
TheAllowable Values are derived from the analytic limits. The difference between the analytic limit and the Allowable Value allows for channelinstrument
The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches that sense the pressure in the drywell. Four channels of Drywell Pressure -High are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.
: accuracy, calibration  
Monticello B 3.3.6.1-9 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
: accuracy, process measurement
This Function isolates the Group 2 drywell and sump isolation valves.High Pressure Coolant Injection and Reactor Core Isolation Cooling Systems Isolation 3.a, 4.a. HPCI and RCIC Steam Line Flow -Hiqh Steam Line Flow -High Functions are provided to detect a break of the RCIC or HPCI steam lines and initiate closure of the steam line isolation valves of the appropriate system. If the steam is allowed to continue flowing out of the break, the reactor will depressurize and the core can uncover. Therefore, the isolations are initiated on high flow to prevent or minimize core damage. The isolation action, along with the scram function of the RPS, ensures that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46. Specific credit for these Functions is not assumed in any USAR accident analyses since the bounding analysis is performed for large breaks such as recirculation and MSL breaks. However, these instruments prevent the RCIC or HPCI steam line breaks from becoming bounding.
: accuracy, and primary element accuracy.
The HPCI and RCIC Steam Line Flow- High channels are each provided with a time delay relay to prevent false isolations on HPCI or RCIC Steam Line Flow -High, as applicable, during system startup transients and therefore improves system reliability.
The margin between theAllowable Value and the NTSP allows for instrument drift that might occurduring the established surveillance period. Two separate verifications areperformed for the calculated NTSP. The first, a Spurious Trip Avoidance Test, evaluates the impact of the NTSP on plant availability.
The HPCI and RCIC Steam Line Flow -High signals are initiated from differential pressure switches (two for HPCI and two for RCIC) that are connected to the system steam lines. Two channels of both HPCI and RCIC Steam Line Flow -High Functions are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.
The secondverification, an LER Avoidance Test, calculates the probability of avoidinga Licensee Event Report (or exceeding the Allowable Value) due toinstrument drift. These two verifications are statistical evaluations toprovide additional assurance of the acceptability of the NTSP and mayrequire changes to the NTSP. Use of these methods and verifications provides the assurance that if the setpoint is found conservative to theAllowable Value during surveillance  
In addition, each flow channel is connected to a time delay relay to delay the tripping of the associated HPCI or RCIC isolation trip system for a short time.The Allowable Values are chosen to be low enough to ensure that the trip occurs to prevent fuel damage and maintains the MSLB event as the bounding event. The Allowable Values associated with the time delay are chosen to be long enough to prevent false isolations due to system starts but not so long as to impact offsite dose calculations.
: testing, the instrumentation wouldhave provided the required trip function by the time the process reachedthe analytic limit for the applicable events.Certain Emergency Core Cooling Systems (ECCS) valves (e.g., RHR testline suppression pool cooling isolation) also serve the dual function ofautomatic PCIVs. The signals that isolate these valves are alsoassociated with the automatic initiation of the ECCS. The instrumentation requirements and ACTIONS associated with these signals are addressed Monticello B 3.3.6.1-5 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) in LCO 3.3.5.1, "Emergency Core Cooling Systems (ECCS)Instrumentation,"
and are not included in this LCO.In general, the individual Functions are required to be OPERABLE inMODES 1, 2, and 3 consistent with the Applicability for LCO 3.6.1.1,"Primary Containment."
Functions that have different Applicabilities arediscussed below in the individual Functions discussion.
The specific Applicable Safety Analyses, LCO, and Applicability discussions are listed below on a Function by Function basis.Main Steam Line Isolation l.a. Reactor Vessel Water Level -Low LowLow reactor pressure vessel (RPV) water level indicates that thecapability to cool the fuel may be threatened.
Should RPV water leveldecrease too far, fuel damage could result. Therefore, isolation of theMSIVs and other interfaces with the reactor vessel occurs to preventoffsite dose limits from being exceeded.
The Reactor Vessel Water Level-Low Low Function is one of the many Functions assumed to beOPERABLE and capable of providing isolation signals.
The ReactorVessel Water Level -Low Low Function associated with isolation isassumed in the analysis of the recirculation line break (Ref. 1). Theisolation of the MSLs on Low Low supports actions to ensure that offsitedose limits are not exceeded for a DBA.Reactor vessel water level signals are initiated from four differential pressure transmitters that sense the difference between the pressure dueto a constant column of water (reference leg) and the pressure due to theactual water level (variable leg) in the vessel. Four channels of ReactorVessel Water Level -Low Low Function are available and are required tobe OPERABLE to ensure that no single instrument failure can precludethe isolation function.
The Reactor Vessel Water Level -Low Low Allowable Value is chosen tobe the same as the ECCS Reactor Vessel Water Level -Low LowAllowable Value (LCO 3.3.5.1) to ensure that the MSLs isolate on apotential loss of coolant accident (LOCA) to prevent offsite doses fromexceeding 10 CFR 50.67 limits.This Function isolates the Group 1 valves.Monticello B 3~3~6.1-6 Revision No. 34Monticello S3.3.6.1-6 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 1.b. Main Steam Line Pressure  
-LowLow MSL pressure indicates that there may be a problem with the turbinepressure regulation, which could result in a low reactor vessel water levelcondition and the RPV cooling down more than 100&deg;F/hr if the pressureloss is allowed to continue.
The Main Steam Line Pressure  
-LowFunction is directly assumed in the analysis of the pressure regulator failure (Ref. 3). For this event, the closure of the MSIVs ensures that theRPV temperature change limit (100&deg;F/hr) is not reached.
In addition, thisFunction supports actions to ensure that Safety Limit 2.1.1.1 is notexceeded.  
(This Function closes the MSIVs prior to pressure decreasing below 686 psig, which results in a scram due to MSIV closure, thusreducing reactor power to < 25% RTP.)The MSL low pressure signals are initiated from. four pressure switchesthat are connected to the MSL header close to the turbine stop valves.The pressure switches are arranged such that, even though physically separated from each other, each pressure switch is able to detect lowMSL pressure.
Four channels of Main Steam Line Pressure  
-LowFunction are available and are required to be OPERABLE to ensure thatno single instrument failure can preclude the isolation function.
The Allowable Value was selected to be high enough to preventexcessive RPV depressurization.
The Main Steam Line Pressure  
-Low Function is only required to beOPERABLE in MODE 1 since this is when the assumed transient canoccur (Ref. 3).This Function isolates the Group 1 valves.1.c. Main Steam Line Flow -HiqhMain Steam Line Flow -High is provided to detect a break of the MSLand to initiate closure of the MSIVs. If the steam were allowed tocontinue flowing out of the break, the reactor would depressurize and thecore could uncover.
If the RPV water level decreases too far, fueldamage could occur. Therefore, the isolation is initiated on high flow toprevent or minimize core damage. The Main Steam Line Flow -HighFunction is one of the Functions assumed in the analysis of the mainsteam line break (MSLB) (Ref. 2). The isolation action, along with thescram function of the Reactor Protection System (RPS), ensures that thefuel peak cladding temperature remains below the limits of 10 CFR 50.46and offsite doses do not exceed the 10 CFR 50.67 limits.Monticello B 3.3.6.1-7 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
The MSL flow signals are initiated from 16 differential pressure indicating switches that are connected to the four MSLs (differential pressureindicating switches sense differential pressure across a flow restrictor).
The differential pressure indicating switches are arranged such that, eventhough physically separated from each other, all four connected to oneMSL would be able to detect the high flow. Four channels of Main SteamLine Flow -High Function for each MSL (two channels per trip system)are available and are required to be OPERABLE so that no singleinstrument failure will preclude detecting a break in any individual MSL.The Allowable Value is chosen to ensure that offsite dose limits are notexceeded due to the break.This Function isolates the Group 1 valves.1 .d. Main Steam Line Tunnel Temperature  
-HighMain steam line tunnel temperature is provided to detect a leak in theRCPB in the steam tunnel and provides diversity to the high flowinstrumentation.
Temperature is sensed in four different areas of thesteam tunnel above each main steam line. The isolation occurs when avery small leak has occurred in any of the four areas. If the small leak isallowed to continue without isolation, offsite dose limits may be reached.However, credit for these instruments is not taken in any transient oraccident analysis in the USAR, since bounding analyses are performed for large breaks, such as MSLBs.Main steam line tunnel temperature signals are initiated from bimetallic temperature switches located in the four areas being monitored.
Eventhough physically separated from each other, any temperature switch inany of the four areas is able to detect a leak. Therefore, sixteen channelsof Main Steam Line Tunnel Temperature  
-High Function are available butonly eight channels (two channels in each of the four trip strings) arerequired to be OPERABLE to ensure that no single instrument failure canpreclude the isolation function.
The Main Steam Line Tunnel Temperature  
-High Allowable Value ischosen to detect a leak equivalent to between 5 gpm and 10 gpm.This Function isolates the Group 1 valves.Monticello B 3.3.6.1-8 Revision No. 34Monticello B 3.3.6.1-8 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Primary Containment Isolation 2.a. Reactor Vessel Water Level -LowLow RPV water level indicates that the capability to cool the fuel may bethreatened.
The valves whose penetrations communicate with theprimary containment are isolated to limit the release of fission products.
The isolation of the primary containment on low RPV water level supportsactions to ensure that offsite dose limits of 10 CFR 50.67 are notexceeded.
The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakagepaths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from leveltransmitters that sense the difference between the pressure due to aconstant column of water (reference leg) and the pressure due to theactual water level (variable leg) in the vessel. Four channels of ReactorVessel Water Level -Low Function are available and are required to beOPERABLE to ensure that no single instrument failure can preclude theisolation function.
The Reactor Vessel Water Low Level -Low Allowable Value was chosento be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1, "Reactor Protection System (RPS) Instrumentation"),
since isolation of these valves is not critical to orderly plant shutdown.
This Function isolates the Group 2 drywell and sump isolation valves.2.b. Drywell Pressure  
-HiqhHigh drywell pressure can indicate a break in the RCPB inside theprimary containment.
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure thatoffsite dose limits of 10 CFR 50.67 are not exceeded.
The DrywellPressure
-High Function, associated with isolation of the primarycontainment, is implicitly assumed in the USAR accident analysis asthese leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches thatsense the pressure in the drywell.
Four channels of Drywell Pressure  
-High are available and are required to be OPERABLE to ensure that nosingle instrument failure can preclude the isolation function.
The Allowable Value was selected to be the same as the ECCS DrywellPressure
-High Allowable Value (LCO 3.3.5.1),
since this may beindicative of a LOCA inside primary containment.
Monticello B 3.3.6.1-9 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
This Function isolates the Group 2 drywell and sump isolation valves.High Pressure Coolant Injection and Reactor Core Isolation CoolingSystems Isolation 3.a, 4.a. HPCI and RCIC Steam Line Flow -HiqhSteam Line Flow -High Functions are provided to detect a break of theRCIC or HPCI steam lines and initiate closure of the steam line isolation valves of the appropriate system. If the steam is allowed to continueflowing out of the break, the reactor will depressurize and the core canuncover.
Therefore, the isolations are initiated on high flow to prevent orminimize core damage. The isolation action, along with the scramfunction of the RPS, ensures that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46. Specific credit for theseFunctions is not assumed in any USAR accident analyses since thebounding analysis is performed for large breaks such as recirculation andMSL breaks. However, these instruments prevent the RCIC or HPCIsteam line breaks from becoming bounding.
The HPCI and RCIC SteamLine Flow- High channels are each provided with a time delay relay toprevent false isolations on HPCI or RCIC Steam Line Flow -High, asapplicable, during system startup transients and therefore improvessystem reliability.
The HPCI and RCIC Steam Line Flow -High signals are initiated fromdifferential pressure switches (two for HPCI and two for RCIC) that areconnected to the system steam lines. Two channels of both HPCI andRCIC Steam Line Flow -High Functions are available and are required tobe OPERABLE to ensure that no single instrument failure can precludethe isolation function.
In addition, each flow channel is connected to atime delay relay to delay the tripping of the associated HPCI or RCICisolation trip system for a short time.The Allowable Values are chosen to be low enough to ensure that the tripoccurs to prevent fuel damage and maintains the MSLB event as thebounding event. The Allowable Values associated with the time delay arechosen to be long enough to prevent false isolations due to system startsbut not so long as to impact offsite dose calculations.
These Functions isolate the Groups 4 and 5 valves, as appropriate.
These Functions isolate the Groups 4 and 5 valves, as appropriate.
3.b, 4.b. HPCI and RCIC Steam Supply Line Pressure  
3.b, 4.b. HPCI and RCIC Steam Supply Line Pressure -Low Low HPCI or RCIC steam supply line pressure indicates that the pressure of the steam in the HPCI or RCIC turbine, as applicable, may be too low to continue operation of the associated systems turbine. These isolations Monticello B 3.3.61-10 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) are for equipment protection and are not assumed in any transient or accident analysis in the USAR. However, they also provide a diverse signal to indicate a possible system break. These instruments are included in Technical Specifications (TS) because of the potential for risk due to possible failure of the instruments preventing HPCI and RCIC initiations.
-LowLow HPCI or RCIC steam supply line pressure indicates that the pressureof the steam in the HPCI or RCIC turbine, as applicable, may be too lowto continue operation of the associated systems turbine.
These isolations Monticello B 3.3.61-10 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) are for equipment protection and are not assumed in any transient oraccident analysis in the USAR. However, they also provide a diversesignal to indicate a possible system break. These instruments areincluded in Technical Specifications (TS) because of the potential for riskdue to possible failure of the instruments preventing HPCI and RCICinitiations.
Therefore, they meet Criterion 4 of 10 CFR 50.36(c)(2)(ii).
Therefore, they meet Criterion 4 of 10 CFR 50.36(c)(2)(ii).
The HPCI and RCIC Steam Supply Line Pressure  
The HPCI and RCIC Steam Supply Line Pressure -Low signals are initiated from pressure switches (four for HPCI and four for RCIC) that are connected to the system steam line. Four channels of both HPCI and RCIC Steam Supply Line Pressure -Low Functions are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Values are selected to be high enough to prevent damage to the systems turbine.These Functions isolate the Groups 4 and 5 valves, as appropriate.
-Low signals areinitiated from pressure switches (four for HPCI and four for RCIC) that areconnected to the system steam line. Four channels of both HPCI andRCIC Steam Supply Line Pressure  
-Low Functions are available and arerequired to be OPERABLE to ensure that no single instrument failure canpreclude the isolation function.
The Allowable Values are selected to be high enough to prevent damageto the systems turbine.These Functions isolate the Groups 4 and 5 valves, as appropriate.
3.c, 4.c. HPCI and RCIC Steam Line Area Temperature  
3.c, 4.c. HPCI and RCIC Steam Line Area Temperature  
-HighHPCI and RCIC steam line area temperatures are provided to detect aleak from the associated system steam piping. The isolation occurs whena very small leak has occurred and is diverse to the high flowinstrumentation.
-High HPCI and RCIC steam line area temperatures are provided to detect a leak from the associated system steam piping. The isolation occurs when a very small leak has occurred and is diverse to the high flow instrumentation.
If the small leak is allowed to continue without isolation, offsite dose limits may be reached.
If the small leak is allowed to continue without isolation, offsite dose limits may be reached. These Functions are not assumed in any USAR transient or accident analysis, since bounding analyses are performed for large breaks such as recirculation or MSL breaks.HPCI and RCIC Steam Line Area Temperature  
These Functions are not assumed inany USAR transient or accident  
-High signals are initiated from bimetallic temperature switches that are appropriately located to protect the system that is being monitored.
: analysis, since bounding analyses areperformed for large breaks such as recirculation or MSL breaks.HPCI and RCIC Steam Line Area Temperature  
Eight instruments monitor each area. Sixteen channels for each HPCI and RCIC Steam Line Area Temperature
-High signals are initiated from bimetallic temperature switches that are appropriately located toprotect the system that is being monitored.
-High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Values are set low enough to detect a break in the associated system piping to ensure the core will not be uncovered and the radiological consequences are bounded by the main steam line break analysis.These Functions isolate the Groups 4 and 5 valves, as appropriate.
Eight instruments monitoreach area. Sixteen channels for each HPCI and RCIC Steam Line AreaTemperature
Monticello B 3.3.6.1-11 Revision No. 34 Monticello B 3.3.6. 1-11 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
-High Function are available and are required to beOPERABLE to ensure that no single instrument failure can preclude theisolation function.
Reactor Water Cleanup System Isolation 5.a. RWCU Flow -High The high flow signal is provided to detect a break in the RWCU System.This will detect leaks in the RWCU System when room temperature would not provide detection (i.e., a cold leg break). Should the reactor coolant continue to flow out of the break, offsite dose limits may be exceeded.Therefore, isolation of the RWCU System is initiated when high flow is sensed to prevent exceeding offsite doses. A time delay is provided to prevent spurious trips during most RWCU operational transients.
The Allowable Values are set low enough to detect a break in theassociated system piping to ensure the core will not be uncovered andthe radiological consequences are bounded by the main steam line breakanalysis.
This Function is not assumed in any USAR transient or accident analysis, since bounding analyses are performed for large breaks such as MSLBs.The high flow signals are initiated from transmitters that monitor RWCU System flow. In addition, each flow channel is connected to a time delay relay to delay the tripping of the flow channel for a short time. Four channels of RWCU Flow -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The RWCU Flow -High Allowable Value ensures that a break of the RWCU piping is detected.
These Functions isolate the Groups 4 and 5 valves, as appropriate.
The Allowable Value associated with the time delay is chosen to be long enough to prevent false isolations due to system starts but not so long as to impact offsite dose calculations.
Monticello B 3.3.6.1-11 Revision No. 34Monticello B 3.3.6. 1-11Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Reactor Water Cleanup System Isolation 5.a. RWCU Flow -HighThe high flow signal is provided to detect a break in the RWCU System.This will detect leaks in the RWCU System when room temperature wouldnot provide detection (i.e., a cold leg break). Should the reactor coolantcontinue to flow out of the break, offsite dose limits may be exceeded.
Therefore, isolation of the RWCU System is initiated when high flow issensed to prevent exceeding offsite doses. A time delay is provided toprevent spurious trips during most RWCU operational transients.
ThisFunction is not assumed in any USAR transient or accident  
: analysis, since bounding analyses are performed for large breaks such as MSLBs.The high flow signals are initiated from transmitters that monitor RWCUSystem flow. In addition, each flow channel is connected to a time delayrelay to delay the tripping of the flow channel for a short time. Fourchannels of RWCU Flow -High Function are available and are required tobe OPERABLE to ensure that no single instrument failure can precludethe isolation function.
The RWCU Flow -High Allowable Value ensures that a break of theRWCU piping is detected.
The Allowable Value associated with the timedelay is chosen to be long enough to prevent false isolations due tosystem starts but not so long as to impact offsite dose calculations.
This Function isolates the Group 3 valves.5.b. RWCU Room Temperature  
This Function isolates the Group 3 valves.5.b. RWCU Room Temperature  
-HighRWCU room temperatures are provided to detect a leak from the RWCUSystem. The isolation occurs even when very small leaks have occurredand is diverse to the high differential flow instrumentation for the hotportions of the RWCU System. If the small leak continues withoutisolation, offsite dose limits may be reached.
-High RWCU room temperatures are provided to detect a leak from the RWCU System. The isolation occurs even when very small leaks have occurred and is diverse to the high differential flow instrumentation for the hot portions of the RWCU System. If the small leak continues without isolation, offsite dose limits may be reached. Credit for these instruments is not taken in any transient or accident analysis in the USAR, since bounding analyses are performed for large breaks such as recirculation or MSL breaks.RWCU room temperature signals are initiated from temperature elements that are located in the room that is being monitored.
Credit for these instruments is not taken in any transient or accident analysis in the USAR, sincebounding analyses are performed for large breaks such as recirculation orMSL breaks.RWCU room temperature signals are initiated from temperature elementsthat are located in the room that is being monitored.
Four resistance temperature detectors provide input to the RWCU Room Temperature  
Four resistance temperature detectors provide input to the RWCU Room Temperature  
-High Function.
-High Function.
Four channels are required to be OPERABLE to ensurethat no single instrument failure can preclude the isolation function.
Four channels are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.Monticello B 3.3.6.1-12 Revision No. 34 Monticello B 3.3.6.1-12 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
Monticello B 3.3.6.1-12 Revision No. 34Monticello B 3.3.6.1-12 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
The RWCU Room Temperature  
The RWCU Room Temperature  
-High Allowable Value is set low enoughto detect a leak equivalent to 210 gpm.This Function isolates the Group 3 valves.5.c. Drywell Pressure  
-High Allowable Value is set low enough to detect a leak equivalent to 210 gpm.This Function isolates the Group 3 valves.5.c. Drywell Pressure -High High drywell pressure can indicate a break in the RCPB inside the primary containment.
-HighHigh drywell pressure can indicate a break in the RCPB inside theprimary containment.
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure thatoffsite dose limits of 10 CFR 50.67 are not exceeded.
The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches that sense the pressure in the drywell. Four channels of Drywell Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.
The DrywellPressure
This Function isolates the Group 3 valves.5.d. SLC System Initiation The isolation of the RWCU System is required when the SLC System has been initiated to prevent dilution and removal of the boron solution by the RWCU System (Ref. 4). SLC System initiation signals are initiated from the SLC initiation switch.Two channels of the SLC System Initiation Function are available and are required to be OPERABLE only in MODES 1 and 2, since these are the only MODES where the reactor can be critical, and these MODES are consistent with the Applicability for the SLC System (LCO 3.1.7, "Standby Liquid Control (SLC) System").There is no Allowable Value associated with this Function since the channels are mechanically actuated based solely on the position of the SLC System initiation switch.This Function isolates the Group 3 valves.Monticello B 3.3.6.1-13 Revision No. 34 Monticello B 3.3.6.1-13 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 5.e. Reactor Vessel Water Level -Low Low Low RPV water level indicates that the capability to cool the fuel may be threatened.
-High Function, associated with isolation of the primarycontainment, is implicitly assumed in the USAR accident analysis asthese leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches thatsense the pressure in the drywell.
Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of some interfaces with the reactor vessel occurs to isolate the potential sources of a break. The isolation of the RWCU System on low low RPV water level supports actions to ensure that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46. The Reactor Vessel Water Level -Low Low Function associated with RWCU isolation is not directly assumed in the USAR safety analyses because the RWCU System line break is bounded by breaks of larger systems (recirculation and MSL breaks are more limiting).
Four channels of Drywell Pressure  
Reactor Vessel Water Level -Low Low signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Level -Low Low Allowable Value was chosen to be the same as the ECCS Reactor Vessel Water Level -Low Low Allowable Value (LCO 3.3.5.1), since the capability to cool the fuel may be threatened.
-High Function are available and are required to be OPERABLE to ensurethat no single instrument failure can preclude the isolation function.
This Function isolates the Group 3 valves.Shutdown Cooling System Isolation 6.a. Reactor Steam Dome Pressure -High The Reactor Steam Dome Pressure -High Function is provided to isolate the shutdown cooling portion of the Residual Heat Removal (RHR)System. This interlock is provided only for equipment protection to prevent an intersystem LOCA scenario, and credit for the interlock is not assumed in the accident or transient analysis in the USAR.The Reactor Steam Dome Pressure -High signals are initiated from two transmitters that are connected to different taps on the RPV. Two channels of Reactor Steam Dome Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.
The Allowable Value was selected to be the same as the ECCS DrywellPressure
The Function is only required to be OPERABLE in MODES 1, 2, and 3, since these are the only MODES in which the reactor can be pressurized; thus, equipment Monticello B 3.3.6.1-14 Revision No- 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) protection is needed. The Allowable Value was chosen to be low enough to protect the system equipment from overpressurization.
-High Allowable Value (LCO 3.3.5.1),
This Function isolates the Group 2 RHR shutdown cooling supply isolation valves.6.b. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.
since this may beindicative of a LOCA inside primary containment.
Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of some reactor vessel interfaces occurs to begin isolating the potential sources of a break. The Reactor Vessel Water Level -Low Function associated with RHR Shutdown Cooling System isolation is not directly assumed in safety analyses because a break of the RHR Shutdown Cooling System is bounded by breaks of the recirculation and MSL. The RHR Shutdown Cooling System isolation on low RPV water level supports actions to ensure that the RPV water level does not drop below the top of the active fuel during a vessel draindown event caused by a leak (e.g., pipe break or inadvertent valve opening) in the RHR Shutdown Cooling System.Reactor Vessel Water Level -Low signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels (two channels per trip system) of the Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.
This Function isolates the Group 3 valves.5.d. SLC System Initiation The isolation of the RWCU System is required when the SLC System hasbeen initiated to prevent dilution and removal of the boron solution by theRWCU System (Ref. 4). SLC System initiation signals are initiated fromthe SLC initiation switch.Two channels of the SLC System Initiation Function are available and arerequired to be OPERABLE only in MODES 1 and 2, since these are theonly MODES where the reactor can be critical, and these MODES areconsistent with the Applicability for the SLC System (LCO 3.1.7, "StandbyLiquid Control (SLC) System").
As noted (footnote (a) to Table 3.3.6.1-1), only one channel per trip system (with an isolation signal available to one shutdown cooling pump supply isolation valve) of the Reactor Vessel Water Level -Low Function is required to be OPERABLE in MODES 4 and 5, provided RHR Shutdown Cooling System integrity is maintained.
There is no Allowable Value associated with this Function since thechannels are mechanically actuated based solely on the position of theSLC System initiation switch.This Function isolates the Group 3 valves.Monticello B 3.3.6.1-13 Revision No. 34Monticello B 3.3.6.1-13 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 5.e. Reactor Vessel Water Level -Low LowLow RPV water level indicates that the capability to cool the fuel may bethreatened.
System integrity is maintained provided the piping is intact and no maintenance is being performed that has the potential for draining the reactor vessel through the system.The Reactor Vessel Water Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1), since the capability to cool the fuel may be threatened.
Should RPV water level decrease too far, fuel damage couldresult. Therefore, isolation of some interfaces with the reactor vesseloccurs to isolate the potential sources of a break. The isolation of theRWCU System on low low RPV water level supports actions to ensurethat the fuel peak cladding temperature remains below the limits of10 CFR 50.46. The Reactor Vessel Water Level -Low Low Functionassociated with RWCU isolation is not directly assumed in the USARsafety analyses because the RWCU System line break is bounded bybreaks of larger systems (recirculation and MSL breaks are morelimiting).
The Reactor Vessel Water Level -Low Function is only required to be OPERABLE in MODES 3, 4, and 5 to prevent this potential flow path from lowering the reactor vessel level to the top of the fuel. In MODES 1 and 2, another isolation (i.e., Reactor Steam Dome Pressure -High) and Monticello B 3.3.6.1-15 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) administrative controls ensure that this flow path remains isolated to prevent unexpected loss of inventory via this flow path.This Function isolates the Group 2 RHR shutdown cooling supply isolation valves.Traversing Incore Probe System Isolation 7.a. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.
Reactor Vessel Water Level -Low Low signals are initiated from fourdifferential pressure transmitters that sense the difference between thepressure due to a constant column of water (reference leg) and thepressure due to the actual water level (variable leg) in the vessel. Fourchannels of Reactor Vessel Water Level -Low Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.
The valves whose penetrations communicate with the primary containment are isolated to limit the release of fission products.The isolation of the primary containment on low RPV water level supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.
The Reactor Vessel Water Level -Low Low Allowable Value was chosento be the same as the ECCS Reactor Vessel Water Level -Low LowAllowable Value (LCO 3.3.5.1),
The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakage paths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Two channels of Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can initiate an inadvertent isolation actuation.
since the capability to cool the fuel maybe threatened.
The isolation function is ensured by the manual shear valve in each penetration.
This Function isolates the Group 3 valves.Shutdown Cooling System Isolation 6.a. Reactor Steam Dome Pressure  
The Reactor Vessel Water Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1), since isolation of these valves is not critical to orderly plant shutdown.This Function isolates the Group 2 TIP inboard isolation ball valves.7.b. Drywell Pressure -High High drywell pressure can indicate a break in the RCPB inside the primary containment.
-HighThe Reactor Steam Dome Pressure  
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.
-High Function is provided to isolatethe shutdown cooling portion of the Residual Heat Removal (RHR)System. This interlock is provided only for equipment protection toprevent an intersystem LOCA scenario, and credit for the interlock is notassumed in the accident or transient analysis in the USAR.The Reactor Steam Dome Pressure  
The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.Monticello B 3.3.6.1-16 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
-High signals are initiated from twotransmitters that are connected to different taps on the RPV. Twochannels of Reactor Steam Dome Pressure  
High drywell pressure signals are initiated from pressure transmitters that sense the pressure in the drywell. Two channels of Drywell Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can initiate an inadvertent actuation.
-High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.
The isolation function is ensured by the manual shear valve in each penetration.
The Function is only requiredto be OPERABLE in MODES 1, 2, and 3, since these are the onlyMODES in which the reactor can be pressurized; thus, equipment Monticello B 3.3.6.1-14 Revision No- 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) protection is needed. The Allowable Value was chosen to be low enoughto protect the system equipment from overpressurization.
The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.
This Function isolates the Group 2 RHR shutdown cooling supplyisolation valves.6.b. Reactor Vessel Water Level -LowLow RPV water level indicates that the capability to cool the fuel may bethreatened.
This Function isolates the Group 2 TIP inboard isolation ball valves.ACTIONS The ACTIONS are modified by two Notes. Note 1 allows penetration flow path(s) to be unisolated intermittently under administrative controls.These controls consist of stationing a dedicated operator at the controls of the valve, who is in continuous communication with the control room.In this way, the penetration can be rapidly isolated when a need for primary containment isolation is indicated.
Should RPV water level decrease too far, fuel damage couldresult. Therefore, isolation of some reactor vessel interfaces occurs tobegin isolating the potential sources of a break. The Reactor VesselWater Level -Low Function associated with RHR Shutdown CoolingSystem isolation is not directly assumed in safety analyses because abreak of the RHR Shutdown Cooling System is bounded by breaks of therecirculation and MSL. The RHR Shutdown Cooling System isolation onlow RPV water level supports actions to ensure that the RPV water leveldoes not drop below the top of the active fuel during a vessel draindown event caused by a leak (e.g., pipe break or inadvertent valve opening) inthe RHR Shutdown Cooling System.Reactor Vessel Water Level -Low signals are initiated from fourdifferential pressure transmitters that sense the difference between thepressure due to a constant column of water (reference leg) and thepressure due to the actual water level (variable leg) in the vessel. Fourchannels (two channels per trip system) of the Reactor Vessel WaterLevel -Low Function are available and are required to be OPERABLE toensure that no single instrument failure can preclude the isolation function.
Note 2 has been provided to modify the ACTIONS related to primary containment isolation instrumentation channels.
As noted (footnote (a) to Table 3.3.6.1-1),
Section 1.3, Completion Times, specifies that once a Condition has been entered, subsequent divisions, subsystems, components, or variables expressed in the Condition, discovered to be inoperable or not within limits, will not result in separate entry into the Condition.
only one channel pertrip system (with an isolation signal available to one shutdown coolingpump supply isolation valve) of the Reactor Vessel Water Level -LowFunction is required to be OPERABLE in MODES 4 and 5, provided RHRShutdown Cooling System integrity is maintained.
Section 1.3 also specifies that Required Actions of the Condition continue to apply for each additional failure, with Completion Times based on initial entry into the Condition.
System integrity ismaintained provided the piping is intact and no maintenance is beingperformed that has the potential for draining the reactor vessel throughthe system.The Reactor Vessel Water Level -Low Allowable Value was chosen to bethe same as the RPS Reactor Vessel Water Level -Low Allowable Value(LCO 3.3.1.1),
However, the Required Actions for inoperable primary containment isolation instrumentation channels provide appropriate compensatory measures for separate inoperable channels.
since the capability to cool the fuel may be threatened.
As such, a Note has been provided that allows separate Condition entry for each inoperable primary containment isolation instrumentation channel.A.1 Because of the diversity of sensors available to provide isolation signals and the redundancy of the isolation design, an allowable out of service time of 12 hours or 24 hours, depending on the Function (12 hours for those Functions that have channel components common to RPS instrumentation and 24 hours for those Functions that do not have channel components common to RPS instrumentation), has been shown to be acceptable (Refs. 5 and 6) to permit restoration of any inoperable channel to OPERABLE status. This out of service time is only acceptable provided the associated Function is still maintaining isolation capability Monticello B 3.3.6.1-17 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)(refer to Required Action B.1 Bases). If the inoperable channel cannot be restored to OPERABLE status within the allowable out of service time, the channel must be placed in the tripped condition per Required Action A.1.Placing the inoperable channel in trip would conservatively compensate for the inoperability, restore capability to accommodate a single failure, and allow operation to continue with no further restrictions.
The Reactor Vessel Water Level -Low Function is only required to beOPERABLE in MODES 3, 4, and 5 to prevent this potential flow path fromlowering the reactor vessel level to the top of the fuel. In MODES 1and 2, another isolation (i.e., Reactor Steam Dome Pressure  
Alternately, if it is not desired to place the channel in trip (e.g., as in the case where placing the inoperable channel in trip would result in an isolation), Condition C must be entered and its Required Action taken.B. 1 Required Action B.1 is intended to ensure that appropriate actions are taken if multiple, inoperable, untripped channels within the same Function result in redundant primary containment isolation capability being lost for the associated penetration flow path(s). The MSL, Primary Containment, most of the RWCU System, Shutdown Cooling System Reactor Vessel Water Level -Low, and TIP Isolation Functions are considered to be maintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip, such that both trip systems will generate a trip signal from the given Function on a valid signal. The other isolation Functions are considered to be maintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip,*such that one trip system will generate a trip signal from the given Function on a valid signal. This ensures that one of the two PCIVs in the associated penetration flow path can receive an isolation signal from the given Function.
-High) andMonticello B 3.3.6.1-15 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) administrative controls ensure that this flow path remains isolated toprevent unexpected loss of inventory via this flow path.This Function isolates the Group 2 RHR shutdown cooling supplyisolation valves.Traversing Incore Probe System Isolation 7.a. Reactor Vessel Water Level -LowLow RPV water level indicates that the capability to cool the fuel may bethreatened.
For Functions 1.a, 1.b, 2.a, 2.b, 5.a, 5.b, 5.c, 5.e, 6.b, 7.a, and 7.b, this would require both trip systems to have one channel OPERABLE or in trip. For Function 1.c, this would require both trip systems to have one channel, associated with each MSL, OPERABLE or in trip. Function 1.d channels monitor several locations within a given area (e.g., different locations within the main steam tunnel area).However, since any channel can detect a leak in any area, this would require both trip systems to have one channel OPERABLE or in trip. For Functions 3.a, 4.a, and 5.d, this would require one trip system to have one channel OPERABLE or in trip. For Function 3.b, this would require one channel in each trip string to be OPERABLE or in trip for the trip system. For Function 4.b, this would require one channel in each trip string to be OPERABLE or in trip for one trip system. For Functions 3.c and 4.c, eight channels monitor each area. These channels are arranged in two sets of four detectors, with each set of detectors arranged in a one-out-of-two-twice logic. Therefore, this would require a set in each area to have sufficient channels OPERABLE or in the tripped condition for one trip system.Monticello B 3.3.6.1-18 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)
The valves whose penetrations communicate with theprimary containment are isolated to limit the release of fission products.
The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities.
The isolation of the primary containment on low RPV water level supportsactions to ensure that offsite dose limits of 10 CFR 50.67 are notexceeded.
The 1 hour Completion Time is acceptable because it minimizes risk while allowing time for restoration or tripping of channels.C._ 1 Required Action C.1 directs entry into the appropriate Condition referenced in Table 3.3.6.1-1.
The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakagepaths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from differential pressure transmitters that sense the difference between the pressure dueto a constant column of water (reference leg) and the pressure due to theactual water level (variable leg) in the vessel. Two channels of ReactorVessel Water Level -Low Function are available and are required to beOPERABLE to ensure that no single instrument failure can initiate aninadvertent isolation actuation.
The applicable Condition specified in Table 3.3.6.1-1 is Function and MODE or other specified condition dependent and may change as the Required Action of a previous Condition is completed.
The isolation function is ensured by themanual shear valve in each penetration.
Each time an inoperable channel has not met any Required Action of Condition A or B and the associated Completion Time has expired, Condition C will be entered for that channel and provides for transfer to the appropriate subsequent Condition.
The Reactor Vessel Water Level -Low Allowable Value was chosen to bethe same as the RPS Reactor Vessel Water Level -Low Allowable Value(LCO 3.3.1.1),
D.1, D.2.1, and D.2.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the plant must be placed in a MODE or other specified condition in which the LCO does not apply. This is done by placing the plant in at least MODE 3 within 12 hours and in MODE 4 within 36 hours (Required Actions D.2.1 and D.2.2). Alternately, the associated MSLs may be isolated (Required Action D.1), and, if allowed (i.e., plant safety analysis allows operation with an MSL isolated), operation with that MSL isolated may continue.
since isolation of these valves is not critical to orderly plantshutdown.
Isolating the affected MSL accomplishes the safety function of the inoperable channel. The Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.E. 1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the plant must be placed in a MODE or other specified condition in which the LCO does not apply. This is done by placing the plant in at least MODE 2 within 6 hours.The allowed Completion Time of 6 hours is reasonable, based on operating experience, to reach MODE 2 from full power conditions in an orderly manner and without challenging plant systems.Monticello B 3.3.6.1-19 Revision No. 34 Monticello B 3.3.6.1-19 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)
This Function isolates the Group 2 TIP inboard isolation ball valves.7.b. Drywell Pressure  
F. 1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, plant operations may continue if the affected penetration flow path(s) is isolated.
-HighHigh drywell pressure can indicate a break in the RCPB inside theprimary containment.
Isolating the affected penetration flow path(s) accomplishes the safety function of the inoperable channels.For the RWCU Room Temperature  
The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure thatoffsite dose limits of 10 CFR 50.67 are not exceeded.
-High Function, the affected penetration flow path(s) may be considered isolated by isolating only that portion of the system in the associated room monitored by the inoperable channel. That is, if the RWCU pump room A area channel is inoperable, the pump room A area can be isolated while allowing continued RWCU operation utilizing the B RWCU pump.The 1 hour Completion Time is acceptable because it minimizes risk while allowing sufficient time for plant operations personnel to isolate the affected penetration flow path(s).G.1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, plant operations may continue if the affected penetration flow path(s) is isolated.
The DrywellPressure
Isolating the affected penetration flow path(s) accomplishes the safety function of the inoperable channels.
-High Function, associated with isolation of the primarycontainment, is implicitly assumed in the USAR accident analysis asthese leakage paths are assumed to be isolated post LOCA.Monticello B 3.3.6.1-16 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESAPPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)
The 24 hour Completion Time is acceptable due to the fact that these Functions provide a TIP System isolation, and the TIP System penetration is a small bore (approximately 1 inch), its isolation in a design basis event (with loss of offsite power) would be via the manually operated shear valves, and the ability to manually isolate by either the normal isolation valve or the shear valve is unaffected by the inoperable instrumentation.
High drywell pressure signals are initiated from pressure transmitters thatsense the pressure in the drywell.
H.1 and H.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the associated SLC subsystem(s) is declared inoperable or the RWCU System is isolated.
Two channels of Drywell Pressure  
Since this Function is required to ensure that the SLC System performs its intended function, sufficient remedial measures are provided by declaring the associated SLC subsystems inoperable or isolating the RWCU System.The 1 hour Completion Time is acceptable because it minimizes risk while allowing sufficient time for personnel to isolate the RWCU System.Monticello B 3.3.6.1-20 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued) 1.1 and 1.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the associated penetration flow path should be closed. However, if the shutdown cooling function is needed to provide core cooling, these Required Actions allow the penetration flow path to remain unisolated provided action is immediately initiated to restore the channel to OPERABLE status or to isolate the RHR Shutdown Cooling System (i.e., provide alternate decay heat removal capabilities so the penetration flow path can be isolated).
-High Function are available and are required to be OPERABLE to ensurethat no single instrument failure can initiate an inadvertent actuation.
Actions must continue until the channel is restored to OPERABLE status or the RHR Shutdown Cooling System is isolated.SURVEILLANCE As noted at the beginning of the SRs, the SRs for each Primary REQUIREMENTS Containment Isolation instrumentation Function are found in the SRs column of Table 3.3.6.1-1.
Theisolation function is ensured by the manual shear valve in eachpenetration.
The Surveillances are modified by a Note to indicate that when a channel (a channel that is directed to two trip systems is considered to be one channel) is placed in an inoperable status solely for performance of required Surveillances, entry into associated Conditions and Required Actions may be delayed for up to 6 hours provided the associated Function maintains primary containment isolation capability.
The Allowable Value was selected to be the same as the ECCS DrywellPressure
Upon completion of the Surveillance, or expiration of the 6 hour allowance, the channel must be returned to OPERABLE status or the applicable Condition entered and Required Actions taken. This Note is based on the reliability analysis (Refs. 5 and 6) assumption of the average time required to perform channel surveillance.
-High Allowable Value (LCO 3.3.5.1),
That analysis demonstrated that the 6 hour testing allowance does not significantly reduce the probability that the PCIVs will isolate the penetration flow path(s) when necessary.
since this may beindicative of a LOCA inside primary containment.
SR 3.3.6.1.1 Performance of the CHANNEL CHECK once every 12 hours ensures that a gross failure of instrumentation has not occurred.
This Function isolates the Group 2 TIP inboard isolation ball valves.ACTIONS The ACTIONS are modified by two Notes. Note 1 allows penetration flowpath(s) to be unisolated intermittently under administrative controls.
A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels.
These controls consist of stationing a dedicated operator at the controlsof the valve, who is in continuous communication with the control room.In this way, the penetration can be rapidly isolated when a need forprimary containment isolation is indicated.
It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. A CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying the instrumentation continues to operate properly between each CHANNEL CALIBRATION.
Note 2 has been provided tomodify the ACTIONS related to primary containment isolation instrumentation channels.
Monticello B 3.3.6.1-21 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES SURVEILLANCE REQUIREMENTS (continued)
Section 1.3, Completion Times, specifies thatonce a Condition has been entered, subsequent divisions, subsystems, components, or variables expressed in the Condition, discovered to beinoperable or not within limits, will not result in separate entry into theCondition.
Agreement criteria are determined by the plant staff based on a combination of the channel instrument uncertainties, including indication and readability.
Section 1.3 also specifies that Required Actions of theCondition continue to apply for each additional  
If a channel is outside the criteria, it may be an indication that the instrument has drifted outside its limit.The Frequency is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal, but more frequent, checks of channels during normal operational use of the displays associated with the channels required by the LCO.SR 3.3.6.1.2 A CHANNEL FUNCTIONAL TEST is performed on each required channel to ensure that the channel will perform the intended function.
: failure, with Completion Times based on initial entry into the Condition.  
A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
: However, the RequiredActions for inoperable primary containment isolation instrumentation channels provide appropriate compensatory measures for separateinoperable channels.
Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint methodology.
As such, a Note has been provided that allowsseparate Condition entry for each inoperable primary containment isolation instrumentation channel.A.1Because of the diversity of sensors available to provide isolation signalsand the redundancy of the isolation design, an allowable out of servicetime of 12 hours or 24 hours, depending on the Function (12 hours forthose Functions that have channel components common to RPSinstrumentation and 24 hours for those Functions that do not havechannel components common to RPS instrumentation),
