ML17332A848

Qualitative Functional Diversity Assessment of UFSAR of Common Mode Failure of Digital Equipment Software.

ML17332A848
Person / Time
Site:	Cook
Issue date:	12/04/1992
From:	AMERICAN ELECTRIC POWER SERVICE CORP.
To:
Shared Package
ML17332A849	List: ML17332A848 ML17332A850 ML17332A851 ML17334B552
References
QA-92-18, NUDOCS 9507180137
Download: ML17332A848 (87)

Text

egherfcan".'tectrfcPowerServiceCorporationlearSafetyAndUcenslngSectionCatcttlationCovevSheetNUC159199(R1040glP2SCalculationNo.SubjectCAVAyA0tlSpryteSSafety-RelatedSystemYes+noSupersedesGale.No.cMcprComPanyTy1AH1dCalculatedByR.5SwVerified/CheckedByMethodOfVenficabonApprovedByJ/8w9'mbiemDescription:tane.~WAn4n~acrcsca4a+cokoc4cntmetrIfcccrmnt.CH-I-tnurnocct:)wIoolnpcA+cgcoclc44Potttoofo$)eo.2oo/s)ec28oPnrorcoRhaC4nn'iC.g~~~~~.~<a.HP,C.~qWred,PSaPSt-4a,CaaV~~meke.~~ur-(cortt:)ro(~e.2+dmsorrrrg-ttYt~ctriRtbkot'uor~ezra.coco~~orio~o6-MFsignBasisOr

References:

0phut'~2..~~.~~~Mcmrcrocrcyon~rcpfrccc~7Ylrnocgcocrcta,c.coorto'P~~u~&5R&~t~ccccrc>~i~en~~+~+-o$ta,C.dcrofoy]4,(trofNo.DateChangeGale.ByCheckedByDateApprovedByDateSupersededByCalculationNo.Reason:'yt507180137gf50707PDRADOCK050003159PDRDatedPageOf 7223(9.83)ENGINEERINGDEPT.AMERICANELECTRICPOWERSERVICECORP.1RIVERSIDEPLAZACOLUMSUS,OHIOCOATCOMPANYSHEET2OF~CK~52G.O.gUBJpCgQualitativeFunctionalDiversiAssessmentTableofContentsA,Statement.ofPurpose,andExecutiveSummaryB.Assumptions,.C..Analysis...Page.Ho.3.....,...3f...3..D.E.F.Verification.Results,DiscussionofResults3...3...G..References...,.H.Table.1.AppendixAAppendixB.I3~4p\5......1-48....1-5..~v~'I~F

7223(9S9)FQR<oE4(cIENQINQQRINGDEPT.AMERICANELECTRICPOWERSERVICECORP.1RIVERSIDEPLAZACOLUMBUS,OHIOOATCOMPANYSHEET+OFBGKG.G.SU8JECT.UAVEFUNCTONADSSSMA.StateetoPuoseadExecutveSummaSeepage4/5B.C.SeeAppendixA~Aaasis~litativeEvaluationgiveninAppendicesAandBD.TheevaluationwasdonebasedonU2FSAR.ThereviewercheckedUnit1FSARforconsistency.@CAP11902anditssupplement,RTPLicenseReport,@CAP12135,RTPEngineeringReport,QCAP's'12078and12901.InputandOutputData,andUnit2cycle8RTSRwerealsousedasabasisforreviewingtheevaluations.Plantannunciatorresponseprocedureswereusedtoreviewpossibleandpx'obablealarms.DiscussionswithHEDpersonnelespeciallyZ&Cpersonnelresolvedvariousissuessuchaswhichalarmswereindependentofthenewdigitalequipment.%herethereviewerfeltitwasappx'opriateornecessary,changestotheevaluationwereproposedandresolvedwiththeevaluator.esutsSeeAppendixAF.DscussonoeutsSeeAppendixAG.eerencesSeeAppendixA3/5 722%9.d3lENGINEERINGDEPT.AMERICANELECTRICPOWERSERVICECORP.1RIVERSIDEPLAZACOLUMBUS,OHIOCOMPANY.'LANSHEETOFScxG.O.$ugJp(,yQualitativeFunctionalDiversityAssessmentSTTOFPURPOEANDEXECUTIVESUMMAROnApril21,1992,AEPSCrepresentativeshadameetingwiththeNRConthereplacementofexistinganalogreactorprotectionprocessinstrumentationwithdigitalFoxboroSpec200/Spec200MicroEleceronicsinstrumentation.Duringthismeeting,AEPSCwasaskedtoassumeacommonmodefailure(CMF)ofthesoftwareofthenewdigitalequipmentduringanaccideneandthenprovidedetailsastowhetheroperaeorscouldmitigatetheconsequencesoftheaccident.Inresponsetothisrequest,afunctionaldiversityassessmentofeachupdatedFSAR(UFSAR)eventassumingacommonmodefailureofthesoftwarehasbeenperformed.Inthisassessment,alltheeventsforbothUnits1and2oftheCookNuclearPlanegivenineheUFSARwereconsidered.Areviewwasperformedtodivideeventsintopotentiallyaffectedandnotaffected.Table-1liststheseeventsandindicateswhethertheywouldbepoeeneiallyaffectedornoeaffected,ifaCMFweretooccur.ThepotentiallyaffectedtransientswerethenindividuallyevaluatedqualitativelyinlightoftheFSARanalysisasshownintheateachedAppendixA.ThetransieneswhicharenoeaffectedbythesoftwarefailurearediscussedinAppendixB.~ThefirstcolumnoftheevaluationsintheAppendixAcontainth'eUFSARtransientnumberlistedinTable-1.Thesecondcolumnincludesthenameofthetransient.Thethirdcolumndepicesthetrip/safeguard&mctionforreactortrip.ThisinformationwasobtainedfromtheUFSAR.Thefourthcolumnincludestheinformationontheimpactofcommonmodefailureonthereactortripfunction.Ifehetripfunctionisprocessedoutsideofthenewdigitalreaceorprotection~ys~em,thenthetripisavailable,e.g.,triponnuclearinstrumentationsystemhighflux.Ifehetripisprocessedbyafunctionthatisapartofthenewdigitalequipmene,thenthetrip/ESFfunctionisassumedtobelose.However,forsomefunctions,alternateindicaeionsand/ordiversealarmsareavailable.Thealarm/alternateindicationsehaeareavailabletoeheoperatortomieigatethetransientaregiveninthenextcolumn.Thesixthcolumnliststhepertinenediagramnumbers.Theseventhcolumnsummarizestheconsequencesoftheunavailabilityofdiversealazm.Thelastcolumnprovidestheevaluationoftheevent.Inthiscolumn,wehavediscussedeheconsequencesoftheoperator'sresponseonreactorsafety.Basedonthisevaluation,wehaveconcludedthattheCMFofthenewdigit1equipmenthasnosxgnxfxcantadverseimpactonthepublicsafeey.Somereactortripsarenoeaffectedbytheinstallationofthenewdigitalequipment-thesetripsazeneutronhighfluxandhighracetrips,undervoltageandunderfrequencytripsandreaceortriponturbinetzip.However,foreventsprotectedbytripsandaceuaeionsaffeceedbyCMF,shouldaCMFoccur,theoperatorwillbealertedtotheevenebyanalarmfromadiversesystem.Hevillthenprovidetheappropriaeeaceuaeionsmanuallyandentertheemergencyoperatingprocedures.Forsomeaccidents,suchaslockedrotor,theconsequencescouldbemoreseverethancurzenelyanalyzeddueeothelongerresponseeimefortherequiredactuation.However,ourevaluationindicatesthattheaffectedunitcanbebroughttoasafeconditionandehecurrentLOCAoffsieedoseevaluationwillremainbounding.Fromtheseresults,ieisbelievedthataCMFofthenewdigiealsystemwouldhavenoadverseeffectonthehealthandsafetyofthepublic.-4/5 1's

?22~(9.6>IENGINEERINGOEPT-AMERICANELECTRICPOWERSERVICECORP.1RIVERSIDEPLAZACOLUMBUS,OHIODATCOMPANYSHEETG.G.SUBJECTUFSARTRANSIENT414~l.114.1.214.1.314.1.414e1.514.1.614.1.714.1.814.1.914.1.1014.1.11.14.1.1214.1.13ualitativeFunctionalDiversitAssessment~ab1e-TRANSIENTnconcxolledRCCAWithdravalfromaSubcxiticalConditionncontrolledRCCAWithdrawalatPowerodClusterContxolAssemblyMisalignmentCCADropChemicalVolumeandControlSystemMalfhnctionssofReactorCoolantFlovStaxtupofanInactiveReactorCoolantLoopLossofExtexnalElectricalLoadssofNormalFeedvaterFlovExcessiveHeatRemovalduetoFeedwater:Sys'ternMalfunctionExcessiveLoadIncreaseIncidentssofAllA.C.PowertothePlantAuxiliariesuzbine-GeneratorSafetyAnalysisPOTENTIALLYAFFECTED(A)/NOTAFFECTED(NA)AAAAAAAAAAAAA14.2.114.2.214.2.314.2.414.2.514.2.614.2.714.2.8FuelHandlingAccidentccidentalReleaseofRadioactiveLiquidsccidentalWasteGasesReleaseSteamGeneratorTubeRuptureupcuxeofaSteamPipeuptux'eofaContxolRodDriveMeBMI~Housing(RCCAEjection)SecondarySystemAccidencsDoseConsequences]oxRuptureofaMainFeedvacerPipeAAAAAAAA14.3.114'.214.3.314.3.414.3.514.3.614.3.714.3.8LargeBreakLOCAAnalysisssofReactorCoolantfromSmallRupturedPipesorfromCracksinLargePipeswhichActuatestheEmergencyCoreCoolingSystemCoreandInternalsIntegrityAnalysisContainmencIntegxicyAnalysisEnvironmentalConsequencesofaLossofCoolantAccidentydrogenintheContainmentAfteraLossofCoolantccidencLongTermCoolingitxogenBlanketingAANAAAANANA14.4.214.4.314.4.414.4.514.4.614.4.714.4.814.4e914.4.1014.4.11SDCDCPEEPostulatedPipeFailureAnalysisOutsideContainmentnalysisofEmergencyConditionstressCalculationsescriptionofPipeWhipAnalysisompartmentPressuresandTemperaturesescxiptionofJetImpingementLoadAnalysisontainmentIntegritylantModificationsnvironmentleetricalEquipmentEnvironmentalQualificationNANANANANANANANANAA APPENDlXA

~UNIIIandfsARTRANSIENTNLt.L.lIRANSIENIUncontrolledRCCASankMlthdroualtron~SubcrltlcalConditionIRIP/SAfECUARDfUNCTIONfORRXTRIP(FEARLN~L.i)1.Sourcerangeneutronfluxtrip-ectwtcdsheneitherof2IndependentsourcerangechNNttsIAdlcatcs~flUx~bove4prcsclcctcd,44NJILLyadjustablevalue.2.IntcrncdleterangeneutronfluxtrfpactwtcdUhcn~lthcroftuoIdependentLntcrocdlater4AgcchannelsindicatesIfluxaboveaprcselcctcd,auxuLLyad)ustablevalue.3.Poucrrangehighneutrontluxtripllousetting)"~ctuatcdebentuooUt0'fCpokerch4NNLIIAdlcatc~flUx4boveIpproxioatcty25XoffulLpoucrtlux.S.PouerrangenCutrontluxleveltripthighsetting)-actuateduhcn2outotSpacerrangechanclsIndicate~tluxLcvcL4bova~presetsctpolnt.5.Inaddition,RxtripfroaPERhighprcssureservesIsIhookuptotcnelnatotheIncidentbeforeanovcrprcssUroccndltloAcouldoccurIHPACTOFCO&0KNODEfAILURELCNf)CN'TRIPFUNCTIONItenNos.I.SnotaffcctcdLNcnodatedSept2,1992tressV.G.SotostoV.D.Vandcrgurg,1/STabl~3.3-I)LOSTLNccodatedRcpt.2,1992tronV..G.SotostoV.0.Vandcrsurg)ALARN/ALIERNAIEINDICATIONSTSTENAVAILASLFAd~cnAYblPanelIndicationPanelRecorderPlantProcessCooputcrIAdlcatloAYbPrcssurtcrNighPrcssureDcvlatlonvl~ControlSystca.fourhighprcssUre~LarosYI4~ccntrolsystca.0A~AdcnAudblendicatonofrod~etion.DIACRANSFD.2101SheetI/6coxsfouENcEs0FUNAVALLASLLLTTOFDIVERSEALARNNotAffectedNone.TuoDiverseALaresareavailable.EVALUATIONOfEVENTThistransientIsnotsffcotcdbythercploccncntofN.lineanalogprocessprotectlcnsystcnbyFoxboroSPEC200IndSPEC200NICRO,~Icroproccssbasedsgdutcs.TripsIthroughS,ListedlnColum3,arenotaffected,sincerwetcarInstnnentatlonforfluxscasurcocntlsno!replaced.forRxtripfrcotprcssurltcrhighprcssure,tuodiverse~Laresareavailable.Inacklltfcn,pressurizerhighprcssuretripIsabackuptrip.1 UNIIIFSARTCA<<SIENI41(.1.2TRANSIENTUncontrolledSCCASankVlthdra<<aletPa<<crTRIP/SAFECUARDFUNCTIONfORRX1RIP(TSAR)l(~I,g,)1.KualcarPa<<crrangeInstrlsacntstlonaatwtcs~reactortriponhighneutrontluxif2/Cchannelsexceedonovert<<warsctpolnt.2.Rxtripcnanyt<<ooutoffouritahalv>>tsexceedOIC'1sctpolnt.Thiscatpolntlsautaeattaattyvaried<<lth~xl~Ltxwcrdistributioncoolantaveragetccpcrature~rdpr~scutetoprotectagainstDNS.3.Rxtripont<<ooutoffouratchannelscxaccdOPalsatpotnt.ThissctpolntIsauteaatlaallyvaried<<1thcoolantaverageteapcraturesothattheallo<<abt~fueLparerratingIsnotcxcccdcd.C.Ahighprcssurereactortrip,actuatedfresanyt<<aoutoffourprcssurechannelslssctat4fixedpoint.S.*highpressurizerwterlevel,aatwtcdfretsany2/Cahalv>>ts~Issctat4fixedpoint.IHPACIOfCOHHONHCOEFAILINIE(CNf)ONTRIPFUNCTICHNotAffectedOta'fRxTripLost(Ncaadated9/2/92tresV.0SotostoVD.Vandcrgurg)CPUTRxtripLost(Ncaadated9/2/92fresV.0.SotostoV.D.Vacdcrgurg)Lost(Ncaadated9/2/92fresV.0.Rotc>>toV.D.Vandcrgurg)Lost(Nceodated9/2/92fra4V.O.SotostoV.D.Vandcrgurg)ALARH/ALTERNATEINDICATIONSTSTENAVAILABLENISpaverrangeovcrpo<<errodstepat103X~tar>>.Vt*rangeteapcraturerecorders.Viderangetccperaturerecorders.nd4AvabPanelIrdlcatonPanelrecorderPlantProcessaaaputcrlndtaattonvA~AvajbPrcssurltcrNighPrcssureDcv!ationviacon'tI'oLsysteaFourNighprcssure~Lars>>viacontrolsystea~AvaabPanellndc4tonPanelrccordcraacputcrIIdlaatlonv4AvsabPrcssurzcrNghLevelDeviationviacontrolsysteaNighlevelviacontrolsystea0tha4ndtaaansAudlbtendicatIonofrodnationDIACRAHSfD2102Sheet3/CFD2102'heet3/CFD.2102SheetI/dFD2101Sheet2/dco<<sEQUENcfsofUNAVAILABILIITOfDIVERSEALARHNuclearII>>truacntatlancystcanotchanged.fivediversealarc>>available1<<odiverse~lars>>~vallabl~.Rxtriponhigh'prcssurtzcr<<sterlcvclactuates~alcr~heithertheO~iorhighneutronfluxtrtpAuctionstodeaanstratethisprotecttonduringprcssurtzcrfillingscenarios(fSAR,page1C.'I:2AC)EVALUATIONOfEVENtTheRxtripanMISoverpwcrsetpolntlcnat~ffcatcdbythercptaacsentofM.lineanalogprocessprotectionsystea,sincefluxecasureacntInstruacntatlonlsnotreplaced.2.1he0141RxtrlPlslostbyN-linercptaaeaant.ThcOtaltripcnsurcsthatDNSdoesnotoccur.IheFSARanalystsofthisevent~ssuaasthatRxtriponhighprcssurlzcr<<sterlevellsassusadavailable.Thistripactuatesearlierthan~IthertheOTC'Iorhighneutronfluxtripfu>>tlanstodeaanstratcthisprotectionduringthesto<<crprcssurlzcrfillingscenarios(FSAR,pageTC.T.2A.C).1hchighpressurizer<<sterLeveltriphsst<<odiversehighlevelatars>>,thereforeoperator<<ouldgetindlaattonspriortoOtitRxtripforprcssurlzerfllLevents.Thosescenario'cthatdonattcrsdnateonhighNISIfuxorhighprcssurlzcr<<steraretcratnatcdbyOtal.IhcyterdtobeLo<<erreactivitylnsertfonsacnarlosorLcwerpa<<crscenarios.Althoughnarctinefsavailableforresponsetotheseevents,Itcannotbestated<<lthcertaintythatfuelcladdaoage<<tllnatoccur.VcsttnghousehasreportedfnVCAP.B330thatNtntausONBRcanbcachievedfor~rod<<tthdra<<alatpa<<srATVASatthoughtheparttaularcaseevaluated<<asarapidrcaattvltyInscrtloncase<<htah<<outdhavetrippedonMIShighflux.CladdaaageIsanacceptableautaaeebaausethcCHFlcasadttptefailurecondition.Na<<ever,asdiscussedbetou,rod<<lthdra<<atof@acreventsaresignificantlynltlgatcdbythefulLpwcrbaseloadoperationoftheCookUnits.3.ThercptaaeacntofN.Lineanalogprotectionsysteacauses~lossofOPiTRxtrip.thlccouldresultInfuelrodcladdingfailure.Ha<<ever,theposslblLlttcsofthtstooccurlsstl4.FirstofaLL,thiscvcntwuldbetcralnatedassoanaspo<<erIs~109XRatedThereatPa<<cr(TrtpSctpolnt)bytheNIS.ThisIsat<<aysthellntttngtripforatntsusfccdbaak,rapidrcaatlvltylnserttonevcntc.fora>>xtcusfcccbaak,rapidreactivitytnscrtlanevents,theprcssureceltrotsysteatsnotexpectedtokeepupthcrcbyalsoproducing~highpressuredeviationclare.IhestatreactivityInsertioneventsareexpectedtofillthcprcssurtzcrendpl'odua44LcvclelenaIhcescalationofpwcrInarcascsTavg,andVideRangeRCSTeaperatureRecorderIndicationsare2

UNI'II2fSARTRANSIENT0IA.I.2Icont'd)IRANSIEHI'IRIP/SAFECUAROfUNCIIONFORRXTRIP(/SARII.lr'f)IHPACTOFCtseQNHCOEfAILUREICHf)ONTRIPFQICTICHALARH/ALTERNATEILOICATIONSTSTEHAVAILARLEOIAGRAH4CONSEOUENCESOFUMAVAILASILIITOFDIVERSE'LARHEVALUATIONOFEVENIavallabl~tothepocratorIHesodatedp/2/p2froaU.O.SotostoV.O.Vandcrsurg),prcssurlzcrRxtripandhfohprcssurlzcrwtcrLevelRxtriphaveOlvcrseAtaresavallablc.A.theCookUnitsarebaseloadedsothattheyoperateprlaarllyatIOOXRTP<<Ithrodscsscntlatlycosptetctyulthdram.TheLoverpouercasescsscntl~Ilyaddresscondltlonauhlcharetransitory.Ourin9transltlonopcratlon,operatorsulllgivecloseattentiontoIndlcatlonPastheynanlpulatethenarhlne.NatethatpoucrsVOXareusedoccaslonattytostretchacycle.forthesereasonsthislsaIouprobabllltyevent..3.

UNIT1a2ISARfRANSIENT4IC.1.31C.I.C'IRANSIENIRodClusterControlAsscebly(RCCA)NlcaLlgnacnt(IC.1.3)RCCAAssccblyDrop(TC.I.C)TRIP/SAFECUARDFUNCTIONfORRXTRIP(fSARIt(.I.3~It(.l.tfMoreactortriponRCCAa(sal(gtvcent(FSAR1C.1.3)forRCCAdroprod(s)event,theanalysisdocsnottakecreditforanydirectreactortripduetodroppedrods(UCAP-TI39C,pageI2)IHPACIOfCCHNOMHCOEFAILURE(CNF)ONTRIPFUNCTIONALARH/ALIERMATEINDICATIOMSTSIBIAVAILARLEDIACRANgCONSEOUENCESOFUNAVAILADILITTOfDIVERSE'LARMEVALUATIONOFEVENTforRCCAelsallgfvaentevent(fSARIC.I3),therelsnoreactortrip.TheanalysisforRCCAdroprod(s)cvcntdocsnottakecreditforanydirectreactortripduetodroppedrods(Uchp-)139(,paget-2).Thus,thercplaceeentofcxlstlngM-LlneanalogprocessprotectionsystenullLnot~ffcctthefSARresultsofthesetuoevents.lhefattcuingdctectlonsignals/slamsare~vallsbleFortheoperatortorespondtothesetransients(FSAR,Unit2pages1C.1.3-1and1C.1.'3.2)t(I)SuddendroplncorepaverlevelasseenbytheNIS(II)Asyrnctricpouerdistributionasscenonout-of-coreneutrondetectorsorcoreexitthernocouple,(III)Roddeviation~terat(Scf'point-Individualralpositiondcvlatlon+12stepsfraadeaandcanter,Procedure2-ONPCORC.210Drop29),(Iv)RodpositionIndication.Inaddition,forroddroppedeventordroppedbank,thcfullyInscrtcdassccbllesareIndicatedbyarodatbottaasignai,uhich~ctwtcsacontrolroaaanntnciator(sctpolnt20stepsfroathebettaa,ProcedureR.ONPCORC.210,Drop22).

VNI'fI12fSARTRANSIEN'IgIC<'I.STRANSIENIUncontroclcdSaranOllucionIRIP/SAFEGUARDfVNCIIONfORRxTRIP(fsARici,l~5)1)llfthreactorlnaats<atcontrolsndnooperator~ctlontakentotcralnatethetransient,theFNwerard'cccpcra'cure>>illcausethereactortoreachtheoverccsperature<<I(oc<<T)tripsctpolntresultingIn~reactortrip(fSAR,Page1(.1.$5)IHPACIOfC(secGNHOOEfAILURE(CHF)ONTRIPfVNCTIONOT<<1reactortriptost(accodated9/2/92frasMg.SotostoV.D.Vandergwg)ALARH/ALTERNATEINDICATIONSTSIEHAVAILASLEh~<asI<dtcaNISpwcrrangeovcrpo>>crrodstopat103XPr(sary>>sterfto>>deviation~laraRoricandflewdeviationclara>>lthrodsincute>>aclacRodbankDLcw~laraRodbankDIou-LoualaraAmllbl~indicationofrodaoclonDIAGRAN4fg.2102Sheet3/CCONSEQUENCESOfUNAVAILASILIITOfDIVERSE'LARHEVALUATIONOFEVENTIhefSARscctlcnIC.I.Shascxsafncdthreephasesofborondilutionaccident,I.~.borondilutionduring(I)refueling,(II)startlp,snd(ill)poueroperation.fordllutlonduringrefueling,thcrcarcaorsthan33afr<<tcsavailableforoperatoractiontroathetlaeofInitiationoftheeventtolossofshucdwnasrgln(SX<<k/k)(fSAR,page1(.1.5.$).Forrefuelingcade<thecostLikelysourceofdilution,CVCS,lstaggedout.forotheraodcsthlcsourcelsnottaggedout.fordilutionduringstartlpthereareacrethan3Salnutcsavailablefortheoperatoractionfrc<athetlaeotInitiationofthceventtolossotshucdounaargln(1.3Xik/k)(fSAR,pageIC.I.S.S)forUnit2<<dESala>>teatorUnit1.Startuplsatransientoperation.Opcratofs>>lllgivecloseattentiontoIrdlcatlonsastheyaanlpulatetheaach\ne.DilutionaccidentatpeerIncludesthereactorInautoaaticcontrolol;aac<<a(control.tilththereactorincute>>etiocontrol,thcpo>>erandtccperatureIncreasefroacheborondilutionresultslnInsertionofthecontroLrods<<dadecreaseIntheavailableshutdo<naargln.1hcreareacrethanCSair+teafroathctlaeof~Lara(LouIouredInsertion(lait)toLossofshutdo<<naargln(1.3X<<k/k)(fSAR,page1(.1.55)forUnit2andCgaf<v<tcsforVnlt1.theCookUnitsareoperated>>lthrodsinautasatlcuntesstherels~cocpettlngreasontooperateInaanual.illthreactorIna<<smLcontrolandnooperator~ctlcntakentotcralnatcthetransient,thepwerandtcapcraturc>>ouldcausechereactorcoreachDT<<Ttripsctpolnc.Thistrip>>illbelostas~resultofco<<>>naodafailureottheneuFoxborodigitalsystca.Theborondilutiontr<<>>lentInthiscaseicessentiallyequivalenttoancs>>ontroL(cdRCCA>>ithdrauaLatpoucr(fSAR,page1(.l.S-I).ThereIsnocontrolrosaclarafrcathea'1aystcaforth'isevent.No>>ever,theincreasingpwerand>>lderangetcoperatureIndications>>auldindicateconSIclonstotheoperator.Thiseventlsssto>>rcactlvicyadditionevent~~Ipca/sec<.5.

UNIIIa2ISARIRANSIINI4lt1.5(con'I)IRANSIENI)RIP/SAFECUARDFUNCIIONfORRXIRIP(fSARIt(.t.r)IHPACIOfCOHHONHCOEfAILURE(CHf)ONIRIPIUNCIIONALARH/AL'IERNAIEILDICAIIONSVSIEHAVAILASLEOIACRAHgCONSEOUENCESOfUNAVAILASILIIYOF0IVERSEALARHEVALUAIIONOFEVENFFollovingthediscusslonontneontrotlcdRCCAbankulthdravalatpower,thehighprcssurlzcruatcrlevel~Laralsassumedave(labia,tblchhastuodiverse~Lanes(mesodated9/2/92fromM.o.sotostoV.O.Vandergurg).)hislsastoutrans(cnt,andulththeprcssurhcrlevel,NlderangetcoperaturcIndlsatlens,andotherIndlcatlons,theoperatorshouldbeabletotripthcreactor.

0ll UNIT'Ia2ISARTRANSIENtNI(.).6.ITRANSIEN'ILossofforcedReactorCoolantfla<<TRIP/SASECUARO(UNCTIONfORRXTRIP(fSAR(IIIgI)1.RxtriponreactorcoolantpappwerslppiytedcrvoltageorunderIrccpcnay2.RxtriponLa<<reactorcoolantloopf1o<<.IHPACIOfCOHHONHOOfIAILURE(CHf)ONIRII'UNCTIONNotAffectedLo<<flo<<RxtripLost(for~LLfourloops)ALARH/ALTERNATEINDICATIONSTSTEHAVAILASLEReactorCoolantPulpunderfrecpcnayandIJndcrvaltagtalafsl(ProcedureI,2-oxp,(02(,107,207)I4IonAvsIabPanelInd(catIoncooputcrindIcatIonvcrAlaraAvalcbta~hPress<<riserprcssurepanelIndicationPrcssurlzcrprcssurercaordcrPrcssurltcrpressurecocpulcrIndicationPrcssurlterlevelpanelIndicationPress<<riserlevcLrecorderPrcssurlterLevelcoeputcrIndicationtilderangetccpcraturerecordsQhhr~cPrcsswiterhighprcssuredeviationvl~controlayctcQfourhighpressure~LarsiviacontroLsystoaPrcssurltcrhighleveldeviationviacantrolcyst<<aNighlevelviacontrolsystuaAcousticNanltorfloudctcatcdDIACRANgID2101Sheet3and(CDNSECUEMCESOfUXAVAILASILIITOfDIVERSEALARHIftheRxisatpo<<cr4tthctineoftht~aaldcnt,theimacdiatceffectof~lossofcoolantfia<<la~rapidIncreasetnthecoolanttcopcr4'turc<<blahIs~ugnlfledby~positiveHTC.IbisIncreasecouldrcsuttlnDNS<<lthsubsequentadvcrsccffcctstothefueL,iftheRxlsnottrippedprocptly.((SAR,pageI(.).6-1)EVALUATIONOfEVENTIhcRxtripanreactorcoolantpulppa<<crslpplyundcrvoltageandunderfrequencyrcaainclalallcatcdbyaaaaoonNodefailure(cxf)ofthene<<digitalInstrloentation.ThereactortriponLossoff(a<<ln~coolantlooplslostonCHffortachloop.ThesearenoDiverseAlarmsavallablclha<<ever,panelIndite'tlonandcocputcrIndlca'tlonart4vallablcfortheLa<<coolantloopflow.T<<ocasesoflossofflo<<arediscussedlnfSAR(I(1.6).IheslcultsncouslossofpeertoallCRCPscanoccurduetoeitherundcrfrcqucnoyorundervoltage,<<hlchIsnotlcpaatcdbyCHF.'IbissituationIshighlymllkely,sino>>eachIxapIscarncctcdtoaseparatebus,<<blahlsstpp(lcdbyancoft<<otransfonacrs.theconsequencesofthelossofflouInaiufeanIncreaseInTavg,pressurlterpressure,andprcssurlter<<sterlcvcl.ViderangeRCStcapcraturerecorders(necodated9/2/92froaU.C.SotostoV.D.Vandergurg)areavailabletotheoperatortoindicateanIncreaseInTavg.ThcrcIsnoRxtriponhighIavg.Thcprcssurlterprcssure<<illcontltwetoriseuntlLthcoperatorgets4highpressuredeviationslaneet2325pais(2.ONP(02(.200Drop7)forUnit2and2175pslaforUnit1.theRxtriponhighpresswe(cctpolnt<<2(00pale)lsLostduetoCHf.However,dlverst~Lares(octodated9/2/92franM.C.SotoatoV.D.Vandergwg)areavailable.Itlscvldentthatthehighprcssuredeviationalarm<<ILLdrauthaoperator'aattention,andhe<<ILLtriptheRx<<atua(Ly.Thcoperator<<IILalsobeLikelytoseethehighleveldeviation~LareatSXaboveprograa.ThccansapcnocsofthlcNanualRxtriparedlscussedbclou.CrudecxtrapolationaofDNSRfortheattvcntasuggestthatIONSRcouldbereached<<lthln.16towigsecondsforlossoffLo<<lnoneloop.Siai(arextrapolationssuggestthatthehighpressuredeviationelena<<auldfirstbereceivedWsecondsintothetransient~Lthoughtheoperationofpressurltcrsprays<<ILLIncreasethiscstlaate.Allo<<tng~scaandsforoperationresponseItisclearthatDNScould.7.

0 UNITI2ISARIRANSIENT8It.t.6.1(cont'd)TRANSIENTTRIP/SAFEGUARDFUNCTIONFORRXTRIP(FEARIHPACTOfCOHHONHCOEfAILURE(CHf)ONTRIPfUNCTIONALARH/ALTERNATEINOICAllOISTSIENAVAILARLEDIAGRANgCONSEQUENCESOFUNAVAILASILITTOFDIVERSEALARHEVALUATIOIOfEVENToccurresultingInclatdanagc.Since~nasstve~ultlplefailurelaaccusedforthisevent,thfslcbelicvcdtobeacceptable.lllth~lossofflowtnonelooptotalcoreflowshouldrcnalnrooovlngthebulkofthcheatfranth<<core,Ltatttngthedeteriorationofthecorepriortocenualreactortrip.TheportionofthecorethatcxpcrtcnccsONSlsexpectedtoheatuptntlttheDopplercoctflcfcntshutsItdown.FuelIsnotexpectedtosettbutctadburstandoxtdatlonareanticipated.Ltshouldalsobenotedthatthiseventwasanalyzedwithapositiveaedcratloncoefftctcnt(NIC)ofeSpaa/'F.IhlsvaluelsnoreLlatttngthantheTcchnlcatSpcctflcattonLicitat100XRTP.ItfsconservativeandprovidessMtantlatchargtnthroughoutnestoftheLife.cthtscausespowertoIncreaseasthecoolanttccperatureIncreases.AnorercallstlcasstnpttcnforbeginningofcycleIc-(pcn/of.AnegativeNICwlLLtendtoshutdownthecoreestccpcraturcincreasesntttgattngthecvcnt.theHTCbcconcssdstantt~Ltynorenegativeashurrayprogresses.TheCookUnitsarebaseloadedandoperatewithcontrolrodsinthealloutposltlcnatfuttpower.There(orc,theposslbllttythatcutcnatlcrodcontrolnightulthdraurodswILLhavenolcpactbecauserodsarcessentiallyfullywlthdram.Afterreactortrip,thececrgcncyoperatingproceduresprovidefornlttgattonactivitiestobringthecjachlne'toesafecordlttcn.Intheevaluationofthepreviousparagraph,anoperatorresponsetineofMsecondsuasassuacd.Mtthoutereactortrip,prcssurltcrassureanflevcLareexpectedtoconttrwctoncrcaseafterthefirstatomsareresolved.Shenprcssurereaches2250Dalai'thePORVicwillopenrcsultlnglnanacousttceonttorftoudetectedstars.Extrapolatingtheanalysiscurves,whichdonotcxdctprcssurltcrspray,thiscouldoccurbeforeIINSRlsreached.Therefore,itlsLikelythatanecctnutatlonofeternewiltoccurbefore60secondshaveelapsed.Therefore,theopcratorcresponseticenaybelessthan40secondsforthisevent.

UNITI2fSARIRANSIENIIIS.T.S.IIcont'd)TRANSIENTTRIP/SAfEQJAAOfUNCfIONfORRXTRIP(ISAR)tt.f.g.t)INPAct0FCQONNINCOEFAILUREICNF)ONTRIPfUNCTIONALARH/ALTERNATEINOICATIONSTSTENAVAILABLEDIACRANNCONSEQUENCESOFUNAYAILABILITTOFDIVERSEALARMEVALUATIONOFEVENT,,TheeastIlkclycauseofeneventofthist)pc,lsafailureofthereactorcoolantIanpIRCp)orItsactor.Thcoperatorlsprovidedulth~slsnlfleantrasherofeternetogivehfninforoatlonresardlnSthcRCP'sandenters.These~TarosIncludeRCPactordlffcrcntlaltrip,RCPactoroverloadtrip,sndRCPaeteroverheated.Therefore,ItIslikelythattheoperatorNlllhaveInforaatlonavailableshishNlllatlouhietoantlclpatc<<d,therefore,substantiallynltlgatetheevent.