The 92 day Frequency of SR 3.3.6.1.2 is based on the reliability analyses described in References 5 and 6.SR 3.3.6.1.3 Calibration of trip units provides a check of the actual trip setpoints (including any specified time delay). The channel must be declared inoperable if the trip setting is discovered to be less conservative than the Allowable Value specified in Table 3.3.6.1-1.
has been shownto be acceptable (Refs. 5 and 6) to permit restoration of any inoperable channel to OPERABLE status. This out of service time is only acceptable provided the associated Function is still maintaining isolation capability Monticello B 3.3.6.1-17 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESACTIONS (continued)
If the trip setting is discovered to be less conservative than accounted for in the appropriate setpoint methodology, but is not beyond the Allowable Value, the channel performance is still within the requirements of the plant safety analysis.Under these conditions, the setpoint must be readjusted to be equal to or more conservative than that accounted for in the appropriate setpoint methodology.
(refer to Required Action B.1 Bases). If the inoperable channel cannot berestored to OPERABLE status within the allowable out of service time, thechannel must be placed in the tripped condition per Required Action A.1.Placing the inoperable channel in trip would conservatively compensate for the inoperability, restore capability to accommodate a single failure,and allow operation to continue with no further restrictions.
The Frequency of 92 days is based on the reliability analyses of References 5 and 6.Monticello B 3.3.6.1-22 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES SURVEILLANCE REQUIREMENTS (continued)
Alternately, ifit is not desired to place the channel in trip (e.g., as in the case whereplacing the inoperable channel in trip would result in an isolation),
SR 3.3.6.1.4 and SR 3.3.6.1.5 A CHANNEL CALIBRATION is a complete check of the instrument loop and the sensor. This test verifies the channel responds to the measured parameter within the necessary range and accuracy.
Condition C must be entered and its Required Action taken.B. 1Required Action B.1 is intended to ensure that appropriate actions aretaken if multiple, inoperable, untripped channels within the same Functionresult in redundant primary containment isolation capability being lost forthe associated penetration flow path(s).
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drifts between successive calibrations consistent with the plant specific setpoint methodology.
The MSL, Primary Containment, most of the RWCU System, Shutdown Cooling System Reactor VesselWater Level -Low, and TIP Isolation Functions are considered to bemaintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip, such that both trip systems willgenerate a trip signal from the given Function on a valid signal. The otherisolation Functions are considered to be maintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip,*such that one trip system will generate a trip signal from the givenFunction on a valid signal. This ensures that one of the two PCIVs in theassociated penetration flow path can receive an isolation signal from thegiven Function.
The Frequency of SR 3.3.6.1.4 is based on the assumption of a 92 day calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.
For Functions 1.a, 1.b, 2.a, 2.b, 5.a, 5.b, 5.c, 5.e, 6.b,7.a, and 7.b, this would require both trip systems to have one channelOPERABLE or in trip. For Function 1.c, this would require both tripsystems to have one channel, associated with each MSL, OPERABLE orin trip. Function 1.d channels monitor several locations within a givenarea (e.g., different locations within the main steam tunnel area).However, since any channel can detect a leak in any area, this wouldrequire both trip systems to have one channel OPERABLE or in trip. ForFunctions 3.a, 4.a, and 5.d, this would require one trip system to haveone channel OPERABLE or in trip. For Function 3.b, this would requireone channel in each trip string to be OPERABLE or in trip for the tripsystem. For Function 4.b, this would require one channel in each tripstring to be OPERABLE or in trip for one trip system. For Functions 3.cand 4.c, eight channels monitor each area. These channels are arrangedin two sets of four detectors, with each set of detectors arranged in a one-out-of-two-twice logic. Therefore, this would require a set in each area tohave sufficient channels OPERABLE or in the tripped condition for onetrip system.Monticello B 3.3.6.1-18 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESACTIONS (continued)
The Frequency of SR 3.3.6.1.5 is based on the assumption of a 24 month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.SR 3.3.6.1.6 The LOGIC SYSTEM FUNCTIONAL TEST demonstrates the OPERABILITY of the required isolation logic for a specific channel. The system functional testing performed on PCIVs in LCO 3.6.1.3 overlaps this Surveillance to provide complete testing of the assumed safety function.
The Completion Time is intended to allow the operator time to evaluateand repair any discovered inoperabilities.
The 24 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown these components usually pass the Surveillance when performed at the 24 month Frequency.
The 1 hour Completion Time isacceptable because it minimizes risk while allowing time for restoration ortripping of channels.
C._ 1Required Action C.1 directs entry into the appropriate Condition referenced in Table 3.3.6.1-1.
The applicable Condition specified inTable 3.3.6.1-1 is Function and MODE or other specified condition dependent and may change as the Required Action of a previousCondition is completed.
Each time an inoperable channel has not metany Required Action of Condition A or B and the associated Completion Time has expired, Condition C will be entered for that channel andprovides for transfer to the appropriate subsequent Condition.
D.1, D.2.1, and D.2.2If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, the plant must be placed in a MODE orother specified condition in which the LCO does not apply. This is doneby placing the plant in at least MODE 3 within 12 hours and in MODE 4within 36 hours (Required Actions D.2.1 and D.2.2). Alternately, theassociated MSLs may be isolated (Required Action D.1), and, if allowed(i.e., plant safety analysis allows operation with an MSL isolated),
operation with that MSL isolated may continue.
Isolating the affectedMSL accomplishes the safety function of the inoperable channel.
TheCompletion Times are reasonable, based on operating experience, toreach the required plant conditions from full power conditions in anorderly manner and without challenging plant systems.E. 1If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, the plant must be placed in a MODE orother specified condition in which the LCO does not apply. This is doneby placing the plant in at least MODE 2 within 6 hours.The allowed Completion Time of 6 hours is reasonable, based onoperating experience, to reach MODE 2 from full power conditions in anorderly manner and without challenging plant systems.Monticello B 3.3.6.1-19 Revision No. 34Monticello B 3.3.6.1-19 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESACTIONS (continued)
F. 1If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, plant operations may continue if theaffected penetration flow path(s) is isolated.
Isolating the affectedpenetration flow path(s) accomplishes the safety function of theinoperable channels.
For the RWCU Room Temperature  
-High Function, the affectedpenetration flow path(s) may be considered isolated by isolating only thatportion of the system in the associated room monitored by the inoperable channel.
That is, if the RWCU pump room A area channel is inoperable, the pump room A area can be isolated while allowing continued RWCUoperation utilizing the B RWCU pump.The 1 hour Completion Time is acceptable because it minimizes riskwhile allowing sufficient time for plant operations personnel to isolate theaffected penetration flow path(s).G.1If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, plant operations may continue if theaffected penetration flow path(s) is isolated.
Isolating the affectedpenetration flow path(s) accomplishes the safety function of theinoperable channels.
The 24 hour Completion Time is acceptable due tothe fact that these Functions provide a TIP System isolation, and the TIPSystem penetration is a small bore (approximately 1 inch), its isolation ina design basis event (with loss of offsite power) would be via themanually operated shear valves, and the ability to manually isolate byeither the normal isolation valve or the shear valve is unaffected by theinoperable instrumentation.
H.1 and H.2If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, the associated SLC subsystem(s) isdeclared inoperable or the RWCU System is isolated.
Since this Functionis required to ensure that the SLC System performs its intended  
: function, sufficient remedial measures are provided by declaring the associated SLC subsystems inoperable or isolating the RWCU System.The 1 hour Completion Time is acceptable because it minimizes riskwhile allowing sufficient time for personnel to isolate the RWCU System.Monticello B 3.3.6.1-20 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESACTIONS (continued) 1.1 and 1.2If the channel is not restored to OPERABLE status or placed in trip withinthe allowed Completion Time, the associated penetration flow path shouldbe closed. However, if the shutdown cooling function is needed toprovide core cooling, these Required Actions allow the penetration flowpath to remain unisolated provided action is immediately initiated torestore the channel to OPERABLE status or to isolate the RHR ShutdownCooling System (i.e., provide alternate decay heat removal capabilities sothe penetration flow path can be isolated).
Actions must continue until thechannel is restored to OPERABLE status or the RHR Shutdown CoolingSystem is isolated.
SURVEILLANCE As noted at the beginning of the SRs, the SRs for each PrimaryREQUIREMENTS Containment Isolation instrumentation Function are found in the SRscolumn of Table 3.3.6.1-1.
The Surveillances are modified by a Note to indicate that when a channel(a channel that is directed to two trip systems is considered to be onechannel) is placed in an inoperable status solely for performance ofrequired Surveillances, entry into associated Conditions and RequiredActions may be delayed for up to 6 hours provided the associated Function maintains primary containment isolation capability.
Uponcompletion of the Surveillance, or expiration of the 6 hour allowance, thechannel must be returned to OPERABLE status or the applicable Condition entered and Required Actions taken. This Note is based on thereliability analysis (Refs. 5 and 6) assumption of the average timerequired to perform channel surveillance.
That analysis demonstrated that the 6 hour testing allowance does not significantly reduce theprobability that the PCIVs will isolate the penetration flow path(s) whennecessary.
SR 3.3.6.1.1 Performance of the CHANNEL CHECK once every 12 hours ensures thata gross failure of instrumentation has not occurred.
A CHANNEL CHECKis normally a comparison of the parameter indicated on one channel to asimilar parameter on other channels.
It is based on the assumption thatinstrument channels monitoring the same parameter should readapproximately the same value. Significant deviations between theinstrument channels could be an indication of excessive instrument drift inone of the channels or of something even more serious.
A CHANNELCHECK will detect gross channel failure; thus, it is key to verifying theinstrumentation continues to operate properly between each CHANNELCALIBRATION.
Monticello B 3.3.6.1-21 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESSURVEILLANCE REQUIREMENTS (continued)
Agreement criteria are determined by the plant staff based on acombination of the channel instrument uncertainties, including indication and readability.
If a channel is outside the criteria, it may be an indication that the instrument has drifted outside its limit.The Frequency is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal,but more frequent, checks of channels during normal operational use ofthe displays associated with the channels required by the LCO.SR 3.3.6.1.2 A CHANNEL FUNCTIONAL TEST is performed on each required channelto ensure that the channel will perform the intended function.
Asuccessful test of the required contact(s) of a channel relay may beperformed by the verification of the change of state of a single contact ofthe relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other requiredcontacts of the relay are verified by other Technical Specifications andnon-Technical Specifications tests at least once per refueling interval withapplicable extensions.
Any setpoint adjustment shall be consistent with the assumptions of thecurrent plant specific setpoint methodology.
The 92 day Frequency of SR 3.3.6.1.2 is based on the reliability analysesdescribed in References 5 and 6.SR 3.3.6.1.3 Calibration of trip units provides a check of the actual trip setpoints (including any specified time delay). The channel must be declaredinoperable if the trip setting is discovered to be less conservative than theAllowable Value specified in Table 3.3.6.1-1.
If the trip setting isdiscovered to be less conservative than accounted for in the appropriate setpoint methodology, but is not beyond the Allowable Value, the channelperformance is still within the requirements of the plant safety analysis.
Under these conditions, the setpoint must be readjusted to be equal to ormore conservative than that accounted for in the appropriate setpointmethodology.
The Frequency of 92 days is based on the reliability analyses ofReferences 5 and 6.Monticello B 3.3.6.1-22 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESSURVEILLANCE REQUIREMENTS (continued)
SR 3.3.6.1.4 and SR 3.3.6.1.5 A CHANNEL CALIBRATION is a complete check of the instrument loopand the sensor. This test verifies the channel responds to the measuredparameter within the necessary range and accuracy.
CHANNELCALIBRATION leaves the channel adjusted to account for instrument drifts between successive calibrations consistent with the plant specificsetpoint methodology.
The Frequency of SR 3.3.6.1.4 is based on the assumption of a 92 daycalibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.
The Frequency of SR 3.3.6.1.5 is based onthe assumption of a 24 month calibration interval in the determination ofthe magnitude of equipment drift in the setpoint analysis.
SR 3.3.6.1.6 The LOGIC SYSTEM FUNCTIONAL TEST demonstrates the OPERABILITY of the required isolation logic for a specific channel.
The system functional testing performed on PCIVs in LCO 3.6.1.3 overlaps this Surveillance toprovide complete testing of the assumed safety function.
The 24 monthFrequency is based on the need to perform this Surveillance under theconditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown these components usually pass theSurveillance when performed at the 24 month Frequency.
REFERENCES  
REFERENCES  
: 1. USAR, Section 14.7.2.2. USAR, Section 14.7.3.3. USAR, Section 7.6.3.2.4.
: 1. USAR, Section 14.7.2.2. USAR, Section 14.7.3.3. USAR, Section 7.6.3.2.4.
: 4. USAR, Section 6.6.1.1.5. NEDC-31677P-A, "Technical Specification Improvement Analysis forBWR Isolation Actuation Instrumentation,"
: 4. USAR, Section 6.6.1.1.5. NEDC-31677P-A, "Technical Specification Improvement Analysis for BWR Isolation Actuation Instrumentation," July 1990.6. NEDC-30851P-A Supplement 2, "Technical Specifications Improvement Analysis for BWR Isolation Instrumentation Common to RPS and ECCS Instrumentation," March 1989.Monticello B 3.3.6.1-23 Revision No. 34 Monticello B 3.3.6.1-23 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES REFERENCES (continued)
July 1990.6. NEDC-30851P-A Supplement 2, "Technical Specifications Improvement Analysis for BWR Isolation Instrumentation Common toRPS and ECCS Instrumentation,"
: 7. Amendment No. 185, "Issuance of Amendment to Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits," dated November 25, 2014. (ADAMS Accession No.ML14281A318)
March 1989.Monticello B 3.3.6.1-23 Revision No. 34Monticello B 3.3.6.1-23 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1BASESREFERENCES (continued)
: 7. Amendment No. 185, "Issuance of Amendment to Reduce theReactor Steam Dome Pressure Specified in the Reactor Core SafetyLimits,"
dated November 25, 2014. (ADAMS Accession No.ML14281A318)
Monticello B 3.3.6.1-24  
Monticello B 3.3.6.1-24  
-Last Revision No. 34Monticello B 3.3.6.1-24  
-Last Revision No. 34 Monticello B 3.3.6.1-24  
-LastRevision No. 34 ECCS -Operating 3.5.1B 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEMB 3.5.1 ECCS -Operating BASESBACKGROUND The ECCS is designed, in conjunction with the primary and secondary containment, to limit the release of radioactive materials to theenvironment following a loss of coolant accident (LOCA). The ECCSuses two independent methods (flooding and spraying) to cool the coreduring a LOCA. The ECCS network consists of the High PressureCoolant Injection (HPCI) System, the Core Spray (CS) System, the lowpressure coolant injection (LPCI) mode of the Residual Heat Removal(RHR) System, and the Automatic Depressurization System (ADS). Thesuppression pool provides the required source of water for the ECCS.Although no credit is taken in the safety analyses for the condensate storage tanks (CSTs), they are capable of providing a source of water forthe HPCI, LPCI, and CS Systems.On receipt of an initiation signal, ECCS pumps automatically start and thesystem aligns and the pumps inject water, taken either from the CSTs orsuppression pool, into the Reactor Coolant System (RCS) as RCSpressure is overcome by the discharge pressure of the ECCS pumps.Although the system is initiated, ADS action is delayed, allowing theoperator to interrupt the timed sequence if the system is not needed. TheHPCI pump discharge pressure almost immediately exceeds that of theRCS, and the pump injects coolant into the vessel to cool the core. If thebreak is small, the HPCI System will maintain coolant inventory as well asvessel level while the RCS is still pressurized.
-Last Revision No. 34 ECCS -Operating 3.5.1 B 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM B 3.5.1 ECCS -Operating BASES BACKGROUND The ECCS is designed, in conjunction with the primary and secondary containment, to limit the release of radioactive materials to the environment following a loss of coolant accident (LOCA). The ECCS uses two independent methods (flooding and spraying) to cool the core during a LOCA. The ECCS network consists of the High Pressure Coolant Injection (HPCI) System, the Core Spray (CS) System, the low pressure coolant injection (LPCI) mode of the Residual Heat Removal (RHR) System, and the Automatic Depressurization System (ADS). The suppression pool provides the required source of water for the ECCS.Although no credit is taken in the safety analyses for the condensate storage tanks (CSTs), they are capable of providing a source of water for the HPCI, LPCI, and CS Systems.On receipt of an initiation signal, ECCS pumps automatically start and the system aligns and the pumps inject water, taken either from the CSTs or suppression pool, into the Reactor Coolant System (RCS) as RCS pressure is overcome by the discharge pressure of the ECCS pumps.Although the system is initiated, ADS action is delayed, allowing the operator to interrupt the timed sequence if the system is not needed. The HPCI pump discharge pressure almost immediately exceeds that of the RCS, and the pump injects coolant into the vessel to cool the core. If the break is small, the HPCI System will maintain coolant inventory as well as vessel level while the RCS is still pressurized.
If HPCI fails, it is backedup by ADS in combination with LPCI and CS. In this event, the ADStimed sequence would be allowed to time out and open the selectedsafety/relief valves (S/RVs) depressurizing the RCS, thus allowing theLPCI and CS to overcome RCS pressure and inject coolant into thevessel. If the break is large, RCS pressure initially drops rapidly and theLPCI and CS cool the core.Water from the break returns to the suppression pool where it is usedagain and again. Water in the suppression pool is circulated through aheat exchanger cooled by the RHR Service Water System. Depending on the location and size of the break, portions of the ECCS may beineffective;  
If HPCI fails, it is backed up by ADS in combination with LPCI and CS. In this event, the ADS timed sequence would be allowed to time out and open the selected safety/relief valves (S/RVs) depressurizing the RCS, thus allowing the LPCI and CS to overcome RCS pressure and inject coolant into the vessel. If the break is large, RCS pressure initially drops rapidly and the LPCI and CS cool the core.Water from the break returns to the suppression pool where it is used again and again. Water in the suppression pool is circulated through a heat exchanger cooled by the RHR Service Water System. Depending on the location and size of the break, portions of the ECCS may be ineffective; however, the overall design is effective in cooling the core regardless of the size or location of the piping break.The combined operation of all ECCS subsystems are designed to ensure that no single active component failure will prevent automatic initiation and successful operation of the minimum required ECCS equipment.
: however, the overall design is effective in cooling the coreregardless of the size or location of the piping break.The combined operation of all ECCS subsystems are designed to ensurethat no single active component failure will prevent automatic initiation and successful operation of the minimum required ECCS equipment.
Monticello B 3.5. 1-1 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued)
Monticello B 3.5. 1-1Revision No. 34 ECCS -Operating 3.5.1BASESBACKGROUND (continued)
The CS System (Ref. 1) is composed of two independent subsystems.
The CS System (Ref. 1) is composed of two independent subsystems.
Each subsystem consists of a motor driven pump, a spray sparger abovethe core, and piping and valves to transfer water from the suppression pool to the sparger.
Each subsystem consists of a motor driven pump, a spray sparger above the core, and piping and valves to transfer water from the suppression pool to the sparger. The CS System is designed to provide cooling to the reactor core when reactor pressure is low. Upon receipt of an initiation signal, the CS pumps in both subsystems are automatically started in approximately 15 seconds after AC power is available.
The CS System is designed to provide cooling to thereactor core when reactor pressure is low. Upon receipt of an initiation signal, the CS pumps in both subsystems are automatically started inapproximately 15 seconds after AC power is available.
When the RPV pressure drops sufficiently, CS System flow to the RPV begins. A full flow test line is provided to route water from and to the suppression pool to allow testing of the CS System without spraying water in the RPV.LPCI is an independent operating mode of the RHR System. There are two LPCI subsystems (Ref. 2), each consisting of two motor driven pumps in the same RHR loop and piping and valves to transfer water from the suppression pool to the RPV via the selected recirculation loop.Each LPCI subsystem consists of a common suction line from the suppression pool, parallel flowpaths through the two RHR pumps, and a common injection line to the RPV. An inoperable "LPCI pump" refers to the condition where inoperable components associated with the flowpath through one of the two parallel RHR pumps renders that LPCI pump flowpath inoperable, but the common portions of the associated LPCI subsystem are OPERABLE.The LPCI System is equipped with a loop select logic that determines which, if any, of the recirculation loops has been broken and selects the non-broken loop for injection.
When the RPVpressure drops sufficiently, CS System flow to the RPV begins. A full flowtest line is provided to route water from and to the suppression pool toallow testing of the CS System without spraying water in the RPV.LPCI is an independent operating mode of the RHR System. There aretwo LPCI subsystems (Ref. 2), each consisting of two motor drivenpumps in the same RHR loop and piping and valves to transfer waterfrom the suppression pool to the RPV via the selected recirculation loop.Each LPCI subsystem consists of a common suction line from thesuppression pool, parallel flowpaths through the two RHR pumps, and acommon injection line to the RPV. An inoperable "LPCI pump" refers tothe condition where inoperable components associated with the flowpaththrough one of the two parallel RHR pumps renders that LPCI pumpflowpath inoperable, but the common portions of the associated LPCIsubsystem are OPERABLE.
If neither loop is determined to be broken, a preselected loop is used for injection.
The LPCI System is equipped with a loop select logic that determines which, if any, of the recirculation loops has been broken and selects thenon-broken loop for injection.
The LPCI System cross-tie valve must be open to support OPERABILITY of both LPCI subsystems.
If neither loop is determined to be broken,a preselected loop is used for injection.
Similarly, the LPCI swing bus, consisting of two motor control centers which are directly connected together, is required to be energized from the Division 1 power supply (normal source), with automatic transfer capability to the Division 2 power supply (backup source) to support both LPCI subsystems.
The LPCI System cross-tie valvemust be open to support OPERABILITY of both LPCI subsystems.
The LPCI subsystems are designed to provide core cooling at low RPV pressure.
Similarly, the LPCI swing bus, consisting of two motor control centerswhich are directly connected  
Upon receipt of an initiation signal, all four LPCI pumps are automatically started (pumps A and B approximately 5 seconds after AC power is available and pumps C and D approximately 10 seconds after AC power is available).
: together, is required to be energized fromthe Division 1 power supply (normal source),
RHR System valves in the LPCI flow path are automatically positioned to ensure the proper flow path for water from the suppression pool to inject into the selected recirculation loop. When the RPV pressure drops sufficiently, the LPCI flow to the RPV, via the selected recirculation loop, begins. The water then enters the reactor through the jet pumps. Full flow test lines are provided for each LPCI subsystem to route water from and to the suppression pool, to allow testing of the LPCI pumps without injecting water into the RPV.These test lines also provide suppression pool cooling capability, as described in LCO 3.6.2.3, "RHR Suppression Pool Cooling." An intertie Monticello B 3.5.1-2 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued) line is provided to connect the RHR shutdown cooling suction line with the two RHR shutdown cooling loop return lines to the associated recirculation loop. This line includes two RHR intertie return line isolation valves that are normally closed and a RHR intertie suction line isolation valve that is normally open. The purpose of this line is to reduce the potential for water hammer in the recirculation and RHR systems. The isolation valves are opened during a cooldown to establish recirculation flow through the RHR suction line and return lines, thereby ensuring a uniform cooldown of this piping. The RHR intertie loop return line isolation valves receive a closure signal on LPCI initiation.
with automatic transfercapability to the Division 2 power supply (backup source) to support bothLPCI subsystems.
In the event of an inoperable RHR intertie loop return line isolation valve, there is a potential for some of the LPCI flow to be diverted to the broken loop during a LOCA. This may cause early transition boiling during a LOCA but this condition was evaluated in the safety analysis and found acceptable.
The LPCI subsystems are designed to provide corecooling at low RPV pressure.
The RHR intertie line is to be isolated within 18 hours if discovered open in MODE 1 to eliminate the need to compensate for the small change in jet pump drive flow and a reduction in core flow during a loss of coolant accident.The HPCI System (Ref. 3) consists of a steam driven turbine pump unit, piping, and valves to provide steam to the turbine, as well as piping and valves to transfer water from the suction source to the core via the feedwater system line, where the coolant is distributed within the RPV through the feedwater sparger. Suction piping for the system is provided from the CSTs and the suppression pool. Pump suction for HPCI is normally aligned to the CSTs to minimize injection of suppression pool water into the RPV. However, if the water level in any CST is low, or if the suppression pool level is high, an automatic transfer to the suppression pool water source ensures a water supply for continuous operation of the HPCI System. The steam supply to the HPCI turbine is piped from a main steam line upstream of the associated inboard main steam isolation valve.The HPCI System is designed to provide core cooling for a wide range of reactor pressures (150 psig to 1120 psig). Upon receipt of an initiation signal, the HPCI turbine stop valve and turbine steam supply valve open and the turbine accelerates to a specified speed. As the HPCI flow increases, the turbine governor valve is automatically adjusted to maintain design flow. Exhaust steam from the HPCI turbine is discharged to the suppression pool. A full flow test line is provided to route water from and to the CSTs to allow testing of the HPCI System during normal operation without injecting water into the RPV.The ECCS pumps are provided with minimum flow bypass lines, which discharge to the suppression pool. The valves in these lines automatically open or remain open to prevent pump damage due to Monticello B 3.5.1-3 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued) overheating when other discharge line valves are closed. To ensure rapid delivery of water to the RPV and to minimize water hammer effects, all ECCS pump discharge lines are filled with water. The LPCI and CS System discharge lines are kept full of water using a "keep fill" system (Condensate Service System). The HPCI System is normally aligned to the CSTs. The height of water in the CSTs maintains the piping full of water up to the first closed isolation valve in the discharge piping. The HPCI System discharge piping near the normally closed injection valve to the Feedwater System absorbs heat from the feedwater via conduction and valve leakage. This has the potential to form a localized steam void in the HPCI discharge piping and cause a momentum transient upon HPCI initiation.
Upon receipt of an initiation signal, all fourLPCI pumps are automatically started (pumps A and B approximately 5 seconds after AC power is available and pumps C and D approximately 10 seconds after AC power is available).
Although the momentum transient has been evaluated and shown not to adversely affect HPCI System operation, the Condensate System is utilized as a "keep-fill" system to maintain the HPCI discharge piping between the normally closed injection valve and the pump discharge check valve charged with water to prevent possible void formation and minimize momentum transient effects. This "keep-fill" system is relied upon during normal operation, but is not required for the operability of the HPCI System under normal plant conditions.
RHR System valves in the LPCIflow path are automatically positioned to ensure the proper flow path forwater from the suppression pool to inject into the selected recirculation loop. When the RPV pressure drops sufficiently, the LPCI flow to theRPV, via the selected recirculation loop, begins. The water then entersthe reactor through the jet pumps. Full flow test lines are provided foreach LPCI subsystem to route water from and to the suppression pool, toallow testing of the LPCI pumps without injecting water into the RPV.These test lines also provide suppression pool cooling capability, asdescribed in LCO 3.6.2.3, "RHR Suppression Pool Cooling."
Additional assessment of operability may be required under off-normal conditions, such as HPCI suction aligned to the suppression pool. The relative height of the feedwater line connection for HPCI is such that the water in the feedwater lines keeps the remaining portion of the HPCI discharge line full of water.The ADS (Ref. 4) consists of three of the eight S/RVs. It is designed to provide depressurization of the RCS during a small break LOCA if HPCI fails or is unable to maintain required water level in the RPV. ADS operation reduces the RPV pressure to within the operating pressure range of the low pressure ECCS subsystems (CS and LPCI), so that these subsystems can provide coolant inventory makeup. The ADS valves are normally supplied by the Instrument Nitrogen System. This pneumatic supply will automatically transfer to the Instrument Air System on high or low Instrument Nitrogen System pressure.
An intertieMonticello B 3.5.1-2Revision No. 34 ECCS -Operating 3.5.1BASESBACKGROUND (continued) line is provided to connect the RHR shutdown cooling suction line with thetwo RHR shutdown cooling loop return lines to the associated recirculation loop. This line includes two RHR intertie return line isolation valves that are normally closed and a RHR intertie suction line isolation valve that is normally open. The purpose of this line is to reduce thepotential for water hammer in the recirculation and RHR systems.
However, both of these pneumatic supplies are non-safety related and are not assumed to operate following an accident.
Theisolation valves are opened during a cooldown to establish recirculation flow through the RHR suction line and return lines, thereby ensuring auniform cooldown of this piping. The RHR intertie loop return lineisolation valves receive a closure signal on LPCI initiation.
The safety grade pneumatic supply to two of the ADS valves is the Alternate Nitrogen System and to the third ADS valve is the S/RV Accumulator bank. The Alternate Nitrogen System contains two independent trains (i.e., subsystems) of safety related replaceable gas cylinders that supply two of the three ADS valves (S/RVs A and C). One Alternate Nitrogen System train supplies one ADS valve and other non-ADS related pneumatic loads and the other Alternate Nitrogen System train supplies a different ADS valve and other non-ADS related pneumatic loads. The S/RV Accumulator Bank supplies the third ADS valve (S/RV D), and consists of a dedicated safety related backup accumulator bank and an associated inlet check valve.Monticello B 3.5.1-4 Revision No. 34 ECCS -Operating 3.5.1 BASES APPLICABLE The ECCS performance is evaluated for the entire spectrum of break SAFETY sizes for a postulated LOCA. The accidents for which ECCS operation is ANALYSES required are presented in References 5 and 6. The required analyses and assumptions are defined in Reference  
In the event ofan inoperable RHR intertie loop return line isolation valve, there is apotential for some of the LPCI flow to be diverted to the broken loopduring a LOCA. This may cause early transition boiling during a LOCAbut this condition was evaluated in the safety analysis and foundacceptable.
: 7. The results of these analyses are also described in References 5 and 6.This LCO helps to ensure that the following acceptance criteria for the ECCS (Ref. 8), established by 10 CFR 50.46 (Ref. 9), will be met following a LOCA, assuming the worst case single active component failure in the ECCS: a. Maximum fuel element cladding temperature is < 2200&deg;F;b. Maximum cladding oxidation is < 0.17 0 times the total cladding thickness before oxidation;
The RHR intertie line is to be isolated within 18 hours ifdiscovered open in MODE 1 to eliminate the need to compensate for thesmall change in jet pump drive flow and a reduction in core flow during aloss of coolant accident.
: c. Maximum hydrogen generation from a zirconium water reaction is< 0.01 times the hypothetical amount that would be generated if all of the metal in the cladding surrounding the fuel, excluding the cladding surrounding the plenum volume, were to react;d. The core ig maintained in a coolable geometry; and e. Adequate long term cooling capability is maintained.
The HPCI System (Ref. 3) consists of a steam driven turbine pump unit,piping, and valves to provide steam to the turbine, as well as piping andvalves to transfer water from the suction source to the core via thefeedwater system line, where the coolant is distributed within the RPVthrough the feedwater sparger.
Suction piping for the system is providedfrom the CSTs and the suppression pool. Pump suction for HPCI isnormally aligned to the CSTs to minimize injection of suppression poolwater into the RPV. However, if the water level in any CST is low, or ifthe suppression pool level is high, an automatic transfer to thesuppression pool water source ensures a water supply for continuous operation of the HPCI System. The steam supply to the HPCI turbine ispiped from a main steam line upstream of the associated inboard mainsteam isolation valve.The HPCI System is designed to provide core cooling for a wide range ofreactor pressures (150 psig to 1120 psig). Upon receipt of an initiation signal, the HPCI turbine stop valve and turbine steam supply valve openand the turbine accelerates to a specified speed. As the HPCI flowincreases, the turbine governor valve is automatically adjusted tomaintain design flow. Exhaust steam from the HPCI turbine is discharged to the suppression pool. A full flow test line is provided to route waterfrom and to the CSTs to allow testing of the HPCI System during normaloperation without injecting water into the RPV.The ECCS pumps are provided with minimum flow bypass lines, whichdischarge to the suppression pool. The valves in these linesautomatically open or remain open to prevent pump damage due toMonticello B 3.5.1-3Revision No. 34 ECCS -Operating 3.5.1BASESBACKGROUND (continued) overheating when other discharge line valves are closed. To ensurerapid delivery of water to the RPV and to minimize water hammer effects,all ECCS pump discharge lines are filled with water. The LPCI and CSSystem discharge lines are kept full of water using a "keep fill" system(Condensate Service System).
The HPCI System is normally aligned tothe CSTs. The height of water in the CSTs maintains the piping full ofwater up to the first closed isolation valve in the discharge piping. TheHPCI System discharge piping near the normally closed injection valve tothe Feedwater System absorbs heat from the feedwater via conduction and valve leakage.
This has the potential to form a localized steam voidin the HPCI discharge piping and cause a momentum transient uponHPCI initiation.
Although the momentum transient has been evaluated and shown not to adversely affect HPCI System operation, theCondensate System is utilized as a "keep-fill" system to maintain theHPCI discharge piping between the normally closed injection valve andthe pump discharge check valve charged with water to prevent possiblevoid formation and minimize momentum transient effects.
This "keep-fill" system is relied upon during normal operation, but is not required for theoperability of the HPCI System under normal plant conditions.
Additional assessment of operability may be required under off-normal conditions, such as HPCI suction aligned to the suppression pool. The relativeheight of the feedwater line connection for HPCI is such that the water inthe feedwater lines keeps the remaining portion of the HPCI discharge line full of water.The ADS (Ref. 4) consists of three of the eight S/RVs. It is designed toprovide depressurization of the RCS during a small break LOCA if HPCIfails or is unable to maintain required water level in the RPV. ADSoperation reduces the RPV pressure to within the operating pressurerange of the low pressure ECCS subsystems (CS and LPCI), so thatthese subsystems can provide coolant inventory makeup. The ADSvalves are normally supplied by the Instrument Nitrogen System. Thispneumatic supply will automatically transfer to the Instrument Air Systemon high or low Instrument Nitrogen System pressure.  
: However, both ofthese pneumatic supplies are non-safety related and are not assumed tooperate following an accident.
The safety grade pneumatic supply to twoof the ADS valves is the Alternate Nitrogen System and to the third ADSvalve is the S/RV Accumulator bank. The Alternate Nitrogen Systemcontains two independent trains (i.e., subsystems) of safety relatedreplaceable gas cylinders that supply two of the three ADS valves (S/RVsA and C). One Alternate Nitrogen System train supplies one ADS valveand other non-ADS related pneumatic loads and the other Alternate Nitrogen System train supplies a different ADS valve and other non-ADSrelated pneumatic loads. The S/RV Accumulator Bank supplies the thirdADS valve (S/RV D), and consists of a dedicated safety related backupaccumulator bank and an associated inlet check valve.Monticello B 3.5.1-4Revision No. 34 ECCS -Operating 3.5.1BASESAPPLICABLE The ECCS performance is evaluated for the entire spectrum of breakSAFETY sizes for a postulated LOCA. The accidents for which ECCS operation isANALYSES required are presented in References 5 and 6. The required analysesand assumptions are defined in Reference  
: 7. The results of theseanalyses are also described in References 5 and 6.This LCO helps to ensure that the following acceptance criteria for theECCS (Ref. 8), established by 10 CFR 50.46 (Ref. 9), will be metfollowing a LOCA, assuming the worst case single active component failure in the ECCS:a. Maximum fuel element cladding temperature is < 2200&deg;F;b. Maximum cladding oxidation is < 0.170times the total claddingthickness before oxidation;
: c. Maximum hydrogen generation from a zirconium water reaction is< 0.01 times the hypothetical amount that would be generated if all ofthe metal in the cladding surrounding the fuel, excluding the claddingsurrounding the plenum volume, were to react;d. The core ig maintained in a coolable geometry; ande. Adequate long term cooling capability is maintained.
The limiting single failures are discussed in Reference  
The limiting single failures are discussed in Reference  
: 10. For a largedischarge pipe break LOCA, failure of the LPCI valve on the unbrokenrecirculation loop is considered the most limiting break/failure combination.
: 10. For a large discharge pipe break LOCA, failure of the LPCI valve on the unbroken recirculation loop is considered the most limiting break/failure combination.
For a small break LOCA, HPCI failure is the most severefailure.
For a small break LOCA, HPCI failure is the most severe failure. Extended Power Uprate removed the allowance for one ADS valve out-of-service (Ref. 17). The remaining OPERABLE ECCS subsystems provide the capability to adequately cool the core and prevent excessive fuel damage.The ECCS satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).
Extended Power Uprate removed the allowance for one ADSvalve out-of-service (Ref. 17). The remaining OPERABLE ECCSsubsystems provide the capability to adequately cool the core andprevent excessive fuel damage.The ECCS satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).
LCO Each ECCS injection/spray subsystem and three ADS valves are required to be OPERABLE.
LCO Each ECCS injection/spray subsystem and three ADS valves are requiredto be OPERABLE.
The ECCS injection/spray subsystems are defined as the two CS subsystems, the two LPCI subsystems, and one HPCI System. The low pressure ECCS injection/spray subsystems are defined as the two CS subsystems and the two LPCI subsystems.
The ECCS injection/spray subsystems are defined asthe two CS subsystems, the two LPCI subsystems, and one HPCISystem. The low pressure ECCS injection/spray subsystems are definedas the two CS subsystems and the two LPCI subsystems.
With less than the required number of ECCS subsystems OPERABLE, the potential exists that during a limiting design basis LOCA concurrent with the worst case single failure, the limits specified in Reference 9 could be exceeded.
With less than the required number of ECCS subsystems  
All ECCS subsystems must therefore be OPERABLE to satisfy the single failure criterion required by Reference 9.Monticello B 3.5.1-5 Revision No. 34 ECCS -Operating 3.5.1 BASES LCO (continued)
: OPERABLE, the potential exists that during a limiting design basis LOCA concurrent with the worst case single failure, the limits specified in Reference 9 couldbe exceeded.
As noted, LPCI subsystems may be considered OPERABLE during alignment and operation for decay heat removal when below the actual RHR shutdown cooling supply isolation interlock in MODE 3, if capable of being manually realigned (remote or local) to the LPCI mode and not otherwise inoperable.
All ECCS subsystems must therefore be OPERABLE tosatisfy the single failure criterion required by Reference 9.Monticello B 3.5.1-5Revision No. 34 ECCS -Operating 3.5.1BASESLCO (continued)
Alignment and operation for decay heat removal includes when the required RHR pump is not operating or when the system is realigned from or to the RHR shutdown cooling mode. This allowance is necessary since the RHR System may be required to operate in the shutdown cooling mode to remove decay heat and sensible heat from the reactor. At these low pressures and decay heat levels, a reduced complement of ECCS subsystems should provide the required core cooling, thereby allowing operation of RHR shutdown cooling when necessary.
As noted, LPCI subsystems may be considered OPERABLE duringalignment and operation for decay heat removal when below the actualRHR shutdown cooling supply isolation interlock in MODE 3, if capable ofbeing manually realigned (remote or local) to the LPCI mode and nototherwise inoperable.
APPLICABILITY All ECCS subsystems are required to be OPERABLE during MODES 1, 2, and 3, when there is considerable energy in the reactor core and core cooling would be required to prevent fuel damage in the event of a break in the primary system piping. In MODES 2 and 3, when reactor steam dome pressure is < 150 psig, ADS and HPCI are not required to be OPERABLE because the low pressure ECCS subsystems can provide sufficient flow below this pressure.
Alignment and operation for decay heat removalincludes when the required RHR pump is not operating or when thesystem is realigned from or to the RHR shutdown cooling mode. Thisallowance is necessary since the RHR System may be required tooperate in the shutdown cooling mode to remove decay heat and sensibleheat from the reactor.
ECCS requirements for MODES 4 and 5 are specified in LCO 3.5.2, "ECCS -Shutdown." ACTIONS A Note prohibits the application of LCO 3.0.4.b to an inoperable HPCI subsystem.
At these low pressures and decay heat levels, areduced complement of ECCS subsystems should provide the requiredcore cooling, thereby allowing operation of RHR shutdown cooling whennecessary.
There is an increased risk associated with entering a MODE or other specified condition in the Applicability with an inoperable HPCI subsystem and the provisions of LCO 3.0.4.b, which allow entry into a MODE or other specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in this circumstance.
APPLICABILITY All ECCS subsystems are required to be OPERABLE during MODES 1,2, and 3, when there is considerable energy in the reactor core and corecooling would be required to prevent fuel damage in the event of a breakin the primary system piping. In MODES 2 and 3, when reactor steamdome pressure is < 150 psig, ADS and HPCI are not required to beOPERABLE because the low pressure ECCS subsystems can providesufficient flow below this pressure.
A. 1 If one LPCI pump is inoperable, the inoperable pump must be restored to OPERABLE status within 30 days. In this condition, the remaining OPERABLE pumps provide adequate core cooling during a LOCA.However, overall LPCI reliability is reduced, because a single failure in one of the remaining OPERABLE LPCI subsystems, concurrent with a LOCA, may result in the LPCI subsystems not being able to perform their intended safety function.
ECCS requirements for MODES 4and 5 are specified in LCO 3.5.2, "ECCS -Shutdown."
The 30 day Completion Time is based on a reliability study cited in Reference 11 that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowable repair times (i.e., Completion Times).Monticello B 3.5.1-6 Revision No. 34 Monticello B 3.5.1-6 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)
ACTIONSA Note prohibits the application of LCO 3.0.4.b to an inoperable HPCIsubsystem.
B. 1 If a LPCI subsystem is inoperable for reasons other than Condition A, or a CS subsystem is inoperable, the inoperable low pressure injection/spray subsystem must be restored to OPERABLE status within 7 days. In this condition, the remaining OPERABLE subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced, because a single failure in one of the remaining OPERABLE subsystems, concurrent with a LOCA, may result in the ECCS not being able to perform its intended safety function.
There is an increased risk associated with entering a MODEor other specified condition in the Applicability with an inoperable HPCIsubsystem and the provisions of LCO 3.0.4.b, which allow entry into aMODE or other specified condition in the Applicability with the LCO notmet after performance of a risk assessment addressing inoperable systems and components, should not be applied in this circumstance.
The 7 day Completion Time is based on a reliability study (Ref. 11) that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowed outage times (i.e., Completion Times).C._1 If one LPCI pump in each subsystem is inoperable, one inoperable LPCI pump must be restored to OPERABLE status within 7 days. In this condition, the remaining OPERABLE ECCS subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced because a single failure in one of the remaining OPERABLE ECCS subsystems, concurrent with a LOCA, may result in the ECCS not being able to perform its intended safety function.
A. 1If one LPCI pump is inoperable, the inoperable pump must be restored toOPERABLE status within 30 days. In this condition, the remaining OPERABLE pumps provide adequate core cooling during a LOCA.However, overall LPCI reliability is reduced, because a single failure inone of the remaining OPERABLE LPCI subsystems, concurrent with aLOCA, may result in the LPCI subsystems not being able to perform theirintended safety function.
The 7 day Completion Time is based on a reliability study (Ref. 11) that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowed outage times (i.e., Completion Times).D. 1 If two LPCI subsystems are inoperable for reasons other than Condition C or G, one inoperable subsystem must be restored to OPERABLE status within 72 hours. In this condition, the remaining OPERABLE CS subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced, because a single failure in one of the remaining CS subsystems, concurrent with a LOCA, may result in ECCS not being able to perform its intended safety function.
The 30 day Completion Time is based on areliability study cited in Reference 11 that evaluated the impact on ECCSavailability, assuming various components and subsystems were takenout of service.
The 72 hour Completion Time is based on a reliability study cited in Reference 11 that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service; and on previous BWR licensing precedents, and was approved for Monticello by Amendment Monticello B 3.5.1-7 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued) 162 (Reference 14). The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowable repair times (i.e., Completion Times).E.1, E.2 and E.3 If any one low pressure CS subsystem is inoperable in addition to either one LPCI subsystem OR one or two LPCI pump(s), adequate core cooling is ensured by the OPERABILITY of HPCI and the remaining low pressure ECCS subsystems.
The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA asa function of allowable repair times (i.e., Completion Times).Monticello B 3.5.1-6 Revision No. 34Monticello B 3.5.1-6Revision No. 34 ECCS -Operating 3.5.1BASESACTIONS (continued)
This condition results in a complement of remaining OPERABLE low pressure ECCS (i.e., one CS and either two or three LPCI pumps) whose makeup capacity is bounded by the minimum makeup capacity evaluated in the accident analysis, which assumes the limiting single component failure (Reference 10). However, overall ECCS reliability is reduced, because a single active component failure in the remaining low pressure ECCS, concurrent with a design basis LOCA, could result in the minimum required ECCS equipment not being available.
B. 1If a LPCI subsystem is inoperable for reasons other than Condition A, or aCS subsystem is inoperable, the inoperable low pressure injection/spray subsystem must be restored to OPERABLE status within 7 days. In thiscondition, the remaining OPERABLE subsystems provide adequate corecooling during a LOCA. However, overall ECCS reliability is reduced,because a single failure in one of the remaining OPERABLE subsystems, concurrent with a LOCA, may result in the ECCS not being able toperform its intended safety function.
Since both a CS subsystem is inoperable and a reduction in the makeup capability of the LPCI System has occurred, a more restrictive Completion Time of 72 hours is required to restore either a CS subsystem or, either a LPCI subsystem OR the LPCI pump(s) to OPERABLE status. The Completion Time was developed using engineering judgment based on a reliability study cited in Reference 11, previous BWR licensing precedents, and approved for Monticello by Amendment 162 (Reference 14). This Completion Time has been found to be acceptable through operating experience.
The 7 day Completion Time is basedon a reliability study (Ref. 11) that evaluated the impact on ECCSavailability, assuming various components and subsystems were takenout of service.
Monticello B 3.5.1-8 Revision No. 34 Monticello B 3.5.1-8 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)