UNIII2fSARTRANSIENT4IL.I.6.2IRANSIENILockedRotor/SheftBrcakAccidentTRIP/SAFECUAZOfUNCIIQIfORRXIRIP(/SARLLI,Lofe2)ReactortriponLo<<flo<<signalIHPACIOfCttetOHHCOEFAILURE(CHF)CHTRIPIUNCTIONLo<<fto<<reactortripLost(acao9/2/92acaofretsV.C.SotostoV.0.Vctdcrgwg)ALARH/ALTERNATEINOICATICttSTSIEHAVAILABLEtdleelsAvclchPanelndicationCocputcrIndicationvAraAvcCMc~h~l~aensPressurizerprcssurepanelindicatIonPressurizerprcssurerecorderPressurizerprcssurecocputcrItdicatlonPressurizerlevelpanel(Cd(cationPrcssurizcrLevelrecorderPressurizerlevelcocputcrltdlcatIonViderangetccperaturerecordsgourdolprcssurlzcrsafetyvalves9~het~ccPressurlterhighprcssuredcvlatlonviacontrolsystcclfourhighprcssurealarsaviecontroLsystctaPressurizerh(ghLeveldeviationviecontcoi4ystuaNighlcvcLvscontrol4ysteaAcousticaonitorfLoudetected0IACRAHNf0.2101Sheet3and6CONSEOUENCESOfUNAVAILABILIIIOFDIVERSEALARHLftheRxlsatpateratthctlaeof~ccldcnt,theIctscdiatceffectof~loss.offto<<(seizureof~RCProtor)lsanincreaseInthecoolanttccperature.ThisIncreasecouldresultInONB<<lthstftscqucntadverseeffectstofust,iftheRxIcnottrippedprocptly(FSAR,PageIL.I.6.1)EVALUATIONOfEVENTThcfSARanalysisfoc'thiscvcntassuscsan!nstentcncousseizureof~reactorcoolantputprotor.Forthisevent,thereactortripsonlo<<fle<<signal.'thecotcsonaodefailure(CHF)ofthene<<digitalInstcttscntatIon<<outdresultIn~lossoflo<<flo<<gxtripsignal.Ihclossoffle<<<<illIncreasethecoolanttccpcraturcatdanIncreaseInprcsswlzerprcssuredueto~reductionlnbeatrcaovat.The<<lderangeRCStccpcraturcrecorders(accodated9/2/92freeV.O.SotostoV.0.Vatdergurg)arcavailabletothcoperator.Theprcssurlzcrprcssure<<illcontinuetorise,endtbaoperator<<illgct~highprcssurlzcrdeviation~Iaraat2325paid(Procedure2-ONP(02(.200Orop7)forUnit2attd2175ps(aforUnit1.Thereactortriponhighprcssure(<<2(00paid~)lslostduetoCHf.No<<ever,highprcssurediverse~Iarstsarcavailable(acctodated9/2/92froaV.O.SotostoV.0.Vandergurg).Therefore,thehighprcssuredeviationclara<<illdra<<thcoperator'sattentiontotripthereactorttatstaiiy.IbiseventlsverysztdtLikethclossofforcedreactorcoolantfle<<incnetocp.No<<ever,ltlscoresevereInthattotaLcoreflatlacc4Kcdstorerapidly'to~Lo<<ccvalue,thetotalcorefloulsreducedto7OX<<Ith(n~'2accords.Asthecoolantheatstp,asignificantIrncaseInprcssureoccurs.'IhepeakanalyzedprcssureforbothmitslaM90psla.Ibispeakoccurredat2accordsafterthereactortripat1accord.IbisprcssureIclessthan110Xofthedesignprcssure,I.~.2750psl~.No<<ever,lfreactortriplsdelayed40sccotds,itcarrtotbestated<<lthcertaintythatthisprcssure<<outdnotbeexceeded.No<<ever,the~nalyslstakesnocreditforpressurizersprayorthcpressurizerPORVts.Ltlsalsothecaseas<<lththeLossofforcedreactorcoolantfle<<thatthaanalysis<<44pcrfoctacd<<lth4po4ltlva~todcratortccperaturecoefficient(KIC)ofc5pca/'f.ThisvalueIscoraIlaltlngthanthe'TcchnicalSpeclfIcationI\altatIOOXRIP.LtlsconservativeandprovidesstftstsntfalaarglnthroughoutthacoreLife..10-~~~"~~Q0tmhct~'tr>.<~<4...:">~-.....I~,.""~m.,impC~.)..."3~~F.'tr..aC ONITI2fSARTRANSIENTNIS.IA.2(ccn't)TRANSIENITRIP/SAFEQJAROfuKCTICNfORRXTRIP(CESAR(tf~t~ga2)INPACTOfCISOQNINIOEFAILUREICNF)OITRIPfOKCTIONALARM/ALIERNATEIKOICATIONSTSIENAVAILASLE0IAGRANgCONSEQUENCESOFLNAVAILASILITTOf0IVERSEALARNEVALUATIONOfEVENIThcrctore,asTavgIsfncreascd,powrIncreasesIntheanalysis.AsIndicatedInthelossotforcedreactorcoolantftou,~sorercatistlcbeginningofcycleNTC,uouldbe~-Spec/~F.throughoutcorelifetheNTCuoutddecreasetothc20pcn/'F.ThefccchackfreaktheNTCuoutdthereforetendtoshutthereactordounratherthanIncreasepavertnanactwlevent.IheCook>nitsarcbaseloadedandoperateKithcontrolroCkIntheatloutpositionatfulLpoucr.thepossibilitythatautocoticrodcontrolnightutthdraurodsuttthavenotcpactbecauseroCksreessentiallyfullyutthdraw.TheseconsiderationstoadustoconcludethatItlstntlketythatprcssurltcrpressureuoutdexceed2730pslaandvirtuallytcposslbletoexceed3200pstIF,theARNERollerhandPrcssureVesselCodeLevelCcrlterlcn,uhlchuasusedforANSACdesign.Intheanalysts,ONStsexpectedtooccur.Intheeventofadelay,.otreactortripby~seconds,thissituationcanonlybeexacerbated.TheoperationofpressurltcrspraysandPORV'suhlchverenotsedatedIntheanalystsutttalsoresultInanIncreaseInfucLrodslnDNS.Nouever,ItIsbelievedthattheavailableftouutilpreventthecoretrondegradingtoconditionuhereItcanrotbecooledaftertrip.TheportionofthecorethatcxpericnccsONSlsexpectedtoheatuptnttttheOopplcrcoefficientshutsttdoun.Fwllsnotexpectedtonettbutcladburstandoxidationareanticipated.Qbstantta\coredaoageIs~cccptabteforthtscvcntKhtchlsanANScondlttonIVcvcntKithsuasiveaulttptefailures.Intheevaluationottheprcvloustuoparagraphs,anoperatorresponsetineof~cecondsuasaksuaed.Nowvcr,thiscvcntlsexpectedtobeverydracetlcSeveralprcksurltcratarkxtcanbeexpectedNlthlnsecondsofthestartoftheeventIncludingtheacousticcxnltorfloudetectedslane.'theprcskurttcrcafctyvalvescanbe<<xpectcdtoLiftuhtchcreatesantcprcsslvesoundinthecontrolrook.Therefore,theoperatorsresponsenaybslessthan40secondsforthiscvcnt.