The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA asa function of allowed outage times (i.e., Completion Times).C._1If one LPCI pump in each subsystem is inoperable, one inoperable LPCIpump must be restored to OPERABLE status within 7 days. In thiscondition, the remaining OPERABLE ECCS subsystems provideadequate core cooling during a LOCA. However, overall ECCS reliability is reduced because a single failure in one of the remaining OPERABLEECCS subsystems, concurrent with a LOCA, may result in the ECCS notbeing able to perform its intended safety function.
F.1 and F.2 If any Required Action and associated Completion Time of Condition A, B, C, D, or E is not met, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and to MODE 4 within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.G.1 If two LPCI subsystems are inoperable due to open RHR intertie return line isolation valve(s), the RHR intertie line must be isolated within 18 hours. The line can be isolated by closing both RHR intertie return line isolation valves or by closing one RHR intertie return line isolation valve and the RHR intertie suction line isolation valve. The 18 hour Completion Time is reasonable, considered the low probability of a DBA occurring during this period.H._1 If the Required Action and associated Completion Time of Condition G is not met, the plant must be brought to a MODE in which the RHR intertie return line isolation valves are not required to be closed. To achieve this status, the plant must be brought to at least MODE 2 within 6 hours. The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.1.1 and 1.2 If the HPCI System is inoperable and the RCIC System is verified to be OPERABLE, the HPCI System must be restored to OPERABLE status within 14 days. In this condition, adequate core cooling is ensured by the OPERABILITY of the redundant and diverse low pressure ECCS injection/spray subsystems in conjunction with ADS. Also, the RCIC System will automatically provide makeup water at most reactor operating pressures.
The 7 day Completion Time is based on a reliability study (Ref. 11) that evaluated the impact onECCS availability, assuming various components and subsystems weretaken out of service.
Verification of RCIC OPERABILITY is therefore required immediately when HPCI is inoperable.
The results were used to calculate the averageavailability of ECCS equipment needed to mitigate the consequences of aLOCA as a function of allowed outage times (i.e., Completion Times).D. 1If two LPCI subsystems are inoperable for reasons other than Condition Cor G, one inoperable subsystem must be restored to OPERABLE statuswithin 72 hours. In this condition, the remaining OPERABLECS subsystems provide adequate core cooling during a LOCA. However,overall ECCS reliability is reduced, because a single failure in one of theremaining CS subsystems, concurrent with a LOCA, may result in ECCSnot being able to perform its intended safety function.
This may be performed as an administrative check by examining logs or other information to determine Monticello B 3.5.1-9 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued) if RCIC is out of service for maintenance or other reasons. It does not mean to perform the Surveillances needed to demonstrate the OPERABILITY of the RCIC System. If the OPERABILITY of the RCIC System cannot be immediately verified, however, Condition M must be entered. In the event of component failures concurrent with a design basis LOCA, there is a potential, depending on the specific failures, that the minimum required ECCS equipment will not be available.
The 72 hourCompletion Time is based on a reliability study cited in Reference 11 thatevaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service; and on previous BWRlicensing precedents, and was approved for Monticello by Amendment Monticello B 3.5.1-7Revision No. 34 ECCS -Operating 3.5.1BASESACTIONS (continued) 162 (Reference 14). The results were used to calculate the averageavailability of ECCS equipment needed to mitigate the consequences of aLOCA as a function of allowable repair times (i.e., Completion Times).E.1, E.2 and E.3If any one low pressure CS subsystem is inoperable in addition to eitherone LPCI subsystem OR one or two LPCI pump(s),
A 14 day Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.
adequate corecooling is ensured by the OPERABILITY of HPCI and the remaining lowpressure ECCS subsystems.
J.1 and J.2 If any one low pressure ECCS injection/spray subsystem, or one LPCI pump in both LPCI subsystems, is inoperable in addition to an inoperable HPCI System, the inoperable low pressure ECCS injection/spray subsystem(s) or the HPCI System must be restored to OPERABLE status within 72 hours. In this condition, adequate core cooling is ensured by the OPERABILITY of the ADS and the remaining low pressure ECCS subsystems.
This condition results in a complement ofremaining OPERABLE low pressure ECCS (i.e., one CS and either two orthree LPCI pumps) whose makeup capacity is bounded by the minimummakeup capacity evaluated in the accident  
However, the overall ECCS reliability is significantly reduced because a single failure in one of the remaining OPERABLE subsystems concurrent with a design basis LOCA may result in the ECCS not being able to perform its intended safety function.
: analysis, which assumes thelimiting single component failure (Reference 10). However, overall ECCSreliability is reduced, because a single active component failure in theremaining low pressure ECCS, concurrent with a design basis LOCA,could result in the minimum required ECCS equipment not beingavailable.
Since both a high pressure system (HPCI) and a low pressure subsystem(s) are inoperable, a more restrictive Completion Time of 72 hours is required to restore either the HPCI System or the low pressure ECCS injection/spray subsystem(s) to OPERABLE status. This Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.
Since both a CS subsystem is inoperable and a reduction inthe makeup capability of the LPCI System has occurred, a morerestrictive Completion Time of 72 hours is required to restore either aCS subsystem or, either a LPCI subsystem OR the LPCI pump(s) toOPERABLE status. The Completion Time was developed usingengineering judgment based on a reliability study cited in Reference 11,previous BWR licensing precedents, and approved for Monticello byAmendment 162 (Reference 14). This Completion Time has been foundto be acceptable through operating experience.
K. 1 The LCO requires three ADS valves to be OPERABLE in order to provide the ADS function.
Monticello B 3.5.1-8 Revision No. 34Monticello B 3.5.1-8Revision No. 34 ECCS -Operating 3.5.1BASESACTIONS (continued)
Reference 12 contains the results of an analysis that evaluated the effect of one ADS valve being out of service. Per this analysis, operation of only two ADS valves will provide the required depressurization.
F.1 and F.2If any Required Action and associated Completion Time of Condition A,B, C, D, or E is not met, the plant must be brought to a MODE in whichthe LCO does not apply. To achieve this status, the plant must bebrought to at least MODE 3 within 12 hours and to MODE 4 within36 hours. The allowed Completion Times are reasonable, based onoperating experience, to reach the required plant conditions from fullpower conditions in an orderly manner and without challenging plantsystems.G.1If two LPCI subsystems are inoperable due to open RHR intertie returnline isolation valve(s),
However, overall reliability of the ADS is reduced, because a single failure in the OPERABLE ADS valves could result in a reduction in depressurization capability.
the RHR intertie line must be isolated within18 hours. The line can be isolated by closing both RHR intertie return lineisolation valves or by closing one RHR intertie return line isolation valveand the RHR intertie suction line isolation valve. The 18 hour Completion Time is reasonable, considered the low probability of a DBA occurring during this period.H._1If the Required Action and associated Completion Time of Condition G isnot met, the plant must be brought to a MODE in which the RHR intertiereturn line isolation valves are not required to be closed. To achieve thisstatus, the plant must be brought to at least MODE 2 within 6 hours. Theallowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in anorderly manner and without challenging plant systems.1.1 and 1.2If the HPCI System is inoperable and the RCIC System is verified to beOPERABLE, the HPCI System must be restored to OPERABLE statuswithin 14 days. In this condition, adequate core cooling is ensured by theOPERABILITY of the redundant and diverse low pressure ECCSinjection/spray subsystems in conjunction with ADS. Also, the RCICSystem will automatically provide makeup water at most reactor operating pressures.
Therefore, operation is only allowed for a limited time. The 14 day Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.
Verification of RCIC OPERABILITY is therefore requiredimmediately when HPCI is inoperable.
Monticello B 3.5.1-10 Revision No. 34 Monticello B 3.5.1-10 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)
This may be performed as anadministrative check by examining logs or other information to determine Monticello B 3.5.1-9Revision No. 34 ECCS -Operating 3.5.1BASESACTIONS (continued) if RCIC is out of service for maintenance or other reasons.
L.1 and L.2 If any Required Action and associated Completion Time of Condition I, J, or K is not met, or if one ADS valve is inoperable and Condition A, B, C, D, or G are entered, or if two or more ADS valves are inoperable, or if the HPCI System is inoperable and Condition D, E, or G are entered, then the plant must be brought to a condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and reactor steam dome pressure reduced to < 150 psig within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.M._ 1 If two or more low pressure ECCS injection/spray systems are inoperable for reasons other than Conditions C, D, E, or G, the plant is in a degraded condition not specifically justified for continued operation, and may be in a condition outside of the accident analyses.
It does notmean to perform the Surveillances needed to demonstrate theOPERABILITY of the RCIC System. If the OPERABILITY of the RCICSystem cannot be immediately  
Therefore, LCO 3.0.3 must be entered immediately.
: verified, however, Condition M must beentered.
For some cases, per the single failure assumptions of the accident analysis the plant may not be in an unanalyzed condition (Ref. 10) but the allowable duration for operation in the condition has not been justified, therefore LCO 3.0.3 must be entered immediately.
In the event of component failures concurrent with a designbasis LOCA, there is a potential, depending on the specific  
Monticello B 3.5.1-11 Revision No. 34 Monticello B 3.5.1-11 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE SR 3.5.1.1 REQUIREMENTS The flow path piping has the potential to develop voids and pockets of entrained air. Maintaining the pump discharge lines of the CS System and LPCI subsystems full of water ensures that the ECCS will perform properly, injecting its full capacity into the RCS upon demand. This will also prevent a water hammer following an ECCS initiation signal. One acceptable method of ensuring that the lines are full is to vent at the high points. While the potential for developing voids in the HPCI System exists, the effects of a void have been analyzed and shown to be acceptable.
: failures, thatthe minimum required ECCS equipment will not be available.
The 31 day Frequency is based on the gradual nature of void buildup in the ECCS piping, the procedural controls governing system operation, and operating experience.
A 14 dayCompletion Time is based on a reliability study cited in Reference 11 andhas been found to be acceptable through operating experience.
SR 3.5.1.2 Verifying the correct alignment for manual, power operated, and automatic valves in the ECCS flow paths provides assurance that the proper flow paths will exist for ECCS operation.
J.1 and J.2If any one low pressure ECCS injection/spray subsystem, or one LPCIpump in both LPCI subsystems, is inoperable in addition to an inoperable HPCI System, the inoperable low pressure ECCS injection/spray subsystem(s) or the HPCI System must be restored to OPERABLE statuswithin 72 hours. In this condition, adequate core cooling is ensured bythe OPERABILITY of the ADS and the remaining low pressure ECCSsubsystems.  
This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these were verified to be in the correct position prior to locking, sealing, or securing.
: However, the overall ECCS reliability is significantly reduced because a single failure in one of the remaining OPERABLEsubsystems concurrent with a design basis LOCA may result in the ECCSnot being able to perform its intended safety function.
A valve that receives an initiation signal is allowed to be in a nonaccident position provided the valve will automatically reposition in the proper stroke time. This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of potentially being mispositioned are in the correct position.
Since both a highpressure system (HPCI) and a low pressure subsystem(s) are inoperable, a more restrictive Completion Time of 72 hours is required to restoreeither the HPCI System or the low pressure ECCS injection/spray subsystem(s) to OPERABLE status. This Completion Time is based on areliability study cited in Reference 11 and has been found to beacceptable through operating experience.
This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves. For the HPCI System, this SR also includes the steam flow path for the turbine and the flow controller position.The 31 day Frequency of this SR was derived from the Inservice Testing Program requirements for performing valve testing at least once every 92 days. The Frequency of 31 days is further justified because the valves are operated under procedural control and because improper valve position would only affect a single subsystem.
K. 1The LCO requires three ADS valves to be OPERABLE in order to providethe ADS function.
This Frequency has been shown to be acceptable through operating experience.
Reference 12 contains the results of an analysis thatevaluated the effect of one ADS valve being out of service.
SR 3.5.1.3 Verification every 31 days that each ADS pneumatic pressure is within the analysis limits (S/RV Accumulator Bank header pressure >_ 88.3 psig and Alternate Nitrogen System supply (ALT N2 TRAIN A (or B) SUPPLY)pressure _ 410 psig (Ref. 13)) ensures adequate pressure for reliable ADS operation.
Per thisanalysis, operation of only two ADS valves will provide the requireddepressurization.  
The supply associated with each ADS valve provides pneumatic pressure for valve-actuation.
: However, overall reliability of the ADS is reduced,because a single failure in the OPERABLE ADS valves could result in areduction in depressurization capability.
The design pneumatic supply pressure requirements for the S/RV accumulator bank and Alternate Monticello B 3.5.1-12 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)
Therefore, operation is onlyallowed for a limited time. The 14 day Completion Time is based on areliability study cited in Reference 11 and has been found to beacceptable through operating experience.
Nitrogen System trains (replaceable gas cylinders) are such that, following a failure of the pneumatic supply to them, at least five valve actuations can occur over a ten hour period (Ref. 10). The ECCS safety analysis assumes only one actuation to achieve the depressurization required for operation of the low pressure ECCS. The 31 day Frequency takes into consideration administrative controls over operation of the system and alarms for low pressure.Each Alternate Nitrogen System is designed for the three upstream nitrogen bottles to maintain OPERABILITY while the fourth, downstream, bottle is being replaced with a fully charged bottle. During bottle changeout the capacity of the system is temporarily reduced. This is acceptable based on the remaining capacity (only one actuation is necessary to depressurize), the low rate of usage, the fact that procedures have been initiated for replenishment, and the low probability of an event during this brief period.SR 3.5.1.4 Verification every 31 days that the RHR System intertie return line isolation valves are closed ensures that each LPCI subsystem will provide the required flow rate to the reactor pressure vessel. The 31 day Frequency has been found acceptable, considering that these valves are under strict administrative controls that will ensure the valves continue to remain closed.The SR is modified by a Note stating that the SR is only required to be met in MODE 1. During MODE 1 operations with the RHR System intertie line isolation valves open, some of the LPCI flow may be diverted to the broken recirculation loop during a LOCA, potentially resulting in early transition boiling. In other MODES, the intertie line may be opened because the impact on the LOCA analyses is negligible.
Monticello B 3.5.1-10 Revision No. 34Monticello B 3.5.1-10Revision No. 34 ECCS -Operating 3.5.1BASESACTIONS (continued)
SR 3.5.1.5 Verification of correct breaker alignment to the LPCI swing bus demonstrates that the normal AC electrical power source is powering the swing bus and the backup AC electrical power source is available to ensure proper operation of the LPCI injection valves and the recirculation pump discharge valves. If either the normal source is not powering the LPCI swing bus or the backup source is not available to the LPCI swing bus, one of the LPCI subsystems must be considered inoperable.
L.1 and L.2If any Required Action and associated Completion Time of Condition I, J,or K is not met, or if one ADS valve is inoperable and Condition A, B, C,D, or G are entered, or if two or more ADS valves are inoperable, or if theHPCI System is inoperable and Condition D, E, or G are entered, then theplant must be brought to a condition in which the LCO does not apply. Toachieve this status, the plant must be brought to at least MODE 3 within12 hours and reactor steam dome pressure reduced to < 150 psig within36 hours. The allowed Completion Times are reasonable, based onoperating experience, to reach the required plant conditions from fullpower conditions in an orderly manner and without challenging plantsystems.M._ 1If two or more low pressure ECCS injection/spray systems are inoperable for reasons other than Conditions C, D, E, or G, the plant is in a degradedcondition not specifically justified for continued operation, and may be in acondition outside of the accident analyses.
The 31 day Frequency has been found acceptable based on engineering judgment and operating experience.
Therefore, LCO 3.0.3 must beentered immediately.
Monticello B 3.5.1-13 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)
For some cases, per the single failure assumptions of the accidentanalysis the plant may not be in an unanalyzed condition (Ref. 10) but theallowable duration for operation in the condition has not been justified, therefore LCO 3.0.3 must be entered immediately.
SR 3.5.1.6 Cycling the recirculation pump discharge valves through one complete cycle of full travel demonstrates that the valves are mechanically OPERABLE and will close when required.
Monticello B 3.5.1-11 Revision No. 34Monticello B 3.5.1-11Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE SR 3.5.1.1REQUIREMENTS The flow path piping has the potential to develop voids and pockets ofentrained air. Maintaining the pump discharge lines of the CS Systemand LPCI subsystems full of water ensures that the ECCS will performproperly, injecting its full capacity into the RCS upon demand. This willalso prevent a water hammer following an ECCS initiation signal. Oneacceptable method of ensuring that the lines are full is to vent at the highpoints. While the potential for developing voids in the HPCI Systemexists, the effects of a void have been analyzed and shown to beacceptable.
Upon initiation of an automatic LPCI subsystem injection signal, these valves are required to be closed to ensure full LPCI subsystem flow injection in the reactor via the recirculation jet pumps. De-energizing the valve in the closed position will also ensure the proper flow path for the LPCI subsystem.
The 31 day Frequency is based on the gradual nature of voidbuildup in the ECCS piping, the procedural controls governing systemoperation, and operating experience.
Acceptable methods of de-energizing the valve include de-energizing breaker control power, racking out the breaker or removing the breaker.The Frequency of this SR is in accordance with the Inservice Testing Program. If any recirculation pump discharge valve is inoperable and in the open position, both LPCI subsystems must be declared inoperable.
SR 3.5.1.2Verifying the correct alignment for manual, power operated, andautomatic valves in the ECCS flow paths provides assurance that theproper flow paths will exist for ECCS operation.
SR 3.5.1.7, SR 3.5.1.8, and SR 3.5.1.9 The performance requirements of the low pressure ECCS pumps are determined through application of the 10 CFR 50, Appendix K criteria (Ref. 7). This periodic Surveillance is performed (in accordance with the ASME Operation and Maintenance (OM) Code requirements for the ECCS pumps) to verify that the ECCS pumps will develop the flow rates required by the respective analyses.
This SR does not applyto valves that are locked, sealed, or otherwise secured in position sincethese were verified to be in the correct position prior to locking,  
The low pressure ECCS pump flow rates ensure that adequate core cooling is provided to satisfy the acceptance criteria of Reference  
: sealing, orsecuring.
: 9. The pump flow rates are verified against a system head equivalent to the reactor to containment pressure expected during a LOCA. In addition, for LPCI the system head for the tested pump must include a head correction that corresponds to two LPCI pumps delivering 7,740 gpm. The total system pump outlet pressure is adequate to overcome the elevation head pressure between the pump suction and the vessel discharge, the piping friction losses, and RPV pressure present during a LOCA. These values are established analytically.
A valve that receives an initiation signal is allowed to be in anonaccident position provided the valve will automatically reposition in theproper stroke time. This SR does not require any testing or valvemanipulation; rather, it involves verification that those valves capable ofpotentially being mispositioned are in the correct position.
The flow tests for the HPCI System are performed at two different pressure ranges such that system capability to provide rated flow against a system head corresponding to reactor pressure is tested at both the higher and lower operating ranges of the system. The required system head should overcome the RPV pressure and associated discharge line losses. Adequate reactor steam pressure must be available to perform the tests. Additionally, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the HPCI System diverts steam flow. Therefore, sufficient time is allowed after adequate pressure and flow are achieved to perform Monticello B 3.5.1-14 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) these tests. Reactor steam pressure must be > 950 psig to perform SR 3.5.1.8 and > 150 psig to perform SR 3.5.1.9. Adequate steam flow is represented by at least one turbine bypass valve 80% open. Reactor startup is allowed prior to performing the low pressure Surveillance test because the reactor pressure is low and the time allowed to satisfactorily perform the Surveillance test is short. The reactor pressure is allowed to be increased to normal operating pressure since it is assumed that the low pressure test has been satisfactorily completed and there is no indication or reason to believe that HPCI is inoperable.
This SR doesnot apply to valves that cannot be inadvertently misaligned, such ascheck valves. For the HPCI System, this SR also includes the steam flowpath for the turbine and the flow controller position.
Therefore, SR 3.5.1.8 and SR 3.5.1.9 are modified by Notes that state the Surveillances are not required to be performed until 12 hours after the reactor steam pressure and flow are adequate to perform the test. The 12 hours allowed for performing the flow test after the required pressure and flow are reached is sufficient to achieve stable conditions for testing and provides reasonable time to complete the SRs. The Frequency for SR 3.5.1.7 and SR 3.5.1.8 is in accordance with the Inservice Testing Program requirements.
The 31 day Frequency of this SR was derived from the Inservice TestingProgram requirements for performing valve testing at least once every92 days. The Frequency of 31 days is further justified because the valvesare operated under procedural control and because improper valveposition would only affect a single subsystem.
The 24 month Frequency for SR 3.5.1.9 is based on the need to perform the Surveillance under the conditions that apply during a startup from a plant outage. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
This Frequency has beenshown to be acceptable through operating experience.
SR 3.5.1.10 The ECCS subsystems are required to actuate automatically to perform their design functions.
SR 3.5.1.3Verification every 31 days that each ADS pneumatic pressure is withinthe analysis limits (S/RV Accumulator Bank header pressure  
This Surveillance verifies that, with a required system initiation signal (actual or simulated), the automatic initiation logic of HPCI, CS, and LPCI will cause the systems or subsystems to operate as designed, including actuation of the system throughout its emergency operating sequence, automatic pump startup and actuation of all automatic valves to their required positions.
>_ 88.3 psigand Alternate Nitrogen System supply (ALT N2 TRAIN A (or B) SUPPLY)pressure
This SR also ensures that the HPCI System will automatically restart on a Reactor Vessel Water Level -Low Low signal received subsequent to a Reactor Vessel Water Level -High trip and that the suction is automatically transferred from the CSTs to the suppression pool on a Suppression Pool Water Level -High or Condensate Storage Tank Level -Low signal. The LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1 overlaps this Surveillance to provide complete testing of the assumed safety function.Monticello B 3.5.1-15 Revision No. 34 Monticello B 3.5.1-15 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)
_ 410 psig (Ref. 13)) ensures adequate pressure for reliableADS operation.
The 24 month Frequency is based on the need to perform the Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
The supply associated with each ADS valve providespneumatic pressure for valve-actuation.
This SR is modified by a Note that excludes vessel injection/spray during the Surveillance.
The design pneumatic supplypressure requirements for the S/RV accumulator bank and Alternate Monticello B 3.5.1-12Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued)
Since all active components are testable and full flow can be demonstrated by recirculation through the test line, coolant injection into the RPV is not required during the Surveillance.
Nitrogen System trains (replaceable gas cylinders) are such that,following a failure of the pneumatic supply to them, at least five valveactuations can occur over a ten hour period (Ref. 10). The ECCS safetyanalysis assumes only one actuation to achieve the depressurization required for operation of the low pressure ECCS. The 31 day Frequency takes into consideration administrative controls over operation of thesystem and alarms for low pressure.
SR 3.5.1.11 The ADS designated S/RVs are required to actuate automatically upon receipt of specific initiation signals. A system functional test is performed to demonstrate that the mechanical portions of the ADS function (i.e., solenoids) operate as designed when initiated either by an actual or simulated initiation signal, causing proper actuation of all the required components.
Each Alternate Nitrogen System is designed for the three upstreamnitrogen bottles to maintain OPERABILITY while the fourth, downstream, bottle is being replaced with a fully charged bottle. During bottlechangeout the capacity of the system is temporarily reduced.
SR 3.5.1.12 and the LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1 overlap this Surveillance to provide complete testing of the assumed safety function.The 24 month Frequency is based on the need to perform the Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
This isacceptable based on the remaining capacity (only one actuation isnecessary to depressurize),
This SR is modified by a Note that excludes valve actuation since the valves are individually tested in accordance with SR 3.5.1.12.SR 3.5.1.12 This Surveillance verifies that each ADS valve is capable of being opened, which can be determined by either of two means, i.e., Method 1 or Method 2. Applying Method 1, approved in Reference 15, valve OPERABILITY and setpoints for overpressure protection are verified in Monticello B 3.5.1-16 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) accordance with the ASME OM Code. Applying Method 2, a manual actuation of the ADS valve is performed to verify the valve is functioning properly.Method 1 Valve OPERABILITY and setpoints for overpressure protection are verified in accordance with the requirements of the ASME OM Code (Ref. 16). Proper ADS valve function is verified through performance of inspections and overlapping tests on component assemblies, demonstrating the valve is capable of being opened. Testing is performed to demonstrate that each:* ADS S/RV main stage opens and passes steam when the associated pilot stage actuates; and* ADS S/RV second stage actuates to open the associated main stage when the pneumatic actuator is pressurized;
the low rate of usage, the fact thatprocedures have been initiated for replenishment, and the low probability of an event during this brief period.SR 3.5.1.4Verification every 31 days that the RHR System intertie return lineisolation valves are closed ensures that each LPCI subsystem will providethe required flow rate to the reactor pressure vessel. The 31 dayFrequency has been found acceptable, considering that these valves areunder strict administrative controls that will ensure the valves continue toremain closed.The SR is modified by a Note stating that the SR is only required to bemet in MODE 1. During MODE 1 operations with the RHR Systemintertie line isolation valves open, some of the LPCI flow may be divertedto the broken recirculation loop during a LOCA, potentially resulting inearly transition boiling.
* ADS S/RV solenoid valve ports pneumatic pressure to the associated S/RV actuator when energized;" ADS S/RV actuator stem moves when dry lift tested in-situ.(With exception of main and pilot stages this test demonstrates mechanical operation without steam.)The solenoid valves and S/RV actuators are functionally tested once per cycle as part of the Inservice Testing Program. The S/RV assembly is bench tested as part of the certification process, at intervals determined in accordance with the Inservice Testing Program. Maintenance procedures ensure that the S/RV is correctly installed in the plant, and that the S/RV and associated piping remain clear of foreign material that might obstruct valve operation or full steam flow.This methodology provides adequate assurance that the ADS valves will operate when actuated, while minimizing the challenges to the valves and the likelihood of leakage or spurious operation.
In other MODES, the intertie line may be openedbecause the impact on the LOCA analyses is negligible.
Method 2 A manual actuation of each ADS valve is performed to verify that the valve and solenoid are functioning properly and that no blockage exists in the S/RV discharge lines. This is demonstrated by the response of the turbine bypass valves, by a change in the measured flow, or by any other method suitable to verify steam flow. Adequate steam flow must be Monticello B 3.5.1-17 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) passing through the turbine bypass valves to continue to control reactor pressure when the ADS valves divert steam flow upon opening.Sufficient time is therefore allowed after the required flow is achieved to perform this SR. Adequate steam flow is represented by at least one turbine bypass valve 80% open. This SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours after reactor steam flow is adequate to perform the test. Reactor startup is allowed prior to performing this SR because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME requirements, prior to valve installation.
SR 3.5.1.5Verification of correct breaker alignment to the LPCI swing busdemonstrates that the normal AC electrical power source is powering theswing bus and the backup AC electrical power source is available toensure proper operation of the LPCI injection valves and the recirculation pump discharge valves. If either the normal source is not powering theLPCI swing bus or the backup source is not available to the LPCI swingbus, one of the LPCI subsystems must be considered inoperable.
The 12 hours allowed for manual actuation after the required flow is reached is sufficient to achieve stable conditions and provides adequate time to complete the Surveillance.
The31 day Frequency has been found acceptable based on engineering judgment and operating experience.
SR 3.5.1.11 and the LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1, "ECCS Instrumentation," overlap this Surveillance to provide complete testing of the assumed safety function.The Frequency of "In accordance with the Inservice Testing Program" is based on ASME OM Code requirements.
Monticello B 3.5.1-13Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued)
SR 3.5.1.6Cycling the recirculation pump discharge valves through one completecycle of full travel demonstrates that the valves are mechanically OPERABLE and will close when required.
Upon initiation of an automatic LPCI subsystem injection signal, these valves are required to be closed toensure full LPCI subsystem flow injection in the reactor via therecirculation jet pumps. De-energizing the valve in the closed position willalso ensure the proper flow path for the LPCI subsystem.
Acceptable methods of de-energizing the valve include de-energizing breaker controlpower, racking out the breaker or removing the breaker.The Frequency of this SR is in accordance with the Inservice TestingProgram.
If any recirculation pump discharge valve is inoperable and inthe open position, both LPCI subsystems must be declared inoperable.
SR 3.5.1.7, SR 3.5.1.8, and SR 3.5.1.9The performance requirements of the low pressure ECCS pumps aredetermined through application of the 10 CFR 50, Appendix K criteria(Ref. 7). This periodic Surveillance is performed (in accordance with theASME Operation and Maintenance (OM) Code requirements for theECCS pumps) to verify that the ECCS pumps will develop the flow ratesrequired by the respective analyses.
The low pressure ECCS pump flowrates ensure that adequate core cooling is provided to satisfy theacceptance criteria of Reference  
: 9. The pump flow rates are verifiedagainst a system head equivalent to the reactor to containment pressureexpected during a LOCA. In addition, for LPCI the system head for thetested pump must include a head correction that corresponds to two LPCIpumps delivering 7,740 gpm. The total system pump outlet pressure isadequate to overcome the elevation head pressure between the pumpsuction and the vessel discharge, the piping friction losses, and RPVpressure present during a LOCA. These values are established analytically.
The flow tests for the HPCI System are performed at two different pressure ranges such that system capability to provide rated flow againsta system head corresponding to reactor pressure is tested at both thehigher and lower operating ranges of the system. The required systemhead should overcome the RPV pressure and associated discharge linelosses. Adequate reactor steam pressure must be available to performthe tests. Additionally, adequate steam flow must be passing through themain turbine or turbine bypass valves to continue to control reactorpressure when the HPCI System diverts steam flow. Therefore, sufficient time is allowed after adequate pressure and flow are achieved to performMonticello B 3.5.1-14Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued) these tests. Reactor steam pressure must be > 950 psig to performSR 3.5.1.8 and > 150 psig to perform SR 3.5.1.9.
Adequate steam flow isrepresented by at least one turbine bypass valve 80% open. Reactorstartup is allowed prior to performing the low pressure Surveillance testbecause the reactor pressure is low and the time allowed to satisfactorily perform the Surveillance test is short. The reactor pressure is allowed tobe increased to normal operating pressure since it is assumed that thelow pressure test has been satisfactorily completed and there is noindication or reason to believe that HPCI is inoperable.
Therefore, SR 3.5.1.8 and SR 3.5.1.9 are modified by Notes that state theSurveillances are not required to be performed until 12 hours after thereactor steam pressure and flow are adequate to perform the test. The12 hours allowed for performing the flow test after the required pressureand flow are reached is sufficient to achieve stable conditions for testingand provides reasonable time to complete the SRs. The Frequency forSR 3.5.1.7 and SR 3.5.1.8 is in accordance with the Inservice TestingProgram requirements.
The 24 month Frequency for SR 3.5.1.9 is basedon the need to perform the Surveillance under the conditions that applyduring a startup from a plant outage. Operating experience has shownthat these components usually pass the SR when performed at the24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
SR 3.5.1.10The ECCS subsystems are required to actuate automatically to performtheir design functions.
This Surveillance verifies that, with a requiredsystem initiation signal (actual or simulated),
the automatic initiation logicof HPCI, CS, and LPCI will cause the systems or subsystems to operateas designed, including actuation of the system throughout its emergency operating  
: sequence, automatic pump startup and actuation of allautomatic valves to their required positions.
This SR also ensures thatthe HPCI System will automatically restart on a Reactor Vessel WaterLevel -Low Low signal received subsequent to a Reactor Vessel WaterLevel -High trip and that the suction is automatically transferred from theCSTs to the suppression pool on a Suppression Pool Water Level -Highor Condensate Storage Tank Level -Low signal. The LOGIC SYSTEMFUNCTIONAL TEST performed in LCO 3.3.5.1 overlaps this Surveillance to provide complete testing of the assumed safety function.
Monticello B 3.5.1-15 Revision No. 34Monticello B 3.5.1-15Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued)
The 24 month Frequency is based on the need to perform theSurveillance under the conditions that apply during a plant outage and thepotential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass theSR when performed at the 24 month Frequency, which is based on therefueling cycle. Therefore, the Frequency was concluded to beacceptable from a reliability standpoint.
This SR is modified by a Note that excludes vessel injection/spray duringthe Surveillance.
Since all active components are testable and full flowcan be demonstrated by recirculation through the test line, coolantinjection into the RPV is not required during the Surveillance.
SR 3.5.1.11The ADS designated S/RVs are required to actuate automatically uponreceipt of specific initiation signals.
A system functional test is performed to demonstrate that the mechanical portions of the ADS function (i.e.,solenoids) operate as designed when initiated either by an actual orsimulated initiation signal, causing proper actuation of all the requiredcomponents.
SR 3.5.1.12 and the LOGIC SYSTEM FUNCTIONAL TESTperformed in LCO 3.3.5.1 overlap this Surveillance to provide completetesting of the assumed safety function.
The 24 month Frequency is based on the need to perform theSurveillance under the conditions that apply during a plant outage and thepotential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown that thesecomponents usually pass the SR when performed at the 24 monthFrequency, which is based on the refueling cycle. Therefore, theFrequency was concluded to be acceptable from a reliability standpoint.
This SR is modified by a Note that excludes valve actuation since thevalves are individually tested in accordance with SR 3.5.1.12.
SR 3.5.1.12This Surveillance verifies that each ADS valve is capable of beingopened, which can be determined by either of two means, i.e., Method 1or Method 2. Applying Method 1, approved in Reference 15, valveOPERABILITY and setpoints for overpressure protection are verified inMonticello B 3.5.1-16Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued) accordance with the ASME OM Code. Applying Method 2, a manualactuation of the ADS valve is performed to verify the valve is functioning properly.
Method 1Valve OPERABILITY and setpoints for overpressure protection areverified in accordance with the requirements of the ASME OM Code(Ref. 16). Proper ADS valve function is verified through performance ofinspections and overlapping tests on component assemblies, demonstrating the valve is capable of being opened. Testing isperformed to demonstrate that each:* ADS S/RV main stage opens and passes steam when theassociated pilot stage actuates; and* ADS S/RV second stage actuates to open the associated mainstage when the pneumatic actuator is pressurized;
* ADS S/RV solenoid valve ports pneumatic pressure to theassociated S/RV actuator when energized;
" ADS S/RV actuator stem moves when dry lift tested in-situ.(With exception of main and pilot stages this test demonstrates mechanical operation without steam.)The solenoid valves and S/RV actuators are functionally tested once percycle as part of the Inservice Testing Program.
The S/RV assembly isbench tested as part of the certification  
: process, at intervals determined inaccordance with the Inservice Testing Program.
Maintenance procedures ensure that the S/RV is correctly installed in the plant, and that the S/RVand associated piping remain clear of foreign material that might obstructvalve operation or full steam flow.This methodology provides adequate assurance that the ADS valves willoperate when actuated, while minimizing the challenges to the valves andthe likelihood of leakage or spurious operation.
Method 2A manual actuation of each ADS valve is performed to verify that thevalve and solenoid are functioning properly and that no blockage exists inthe S/RV discharge lines. This is demonstrated by the response of theturbine bypass valves, by a change in the measured flow, or by any othermethod suitable to verify steam flow. Adequate steam flow must beMonticello B 3.5.1-17Revision No. 34 ECCS -Operating 3.5.1BASESSURVEILLANCE REQUIREMENTS (continued) passing through the turbine bypass valves to continue to control reactorpressure when the ADS valves divert steam flow upon opening.Sufficient time is therefore allowed after the required flow is achieved toperform this SR. Adequate steam flow is represented by at least oneturbine bypass valve 80% open. This SR is modified by a Note thatstates the Surveillance is not required to be performed until 12 hours afterreactor steam flow is adequate to perform the test. Reactor startup isallowed prior to performing this SR because valve OPERABILITY and thesetpoints for overpressure protection are verified, per ASMErequirements, prior to valve installation.
The 12 hours allowed for manualactuation after the required flow is reached is sufficient to achieve stableconditions and provides adequate time to complete the Surveillance.
SR 3.5.1.11 and the LOGIC SYSTEM FUNCTIONAL TEST performed inLCO 3.3.5.1, "ECCS Instrumentation,"
overlap this Surveillance to providecomplete testing of the assumed safety function.
The Frequency of "In accordance with the Inservice Testing Program" isbased on ASME OM Code requirements.
Industry operating experience has shown that these components usually pass the SR when performed at the Code required Frequency.
Industry operating experience has shown that these components usually pass the SR when performed at the Code required Frequency.
Therefore, the Frequency wasconcluded to be acceptable from a reliability standpoint.
Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
SR 3.5.1.13The LPCI System injection valves, recirculation pump discharge valves,recirculation pump suction valves, and the RHR discharge intertie lineisolation valves are powered from the LPCI swing bus, which must beenergized after a single failure, including loss of power from the normalsource to the swing bus. Therefore, the automatic transfer capability fromthe normal power source to the backup power source must be verified toensure the automatic capability to detect loss of normal power and initiatean automatic transfer to the swing bus backup power source. Verification of this capability every 24 months ensures that AC electrical power isavailable for proper operation of the associated LPCI injection valves,recirculation pump discharge valves, recirculation pump suction valves,and the RHR discharge intertie line isolation valves. The swing busautomatic transfer scheme must be OPERABLE for both LPCIsubsystems to be OPERABLE.
SR 3.5.1.13 The LPCI System injection valves, recirculation pump discharge valves, recirculation pump suction valves, and the RHR discharge intertie line isolation valves are powered from the LPCI swing bus, which must be energized after a single failure, including loss of power from the normal source to the swing bus. Therefore, the automatic transfer capability from the normal power source to the backup power source must be verified to ensure the automatic capability to detect loss of normal power and initiate an automatic transfer to the swing bus backup power source. Verification of this capability every 24 months ensures that AC electrical power is available for proper operation of the associated LPCI injection valves, recirculation pump discharge valves, recirculation pump suction valves, and the RHR discharge intertie line isolation valves. The swing bus automatic transfer scheme must be OPERABLE for both LPCI subsystems to be OPERABLE.
The Frequency of 24 months is based onthe need to perform the Surveillance under the conditions that applyduring a startup from a plant outage. Operating experience has shownthat the components usually pass the SR when performed at the 24month Frequency, which is based on the refueling cycle. Therefore, theFrequency was concluded to be acceptable from a reliability standpoint.
The Frequency of 24 months is based on the need to perform the Surveillance under the conditions that apply during a startup from a plant outage. Operating experience has shown that the components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
Monticello B 3.5.1-18Revision No. 34 ECCS -Operating 3.5.1BASESREFERENCES
Monticello B 3.5.1-18 Revision No. 34 ECCS -Operating 3.5.1 BASES REFERENCES
: 1. USAR, Section 6.2.2.2. USAR, Section 6.2.3.3. USAR, Section 6.2.4.4. USAR, Section 6.2.5.5. USAR, Section 14.7.2.6. USAR, Section 14.7.3.7. 10 CFR 50, Appendix K.8. USAR, Section 6.2.1.1.9. 10 CFR 50.46.10. USAR, Section 14.7.2.3.2.
: 1. USAR, Section 6.2.2.2. USAR, Section 6.2.3.3. USAR, Section 6.2.4.4. USAR, Section 6.2.5.5. USAR, Section 14.7.2.6. USAR, Section 14.7.3.7. 10 CFR 50, Appendix K.8. USAR, Section 6.2.1.1.9. 10 CFR 50.46.10. USAR, Section 14.7.2.3.2.
: 11. Memorandum from R.L. Baer (NRC) to V. Stello, Jr. (NRC),"Recommended Interim Revisions to LCOs for ECCS Components,"
: 11. Memorandum from R.L. Baer (NRC) to V. Stello, Jr. (NRC),"Recommended Interim Revisions to LCOs for ECCS Components," December 1, 1975.12.
December 1, 1975.12. USAR, Section 14.7.2.3.1.5.
: 13. Amendment No. 155
: 2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
: 2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
: 3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version.
: 3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version. Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. For Bases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 1 00a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 186 SLs 2.0 2.0 SAFETY LIMITS (SLs)2.1 SLs 2.1.1 Reactor Core SLs 2.1.1.1 With the reactor steam dome pressure < 686 psig or core flow< 10% rated core flow: THERMAL POWER shall be _< 25% RTP.2.1.1.2 With the reactor steam dome pressure _> 686 psig and core flow_ 10% rated core flow: MCPR shall be _> 1.15 for two recirculation loop operation or >_ 1.15 for single recirculation loop operation.
Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. ForBases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 1 00a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 186 SLs2.02.0 SAFETY LIMITS (SLs)2.1 SLs2.1.1 Reactor Core SLs2.1.1.1 With the reactor steam dome pressure  
2.1.1.3 Reactor vessel water level shall be greater than the top of active irradiated fuel.2.1.2 Reactor Coolant System Pressure SL Reactor steam dome pressure shall be _ 1332 psig.2.2 SL VIOLATIONS With any SL violation, the following actions shall be completed within 2 hours: 2.2.1 Restore compliance with all SLs; and 2.2.2 Insert all insertable control rods.Monticello 2.0-1 Amendment No. 185 ECCS -Operating 3.5.1 ACTIONS (continued)
< 686 psig or core flow< 10% rated core flow:THERMAL POWER shall be _< 25% RTP.2.1.1.2 With the reactor steam dome pressure
CONDITION REQUIRED ACTION COMPLETION TIME C. One LPCI pump in both C.1 Restore one LPCI pump to 7 days LPCI subsystems OPERABLE status.inoperable.
_> 686 psig and core flow_ 10% rated core flow:MCPR shall be _> 1.15 for two recirculation loop operation or >_ 1.15 forsingle recirculation loop operation.
D. Two LPCI subsystems D.1 Restore one LPCI 72 hours inoperable for reasons subsystem to OPERABLE other than Condition C status.or G.E. One Core Spray E.1 Restore Core Spray 72 hours subsystem inoperable, subsystem to OPERABLE status.AND OR One LPCI subsystem E.2 Restore LPCI subsystem to 72 hours inoperable.
2.1.1.3 Reactor vessel water level shall be greater than the top of activeirradiated fuel.2.1.2 Reactor Coolant System Pressure SLReactor steam dome pressure shall be _ 1332 psig.2.2 SL VIOLATIONS With any SL violation, the following actions shall be completed within 2 hours:2.2.1 Restore compliance with all SLs; and2.2.2 Insert all insertable control rods.Monticello 2.0-1Amendment No.
OPERABLE status.OR OR One or two LPCI E.3 Restore LPCI pump(s) to 72 hours pump(s) inoperable.
185 ECCS -Operating 3.5.1ACTIONS (continued)
OPERABLE status.F. Required Action and F.1 Be in MODE 3. 12 hours associated Completion Time of Condition A, B, AND C, D, or E not met.F.2 Be in MODE 4. 36 hours G. Two LPCI subsystems G.1 Isolate the RHR intertie 18 hours inoperable due to open line.RHR intertie return line isolation valve(s).Monticello 3.5.1-2 Amendment No. !46, !62, 184 ECCS -Operating 3.5.1 ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIMEC. One LPCI pump in both C.1 Restore one LPCI pump to 7 daysLPCI subsystems OPERABLE status.inoperable.
CONDITION REQUIRED ACTION COMPLETION TIME H. Required Action and H.1 Be in MODE 2. 6 hours associated Completion Time of Condition G not met.HPCI System 1.1 Verify by administrative Immediately inoperable, means RCIC System is OPERABLE.AND 1.2 Restore HPCI System to 14 days OPERABLE status.J. HPCI System J.1 Restore HPCI System to 72 hours inoperable.
D. Two LPCI subsystems D.1 Restore one LPCI 72 hoursinoperable for reasons subsystem to OPERABLEother than Condition C status.or G.E. One Core Spray E.1 Restore Core Spray 72 hourssubsystem inoperable, subsystem to OPERABLEstatus.AND OROne LPCI subsystem E.2 Restore LPCI subsystem to 72 hoursinoperable.
OPERABLE status.AND OR Condition A, B, or C J.2 Restore low pressure 72 hours entered. ECCS injection/spray subsystem(s) to OPERABLE status.K. One ADS valve K.1 Restore ADS valve to 14 days inoperable.
OPERABLE status.OR OROne or two LPCI E.3 Restore LPCI pump(s) to 72 hourspump(s) inoperable.
OPERABLE status.I I I Monticello 3.5.1-3 Amendment No. 146, 162, 17-6, 184 ECCS -Operating 3.5.1 ACTIONS (continued)
OPERABLE status.F. Required Action and F.1 Be in MODE 3. 12 hoursassociated Completion Time of Condition A, B, ANDC, D, or E not met.F.2 Be in MODE 4. 36 hoursG. Two LPCI subsystems G.1 Isolate the RHR intertie 18 hoursinoperable due to open line.RHR intertie return lineisolation valve(s).
CONDITION REQUIRED ACTION COMPLETION TIME L. Required Action and L.1 Be in MODE 3. 12 hours associated Completion Time of Condition I, J, AND or K not met.L.2 Reduce reactor steam 36 hours OR dome pressure to< 150 psig.One ADS valve inoperable and Condition A, B, C, D, or G entered.OR Two or more ADS valves inoperable.
Monticello 3.5.1-2Amendment No. !46, !62, 184 ECCS -Operating 3.5.1ACTIONS (continued)
OR HPCI System inoperable and Condition D, E, or G entered.M. Two or more low M.1 Enter LCO 3.0.3. Immediately pressure ECCS injection/spray subsystems inoperable for reasons other than Condition C, D, E, or G.OR HPCI System and one or more ADS valves inoperable.
CONDITION REQUIRED ACTION COMPLETION TIMEH. Required Action and H.1 Be in MODE 2. 6 hoursassociated Completion Time of Condition G notmet.HPCI System 1.1 Verify by administrative Immediately inoperable, means RCIC System isOPERABLE.
I Monticello 3.5.1-4 Amendment No. 146, 162, 176, 184}}
AND1.2 Restore HPCI System to 14 daysOPERABLE status.J. HPCI System J.1 Restore HPCI System to 72 hoursinoperable.
OPERABLE status.AND ORCondition A, B, or C J.2 Restore low pressure 72 hoursentered.
ECCS injection/spray subsystem(s) toOPERABLE status.K. One ADS valve K.1 Restore ADS valve to 14 daysinoperable.
OPERABLE status.IIIMonticello 3.5.1-3Amendment No. 146, 162, 17-6, 184 ECCS -Operating 3.5.1ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIMEL. Required Action and L.1 Be in MODE 3. 12 hoursassociated Completion Time of Condition I, J, ANDor K not met.L.2 Reduce reactor steam 36 hoursOR dome pressure to< 150 psig.One ADS valveinoperable andCondition A, B, C, D, orG entered.ORTwo or more ADS valvesinoperable.
ORHPCI System inoperable and Condition D, E, or Gentered.M. Two or more low M.1 Enter LCO 3.0.3. Immediately pressure ECCSinjection/spray subsystems inoperable for reasons other thanCondition C, D, E, or G.ORHPCI System and one ormore ADS valvesinoperable.
IMonticello 3.5.1-4Amendment No. 146, 162, 176, 184}}

Revision as of 04:40, 9 July 2018

Monticello Nuclear Generating Plant - Operating License and Technical Specifications
ML15110A280
Person / Time
Site: Monticello Xcel Energy icon.png
Issue date: 04/15/2015
From:
Xcel Energy
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
QF0212, Rev. 5
Download: ML15110A280 (99)


Text

QF0212, Revision 5 (FP-SC-RSI-04)

Page 1 of 1 Xcel Energy SHIPPING DOCUMENT NORTHERN STATES POWER -MN D/B/A Xcel Energy Monticello Nuclear Plant, 2807 W Hwy. 75, Monticello, MN 55362 Date: 4-14-15 Shipping Document Tracking Number: Ship To: USNRC 11555 Rockville Pike Rockville, MD 20852-2738 Attention Of: Document Control Desk (103)Carrier: UPS -Standard Overnight RMA No: Pro I Tracking No: PO / Contract No: Packaging:

Number of Packages:

1 Weight: Dangerous Goods/ UN/NA No: Insurance Est. Value Hazardous Materials?

Required?Reason for Shipment:

Overnight Shipment to USNRC Melody Imholte -Please ensure tracking number is communicated to me -melody.imholte@xenuclear.com Item No. Qt.. Unit j Description Catalog iDQ 1 Box Tech Spec Updates Request ar By signin s s pin d me t you re dec aring, to the best of your knowledge, that the matena b in Wshipped is in compliance with Xcel Energy Corporate Policies.

Please print and sign your name legibly.SWIP Making Shipment:

Date: Received By: Date: For will-call use only Use of this form as a procedural aid does not require retention as a quality record.'4ool&f

~OPERATING LICENSE AND TECHNICAL SPECIFICATIONS UPDATING INSTRUCTIONS TECHNICAL SPECIFICATIONS REMOVE ___SER Page Amendment Document Type N'a Am-en'dment 3 186 Operating

.... .1871 -License 'Table 1 186 Operating Table I 1ýý7 License and TS LEFP Table 2 186 Record of TS -Table.2 187i Changes and .j., OL Amend.5.5-11 160 Specification

...1'. .1. 7 5.5.11:::, :r ..:, / (Do not insert in TS binder, only an updating aid.)Monticello Am 187 2. Pursuant to the Act and 10 CFR Part 70, NSPM to receive, possess, and use at any time special nuclear material as reactor fuel, in accordance with the limitations for storage and amounts required for reactor operations, as described in the Final Safety Analysis Report, as supplemented and amended, and the licensee's filings dated August 16, 1974 (those portions dealing with handling of reactor fuel);3. Pursuant to the Act and 10 CFR Parts 30, 40 and 70, NSPM to receive, possess, and use at any time any byproduct, source and special nuclear material as sealed neutron sources for reactor startup, sealed sources for reactor instrumentation and radiation monitoring equipment calibration, and as fission detectors in amounts as required;4. Pursuant to the Act and 10 CFR Parts 30, 40 and 70, NSPM to receive, possess, and use in amounts as required any byproduct, source or special nuclear material without restriction to chemical or physical form, for sample analysis or instrument calibration or associated with radioactive apparatus or components; and 5. Pursuant to the Act and 10 CFR Parts 30 and 70, NSPM to possess, but not separate, such byproduct and special nuclear material as may be produced by operation of the facility.C. This renewed operating license shall be deemed to contain and is subject to the conditions specified in the Commission's regulations in 10 CFR Chapter I and is subject to all applicable provisions of the Act and to the rules, regulations, and orders of the Commission, now or hereafter in effect; and is subject to the additional conditions specified or incorporated below: 1. Maximum Power Level NSPM is authorized to operate the facility at steady state reactor core power levels not in excess of 2004 megawatts (thermal).

2. Technical Specifications The Technical Specifications contained in Appendix A, as revised through Amendment No. 187, are hereby incorporated in the license. NSPM shall operate the facility in accordance with the Technical Specifications.
3. Physical Protection NSPM shall implement and maintain in effect all provisions of the Commission--approved physical security, guard training and qualification, and safeguards contingency plans including amendments made pursuant to provisions of the Miscellaneous Amendments and Search Renewed License No. DPR-22 Amendment No. 1AhF 187 TABLE I (Page I of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OF EFFECTIVE PAGES Page 1.1-3 1.1-2 1.1-3 1.1-6 1.21.1.1-2 1.2-1 1.2-2 1.3-1 1.3-2 1.3-3 1.3-1.3-5 1.3-8 1.3-9 1.3-80 1.3-91 1.3-10 1.3-11 1.4-1 1.4-2 1.4-3 1.4-6 Am. No.(2)(2)(2)146 148 146 176 175 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 158 146 146 Paae 3.1.4-2 3.1.4-3 3.1.5-1 3.1.5-2 3.1.5-3 3.1.6-1 3.1.6-2 3.1.7-1 3.1.7-2 3.1.7-3 3.1.7-4 3.1.7-5 3.1.7-6 3.1.8-1 3.1.8-2 3.2.1-1 3.2.2-1 3.2.2-2 3.2.3-1 3.3.1.1-1 3.3.1.1-2 3.3.1.1-3 3.3.1.1-4 3. 3.1.1-5 3. 3.1.1-6 3. 3.1.1-7 3. 3.1.1-8 3. 3. 1.1-9 3. 3. 1.1-10 3.3.1.2-1 3.3.1.2-2 3.3.1.2-3 3.3.1.2-4 3.3.1.2-5 3.3.2.1-1 3.3.2.1-2 3.3.2.1-3 3.3.2.1-4 3.3.2.1-5 3.3.2.2-1 3.3.2.2-2 3.3. 3. 1-1 3.3.3.1-2 3.3.3.1-3 3.3.3.2-1 3.3.4.1-1 3.3.4.1-2 3.3.4.1-3 Am. No.146 158 146 146 146 146 146 148 146 146 146 146 146 146 146 146 146 146 146 171 176 180 180 180 180 180 180 180 180 146 146 146 146 146 146 146 159 159 173 146 146 146 146 146 146 146 146 146 Paqge 3. 3. 5.1-1 3.3. 5. 1-2 3.3.5.1-3 3.3.5.1-4 3.3. 5. 1-5 3.3.5.1-6 3.3. 5. 1-7 3.3.5.1-8 3.3.5.1-9 3. 3. 5.1-10 3.3.5.1-11 3.3.5.2-1 3.3.5.2-2 3.3.5.2-3 3.3.5.2-4 3. 3.6. 1-1 3.3.6.1-2 3.3.6.1-3 3.3.6.1-4 3.3.6.1-5 3.3.6.1-6 3.3.6.1-7 3.3.6.2-1 3.3.6.2-2 3.3.6.2-3 3.3.6.3-1 3.3.6.3-2 3.3.6.3-3 3. 3.7. 1-1 3.3.7.1-2 3.3.7.1-3 3.3.7.2-1 3.3.7.2-2 3. 3.8. 1-1 3.3.8.1-2 3.3.8.1-3 3.3.8.2-1 3.3.8.2-2 3.3.8.2-3 3.4.1-1 3.4.1-2 3.4.2-1 3.4.3-1 3.4.3-2 3.4.4-1 3.4.4-2 3.4.5-1 Am. No.146 146 146 146 151 176 146 176 161 146 146 146 146 146 146 146 146 146 146 176 146 164 146 146 146 146 146 146 Paqe 3.4.5-2 3.4.6-1 3.4.6-2 3.4.7-1 3.4.7-2 3.4.8-1 3.4.8-2 3.4.9-1 3.4.9-2 3.4.9-3 3.4.10-1 3.5.1-1 3.5.1-2 3.5.1-3 3.5.1-4 3.5.1-5 3.5.1-6 3.5.1-7 3.5.2-1 3.5.2-2 3.5.2-3 3.5.3-1 3.5.3-2 3.6.1.1-1 3.6.1.1-2 3.6.1.2-1 Am. No.146 148 148 146 146 146 146 172 172 172 146 146 184 184 184 162 (7)167 168 146 146 167 146 146 146 146 146 1.4-7 146 2.0-1 185 3.0-1 3.0-2 3.0-3 3.0-4 3.0-5 3.1.1-1 3.1.1-2 3.1.1-3 3.1.2-1 3.1.2-2 3.1.3-1 3.1.3-2 3.1.3-3 3.1.3-4.3.1.4-1 157 146 157 146 146 146 146 146 146 146 146 158 158 158 146 148 148 148 148 148 146 146 147 146 146 146 159 159 146 146 168 146 146 146 3.6.1.2-2 146 3.6.1.2-3 3.6.1.2-4 3.6.1.3-1 3.6.1.3-2 3.6.1.3-3 3.6.1.3-4 3.6.1.3-5 3.6.1.3-6 3.6.1.3-7 3.6.1.3-8 3.6.1.4-1 3.6.1.5-1 3.6.1.5-2 3.6.1.6-1 3.6.1.6-2 146 146 148 146 148 146 180 148 146 176 146 146 168 146 146 Am. 187 TABLE 1 (Page 2 of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OF EFFECTIVE PAGES 361e 3.6.1.7-1 3.6.1.7-2 3.6.1.8-1 3.6.1.8-2 3.6.2.1-1 3.6.2.1-2 3.6.2.1-3 3.6.2.2-1 3.6.2.3-1 3.6. 2. 3-2 3.6.3.1-1 3.6.4.1-1 3.6.4.1-2 3.6.4.2-1 3.6.4.2-2 3.6.4.2-3 3.6.4.3-1 3.6.4.3-2 3.7.1-1 3.7.1-2 3.7.2-1 3.7.2-2 3.7.3-1 3.7.4-1 3.7.4-2 3.7.4-3 3.7.5-1 3.7.5-2 3.7.6-1 3.7.6-2 3.7.7-1 3.7.8-1 3.8.1-1 3.8.1-2 3.8.1-3 3.8.1-4 3.8.1-5 3.8.1-6 3.8.1-7 3.8.1-8 3.8.1-9 3.8.1-10 3.8.2-1 Am. No. Paae Am. No. Paae Am. No. Operating License 146 3.8.2-2 148 3.10.6-1 146 Cover p.146 3.8.2-3 146 3.10.6-2 146 1 146 3.8.3-1 178 3.10.7-1 146 2 146 3.8.3-2 178 3.10.7-2 146 3 146 3.8.3-3 146 3.10.8-1 146 4 146 3.8.4-1 146 3.10.8-2 146 5 146 3.8.4-2 153(8) 3.10.8-3 146 6 146 146 146 146 146 146 146 146 146 146 181 146 146 146 146 146 175 160 181 154 154 146 146 146 146 146 146 146 146 146 146 146 146 146 146 148 3.8.4-3 3.8.5-1 3.8.5-2 3.8.6-1 3.8.6-2 3.8.6-3 3.8.6-4 3.8.7-1 3.8.7-2 3.8.8-1 3.8.8-2 3.9.1-1 3.9.1-2 3.9.2-1 3.9.3-1 3.9.4-1 3.9.4-2 3.9.5-1 3.9.6-1 3.9.7-1 3.9.7-2 3.9.8-1 3.9.8-2 3.10.1-1 3.10.1-2 3.10.1-3 3.10.2-1 3.10.2-2 3.10.3-1 3.10.3-2 3.10.3-3 3.10.4-1 3.10.4-2 3.10.4-3 3.10.5-1 3.10.5-2 146 148 146 146 146 146 146 146 146 148 146 146 146 146 146 146 146 146 146 146 146 146 146 174 146 146 146 146 146 146 146 146 146 146 146 146 156 156 187 186 156 176 176(6)176 176 176 169 160 4.0-1 4.0-2 5.1-1 5.2-1 5.2-2 5.3-1 5.4-1 5.5-1 5.5-2 5.5-3 5.5-4 5.5-5 5.5-6 5.5-7 5.5-8 5.5-9 5.5-10 5.5-11 5.5-12 5.5-13 5.6-1 5.6-2 5.6-3 5.7-1 5.7-2 5.7-3 5.7-4 182 182 146 146 163 146 146 146 146 146 146 181 181 181 146 146 176(6)187 182 182 146 180 180 146 146 146 146 7 8 9 10 11 12 OL App. A Cover p.Op. License Appendix C C-1 C-2 C-3 C-4 175 102 175 110 Am. 187 TABLE 1 (Page 3 of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OF EFFECTIVE PAGES NOTES NOTE 1: (Removed)NOTE 2: Am. 152 removed Table of Contents (TOC) from NRC issued Tech. Specs. TOC at Revision 0.NOTE 3: (Removed)NOTE 4: (Removed)NOTE 5: (Removed)NOTE 6: NRC Correction Letter to Amendment 176, dated 12/16/2013, corrected spelling of "gage" to ,.gauge" in OL License Condition 15(a). Added previously issued Amendment No. 175 (struck through) to bottom of page 5.5-10 and removed old revision bar.NOTE 7: SR 3.5.1.3.b (Alternate Nitrogen System supply pressure to ADS) is annotated and is being treated as a non-conservative TS. AN 2 pressure is increased as specified within Ops. Manual B.08.04.03-05 as an interim measure.NOTE 8: The required 125 VDC charger amperage in SR 3.8.4.2 Option 1 of 50 amps is annotated.

The interim required amperage is 75 amps. This condition is being treated as a non-conservative TS (see AR 01456839).