J':~~~P4lt4,"tgq'IA

~~~~~~I\I0~I~~I~~I~~

UNIT'I2ISARTRANSIENT~It.).7TRANSIENTStart>@ofanInactiveReactorCoolantLoopIRIP/SAFEGUARDFUNCTIONFORRXTRIP(<SARIt(.I.2)Unit1andUnit2operationduringstartupandpoveroperationulthlessthanfourtoopslsnotpcrnlttcd(I/S3/(.(.I)exceptforspeal~ItestingasprovidedforInI/S3/(.10.5forUnit1andI/S3.C.IO.SforUnit2.LicenseccndltiaraforbothUnitsprohibitoperationaboveP-7ulthLessthanfourreactorcoolantFcnpslnoperation.Noucvcr,thcUfs*RcontainsanalyticofthiseventforbothUnits.ThisinforoationlaprovidedforInforoatlonandbecauseItboundsthetestcondltlcnsInslcatcdabove.!haseanalysesresultInreactortripsonnuclearInstruscntatfonhfghf(ux.INPACTOfCOHHONHCOEfAILURE(CNF)ONTRIPFUNCTIONALARM/ALTERNATEINOICATICNSTSTEIIAVAILASLEDIAGRAMNCONSEOUENCESOfUNAVAILABILITTOfDIVERSEALARNEVALUATIONOfEVENTInaccordanceulthT/S3/SA.T,operationduringstart~andpoucroperationulthlessthanfourloopslsnotpernltted.Assuch,thisaccidentuasnotanalyzedfortheVANTACE-5fueltransition(Unit2FRAR,pageI(.1.2-1)orfortheUnit1reducedtccpcratureandpressureprograa(UnitIUFSAR,Page1(.1.7-3).Tbcrcfore,thecocnonnodefailure(CNF)ofthencufoxborodlgltaLsystnsuouldhavenolcpactonthistransient.'-13 0V UNI)I2ISARTRANSIENTNI(~1.0IRANSIENILossofExternalElcctrlcLoadorTurbineTrip(fullVantage.SCore)TRIP/SAFECUARDFUNCTIONfORRXTRIP(FSAR)CI)Reactortripsonfotlouingsignalsx1.Nighprcssurlzcrprcsswesignal2.Nighprcssurlzcruatcrlcvcl3.Ovcrtceperatureat(OTit)signalInphcfofcotcoNncoEfAILURE(CNF)OlTRIPfUNCTIONNighprcssweRxtriplostNighprcssur1teruatcrlcvcLRxtriplost04TRxtriplostALARH/ALTERNATEIAOICATIONSTSTENAVAILABLEIcAvaab~PanelndlcatIon~Panelrecordercocputac'IndlcacicnvrAaresAva'Iablt~NghPrcssuredcviaticnvl~.controlsystcca~Nighprcssureviacontrolsystce(four~lares>~PressurizerPCRVdischargetccphigh~PrcssurlzcrsafetyvalvedischargeCccphl(3~Lares)-Pressurizerrelic(tankCccphi~PressurizerrelieftankpressurehighorLou.Prcssurlzcrrelieftanklevelhighorlou~Acousticeonltor(loudetectedcd~Aveabl~Panelted(cation~Panelrccordcr-CocputcrIndicationavaebtsetpolntviecontroLsysCeo-PressurizerlevelhighfroacontroLsystccaViderangeRcscccpcracurerecordersOIAGRAHgFD2101SheetI/dF0-2101Sheet2/0FD2IOISheetSCONSEOUENCESOfUNAVAILABILITYOFDIVERSEALARNEVALUATIONgfEVENTocsooadTwbnoTIThccostIkctysourceofacocpt~caLossofloadInNSSSIsatripofthetwblne-generatoror~differentialrelayuhlchresultsIn~turbinetrip.InChiccase,therels~directreactortripsignal(crclcsspowerlsbetou~pproxleatcly1'lXpovcr,I.e.,betouP.T)dcrlvcdfreestheturbineeacrgencytripfluidprcssureandturbinestopvalws(FEAR,pageT(.T.SS-I).Ihercfore,thecoccacnnodefalture(CNF)ofthencudigitalsystcehasnoIcpactonthereactortrip.sofLoadulthouwbiITuoInitiatingscenariossereconsideredforthiseventsCocptetelossof~lcctrlcalLoad,~ndlossofcondcnscrvaccxec.eItoecrcaoadforthiscvcntthereactortripsonfourtripfca>>tfcns.Forhighpressurizerprcssuretripfcz>>cfcn,threealternateIrdlcatlonsacdseveraldlvtrst~Iaresareavailable.forhighprcssurlzcrtaterleveltrip,threealternateIrdfcatlonsandtuodiverseclareavailableforIou-Lousteangeneratoruaterlcwltrip,threealternateIndicationsacdoncdiverse~lanaareavailable.TheseIrdlcttlons,stares,~ndothertndlcatfons,especiallythcscxsdofsafetyvalvesshouldprovfdeIcdlcatfonstotheoperatorofabnonaalcltwtionandhtuouidtripthereactoreacxcaliy.The(spaceofthccoccacnnodefailure(cNF)ofthedigitalsyscceuouldresultIn~lossofOfatreactortripfcc>>Clan.ThtOtitreactortriplsthtonlyfcz>>ttonforwhichthe~Iternatestares/lcdicatlcnsarenoCavallabl~thelossofreactortripuouldcausetheRCSprcssureandtccperaturetorise.ThisuouldresultinantncrcaseofpressurizeruacerLcwl.Prcssurlxtrpressure,prcssurlzcrLevel~ndulderangetccperatureIndicationsara~vallabl~cotheoperatortotripthereactor(eseodated9/2/92freesU.0SotostoV,0,Vandergurg).Thehighpressuredeviationstareactivaftsat232$psia(proctdwe2DNP(02(.208

fSARTRANSIENTgIL.I.O(ccn't)IRANSIENITRIP/SAFEGUARDfUKCTIONfORRXTRIP(fSARIfI8)4.Lou.fousteangawratoruatcrlevelIKPACTOfCOtOKNIHCOEfAILURE(CHf)OKTRIPfUxctIDNLo-LoHaterlcveLreactortrtplostUHI'fIandI2ALARK/ALTERNATEIKOICAIIOHSTSTEHAVAILASLE~Ava~Puwtndlcaton~Panelrecorder~cocputerindication~vaabl'LcvcLdeviationv~controLsystoathcctonsAarea~PaverRangeovcrpoucrRodStop~Sourdofsteangeneratorandprcssurltcrsafeties.~Audibletrdlectionofcontrolrodaction.OIACRAKgCOKSECUEKCESOfUHAVAILASILITTOfDIVERSEALARHEVALUATIONOFEVENT~",Dropy)forUnit2and2175forUnit1.Thisalcfnuouiddrauoperatorsattcn'LionPrcssurltcrspraysuoutdbegintoopenat2260pslganduouldbefulLopenat2310pslg(FSAR,Table4.1.2)forUnit2andfran2110pslgto2160forUnit1.1hePORVNILIbefullopenat2355palg,sndsafetyvalvesopenat2405pslg(fSAR,Table4.1-2).Assuslngthcavailabilityofthiscontrolcquipacnt,thcprfeeryprcssureshouldnotcxce<<d2750palafnthentnlsxaareactivityfcehsckcase.1hcHTCforthiscaseicaccusedtobec5pca/'FandtheDopplercocfftclentls~saucedtobe~.6pcn/X.Korerealistic~ssoptionsforbeginningofcycleandNipareHTCa-(pcn/XandDoppler.Open/X.thesevaluesutilIncreasethctccperaturefecchsckrelativetotheanalyslctendingtoreducepoucrandconsequentlyprfnaryprcssure.Intheaexlaxsareactivityfcogwck,thereactorpaverardconsequentlyprfaaryprcssureerereducedbythernalfeedback.OHSRtanotthreatenedIntheaaxtcxaareactivityfatbackcase,AdditionalcontroLequipncntnayalsooperatetoalttgatcthlccvcnt.ThepoucratsawtchchannelforrodcontrolcanbecxpectcdtooperateonalossofLoaddrivingrodsintothecore.Thetfcwccnstantoffirststageprcssuretc40scc.Therefore,rodscanbeexpectedtoinserttntittheoperatorInitiatesprotectiveactlcn.IfTavgfatlcconstantonacHForfallshigh,rodsKillccntfnuetoinsertafterthepavernlsaatchsignethasdecayed.'thestean&aytocardcnserucutdalsoSperateKithtavgconstantorhighprovtdcdthatcondcnscrvacwaoroffsltepaverarenotlost.0rVthelossofcondcnscrvaaasaaffectsonlytheturbineandnotthereactorprotectionsystoa.ThereforetheturbinetriponccndcnservacuaKillresultIn~reactortripsincebothrccwtntawffcctedbythecocoonaxdefatlureofthencudigitalsystce15'AP

UNLII2FSAR1RANSIENIg1C.1.9TRANSIENTLossofNormalFCCdv4ICI'RIP/SAFECUARDFUNCTIONfORRXTRIP(FSARLti,IQ)1.ReactortriponLou.touuatcrlcvclInanystcamgenerator2.ReactortripcnLoutccduatcrtlousignalInanystcamgenerator(Ihlcsignalls4ctually~stc<<4floufc<<heatermismatchIncoincidenceulthlouwterlcvcL)3.TuosecordrivenauxiliaryfccduaterFcmpsIfclchare~tartcdcnt~.Lou-LoulcvclInenystcamgcncratol'.Tripof~Llmafnfccchcatcrc.AnysafetyIn)ectionsignalb.Ckvbuslossofvoltage~.NanualactuationCtufb'lnodflvcn4uxILIaryfccduatcrpufplsstartedonta.Lou-IouLevelInanytuostcamgeneratorsb.ReactorcoolantfxmpbwIxvtcrvoitsgeIHPACfOFCCNNCNNCOEFAllURE(CNF)ONTRIPfUNC'lION(carlouleveltriplostLoufc<<AIatcrfloutriplostIOAFPstar'ts(OutocotfcInitiation)onLou-LousteangeneratorlevcLOndsafetyin]ectionfromnnn-manualInitiationareLostTDAfPstart(autcmatlcInitiation)onLou-Lou"stcamgeneratorlevelIslostALARN/ALTERNATEINDICATIONSTSTOIAVAILASlEvcf4~Avaab~stcamgeneratorleveldeviationviaccntrolsystemAY4ab4~Panelndcaton~Panelrecorder~cocputcrIndicationsaneasabove(forstcamgeneratorlou.louwtcrlevel)sameas4bovasamacaabovehrAfatand~~PrcssurltcrhighlevcLdeviation~PrcssurlterlevelhighDIAGRANgFD.2101Shcct5CONSEQUENCESOfUNAVAILASILLTTOFDIVERSEALARNEVALUATIDNOFEVENTTheccxononmodefailure(CNF)ofthencudigitalcqulpmcntresultsIn4Lossofreactortripsonlou.touuatcrlevel,andonLoufccckatcrflousignal(stcamflou/fccdtloumismatchIncoincidenceulthlouuatcrLevel).goththemotordrivenOcafturbinedrivenauxiliaryfc<<heaterSystccaaarealsolostexceptInsituationdescribedbetou.ThemotordrivenauxiliaryfccduatcrtempsarenotaffectedbyCNFIftheScopestartedonCkvbuslossofvoltageorLossofallmainfceduatcrpcmps(1/Stable3.3.3,pago3/C3.19).TheturbinedrivenauxiliaryfccduaterFcmplsalsonotsftcctedbyCNFIfthepcmplsstartedonreactorcoolantFxafpbuscedcrvoltage(1/STable3.3-3,page3/C3-2g).lncaaeOftheCNFofncudigitalequipment,4'tc4algcncfatol'eveldeviation~LacaaandANsAC~lenaareavallabl~totheoperator.In~ddltlon,threealternateIndlcatlcnsaro~Lsoavailabl~.fortheLossofnormaltc<<heater/ATUStransient,ATVSNltlgatlngSystemActuationCircuitry(ANSAC)lsavailable(memodated10/13/92frccaV.0.SotostoV.0.Vandergurg).theANSAC~utccaatfcaLLylnftlatcs~turbinetripandInitfatcsAFVfloutomaintaintheRCSprcssurebclou3200pslg(ASNERollerandPrcssureVesselCodeLevelCcriterion).At100XRIPthesefceotfonaareinitiatedat30scc.oftranstcntsignaLdelaytlm4ANSAClaOVallable'toperformthisfcectlonInthceventtheCNFotthencudigitalequipmentoccurs.AnJNSAC~IvxecfatorlsinitiatedafterANSAClsactuated(Proccdwo2.ONPC02C.212DrcpTC).ThetufbfnetripIsnotaffectedbytheCNFofthencudigitalcquipmcnt(memodated9/2/92freeV.0.SotostoV.D.Vandcrgwg).Therefore,thereactoruouldbotrippedIgxnnturbinetrip.AtaLLpoucrsthestcamgcncratOrleveldeviationalarm,prcssurfzcrlevelhighLeveldeviationandprcssurlxcrlevelhighare~vallabletoalertthcoperatorto4LossofnormaLfccduatcrevent.Inaddltlcn,Ixaacrous~termsdescribingthcstatusotthecondensateandtccduatcrsystemsandpcmps,suchesccedcnscrhotuctIlevel,boostermatertrip,IS~

U<<lfI2fSARTRANSIE<<1!LL.I.9(con't)TRANSIENTTRIP/SAfEQlARDFUNCTIONfORRX'TRIP(tSARLg.t.q)IHPACTOFCCHHCHHODEfAILUREICHF)ONTRIPFUNCTIONALARH/AL'IERNATEINDICATIOHSTSTEHAVAILABLEDIACRAH0CONSEOUENCESOfUNAVAILABILIT'fOfDIVERSEALARHEVAlUATIDHOFEVENtaalnfeed<<sterFcnp,ctc.<<ILLactfvate.Relo<<LOCratedtheraalpo<<cr,ItIsexpectedthatthesealaras<<auldleadthcoperatortotripthereactora<<cattyduetoLcuetcaeRcncretorlcvctInacfordance<<lth2-ONPCD23.E-O.Ueatsonotethatthiseventprogressesrclatlvelystcutysothattheprcssurlzcrfillsfnthcorderofalrutcsnotseconds.Thecvcnt~sdcscrlbedIntheUFSARlsanalyzedustngAFUfleabasedonf1o<<rctentlon.Theoperator<<ILLbeabletoopentheflo<<rctcntlonvalvestosubstantfaltyIncreasefccdvatcrfto<<.ItisalsonotconstdercdnecessarytoassueeanAFUputpfall<<reIneddttIontoCHF.Assuslnothe~vallabllftyof~LLthreeAflffsapsalsosubstsntfattyIncreasesthcflouofAfll.forallthesereasons,<<ebelfcve'fheoutcoaeofthiscvcnt<<iltnotbestzatanttattydlffercntfrcatheanalyzedresult.

UNITI2ISARTRANSIENTgL(.1.10.1IC.I~10.2TRANSIENIExcessiveScatRcaovalductofccduatcrSystcaHalfcccotlonsfccduaterSystcaHalflectlenscausingandIncreaselnfccdustcrflowTRIP/SAfECUARDIUNCTICNfORRXTRIP(fSARLc(~IIo)I.Nighncutrcnfluxtrip2.Ovcrcccperatureil(OI~I)tripOvcrpoucrOT(OPil)Crlpd.SccaageneratoruaccrLevelhigh.highIHPACIOfCOHHONHCOEfAILURE(CHf)ONTRIPfUNCTIONNotsffastedofilreactortripLostopalreactortr'lplostLostALARH/AL'TERNAIEINDICATIONSTSIDlAVAILASLENISpwcrrangeoverpovcrrodstopac103XclaraMlderangetccpcraturcrecordersMlderangetccperacurcrecorderscacncAvslabia~Pane(ndlostfon~Panelrecorder~CocletcrIrldlcatlon'~Aveltab~LeveldeviationviacontroLcystcaDIACRAHSCCNSEOUENCESOfUNAVAILAS'ILI'I'IOfDIVERSEALARHEVALUATIONOfEVENIthereactortriponNISovcrpcwersctpolntlsnotaffectedbythecoocaonaodefailure(CHf)ofthencudig(eelcqulpacnt.IheOliTandopifreactortripserclostduetoCNIofthencudigitalequipacnt.NoaltcrnatcafarcaareavailableforthesetripfcNotfons.Noucvcr,HiderangehotandcoldlegccepcretureIndicationsareavailable.IhccasesofIouprcssureorhighprcssurefccduatcrheaterbypassvalvefullyopen'lngrcsu'ltlntransientsveryslallsrtothoseforcxccsslveIncreaseInsecondarysccaaflou.ThistransfcntlsdiscussedInsection1(.1.11.TheUnit2fccchcatcreventsarcboundedbythecxccsslveloadincrease.IheUnitIcvcntsarealsoexpectedCobebounded.~foranIncreaselnfceduaccrflouIncheabsenceotCHf,cheturbineuouldtriponhigh-hfghstcaageneratoruatcrLcvcl,uhlchweldtnturntripthcreactor.IncaseofCHf,thistripIslost(T/5Table3.3-3).Atceropwcr,steaageneratorlcvcllsunderaanuslcontrol.Therefore,theoperatoruou(dbecxpcctcdtoidentifytheeventprocptlyandtakecorrcc)fveaction.SciouP10,theNIShighfluxsctpolntac2SXRTPandtheNISfntcracdiaterangetripsarealsoavailable.AcIOOXRTP,thesceaagcncratordeviationclara(Procedure2ONP(02L.213Drop2)uouldactivate~tSXaboveprogrscacdlevelof(CX.Threestcaagenerator1cwlindicationsercavailable(acaodated10/13/92froaM.0.SotostoV.D.Vandcrgurg).Inaddition,pwcrrangecwcrpoucrrodatopclara(Procedure2-ONP(02(.210Drop19)uoucdactuateat10)Xpaver,uhfchuouldoccuracabout20scc.Intothecrsnslcnt(lCAp-12901~fig10.dlA)Mlththe5,0,dcvlatlonclaraandlevelIndicationsavailable,theoperacorshouldbeabletotriptheturbine,~Reichtnturnuoufdtripthereactor.figurc10.1dAofICAP-12901shousChat,thepwerstabltleesatspproxlaatclyIOSXnoainal(tripsctpolntel09X).froafigure10.29AofLCAP-12901,thesteaageneratordevlaclcna(alauouldaotuaceatabout0scc.Intothetransient.Id

%.~UxllI11tISLAIRAH$IEHIIt.l.Io.tleant'd}LItaxSIExtIIRIP/SASICUARDIUNCIIONICRRXIRIP(SCAR)LI.)~LO)IHPACIOfCCHHCWHCOEfAllURECCHI}ONIRIPfUXCIIDIALARNlALIESNAIEIHOICAIIONSfSIENAVAILARLEDIACRAN4coxSEOUExcfsofUMAVAILASIL111Of'IVERSEALARNEVALUAIIONOfEVENI.Accusingtheoperator'srespcnsetinetobe60scc.,theturb}nowouldtripatcpproxlactely60scc.'rthereactortriptfoclsapproaloatcty70scc.flSurcsIC.1.10A-tand14.1.10A6oftheUnittUfSARshouthattheDkSRstthisticeisapproxfaatcty$.6.flsures1C.1.10-tcrvfIC.1.10-CshouDxttatthisticetobe.l.O.lhasavaluesarewellabovetheDNSRsafetyLlaltsforbothUnits.Ihcrcfore,therewouldnotbeanyfueLdaoasc.19 UNlf'IafSARIRANSIENIgIL.I.IIIRANSIENTExcessiveloadIncreaseIncidentIRIP/SAfEGUARDFUNCIIOHfORRXTRIP(fSARIttItt)l.Ovcrpo<<erit(OPit)trip2.Overtccperatureit(Olit)trip3.PaarrangehighneutronftuxL.Lo<<prcssurIacrprcssuretripIHPACTOFCO<<NOHHCOEFAILURE(CHF)ONTRIPIUNCTIONOPitRxTripLost(<<ceodated10/13/92frosM.0.SotostoV.Vandergurg)OtalRx1rlpLost(<<ceodated10/13/92franM.6.SotostoV.Vandergurg)NotAffcctcdLos!(nanodated10/13/92fr<<sM.0.SotostoV.Vandergurg)ALARH/AL'TERNATEINDICATIONSYSTENAVAILASLEMiderangeRCStccperaturerecorder'iderangeRCStcepcreturerecorderNISpaverrangeovcrpo<<errodstopndlacnaAvalabl~PanelIndication~Panelrecorder~CocputcrIrdlcationeAlaAvalab~PrcssurtscrIo<<prcssuredeviation(turnonbackuphcatcrs)viacontrolsystcshrvendlcaIAudbl~ndicatlonofrodsationbelo<<103X.Prcssurtzerto<<leveldeviation~tarnPress<<riserIo<<level~tcrnDIAGRANgf0.2101SheetICONSEQUENCESOfUNAVAILARILITTOfDIVERSEALARHEVALUAIIOHOFEVENTIhacocooncodefailure(CHF)ofthenc<<digitalcqulpscntresultsln~lossofOPiTtrip,Otittripandlo<<prcssurltcrprcssuretrip.Thereactortriponpo<<crrangehtghneutronfluxIsnotaffectedbythcCHFofthereactorprocessequipsent.IheFSARsectionIG.I.IIhasccnsldcrcdfourcasestoanatyzcthiscvcnt(I)ReactorcontrolIncjsnwt<<lthnlnisssssoderatorreactivityfeedback;(II)ReactorcontrolInnanuat<<lthnaxlssssaodcratorreactivityfeedback,ttll)Reactorccntrotinwtocattc<<lth<<In!cessaoderatorreactivityfcccback;and(Iv)ReactorcontrolInautoeatic<<tthsaxlssssaNderatorreactivityfccchsck.Thareactortripand/orengineeredcafcguard~ctuatlcnsfgnal<<asnotgeneratedforthtsevent(fSAR,pageIL.I.IIA.3).TheFSAR~nalysisass<<assthatnonaatoperatingprocedures<<outdbefolio<<cdtoto<<crpo<<er.Inthceventthatthiseventoccursconcurrently<<Ith~CNfofthene<<digitalreactorprocessequipaent,theoperator<<outdbeexpectedtobringthereactortohotshutdo<<nconsistent<<lthT.S.3.0.320-1w

~~'~~'~~~~\'l~'

LNIII2fSARTRANSIENIgTL.T.I2(ccn'tlTRANSIENfTRIP/SAfECUAROFLNCTIOIfORRX1RIPtfSARltl,telg)INPACTOFCOHHOIHCOEFAILURE(CKF)ON'fRIPfUNCTIONALARH/ALTERNATEIIOICATIONSTSIEHAVAILABLE'IACRAHgCONSfOUENCFSOFLNAVAILASILIITOF0IVERSEALARHEVALUATIONOfEvfNIearlierLhsnnodctedduetolossofvoltageandRCPbusuodcrvoltsgc.thereare~Isoseveralalternateeterneavailabletotheoperator.ThcsteangeneratorleveldeviationatarstlsavailabletorIou-Iousteangeneratoruaterlevel.Nighpressurizerprcssuredeviationandhighpressure~Tarosarcalsoave(labia.Thercforc,thereIsnoadverseicyactoftheCHFoftheRPSonthisevent..22~

UNIII2ISARIRAHSIEHISIC.I.ISIRANSIEHIIwhine.generatorsafetyAnalysisIRIPISAFECUAROFUNCIIOHFORRXIRIP(FSARILI.I~)3)IKPACEOFCCHHQHHOOEfAILURECAlf)OH1RIPfUHCTIOHALARIMALIERHAIEINOICAIICHSTSIEHAVAILASLEOIACRAHSCCHSECUEMCESOfLNAVAILABILIIVOf0IVERSEALARHEVALUAIIOHOfEVEHIIbiscvcntlsrelatedtoncchanlealfailureofthecainturbine-Scnerators.1herelsnoreactortripassoclatcdulththisanalysis.Ifthereucrctobeafallur,oneornoreturbinetrips,uouldbeexpected.Areactortrip,toaffcctedbyCHF,uouldresulttreetheturbinetrip.Ihcre(ore,thecocooncodefailureofthesoftuarcofthencudigitalsystccthasnoIspactonthisevent.

UNITIFSARIRANSIENINIt.2.ITRANSIENTRadloIOQIcalconsciencesoffuelRandllnyAccIdentIRIP/SAfECUAROfUNCIIONfORRXTRIP(fSAR)q.g.i)IHPACTOFCCNHOINCOEFAILUREICNF)ONTRIPFUNCTIONALARM/ALTERNATEINOICATIONSTSIENAVAILABLEDIABRArlsCONSEQUENCESOFUNAVAILABILITTOFOIVERSEALARHEVALUATIONOFEVENTBoundlnsfuelconditionsareselectedforthe~nalyslaof~hypothetlcaLdroppedfuelassesblyforbothUnjt1andUnit2.TheyaredescribedInfSARSectionsUnitI,Tt.2.1andUnit2,IS.3.$-3.Theseanalysesalsoassuaethatthe~ccldentoccursIOOhoursaltershutdoun.Sincetheaccidentoccursshenthereactorls~lreadytripped,thecoseonnodetallweoftheneudigitalequipoenthasnoeffectonthisevent.

UKIII2fSARIRANSIENI4It.2.2IRAKSIEKTPostulatedRcdloaotlvcReleasesdkkctoLl~ld.ContainingTanhfailuresIRIP/SAFEGUARDfUKCIIONFORRXTRIP(fSARltl,+D.)IHPACTOfCCHHONHOOEFAILURE(CHF)OKTRIPIUNCTIONALARH/AL'IERNAIEIKDICATIONSTSTEHAVAILASI.EDIAGRAHdCOKSEOUEKCESOfUNAVAILABILITYOfDIVERSEALARHEVALUATIONOFEVENIThiseventlsnotaffectedby~reactortriporsafcswrdsactwtlon.Thcrclore,ihecoamonskodcfailureofthesoftuareotthencudlDltalcqullsacntKILLnotla@acttheresultsofthiseven't-2Sk~~k UNIT'Iand2fSARIRANSIENT~I(.2.3TRANSIENTAccidentalM4$tecasReleaseIRIP/SAfECUAROfUNCTIONfORRXTRIP(fSARtg.X3)IHPACTOfCOHHQNHCOEfAILURE(CHf)ONTRIPfUNCTIONALARH/ALTERNATEINOICATICHSTSIEHAVAILASLEOIAGRAHSCONSEOUENCESOfUNAVAILASILIITOfDIVERSEALARHEVALUATIONOfEVENIThiseventIsnotaffectedby~reactortriporsafcguardsactuation.Therefore,thecocaan~nodefailureofthesoftuareoftheneudigitalreactorprotectionsystcnHillnot(epactthcresultsofthisevent.Intheeventofavotuaecontroltank(VCT)rtpture,VCTIoulcvctardVCTlou-louLevel~Iarnsuoutdbeanticipated.Variousradiation4(arneuoutd~lsobeanticipatedInc(udinythetiltventaiar44AVCTIoulollLevelklLLresultlnarefuellnSHatersequenceuhlchHillstarttheshutdounofthereactor.Thiscccblnatlonofslamsandaut004tlcactionsuou(dleadtheoperatortoIsolateIctdounandproceedulthanorderlyshutdoun.ThisscenarioIstnaffectcdbyCHfofthencuccqulpncnt.

,Il'IiW' UNltI2ISARTRANSIENT4I(.2.(IRANSIENTStcaageneratortlbcRuptureTRIP/SAFEGUARDFUNCTIONFORRXTRIP(CESARIl(,q.t()I.Reactortriponlouprcssurlterprcssuresignal2.SafetyInjectiononprcssurltcrprcssure-louIHPACtOFCOHHONHCOEfAILURE(CHF)OITRIPFUNCfIONReactortriplost(ecaodated10/13/92freeM.O.SotostoV.D.Vsndcrgurg)SafetyInjectionlost(t/SIable3.3.3)ALARH/ALTERNATEINDICATICNSTSTEHAVAILABLEfKII~cnAvallabtPanelndlectionPanelrecordercocputcrIndicationIcAeralAvctcbLouprcssuredevation(turnonbackupheaters)viacontrolsystcaNighradiationalaralntStcaageneratorbioudounLiquidStcaajetair~Jcctorvent~tflucntradiationeonltorSteaageneratorhfghleveldeviation(InaffectedS.C.)PressurltcrLouleveldevi~sionviacontrolsysteaPrcssurlzcrLoulevel(blockpressurttcrheaters)viacontrolsystcaDIACRAH0fD.2101CONSEOUENCESOFUNAVAILASILLTTOfDIVERSEALARHEVALUA'IIONOfEVENtlhereactortripaccusedforcalculatingtheaasstransferfraathereactorcoolantsystcathroughthebrokentubeInthiseventoccurscnLoupressurltcrprcssuresignal.ThlctriplslostbecauseofcoceonNodefailure(cHF)oftheneudigitalcqulpacnt.ThcsafetyinjectionlsalsolostIfCHFofthencudigitalcqulpacntoccurred.1hestcaageneratortuberuptureeventuouldresultIn~decreasetntheprcssurltcrprcssure~ndlevel.Thcprcssurlzcrpressureloudcvlatlon~Lcraat25psigbcloucontroller'ctpolnt(noresLcontrollersctpolntls2085pslgforUnit1and2235pslgtorUnit2)(Procedures1,2-ONP(02(.100,.200Drop0)~ndthepfcssurlzcrleveldeviationalaraatSSbcloulevelprograas.(Procedures1,2-ONP402(.108,.208Drop()uoutdactwte.1hls~ccidcntcanbeIdentifiedbythcoperatorbyeitheracondenserair~Jcctorradiationalaraorastcaageneratorbloudovnradiationalara(FSAR,pageT(.2.(-SandSD.DCC-NE101).Ihestcaageneratorhighleveldeviation~laraforthefaultedstcaageneratorls~lsoavailabl~.FOLLoulngthesealsres,theoperatoractionsarespecifiedbyplantprocedure01-ONP(023.E-3.'thiscaergencyprocedureulllguidetheoperatorthrougheltlgatfonottheevent.ItIsanticipatedthatthelncrcecntaLtiesfortheoperatortorespondtothe~laresproducedbythfsevent,cvalwtetheappropriateIndications,andactuateprotectionandsafcgwrdsfactionsviLLresultlnarcletlvclysaslLtncrcaseinthetransferotfluidtroatheprfaarytothesecondarysystca.TheEROgackgroundDocuacntforE.3,SOIRIndicatesonp2dthatalthoughthelevelIntheaffectedstcaageneratoraayreachthetopofthenarrourangespan,slgnlfleantvoluaestillexistsbeforethcsteaageneratorfillsulthwter.Procedure12TNPd020LAS.122providestheguidelinesforactionstakenbasedonstcaageneratorprlaarytosecondaryleak.2t-

~~~~~t~.'I V

UNITI2fSARTRANSIENTNIL.2.5(cont'd)TRANSIENTTRIP/SAFEGUARDfUNCTIONfORRXTRIP(fSAR)g.2.g)(II)Nighsteanfloucoincident<<IthLo-LoTavg(III)LousteanprcssureIntaoloops(Unit2)NighsteanfloucoincidentulthIousteanprcssure(Unit1)IHPACTOFCO%ONHCOEfAILURE(CHF)ONTRIPFUNCTIONLostLostALARH/ALTERNATEIHDICA'IIOHSTSTEHAVAILASLE'daonsAvaablrecordersndcva~bePanelndlee'tlanCocputerIndicationSteanfiouIndicationfrotcnonCHF(Unit1)0herAaresrdlcaILouprcssurlterleveldeviationLouprcssurlterlevelSteangeneratorhighleveldeviationcentslnaentdevpoTntnonItor(ches'kedatleastonceper~lghthours)IcacondenserInletdoorsopenOIACRAHNCONSEQUENCESOfUNAVAILASILITYOFDIVERSEALARHEVALUATIONOfEVENIortakenanuatactiontotripthus.IheEaergcncyOperatingproceduresbasedcnEoergencyResponseguidelinef.-O(HP-Rcv.1$)providerecoveryguidelinestotheoperator.Slrpleextrapolationssuggestthat,ulthaddeddelaysforoperatorresponse,therctwntopouercouldbeslgnlffcantlyhigherthancalculatedforthefSAR.ThiscouldresultInfuelcladdaaage.Kouevcr,ItlsnotbelievedthatthisHillpreventtheoperatorfronbringingthealttoasafeconditionusingthcEcergencyOperatingProccdurcs.1hecnvlronaental(epactoffuelcladdosagelsdiscussedlnSectionT(.2.7..29-V\I~F'gr UNITIandUN2fSARIRANSIENIgI(.2.6'!RANSIENtRuptureofControlRodDriveItcchenisn(CRDN)Mousing(RCCAEJcctlon)TRIP/SAFECUARDfUNCTIONFORRXTRIP(fSARItl~1.C)1.Reactortriponhighneutronflux(highandlou$<<sting)2.ReactortriponhighrateofneutronfluxIncreaseIMPACTOFCONANNODEfAILURE(CNf)ONTRIPfUNCTIONNotaffectedNotsffcctcdALARH/ALTERNATEINDICATIONSTSTENAVAILASLEDIACRAN4CONSEQUENCESOFUNAVAILASILITTOfDIVERSEALARNEVALUATIONOfEVENT-eforthisevent,thetuoreactortripsoccuronNISoverpouersetpointandthehighrataofneutronfluxIncreasesctpolnt.1hesetuotripfact(onearenotprocessedbythencudlgltaLcqulpacnt.'therefore,thefSARresultsofthiseventarenotaffectedbythccosnonsxdefailureofthencudlgltalreactorprotectionsystcnKoradlologlcaldoseasscssncntMaspcrforncdgbutthcdosereceived~Isltcbolzx4ryandaLoupopulationzoneuouldbenlnlnaL(Unit2fSAR,pageI(.3.5-5).TheasscssocntprcvlouslyperforncdbyAdvancedNuclearfuels,uhlchlsIncludedlnTablesIC.3.5-6through1$.3.5-9,shoothatthedosesforthisace(dentareuelLbelouIDCfRIDOguldelInes..30-UNITIandfSARTRANSIENTNN.2.7'IRANSIfNISecondarySystccuAccidentEnvlranacntatConsequences(thisSectionolUnit2fSARreferstoSectionIC.3.5ofUnit2fSAR)TRIP/SAFECUAROfUNCTIONfORRXIRIP(fSARItf.2.t)LossofExternalElectricLoadLossofNarcclfeedsterLossofalLACPowertoPlantAuxiliariesfuelHandlingAccidentLockedRotorEtc>aGeneratortubeRuptureRuptureof~StcuaPipeRLptureofaContralRadDriveHcchanlsuAssccblySingleRCCAAssccbtyMlthdrawaiIncidentLOCAIC.I.O1C.1.9IC.1.12IC.2.1'IC.1.6.2IC.E.CN.2.51C.2.6IC.3.11(.3.2TableIListsallcvcntswithdoseconsequencesandIrdicatcswherethcprotection/salcguardsflActlone4refound~TASlfI0lS(USSICH~OFVE~NIHPACTOFCCHHONHCOEFAILURE(CHF)ONIRIPFUNCtIONScctASLEIALARH/ALTERNATEINOICATIONSYSTEHAVAILASLESeeTASLEIOIAGRAHNCCWSEOUENCESOfUNAVAILABILITTOF0IVERSEALARHEVALUAtIONOFEVENTIbissectionIncludesthediscussionofthecnvifanacntatconsequencesof~canaanaxdcfailure(CHF)ofthedigitalFoxborocqulpeentanseveralcvcnts.TableIlListsalleventsforwhichdoseconsequenceswillbefound.tASLEIIEVENTLossoffxtcrnaLFlcctrlcloadLossofNaruaiFccdwatcrLossofAllACPowertoPlantAuxiliaries,fueLNardttngAccidentLackedRotorSteanCcncra'torTubeRaptureRuptweof4steanPipeRuptureofaControlRodOrlvsHcchanisuHousingSingleRCCAAssccblyUlthdrawalIncidentLOChRAOIOLOQICAL0IS(SISSICH~OFV~ENIC.2.'7(thissection)IC.2.7(thissectlcn)'IC.2.7(thissection)IC.2.1N.1.6.21(.2.7(thisacctten)IC.2.7(thissection)IC.2.6IC.3.5N.3.5ThecvatuatlansofthcLossofExternalELcctrlcalload(IC.I.S),lossofNorualFccdwaterflow(IC.1.9),andLossofallACPowertothePlantAuxiliaries(1C.1.12)didnotIndicatethattheautcoaesoftheseeventswouldcaeproatseanyofthisfissionproductbarriers.Theseevaluationssssuacdaiarsctfrostcontrolsystcesorotherindicationstoalerttheoperatortotheneedfaraction.Itwasthenaccusedthathewouldtakeprocptactioninaccordancewithhiseacrgcncyoperatingprocedurestonasallyactuateprotectionandsafcguardsfactionsasappropriate.Sincenocaapruaiseofthefissionproductbarriersresultedfrautheevaluations,theincidentoffsitedosesdescribed~!nScctlcnIC.2.7.2reaatnvaltd.forthesteaubrcakevent,theevaluationofscctlonIC.2.5suggestsapotcntlaLhigherreturntopowerwhenadditlonaLticels~lloc4tedforoperatorfcspaAsetoswwxutty-31.

~'h UN11I<<XI2fSAR'IRANSIENTgIC.2.7(cent'd)IRANSIENTTRIP/SAFECUACDfUNCTIONfORRXTRIP(fSARtq.2.q)INPACTOfCOeCONIKNEfAILUREICHF)OHTRIPFUNCTIONALARH/ALTERNATEIIQICATIOHSYSTEIIAVAILABLEOIAGRAHgCONSEOVENCESOFUNAVAILASILIIYOf0IVERSEALARHEVALUATIOIOfEVENtInitiatesafecyInfection.Itthistcuhtocledfatlure,thcinventoryotradlolsotopcsInthereactorcoolantafccrthaeventulLIbelargerthanaccusedfntheIC.2.2anatyslc.Noucvcr,theanatyslsfor1Xfailedfueland\0gpaprlaarytoscc<<vhryleakrateshous~0.0hrsitetxxndarythyroiddostotCr<<aanda0.3rcasiteboundaryahoisbodydose.Thesevaluesarctuoordersofaagnttudebclouthc10CfR100acceptancecriteriaof300rcaand2Srcaforthyroidanduholcbodydosesrespectively.Sincethesevaluesareaverysaattfractionofthc10CfR100crtterla,Itappearsthatctadfallwculllnotcausathesecrltcrlatobe~xcccdcdAnanalyststosapportatccrnatisteangeneratortubepluggingcrttertaforUnit1hasbeensdxattccdtotheNcc.TheanalyststadcscrtbcdInUCAP-131ST.ItInchdcs~aethodologytoensurethatthcoffattadoseIsItaltedto30rcathyroidatthesiteboundary.thisanalysfs~saucesa'IXfueLdefectsand~120gpaleakduring~steanbrcak.Ateachoutageuhcnthesteangeneratorsarecxcalncdfordegradedtubes,~ccnservatlveevaluationNilIbcpcrtoracdtoensurethat,InthecvcntofasecanttnebrcaL,the120gpaleakrateIsnotcxcccdcd.If~potcntlatreturncopoucrshoutdresultInaddltlcnalcladdaaageabovethataccusedInthtscvaluatlce,the30rcacricerlcncouldbecxcccdcd.Koucvcr,30rcaIssnailcocparcdto10CFR100llalts.Nefurtherobservethat,Inaccusingculclplafailureslnsafcguarchactuation,Itisnotalsonecessarytoassuaeotherfallwcsasuett.Iticlsaccusedthatattrahinsert,theveryLargeFoassociatedutththeanalyzedreturncopoucrutilnotbepresent.Thesefn'scanbe10.ItIsicheporclonofthecoreassociatedulththispoucrpeakthatlsexpectedtosuffercl<<tdaaagcFwthcraoregIhcnrodsarcinserted,theSOHutilbedxktcdornoreaccusing~stuckroduorthgreaterthanor~peaandexcessSOH>COOpea.Icshouldalsobenoted,asdiscussedInSectionTC.2.S,thatattaropoucrorloupoucrs,rxctcarInstruacntationtripsfrcathasourcerangeandtntcracdlaterangedetectorsandthepoucrrangehighrangelousctpolntareexpectedtoprotectagatnstpaverexcursion-32-c~

~~50EJN,'~'

UNIT'Iand1CESARTRANSIENTgIC.2.7(cont'd)TRANSITNTTRIP/SAFECUAROFLXICTIONfORRXTRIP(fSARIq'2'7)I<<PACTOfCC<<NONHCOEfAILURE(CNF)ONIRIPFUNCTIONALARN/ALTERNATEINOICATIONSTSTEHAVAILABLEOIACRANgCONSEOUENCESOFUNAVAILASILLTTOfOIVERSEALARNEVALUATIONOFEVENTFlnaLLy,<<ebelievethatlnthecaseof~largesuddensteanbrcak,there<<ILLbeasafer~udlbiaIndication<<hlch<<auldproepttheoperatortocarlyaction.Ifthcbrcak<<cretodevelopgradually,thevariousclamsavailable<<illallo<<theoperatortotakeactionInatinefraaethat<<illpreventanycladdanage.Therefore,<<econcludethataCHFincocbinatlon<<lthotherfailurescouldresultlnreleaseslargerthancurrentlycalculatedbutnotincxccssof10CFR100If<<its.In~noreLikelyscenarioIn<<hfchlargecorepeakingfactorsareavoided,thccurrentcalculationsarccxpcctcdtobemaffcctcdbecauseLittleornocladdc<<age<<ouldresult.ShouldCNFoftheneudigitalcquipxcntoccurforthesteangeneratortobertptureevent,theoperatorhastotripthcreactorannuallyandIsolatethebrokensteangeneratorfolio<<lngtheguidelinesgivenfncncrgcncyoperatingprocedures.Ithasbeenassuacdinourevaluationthattheoperator'sresponsetfaelsMseconds.ThisoneninutetineIson~ddlticntothe30nlnutcsallotcdforoperator~stionafterthcaccident,ulthln<<hlchtinethepressurebct<<ccnthedefectiveetc<<ageneratorandtheprlaarysystcnIscquallzcd,andthedefectivesteangeneratorlcIsolated.Assuaing~Igpaprlsary-to-secondaryleakrateIsaxlsxxaleakrateaLLo<<edbyT.S)priortothetuberupture,the0-2hourdosesatsiteixxxvfaryare:thyroid1.7re<<I<<holebodya0.02rcn.Thesedosesareeuchlo<<crthan10CfR100guidelinesof300rcathyroidand25rcn<<holebody,respectivelyIUnlt1fSARpageTC.2.7.6).Thcdosesatthecndof31alnuteoftine<<auldbenfnloaLIylcf>>ctcdbythedelaylnsafeguardsactuationh)potheslzcdforaCNF.Therelease(orSCTRareexpectedtorcnafnouchLessthan10CFR100gufdcllnesevenshen~CNFls~sauced.33-

UN!I2CESARIRACSI(ctS1(.2.8IRANSI(NIHajorR~tufcofHainFccdvatcrPipe(fcedllnegreek)TRIP/SAFECUARDFUNCTIONfORRXIRIP(fSARLQ.2..$)~)Areactortriponanyofthefolioulngcondltla>>t1.Highpresswlterprcssure2.Overtccperaturc4T3.Lou-loustcaageneratorvatcrlcvclfnanysteangeneratorC.Safetyinjectionslgnalcfrooanyofthefolloulngt(I)TuooutofthreedlffcfcAtl~Lpfcsswcsfgnatsbctvecn4steanLIAC4Adthoreaalnlngstcaotines(ll)LoustcuaprcssurelntvooffourLfnes(lll)TuooutofthreehighcentaltvacntpfcsslJf4SignetsIHPACTOFCANONHODEfAILURE(CHF)ONTRIPfUNCTIONTriplostTriplostTripLostSignallostSignallostSignallostALARH/ALIERXATEINDICATIONSTSIEHAYAILASLEAdc4onAvaab~PancLlnslcatlon~Panelrecorder~CocputcrindicationIvereAaresAvailablecontrolsystcN~Nlprcssure(2325psla)vi~controlsystcct~Threehighprcssure~Laresat2350psla(occ>>dated10/13/92fresM.A,SotostoV.D.Vandcrgurg)MlderangeRCStccprecordersAdIcetIAvaab~PanelIndcation~Panelrecorder~CccputcrindicationIVAafll!$AV4ab'LCVCLdevi~tionviacontroLsystea(cenodated10/13/92fraaM.C.SotostoV.D.Vandcrgwg)Ad4AveableCofputcrIndicationsaoeasfordlffcrcntlalprcssuresignalIldatVaahtCocputcrIndicationAafccAvaUppercentalrfacntprcssurehighorlou(tuostare>>)DIACRAHgFD-2101SheetIf0.2102Shcct3FD2101Sheet5CONSEOUENCESOFUNAVAILASILITTOFDIVERSEALARHEVALUATIONOfEVENTThiscvcntuasonl'ycvaluatcdforUnit2.ItlsnotInthcUnitILicensebasis.AUnitIanalysisIsprovidedlntheUnitIUfsARforlnfofc>>tioncnly.theFSARanglyslsforthiseventhasbeenperforcedatfullpouerulthOASulthoutlossofoffaltepouer.Thisanalysisassuacsthat~reactortriplsinitiatedChentheLou-LousteangeneratorleveltripsctpolntIntherupturedsteangeneratorlsreached.ThcLou-LousteeageneratoruaterleveltripIslost,If~coc>>oncodefailure(cHF)ofthencudigitalcquipacntoccuf4AllthereactortrlpcandsafetyInjectionsignalsullLbetost(ColumC)cahcnCHFofneuequlpacntoccurs.goththeaeterdrivenandtwblnedrivenauxiliaryfecduatersystcc>>arealsolostexceptInsituationdescrlbcdbetou.Ihca>>tordrivenauxllfafyfccdvatcrTxnpsarenotaffectedbyCHFIfthepwpsstartedonCCVtx>>Lossofvoltageorlossof~LlNeinfccduatcrpwt>>(1/STable3.3-3,page3/A3-19).ThcturbinedrivenauxiliaryfecduatcrFxaplsalsonotaffcctcdbyCHFlftheIxupstartedonreactorcoolantpwpbustavfcrvoitage(I/Stable3.3-3,page3/L3-20).tncaseofCHFofthedigitalequipacnt,steangeneratorleveLdevlatlcnclara,prcssurlzcrprcssureloudeviationclans,prcssurltcrlouleveldeviation~lena,andprcssurltcrloulcv<<Lclaraareavailabletotheoperator.Inaddition,threealternateIndicationsofthestcaageneratoruaterlevel,prcssurlterprcssure,andprcssurfterlevelareavailabletotheoperator.Theseclara>>endIndlcatlcnsarccapes\cdtocausetheoperatortoInttfaieprotectiveandssfeguardsactionrelativelyearlyIntheevent.Usingthccoergcncyoperatingprocedures,theoperatoruoutdveryLikelyapplyauxiliaryfCCduatertOthe!ntaetSteaaDCneratOraCarllerthanthe10alnutcsaftertheInitiationassuacdintheanalysis.Inaddition,uedonotbelieveItIsnecessarytoassuaeanAFMpwpfailurelnakllttontoCHF.Invleuofthisandthefactthat~conservativelysoallfecduaterflouof.3C.1 ISARTRANSIENTgIt.t.6Ieontrd)TRANSIENITRIP/SxfECUARDFUNCTIONfORRXTRIP(FEAR1'I>9)b)AuxlIlaryteeduaterll)1uoactordrivenauxiliaryfcedvatcrpurpsuhlcharestartedont~LouIouLcvcLIAenysteangcAcratorb.TripotaILaalnfccduatcrc.AnysafetyInjectionsignald.Lkvbuslossofvoltagee.HcrxlslactuationIII)turbinedriven4uxllfaryfccdvatcrFxnplsstartedcnt4~LoulouLcvcLInanyCliosteangeneratorsb.ReactorcoolantprpbusIxdcrvoitageIHPACTOfCOONHHCOEfAILUREICHf)OH'fRIPFUNCTIONIOAfPstartsIwtoeetlcinitiation)orLou-IousteangeneratorLevelardsafetyInfectiontronnon-ACISICIInitiationarelostIDAFPstartIwtoaatlefnitiaticn)onloulousteangcAcr4'torlovElIsLostALARH/ALTERNATEINOICATIONSTSTEHAVAILABLEAdI~PressurltcrpressureLoudeviation~Presswlzcrlevelloudeviatton~PrcssurlzcrIoulevel~Prcssuritcrhighleveldcvlatlon~PrcssurltcrhighLcvctOIACRAHgCONSEOUENCESOFUNAVAILABILITTOF0IVERSEALARHEVALUATIOHOfEVENt600gpawsaccusedtobeSIBTILlcdtothaIntactsteoageneratOra,aSIbetantlattytargcr~uxlllaryfceduatcrtloucanbeexpectedtobesuppliedtotheIntactSteanBCneratora.Cnthisbasis,ltlslikelythattheeventnotonlyuoutdnotbeuorsethantheanalytcdcase,butcouldLikelybelesssevere.At~IIpoucrs,thesteangcncratorlcvcldevlatlonclaraIsavailable.Inedfltion,Auserousslamsdescribingthestatusofthecondensateandfceduatersystceixnpsandpressures,suchascondensatehotwllLevel,boosterootortrip,neinfecdvaterfxnp,etc.ulllactivate.UhcnatleasttuochannelsoffccdvaterarelostaboveAOX,thcAHSACttoerulllalsoinitiate.IfthetlcgrIsattouedtotineout,~turbinetripandwxlllaryfceductcrIxnpstartulllbeinltlatcd.TheturbinetripulllresultIn~reactortripuhlchIsIxlaffcctedbyCHF.