Am. 187 TABLE 2 (Page 1 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date AEC Tech Spec Chanqe Issuance No. & Date Maior Subiect Original 1 1/19/71 Note 2 1 2 3 4 5.6 7 8 9 10 11 12 13 14 15 16 17 18 19 Note 2 Note 2 2 2/20/73 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 3 4 6/17/74 6 8/20/74 Note 3 5 7 8 9 10 7/8/75 12 11 13 14 Note 1 2 1/14/72 3 10/31/72 4 12/8/72 Note 1 5 3/2/73 1 4/28/71 &6 4/3/73 7 5/4/73 8 7/2/73 9 8/24/73 10 10/2/73 11 11/27/73&12 11/15/73 13 3/30/74 14 5/14/74 Note 1 Note 1 Note 3 10/24/74 15 1/15/75 16 2/3/75 17 2/26/75 18 4/10/75 Note 1 20 9/15/75 19 9/17/75 21 10/6/75 22 10/30/75 Appendix A Technical Specifications incorporated in DPR-22 on 9/8/70 Removed 5 MWt restriction MOGS Technical Specification changes issued by AEC but never distributed or put into effect, superseded by TS Change 12 11/15/73 RHR service water pump capability change Temporary surveillance test waiver Increase in U-235 allowed in fission chambers Miscellaneous Technical Specification changes, Respiratory Protection, & Administrative Control Changes Respiratory Protection Changes Relief Valve and CRD Scram Time Changes Fuel Densification Limits Safety Valve Setpoint Change Offgas Holdup System, RWM, and Miscellaneous Changes 8x8 Fuel Load Authorization 8x8 Full Power authorization Changed byproduct material allowance Changed byproduct material allowance Inverted Tube (CRD) Limits REMP Changes Reactor Vessel Surveillance Program Changes Vacuum Breaker Test Changes Corrects Errors & Provides Clarification Increased allowed quantity of U-235 Snubber Requirements Removed byproduct material allowance Suppression Pool Temperature Limits Appendix K and GETAB Limits Am. 187 TABLE 2 (Page 2 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 NOTE 1 40 41 42 43 44 45 46 47 License DPR-22 Amend No. & Date 15 1/22/76 NOTE 4 16 2/3/76 17 3/16/76 NOTE 3 4/13/76 18 4/14/76 21 5/20/76 19 5/27/76 20 6/18/76 22 7/13/76 23 9/27/76 24 10/15/76 25 10/27/76 26 4/1/77 27 5/24/77 28 6/10/77 29 9/16/77 30 9/28/77 31 10/14/77 32 12/9/77 33 1/25/78 34 4/14/78 35 9/15/78 36 10/30/78 37 11/6/78 NOTE 3 11/24/78 38 3/15/79 39 5/15/79 40 6/5/79 41 8/29/79 Reporting Requirements CRD Collet Failure Surveillance NSP Organization Changes Adoption of GETAB Containment Isolation Valve Testing Interim Appendix B, Section 2.4 Tech. Specs.Low Steamline Pressure Setpoint and MCPR Changes APLHGR, LHGR, MCPR Limits Correction of Errors and Environmental Reporting Standby Gas Treatment System Surveillance CRD Test Frequency Snubber Testing Changes APRS Test Method MAPLHGR Clamp at Reduced Flow Radiation Protection Supervisor Qualification REMP Changes More Restrictive MCPR Inservice Inspection Changes Reporting Requirements Fire Protection Requirements Increase in spent fuel storage capacity RPT Requirements Suppression Pool Surveillance 8x8R Authorization, MCPR Limits & SRV Setpoints Corrected Downcomer Submergence Incorporation of Physical Security Plan into License Revised LPCI Flow Capability Respiratory Protection Program Changes Fire Protection Safety Evaluation Report Manor Subject Am. 187 TABLE 2 (Page 3 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Maeor Subject 48 49 42 43 12/28/79 2/12/80 50 NOTE 1 NOTE 1 51 52 NOTE 1 NOTE 1 53 54 NOTE 1 44 2/29/80-8/29/80-9/19/80-10/24/80-1/9/81-1/9/81-1/13/81 1 2/12/81 2 3/2/81 MAPLHGR vs. Exposure Table MCPR & MAPLHGR Changes for Cycle 8 and Extended Core Burnup ILRT Requirements Order for Modification of License-Environmental Qualification Revised Order for Modification of License-Environmental Qualification Order for Modification of License-Environmental Qualification Records Issuance of Facility Operating License (FTOL)Order for Modification of License Concerning BWR Scram Discharge Systems (License conditions removed per Amendment No. 11 dated 10/8/82)Order for Modification Mark I Containment Revision of License Conditions Relating to Fire Protection Modifications TMI Lessons Learned & Safety -Related Hydraulic Snubber Additions Low voltage protection, organization and miscellaneous Incorporation of Safeguards Contingency Plan and Security Force Qualification and Training Plan into License Cycle 9 -ODYN Changes, New MAPLHGR's, RPS Response time change Inservice Inspection Program Fire Protection Technical Specification Changes Mark I Containment Modifications 3 4 3/27/81 3/27/81 55 56 57 58 5 5/4/81 6 7 8 6/3/81 6/30/81 11/5/81 59 NOTE 1 9 12/28/81-1/19/82 Inservice Surveillance Requirements for Snubbers Revised Order for Modification Mark I Containment Scram Discharge Volume New Scram Discharge Volumes 60 61 10 11 5/20/82 10/8/82 Am. 187 TABLE 2 (Page 4 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 11/30/82 12/6/82 12/10/82 12/17/82 4/18/83 4/17/83 11/28/83 12/30/83 1/16/84 1/23/84 2/2/84 4/3/84 5/1/84 8/15/84 9/24/84 10/31/84 11/2/84 11/16/84 11/16/84 11/27/84 5/28/85 10/7/85 10/8/85 12/3/85 12/23/85 1/22/86 2/12/86 3/13/86 3/18/86 RPS Power Monitor Cycle 10 Recirc Piping and Coolant Leak Detection Appendix I Technical Specifications (removed App. B)Organizational Changes Miscellaneous Changes Steam Line Temperature Switch Setpoint Radiation Protection Program SRM Count Rate Definition of Operability Miscellaneous Technical Specification Changes RPS Electrical Protection Assembly Time Delay Scram Discharge Volume Vent and Drain Valves Miscellaneous Technical Specification Changes Cycle 11 RHR Intertie Line Addition Hybrid I Control Rod Assembly ARTS Low Low Set Logic Degraded Voltage Protection Logic Surveillance Requirements Screen Wash/Fire Pump (Partial)Fuel Enrichment Limits Combustible Gas Control System Vacuum Breaker Cycling NUREG-0737 Technical Specifications Environmental Technical Specifications Administrative Changes Clarification of Radiation Monitor Requirements Am. 187 TABLE 2 (Page 5 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page License Major Subject Revision DPR-22 (REV) No. Amend No. & Date 91 41 3/24/86 250 Volt Battery 92 42 3/27/86 Jet Pump Surveillance 93 43 4/8/86 Simmer Margin Improvement 94 44 5/27/86 Cycle 12 Operation 95 45 7/1/86 Miscellaneous Changes 96 46 7/1/86 LER Reporting and Miscellaneous Changes 97 47 10/22/86 Single Loop Operation 98 48 12/1/86 Offgas System Trip 99 49 8/26/87 Rod Block Monitor 100 50 8/26/87 APRM and IRM Scram Requirements 101 51 10/16/87 2R Transformer 102 52 11/18/87 Surveillance Intervals

-ILRT Schedule 103 53 11/19/87 Extension of Operating License 104 54 11/25/87 Cycle 13 and Misc Changes 105 55 11/25/87 Appendix J Testing 106 56 12/11/87 ATWS -Enriched Boron 107 57 9/23/88 Increased Boron Enrichment 108 58 12/13/88 Physical Security Plan 109 59 2/16/89 Miscellaneous Administrative Changes 110 60 2/28/89 Miscellaneous Administrative Changes 111 61 3/29/89 Fire Protection and Detection System 112 62 3/31/89 ADS Logic and S/RV Discharge Pipe Pressure 113 63 4/18/89 Miscellaneous Technical Specification Improvements 114 64 5/10/89 Containment Vent and Purge Valves 115 65 5/30/89 NUREG-0737

-Generic Letter 83-36 116 66 5/30/89 Reactor Vessel Level Instrumentation 117 67 6/19/89 Extension of MAPLHGR. Exposure for One Fuel Type 118 68 7/14/89 SRO Requirements

& Organization Chart Removal Am. 187 TABLE 2 (Page 6 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Maior Subiect 119 120 121 122 123 124 125 126 127 128 125 130 131 132 133 134 135 136 137 138 139 140 141 142 143 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 9/12/89 9/28/89 10/19/89 11/2/89 5/1/90 6/5/90 10/12/90 12/20/90 2/15/91 3/28/91 4/9/91 8/12/91 4/16/92 7/15/92 8/18/92 1/27/93 6/29/93 7/12/93 4/15/94 Operations Committee Quorum Requirements Relocation of Cycle-Specific Thermal-Hydraulic Limits Deletion of Primary Containment Isolation Valve Table RG 1.99, Rev 2, ISI & ILRT Combined STA/LSO Position Removal of WRGM Automatic ESF Actuation Diesel Fuel Oil Storage Miscellaneous Administrative Changes Redundant and IST Testing Alarming Dosimetry SAFER/GESTR Torus Vacuum Breaker Test Switch/EDG Fuel Oil Tank Level Surveillance Test Interval Extension

-Part I Alternate Snubber Visual Inspection Intervals Revisions to Reactor Protection System Tech Specs MELLIA and Increase Core Flow Revision to Diesel Fire Pump Fuel Oil Sampling Requirements Revisions to Control Rod Drive Testing Requirements Revised Coolant Leakage Monitoring Frequency Average Planar Linear Heat Generation Rate (APLHGR)Specification

& Minimum Critical Power Ratio Bases Revisions Removal of Chlorine Detection Requirements and Changes to Control Room Ventilation System Requirements Revisions to Radiological Effluent Specifications Secondary Containment System and Standby Gas Treatment System Water Level Setpoint Change Change in Safety Relief Valves Testing Requirements Revised Core Spray Pump Flow 88 6/30/94 89 8/25/94 90 91 92 93 9/7/94 9/9/94 9/15/94 7/12/95 Am. 187 TABLE 2 (Page 7 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Manor Subject 144 145 146 147 148 94 95 96 97 10/2/95 4/3/96 4/9/96 9/17/96 98 7/25/97 99 10/29/97 11/25/97 149 NOTE 5 150 NOTE 6 100 1 00a 101 4/20/98 4/30/98 08/28/98 102 09/16/98 103 12/23/98 Standby Gas Treatment and Secondary Containment Systems MSIV Combined Leakrate, and Appendix J, Option B Purge and Vent Valve Seal Replacement Interval Implementation of BRWOG Option I-D core Stability Solution and re-issue of pages 11, 12, 82 and 231 to reflect pages issued by NRC amendments.

Bases changes on containment overpressure and number of RHR pumps required to be operable.

Reissue pages 207, 209, 219, 229k, 229p, 230, 245 to reflect pages issued by NRC amendments.

SLMCPR for Cycle 18 and reissue pages vi, 155, 202, 207, 219, 229u Reissue pages a, b, g, iii, vi, 14, 25a, 155, 198y, 198z, 202, 207, 209, 219, 229k, 229p, 229r, 229u, 230, 245 SLMCPR for Cycle 19 Reissue all pages.Reactor Coolant Equivalent Radioiodine Concentration and Control Room Habitability Monticello Power Rerate Surveillance Test Interval/Allowed Outage Time Extension Program -Part 2 Revision of Statement on Shift Length & other Misc Changes CST Low Level HPCI/RCIC Suction Transfer Revised RPV-PT Curves & remove SBLC RV setpoint Reactor Pressure Vessel Hydrostatic and Leakage Testing Testing Requirements for Control Room EFT Filters Safety Limit Minimum Critical Power Ratio for Cycle 20 Transfer of Operating Authority from NSP to NMC Transfer of Operating License from NSP to a New Utility Operating Company Emergency Filtration Train Testing Exceptions and Technical Specification Revisions Alternate Shutdown System Operability Requirements Safety/Relief Valve Bellows Leak Detection System Test Frequency 104 105 106 107 108 109 110 111 12/24/98 03/19/99 10/12/99 11/24/99 12/8/99 02/16/00 08/07/00 08/18/00 112 08/18/00 113 10/02/00 114 11/30/00 Am. 187 TABLE 2 (Page 8 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subiect 115 115a 12/21/00 02/13/01 116 03/01/01 117 03/07/01 118 03/09/01 118a. 05/10/01 119 119a 120 04/05/01 06/28/01 07/24/01 121 07/25/01 122 08/01/01 122a 10/22/01 123 10/26/01 123a 10/25/01 124 10/30/01 124a 12/05/01 Administrative Controls and Other Miscellaneous Changes Bases Change to Reflect Modification 98Q145 Installed Control Room Toxic Gas Air Supply Relocation of Inservice Inspection Requirements to a Licensee Program Reactor Water Cleanup (RWCU) System Automatic Isolation and Miscellaneous Instrumentation System Changes Revision of Standby Liquid Control System Surveillance Requirements Bases Change -50°F Loop Temperature, Bus Transfer &Rerate Correction Fire Protection Technical Specification Changes Bases Change -Added information on cooldown rate Relocation of Radiological Effluent Technical Specifications to a Licensee-Controlled Program Clarify air ejector offgas activity sample point and operability requirements Relocation of Inservice Testing Requirements to a Licensee-Controlled Program Bases Change -Remove scram setpoints sentence and correct typo Control Rod Drive and Core Monitoring Technical Specification Changes Bases Change -Change to reflect new operation of drywell to suppression chamber vacuum breaker valve position indicating lights Relocation of Technical Specification Administrative Controls Related to Quality Assurance Plan Bases Change -Change to reflect revised Technical Specification definition of a containment spray/cooling subsystem Safety Limit Minimum Critical Power Ratio for Cycle 21 Elimination of Local Suppression Pool Temperature Limits Bases Change -Change reflects relocation of sample point for the offgas radiation monitor 125 126 126a 12/06/01 01/18/02 02/15/02 Am. 187 TABLE 2 (Page 9 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date 127 05/31/02 128 06/11/02 128a 07/11/02 129 08/27/02 129a 129b 130 130a 09/12/02 09/12/02 09/23/02 09/26/02 Major Subiect Missed Surveillance Requirement Technical Specification Changes (TSTF-358)

Changes to the Technical Specifications Revised Reference Point for Reactor Vessel Level Setpoints, Simplification of Safety Limits, and Improvement to the Bases Bases Change -Correct Drywell to Suppression Chamber Vacuum Breaker Indicating Light Description Revise Technical Specifications and Surveillance Requirements Relating to Standby Diesel Generators Bases Change -Change to Snubber Operability Description Bases Change -Remove Language That Implies Trip Settings Can Be Modified By Deviation Values Containment Systems Technical Specification Changes Bases Change -HPCI -Change Wording / HPCI & RCIC -Enhance with Wording Consistent with NUREG-1433-Rev 1 Update the Multiplier Values for Single Loop Operation Average Planar Linear Heat Generation Rate (APLHGR)Conversion to Option B for Containment Leak Rate Testing Revision to Pressure-Temperature Curves Bases Change -Adequate Reactor Steam Flow for HPCI/RCIC Testing One-Time Extension of Containment Integrated Leak-Rate Test Interval Boiling Water Reactor Vessel and Internals Project Reactor Pressure Vessel Integrated Surveillance Program Bases Change -Clarify description of head cooling Group 2 valves Elimination of Requirements for Post Accident Sampling System (TSTF-413)

Bases Change -Editorial change to define the abbreviation "EFCV." Drywell Leakage and Sump Monitoring Detection System 131 10/02/02 132 133 133a 02/04/03 02/24/03 03/28/03 134 03/31/03 135 04/22/03 135a 04/24/03 136 06/17/03 136a 09/25/03 137 08/21/03 Am. 187 TABLE 2 (Page 10 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 137a 137b 10/09/03 10/14/03 138 05/21/04 138a 06/10/04 139 06/02/04 140 140a 11/02/04 01/13/05 141 01/28/05 141 a 02/24/05 141b 03/10/05 141c 03/10/05 142 02/01/05 143 09/30/05 10/20/05 Bases Change -RCS Leakage Requirements for TS 3.6.4.D Bases Change -Clarification of system control boundary for ASDS Elimination of Requirements for Hydrogen Recombiners and Hydrogen and Oxygen Monitors (TSTF-447)

Bases Change -Clarification of Tech Spec Table 4.1.1 Manual Scram Revised Analysis of Long-Term Containment Response and Net Positive Suction Head (Design Bases and USAR change)Revision to Technical Specification Tables 3.2.1 and 3.2.4 Bases Change -Removal of Drywell Vent Coolers from 3.6/4.6 Bases Revision to Technical Specifications Table 3.2.3 and Section 3.7/4.7 Bases Change -Implement Improved BPWS as Described in NEDO-33091-A Bases Change -Bases Changes for License Amendments 138 and 140 Bases Change -Removal of 3% Delta-K from Standby Liquid Control Bases 3.4.A/4.4.A Deletion of Requirements for Submittal of Occupational Radiation Reports, Monthly Operating Reports, and Report of Safety/Relief Valve Failures and Challenges (TSTF-369)

Implementation of 24-Month Fuel Cycles Change to Facility Operating License Pursuant to Commission Order EA-03-086 Regarding Revised Design Basis Treat (DBT); and Revisions to Physical Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan Surveillance Test Intervals for various instruments (Second part of 24-month Fuel Cycle amendment.)

TS Bases changes to conform with the implementation of License Amendments 143 and 144 (24-Month Fuel Cycles).Alternate Source Term -Fuel Handling Accident (TSTF-51)NOTE 1: 144 01/12/06 144a 04/05/06 145 04/24/06 Am. 187 TABLE 2 (Page 11 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page License Revision DPR-22 (REV) No. Amend No. & Date 146 06/05/06 Correction Letter 10/12/06 147 07/05/06 NOTE 1: Renewed OL 11/08/06 148 12/07/06 Appendix J Exemptions 149 01/18/07 Correction Letter 02/23/07 150 03/09/07 151 07/20/07 Maior Subiect Improved Technical Specifications (TSTF-359, 372, 439, 455, 458, 460, 464, 479, 480, 485)Correction of typo in Amendment 146 (page 3.3.5.1-8)

Degraded Voltage Allowable Value Change (Second part of ITS -Follow-on ITS Amendment)

Renewed Facility Operating License Alternate Source Term -Full Scope In conjunction with issuance of Amendment 148, exemptions to 10 CFR 50.54(o) and to 10 CFR 50, Appendix J, Option B, Sections III.A and III.B were issued.One-Time Extension of LPCI Loop Select Logic Time Delay Relay Surveillance Interval Correction:

Remove Am 148 from first page of OL and added Renewed License No. DPR-22 to footer on page 2.Increase SFP allowed Heat Load and allow installation of 64 cell PaR Fuel Storage Rack (if required) to maintain Full Core Offload capability during ISFSI construction.

Extend Surveillance Interval from 92-days to 24-months and increase Allowable Values for LPCI Loop Select Logic Time Delay Relays. (Also, correct typo on page 3.3.5.1-6.)

Conforming License Amendment to incorporate the Mitigation Strategies Required by Section B.5.b of Commission Order EA-02-026 and the Radiological Protection Mitigation Strategies Required by Commission Order EA-06-137 Remove the Table of Contents (TOC) out of the Technical Specifications and place under licensee control. TS TOC initial revision is Revision 0.Revise Surveillance Requirement 3.8.4.2 to specify that the Division 2 battery chargers are verified to supply greater than or equal to 110 amps.Add Action Statement for two inoperable Control Room Ventilation subsystems to Specification 3.7.5 (TSTF-477).

Revise Surveillance Requirement 3.5.1.3.b to specify that the Alternate Nitrogen System supply pressure to the ADS valves is verified to be greater than or equal to 410 psig.Transfer of Operating License from NMC to NSP -Minnesota Add LCO 3.0.9 on unavailable Barriers (TSTF-427).

Revise Control Rod notch testing frequency from once per 7 days to every 31 days (TSTF-475).

Power Range Neutron Monitoring System Am. 187 NOTE 1: 08/23/07 152 11/08/07 153 01/30/08 154 01/23/08 155 02/21/08 NOTE 1: 156 157 158 09/22/08 10/22/08 11/19/08 159 1/30/09 TABLE 2 (Page 12 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Correction Letter 3/9/09 160 3/17/09 161 4/7/09 162 7/10/09 163 8/19/09 164 9/28/09 165 5/4/11 166 7/29/11 167 1/11/12 168 7/27/12 169 8/27/12 Maior Subject Correct footer of Specification 3.3.7.2 -AST Amendment 148.Control Room Envelope Habitability (TSTF-448).

Revise the Allowable Value and channel calibration frequency for Table 3.3.5.1-1, Function 2.j, Recirculation Riser Differential Pressure -High (Break Detection).

Add new Conditions to Specification 3.5.1 for restoration of various low-pressure ECCS subsystems out-of-service (OOS)combinations (e.g., one low-pressure ECCS division OOS).Deleted paragraph d concerning work hour limitations under Specification 5.2.2 to align with rule changes under 10 CFR 26, Subpart I (TSTF-511).

Corrected Modes in Table 3.3.6.1-1, Function 5.d, RWCU System isolation on a SLC System initiation, to match SLC System modes (Specification 3.1.7) after adoption of full-scope AST, i.e., added Mode 3 to Function 5.d Revise MCPR Safety Limit to 1.15 to reflect reload analyses (which include EPU and MELLLA+ considerations).

Add Cyber Security Plan license condition under OL Section 3, Physical Protection. (Operating License change only.)Revise Core Spray flowrate from 2800 gpm to 2835 gpm.Revise surveillance requirements in Specifications 3.4.3, 3.5.1 and 3.6.1.5 to remove requirements to lift-test SRVs during plant startup.Revise licensing basis to reflect removal of the capability to automatically transfer to the 1AR Transformer as a source of power to the essential buses on degraded voltage and instead directly transfer to the EDGs. (Operating License change only.)Revise Table 3.3.5.1-1, Functions 1.e and 2.e, "Reactor Steam Dome Pressure Permissive

-Bypass Timer (Pump Permissive)", (i.e., 20 minute ADS bypass timer), to remove the lower limit of the allowable value.Revise Required Actions table for LCO 3.3.1.1 to provide a restoration period before entering the required actions when the APRMs are inoperable due to SR 3.3.1.1.2 not met.Revise Specification 3.4.9, add new Specification 5.6.5, and add a new definition to specify the adoption of a PTLR.170 9/7/12 171 1/25/13 172 1/20/13 Am. 187 TABLE 2 (Page 13 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date 173 7/15/13 174 8/9/13 175 8/28/13 176 12/9/13 Correction Letter 12/16/13 (to Amendment 176)177 1/28/14 178 1/28/14 179 2/28/14 180 3/28/14 181 5/2/14 182 10/24/14 183 10/31/14 184 11/3/14 185 11/25/14 186 11/28/14 187 1/8/15 AEC Tech Spec Maior Subiect Chanqe Issuance No. & Date Add footnote reflecting that RWM can be bypassed when the improved BPWS is used for reactor shutdown (TSTF-476).

Add allowance to Specification 3.10.1 LCO to allow for scram time testing during inservice leak testing and hydrostatic testing (TSTF-484).

Miscellaneous Operating License and TS editorial and administrative changes.Extended Power Uprate Corrected spelling of "gage" to "gauge" in OL License Condition 15(a). Added previously issued Amendment No. 175 (struckthrough) to bottom of page 5.5-10 and removed old revision bar.Modifies the Emergency Plan to revise the EAL for the Turbine Building Normal Waste Sump Monitor. (Emergency Plan change only.)Revise specification to reflect relocating fuel and lube oil required volumes to the TS Bases and replacing them with duration based requirements (TSTF-501).

Revises Shutdown Margin (SDM) definition to address advanced fuel designs (TSTF-535).

Maximum Extended Load Line Limit Analysis, Plus (MELLLA+)Reduces SBGT and CREF Systems runtime from 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> to 15 minutes every 31 days. Removes surveillance requirements to have heaters operating and TS 5.5.6.e electric heater output test requirement from the Ventilation Filter Testing Program (TSTF-522).

Revise TS to Support Fuel Storage System Changes Remove Radwaste Operator as 60-Minute Responder (Emergency Plan change only.)Revise TS 3.5.1 to Remove Condition F allowing two Core Spray subsystems to be OOS.Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits, resolves GE PROF analysis Part 21 issue.Revise Cyber Security Implementation Schedule Milestones Revise TS 5.5.11 to remove not used reduced pressure testing capability from the TS for the Drywell Airlock doors due to the door design.Am. 187 TABLE 2 (Page 14 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NOTES 1. License Amendment or Order for Modification of License not affecting Technical Specifications.

2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version. Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. For Bases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 100a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 187 Programs and Manuals 5.5 5.5 Programs and Manuals 5.5.11 Primary Containment Leakage Rate Testing Program (continued)
d. Leakage rate acceptance criteria are: 1. Containment leakage rate acceptance criterion is < 1.0 La. During the first unit startup following testing in accordance with this program, the leakage rate acceptance criteria are < 0.60 La for the Type B and C tests and < 0.75 La for Type A tests.2. Air lock testing acceptance criterion is an overall air lock leakage rate of _< 0.05 La when tested at _> Pa.e. The resilient seals of each 18 inch primary containment purge and vent valve shall be replaced at least once every 9 years. The provisions of SR 3.0.2 are applicable to this requirement.

If a common mode failure attributable to the resilient seals is identified based on the results of SR 3.6.1.3.11, the resilient seals of all 18 inch primary containment purge and vent valves shall be replaced.f. The provisions of SR 3.0.3 are applicable to the Primary Containment Leakage Rate Testing Program.5.5.12 Battery Monitoring and Maintenance Program This Program provides for battery restoration and maintenance, based on the recommendations of IEEE Standard 450-1995, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Vented Lead-Acid Batteries for Stationary Applications," or of the battery manufacturer of the following:

a. Actions to restore battery cells with float voltage < 2.13 V; and b. Actions to equalize and test battery cells that had been discovered with electrolyte level below the minimum established design limit.Monticello 5.5-11 Amendment No. 4 4 6 ,, 4 8 , 6 0 , 187 TECHNICAL SPECIFICATION BASES UPDATING INSTRUCTIONS MNGP TECHNICAL SPECIFICATION BASES REMOVE !IN'SERT Page(s) Revision Document Type ýPaqe(s) Revision Table 1 33 List of Effective Table 1 34 Sections /Specifications Table 2 33 Record of Table 2 34 Revisions B 2.1.1-1 through 4 Bases B 2.1 .1-1 thirough 34 B 2.1.1-4 Spec. 2.1.1 13 2.1.1-4 B 3.3.6.1-1 through 4 Bases :B 3.3.6.1-1 through 34 B 3.3.6.1-23 Spec. 3.3.6.1 B 3.3.6.1-24 B 3.5.1-1 through 29 Bases B 3.5.1-1 through 34 B 3.5.1-19 Spec. 3.5.1 ;B 3.5.1-20 Destroy removed pages.Revision 34 TABLE 1 (Page 1 of 1)MONTICELLO NUCLEAR GENERATING PLANT BASES LIST OF EFFECTIVE SECTIONS/SPECIFICATIONS Section/Specification Revision No.B 2.1.1 34 B 2.1.2 6 B 3.0 27 B 3.1.1 0 B 3.1.2 0 B 3.1.3 11 B 3.1.4 19 B 3.1.5 0 B 3.1.6 29 B 3.1.7 4 B 3.1.8 4 B 3.2.1 29 B 3.2.2 0 B 3.2.3 0 B 3.3.1.1 32 B 3.3.1.2 0 B 3.3.2.1 26 B 3.3.2.2 29 B 3.3.3.1 3 B 3.3.3.2 3 B 3.3.4.1 0 B 3.3.5.1 29 B 3.3.5.2 0 B 3.3.6.1 34 B 3.3.6.2 0 B 3.3.6.3 3 B 3.3.7.1 4 B 3.3.7.2 4 B 3.3.8.1 22 B 3.3.8.2 0 B 3.4.1 32 B 3.4.2 0 B 3.4.3 25 B 3.4.4 0 B 3.4.5 0 B 3.4.6 4 B 3.4.7 0 B 3.4.8 0 B 3.4.9 25 B 3.4.10 0 B 3.5.1 34 B 3.5.2 0 B 3.5.3 0 B 3.6.1.1 29 B 3.6.1.2 29 B 3.6.1.3 29 Section/Specification B 3.6.1.4 B 3.6.1.5 B 3.6.1.6 B 3.6.1.7 B 3.6.1.8 B 3.6.2.1 B 3.6.2.2 B 3.6.2.3 B 3.6.3.1 B 3.6.4.1 B 3.6.4.2 B 3.6.4.3 B 3.7.1 B 3.7.2 B 3.7.3 B 3.7.4 B 3.7.5 B 3.7.6 B 3.7.7 B 3.7.8 B 3.8.1 B 3.8.2 B 3.8.3 B 3.8.4 B 3.8.5 B 3.8.6 B 3.8.7 B 3.8.8 Revision No.0 25 0 0 29 30 0 0 0 0 0 31 29 0 17 31 8 4 29 0 33 27 33 7 4 0 0 4 B 3.9.1 B 3.9.2 B 3.9.3 B 3.9.4 B 3.9.5 B 3.9.6 B 3.9.7 B 3.9.8 B 3.10.1 B 3.10.2 B 3.10.3 B 3.10.4 B 3.10.5 B 3.10.6 B 3.10.7 B 3.10.8 0 0 0 0 0 0 21 0 28 0 3 0 0 0 0 0 Rev. 34 TABLE 2 (Page 1 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Number Section/Specification 0 1 2 3 All B 3.8.3 B 3.5.1 4 B 3.3.3.1, B 3.3.3.2, B 3.3.6.3, B 3.10.3 B 2.1.1, B 2.1.2, B 3.1.6, B 3.1.7, B 3.1.8, B 3.3.6.1, B 3.3.7.1, B 3.3.7.2, B 3.4.6, B 3.6.1.3, B 3.7.4, B 3.7.5, B 3.7.6, B 3.8.2, B 3.8.5, B 3.8.8 B 3.3.5.1 B 3.8.1(1)B 2.1.2 B 3.3.2.1 B.3.8.1, B 3.8.2 Description of Revision Amendment 146 -Original ITS Revision SR 3.8.3.3, Diesel Fuel Oil Testing Description LCO 3.5.1, ACTION D, changed description of LPCI injection pathway.Miscellaneous ITS Bases Clarifications/Corrections Amendment 148 -Bases Changes implementing Full Scope AST.Amendment 151 -Extend Surveillance Interval and AV for the LPCI Loop Select TD Relays.Clarify RCS Safety Limit values.Correct that initial MCPR values are specified in the COLR.Clarify that the 2R and 1AR transformers are considered as a single off-site source when 1AR is supplied from 345 kV Bus 1.5 6 7 1. Replaces page B 3.8.1-25 in Sharepoint version of the TS. Page inadvertently deleted during implementation of Amendment 148 (CAP 01095053).

Rev. 34 TABLE 2 (Page 2 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 7 (con't) B.3.8.4 Correct the float voltage for the 125 VDC batteries in SR 3.8.4.1.B.3.8.4 Amendment 153 -Specify in SR 3.8.4.2 that the Division 2 battery charger supplies-> 110 amps.8 B.3.5.1 Amendment 155 -Revise SR 3.5.1.3 to correct Alternate Nitrogen System supply pressure to ADS and clarify OPERABILITY during bottle changeout.

B.3.7.4, Amendment 154 -Revise Bases for B.3.7.5 Specification 3.7.5 to reflect adoption of TSTF-477, which allows both CRV subsystems to be inoperable for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. Clarify the OPERABILITY requirements of certain CRV fans currently required to support CREF subsystem operation.

9 B 3.5.1 Clarify RHR intertie discussion.

B 3.5.1 Clarify Action M to indicate that the plant may not be in a condition outside the accident analysis but is in a condition not specifically justified for continued operation.

B 3.6.1.3 Add Action E to describe actions for when the MSIVs are not within leakage limits and re-label subsequent actions.10 B 3.5.1 Add HPCI "Keep-fill" discussion.

B 3.9.7 Clarify Action A.1 for what is meant by inoperable.

11 B 3.1.3, Amendment 158- Change control rod notch B 3.1.4 testing frequency from every 7 days to only once per 31 days in accordance with TSTF-475, Revision 1.Rev. 34 TABLE 2 (Page 3 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 12 B 3.3.1.1, Amendment 159 -PRNMS.B 3.3.2.1, B 3.4.1 B 3.3.5.1 Amendment 161 -LPCI Recirculation Riser Differential Pressure -High (Break Size)allowable value and channel calibration interval change.13 B 3.0 Amendment 157 -Add Bases for new LCO 3.0.9 for the unavailability of barriers, reflecting adoption of TSTF-427.B 3.4.9 Clarify that the shift in Figure 3.4.9-1 includes both delta RTNDT and margin.B 3.5.1 Amendment 162 -Add new Conditions to Specification 3.5.1 for restoration of various low-pressure ECCS subsystem out-of-service combinations.

14 B 3.0 Section B 3.0 reissued in entirety.

Page numbers at end of LCO Applicability over-lapped SR Applicability page numbers (CAP 01192534).

15 B 3.7.4 Amendment 160 -Revise Bases for the specification reflecting adoption of a Control Room Envelope Habitability program in accordance with TSTF-448.16 B 3.3.1.1 Replace IRM -Neutron Flux -High High (1 .a)for calibrating IRMs by a heat balance by referring to IRM/APRM overlap and APRM Setdown Scram meeting reactivity requirements.

B 3.7.7 Correct Turbine Bypass Valve capacity.17 B 3.7.3 Correct EDG-ESW Background description.

Rev. 34 TABLE 2 (Page 4 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 18 B 3.6.1.3 Clarify PCIV definition.

19 B 3.1.4 Clarify spacing requirements of adjacent slow control rods.B 3.8.1, Revise Bases to reflect separation of 1ARS B 3.8.2 Transformer and Bus 1.20 B 3.5.1 Reissue section, missing text on HPCI keep-fill discussion. (CAP 01328422)21 B 3.9.7 Correct prior clarification to Action A.1 for what is meant by inoperable. (CAP 01257096)22 B 3.3.8.1 Amendment 169 -Revise licensing basis to reflect removal of the capability to automatically transfer to the 1AR Transformer as a source of power to the essential buses on degraded voltage and instead directly transfer to the EDGs.23 B 3.3.5.1 Amendment 170 -Revised to reflect ancillary change related to ADS 20-minute Bypass Timer.24 B 3.3.1.1 Amendment 171 -Revised to provide restoration period before declaring the APRMs inoperable when SR 3.3.1.1.2 is not met.25 B 3.4.3, Amendment 168 -Revised surveillance B 3.5.1, requirements within these specifications to B 3.6.1.5 allow crediting overlapping testing rather than requiring a lift-test during plant startup.B 3.4.9 Amendment 172 -Revised specification to adopt PTLR.26 B 3.1.6 Amendment 173 -Revised to reflect B 3.3.2.1 incorporation of TSTF-476 for improved BPWS.Rev. 34 TABLE 2 (Page 5 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Number 27 28 29 Affected Section/Specification B 3.0 B 3.8.2 B 3.10.1 B 3.1.6 B 3.2.1 B 3.3.1.1 B 3.3.2.2 B 3.3.5.1 B 3.4.1 B 3.5.1 B 3.6.1.1 B 3.6.1.2 B 3.6.1.3 B 3.6.1.8 B 3.7.1 B 3.7.7 B 3.6.2.1 B 3.8.3 B 3.6.4.3 B 3.7.4 Description of Revision Clarify application of SR 3.0.2 and SR 3.0.3 to IST tests to clarify compliance to Enforcement Guidance Memorandum (EGM) 12-001 (CAP 01389604).

Correct referenced SR number from SR 3.8.1.8 to SR 3.8.1.6.Amendment 174 -Revised specification to incorporate TSTF-484, to allow scram time testing in conjunction with hydrostatic testing.Amendment 177- Implement Extended Power Uprate.Revised TS Bases to indicate local Suppression Pool temperature limits were eliminated with Amendment 126.Amendment 178 -Revised specification to relocate stored fuel and lube oil volumes to TS bases and replace with duration requirements in accordance with TSTF-501.Amendment 181 -Revised specifications to reflect reduced runtime for SBGT and CREF from 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> to 15 minutes in accordance with TSTF-522.30 31 Rev. 34 TABLE 2 (Page 6 of 6)TECHNICAL SPECIFICATION BASES RECORD OF REVISIONS Revision Affected Description of Revision Number Section/Specification 32 B 3.3.1.1, Amendment 180 -Implement Maximum B 3.4.1 Extended Load Line Limit Analysis, Plus (MELLLA+)33 B 3.8.1, Add EDG Fuel Oil Transfer System train B 3.8.3 description for each EDG.34 B 2.1.1, Amendment 185 -Reduce the Reactor Steam B 3.3.6.1 Dome Pressure specified in the Reactor Core Safety Limits, resolved GE Part 21 condition for a potential to violate the safety limit during a Pressure Regulator Failure Downscale event.B 3.5.1 Amendment 184 -Removes former Condition F which allowed both Core Spray subsystems to be inoperable for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.Rev. 34 Reactor Core SLs B 2.1.1 B 2.0 SAFETY LIMITS (SLs)B 2.1.1 Reactor Core SLs BASES BACKGROUND USAR Section 1.2.2 (Ref. 1) requires the reactor core and associated systems to be designed to accommodate plant operational transients or maneuvers that might be expected without compromising safety and without fuel damage. Therefore, SLs ensure that specified acceptable fuel design limits are not exceeded during steady state operation, normal operational transients, and anticipated operational occurrences (AOOs).The fuel cladding integrity SL is set such that no significant fuel damage is calculated to occur if the limit is not violated.

Because fuel damage is not directly observable, a stepback approach is used to establish an SL, such that the MCPR is not less than the limit specified in Specification 2.1.1.2. MCPR greater than the specified limit represents a conservative margin relative to the conditions required to maintain fuel cladding integrity.

The fuel cladding is one of the physical barriers that separate the radioactive materials from the environs.

The integrity of this cladding barrier is related to its relative freedom from perforations or cracking.Although some corrosion or use related cracking may occur during the life of the cladding, fission product migration from this source is incrementally cumulative and continuously measurable.

Fuel cladding perforations, however, can result from thermal stresses, which occur from reactor operation significantly above design conditions.

While fission product migration from cladding perforation is just as measurable as that from use related cracking, the thermally caused cladding perforations signal a threshold beyond which still greater thermal stresses may cause gross, rather than incremental, cladding deterioration.

Therefore, the fuel cladding SL is defined with a margin to the conditions that would produce onset of transition boiling (i.e., MCPR = 1.00). These conditions represent a significant departure from the condition intended by design for planned operation.

The MCPR fuel cladding integrity SL ensures that during normal operation and during AOOs, at least 99.9% of the fuel rods in the core do not experience transition boiling.Operation above the boundary of the nucleate boiling regime could result in excessive cladding temperature because of the onset of transition boiling and the resultant sharp reduction in heat transfer coefficient.

Inside the steam film, high cladding temperatures are reached, and a cladding water (zirconium water) reaction may take place. This chemical Monticello B 2.1.1-1 Revision No. 34 Monticello B 2.1.1-1 Revision No. 34 Reactor Core SLs B 2.1.1 BASES BACKGROUND (continued) reaction results in oxidation of the fuel cladding to a structurally weaker form. This weaker form may lose its integrity, resulting in an uncontrolled release of activity to the reactor coolant.The reactor vessel water level SL ensures that adequate core cooling capability is maintained during all MODES of reactor operation.

Establishment of Emergency Core Cooling System initiation setpoints higher than this SL provides margin such that the SL will not be reached or exceeded.APPLICABLE The fuel cladding must not sustain damage as a result of normal SAFETY operation and AOOs. The reactor core SLs are established to preclude ANALYSES violation of the fuel design criterion that a MCPR limit is to be established, such that at least 99.9% of the fuel rods in the core would not be expected to experience the onset of transition boiling.The Reactor Protection System setpoints (LCO 3.3.1.1, "Reactor Protection System (RPS) Instrumentation"), in combination with the other LCOs, are designed to prevent any anticipated combination of transient conditions for Reactor Coolant System water level, pressure, and THERMAL POWER level that would result in reaching the MCPR Safety Limit.The approved pressure range (700 to 1400 psia) of the GEXL 14 critical power correlation is applied to resolve a 10 CFR Part 21 condition concerning a potential to violate Reactor Core Safety Limit 2.1.1.1 during a Pressure Regulator Failure Maximum Demand (Open) transient (Reference 5). Application of this correlation, which applies to the GE14 fuel in the core, allows reduction of the reactor steam dome pressure from 785 to 686 psig, precluding violation of the safety limit for this event. This change in reactor steam dome pressure was approved in Amendment 185 (Reference 7).2.1.1.1 Fuel Cladding Inte.grity The GEXL14 critical power correlation is applicable for all critical power calculations at pressures

> 686 psig and core flows > 10% of rated flow (Reference 6). For operation at low pressures or low flows, another basis is used, as follows: Since the pressure drop in the bypass region is essentially all elevation head, the core pressure drop at low power and flows will always be > 4.56 psi. Analyses (Ref. 2) show that with a bundle flow of 28 x 103 lb/hr, bundle pressure drop is nearly independent of bundle power and has a value of 3.5 psi. Thus, the bundle flow with a 4.56 psi driving head will be > 28 x 103 lb/hr. Full scale ATLAS test Monticello B 2.1.1-2 Revision No. 34 Reactor Core SLs B 2.1.1 BASES APPLICABLE SAFETY ANALYSES (continued) data taken at pressures from 0 psig to 785 psig indicate that the fuel assembly critical power at this flow is approximately 3.35 MWt. With the design peaking factors, this corresponds to a THERMAL POWER> 50 % RTP. Thus, a THERMAL POWER limit of 25% RTP for reactor pressure < 686 psig or < 10% core flow is conservative.

2.1.1.2 MCPR The fuel cladding integrity SL is set such that no significant fuel damage is calculated to occur if the limit is not violated.

Since the parameters that result in fuel damage are not directly observable during reactor operation, the thermal and hydraulic conditions that result in the onset of transition boiling have been used to mark the beginning of the region in which fuel damage could occur. Although it is recognized that the onset of transition boiling would not result in damage to BWR fuel rods, the critical power at which boiling transition is calculated to occur has been adopted as a convenient limit. However, the uncertainties in monitoring the core operating state and in the procedures used to calculate the critical power result in an uncertainty in the value of the critical power. Therefore, the fuel cladding integrity SL is defined as the critical power ratio in the limiting fuel assembly for which more than 99.9% of the fuel rods in the core are expected to avoid boiling transition, considering the power distribution within the core and all uncertainties.

The MCPR SL is determined using a statistical model that combines all the uncertainties in operating parameters and the procedures used to calculate critical power. The probability of the occurrence of boiling transition is determined using the approved General Electric Critical Power correlations.

Details of the fuel cladding integrity SL calculation are given in Reference

2. Reference 3 includes a tabulation of the uncertainties used in the determination of the MCPR SL and of the nominal values of the parameters used in the MCPR SL statistical analysis.2.1.1.3 Reactor Vessel Water Level During MODES 1 and 2 the reactor vessel water level is required to be above the top of the active irradiated fuel to provide core cooling capability.