~**P UHIIIan@ISARTRAMSIEMT4IC.3.1TRAMSIEHTLargeBrcakLossofCoolantAccidentTRIP/SAfECUARDfuMCTIOMIORRXTRIP(fSARL4.3~I)1.Reactortriponlouprcssurlzcrpressure2.SafetyInjection(Sl)onIcwprcssurlzcrprcssure3.Containacntsprayonhi~hlprcssureIMPACTOf(XZCQNHOOEIAILURE(CHf)OHTRIPIUMCTIOMReactortriplostsafetyInjectionsignallostHlhlpressurespray~ctuatlonandESFtriplost.ALARH/ALTERMATEIMOICATIBMSTSTEHAVAILABLEndatAvatabt~PanelIndlcaton~Panelrecorder~CccputsrIndicationve4fasAvaitabPrcsswlzcrprcssureLoudeviation(turnonbackupheaters)viecontrolsystea(aeeedated10/13/92freeU.C.SotostoV.D.Vanderburg)PanelIfdlcationCoefwtcrlndlc4tloAvcAefecAvailablUppercontalffacnthl/Lopfcssufc~Lares4v41lablevia.ccntrolsystca(oecedate10/13/92froaU.G.SotostoV.O.Vanderburg).0th~AdIcatILowrcontainacntradiationMonitors(isolatedonphaseg).Upperccntalffaentarcsradiationaonltors.Postaccidenthighrangecon\clffacntafc4aceltol'4~PressurizerLevelloudeviationclara.PrcssurlacrLouLevel~lara.Lowrcontalnaentslaplcvclhigh.ConteI<<sent~Irtccper4twehighAccusulatorLevelhighorlou(onaal~fapcf'ccuaJI~ter)~AcclaulatorprcssurehighorLou(oncalaraper~ccloutator).RCShotlegpressureLOURCPSeal1diffprcssureLou(CACclarapcf'CP)~OIACRAHgI0.2101Sheet1COMSEOUEMCE'SOfUMAVAILABILIIYOfDIVERSEALARMDiverse~laraforLoprcssure(turncnbacklpheaters)viecontrolsyst<<als4v4ILabtcConsequencesofteavaltabllItyofSlsystcaisdecreasingRCSInventoryresultingInanIncreaseofpeakcladtccpcratUfc,IheonlyprotectiveflectionpriortooperatoractionMillbaccclaulatorinjection.ThcoperatorUIILbelnutdatcdby~IafasforthiseventasindicatedlsdertheotherAlafas/Ifdlcatfonsheading.Nevertheless,w~ssuaeMsecondsfortheoperatorresponsetlac.Sincethaoutcoaeofthiseventdependsonproeptsafcguardsactuation,44aodclcdUAdef'pp<<dlxXrules,~lcvatcdPCTandextensivefueldaaageMouldbeexpectedtobacalcUla'tcdby<<lAppcfdlxKaodeI.EVALUATIOHOfEVEMTThcfSARanalysisofthiseventshousthatalargebrcakLOCAUithdischargecoefficient(cd)of0.6istheaustllaltlngcasaforUnit2UlththeRHRcross-tiesopen.forUnit1~aaxSlcaselsLlaltlng.ThefSARanalysisassuaes~reactortriponloupressurizerprcssure<<dsubsequentlnltlatfonofsafetyInjection,andacclxulatorInjectionat600pale.TheLouprcssurlzcrprcssurereactortripandloupressuresafetyInjectionsignalsarelost,lfacemxeaodefailure(CHf)ofthcncudigital!nstruaentatlonsystcaoccurs.1heLargebrcakLOCAresultsInarapiddcpressurltationofthereactorcoolantsystca(RCS).TheLoupressurizerprcssuredeviationclaraMILLactuateat25pslgbelowcontrollersetpolntof2235pslg(Proccduri2.OHPC02C.200Drop0).figure1C.3.1-3aofUnit2fsARshousthatthisalaraMouldactuatelnlessthancnescc<<doftransient.ThreealternateindicationsareavailablefortheIOMpressurizerpfcssure.ThetaperccntelnacnthighprcssureaiafaMillactuateatC0.2pslg(Procedure2.0HPC02C.105Drop31).These<<dotheralarasasfrdicatcdunderOtherAlaras/indicationeffectivelyHarntheoperatorthat~aajoraccidentlsoccurring.Accusingthattheoperator'aresponsetlactoaltlgatetheeventls60scc.,thereactorMouldbetrlppqdatabout61secondsoftransient<<dsubsequentlyInitiatethesafetyInjection<<daccwulatorInjection.Inourevaluation,wassuaedthattheresultsgivenlnfSARaredelayedbyabout60secceds.frcafigure1C.3.1-15a,thepeakcladtccpcrature(PCT)of21CO'foccursatabout260accordoftransient.LBLOCAlsaverycoepllcatcdcvcnttoaodcL~Therefore,extrapolationsofPCTareveryleCcftaln,AttccptlABtoCXtfapolat4flgUrCSN.3.1-154forUnit2andIC.3.1-13IforUnitIbyInserting~delayof60accordsforoperatorresponsetlaesuggestsPCT'4ashighasthe3000'frange.HoueVCr,thercaLsituationlsInalllikelihoodsuchLesssevere.Bestcstlaatcaodcls4l'knountorccultlnslgotantf~IlyLoverPCT's.Houevcr,evenIftheApp<<dlxX~36-1

'I+u~'~0I UNITIand<SAR[RANSIENTNIL.3.I(cont'd)TRANSIENTTRIP/SAFECUARDFUNCTIONfORRXTRIP(ESARIMPACTOfCOHHOMHCOEfAILURE(CHF)OMTRIPFUNCTIONALARM/ALTERNATEIMOICATIOMSTSIEHAVAILABlERCPSealIleakoffIou(oneclaraperRCP).LoopRCPtriporLoufLou(oneclaraperRCP).icecondenserInletdoorsopenContalnaentdeupolntconltor(checkedatleastonceper~lghthours).DIACRAHSCONSEOUEMCESOfUNAVAILASILITSOFDIVERSEALARHEVALUATIONOfEVEMInodallsconservativebyassuchasEOO~FgtheacceptancecrltcrlaforIOCFRSO.AScauldctlllpossiblybeexceeded.AlthoughtheseestlnatesoftheispactofaCHFonLSLOCAIsofconcern,ltlsunlikelythatsuchaneventMilloccurcndevennoreunlikelythatsuchaneventMilloccurlncoincidenceulthCHF.AsindicatedlnSectionIL.3.3oftheUnit2UFSAR,pIL.3.3.4,pipeuhiprcstralntsandotherprotectivecessuresagainstthed)naaiceifqctsof~brcaklntheneincoolantpipingarcnotrequiredbecause"Leakbeforebreak"canbeattunedtoallouforshutdounoftheCookUnitsbeforeaneventascatastrophic~s~LSLOCAoccursThisarguaentalsogivesrcasonabl~assurancethatsuchaneventinconJtnctionulth~CHFIsextrcnelytntIkeiy.

1P0'S~ft UHI'f12fSARTRANSIENTg14.3.2IRANSIENILostolRcoc'corcooloncfroasaallruptwcdpipesorfroacrackslnLargepipeslhlchoccuotctheEacrgcncyCoreCoatingSystea(Brcakticec).OILZ)TRIP/SAFEQMROfUNCTINfORRXTRIP(CESARII.3.2)1.ReactortriponLouRCSprcssure2.SafetyInJcctlce(SI)onLouRCSprcssure(autoInltletion)IHPACTOFCaeNHCOEFAILURE(CHF)ON'IRIPFUHCTINI.LopressureRxtriplost2.SI(aucoInlcIatlcn)lost(aeao9/2/92freeu.0.SotostoVD.Vtndcrgury)ALARH/ALTERNATEINDICATIONSTSTEllAVAILABLE1.PanelIndicationZ.PanelRecorder3.CccputcrIndicationvcAloraAvolobt1.PrcttwlterpressureIoudcvletIonvl~ControlSystca(acao9/2/9ZfroaM.0.SOCosCoV.DyonderBwg)OtherA(oratndlceonLouerconcalreentradlacloncenicors(IsolatedcnFhttcg)UpperContalleencareared(sciontenlcors.'resswlccrLevelloudeviation~LaraPretsurlcerLouLevelalaraContalreent~Incaonltor(checkedatLeastoncepcr~lghthours)OIACRAHgfg2101Rcv.00sheet1COHSEQUEHCESOFUHAVAILABILITTOFDIVERSEALARMDiverseAlaraforLoPresswcviaControlSyttcaIsavailable.ConsequenceofcnavaitabilicyofSlsysccaladecrcaslnyRCSInventoryresuttlnylnanIncreateofpeakclodtccpcraturc.IheperiodofcorecncovcrycouldbeextendedlfSltystcaItnococcuoccdln~Cleslyaorecr.(fSAR14.3.2)EVALUATIOHOFEVENTlhcsaallbrcaklossofcoolantaccidentresultslndcprctturlcacicnofthereactorcoolanttyscca.TheLlaitlnybreak(asdeceralnedbythehighestcalculatedpeakfuelrodcledcccperacure)forthchighheadsafetyInfectioncross*ciavalvesopenedls4InchesIndisasterforUnlc2and3InchesIndlaaetcrforUnitI~AcoldlcgbrcakuosInitiatedatRCSprcssureof2100psiaandTavgof501.3FforUnit2.TheUnitIInitialTavguosSCTf.fortheUnit2case,theRxtripuasactuatedat1060pals(fSAR,pageIC.3.2.9).IntheUnit2anatysls,thetifccyInfection(Sl)signal~ctuacedatITISpslaulth~ZysecondtlacdelaytoacccxntfordieselgcncratorscartupandcaergencypaverbusLoadingIncaseofoffsltepouercoincidentulthanaccident.Iheaoxfcxlofuelcladflnytccpcraturcsttalncdduringthetransientuas1C26f(Units2UfsAR,pose'IC.3.212).thecantoncedefailure(cHf)rcsulcsfnLossofbothLoprcssureRxtripandautoaatlcSl.Hovcvcr,forLopretcurlterprcssur>>,threealternatelndlcacicns,andlouprcssuredeviationviaccecrolsysccaDiverseAloneareavallabl~forthcoperatortotripthcreactoraueatly.1healara,PZRPrcssureLouDeviationBackupIlcaccrsCe,ul(Lactivateat2210pslg(Z.OHPC024.200Drop0).ThecorrcsPondingsccpolntls2060pslgforUnit1.SBLOCAltsverycccpllcstedeventtocade(aTherefore,extrapolationsofpCTereveryentertain.Attccptstoextrapolateflgurcs1C.3.2-Cforunit2and1C.3.2-5forUnit1byInscrtlnganadflcfcna(60secondsofhaecuptftetoaccocncforoperatorresponsecineInlieuofautceacloactuationLedtolncrcaentalIncrctteInPCI'so(ASOOFald200'respectively.ForUnit2thereIsaaarglntoaccocedatca500'fPclIncreaseforthecross-t1~opencosa.ThaIncrcaentalPCTuouldLeadcoonly1900ofpcf.forUnit1suchaorglnappearsnottocxlct.Roucver,theunit1SBLOCAanalyticuatpcrforacdat3560INTfor15xlSfuelulththeIntentofboundingbothUnits.Ifoneattuacstherul~ofttxab,CSofforeachISofDover,therelsCSOfofPCtaorglnduecochiccontcrvaclsa.UnitI~30 ll UMIII2fSARIRAN1IENIN14.3.2leon'tl'IRANSIENIIRIP/SAFECUARDfUMCIIONFORRX!RIP(fSARI'4.gi)IHPACIOFCONNIMOEfAILURE(Cxf)CSIIRIPfUMCIIONALARM/ALIERMAIEIMDICATIOMSISIENAVAILABLEDIAGRAII0CONSEQUENCESOFUNAVAILAeltllfOFDIVERSEALARMEVALUAIIONOFEVEMI8Eoperatesat3250MufsndtherelsnoIntenttoIncreasethispaver.thusthereefpcarstobesubstantialpcfnarelnIntheAppendixKsstocAsadclforUnitIalso.liefurthernotethat,aslnthecaseofLSLOCA,theAppendixKcodellssbstantlatlyccnscrvatlve.furthcrcorc,thcanalytedevents~ssuacdthelossofatrainofSlIxnps.Suchanasslrptfon,lnaddit'lontothcsultlplefailuresotCMF,lsalso~slbstsnti~lconscrvatisn.Ihcrcforc,Itlsconcludedthat,evenufthadditionaloperatorresponsetinesrelativetoautcoatlcactuatfon,IDCFRSD.S6acceptancecrltcrfaMouldLikelybeaetfor-SSLOCA.IhehlehheadsafetyInfectioncross-tiesclosedcasesMerenotconsideredbecausetheCookUnits~reoperatedulththesecross-ticeopencxccptforshortperiodsofsurveillancetcstfnSandnalntcnance.~39-4 Ctk UNITI2fSARTRANSIENT8IC.3.CTCANslENTLongTeraCont~insentIntegrityAnalysis(SectionLC.3.Cofunit2referstoUnit1ufSARSectionIC.3.C)TRIP/SAfECUAROfUNCIIOHfORRX1RIP(fSARIIIQ.LL)1.ContslrrscntSPfayonhigrlhighprcssuresignalIHPACTOiCOHHONHCOEfAILURE(CHf)OHTRIPIUNCTIOHLostALARH/ALIERNAIEILOICATIONSTSTEHAVAILASLE<ldcsonsAv4IablePanelIndlcatonCocfuterIndicationvrsr<<aAvI4bUpperccntairyscnth/loprcssurealarasavailablevl~ccntroLsystca(cccodated10/13/92froaU.O.SotostoV.D.Vsndcr8urg)otherAlar<<sAdltiPrcssurlzcrprcssureloudcvlstlcn(turnonbacklphcatcrs)vscontrolcysts<4LovercoAt~Inscntradiationaonltora(isolatedOAphased).Upperccntal<vscntarcsradiationsonltors.Postaccidenthighrangecontalr<scntarcsaonitors.PressurizerlcveLIoudevistIonstars.Prcssurlzcr(oulevelslane.Loverconte(<<sentswplevelhigh,ccA'tal<vscnt~Irtccpereturehigh.Accus<LaterlcvclhighorLou(cnealaraper~zeus<Later).Accus<laterprcssurehighor(ou(CACClarapcr"~ccus<Ictor).RCSho'tlcgp<'cssufelouRCPScat1diffprcssurelou(cACalcfapcr'CP)~RCPSeal1leakoftloutonealsrapcrRCP).LoopRCPtriporLouflou(onealaraperRCP).IcecondenserInletdoorsOPCA,Contalnscntdc<pointacAIter(checked4tlc4stoncepcreighthews)OIACRAH8f0.2103SheetCCONSEOUENCESOfUNAVAILASILITTOfDIVERSEALARHEVALUATIONOfEVENTcnlythelongteraccntalnsentprcssureanalysislsconsideredInthiscvalwtlon.TheshortteraprcssureanalysestypicallyhavepeakspriortothcactwtlonofanyprotectiveorssfegusrdsfIs<etloneandcrethereforenotapplicabletothisevaluation.'IheasssandenergyreleaseratesforstcaslincbreaksareconsiderablylessthantheRCSdaRIIC-endedflopsuctionPIPebreaks(UnitI,FSAR,P.IC.3.C-18)andare,therefore,bauIdcd.Theccntafnc<cnttccpcratureeffectsofstcaa(fnebreaksareccnsldcrcdInSection1C.3.C/N.3.11,ElectricalEqulpscntEnvirovscntalOusllticatlonOtsssandEnergyReleaseInsideContalnscntandOutsideContalr<ocnt).ThefSARanalysisofthiseventshousthatpressurepeaksabout2hoursIdtothceventuhenthelcebed.coltsout.Thcrctorc<aslongasadditions(energyIsnotaddedtothecontalrvacnt4$4resultofcoo<sonnodefailure(CHf)otthenewdigitalInstrusentatlon,thepeakpressureshouldnotchange.InlargebreakLOCA,thereactorfsprocpt(yshutdounbyvoids.1hclongteraLOCAcoolinganalysis~tsuresthatItdoesnotbccoc<scriticalagain.ltactuationofsafegusrdsIsdelayed,PCTHillbeexpectedtoriseabovetheanalyzedvalueICItlLthecorelsquenchedatadelayedtineand,thcrctorc,additionfueldaccgeasyoccur.Houevcr<thcnctenergydeliveredtotheccntefr<scntIsnotlfpectcdby4fclatlvclysnailchangeofaalnutcortuoInthere<Cove(ofthcraatenergyfroathccoreanddeliverytotheoontainscntInthecarlyalnutcsotthcevent.Itlsconcludedthat~delayofafcuairs<teaIntheactuationotsafcguardsHillhavenofcpsctontheanalysisotrecord.fwthcrsore<sinceItI~notnecessarytoaccusethatonetrainofsafcgusrdsfallslnaddlticAtoCHf,ltIsrcascnabietobelievethattheoperatorcanaaruaLLyactivatetuofulltrainsofsafcgusrds44rlylntheevent.cnthisbasis,ItlsLikelythattheeventnotonlyuouldAotbeHorsethanthcanalyzedcase,butuouldlike'lybelesssevere.~CO~