With fuel in the reactor vessel during periods when the reactor is shut down, consideration must be given to water level requirements due to the effect of decay heat. If the water level should drop below the top of the active irradiated fuel during this period, the ability to remove decay heat is reduced. This reduction in cooling capability could lead to elevated cladding temperatures and clad perforation in the event that the water level becomes < 2/3 of the core height. The reactor vessel water level SL has been established at the top of the active irradiated fuel to Monticello B 2.1.1-3 Revision No. 34 Reactor Core SLs B 2.1.1 BASES APPLICABLE SAFETY ANALYSES (continued) provide a point that can be monitored and to also provide adequate margin for effective action.SAFETY LIMITS The reactor core SLs are established to protect the integrity of the fuel clad barrier to prevent the release of radioactive materials to the environs.SL 2.1.1.1 and SL 2.1.1.2 ensure that the core operates within the fuel design criteria.

SL 2.1.1.3 ensures that the reactor vessel water level is greater than the top of the active irradiated fuel in order to prevent elevated clad temperatures and resultant clad perforations.

APPLICABILITY SLs 2.1.1.1, 2.1.1.2, and 2.1.41.3 are applicable in all MODES.SAFETY LIMIT Exceeding an SL may cause fuel damage and create a potential for VIOLATIONS radioactive releases in excess of 10 CFR 50.67, "Accident source term," limits (Ref. 4). Therefore, it is required to insert all insertable control rods and restore compliance with the SLs within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />. The 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> Completion Time ensures that the operators take prompt remedial action and also ensures that the probability of an accident occurring during this period is minimal.REFERENCES

1. USAR, Section 1.2.2.2. NEDE-2401 1-P-A, "General Electric Standard Application for Reactor Fuel" (revision specified in Specification 5.6.3).3. NEDE-31152P, "General Electric Fuel Bundle Designs," Revision 8, April 2001.4. 10 CFR 50.67.5. GE Part 21 Notification SC05-03, "Potential to Exceed Low Pressure Technical Specification Safety Limit," dated March 29, 2005.6. NRC Letter to A. Lingenfelter (GNF), 'Final Safety Evaluation for Global Nuclear Fuel (GNF) Topical Report (TR) NEDC-32851P, Revision 2, "GEXL14 Correlation for GE14 Fuel," (TAC No. MD5486)'dated August 3, 2007.7. Amendment No. 185, "Issuance of Amendment to Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits," dated November 25, 2014. (ADAMS Accession No. ML14281A318)

Monticello B 2.1.1-4 -Last Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 B 3.3 INSTRUMENTATION B 3.3.6.1 Primary Containment Isolation Instrumentation BASES BACKGROUND The primary containment isolation instrumentation automatically initiates closure of appropriate primary containment isolation valves (PCIVs). The function of the PCIVs, in combination with other accident mitigation systems, is to limit fission product release during and following postulated Design Basis Accidents (DBAs). Primary containment isolation within the time limits specified for those isolation valves designed to close automatically ensures that the release of radioactive material to the environment will be consistent with the assumptions used in the analyses for a DBA.The isolation instrumentation includes the sensors, relays, and switches that are necessary to cause initiation of primary containment and reactor coolant pressure boundary (RCPB) isolation.

Most channels include electronic equipment (e.g., trip units) that compares measured input signals with pre-established setpoints.

When the setpoint is exceeded, the channel output relay actuates, which then outputs a primary containment isolation signal to the isolation logic. Functional diversity is provided by monitoring a wide range of independent parameters.

The input parameters to the isolation logics are (a) reactor vessel water level, (b) area ambient temperatures, (c) main steam line (MSL) flow measurement, (d) Standby Liquid Control (SLC) System initiation, (e) main steam line pressure, (f) high pressure coolant injection (HPCI)and reactor core isolation cooling (RCIC) steam line flow, (g) drywell pressure, (h) HPCI and RCIC steam line pressure, (i) reactor water cleanup (RWCU) flow, and (j) reactor steam dome pressure.

Redundant sensor input signals from each parameter are provided for initiation of isolation.

The only exception is SLC System initiation.

Primary containment isolation instrumentation has inputs to the trip logic of the isolation functions listed below.1. Main Steam Line Isolation Reactor Vessel Water Level -Low Low and Main Steam Line Pressure -Low Functions receive inputs from four channels.

One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of all main steam isolation valves (MSIVs), MSL drain valves, and reactor sample isolation valves. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system.The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of all main steam isolation valves (MSIVs), MSL drain valves, and recirculation sample isolation valves.Monticello B 3.3.6.1 -1 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued)

The Main Steam Line Flow -High Function uses 16 flow channels, four for each steam line. One channel from each steam line inputs to one of the four trip strings. Two trip strings make up each trip system and both trip systems must trip to cause an isolation of the MSIVs, MSL drain valves, and reactor sample isolation valves. Each trip string has four inputs (one per MSL), any one of which will trip the trip string. The trip strings are arranged in a one-out-of-two taken twice logic. This is effectively a one-out-of-eight taken twice logic arrangement to initiate isolation.

The Main Steam Line Tunnel Temperature

-High Function receives input from 16 channels (four from each of the four tunnel areas). The logic is arranged similar to the Main Steam Line Flow -High Function.

One channel from each steam tunnel area inputs to one of four trip strings.Two trip strings make up a trip system, and both trip systems must trip to cause isolation.

MSL Isolation Functions isolate the Group 1 valves.2. Primary Containment Isolation The Reactor Vessel Water Level -Low and Drywell Pressure -High Functions receive inputs from four channels.

One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the Group 2 primary containment isolation valves (i.e., drywell and sump).Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation.

Primary Containment Isolation Drywell Pressure -High and Reactor Vessel Water Level -Low Functions isolate the Group 2 drywell and sump isolation valves.3, 4. High Pressure Coolant Iniection System Isolation and Reactor Core Isolation Cooling System Isolation The HPCI and RCIC Steam Line Flow -High Functions receive input from two channels for each system. Each channel output for each system is connected to a time delay relay that provides an output signal to two trip systems. The output signal is arranged so that any channel that trips will provide a trip signal to the trip system (one-out-of-two logic in each trip system). Each trip system associated with HPCI or RCIC will provide a closure signal to the associated system isolation valves. The HPCI Monticello B 3.3.6.1-2 Revision No. 34 Monticello B 3.3.6.1-2 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued)

Steam Supply Line Pressure -Low Function receives input from four channels.

The outputs are arranged in a one-out-of-two-twice logic in one trip system. The trip system isolates all HPCI isolation valves. The RCIC Steam Supply Line Pressure -Low Function receives input from four channels.

The outputs are arranged in a one-out-of-two twice logic. The output of the logic is directed to two trip systems. Each trip system is able, by itself, to isolate all RCIC isolation valves. The HPCI and RCIC Steam Line Area Temperature

-High Functions receive input from 16 channels for each system. The outputs of the 16 channels are grouped in four sets of four detectors.

Each set is arranged in one-out-two-twice logic. The outputs of each set provide trip signals to each of two separate isolation trip systems. Each trip system is able, by itself, to isolate all HPCI and RCIC isolation valves, as applicable.

HPCI Functions isolate the Group 4 valves and RCIC Functions isolate the Group 5 valves.5. Reactor Water Cleanup System Isolation The RWCU Room Temperature

-High, Reactor Vessel Water Level -Low Low, Drywell Pressure -High, and RWCU Flow -High Functions receive inputs from four channels.

One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the RWCU valves.Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of all RWCU isolation valves. The SLC System Initiation Function receives input from the SLC initiation switch. The switch provides trip signal inputs to both trip systems in any position other than "OFF." For the purpose of this Specification, the SLC initiation switch is considered to provide one channel input into each trip system. Each of the two trip systems is connected to one of the two valves on each RWCU penetration.

RWCU Functions isolate the Group 3 valves.6. Shutdown Coolinq System Isolation The Reactor Vessel Water Level -Low Function receives input from four reactor vessel water level channels.

One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to cause an isolation of the RHR Monticello B 3.3.6.1-3 Revision No. 34 Monticello B 3.3.6.1-3 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES BACKGROUND (continued) shutdown cooling supply isolation valves. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate isolation of the RHR shutdown cooling supply isolation valves. The Reactor Steam Dome Pressure -High Function receives input from two channels, both of which provide input to two trip systems.Any trip channel will trip both trip systems to initiate isolation of the RHR shutdown cooling supply isolation valves.Shutdown Cooling System Isolation Functions isolate the Group 2 RHR shutdown cooling supply isolation valves.7. Traversing Incore Probe (TIP) System Isolation The Reactor Vessel Water Level -Low and Drywell Pressure -High Functions receive inputs from four channels.

One channel associated with each Function inputs to one of four trip strings. Two trip strings make up a trip system and both trip systems must trip to initiate a TIP drive isolation signal. Any channel will trip the associated trip string. Only one trip string must trip to trip the associated trip system. The trip strings are arranged in a one-out-of-two taken twice logic to initiate a TIP drive isolation signal.When either Function actuates, the TIP drive mechanisms will withdraw the TIPs, if inserted, and close the inboard TIP System isolation ball valves when the TIPs are fully withdrawn.

The outboard TIP System isolation valves are manual shear valves.TIP System Isolation Functions isolate the Group 2 valves (TIP inboard isolation ball valves).APPLICABLE The isolation signals generated by the primary containment isolation SAFETY instrumentation are implicitly assumed in the safety analyses of ANALYSES, LCO, References 1 and 2 to initiate closure of valves to limit offsite doses.and APPLICABILITY Refer to LCO 3.6.1.3, "Primary Containment Isolation Valves (PCIVs)," Applicable Safety Analyses Bases for more detail of the safety analyses.Primary containment isolation instrumentation satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii).

Certain instrumentation Functions are retained for other reasons and are described below in the individual Functions discussion.

Monticello B 3.3.6.1-4 Revision No. 34 Monticello B 3.3.6.1-4 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

The OPERABILITY of the primary containment instrumentation is dependent on the OPERABILITY of the individual instrumentation channel Functions specified in Table 3.3.6.1-1.

Each Function must have a required number of OPERABLE channels, with their setpoints within the specified Allowable Values, where appropriate.

The actual setpoint is calibrated consistent with applicable setpoint methodology assumptions.

Allowable Values are specified for each Primary Containment Isolation Function specified in the Table. Nominal trip setpoints are specified in the setpoint calculations.

The nominal setpoints are selected to ensure that the setpoints do not exceed the Allowable Value between CHANNEL CALIBRATIONS.

Operation with a trip setpoint less conservative than the nominal trip setpoint, but within its Allowable Value, is acceptable.

A channel is inoperable if its actual trip setpoint is not within its required Allowable Value. Trip setpoints are those predetermined values of output at which an action should take place. The setpoints are compared to the actual process parameter (e.g., reactor vessel water level), and when the measured output value of the process parameter exceeds the setpoint, the associated device (e.g., trip unit) changes state. The analytic limits are derived from the limiting values of the process parameters obtained from the safety analysis.

The Allowable Values and nominal trip setpoints (NTSP) are derived, using the General Electric setpoint methodology guidance, as specified in the Monticello setpoint methodology.

The Allowable Values are derived from the analytic limits. The difference between the analytic limit and the Allowable Value allows for channel instrument accuracy, calibration accuracy, process measurement accuracy, and primary element accuracy.

The margin between the Allowable Value and the NTSP allows for instrument drift that might occur during the established surveillance period. Two separate verifications are performed for the calculated NTSP. The first, a Spurious Trip Avoidance Test, evaluates the impact of the NTSP on plant availability.

The second verification, an LER Avoidance Test, calculates the probability of avoiding a Licensee Event Report (or exceeding the Allowable Value) due to instrument drift. These two verifications are statistical evaluations to provide additional assurance of the acceptability of the NTSP and may require changes to the NTSP. Use of these methods and verifications provides the assurance that if the setpoint is found conservative to the Allowable Value during surveillance testing, the instrumentation would have provided the required trip function by the time the process reached the analytic limit for the applicable events.Certain Emergency Core Cooling Systems (ECCS) valves (e.g., RHR test line suppression pool cooling isolation) also serve the dual function of automatic PCIVs. The signals that isolate these valves are also associated with the automatic initiation of the ECCS. The instrumentation requirements and ACTIONS associated with these signals are addressed Monticello B 3.3.6.1-5 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) in LCO 3.3.5.1, "Emergency Core Cooling Systems (ECCS)Instrumentation," and are not included in this LCO.In general, the individual Functions are required to be OPERABLE in MODES 1, 2, and 3 consistent with the Applicability for LCO 3.6.1.1,"Primary Containment." Functions that have different Applicabilities are discussed below in the individual Functions discussion.

The specific Applicable Safety Analyses, LCO, and Applicability discussions are listed below on a Function by Function basis.Main Steam Line Isolation l.a. Reactor Vessel Water Level -Low Low Low reactor pressure vessel (RPV) water level indicates that the capability to cool the fuel may be threatened.

Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of the MSIVs and other interfaces with the reactor vessel occurs to prevent offsite dose limits from being exceeded.

The Reactor Vessel Water Level-Low Low Function is one of the many Functions assumed to be OPERABLE and capable of providing isolation signals. The Reactor Vessel Water Level -Low Low Function associated with isolation is assumed in the analysis of the recirculation line break (Ref. 1). The isolation of the MSLs on Low Low supports actions to ensure that offsite dose limits are not exceeded for a DBA.Reactor vessel water level signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Level -Low Low Allowable Value is chosen to be the same as the ECCS Reactor Vessel Water Level -Low Low Allowable Value (LCO 3.3.5.1) to ensure that the MSLs isolate on a potential loss of coolant accident (LOCA) to prevent offsite doses from exceeding 10 CFR 50.67 limits.This Function isolates the Group 1 valves.Monticello B 3~3~6.1-6 Revision No. 34 Monticello S3.3.6.1-6 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 1.b. Main Steam Line Pressure -Low Low MSL pressure indicates that there may be a problem with the turbine pressure regulation, which could result in a low reactor vessel water level condition and the RPV cooling down more than 100°F/hr if the pressure loss is allowed to continue.

The Main Steam Line Pressure -Low Function is directly assumed in the analysis of the pressure regulator failure (Ref. 3). For this event, the closure of the MSIVs ensures that the RPV temperature change limit (100°F/hr) is not reached. In addition, this Function supports actions to ensure that Safety Limit 2.1.1.1 is not exceeded. (This Function closes the MSIVs prior to pressure decreasing below 686 psig, which results in a scram due to MSIV closure, thus reducing reactor power to < 25% RTP.)The MSL low pressure signals are initiated from. four pressure switches that are connected to the MSL header close to the turbine stop valves.The pressure switches are arranged such that, even though physically separated from each other, each pressure switch is able to detect low MSL pressure.

Four channels of Main Steam Line Pressure -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be high enough to prevent excessive RPV depressurization.

The Main Steam Line Pressure -Low Function is only required to be OPERABLE in MODE 1 since this is when the assumed transient can occur (Ref. 3).This Function isolates the Group 1 valves.1.c. Main Steam Line Flow -Hiqh Main Steam Line Flow -High is provided to detect a break of the MSL and to initiate closure of the MSIVs. If the steam were allowed to continue flowing out of the break, the reactor would depressurize and the core could uncover. If the RPV water level decreases too far, fuel damage could occur. Therefore, the isolation is initiated on high flow to prevent or minimize core damage. The Main Steam Line Flow -High Function is one of the Functions assumed in the analysis of the main steam line break (MSLB) (Ref. 2). The isolation action, along with the scram function of the Reactor Protection System (RPS), ensures that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46 and offsite doses do not exceed the 10 CFR 50.67 limits.Monticello B 3.3.6.1-7 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

The MSL flow signals are initiated from 16 differential pressure indicating switches that are connected to the four MSLs (differential pressure indicating switches sense differential pressure across a flow restrictor).

The differential pressure indicating switches are arranged such that, even though physically separated from each other, all four connected to one MSL would be able to detect the high flow. Four channels of Main Steam Line Flow -High Function for each MSL (two channels per trip system)are available and are required to be OPERABLE so that no single instrument failure will preclude detecting a break in any individual MSL.The Allowable Value is chosen to ensure that offsite dose limits are not exceeded due to the break.This Function isolates the Group 1 valves.1 .d. Main Steam Line Tunnel Temperature

-High Main steam line tunnel temperature is provided to detect a leak in the RCPB in the steam tunnel and provides diversity to the high flow instrumentation.

Temperature is sensed in four different areas of the steam tunnel above each main steam line. The isolation occurs when a very small leak has occurred in any of the four areas. If the small leak is allowed to continue without isolation, offsite dose limits may be reached.However, credit for these instruments is not taken in any transient or accident analysis in the USAR, since bounding analyses are performed for large breaks, such as MSLBs.Main steam line tunnel temperature signals are initiated from bimetallic temperature switches located in the four areas being monitored.

Even though physically separated from each other, any temperature switch in any of the four areas is able to detect a leak. Therefore, sixteen channels of Main Steam Line Tunnel Temperature

-High Function are available but only eight channels (two channels in each of the four trip strings) are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Main Steam Line Tunnel Temperature

-High Allowable Value is chosen to detect a leak equivalent to between 5 gpm and 10 gpm.This Function isolates the Group 1 valves.Monticello B 3.3.6.1-8 Revision No. 34 Monticello B 3.3.6.1-8 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

Primary Containment Isolation 2.a. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.

The valves whose penetrations communicate with the primary containment are isolated to limit the release of fission products.The isolation of the primary containment on low RPV water level supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.

The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakage paths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from level transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Low Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1, "Reactor Protection System (RPS) Instrumentation"), since isolation of these valves is not critical to orderly plant shutdown.This Function isolates the Group 2 drywell and sump isolation valves.2.b. Drywell Pressure -Hiqh High drywell pressure can indicate a break in the RCPB inside the primary containment.

The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.

The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches that sense the pressure in the drywell. Four channels of Drywell Pressure -High are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.

Monticello B 3.3.6.1-9 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

This Function isolates the Group 2 drywell and sump isolation valves.High Pressure Coolant Injection and Reactor Core Isolation Cooling Systems Isolation 3.a, 4.a. HPCI and RCIC Steam Line Flow -Hiqh Steam Line Flow -High Functions are provided to detect a break of the RCIC or HPCI steam lines and initiate closure of the steam line isolation valves of the appropriate system. If the steam is allowed to continue flowing out of the break, the reactor will depressurize and the core can uncover. Therefore, the isolations are initiated on high flow to prevent or minimize core damage. The isolation action, along with the scram function of the RPS, ensures that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46. Specific credit for these Functions is not assumed in any USAR accident analyses since the bounding analysis is performed for large breaks such as recirculation and MSL breaks. However, these instruments prevent the RCIC or HPCI steam line breaks from becoming bounding.

The HPCI and RCIC Steam Line Flow- High channels are each provided with a time delay relay to prevent false isolations on HPCI or RCIC Steam Line Flow -High, as applicable, during system startup transients and therefore improves system reliability.

The HPCI and RCIC Steam Line Flow -High signals are initiated from differential pressure switches (two for HPCI and two for RCIC) that are connected to the system steam lines. Two channels of both HPCI and RCIC Steam Line Flow -High Functions are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.

In addition, each flow channel is connected to a time delay relay to delay the tripping of the associated HPCI or RCIC isolation trip system for a short time.The Allowable Values are chosen to be low enough to ensure that the trip occurs to prevent fuel damage and maintains the MSLB event as the bounding event. The Allowable Values associated with the time delay are chosen to be long enough to prevent false isolations due to system starts but not so long as to impact offsite dose calculations.

These Functions isolate the Groups 4 and 5 valves, as appropriate.

3.b, 4.b. HPCI and RCIC Steam Supply Line Pressure -Low Low HPCI or RCIC steam supply line pressure indicates that the pressure of the steam in the HPCI or RCIC turbine, as applicable, may be too low to continue operation of the associated systems turbine. These isolations Monticello B 3.3.61-10 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) are for equipment protection and are not assumed in any transient or accident analysis in the USAR. However, they also provide a diverse signal to indicate a possible system break. These instruments are included in Technical Specifications (TS) because of the potential for risk due to possible failure of the instruments preventing HPCI and RCIC initiations.

Therefore, they meet Criterion 4 of 10 CFR 50.36(c)(2)(ii).

The HPCI and RCIC Steam Supply Line Pressure -Low signals are initiated from pressure switches (four for HPCI and four for RCIC) that are connected to the system steam line. Four channels of both HPCI and RCIC Steam Supply Line Pressure -Low Functions are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Values are selected to be high enough to prevent damage to the systems turbine.These Functions isolate the Groups 4 and 5 valves, as appropriate.

3.c, 4.c. HPCI and RCIC Steam Line Area Temperature

-High HPCI and RCIC steam line area temperatures are provided to detect a leak from the associated system steam piping. The isolation occurs when a very small leak has occurred and is diverse to the high flow instrumentation.

If the small leak is allowed to continue without isolation, offsite dose limits may be reached. These Functions are not assumed in any USAR transient or accident analysis, since bounding analyses are performed for large breaks such as recirculation or MSL breaks.HPCI and RCIC Steam Line Area Temperature

-High signals are initiated from bimetallic temperature switches that are appropriately located to protect the system that is being monitored.

Eight instruments monitor each area. Sixteen channels for each HPCI and RCIC Steam Line Area Temperature

-High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Values are set low enough to detect a break in the associated system piping to ensure the core will not be uncovered and the radiological consequences are bounded by the main steam line break analysis.These Functions isolate the Groups 4 and 5 valves, as appropriate.

Monticello B 3.3.6.1-11 Revision No. 34 Monticello B 3.3.6. 1-11 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

Reactor Water Cleanup System Isolation 5.a. RWCU Flow -High The high flow signal is provided to detect a break in the RWCU System.This will detect leaks in the RWCU System when room temperature would not provide detection (i.e., a cold leg break). Should the reactor coolant continue to flow out of the break, offsite dose limits may be exceeded.Therefore, isolation of the RWCU System is initiated when high flow is sensed to prevent exceeding offsite doses. A time delay is provided to prevent spurious trips during most RWCU operational transients.

This Function is not assumed in any USAR transient or accident analysis, since bounding analyses are performed for large breaks such as MSLBs.The high flow signals are initiated from transmitters that monitor RWCU System flow. In addition, each flow channel is connected to a time delay relay to delay the tripping of the flow channel for a short time. Four channels of RWCU Flow -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The RWCU Flow -High Allowable Value ensures that a break of the RWCU piping is detected.

The Allowable Value associated with the time delay is chosen to be long enough to prevent false isolations due to system starts but not so long as to impact offsite dose calculations.

This Function isolates the Group 3 valves.5.b. RWCU Room Temperature

-High RWCU room temperatures are provided to detect a leak from the RWCU System. The isolation occurs even when very small leaks have occurred and is diverse to the high differential flow instrumentation for the hot portions of the RWCU System. If the small leak continues without isolation, offsite dose limits may be reached. Credit for these instruments is not taken in any transient or accident analysis in the USAR, since bounding analyses are performed for large breaks such as recirculation or MSL breaks.RWCU room temperature signals are initiated from temperature elements that are located in the room that is being monitored.

Four resistance temperature detectors provide input to the RWCU Room Temperature

-High Function.

Four channels are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.Monticello B 3.3.6.1-12 Revision No. 34 Monticello B 3.3.6.1-12 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

The RWCU Room Temperature

-High Allowable Value is set low enough to detect a leak equivalent to 210 gpm.This Function isolates the Group 3 valves.5.c. Drywell Pressure -High High drywell pressure can indicate a break in the RCPB inside the primary containment.

The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.

The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.High drywell pressure signals are initiated from pressure switches that sense the pressure in the drywell. Four channels of Drywell Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.

This Function isolates the Group 3 valves.5.d. SLC System Initiation The isolation of the RWCU System is required when the SLC System has been initiated to prevent dilution and removal of the boron solution by the RWCU System (Ref. 4). SLC System initiation signals are initiated from the SLC initiation switch.Two channels of the SLC System Initiation Function are available and are required to be OPERABLE only in MODES 1 and 2, since these are the only MODES where the reactor can be critical, and these MODES are consistent with the Applicability for the SLC System (LCO 3.1.7, "Standby Liquid Control (SLC) System").There is no Allowable Value associated with this Function since the channels are mechanically actuated based solely on the position of the SLC System initiation switch.This Function isolates the Group 3 valves.Monticello B 3.3.6.1-13 Revision No. 34 Monticello B 3.3.6.1-13 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) 5.e. Reactor Vessel Water Level -Low Low Low RPV water level indicates that the capability to cool the fuel may be threatened.

Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of some interfaces with the reactor vessel occurs to isolate the potential sources of a break. The isolation of the RWCU System on low low RPV water level supports actions to ensure that the fuel peak cladding temperature remains below the limits of 10 CFR 50.46. The Reactor Vessel Water Level -Low Low Function associated with RWCU isolation is not directly assumed in the USAR safety analyses because the RWCU System line break is bounded by breaks of larger systems (recirculation and MSL breaks are more limiting).

Reactor Vessel Water Level -Low Low signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels of Reactor Vessel Water Level -Low Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.The Reactor Vessel Water Level -Low Low Allowable Value was chosen to be the same as the ECCS Reactor Vessel Water Level -Low Low Allowable Value (LCO 3.3.5.1), since the capability to cool the fuel may be threatened.

This Function isolates the Group 3 valves.Shutdown Cooling System Isolation 6.a. Reactor Steam Dome Pressure -High The Reactor Steam Dome Pressure -High Function is provided to isolate the shutdown cooling portion of the Residual Heat Removal (RHR)System. This interlock is provided only for equipment protection to prevent an intersystem LOCA scenario, and credit for the interlock is not assumed in the accident or transient analysis in the USAR.The Reactor Steam Dome Pressure -High signals are initiated from two transmitters that are connected to different taps on the RPV. Two channels of Reactor Steam Dome Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.

The Function is only required to be OPERABLE in MODES 1, 2, and 3, since these are the only MODES in which the reactor can be pressurized; thus, equipment Monticello B 3.3.6.1-14 Revision No- 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) protection is needed. The Allowable Value was chosen to be low enough to protect the system equipment from overpressurization.

This Function isolates the Group 2 RHR shutdown cooling supply isolation valves.6.b. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.

Should RPV water level decrease too far, fuel damage could result. Therefore, isolation of some reactor vessel interfaces occurs to begin isolating the potential sources of a break. The Reactor Vessel Water Level -Low Function associated with RHR Shutdown Cooling System isolation is not directly assumed in safety analyses because a break of the RHR Shutdown Cooling System is bounded by breaks of the recirculation and MSL. The RHR Shutdown Cooling System isolation on low RPV water level supports actions to ensure that the RPV water level does not drop below the top of the active fuel during a vessel draindown event caused by a leak (e.g., pipe break or inadvertent valve opening) in the RHR Shutdown Cooling System.Reactor Vessel Water Level -Low signals are initiated from four differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Four channels (two channels per trip system) of the Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can preclude the isolation function.

As noted (footnote (a) to Table 3.3.6.1-1), only one channel per trip system (with an isolation signal available to one shutdown cooling pump supply isolation valve) of the Reactor Vessel Water Level -Low Function is required to be OPERABLE in MODES 4 and 5, provided RHR Shutdown Cooling System integrity is maintained.

System integrity is maintained provided the piping is intact and no maintenance is being performed that has the potential for draining the reactor vessel through the system.The Reactor Vessel Water Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1), since the capability to cool the fuel may be threatened.

The Reactor Vessel Water Level -Low Function is only required to be OPERABLE in MODES 3, 4, and 5 to prevent this potential flow path from lowering the reactor vessel level to the top of the fuel. In MODES 1 and 2, another isolation (i.e., Reactor Steam Dome Pressure -High) and Monticello B 3.3.6.1-15 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued) administrative controls ensure that this flow path remains isolated to prevent unexpected loss of inventory via this flow path.This Function isolates the Group 2 RHR shutdown cooling supply isolation valves.Traversing Incore Probe System Isolation 7.a. Reactor Vessel Water Level -Low Low RPV water level indicates that the capability to cool the fuel may be threatened.

The valves whose penetrations communicate with the primary containment are isolated to limit the release of fission products.The isolation of the primary containment on low RPV water level supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.

The Reactor Vessel Water Level -Low Function associated with isolation is implicitly assumed in the USAR analysis as these leakage paths are assumed to be isolated post LOCA.Reactor Vessel Water Level -Low signals are initiated from differential pressure transmitters that sense the difference between the pressure due to a constant column of water (reference leg) and the pressure due to the actual water level (variable leg) in the vessel. Two channels of Reactor Vessel Water Level -Low Function are available and are required to be OPERABLE to ensure that no single instrument failure can initiate an inadvertent isolation actuation.

The isolation function is ensured by the manual shear valve in each penetration.

The Reactor Vessel Water Level -Low Allowable Value was chosen to be the same as the RPS Reactor Vessel Water Level -Low Allowable Value (LCO 3.3.1.1), since isolation of these valves is not critical to orderly plant shutdown.This Function isolates the Group 2 TIP inboard isolation ball valves.7.b. Drywell Pressure -High High drywell pressure can indicate a break in the RCPB inside the primary containment.

The isolation of some of the primary containment isolation valves on high drywell pressure supports actions to ensure that offsite dose limits of 10 CFR 50.67 are not exceeded.

The Drywell Pressure -High Function, associated with isolation of the primary containment, is implicitly assumed in the USAR accident analysis as these leakage paths are assumed to be isolated post LOCA.Monticello B 3.3.6.1-16 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES APPLICABLE SAFETY ANALYSES, LCO, and APPLICABILITY (continued)

High drywell pressure signals are initiated from pressure transmitters that sense the pressure in the drywell. Two channels of Drywell Pressure -High Function are available and are required to be OPERABLE to ensure that no single instrument failure can initiate an inadvertent actuation.

The isolation function is ensured by the manual shear valve in each penetration.

The Allowable Value was selected to be the same as the ECCS Drywell Pressure -High Allowable Value (LCO 3.3.5.1), since this may be indicative of a LOCA inside primary containment.

This Function isolates the Group 2 TIP inboard isolation ball valves.ACTIONS The ACTIONS are modified by two Notes. Note 1 allows penetration flow path(s) to be unisolated intermittently under administrative controls.These controls consist of stationing a dedicated operator at the controls of the valve, who is in continuous communication with the control room.In this way, the penetration can be rapidly isolated when a need for primary containment isolation is indicated.

Note 2 has been provided to modify the ACTIONS related to primary containment isolation instrumentation channels.

Section 1.3, Completion Times, specifies that once a Condition has been entered, subsequent divisions, subsystems, components, or variables expressed in the Condition, discovered to be inoperable or not within limits, will not result in separate entry into the Condition.

Section 1.3 also specifies that Required Actions of the Condition continue to apply for each additional failure, with Completion Times based on initial entry into the Condition.

However, the Required Actions for inoperable primary containment isolation instrumentation channels provide appropriate compensatory measures for separate inoperable channels.

As such, a Note has been provided that allows separate Condition entry for each inoperable primary containment isolation instrumentation channel.A.1 Because of the diversity of sensors available to provide isolation signals and the redundancy of the isolation design, an allowable out of service time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, depending on the Function (12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for those Functions that have channel components common to RPS instrumentation and 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for those Functions that do not have channel components common to RPS instrumentation), has been shown to be acceptable (Refs. 5 and 6) to permit restoration of any inoperable channel to OPERABLE status. This out of service time is only acceptable provided the associated Function is still maintaining isolation capability Monticello B 3.3.6.1-17 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)(refer to Required Action B.1 Bases). If the inoperable channel cannot be restored to OPERABLE status within the allowable out of service time, the channel must be placed in the tripped condition per Required Action A.1.Placing the inoperable channel in trip would conservatively compensate for the inoperability, restore capability to accommodate a single failure, and allow operation to continue with no further restrictions.

Alternately, if it is not desired to place the channel in trip (e.g., as in the case where placing the inoperable channel in trip would result in an isolation), Condition C must be entered and its Required Action taken.B. 1 Required Action B.1 is intended to ensure that appropriate actions are taken if multiple, inoperable, untripped channels within the same Function result in redundant primary containment isolation capability being lost for the associated penetration flow path(s). The MSL, Primary Containment, most of the RWCU System, Shutdown Cooling System Reactor Vessel Water Level -Low, and TIP Isolation Functions are considered to be maintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip, such that both trip systems will generate a trip signal from the given Function on a valid signal. The other isolation Functions are considered to be maintaining primary containment isolation capability when sufficient channels are OPERABLE or in trip,*such that one trip system will generate a trip signal from the given Function on a valid signal. This ensures that one of the two PCIVs in the associated penetration flow path can receive an isolation signal from the given Function.

For Functions 1.a, 1.b, 2.a, 2.b, 5.a, 5.b, 5.c, 5.e, 6.b, 7.a, and 7.b, this would require both trip systems to have one channel OPERABLE or in trip. For Function 1.c, this would require both trip systems to have one channel, associated with each MSL, OPERABLE or in trip. Function 1.d channels monitor several locations within a given area (e.g., different locations within the main steam tunnel area).However, since any channel can detect a leak in any area, this would require both trip systems to have one channel OPERABLE or in trip. For Functions 3.a, 4.a, and 5.d, this would require one trip system to have one channel OPERABLE or in trip. For Function 3.b, this would require one channel in each trip string to be OPERABLE or in trip for the trip system. For Function 4.b, this would require one channel in each trip string to be OPERABLE or in trip for one trip system. For Functions 3.c and 4.c, eight channels monitor each area. These channels are arranged in two sets of four detectors, with each set of detectors arranged in a one-out-of-two-twice logic. Therefore, this would require a set in each area to have sufficient channels OPERABLE or in the tripped condition for one trip system.Monticello B 3.3.6.1-18 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)

The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities.

The 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Completion Time is acceptable because it minimizes risk while allowing time for restoration or tripping of channels.C._ 1 Required Action C.1 directs entry into the appropriate Condition referenced in Table 3.3.6.1-1.

The applicable Condition specified in Table 3.3.6.1-1 is Function and MODE or other specified condition dependent and may change as the Required Action of a previous Condition is completed.

Each time an inoperable channel has not met any Required Action of Condition A or B and the associated Completion Time has expired, Condition C will be entered for that channel and provides for transfer to the appropriate subsequent Condition.

D.1, D.2.1, and D.2.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the plant must be placed in a MODE or other specified condition in which the LCO does not apply. This is done by placing the plant in at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> (Required Actions D.2.1 and D.2.2). Alternately, the associated MSLs may be isolated (Required Action D.1), and, if allowed (i.e., plant safety analysis allows operation with an MSL isolated), operation with that MSL isolated may continue.

Isolating the affected MSL accomplishes the safety function of the inoperable channel. The Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.E. 1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the plant must be placed in a MODE or other specified condition in which the LCO does not apply. This is done by placing the plant in at least MODE 2 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.The allowed Completion Time of 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> is reasonable, based on operating experience, to reach MODE 2 from full power conditions in an orderly manner and without challenging plant systems.Monticello B 3.3.6.1-19 Revision No. 34 Monticello B 3.3.6.1-19 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued)

F. 1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, plant operations may continue if the affected penetration flow path(s) is isolated.

Isolating the affected penetration flow path(s) accomplishes the safety function of the inoperable channels.For the RWCU Room Temperature

-High Function, the affected penetration flow path(s) may be considered isolated by isolating only that portion of the system in the associated room monitored by the inoperable channel. That is, if the RWCU pump room A area channel is inoperable, the pump room A area can be isolated while allowing continued RWCU operation utilizing the B RWCU pump.The 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Completion Time is acceptable because it minimizes risk while allowing sufficient time for plant operations personnel to isolate the affected penetration flow path(s).G.1 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, plant operations may continue if the affected penetration flow path(s) is isolated.

Isolating the affected penetration flow path(s) accomplishes the safety function of the inoperable channels.

The 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time is acceptable due to the fact that these Functions provide a TIP System isolation, and the TIP System penetration is a small bore (approximately 1 inch), its isolation in a design basis event (with loss of offsite power) would be via the manually operated shear valves, and the ability to manually isolate by either the normal isolation valve or the shear valve is unaffected by the inoperable instrumentation.

H.1 and H.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the associated SLC subsystem(s) is declared inoperable or the RWCU System is isolated.

Since this Function is required to ensure that the SLC System performs its intended function, sufficient remedial measures are provided by declaring the associated SLC subsystems inoperable or isolating the RWCU System.The 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> Completion Time is acceptable because it minimizes risk while allowing sufficient time for personnel to isolate the RWCU System.Monticello B 3.3.6.1-20 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES ACTIONS (continued) 1.1 and 1.2 If the channel is not restored to OPERABLE status or placed in trip within the allowed Completion Time, the associated penetration flow path should be closed. However, if the shutdown cooling function is needed to provide core cooling, these Required Actions allow the penetration flow path to remain unisolated provided action is immediately initiated to restore the channel to OPERABLE status or to isolate the RHR Shutdown Cooling System (i.e., provide alternate decay heat removal capabilities so the penetration flow path can be isolated).

Actions must continue until the channel is restored to OPERABLE status or the RHR Shutdown Cooling System is isolated.SURVEILLANCE As noted at the beginning of the SRs, the SRs for each Primary REQUIREMENTS Containment Isolation instrumentation Function are found in the SRs column of Table 3.3.6.1-1.

The Surveillances are modified by a Note to indicate that when a channel (a channel that is directed to two trip systems is considered to be one channel) is placed in an inoperable status solely for performance of required Surveillances, entry into associated Conditions and Required Actions may be delayed for up to 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> provided the associated Function maintains primary containment isolation capability.

Upon completion of the Surveillance, or expiration of the 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowance, the channel must be returned to OPERABLE status or the applicable Condition entered and Required Actions taken. This Note is based on the reliability analysis (Refs. 5 and 6) assumption of the average time required to perform channel surveillance.

That analysis demonstrated that the 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> testing allowance does not significantly reduce the probability that the PCIVs will isolate the penetration flow path(s) when necessary.

SR 3.3.6.1.1 Performance of the CHANNEL CHECK once every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> ensures that a gross failure of instrumentation has not occurred.

A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels.

It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. A CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying the instrumentation continues to operate properly between each CHANNEL CALIBRATION.

Monticello B 3.3.6.1-21 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES SURVEILLANCE REQUIREMENTS (continued)

Agreement criteria are determined by the plant staff based on a combination of the channel instrument uncertainties, including indication and readability.

If a channel is outside the criteria, it may be an indication that the instrument has drifted outside its limit.The Frequency is based on operating experience that demonstrates channel failure is rare. The CHANNEL CHECK supplements less formal, but more frequent, checks of channels during normal operational use of the displays associated with the channels required by the LCO.SR 3.3.6.1.2 A CHANNEL FUNCTIONAL TEST is performed on each required channel to ensure that the channel will perform the intended function.

A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.

Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint methodology.

The 92 day Frequency of SR 3.3.6.1.2 is based on the reliability analyses described in References 5 and 6.SR 3.3.6.1.3 Calibration of trip units provides a check of the actual trip setpoints (including any specified time delay). The channel must be declared inoperable if the trip setting is discovered to be less conservative than the Allowable Value specified in Table 3.3.6.1-1.

If the trip setting is discovered to be less conservative than accounted for in the appropriate setpoint methodology, but is not beyond the Allowable Value, the channel performance is still within the requirements of the plant safety analysis.Under these conditions, the setpoint must be readjusted to be equal to or more conservative than that accounted for in the appropriate setpoint methodology.

The Frequency of 92 days is based on the reliability analyses of References 5 and 6.Monticello B 3.3.6.1-22 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES SURVEILLANCE REQUIREMENTS (continued)

SR 3.3.6.1.4 and SR 3.3.6.1.5 A CHANNEL CALIBRATION is a complete check of the instrument loop and the sensor. This test verifies the channel responds to the measured parameter within the necessary range and accuracy.

CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drifts between successive calibrations consistent with the plant specific setpoint methodology.

The Frequency of SR 3.3.6.1.4 is based on the assumption of a 92 day calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.

The Frequency of SR 3.3.6.1.5 is based on the assumption of a 24 month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.SR 3.3.6.1.6 The LOGIC SYSTEM FUNCTIONAL TEST demonstrates the OPERABILITY of the required isolation logic for a specific channel. The system functional testing performed on PCIVs in LCO 3.6.1.3 overlaps this Surveillance to provide complete testing of the assumed safety function.

The 24 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown these components usually pass the Surveillance when performed at the 24 month Frequency.

REFERENCES

1. USAR, Section 14.7.2.2. USAR, Section 14.7.3.3. USAR, Section 7.6.3.2.4.
4. USAR, Section 6.6.1.1.5. NEDC-31677P-A, "Technical Specification Improvement Analysis for BWR Isolation Actuation Instrumentation," July 1990.6. NEDC-30851P-A Supplement 2, "Technical Specifications Improvement Analysis for BWR Isolation Instrumentation Common to RPS and ECCS Instrumentation," March 1989.Monticello B 3.3.6.1-23 Revision No. 34 Monticello B 3.3.6.1-23 Revision No. 34 Primary Containment Isolation Instrumentation B 3.3.6.1 BASES REFERENCES (continued)
7. Amendment No. 185, "Issuance of Amendment to Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits," dated November 25, 2014. (ADAMS Accession No.ML14281A318)

Monticello B 3.3.6.1-24

-Last Revision No. 34 Monticello B 3.3.6.1-24

-Last Revision No. 34 ECCS -Operating 3.5.1 B 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS) AND REACTOR CORE ISOLATION COOLING (RCIC) SYSTEM B 3.5.1 ECCS -Operating BASES BACKGROUND The ECCS is designed, in conjunction with the primary and secondary containment, to limit the release of radioactive materials to the environment following a loss of coolant accident (LOCA). The ECCS uses two independent methods (flooding and spraying) to cool the core during a LOCA. The ECCS network consists of the High Pressure Coolant Injection (HPCI) System, the Core Spray (CS) System, the low pressure coolant injection (LPCI) mode of the Residual Heat Removal (RHR) System, and the Automatic Depressurization System (ADS). The suppression pool provides the required source of water for the ECCS.Although no credit is taken in the safety analyses for the condensate storage tanks (CSTs), they are capable of providing a source of water for the HPCI, LPCI, and CS Systems.On receipt of an initiation signal, ECCS pumps automatically start and the system aligns and the pumps inject water, taken either from the CSTs or suppression pool, into the Reactor Coolant System (RCS) as RCS pressure is overcome by the discharge pressure of the ECCS pumps.Although the system is initiated, ADS action is delayed, allowing the operator to interrupt the timed sequence if the system is not needed. The HPCI pump discharge pressure almost immediately exceeds that of the RCS, and the pump injects coolant into the vessel to cool the core. If the break is small, the HPCI System will maintain coolant inventory as well as vessel level while the RCS is still pressurized.

If HPCI fails, it is backed up by ADS in combination with LPCI and CS. In this event, the ADS timed sequence would be allowed to time out and open the selected safety/relief valves (S/RVs) depressurizing the RCS, thus allowing the LPCI and CS to overcome RCS pressure and inject coolant into the vessel. If the break is large, RCS pressure initially drops rapidly and the LPCI and CS cool the core.Water from the break returns to the suppression pool where it is used again and again. Water in the suppression pool is circulated through a heat exchanger cooled by the RHR Service Water System. Depending on the location and size of the break, portions of the ECCS may be ineffective; however, the overall design is effective in cooling the core regardless of the size or location of the piping break.The combined operation of all ECCS subsystems are designed to ensure that no single active component failure will prevent automatic initiation and successful operation of the minimum required ECCS equipment.

Monticello B 3.5. 1-1 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued)

The CS System (Ref. 1) is composed of two independent subsystems.

Each subsystem consists of a motor driven pump, a spray sparger above the core, and piping and valves to transfer water from the suppression pool to the sparger. The CS System is designed to provide cooling to the reactor core when reactor pressure is low. Upon receipt of an initiation signal, the CS pumps in both subsystems are automatically started in approximately 15 seconds after AC power is available.

When the RPV pressure drops sufficiently, CS System flow to the RPV begins. A full flow test line is provided to route water from and to the suppression pool to allow testing of the CS System without spraying water in the RPV.LPCI is an independent operating mode of the RHR System. There are two LPCI subsystems (Ref. 2), each consisting of two motor driven pumps in the same RHR loop and piping and valves to transfer water from the suppression pool to the RPV via the selected recirculation loop.Each LPCI subsystem consists of a common suction line from the suppression pool, parallel flowpaths through the two RHR pumps, and a common injection line to the RPV. An inoperable "LPCI pump" refers to the condition where inoperable components associated with the flowpath through one of the two parallel RHR pumps renders that LPCI pump flowpath inoperable, but the common portions of the associated LPCI subsystem are OPERABLE.The LPCI System is equipped with a loop select logic that determines which, if any, of the recirculation loops has been broken and selects the non-broken loop for injection.

If neither loop is determined to be broken, a preselected loop is used for injection.

The LPCI System cross-tie valve must be open to support OPERABILITY of both LPCI subsystems.

Similarly, the LPCI swing bus, consisting of two motor control centers which are directly connected together, is required to be energized from the Division 1 power supply (normal source), with automatic transfer capability to the Division 2 power supply (backup source) to support both LPCI subsystems.

The LPCI subsystems are designed to provide core cooling at low RPV pressure.

Upon receipt of an initiation signal, all four LPCI pumps are automatically started (pumps A and B approximately 5 seconds after AC power is available and pumps C and D approximately 10 seconds after AC power is available).

RHR System valves in the LPCI flow path are automatically positioned to ensure the proper flow path for water from the suppression pool to inject into the selected recirculation loop. When the RPV pressure drops sufficiently, the LPCI flow to the RPV, via the selected recirculation loop, begins. The water then enters the reactor through the jet pumps. Full flow test lines are provided for each LPCI subsystem to route water from and to the suppression pool, to allow testing of the LPCI pumps without injecting water into the RPV.These test lines also provide suppression pool cooling capability, as described in LCO 3.6.2.3, "RHR Suppression Pool Cooling." An intertie Monticello B 3.5.1-2 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued) line is provided to connect the RHR shutdown cooling suction line with the two RHR shutdown cooling loop return lines to the associated recirculation loop. This line includes two RHR intertie return line isolation valves that are normally closed and a RHR intertie suction line isolation valve that is normally open. The purpose of this line is to reduce the potential for water hammer in the recirculation and RHR systems. The isolation valves are opened during a cooldown to establish recirculation flow through the RHR suction line and return lines, thereby ensuring a uniform cooldown of this piping. The RHR intertie loop return line isolation valves receive a closure signal on LPCI initiation.

In the event of an inoperable RHR intertie loop return line isolation valve, there is a potential for some of the LPCI flow to be diverted to the broken loop during a LOCA. This may cause early transition boiling during a LOCA but this condition was evaluated in the safety analysis and found acceptable.

The RHR intertie line is to be isolated within 18 hours2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> if discovered open in MODE 1 to eliminate the need to compensate for the small change in jet pump drive flow and a reduction in core flow during a loss of coolant accident.The HPCI System (Ref. 3) consists of a steam driven turbine pump unit, piping, and valves to provide steam to the turbine, as well as piping and valves to transfer water from the suction source to the core via the feedwater system line, where the coolant is distributed within the RPV through the feedwater sparger. Suction piping for the system is provided from the CSTs and the suppression pool. Pump suction for HPCI is normally aligned to the CSTs to minimize injection of suppression pool water into the RPV. However, if the water level in any CST is low, or if the suppression pool level is high, an automatic transfer to the suppression pool water source ensures a water supply for continuous operation of the HPCI System. The steam supply to the HPCI turbine is piped from a main steam line upstream of the associated inboard main steam isolation valve.The HPCI System is designed to provide core cooling for a wide range of reactor pressures (150 psig to 1120 psig). Upon receipt of an initiation signal, the HPCI turbine stop valve and turbine steam supply valve open and the turbine accelerates to a specified speed. As the HPCI flow increases, the turbine governor valve is automatically adjusted to maintain design flow. Exhaust steam from the HPCI turbine is discharged to the suppression pool. A full flow test line is provided to route water from and to the CSTs to allow testing of the HPCI System during normal operation without injecting water into the RPV.The ECCS pumps are provided with minimum flow bypass lines, which discharge to the suppression pool. The valves in these lines automatically open or remain open to prevent pump damage due to Monticello B 3.5.1-3 Revision No. 34 ECCS -Operating 3.5.1 BASES BACKGROUND (continued) overheating when other discharge line valves are closed. To ensure rapid delivery of water to the RPV and to minimize water hammer effects, all ECCS pump discharge lines are filled with water. The LPCI and CS System discharge lines are kept full of water using a "keep fill" system (Condensate Service System). The HPCI System is normally aligned to the CSTs. The height of water in the CSTs maintains the piping full of water up to the first closed isolation valve in the discharge piping. The HPCI System discharge piping near the normally closed injection valve to the Feedwater System absorbs heat from the feedwater via conduction and valve leakage. This has the potential to form a localized steam void in the HPCI discharge piping and cause a momentum transient upon HPCI initiation.

Although the momentum transient has been evaluated and shown not to adversely affect HPCI System operation, the Condensate System is utilized as a "keep-fill" system to maintain the HPCI discharge piping between the normally closed injection valve and the pump discharge check valve charged with water to prevent possible void formation and minimize momentum transient effects. This "keep-fill" system is relied upon during normal operation, but is not required for the operability of the HPCI System under normal plant conditions.

Additional assessment of operability may be required under off-normal conditions, such as HPCI suction aligned to the suppression pool. The relative height of the feedwater line connection for HPCI is such that the water in the feedwater lines keeps the remaining portion of the HPCI discharge line full of water.The ADS (Ref. 4) consists of three of the eight S/RVs. It is designed to provide depressurization of the RCS during a small break LOCA if HPCI fails or is unable to maintain required water level in the RPV. ADS operation reduces the RPV pressure to within the operating pressure range of the low pressure ECCS subsystems (CS and LPCI), so that these subsystems can provide coolant inventory makeup. The ADS valves are normally supplied by the Instrument Nitrogen System. This pneumatic supply will automatically transfer to the Instrument Air System on high or low Instrument Nitrogen System pressure.

However, both of these pneumatic supplies are non-safety related and are not assumed to operate following an accident.

The safety grade pneumatic supply to two of the ADS valves is the Alternate Nitrogen System and to the third ADS valve is the S/RV Accumulator bank. The Alternate Nitrogen System contains two independent trains (i.e., subsystems) of safety related replaceable gas cylinders that supply two of the three ADS valves (S/RVs A and C). One Alternate Nitrogen System train supplies one ADS valve and other non-ADS related pneumatic loads and the other Alternate Nitrogen System train supplies a different ADS valve and other non-ADS related pneumatic loads. The S/RV Accumulator Bank supplies the third ADS valve (S/RV D), and consists of a dedicated safety related backup accumulator bank and an associated inlet check valve.Monticello B 3.5.1-4 Revision No. 34 ECCS -Operating 3.5.1 BASES APPLICABLE The ECCS performance is evaluated for the entire spectrum of break SAFETY sizes for a postulated LOCA. The accidents for which ECCS operation is ANALYSES required are presented in References 5 and 6. The required analyses and assumptions are defined in Reference

7. The results of these analyses are also described in References 5 and 6.This LCO helps to ensure that the following acceptance criteria for the ECCS (Ref. 8), established by 10 CFR 50.46 (Ref. 9), will be met following a LOCA, assuming the worst case single active component failure in the ECCS: a. Maximum fuel element cladding temperature is < 2200°F;b. Maximum cladding oxidation is < 0.17 0 times the total cladding thickness before oxidation;
c. Maximum hydrogen generation from a zirconium water reaction is< 0.01 times the hypothetical amount that would be generated if all of the metal in the cladding surrounding the fuel, excluding the cladding surrounding the plenum volume, were to react;d. The core ig maintained in a coolable geometry; and e. Adequate long term cooling capability is maintained.

The limiting single failures are discussed in Reference

10. For a large discharge pipe break LOCA, failure of the LPCI valve on the unbroken recirculation loop is considered the most limiting break/failure combination.

For a small break LOCA, HPCI failure is the most severe failure. Extended Power Uprate removed the allowance for one ADS valve out-of-service (Ref. 17). The remaining OPERABLE ECCS subsystems provide the capability to adequately cool the core and prevent excessive fuel damage.The ECCS satisfy Criterion 3 of 10 CFR 50.36(c)(2)(ii).

LCO Each ECCS injection/spray subsystem and three ADS valves are required to be OPERABLE.

The ECCS injection/spray subsystems are defined as the two CS subsystems, the two LPCI subsystems, and one HPCI System. The low pressure ECCS injection/spray subsystems are defined as the two CS subsystems and the two LPCI subsystems.

With less than the required number of ECCS subsystems OPERABLE, the potential exists that during a limiting design basis LOCA concurrent with the worst case single failure, the limits specified in Reference 9 could be exceeded.

All ECCS subsystems must therefore be OPERABLE to satisfy the single failure criterion required by Reference 9.Monticello B 3.5.1-5 Revision No. 34 ECCS -Operating 3.5.1 BASES LCO (continued)

As noted, LPCI subsystems may be considered OPERABLE during alignment and operation for decay heat removal when below the actual RHR shutdown cooling supply isolation interlock in MODE 3, if capable of being manually realigned (remote or local) to the LPCI mode and not otherwise inoperable.

Alignment and operation for decay heat removal includes when the required RHR pump is not operating or when the system is realigned from or to the RHR shutdown cooling mode. This allowance is necessary since the RHR System may be required to operate in the shutdown cooling mode to remove decay heat and sensible heat from the reactor. At these low pressures and decay heat levels, a reduced complement of ECCS subsystems should provide the required core cooling, thereby allowing operation of RHR shutdown cooling when necessary.

APPLICABILITY All ECCS subsystems are required to be OPERABLE during MODES 1, 2, and 3, when there is considerable energy in the reactor core and core cooling would be required to prevent fuel damage in the event of a break in the primary system piping. In MODES 2 and 3, when reactor steam dome pressure is < 150 psig, ADS and HPCI are not required to be OPERABLE because the low pressure ECCS subsystems can provide sufficient flow below this pressure.

ECCS requirements for MODES 4 and 5 are specified in LCO 3.5.2, "ECCS -Shutdown." ACTIONS A Note prohibits the application of LCO 3.0.4.b to an inoperable HPCI subsystem.

There is an increased risk associated with entering a MODE or other specified condition in the Applicability with an inoperable HPCI subsystem and the provisions of LCO 3.0.4.b, which allow entry into a MODE or other specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in this circumstance.

A. 1 If one LPCI pump is inoperable, the inoperable pump must be restored to OPERABLE status within 30 days. In this condition, the remaining OPERABLE pumps provide adequate core cooling during a LOCA.However, overall LPCI reliability is reduced, because a single failure in one of the remaining OPERABLE LPCI subsystems, concurrent with a LOCA, may result in the LPCI subsystems not being able to perform their intended safety function.

The 30 day Completion Time is based on a reliability study cited in Reference 11 that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowable repair times (i.e., Completion Times).Monticello B 3.5.1-6 Revision No. 34 Monticello B 3.5.1-6 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)

B. 1 If a LPCI subsystem is inoperable for reasons other than Condition A, or a CS subsystem is inoperable, the inoperable low pressure injection/spray subsystem must be restored to OPERABLE status within 7 days. In this condition, the remaining OPERABLE subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced, because a single failure in one of the remaining OPERABLE subsystems, concurrent with a LOCA, may result in the ECCS not being able to perform its intended safety function.

The 7 day Completion Time is based on a reliability study (Ref. 11) that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowed outage times (i.e., Completion Times).C._1 If one LPCI pump in each subsystem is inoperable, one inoperable LPCI pump must be restored to OPERABLE status within 7 days. In this condition, the remaining OPERABLE ECCS subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced because a single failure in one of the remaining OPERABLE ECCS subsystems, concurrent with a LOCA, may result in the ECCS not being able to perform its intended safety function.

The 7 day Completion Time is based on a reliability study (Ref. 11) that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service. The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowed outage times (i.e., Completion Times).D. 1 If two LPCI subsystems are inoperable for reasons other than Condition C or G, one inoperable subsystem must be restored to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. In this condition, the remaining OPERABLE CS subsystems provide adequate core cooling during a LOCA. However, overall ECCS reliability is reduced, because a single failure in one of the remaining CS subsystems, concurrent with a LOCA, may result in ECCS not being able to perform its intended safety function.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time is based on a reliability study cited in Reference 11 that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service; and on previous BWR licensing precedents, and was approved for Monticello by Amendment Monticello B 3.5.1-7 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued) 162 (Reference 14). The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowable repair times (i.e., Completion Times).E.1, E.2 and E.3 If any one low pressure CS subsystem is inoperable in addition to either one LPCI subsystem OR one or two LPCI pump(s), adequate core cooling is ensured by the OPERABILITY of HPCI and the remaining low pressure ECCS subsystems.

This condition results in a complement of remaining OPERABLE low pressure ECCS (i.e., one CS and either two or three LPCI pumps) whose makeup capacity is bounded by the minimum makeup capacity evaluated in the accident analysis, which assumes the limiting single component failure (Reference 10). However, overall ECCS reliability is reduced, because a single active component failure in the remaining low pressure ECCS, concurrent with a design basis LOCA, could result in the minimum required ECCS equipment not being available.

Since both a CS subsystem is inoperable and a reduction in the makeup capability of the LPCI System has occurred, a more restrictive Completion Time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> is required to restore either a CS subsystem or, either a LPCI subsystem OR the LPCI pump(s) to OPERABLE status. The Completion Time was developed using engineering judgment based on a reliability study cited in Reference 11, previous BWR licensing precedents, and approved for Monticello by Amendment 162 (Reference 14). This Completion Time has been found to be acceptable through operating experience.

Monticello B 3.5.1-8 Revision No. 34 Monticello B 3.5.1-8 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)

F.1 and F.2 If any Required Action and associated Completion Time of Condition A, B, C, D, or E is not met, the plant must be brought to a MODE in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.G.1 If two LPCI subsystems are inoperable due to open RHR intertie return line isolation valve(s), the RHR intertie line must be isolated within 18 hours2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br />. The line can be isolated by closing both RHR intertie return line isolation valves or by closing one RHR intertie return line isolation valve and the RHR intertie suction line isolation valve. The 18 hour2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> Completion Time is reasonable, considered the low probability of a DBA occurring during this period.H._1 If the Required Action and associated Completion Time of Condition G is not met, the plant must be brought to a MODE in which the RHR intertie return line isolation valves are not required to be closed. To achieve this status, the plant must be brought to at least MODE 2 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.1.1 and 1.2 If the HPCI System is inoperable and the RCIC System is verified to be OPERABLE, the HPCI System must be restored to OPERABLE status within 14 days. In this condition, adequate core cooling is ensured by the OPERABILITY of the redundant and diverse low pressure ECCS injection/spray subsystems in conjunction with ADS. Also, the RCIC System will automatically provide makeup water at most reactor operating pressures.

Verification of RCIC OPERABILITY is therefore required immediately when HPCI is inoperable.

This may be performed as an administrative check by examining logs or other information to determine Monticello B 3.5.1-9 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued) if RCIC is out of service for maintenance or other reasons. It does not mean to perform the Surveillances needed to demonstrate the OPERABILITY of the RCIC System. If the OPERABILITY of the RCIC System cannot be immediately verified, however, Condition M must be entered. In the event of component failures concurrent with a design basis LOCA, there is a potential, depending on the specific failures, that the minimum required ECCS equipment will not be available.

A 14 day Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.

J.1 and J.2 If any one low pressure ECCS injection/spray subsystem, or one LPCI pump in both LPCI subsystems, is inoperable in addition to an inoperable HPCI System, the inoperable low pressure ECCS injection/spray subsystem(s) or the HPCI System must be restored to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. In this condition, adequate core cooling is ensured by the OPERABILITY of the ADS and the remaining low pressure ECCS subsystems.

However, the overall ECCS reliability is significantly reduced because a single failure in one of the remaining OPERABLE subsystems concurrent with a design basis LOCA may result in the ECCS not being able to perform its intended safety function.

Since both a high pressure system (HPCI) and a low pressure subsystem(s) are inoperable, a more restrictive Completion Time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> is required to restore either the HPCI System or the low pressure ECCS injection/spray subsystem(s) to OPERABLE status. This Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.

K. 1 The LCO requires three ADS valves to be OPERABLE in order to provide the ADS function.

Reference 12 contains the results of an analysis that evaluated the effect of one ADS valve being out of service. Per this analysis, operation of only two ADS valves will provide the required depressurization.

However, overall reliability of the ADS is reduced, because a single failure in the OPERABLE ADS valves could result in a reduction in depressurization capability.

Therefore, operation is only allowed for a limited time. The 14 day Completion Time is based on a reliability study cited in Reference 11 and has been found to be acceptable through operating experience.

Monticello B 3.5.1-10 Revision No. 34 Monticello B 3.5.1-10 Revision No. 34 ECCS -Operating 3.5.1 BASES ACTIONS (continued)

L.1 and L.2 If any Required Action and associated Completion Time of Condition I, J, or K is not met, or if one ADS valve is inoperable and Condition A, B, C, D, or G are entered, or if two or more ADS valves are inoperable, or if the HPCI System is inoperable and Condition D, E, or G are entered, then the plant must be brought to a condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and reactor steam dome pressure reduced to < 150 psig within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.M._ 1 If two or more low pressure ECCS injection/spray systems are inoperable for reasons other than Conditions C, D, E, or G, the plant is in a degraded condition not specifically justified for continued operation, and may be in a condition outside of the accident analyses.

Therefore, LCO 3.0.3 must be entered immediately.

For some cases, per the single failure assumptions of the accident analysis the plant may not be in an unanalyzed condition (Ref. 10) but the allowable duration for operation in the condition has not been justified, therefore LCO 3.0.3 must be entered immediately.

Monticello B 3.5.1-11 Revision No. 34 Monticello B 3.5.1-11 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE SR 3.5.1.1 REQUIREMENTS The flow path piping has the potential to develop voids and pockets of entrained air. Maintaining the pump discharge lines of the CS System and LPCI subsystems full of water ensures that the ECCS will perform properly, injecting its full capacity into the RCS upon demand. This will also prevent a water hammer following an ECCS initiation signal. One acceptable method of ensuring that the lines are full is to vent at the high points. While the potential for developing voids in the HPCI System exists, the effects of a void have been analyzed and shown to be acceptable.

The 31 day Frequency is based on the gradual nature of void buildup in the ECCS piping, the procedural controls governing system operation, and operating experience.

SR 3.5.1.2 Verifying the correct alignment for manual, power operated, and automatic valves in the ECCS flow paths provides assurance that the proper flow paths will exist for ECCS operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these were verified to be in the correct position prior to locking, sealing, or securing.

A valve that receives an initiation signal is allowed to be in a nonaccident position provided the valve will automatically reposition in the proper stroke time. This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of potentially being mispositioned are in the correct position.

This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves. For the HPCI System, this SR also includes the steam flow path for the turbine and the flow controller position.The 31 day Frequency of this SR was derived from the Inservice Testing Program requirements for performing valve testing at least once every 92 days. The Frequency of 31 days is further justified because the valves are operated under procedural control and because improper valve position would only affect a single subsystem.

This Frequency has been shown to be acceptable through operating experience.

SR 3.5.1.3 Verification every 31 days that each ADS pneumatic pressure is within the analysis limits (S/RV Accumulator Bank header pressure >_ 88.3 psig and Alternate Nitrogen System supply (ALT N2 TRAIN A (or B) SUPPLY)pressure _ 410 psig (Ref. 13)) ensures adequate pressure for reliable ADS operation.

The supply associated with each ADS valve provides pneumatic pressure for valve-actuation.

The design pneumatic supply pressure requirements for the S/RV accumulator bank and Alternate Monticello B 3.5.1-12 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)

Nitrogen System trains (replaceable gas cylinders) are such that, following a failure of the pneumatic supply to them, at least five valve actuations can occur over a ten hour period (Ref. 10). The ECCS safety analysis assumes only one actuation to achieve the depressurization required for operation of the low pressure ECCS. The 31 day Frequency takes into consideration administrative controls over operation of the system and alarms for low pressure.Each Alternate Nitrogen System is designed for the three upstream nitrogen bottles to maintain OPERABILITY while the fourth, downstream, bottle is being replaced with a fully charged bottle. During bottle changeout the capacity of the system is temporarily reduced. This is acceptable based on the remaining capacity (only one actuation is necessary to depressurize), the low rate of usage, the fact that procedures have been initiated for replenishment, and the low probability of an event during this brief period.SR 3.5.1.4 Verification every 31 days that the RHR System intertie return line isolation valves are closed ensures that each LPCI subsystem will provide the required flow rate to the reactor pressure vessel. The 31 day Frequency has been found acceptable, considering that these valves are under strict administrative controls that will ensure the valves continue to remain closed.The SR is modified by a Note stating that the SR is only required to be met in MODE 1. During MODE 1 operations with the RHR System intertie line isolation valves open, some of the LPCI flow may be diverted to the broken recirculation loop during a LOCA, potentially resulting in early transition boiling. In other MODES, the intertie line may be opened because the impact on the LOCA analyses is negligible.

SR 3.5.1.5 Verification of correct breaker alignment to the LPCI swing bus demonstrates that the normal AC electrical power source is powering the swing bus and the backup AC electrical power source is available to ensure proper operation of the LPCI injection valves and the recirculation pump discharge valves. If either the normal source is not powering the LPCI swing bus or the backup source is not available to the LPCI swing bus, one of the LPCI subsystems must be considered inoperable.

The 31 day Frequency has been found acceptable based on engineering judgment and operating experience.

Monticello B 3.5.1-13 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)

SR 3.5.1.6 Cycling the recirculation pump discharge valves through one complete cycle of full travel demonstrates that the valves are mechanically OPERABLE and will close when required.

Upon initiation of an automatic LPCI subsystem injection signal, these valves are required to be closed to ensure full LPCI subsystem flow injection in the reactor via the recirculation jet pumps. De-energizing the valve in the closed position will also ensure the proper flow path for the LPCI subsystem.

Acceptable methods of de-energizing the valve include de-energizing breaker control power, racking out the breaker or removing the breaker.The Frequency of this SR is in accordance with the Inservice Testing Program. If any recirculation pump discharge valve is inoperable and in the open position, both LPCI subsystems must be declared inoperable.

SR 3.5.1.7, SR 3.5.1.8, and SR 3.5.1.9 The performance requirements of the low pressure ECCS pumps are determined through application of the 10 CFR 50, Appendix K criteria (Ref. 7). This periodic Surveillance is performed (in accordance with the ASME Operation and Maintenance (OM) Code requirements for the ECCS pumps) to verify that the ECCS pumps will develop the flow rates required by the respective analyses.

The low pressure ECCS pump flow rates ensure that adequate core cooling is provided to satisfy the acceptance criteria of Reference

9. The pump flow rates are verified against a system head equivalent to the reactor to containment pressure expected during a LOCA. In addition, for LPCI the system head for the tested pump must include a head correction that corresponds to two LPCI pumps delivering 7,740 gpm. The total system pump outlet pressure is adequate to overcome the elevation head pressure between the pump suction and the vessel discharge, the piping friction losses, and RPV pressure present during a LOCA. These values are established analytically.

The flow tests for the HPCI System are performed at two different pressure ranges such that system capability to provide rated flow against a system head corresponding to reactor pressure is tested at both the higher and lower operating ranges of the system. The required system head should overcome the RPV pressure and associated discharge line losses. Adequate reactor steam pressure must be available to perform the tests. Additionally, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the HPCI System diverts steam flow. Therefore, sufficient time is allowed after adequate pressure and flow are achieved to perform Monticello B 3.5.1-14 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) these tests. Reactor steam pressure must be > 950 psig to perform SR 3.5.1.8 and > 150 psig to perform SR 3.5.1.9. Adequate steam flow is represented by at least one turbine bypass valve 80% open. Reactor startup is allowed prior to performing the low pressure Surveillance test because the reactor pressure is low and the time allowed to satisfactorily perform the Surveillance test is short. The reactor pressure is allowed to be increased to normal operating pressure since it is assumed that the low pressure test has been satisfactorily completed and there is no indication or reason to believe that HPCI is inoperable.

Therefore, SR 3.5.1.8 and SR 3.5.1.9 are modified by Notes that state the Surveillances are not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after the reactor steam pressure and flow are adequate to perform the test. The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed for performing the flow test after the required pressure and flow are reached is sufficient to achieve stable conditions for testing and provides reasonable time to complete the SRs. The Frequency for SR 3.5.1.7 and SR 3.5.1.8 is in accordance with the Inservice Testing Program requirements.

The 24 month Frequency for SR 3.5.1.9 is based on the need to perform the Surveillance under the conditions that apply during a startup from a plant outage. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

SR 3.5.1.10 The ECCS subsystems are required to actuate automatically to perform their design functions.

This Surveillance verifies that, with a required system initiation signal (actual or simulated), the automatic initiation logic of HPCI, CS, and LPCI will cause the systems or subsystems to operate as designed, including actuation of the system throughout its emergency operating sequence, automatic pump startup and actuation of all automatic valves to their required positions.

This SR also ensures that the HPCI System will automatically restart on a Reactor Vessel Water Level -Low Low signal received subsequent to a Reactor Vessel Water Level -High trip and that the suction is automatically transferred from the CSTs to the suppression pool on a Suppression Pool Water Level -High or Condensate Storage Tank Level -Low signal. The LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1 overlaps this Surveillance to provide complete testing of the assumed safety function.Monticello B 3.5.1-15 Revision No. 34 Monticello B 3.5.1-15 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued)

The 24 month Frequency is based on the need to perform the Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by a Note that excludes vessel injection/spray during the Surveillance.

Since all active components are testable and full flow can be demonstrated by recirculation through the test line, coolant injection into the RPV is not required during the Surveillance.

SR 3.5.1.11 The ADS designated S/RVs are required to actuate automatically upon receipt of specific initiation signals. A system functional test is performed to demonstrate that the mechanical portions of the ADS function (i.e., solenoids) operate as designed when initiated either by an actual or simulated initiation signal, causing proper actuation of all the required components.

SR 3.5.1.12 and the LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1 overlap this Surveillance to provide complete testing of the assumed safety function.The 24 month Frequency is based on the need to perform the Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by a Note that excludes valve actuation since the valves are individually tested in accordance with SR 3.5.1.12.SR 3.5.1.12 This Surveillance verifies that each ADS valve is capable of being opened, which can be determined by either of two means, i.e., Method 1 or Method 2. Applying Method 1, approved in Reference 15, valve OPERABILITY and setpoints for overpressure protection are verified in Monticello B 3.5.1-16 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) accordance with the ASME OM Code. Applying Method 2, a manual actuation of the ADS valve is performed to verify the valve is functioning properly.Method 1 Valve OPERABILITY and setpoints for overpressure protection are verified in accordance with the requirements of the ASME OM Code (Ref. 16). Proper ADS valve function is verified through performance of inspections and overlapping tests on component assemblies, demonstrating the valve is capable of being opened. Testing is performed to demonstrate that each:* ADS S/RV main stage opens and passes steam when the associated pilot stage actuates; and* ADS S/RV second stage actuates to open the associated main stage when the pneumatic actuator is pressurized;

  • ADS S/RV solenoid valve ports pneumatic pressure to the associated S/RV actuator when energized;" ADS S/RV actuator stem moves when dry lift tested in-situ.(With exception of main and pilot stages this test demonstrates mechanical operation without steam.)The solenoid valves and S/RV actuators are functionally tested once per cycle as part of the Inservice Testing Program. The S/RV assembly is bench tested as part of the certification process, at intervals determined in accordance with the Inservice Testing Program. Maintenance procedures ensure that the S/RV is correctly installed in the plant, and that the S/RV and associated piping remain clear of foreign material that might obstruct valve operation or full steam flow.This methodology provides adequate assurance that the ADS valves will operate when actuated, while minimizing the challenges to the valves and the likelihood of leakage or spurious operation.

Method 2 A manual actuation of each ADS valve is performed to verify that the valve and solenoid are functioning properly and that no blockage exists in the S/RV discharge lines. This is demonstrated by the response of the turbine bypass valves, by a change in the measured flow, or by any other method suitable to verify steam flow. Adequate steam flow must be Monticello B 3.5.1-17 Revision No. 34 ECCS -Operating 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) passing through the turbine bypass valves to continue to control reactor pressure when the ADS valves divert steam flow upon opening.Sufficient time is therefore allowed after the required flow is achieved to perform this SR. Adequate steam flow is represented by at least one turbine bypass valve 80% open. This SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reactor steam flow is adequate to perform the test. Reactor startup is allowed prior to performing this SR because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME requirements, prior to valve installation.

The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed for manual actuation after the required flow is reached is sufficient to achieve stable conditions and provides adequate time to complete the Surveillance.

SR 3.5.1.11 and the LOGIC SYSTEM FUNCTIONAL TEST performed in LCO 3.3.5.1, "ECCS Instrumentation," overlap this Surveillance to provide complete testing of the assumed safety function.The Frequency of "In accordance with the Inservice Testing Program" is based on ASME OM Code requirements.

Industry operating experience has shown that these components usually pass the SR when performed at the Code required Frequency.

Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

SR 3.5.1.13 The LPCI System injection valves, recirculation pump discharge valves, recirculation pump suction valves, and the RHR discharge intertie line isolation valves are powered from the LPCI swing bus, which must be energized after a single failure, including loss of power from the normal source to the swing bus. Therefore, the automatic transfer capability from the normal power source to the backup power source must be verified to ensure the automatic capability to detect loss of normal power and initiate an automatic transfer to the swing bus backup power source. Verification of this capability every 24 months ensures that AC electrical power is available for proper operation of the associated LPCI injection valves, recirculation pump discharge valves, recirculation pump suction valves, and the RHR discharge intertie line isolation valves. The swing bus automatic transfer scheme must be OPERABLE for both LPCI subsystems to be OPERABLE.