1,'I,>i UNI'IIand2ISARIRANSIENIgIt.).ttccnt~d)IRANSIENIIRIP/SAfECUAROfWCIIONFORRXIRIP(fSARINPACIOfCONHONNODEfAILURE(CNf)ONIRIPFWCIIONALARN/ALIERNAIEINOICAIIONSZSIEHAVAILARLEDIACRANgCONSEOUENCESOfWAVAILARIL!IyOF0IVERSEALARNEVALUAIIONOfEVENIAlthoughthelapactofCNfonthecontainaentpressureanalysisdoesnotseentobesignificant,thepressureanalysislsbasedonLRLOCA.Itlstrdlketythatsuchaneventullloccurandevennoretnllketythatsuchanevent<<IlloccurlncoincidenceulthCNF.AsindicatedInSectionlt.3.3oftheUnit2UFSAR,pIS.3.3-t,ofpipeuhiprestraintsandotherprotectiveneasurcsagainstthedynaniceffectsotabreaklntheneincoolantpipingarenotrequiredbecause"leak-be(orebreak"canbe~ssuaedtoallouforshutdownoftheCookUnitsbeforeaneventascatastrophicos~LRLOCAoccurs.IbisarguaentalsogivesreasonableassurancethatsuchaneventinconjunctionulthaCNFIsextrenetymlikety.41 I'

UNITIand2ISARTRANSIENTI'IC.3.5TRANSIENTRadIologIcaIConsequencesof~LossofCoolantAccident~ndotherEventsConsiderationlnSafetyAnalysis.IRIP/SAFECUARDFUNCTIONfORRXTRIP(FSARftf~$,5)Reactortrip/safcgwrdfcnctionsarcIncludedinthecvatwtlcnoffSAREventN.3.1.INPACTOfCCHHONHCOEFAILURE(CHF)OITRIPFUNCTION'cpaatofCHFlsdiscussedlnth<<cvalwtlonofcvcntN.3.1ALARHIALTERNATEINDICATIONSYSTEHAVAILABLEDiscussedInthccvalwtionofeventIC.3.'IDIACRAHgCONSEOUENCESOfUNAVAILABILITTOFDIVERSEALARHEVALUATIOIOFEVENT"lheUnit2UfSARanalysisofRadiologicalccnsequenacsof~LOCAIncludesanalyseaofseveraleventsforradiologicalccnsequenaescfclchuereperfornedbyAdvancedNuclearFuelsCorporation.Theseeventsarercvleuedforthelcpactofccccacnnodefailure((Hf)Inothersectionsofthisevaluation.TableIIlatsalLcvcntsforuhichdose<<cnsequcnccshavebeenanatytedforCookUnitsIand2anfIndicatesInRichsectionofthisrevlcuadiscussionofthcIspactof~CHFantheradiologicalconsequencesulllbefound.SectionIC.3.5oftheUnitIUfSARaddressesonlytheEnvlraccocntatconsequencesofeLOCATABLEIDISISISSION~OF'~ENLossofExtcrnatElectricLoad'IC.2.7LossofNonaalfccchcaterTC.2.7LossofAllACPouerto.PlantAuxiliariesIC.2.7FuelHandlingAccident'IC.2.1LockedRotorIC~1.6.2SteangeneratorTubeRcpturcTC.2.7RcptureofastcaclPipe1(.2.7RuptureofaControlRad1(.2.6DriveHcchanlseNouslngSingleRCCAAsseahtyMlthdrawtN.3.5IncIdent(thissection)LOCAIC.3.5(thissection)'thasingleRCCAulthdraualcvcntuasanalytcdforUntt2forcycle6operattan.As~partofthetransitiontoUcstlnghausefuelIncycled,AEParguedandtheNRCconcurredthatthiseventuasnotInthelicensebasisforDonaldC.CookNuclearPlant,Unit2.NRCconcurrencelsdocxsaentedln~LatterfreesJosephO.ClitterofthaNRCstafftoH.P.Alcxlch,datedAugust3c1989anlInthecycl~dSER,datedAugust27,1990.Therefore,noneuanalysisofthfceventhasbeenperforead.FortheCookUnits,slngl~RCCAulthdrauaLIs~ntlclpatcdtobeanevent<<lthninerconscquenacs.The(nitsaregenerallyoperated~tfuLLpaverandbaseLoaded.Inthisaodeofoperation,'heRCCA'sarcnearlyfullyC2-tI'%I8g UNITIard2ISARIRANSIENTMI(.3.5(cent'd)TRANSIENTTRIP/SAFECUAROfUMCTIONFORRXTRIP/SAR]q.3g)IMPACTOFCONHONIKOEFAILURE(CHF)ONTRIPFUMCTIOHALARH/ALTERMATEINDICATIONSISTENAVAILABLEOIACRANgCONSEOUEMCESOfUNAVAILABILIITOf0IVERSEALARNEVALUATIONOfEVENTufthdrakA.Therefore,ulthdraualofoneRCCAafcustepshasnoIrpact.Ifaunitshouldbeoperatingat~reducedpoucr,anIncreaseInOMSRcksrgfnlsavailablc.TheUnitssreoperatedusingthcconstantaxialoffsetcontrolckcthodsothatthecontrollingbanklsscldtxadeeplyInserted.Inaddltlcn,theroddeviation~Lane,uhlchtsmaffcctcdbyCNFkuouldbeexpectedtoalerttheoperatortotakeappropriateaction.ThcevaluationsofsnailbreakLOCA(EventI(.3.2)andlargebrcakLOCA(EventT(.3.1)shouthatthelargebreakLOCAeventlsbounding,asthereuouidbesignificantcladfailure,Ifcoxsoncedefailure(CHF)ofncudigitalinstruacntatlanoccurred,slcultancouslyulthaLBLOCA.EvaluationofthelargebrcakLOCAevent(I(.3.1)shovethattheCHFofthcncudigitalapipaentcouldresultln~peakcledtccpcratureofapproxicatciy3000'fonanAppendixKbasisforbothtelts.Thictccperatureexceedstheacceptancecriterionof2200F,thugresultinginsignificantcledfailureNKIrclcascoffissicAproducts~TheUFSARanalysisofthcradiotoglcaleffectsofLOCAforbothUnitsfncludcstuocases.Inthefirstcase,Identifiedasthedesignbasis~ccldcnt.ItIsaccusedthattheentireInventoryofvolatilefissionproductcEonti~hIct-addsofallthefueLrodsIsr<<leasedduringtheticethecoreIsbeingfloodedbytheECCS.OfthegapInventory,SOXofthehalogcnsand100Xofthenoblegasesaraconsideredtobcreleasedtothecontalnacntatskosphcre.Inthesecondcase,ldcntlflcdastheSLaxlcuah)pothctlcalaccident,itIssssuscdthat50Xofthe~orI~OvenEXofhalogcnsandIOOXofthe~orIyfnnooofnoblegasesarerclcascdtothecontalrsaentauaosphcre.tabl~T(.3.5.10oftheUnit2UFSARandTable1(.3.$.2oftheUnitIUfSARdisplaythcdosesforboththedesignbasisaccidentandtheskSXicxxshypotheticalaccident.AsdiscussedInsection1(.3.1,thedelaysrclatcdtostRkstitutingoperatorrcspoAscticksforclcc'troAlcresponseslakeCOuldresultlnsubstantiallyIncreased-43~~k I~II~"~<<<<~~~I~

UNITIandfSAR'TRANSIENTdIL.3.5(cont'd)IRANSIENITRIP/SAFECUARDFUNCTIONfORRXTRIP(fSARIq.3.y)INPACTOFCCNNCNNQOEFAILURE(CNF)ONTRIPFUNCTIONALARN/ALTERNATEINOICAIIONSTSTENAVAILABLEOIACRANNCONSEOUENCESOfUNAVAILASILITTOfOIVERSEALARNEVALUATIONOfEVENTfueldosageonanAppendixKbasis.No+ever,sincetheconsequencesofthecoxlsush)pothetIcalaccidentarebasedoncoreInvencoryandsincetheyaccttheacceptancecrltcrl~of'IOCFRIOO,ueconcludethatthe~nalyslsofthissectionlstnaffcctcdbycNF.UefurthernotethattheanalystsofscccionIL.3.5,p.p.IL.3.5-3,Sand13oftheUnit1UFSAR,assuacsonlyceetrainofsafcguardsIncludingonlyoncCEO(anoperating.Althoughnocexplicitlystated,itIsclearthatccntainocntprcssurelsNaxlsLIzcdbydegradatlonofcafcguardsIncludingccntalnscntspray.ScefigureIS.3.5-3oftheUnit1UFSAR.ThesefailureacsuctpclonsInadditiontoCNFarecxccsslve.cAsIndicatedInthecvaluatlonofSectionTL.3.1,therelssusbstantlalrealaarglnIntheuseofanAppendixKnodaltoestlcotePCT.IClsalsocnllkclythat~largebrcakLOCAullloccurandItIscvcnsoretxdlkelythatcucheventullloccurIncoincidenceulthCNF.AsindicatedlnScctlonIS.3.3oftheUnit1UFSAR,p,IL.3.3-L,pipeshiprestraintsandotherprotccclveaeasurcsagainstthedynLslceffectsof~brcaklntheNeincoolantpipingarenotrcqulrcdbecause~leakbeforebrcak"canbeassuscdtoallouforshutdounoftheCookUnitsbeforeaneventascatastrofhicasaLSLOCAoccurs.Thisarguacntalsogivesreascnabl~~ssurancethatsuchaneventInccnJcnctlcnulthaCNFlsexcrccolycnilkely.~.D~'l%',J