The Frequency of 24 months is based on the need to perform the Surveillance under the conditions that apply during a startup from a plant outage. Operating experience has shown that the components usually pass the SR when performed at the 24 month Frequency, which is based on the refueling cycle. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

Monticello B 3.5.1-18 Revision No. 34 ECCS -Operating 3.5.1 BASES REFERENCES

1. USAR, Section 6.2.2.2. USAR, Section 6.2.3.3. USAR, Section 6.2.4.4. USAR, Section 6.2.5.5. USAR, Section 14.7.2.6. USAR, Section 14.7.3.7. 10 CFR 50, Appendix K.8. USAR, Section 6.2.1.1.9. 10 CFR 50.46.10. USAR, Section 14.7.2.3.2.
11. Memorandum from R.L. Baer (NRC) to V. Stello, Jr. (NRC),"Recommended Interim Revisions to LCOs for ECCS Components," December 1, 1975.12. USAR, Section 14.7.2.3.1.5.
13. Amendment No. 155, "Issuance of Amendment Re: Request to Revise Technical Specification Surveillance Requirement 3.5.1.3 to Correct the Alternate Nitrogen System Pressure," dated February 21, 2008. (ADAMS Accession Nos. ML080380638 and ML080590541)
14. Amendment No. 162, "Issuance of Amendment Regarding Completion Time to Restore a Low-Pressure Emergency Core Cooling Subsystem to Operable Status," dated July 10, 2009.(ADAMS Accession No. ML091480782)
15. Amendment No. 168, "Issuance of Amendment Re: Testing of Main Steam Safety/Relief Valves," dated July 27, 2012. (ADAMS Accession No. ML12185A216)
16. ASME Operation and Maintenance (OM) Code.17. Amendment No. 176, "Monticello Nuclear Generating Plant -Issuance of Amendment No. 176 to Renewed Facility Operating License Regarding Extended Power Uprate," (ADAMS Accession No. ML13316C459)

Monticello B 3.5.1-19 Revision No. 34 ECCS -Operating 3.5.1 BASES REFERENCES (continued)

18. Amendment No. 184, "Monticello Nuclear Generating Plant -Issuance of Amendment to Revise Technical Specification 3.5.1,"ECCS [Emergency Core Cooling System] -Operating," dated November 3, 2014. (ADAMS Accession No. ML14246A449)

[Condition F previously allowed two Core Spray subsystems to be inoperable for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.]Monticello B 3.5.1-20 -Last Revision No. 34 OPERATING LICENSE AND TECHNICAL SPECIFICATIONS UPDATING INSTRUCTIONS TECHNICAL SPECIFICATIONS REMOVE INSERT Page Amendment Document Type Page Amendment Table 1 186 Operating Table 1 186 License and TS LEFP Table 2 186 Record of TS Table 2 U186'.Changes and ...I OL Amend.2.0-1 165 Specification 2.0-1, .185 2.0 3.5.1-2 162 Specification 3 5 1 2 184 .3.5.1-3 176 351 35113 184 3.5.1-4 176 3514 184 (Do not insert in TS binder, only an updating aid.)NOTE: This update also removes an existing TS "Flag" for Condition F for "Both Core Spray subystems inoperable" since Amendment 184 removes this Condition and re-letters the conditions, eliminating the need for the flag.(Adds Am. 184 and 185)Monticello Am 186 TABLE I (Page 1 of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OF EFFECTIVE PAGES Paie ii iii 1.1-1 1.1-2 1.1-3 1.1-4 1.1.5 1.1-6 1.2-1 1.2-2 1.3-1 1.3-2 1.3-3 1.3-4 1.3-5 1.3-6 1.3-7 1.3-8 1.3-9 1.3-10 1.3-11 1.4-1 1.4-2 1.4-3 1.4-4 1.4-5 1.4-6 Am. No.(2)(2)(2)146 148 146 176 175 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 146 158 146 146 Page 3.1.4-2 3.1.4-3 3.1.5-1 3.1.5-2 3.1.5-3 3.1.6-1 3.1.6-2 3.1.7-1 3.1.7-2 3.1.7-3 3.1.7-4 3.1.7-5 3.1.7-6 3.1.8-1 3.1.8-2 3.2.1-1 3.2.2-1 3.2.2-2 3.2.3-1 3.3.1.1-1 3.3.1.1-2 3.3.1.1-3 3.3.1.1-4 3.3.1.1-5 3.3.1.1-6 3.3.1.1-7 3.3.1.1-8 3.3.1.1-9 3.3.1.1-10 3.3.1.2-1 3.3.1.2-2 3.3.1.2-3 3.3.1.2-4 3.3.1.2-5 3.3.2.1-1 3.3.2.1-2 3.3.2.1-3 3.3.2.1-4 3.3.2.1-5 3.3.2.2-1 3.3.2.2-2 3.3.3.1-1 3.3.3.1-2 3.3.3.1-3 3.3.3.2-1 3.3.4.1-1 3.3.4.1-2 3.3.4.1-3 Am. No.146 158 146 146 146 146 146 148 146 146 146 146 146 146 146 146 146 146 146 171 176 180 180 180 180 180 180 180 180 146 146 146 146 146 146 146 159 159 173 146 146 146 146 146 146 146 146 146 Page 3.3.5.1-1 3.3.5.1-2 3.3.5.1-3 3.3.5.1-4 3.3.5.1-5 3.3.5.1-6 3.3.5.1-7 3.3.5.1-8 3.3.5.1-9 3.3.5.1-10 3.3.5.1-11 3.3.5.2-1 3.3.5.2-2 3.3.5.2-3 3.3.5.2-4 3.3.6.1-1 3.3.6.1-2 3.3.6.1-3 3.3.6.1-4 3.3.6.1-5 3.3.6.1-6 3.3.6.1-7 3.3.6.2-1 3.3.6.2-2 3.3.6.2-3 3.3.6.3-1 3.3.6.3-2 3.3.6.3-3 3.3.7.1-1 3.3.7.1-2 3.3.7.1-3 3.3.7.2-1 3.3.7.2-2 3.3.8.1-1 3.3.8.1-2 3.3.8.1-3 3.3.8.2-1 3.3.8.2-2 3.3.8.2-3 3.4.1-1 3.4.1-2 3.4.2-1 3.4.3-1 3.4.3-2 3.4.4-1 3.4.4-2 3.4.5-1 Am. No.146 146 146 146 151 176 146 176 161 146 146 146 146 146 146 146 146 146 146 176 146 164 146 146 146 146 146 146 Pane 3.4.5-2 3.4.6-1 3.4.6-2 3.4.7-1 3.4.7-2 3.4.8-1 3.4.8-2 3.4.9-1 3.4.9-2 3.4.9-3 3.4.10-1 3.5.1-1 3.5.1-2 3.5.1-3 3.5.1-4 3.5.1-5 3.5.1-6 3.5.1-7 3.5.2-1 3.5.2-2 3.5.2-3 3.5.3-1 3.5.3-2 3.6.1.1-1 3.6.1.1-2 3.6.1.2-1 Am. No.146 148 148 146 146 146 146 172 172 172 146 146 184 184 184 162(7)167 168 146 146 167 146 146 146 146 146 1.4-7 146 2.0-1 185 3.0-1 3.0-2 3.0-3 3.0-4 3.0-5 3.1.1-1 3.1.1-2 3.1.1-3 3.1.2-1 3.1.2-2 3.1.3-1 3.1.3-2 3.1.3-3 3.1.3-4 3.1.4-1 157 146 157 146 146 146 146 146 146 146 146 158 158 158 146 148 148 148 148 148 146 146 147 146 146 146 159 159 146 146 168 146 146 146 3.6.1.2-2 146 3.6.1.2-3 3.6.1.2-4 3.6.1.3-1 3.6.1.3-2 3.6.1.3-3 3.6.1.3-4 3.6.1.3-5 3.6.1.3-6 3.6.1.3-7 3.6.1.3-8 3.6.1.4-1 3.6.1.5-1 3.6.1.5-2 3.6.1.6-1 3.6.1.6-2 146 146 148 146 148 146 180 148 146 176 146 146 168 146 146 Am. 186 TABLE 1 (Page 2 of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OF EFFECTIVE PAGES Page Am. No. Page Am. No. Page Am. No. Operating License 3.6.1.7-1 146 3.8.2-2 148 3.10.6-1 146 Cover pgi.3.6.1.7-2 146 3.8.2-3 146 3.10.6-2 146 1 156 3.6.1.8-1 146 3.8.3-1 178 3.10.7-1 146 2 156 3.6.1.8-2 146 3.8.3-2 178 3.10.7-2 146 3 186 3.6.2.1-1 146 3..3-3 146 3.10.8-1 146 4 186 3.6.2.1-2 146 3.8.4-1 146 3.10.8-2 146 5 156 3.6.2.1-3 146 3.8.4-2 153(8) 3.10.8-3 146 6 176 3.6.2.2-1 146 3.8.4-3 146 4.0-1 182 7 176(')3.6.2.3-1 146 3.8.5-1 148 4.0-2 182 8 176 3.6.2.3-2 146 3.8.5-2 146 5.1-1 146 9 176 3.6.3.1-1 146 3.8.6-1 146 5.2-1 146 10 176 3.6.4.1-1 146 3.8.6-2 146 5.2-2 163 11 169 3.6.4.1-2 146 3.8.6-3 146 5.3-1 146 12 160 3.6.4.2-1 146 3.8.6-4 146 5.4-1 146 3.6.4.2-2 146 3.8.7-1 146 5.5-1 146 3.6.4.2-3 146 3.8.7-2 146 5.5-2 146 OL App. A 3.6.4.3-1 146 3.8.8-1 148 5.5-3 146 Cover pg.3.6.4.3-2 181 3.8.8-2 146 5.5-4 146 3.7.1-1 146 3.9.1-1 146 5.5-5 181 3.7.1-2 146 3.9.1-2 146 5.5-6 181 Op. License 3.7.2-1 146 3.9.2-1 146 5.5-7 181 Appendix C 3.7.2-2 146 3.9.3-1 146 5.5-8 146 C-i 175 3.7.3-1 146 3.9.4-1 146 5.5-9 146 C-2 102 3.7.4-1 175 3.9.4-2 146 5.5-10 176 (6) C-3 175 3.7.4-2 160 3.9.5-1 146 5.5-11 160 C-4 110 3.7.4-3 181 3.9.6-1 146 5.5-12 182 3.7.5-1 154 3.9.7-1 146 5.5-13 182 3.7.5-2 154 3.9.7-2 146 5.6-1 146 3.7.6-1 146 3.9.8-1 146 5.6-2 180 3.7.6-2 146 3.9.8-2 146 5.6-3 180 3.7.7-1 146 3.10.1-1 174 5.7-1 146 3.7.8-1 146 3.10.1-2 146 5.7-2 146 3.8.1-1 146 3.10.1-3 146 5.7-3 146 3.8.1-2 146 3.10.2-1 146 5.7-4 146 3.8.1-3 146 3.10.2-2 146 3.8.1-4 146 3.10.3-1 146 3.8.1-5 146 3.10.3-2 146 3.8.1-6 146 3.10.3-3 146 3.8.1-7 146 3.10.4-1 146 3.8.1-8 146 3.10.4-2 146 3.8.1-9 146 3.10.4-3 146 3.8.1-10 146 3.10.5-1 146 3.8.2-1 148 3.10.5-2 146 Am. 186 TABLE 1 (Page.3 of 3)MONTICELLO NUCLEAR GENERATING PLANT OPERATING LICENSE AND TECHNICAL SPECIFICATIONS LIST OFEFFECTIVE PAGES NOTES NOTE 1: (Removed)NOTE 2: Am. 152 removed Table of Contents (TOC) from NRC issued Tech. Specs. TOO at Revision 0.NOTE 3: (Removed)NOTE 4: (Removed)NOTE 5: (Removed)NOTE 6: NRC Correction Letter to Amendment 176, dated 12/16/2013, corrected spelling of "gage" to ,.gauge" in OL License Condition 15(a). Added previously issued Amendment No. 175 (struck through) to bottom of page 5.5-10 and removed old revision bar.NOTE 7: SR 3.5.1.3.b (Alternate Nitrogen System supply pressure to ADS) is annotated and is being treated as a non-conservative TS. AN 2 pressure is increased as specified within Ops. Manual B.08.04.03-05 as an interim measure.NOTE 8: The required 125 VDC charger amperage in SR 3.8.4.2 Option 1 of 50 amps is annotated.

The interim required amperage is 75 amps. This condition is being treated as a non-conservative TS (see AR 01456839).

Am. 186 TABLE 2 (Page 1 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date AEC Tech Spec Chanqe Issuance No. & Date Major Subject Original 1 2 3 4 5 6 7 8 1 1/19/71 Note 2 Note 2 Note 2 2 2/20/73 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 Note 2 3 4 6/17/74 6 8/20/74 Note 3 5 7 8 9 10 7/8/75 12 11 13 14 Note 1 2 1/14/72 3 10/31/72 4 12/8/72 Note 1 5 3/2/73 1 4/28/71 &6 4/3/73 7 5/4/73 8 7/2/73 9 8/24/73 10 10/2/73 11 11/27/73&12 11/15/73 13 3/30/74 14 5/14/74 Note 1 Note 1 Note 3 10/24/74 15 1/15/75 16 2/3/75 17 2/26/75 18 4/10/75 Note 1 20 9/15/75 19 9/17/75 21 10/6/75 22 10/30/75 Appendix A Technical Specifications incorporated in DPR-22 on 9/8/70 Removed 5 MWt restriction MOGS Technical Specification changes issued by AEC but never distributed or put into effect, superseded by TS Change 12 11/15/73 RHR service water pump capability change Temporary surveillance test waiver Increase in U-235 allowed in fission chambers Miscellaneous Technical Specification changes, Respiratory Protection, & Administrative Control Changes Respiratory Protection Changes Relief Valve and CRD Scram Time Changes Fuel Densification Limits Safety Valve Setpoint Change Offgas Holdup System, RWM, and Miscellaneous Changes 8x8 Fuel Load Authorization 8x8 Full Power authorization Changed byproduct material allowance Changed byproduct material allowance Inverted Tube (CRD) Limits REMP Changes Reactor Vessel Surveillance Program Changes Vacuum Breaker Test Changes Corrects Errors & Provides Clarification Increased allowed quantity of U-235 Snubber Requirements Removed byproduct material allowance Suppression Pool Temperature Limits Appendix K and GETAB Limits 9 10 11 12 13 14 15 16 17 18 19 Am. 186 TABLE 2 (Page 2 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 NOTE 1 40 41 42 43 44 45 46 47 License DPR-22 Amend No. & Date 15 1/22/76 NOTE 4 16 2/3/76 17 3/16/76 NOTE 3 4/13/76 18 4/14/76 21 5/20/76 19 5/27/76 20 6/18/76 22 7/13/76 23 9/27/76 24 10/15/76 25 10/27/76 26 4/1/77 27 5/24/77 28 6/10/77 29 9/16/77 30 9/28/77 31 10/14/77 32 12/9/77 33 1/25/78 34 4/14/78 35 9/15/78 36 10/30/78 37 11/6/78 NOTE 3 11/24/78 38 3/15/79 39 5/15/79 40 6/5/79 41 8/29/79 Reporting Requirements CRD Collet Failure Surveillance NSP Organization Changes Adoption of GETAB Containment Isolation Valve Testing Interim Appendix B, Section 2.4 Tech. Specs.Low Steamline Pressure Setpoint and MCPR Changes APLHGR, LHGR, MCPR Limits Correction of Errors and Environmental Reporting Standby Gas Treatment System Surveillance CRD Test Frequency Snubber Testing Changes APRS Test Method.MAPLHGR Clamp at Reduced Flow Radiation Protection Supervisor Qualification REMP Changes More Restrictive MCPR Inservice Inspection Changes Reporting Requirements Fire Protection Requirements Increase in spent fuel storage capacity RPT Requirements Suppression Pool Surveillance 8x8R Authorization, MCPR Limits & SRV Setpoints Corrected Downcomer Submergence Incorporation of Physical Security Plan into License Revised LPCI Flow Capability Respiratory Protection Program Changes Fire Protection Safety Evaluation Report Mawor Subiect Am. 186 TABLE 2 (Page 3 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 48 49 42 43 12/28/79 2/12/80 50 NOTE 1 NOTE 1 51 52 NOTE 1 NOTE 1 53 54 NOTE 1 44 2/29/80-8/29/80-9/19/80-10/24/80-1/9/81-1/9/81-1/13/81 1 2/12/81 2 3/2/81 MAPLHGR vs. Exposure Table MCPR & MAPLHGR Changes for Cycle 8 and Extended Core Burnup ILRT Requirements Order for Modification of License-Environmental Qualification Revised Order for Modification of License-Environmental Qualification Order for Modification of License-Environmental Qualification Records Issuance of Facility Operating License (FTOL)Order for Modification of License Concerning BWR Scram Discharge Systems (License conditions removed per Amendment No. 11 dated 10/8/82)Order for Modification Mark I Containment Revision of License Conditions Relating to Fire Protection Modifications TMI Lessons Learned & Safety -Related Hydraulic Snubber Additions Low voltage protection, organization and miscellaneous Incorporation of Safeguards Contingency Plan and Security Force Qualification and Training Plan into License Cycle 9 -ODYN Changes, New MAPLHGR's, RPS Response time change Inservice Inspection Program Fire Protection Technical Specification Changes Mark I Containment Modifications 3 4 3/27/81 3/27/81 55 56 57 58 5 5/4/81 6 7 8 6/3/81 6/30/81 11/5/81 59 NOTE 1 9 12/28/81-1/19/82 Inservice Surveillance Requirements for Snubbers Revised Order for Modification Mark I Containment Scram Discharge Volume New Scram Discharge Volumes 60 61 10 11 5/20/82 10/8/82 Am. 186 TABLE 2 (Page 4 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 11/30/82 12/6/82 12/10/82 12/17/82 4/18/83 4/17/83 11/28/83 12/30/83 1/16/84 1/23/84 2/2/84 4/3/84 5/1/84 8/15/84 9/24/84 10/31/84 11/2/84 11/16/84 11/16/84 11/27/84 5/28/85 10/7/85 10/8/85 12/3/85 12/23/85 1/22/86 2/12/86 3/13/86 3/18/86 RPS Power Monitor Cycle 10 Recirc Piping and Coolant Leak Detection Appendix I Technical Specifications (removed App. B)Organizational Changes Miscellaneous Changes Steam Line Temperature Switch Setpoint Radiation Protection Program SRM Count Rate Definition of Operability Miscellaneous Technical Specification Changes RPS Electrical Protection Assembly Time Delay Scram Discharge Volume Vent and Drain Valves Miscellaneous Technical Specification Changes Cycle 11 RHR Intertie Line Addition Hybrid I Control Rod Assembly ARTS Low Low Set Logic Degraded Voltage Protection Logic Surveillance Requirements Screen Wash/Fire Pump (Partial)Fuel Enrichment Limits Combustible Gas Control System Vacuum Breaker Cycling NUREG-0737 Technical Specifications Environmental Technical Specifications Administrative Changes Clarification of Radiation Monitor Requirements Am. 186 TABLE 2 (Page 5 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page License Major Subiect Revision DPR-22 (REV) No. Amend No. & Date 91 41 3/24/86 250 Volt Battery 92 42 3/27/86 Jet Pump Surveillance 93 43 4/8/86 Simmer Margin Improvement 94 44 5/27/86 Cycle 12 Operation 95 45 7/1/86 Miscellaneous Changes 96 46 7/1/86 LER Reporting and Miscellaneous Changes 97 47 10/22/86 Single Loop Operation 98 48 12/1/86 Offgas System Trip 99 49 8/26/87 Rod Block Monitor 100 50 8/26/87 APRM and IRM Scram Requirements 101 51 10/16/87 2R Transformer 102 52 11/18/87 Surveillance Intervals

-ILRT Schedule 103 53 11/19/87 Extension of Operating License 104 54 11/25/87 Cycle 13 and Misc Changes 105 55 11/25/87 Appendix J Testing 106 56 12/11/87 ATWS -Enriched Boron 107 57 9/23/88 Increased Boron Enrichment 108 58 12/13/88 Physical Security Plan 109 59 2/16/89 Miscellaneous Administrative Changes 110 60 2/28/89 Miscellaneous Administrative Changes 111 61 3/29/89 Fire Protection and Detection System 112 62 3/31/89 ADS Logic and S/RV Discharge Pipe Pressure 113 63 4/18/89 Miscellaneous Technical Specification Improvements 114 64 5/10/89 Containment Vent and Purge Valves 115 65 5/30/89 NUREG-0737

-Generic Letter 83-36 116 66 5/30/89 Reactor Vessel Level Instrumentation 117 67 6/19/89 Extension of MAPLHGR. Exposure for One Fuel Type 118 68 7/14/89 SRO Requirements

& Organization Chart Removal Am. 186 TABLE 2 (Page 6 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date 119 120 121 122 123 124 125 126 127 128 125 130 131 132 133 134 135 136 137 138 139 140 141 142 143 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 9/12/89 9/28/89 10/19/89 11/2/89 5/1/90 6/5/90 10/12/90 12/20/90 2/15/91 3/28/91 4/9/91 8/12/91 4/16/92 7/15/92 8/18/92 1/27/93 6/29/93 7/12/93 4/15/94 Maior Subject Operations Committee Quorum Requirements Relocation of Cycle-Specific Thermal-Hydraulic Limits Deletion of Primary Containment Isolation Valve Table RG 1.99, Rev 2, ISI & ILRT Combined STA/LSO Position Removal of WRGM Automatic ESF Actuation Diesel Fuel Oil Storage Miscellaneous Administrative Changes Redundant and IST Testing Alarming Dosimetry SAFER/GESTR Torus Vacuum Breaker Test Switch/EDG Fuel Oil Tank Level Surveillance Test Interval Extension

-Part I Alternate Snubber Visual Inspection Intervals Revisions to Reactor Protection System Tech Specs MELLIA and Increase Core Flow Revision to Diesel Fire Pump Fuel Oil Sampling Requirements Revisions to Control Rod Drive Testing Requirements Revised Coolant Leakage Monitoring Frequency Average Planar Linear Heat Generation Rate (APLHGR)Specification

& Minimum Critical Power Ratio Bases Revisions Removal of Chlorine Detection Requirements and Changes to Control Room Ventilation System Requirements Revisions to Radiological Effluent Specifications Secondary Containment System and Standby Gas Treatment System Water Level Setpoint Change Change in Safety Relief Valves Testing Requirements Revised Core Spray Pump Flow 88 6/30/94 89 8/25/94 90 91 92 93 9/7/94 9/9/94 9/15/94 7/12/95 Am. 186 TABLE 2 (Page 7 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 144 145 146 147 148 94 95 96 97 10/2/95 4/3/96 4/9/96 9/17/96 98 7/25/97 99 10/29/97 11/25/97 149 NOTE 5 150 NOTE 6 100 1 00a 101 4/20/98 4/30/98 08/28/98 102 09/16/98 103 12/23/98 Standby Gas Treatment and Secondary Containment Systems MSIV Combined Leakrate, and Appendix J, Option B Purge and Vent Valve Seal Replacement Interval Implementation of BRWOG Option I-D core Stability Solution and re-issue of pages 11, 12, 82 and 231 to reflect pages issued by NRC amendments.

Bases changes on containment overpressure and number of RHR pumps required to be operable.

Reissue pages 207, 209, 219, 229k, 229p, 230, 245 to reflect pages issued by NRC amendments.

SLMCPR for Cycle 18 and reissue pages vi, 155, 202, 207, 219, 229u Reissue pages a, b, g, iii, vi, 14, 25a, 155, 198y, 198z, 202, 207, 209, 219, 229k, 229p, 229r, 229u, 230, 245 SLMCPR for Cycle 19 Reissue all pages.Reactor Coolant Equivalent Radioiodine Concentration and Control Room Habitability Monticello Power Rerate Surveillance Test Interval/Allowed Outage Time Extension Program -Part 2 Revision of Statement on Shift Length & other Misc Changes CST Low Level HPCI/RCIC Suction Transfer Revised RPV-PT Curves & remove SBLC RV setpoint Reactor Pressure Vessel Hydrostatic and Leakage Testing Testing Requirements for Control Room EFT Filters Safety Limit Minimum Critical Power Ratio for Cycle 20 Transfer of Operating Authority from NSP to NMC Transfer of Operating License from NSP to a New Utility Operating Company Emergency Filtration Train Testing Exceptions and Technical Specification Revisions Alternate Shutdown System Operability Requirements Safety/Relief Valve Bellows Leak Detection System Test Frequency 104 105 106 107 108 109 110 111 12/24/98 03/19/99 10/12/99 11/24/99 12/8/99 02/16/00 08/07/00 08/18/00 112 08/18/00 113 10/02/00 114 11/30/00 Am. 186 TABLE 2 (Page 8 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Maior Subiect 115 115a 12/21/00 02/13/01 116 03/01/01 117 03/07/01 118 03/09/01 118a 05/10/01 119 119a 120 04/05/01 06/28/01 07/24/01 121 07/25/01 122 08/01/01 122a 10/22/01 123 10/26/01 123a 10/25/01 124 10/30/01 124a 12/05/01 Administrative Controls and Other Miscellaneous Changes Bases Change to Reflect Modification 98Q145 Installed Control Room Toxic Gas Air Supply Relocation of Inservice Inspection Requirements to a Licensee Program Reactor Water Cleanup (RWCU) System Automatic Isolation and Miscellaneous Instrumentation System Changes Revision of Standby Liquid Control System Surveillance Requirements Bases Change -50'F Loop Temperature, Bus Transfer &Rerate Correction Fire Protection Technical Specification Changes Bases Change -Added information on cooldown rate Relocation of Radiological Effluent Technical Specifications to a Licensee-Controlled Program Clarify air ejector offgas activity sample point and operability requirements Relocation of Inservice Testing Requirements to a Licensee-Controlled Program Bases Change -Remove scram setpoints sentence and correct typo Control Rod Drive and Core Monitoring Technical Specification Changes Bases Change -Change to reflect new operation of drywell to suppression chamber vacuum breaker valve position indicating lights Relocation of Technical Specification Administrative Controls Related to Quality Assurance Plan Bases Change -Change to reflect revised Technical Specification definition of a containment spray/cooling subsystem Safety Limit Minimum Critical Power Ratio for Cycle 21 Elimination of Local Suppression Pool Temperature Limits Bases Change -Change reflects relocation of sample point for the offgas radiation monitor 125 126 126a 12/06/01 01/18/02 02/15/02 Am. 186 TABLE 2 (Page 9 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date 127 05/31/02 128 06/11/02 128a 07/11/02 129 08/27/02 Major Subject 129a 129b 09/12/02 09/12/02 130 09/23/02 130a 09/26/02 131 10/02/02 Missed Surveillance Requirement Technical Specification Changes (TSTF-358)

Changes to the Technical Specifications Revised Reference Point for Reactor Vessel Level Setpoints, Simplification of Safety Limits, and Improvement to the Bases Bases Change -Correct Drywell to Suppression Chamber Vacuum Breaker Indicating Light Description Revise Technical Specifications and Surveillance Requirements Relating to Standby Diesel Generators Bases Change -Change to Snubber Operability Description Bases Change -Remove Language That Implies Trip Settings Can Be Modified By Deviation Values Containment Systems Technical Specification Changes Bases Change -HPCI -Change Wording / HPCI & RCIC -Enhance with Wording Consistent with NUREG-1433-Rev 1 Update the Multiplier Values for Single Loop Operation Average Planar Linear Heat Generation Rate (APLHGR)Conversion to Option B for Containment Leak Rate Testing Revision to Pressure-Temperature Curves Bases Change -Adequate Reactor Steam Flow for HPCI/RCIC Testing One-Time Extension of Containment Integrated Leak-Rate Test Interval Boiling Water Reactor Vessel and Internals Project Reactor Pressure Vessel Integrated Surveillance Program Bases Change -Clarify description of head cooling Group 2 valves Elimination of Requirements for Post Accident Sampling System (TSTF-413)

Bases Change -Editorial change to define the abbreviation "EFCV." Drywell Leakage and Sump Monitoring Detection System 132 133 133a 02/04/03 02/24/03 03/28/03 134 03/31/03 135 04/22/03 135a 04/24/03 136 06/17/03 136a 09/25/03 137 08/21/03 Am. 186 TABLE 2 (Page 10 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Major Subject 137a 137b 10/09/03 10/14/03 138 05/21/04 138a 06/10/04 139 06/02/04 140 140a 11/02/04 01/13/05 141 01/28/05 141a 02/24/05 141b 03/10/05 141c 03/10/05 142 02/01/05 143 09/30/05 10/20/05 Bases Change -RCS Leakage Requirements for TS 3.6.4.D Bases Change -Clarification of system control boundary for ASDS Elimination of Requirements for Hydrogen Recombiners and Hydrogen and Oxygen Monitors (TSTF-447)

Bases Change -Clarification of Tech Spec Table 4.1.1 Manual Scram Revised Analysis of Long-Term Containment Response and Net Positive Suction Head (Design Bases and USAR change)Revision to Technical Specification Tables 3.2.1 and 3.2.4 Bases Change -Removal of Drywell Vent Coolers from 3.6/4.6 Bases Revision to Technical Specifications Table 3.2.3 and Section 3.7/4.7 Bases Change -Implement Improved BPWS as Described in NEDO-33091-A Bases Change -Bases Changes for License Amendments 138 and 140 Bases Change -Removal of 3% Delta-K from Standby Liquid Control Bases 3.4.A/4.4.A Deletion of Requirements for Submittal of Occupational Radiation Reports, Monthly Operating Reports, and Report of Safety/Relief Valve Failures and Challenges (TSTF-369)

Implementation of 24-Month Fuel Cycles Change to Facility Operating License Pursuant to Commission Order EA-03-086 Regarding Revised Design Basis Treat (DBT); and Revisions to Physical Security Plan, Training and Qualification Plan, and Safeguards Contingency Plan Surveillance Test Intervals for various instruments (Second part of 24-month Fuel Cycle amendment.)

TS Bases changes to conform with the implementation of License Amendments 143 and 144 (24-Month Fuel Cycles).Alternate Source Term -Fuel Handling Accident (TSTF-51)NOTE 1: 144 01/12/06 144a 04/05/06 145 04/24/06 Am. 186 TABLE 2 (Page 11 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page License Revision DPR-22 (REV) No. Amend No. & Date 146 06/05/06 Correction Letter 10/12/06 147 07/05/06 NOTE 1: Renewed OL 11/08/06 148 12/07/06 Appendix J Exemptions 149 01/18/07 Correction Letter 02/23/07 150 03/09/07 151 07/20/07 Major Subject Improved Technical Specifications (TSTF-359, 372, 439, 455, 458,460, 464, 479,480, 485)Correction of typo in Amendment 146 (page 3.3.5.1-8)

Degraded Voltage Allowable Value Change (Second part of ITS -Follow-on ITS Amendment)

Renewed Facility Operating License Alternate Source Term -Full Scope In conjunction with issuance of Amendment 148, exemptions to 10 CFR 50.54(o) and to 10 CFR 50, Appendix J, Option B, Sections III.A and III.B were issued.One-Time Extension of LPCI Loop Select Logic Time Delay Relay Surveillance Interval Correction:

Remove Am 148 from first page of OL and added Renewed License No. DPR-22 to footer on page 2.Increase SFP allowed Heat Load and allow installation of 64 cell PaR Fuel Storage Rack (if required) to maintain Full Core Offload capability during ISFSI construction.

Extend Surveillance Interval from 92-days to 24-months and increase Allowable Values for LPCI Loop Select Logic Time Delay Relays. (Also, correct typo on page 3.3.5.1-6.)

Conforming License Amendment to incorporate the Mitigation Strategies Required by Section B.5.b of Commission Order EA-02-026 and the Radiological Protection Mitigation Strategies Required by Commission Order EA-06-137 Remove the Table of Contents (TOC) out of the Technical Specifications and place under licensee control. TS TOC initial revision is Revision 0.Revise Surveillance Requirement 3.8.4.2 to specify that the Division 2 battery chargers are verified to supply greater than or equal to 110 amps.Add Action Statement for two inoperable Control Room Ventilation subsystems to Specification 3.7.5 (TSTF-477).

Revise Surveillance Requirement 3.5.1.3.b to specify that the Alternate Nitrogen System supply pressure to the ADS valves is verified to be greater than or equal to 410 psig.Transfer of Operating License from NMC to NSP -Minnesota Add LCO 3.0.9 on unavailable Barriers (TSTF-427).

Revise Control Rod notch testing frequency from once per 7 days to every 31 days (TSTF-475).

Power Range Neutron Monitoring System Am. 186 NOTE 1: 08/23/07 152 11/08/07 153 01/30/08 154 01/23/08 155 02/21/08 NOTE 1: 156 157 158 09/22/08 10/22/08 11/19/08 159 1/30/09 TABLE 2 (Page 12 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date Correction Letter 3/9/09 160 3/17/09 161 4/7/09 162 7/10/09 163 8/19/09 164 9/28/09 165 5/4/11 166 7/29/11 167 1/11/12 168 7/27/12 169 8/27/12 170 9/7/12 171 1/25/13 172 1/20/13 Major Subiect Correct footer of Specification 3.3.7.2 -AST Amendment 148.Control Room Envelope Habitability (TSTF-448).

Revise the Allowable Value and channel calibration frequency for Table 3.3.5.1-1, Function 2.j, Recirculation Riser Differential Pressure -High (Break Detection).

Add new Conditions to Specification 3.5.1 for restoration of various low-pressure ECCS subsystems out-of-service (OOS)combinations (e.g., one low-pressure ECCS division OOS).Deleted paragraph d concerning work hour limitations under Specification 5.2.2 to align with rule changes under 10 CFR 26, Subpart I (TSTF-511).

Corrected Modes in Table 3.3.6.1-1, Function 5.d, RWCU System isolation on a SLC System initiation, to match SLC System modes (Specification 3.1.7) after adoption of full-scope AST, i.e., added Mode 3 to Function 5.d Revise MCPR Safety Limit to 1.15 to reflect reload analyses (which include EPU and MELLLA+ considerations).

Add Cyber Security Plan license condition under OL Section 3, Physical Protection.

Revise Core Spray flowrate from 2800 gpm to 2835 gpm.Revise surveillance requirements in Specifications 3.4.3, 3.5.1 and 3.6.1.5 to remove requirements to lift-test SRVs during plant startup.Revise licensing basis to reflect removal of the capability to automatically transfer to the 1AR Transformer as a source of power to the essential buses on degraded voltage and instead directly transfer to the EDGs. (Operating License change only.)Revise Table 3.3.5.1-1, Functions 1.e and 2.e, "Reactor Steam Dome Pressure Permissive

-Bypass Timer (Pump Permissive)", (i.e., 20 minute ADS bypass timer), to remove the lower limit of the allowable value.Revise Required Actions table for LCO 3.3.1.1 to provide a restoration period before entering the required actions when the APRMs are inoperable due to SR 3.3.1.1.2 not met.Revise Specification 3.4.9, add new Specification 5.6.5, and add a new definition to specify the adoption of a PTLR.Am. 186 TABLE 2 (Page 13 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NSP Page Revision (REV) No.License DPR-22 Amend No. & Date 173 7/15/13 174 8/9/13 175 8/28/13 176 12/9/13 Correction Letter 12/16/13 (to Amendment 176)177 1/28/14 178 1/28/14 179 2/28/14 180 3/28/14 181 5/2/14 182 10/24/14 183 10/31/14 184 11/3/14 185 11/25/14 186 11/28/14 AEC Tech Spec Major Subject Change Issuance No. & Date Add footnote reflecting that RWM can be bypassed when the improved BPWS is used for reactor shutdown (TSTF-476).

Add allowance to Specification 3.10.1 LCO to allow for scram time testing during inservice leak testing and hydrostatic testing (TSTF-484).

Miscellaneous Operating License and TS editorial and administrative changes.Extended Power Uprate Corrected spelling of "gage" to "gauge" in OL License Condition 15(a). Added previously issued Amendment No. 175 (struckthrough) to bottom of page 5.5-10 and removed old revision bar.Modifies the Emergency Plan to revise the EAL for the Turbine Building Normal Waste Sump Monitor.Revise specification to reflect relocating fuel and lube oil required volumes to the TS Bases and replacing them with duration based requirements (TSTF-501).

Revises Shutdown Margin (SDM) definition to address advanced fuel designs (TSTF-535).

Maximum Extended Load Line Limit Analysis, Plus (MELLLA+)Reduces SBGT and CREF Systems runtime from 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> to 15 minutes every 31 days. Removes surveillance requirements to have heaters operating and TS 5.5.6.e electric heater output test requirement from the Ventilation Filter Testing Program (TSTF-522).

Revise TS to Support Fuel Storage System Changes Remove Radwaste Operator as 60-Minute Responder (Emergency Plan change only.)Revise TS 3.5.1 to Remove Condition F allowing two Core Spray subsystems to be OOS.Reduce the Reactor Steam Dome Pressure Specified in the Reactor Core Safety Limits, resolves GE PROF analysis Part 21 issue.Revise Cyber Security Implementation Schedule Milestones Am. 186 TABLE 2 (Page 14 of 14)MONTICELLO NUCLEAR GENERATING PLANT RECORD OF TECHNICAL SPECIFICATION CHANGES AND LICENSE AMENDMENTS NOTES 1. License Amendment or Order for Modification of License not affecting Technical Specifications.

2. Technical Specification change issued prior to 10 CFR revisions which require issuance of Technical Specification changes as License Amendments.
3. Modification to Bases. No Technical Specification change or License Amendment issued.4. Technical Specification change numbers no longer assigned beginning with Amendment 15.5. Pages reissued 11/25/97 to conform with NRC version. Revision number of affected pages not changed.6. All pages reissued using INTERLEAF in different font. Using NRC Amendment Nos. and issue date. For Bases and Table of Contents, spelling errors corrected and editorial corrections made and all Amendment Nos. changed to 1 00a. For remaining Tech Spec pages, no other changes made and current Amendment Nos. used.Am. 186 SLs 2.0 2.0 SAFETY LIMITS (SLs)2.1 SLs 2.1.1 Reactor Core SLs 2.1.1.1 With the reactor steam dome pressure < 686 psig or core flow< 10% rated core flow: THERMAL POWER shall be _< 25% RTP.2.1.1.2 With the reactor steam dome pressure _> 686 psig and core flow_ 10% rated core flow: MCPR shall be _> 1.15 for two recirculation loop operation or >_ 1.15 for single recirculation loop operation.

2.1.1.3 Reactor vessel water level shall be greater than the top of active irradiated fuel.2.1.2 Reactor Coolant System Pressure SL Reactor steam dome pressure shall be _ 1332 psig.2.2 SL VIOLATIONS With any SL violation, the following actions shall be completed within 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />s: 2.2.1 Restore compliance with all SLs; and 2.2.2 Insert all insertable control rods.Monticello 2.0-1 Amendment No. 185 ECCS -Operating 3.5.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. One LPCI pump in both C.1 Restore one LPCI pump to 7 days LPCI subsystems OPERABLE status.inoperable.

D. Two LPCI subsystems D.1 Restore one LPCI 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> inoperable for reasons subsystem to OPERABLE other than Condition C status.or G.E. One Core Spray E.1 Restore Core Spray 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> subsystem inoperable, subsystem to OPERABLE status.AND OR One LPCI subsystem E.2 Restore LPCI subsystem to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> inoperable.

OPERABLE status.OR OR One or two LPCI E.3 Restore LPCI pump(s) to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> pump(s) inoperable.

OPERABLE status.F. Required Action and F.1 Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> associated Completion Time of Condition A, B, AND C, D, or E not met.F.2 Be in MODE 4. 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> G. Two LPCI subsystems G.1 Isolate the RHR intertie 18 hours2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> inoperable due to open line.RHR intertie return line isolation valve(s).Monticello 3.5.1-2 Amendment No. !46, !62, 184 ECCS -Operating 3.5.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME H. Required Action and H.1 Be in MODE 2. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition G not met.HPCI System 1.1 Verify by administrative Immediately inoperable, means RCIC System is OPERABLE.AND 1.2 Restore HPCI System to 14 days OPERABLE status.J. HPCI System J.1 Restore HPCI System to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> inoperable.

OPERABLE status.AND OR Condition A, B, or C J.2 Restore low pressure 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> entered. ECCS injection/spray subsystem(s) to OPERABLE status.K. One ADS valve K.1 Restore ADS valve to 14 days inoperable.

OPERABLE status.I I I Monticello 3.5.1-3 Amendment No. 146, 162, 17-6, 184 ECCS -Operating 3.5.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME L. Required Action and L.1 Be in MODE 3. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> associated Completion Time of Condition I, J, AND or K not met.L.2 Reduce reactor steam 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> OR dome pressure to< 150 psig.One ADS valve inoperable and Condition A, B, C, D, or G entered.OR Two or more ADS valves inoperable.

OR HPCI System inoperable and Condition D, E, or G entered.M. Two or more low M.1 Enter LCO 3.0.3. Immediately pressure ECCS injection/spray subsystems inoperable for reasons other than Condition C, D, E, or G.OR HPCI System and one or more ADS valves inoperable.

I Monticello 3.5.1-4 Amendment No. 146, 162, 176, 184