),1Pe~0F1 UNIT1and2ISARTRANSIENT014.3.6TRANSIENTN)drogcnIntheContalnacntAfter~Loss.of-CoolantAccidentTRIP/SAFECUARDFUNCTIONfORRXTRIP(fSARILIgg)ReactortrIp/safeguardfuv:tlonsareIncludedIntheevaluationofeventIt.3.1.INPACTOFCCNNCHHCOEfAILUREICNF)ON1RIPFLWCTIOHIspactofCNFIsdiscussedIn'thccvslU4tloAofcvcAtIt.3.1.ALARH/ALTERNATEINDICATIONSYSTEHAVAILASLEDlscusscdintheevaluationofeventIL.3.1.DIACRAHgCONSEQUENCESOFUNAVAILASILITTOfDIVERSEALARNEVALUATIONOfEVENTTherearctuohydrogenanalysesforthecookplantIacoodated11/16/92fruaR.g.RcmetttoR.S.Sharoa).Thefirstanalysis,Uhichls~partoforiginaldesignbasis,lsgivenInTSARIL.3.6.thesecondanalysis,AirhdocsnotappearInthefSARIs4responsetotheThreeHllcIslandaccidentLaceabovereferencedAUSO).Inthisanalysis,averyLargeavantofhydrogenIs4SSuacdtobegcACf4tCdby4scvcrelydaeagcdcore,cqulvalcntto73Xtlrconlus-Uaterreaction.ThehydrogenIgnitcrsvereinstalledtoensurethestructuralintegrityofthecontainacntbuildingandsurvlvabllltyotcqulpocntendInstrtsacntsAccdcdtostoptheprogressionofthcaccident.TheNRCrcvicuofthisanalysislsnotyctcocpicte.IIthcreactorsafcguardsInitiationsystcnUcretofallforlargebrcakLOCA,theevaluationofSecticnTS.3.1suggestshfghPOPS.NighPCT'sUoutdbecxpectcdtoincreasethehydrogenproductlcn.KCUCVCr,theh)drogcnignltcrsareexpectedtobeturnedoneavxallyforlargebrcakLOCAconditionsthroughtheStatus1rccs.ThcEccrgcncyOperatingProceduresfR-2.1andIR.C.1UouldbeusedbytheoperatorInresponsetohighhighcontairacntprcssurecndInadequatecorecooling,respectively,toensurethattheignltorsUouldbeavailable.IhUC$UfflclcAtInstfuacntctlonandproceduralguidancelsavailabletotheoperatortoprcvcntanyadverseconsequencesofhydrogencoobustIonIntheeventofCNFofthcncudigitalequlfxacnt.InSectionIS.3.1,ItUasconclufcdthat,althoughthelcpactof4CNfonLSLOCAlsofconcern,ItlstntlkciythatsuchaneventUllloccurandevennoreLALIkctythatsuchaneventUlllocctxIncoincidenceulthCNF.AsfndlcatcdlnSectionIL.3.3oftheUnit2UfSAR,pIL.3.3.C,pipeshiprestraintsandotherprotectiveacasurcsagainstthedynantceffectsof~brcaklntheUalncoolantpipingarenotrequiredbecause"lea'kbe(orebrcak"canbe~ssuncdto~LieuforshutdounofthcCookUnitsbeforeaneventascatastrophicas~LRLOCAoccUrs,Thisartxncntalsogivesrcasonabl~assurancethatsuchaneventIncon]~tlonulthCNFlscxtrceetytntlkeiy.-AS-iI'lV1 UNITI2,'fSARIRANSIENTNI1(.3.(N.(.IITRANS(EN(ElectricalEqu(paentEnvlronsenc~IOuallIleatIOn(HaaaSAdEncfgyRclc4$csInsideCents(nsentandoutsideconte(Asent)TR(P/SAFEQlARDfUNCIIONfORRXTRIP(fSARtw.SafetyInjectioncnfo((ou(ngsigna(st(I)TuooutolthreeLouprcssurlccrprcssuresignets(II)IuooutofthreedlffcfcA'clatprcssuresignalsbecueen~stcs<<l(A4<<dthere<<siningstcaallnes(III)Nighstet<<f(ou(nCuoLinescoincidentulthIou-(ouTavgIntuoloopsorsce<<aprcssureIouIntuoLoops(CnaanalysisboundsbothUnits)(Iv)TNOoutofthreehighCents(nsentprCSSureSigna(42.Reactortrip(I)Ovcrpoverreactortrips(neutronflux)(II)OP41reactortrfp3.ReactortripInconjlx>>ttcnKithreceiptofchtsafetyInjection(SI)a(gnatA.FccduatcrisolationonanysafetyInjections(gnat5.Stcaa(lnelsotatlenl(I)N(gh.h(ghcents(lvsentPfCSSUf4IHPACIOfCOWOKHCOEFA(LURE(CNF)ONIRII'UNCflONSignetlostSignalLostSignallostsignetlostNoCsfftctedLostNOtaffCCCed(KOveVCr,Sll~uco<<at(cSlactwtlonsareLast.(here(ore,thissfgnallsfix>>t(ontton<<<<<<4(slInitiationonly)Nataf(ected(Kouevcr,~IIauto<<at(aSlactwt(onsarelost.thcrcforc,thissignalIsfix>>C(ona(on<<<<ssa(Sl(n(C(at(CAcn(y)LostALACK/ALIERKATEINDICATIONSTSTEHAVAILASLEPanellnd(cationP<<>>lrecorderCcopuccrIndicationIftAefe>>va(teb(CLoprcssuredeviation(turnonbackupheaters)vscontrolsysteaIcelonAvaablePanctlrdlcatonCoepuctrIAd(cactoAnd~lonAvelablSat>>4$fordtfcrcAcl~IprcssuresfgnatStc<<sflouIfdlcat(onfrotcnonCHFnd(aIAvablcP<<ltlIndic4c(CACotputerIld(cat(onIAAvebUpperceACSAsCACprcssurehighorlou(Cuo4(af<<s)vA~vabPoucrrangeoverpaucrradSCop(fiderangeRCStccpcraturerecordersPanelffdlcat(onCosputcftldlcatloAr4AvatMeUppercanes(ra>>ntprcssureDIACIAHgCONSEOUEKCESOFUNAVQILASIL('lTOFDIVERSEALARHEVALUAt(ONOFEVEKt'thiseventIsdividedIntoCuoparts,HassandEnergy(HCE)ReleaseIns(deconte(lvsencandHLEReleaseOutsfdeConte(le>>nc.TheContalnsentIntegrityanalysisforthedoubleended(xopsuctionRCSbreakcaseboundsChe<<alnsteaa(lnebrcakcont~insentprcssureresponse.(UCAP11902,Slpp(ec>>ntI,pS-3.(-2).RcvlcuofthepressurecurvesinIJCAP11902Supp.IsuggestschatthereIssufficient<<arginsothatthisKillre<<alnthecaseevenif$4fCgusfd$4ctU4CIOA$4fedc(eyedtF/Ico2<<inutes.Ifthisjldge<<entshautdbeopt(<<lst(candoneofthesteaa((neHIEReleaseeventsShouldcausethesanta(nsentprcssuretoexceed12pslg,ItIsnotedthattheNRCIn~letterfra<<StevenA.VergeofthcNREstafftoHr.)ohnDolanofIndianaandH(eh(SanElectricCoepsnyaccepted36ps(gasthecence(nsentultl<<atestrength.Thcrcfore,thtc!ssueutilnotbeconsideredfurther.thetceperatureprof((ca(nIICAP11902SlppIfortheHainStcaal(negreek(HSLS)Cents(lvsentIntegrityuerercv(cuedforthisevaluation.TuoLl<<(tingtransientsarediscussed.'fheyare6.6sqftdaub(ecndcdrapture(DER)at102XRTPand~0.05ftsplitbrcakat102XRTP.DothoftheseIncludesfnglcfallurts,<<@Instca<<IsolationfailurefortheDERandwxlllsryfcedvatcrEFxlprlxvxltprotectionfailureforthesplitIclsAo'CAccessarycoassuse'thesefailuresfnackl(ttontothecocnon<<odefailure(CHF)oftheneudigitallnstrusentatlon.ThctetperaturcardprcssurepeaksoftheDERoecUI'c6,(sccoAds<<d1(,01SccoAdsrespectively.'IhtslsNellbe(orethefirstsafeguafdsofsteaallneIsolationat10.5ascendshutnearandafterreactortripati6seconds.Thcrcfare,ItI~tstl<<atedthattheIcpactoftheCHFuou(dberetatlvely<<odest.thctccperatureafdprcssurepeaksofthesplitoccurlaterat50.72ascends.Ihetccperatwe<<dprcssuretrajectoriesareontheriseattheticeofthcpeaks.therisclstcf<<(natedbycents(nsencspl'4'y(CtS)4ccU4cioA,Ic4ppe4rsthatthetecperaturecouldexceedche330'Fto(6 UNITI2ISARTRANSIENTNT(.3.(cndTL.L.II(cont'd)'fRANSIENITRIP/SAfECUARDFUNCTIONFORRXIRIP(FSARL'I39+litcl'l(II)NighstcaafloucoincidentulthLo'LoTavg(III)Nighstc<<afloucoincidentuithLoustcaaprcsswe(Oneanalysisboc<<dsbothUnits)IMPACTOFCONNOMH(OEFAILURE(CNF)OHTRIPfUNCTIONLostALARM/ALTERNATEINDICATIONSTSTENAVAILABLEcxliconcAvclabclliderangeRCStccperaturerecordersPanelIAdlcatloACocputerIndicationStc4a(louIAdlcatioAfrolcnonCNF0hrAeratAdicaionLoupressurlterleveLdeviationLouprcssurltcrlcveLSteaageneratorhighlcvcldcvi4tioAIcccondenserInletdoorsOPCACcntaincentdclpotntacnltor(checkedatleastoncepcr~lghthours).DIAGRAMyCONSEOUENCESOFUNAVAILABILITTOFDIVERSEALARNEVALUATIONOfEVENflhlchcontalraentcqulpaentlsqualifiedlftheactuationotCTSucrcdetayedbyIto2alnutcs.Novever,transalttcrsaretestedto<00'Fandareencasedfnthickcastironcases.ItlsexpectedthatthethersaLLayofthesecasescanaccoccaodatconeortuoalnutcsofdelay.CISactuationlsstep13ofEaergcncyOperatingProccdwcE.OandlsexpectedsoonafterentryIntotheprocedure.MhcnCTSIsactuated,ItIsexpectedthatbothtrainsuculdbeavailableandthatthesprayMouldrapidlycondensethestcaaandcoolthecnvlronacnttotccperatweauelLbelouthatcalculatedinthcanalysisofrecorduhfchassuaesonlyonetrainofCIS.ThisIsexpectedulthapproxlaatciyoneMinutedelayrelativetothcanalysisofrecord.4IheabilityoflheoperatortorespondtoavailableaiarasardIrdlcatlonsandenterthccaergcncyoperatinyprocedureslsdiscussedInSectionI(.2.5.Itfsexpectedthatthedelaylnactuaticnofsafeguardsandprotectivefc<<otloneMouldbeIalice.Basedonthisandthediscussionabove,ItlsconcludedthataNLErclcaseoftheaaynitudeoftheLlaltlngcasesulthaCNFMouldresultfnacceptableconsequences,TheNLErclcasaoutsideofcontalrcaentIsanalyxcdtoensuresurvivabilityofInstrMaentsandcquipacntIntheaainate<<aenclosures.IhetoLloulngcvalu4'lionIsb4scdCA~a<<sodated11-20-92froaR.B.gannetttoR.S.Sharaa"CookNuclearPlant,FailureofReactorProtectionSyst<<aIcpactofsteaallneBrcakinsideandOutsideofCcntafnacntc.Inthlcevent,~largesteaafloueventuallytxlcovcrsthestcaageneratortubcsi4LLCNIAgthacxltlngatcaatobcccaeScpcrhcatedfnpassingacrossthetubes.Superheatlsthepriaaryconcerntorthiscvcnt.Prcssureaffectsareoverln~f<<cseconds,sothereactorprotectionandsafcguerdsactuationcyst<<cdoesnot'ccoeIntoplayforprcssureeffects.TheanalysisperforsxNfshousthat<forthellaltlnybreaks(1.0.1.2ftc),thcreactortripoccurredat108secondsorgreaterbasedon UNITIand2ISAR'IRANSIENIgL(.3.(handLL.L.II(cont'd)'IRANSIENITRIP/SAFECUAROFUNCTIONfORRXTRIP(fSARIN.IHPACTOfCCHHONHCOEfAILURE(CKF)ONTRIP(UNCTIONALARHJALTERNATEINDICAIIONSTSIEHAVAILAIL.EOIACRAHNCONS(<<UKNCESOFUNAVAILASILITTOFDIVERSEALARHEVALUATIONOFEVENI'JLo<<<<stcaageneratorlevel.SignificantLevelsofs<<pcrhcatoccurredainutcslater.Sincethectc<<ageneratorlevelalar<<<<suouldbereached<<suchearlierthantheconservativelycalculatedstc<<agcncrato<<'evelsctpolnt,theeffectsof<<Cainsteaalinebrcakoncqulpacnt3<<auldbeulthlntheanalyzedbourvfs.lheonlyplausiblefastactingbreakisL.Cft2,<<hlchpredicts~reactortripat8secondsoneitherLoustcaollneprcssure(Unit2)orLoustca<<CIInepressurecolncldcntulthhighstc<<af(ou(UnitI).Thereactortripat60sccgndsdelay(operatorsresponsetioe)forI.Aftx~(88sec<<<<vff)shouldstillbebo<<xvfcdbytheanalyzed1.2(t~brcakulthtripat108seconds.forthec>>strecentaassandenergyrclcascoutsideccntainocnt<<>>LysisacalculationoftheheatupofthecastIroncasesuaspcrfor<<acd.Therefore,partofthewarglnrepresentedlnthethcroeLlsgduetothacastIroncaseshasbeenused.Noucvcr,thafactthatthetransolttcrshavebeentestedto400'FdoesapplytothesetransolttcrsandprovidesassurancethatthcInstruocntsareLikelytof<<x3ctloncvcnIfthetcspcraturebrieflycxcccdcdthequa'Liflcatlontccpcrature.In~dSItlon,intheveryuorstsccnarlo,onlytheInstruacntctionassoolstcdulthrIJPturcdstcac<<Lineendor>>otherstcaxLineuouidbedac>>gcd.Thislsthecasebecausetheates<<senclosuresforstc<<aLinesoneandfourexitcental<<vacntononeatdaandthestc<<aenclosuresforLineatuohandthreeexitIEO'uayontheoppositeaideofthecental<<vacnt.Thereforetuostcaa(inca3<<1thf<<C3ctloningInstruacntationareavailabletocontroLthecysts<<a<<x3tilltcanbeplacedbnRNRlnthisHorstcasescenario.Satedonthisandthediscussionabove,ItlsccncludcdthataHLEreleaseofthes>>Snit<<xfeoftheLI<<sitingcasesulthaCHFuouldresultInacceptablecense<<ptnccs~-(8-APPENDIXB OTALCABLEEVSFSARSection1433Thissectionaddressestheme'chanicalforcesfromLOCA,DesignBasisEarthquake(DBE),andcombinedLOCA/DBE.TheUnit2FSARdocumentstheapplicabili.tyofleakbeforebreaktoCook.ThemostreceneanalysesofthistypearedescribedinWCAP11902andtheUnit2,Cycle8RTSR.Theseevenesconsiderapproximatelythefirstsecondofehetransientandarenotimpactedbyprotectionorsafeguardsactuation.FSARSection1437Thissectionaddressestheoverpressurirationofthevesselaftercooldown.TheUFSARmaterialfrom1982appearsnottoaddresstheERGbasedEOP's.ThecurrentmaeerialistheERGbackgroundmaterial.TheERGmaterialissymptombased.Actionsrequiredoftheoperatorarebasedontheresultsofananalysisbasedonasteptemperaturechangeinthecoldleg.Theinitialtemperaturewaschosentobeaconservativelyhigh550F.TheactionsarethenbasedontheobservedtemperatureduringehecourseoftheimplementaeionofeheEOP's.Theeemperatureandpressurearemoni,toredcontinuouslythroughouetheapplicationoftheEOP'sbystaeustreeF-0.4,Integrity.(IfoneexceedscurveAofthestaeuscreecriterion,asoaktimeisrequired).Seep.p.4,8ofF-0.4backgroundandp.5ofFR-P.1background.BasedonthenatureoftheERGanalysis,thiseventisnoebelievedeobeimpactedbyacommonmodefailureofthenewdigitalequipment.ThisopinionwasdiscussedwithSatyan-SharmaonHov.13,1992.Heconcurred.

FSARection438ThissectiondescribesananalysistoshowthattheRCSwillnotdepressurizebelowtheNzinjectionpointfromtheaccumulatorspriortothetimewhenS.G.coolingisnolongerneededforSBLOCA.Caseswithandwithoutoperatoractionareconsidered.Thismaterialissuperseded,oratleastmodified,inviewoftheERGbasedEOP's.Operatoractionisprovidedasrequiredforanyeventtoensureisolationoftheaccumulatorspriortotheinjectionofnitrogenintothereactorcoolantsystem.Atleastthefollowingeventswereaddressed.(ThestepnumbersareERGnumbersnotEOPnumbers).LBLOCASBLOCALossofSumpRecirculationSteamBreak/4LoopInadequateCoreCoolingDegradedCoreCoolingE-1ES-1.2ECA-1.1ECA-2.1.ECA-3.1ECA-3'FR-C.1Step28Step23Step12ResponsetoICCFR-C.2ResponsetoDCCStep12LossofRxorSecondaryStep1SCoolantPostLOCACooldownandStep23DepressurizationLossofEmergencySteps23,31CoolantRecirculationUncontrolledSteps10,38DepressurizationofallS.G.'sRecoveryModes1'tshouldbenoticedthattheissueismorebroadlyaddressedintheERG'sthanintheUFSAR.TheUFSARcaseswithnooperatorresponseareirrelevanttothisevaluationbecauseoperatorresponsemustbeachievedonthelossofnearlyallprotectionandsafeguardsactuationstoachieveasatisfactoryoutcome.TheoperatoractioncasesaresupersededbytheERGanalyses.TheERGdecisiontoisolatetheaccumulatorsisbasedonobservableparametersandisnotimpactedbyanadditionaldelayof=1minute.TheERGanalysesinsuppor~ofSBLOCA's(1"break)showthattheaccumulatorswillbeisolatedonsubcoolingnotonlowprimarypressure.Forlargerbreaks,thoseforwhichprimarypressurestabilizesatorbelo~approximately300psig,theaccumulatorsareisolatedaftertheaccumulatorshaveinjected.Seeresponsenotobtainedforstep15ofE-l.Inconclusion,theERG'saddresstheissueinSection14.3.8morecurrentlythantheFSAR.TheERG'saresymptombasedandaddressawiderangeofcontingencies.Theyarenotdirectlyaffectedbyanadditionaldelayof~1minuteinobtainingaprotectionorsafeguardsaction.Theyaredesignedinsufficientdepthtoprovideassurancethataunitcanbebroughttoasafeandstableconditionfollowinganyaccident.

FSSecton144Thissectionisageneraldescriptionoftheanalysisofhighenergylinebreaksoutsideofcontainment.Thematerialinthissectionisfurtherelaboratedinsections14.4.3through14.4.11.Ahighenergylineisalinewithnormalservicetemperatureabove200F,anormaloperatingpressureabove275psig,andanominaldiametergreaterthan1inch.Fivesystemsweredeterminedtoincludehighenergylines.Theyare:1)MainSteam2)Feedwater3)CVCS4)S.G.Blowdown5)SteamtoTDAFPBreaksinhighenergylineswereexaminedfor:1)PipeWhip2)JetImpingement3)JetErosionofConcrete4)CompartmentPressure-LoadingStress5)StructuralResistancetoLoading6)EquipmentE.Q.Item3wasdeterminednottobeaproblemingeneral.Breakswereanalyzedforcriteria1,2,4,5,and6.Crackswereanalyzedfor1,2,and6.AnESWfloodincidentisalsoincludedinthissection.Noimpactofthepostulatedfreeze"oftheFoxborodigitalsoftwareontheseanalysesorthoseofSections14.4.3through14.4.11wasidentifiqdexceptasindicatedinthefollowingcomments.FSSection14;43Thissectionaddresses,inageneralway,theabilitytobringthereactortoasafeconditionfollowingtheeventsevaluatedforhighenergylinebreaks.Asindicatedonp14.4.3-1oftheUnit1UFSAR,theyaregeneralbecause"itisdeemedappropriatetoallowforassessmentoftheincidentpriortoiultimatelybringingthereactortocoldshutdown".Mainsteamlinebreaks'(MSLB)arediscussedinsection14.2.5fromthepointofviewofcoreresponseandinsection14.2.7fromthepointofviewofoffsitedoseeffects.MSLBoutsideofcontainmentfromthepointofviewofequipmentqualification(EQ)isaddressedinUFSARsections14.4.6,14.4.10,and14.4.11.Theevaluationoftheimpactofcommonmodefailure(CMF)ofthenewdigitalequipmentonMSLBEQhasbeenplacedinsection14.4.11.

Feedwaterlinebreakwasanalyzedfromthecoreresponsepointofviewinsection14.2.8.TheNKreleasefromafeedlinebreakisbelievedtobesimilarwithorwithoutCMF.Unit2UFSARFigure14.2.8-4suggeststhattheaffectedS.G.blowdownforafeedwaterlinebreaktakes=200sec.Bythistime,itisbelievedthattheoperatorwillbewellintohisimmediateactions.Steamlineisolationisstep12ofE-0.Theoperatorwillcertainlybewellintoimmediateactions,ifthereisaturbinetrip.Ifthereisnoturbinetrip,theturbineisasignificantcompetitorforsteamfromtheintactsteamgenerators.FailureofasteamgeneratorstopvalvewouldalsonotbeassumedinadditiontothemultiplefailuresoftheCMF.Therefore,blowdownofthemainsteamlineswouldnotoccuraftermanualinitiationofmainsteamlineisolation.CVCSlinebreakassumesoperatoraction.Thealarmsassumedcontinuetobeavailablefromthecontrolsystem,.andtherefore,arenotaffected.Thisdescriptionisnotaffected.BoththeturbinedrivenauxiliaryfeedwaterpumpandsteamgeneratorblowdownlineruptureareconsideredtobesmallsteamlinerupturesaccordingtotheUFSAR.Therefore,theireffectswouldbeexpectedtobeboundedbyMSLBandfeedwaterlinebreak.Noimpactofthepostulated"freeze"oftheFoxborodigitalsoftwareoneventsotherthanMSLBwasidentified.SinceMSLBwillbediscussedundersection14.4.11,thesectionisclassifiedasNA.PSARSecton444Thissectionprovidesthequantitativeresultsofstresscalculationsforhighenergylinebreaks.SeethediscussionofSection14.4.2above.FSARSection14.4.5Thissectionprovidessomefurtherelaborationonthepipewhipanalysis.SeethediscussionofSection14.4.'2.Notethatthisanalysisusesthemaximumoperatingpressureforconservatism.FSARSecton14.46thepressure~analysisoutsideThepressurepeaksappearintheanincreaseintimeuntilreactorthissectionisclassifiedasnotThissectionprovidesfurtherdetailsoncontainmentduetoahighenergylinebreak.firstsecondortwoandcannotbeimpactedbytrip.Therefore,thepressurepeakaspectofapplicable.Temperaturepeaksare=5minutesintotheeventpresumablyduetoheatsinks.TheimpactofsteamgeneratorsuperheatfromaMSLBoutsidecontainmentonequipmentqualificationisaddressedinthissection.Withoutautomaticsafeguardsfunctions,theenvironmentalconditionscouldpotentiallybeworse.

TheequipmentqualificationaspectofthissectioniscombinedwithSection14.4.11whereevent+whichimpactenvironmentalconditionsandwhicharemi~iga~edbyprotectionandsafeguardsactuationsarediscussed.Theseeventsaremassandenergyreleaseinsideandoutsidecontainment.FSARSection1447Thissectionprovidessomefurtherelaborationonthejetimpingementanalysis.Italsousesthemaximumoperatingpressure.SeethediscussionofSection14.4.2.FSecton1448Thissectiondescribestheimpactofhighenergylinebreaksonthecontainmentexterior.SeethediscussionofSection14.4.2.~~-FSARSection1449Thissectiondescribesthemodificationsrequiredbythehighenergylineanalysis.ItwillnotbeaffectedbytheFoxboro"freeze".FARSection440Thissectiondescribesthestepstakento'nsurethatthe'dverseenvironmentalconditionsthatresultfromHELBdonotinhibittheabilitytobringthereactortocoldshutdown.Withoutautomaticsafeguardfunctions,theemrironmentalconditionscouldpotentiallybeworse.ThissectioniscombinedwithSection14.4.11'hereeventswhichimpactenvironmentalconditionsandwhicharemitigatedbyprotectionandsafeguardsactuationsarediscussed.Theseeventsaremassandenergyreleaseinsideandoutsidecontainment.