ML17254B036

From kanterella
Revision as of 14:32, 18 May 2018 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
Jump to navigation Jump to search
NUREG-0737,Suppl 1,SPDS Safety Analysis.
ML17254B036
Person / Time
Site: Ginna Constellation icon.png
Issue date: 11/30/1984
From:
ROCHESTER GAS & ELECTRIC CORP.
To:
Shared Package
ML17254B035 List:
References
RTR-NUREG-0737, RTR-NUREG-737 NUDOCS 8412050053
Download: ML17254B036 (38)


Text

NUREG-0737Supplement1SafetyParameterDisplaySystemSafetyAnalysisRochesterGas&ElectricCorporationR.E.GinnaNuclearPowerPlantDocket50-244@~801iSoBgg2O50OOGOQO2popAgoGKPggFNovember1984 J11IICt SAFETYPARAMETERDISPLAYSYSTEMIntroductionNUREG-0696statesthatthepurposeofthesafetyparameterdisplaysystem(SPDS)istoassist,controlroompersonnelinevaluatingthesafetystatusoftheplant,.TheSPDSistoprovideacontinuousindicationofplantparametersorderivedvariablesrepresentativeofthesafetystatusoftheplant.TheprimaryfunctionoftheSPDSistoaidtheoperatorintherapiddetectionofabnormaloperatingconditions.TheSPDSdisplaystotheoperatoraminimumsetofparametersfromwhichtheplantsafetystatuscanbeassessed.Theselectionofparametersandthedisplayformatenhancetheoperator'scapability'oassessplantstatusinatimelymannerwithoutsurveyingtheentirecontrolroom.TheSPDSdisplaycomplimentstheoperator'snormalsurveyofconventionalcontrolroomindicators.Thedisplaywillberesponsivetotransientandaccidentsequencesandwz,llbesufficientto'indicate"thestatusofcriticalplantparameters.1AsrequiredbyNUREG-0737,Supplement1,theminimuminformationtobeprovidedshallbesufficient.toprovideinformationtoplant"operatorsabout:(i)Reactivitycontrol(ii)Reactorcorecoolingandheatremovalfromtheprimarysystem(iii)Reactorcoolantsystemintegrity(iv)Radioactivitycontrol(v)Containment.conditionsThespecificparameterstobedisplayedaretobedeterminedbythelicensee.Followingselectionofthespecificparameterslicenseesshallprepareawrittensafetyanalysisdescribingthebasisonwhichtheselectedparametersaresufficienttoassessthesafetystatusofeachid'entifiedfunctionforawiderangeofevents,whichincludesymptomsofsevereaccidents.Thepurposeofthisreportistofulfilltherequirementforawrittensafetyanalysisforthebasisofselectionofparameters.

klf~vQ~VI~a

~j~/~GinnaSPDSDevelomentTheGinnaSPDSisasubsystemofthelargerSafetyAssessmentSystem(SAS).TheSASisdesignedtoprovideeasilyunderstandableinformationfromacomputer-baseddataacquisitionsystemusinghighresolutionmultiple-colorCRTgraphicaldisplays.MajorfeaturesofSASwillbe:0o.Top-leveldisplaysofkeyparametersusedtoassessthesafetystatusoftheplant(SPDS);oTrendgraphsofgroupsofrelatedparameters;oAnAccidentIdentificationandDisplaySystem(AIDS)thatgraphicallyinformstheoperatoroftherelativelikelihoodthateachofthreemajorPWRaccidentsmaybeoccurring:LossofCoolant.Accident(LOCA),SteamGeneratorTubeRupture(SGTR)andLossofSecondaryCoolant(LOSC).ACriticalSafetyFunction(CSFM)Monitorwhichdefinesconditionstoassessthestatusofsixcriticalsafetyfunctions;andoAmessageareawhichindicatestheplantoperatingmodeselectei,date,time,andthecurrentvalueofsomekeyparameters,andnotifiestheoperatorofcertainoff-normalconditions.'\TwoCRTs,aprimary<<and'secondary,"presentmultipledisplaystotheoperatorusingahierarchical'i'splayconcept."The'rimaryCRTisnormallydedicatedtoa"topleve'1"displayandfulfillstheSPDSrequirement.ThepurposeofthesecondaryCRT,.istoprovidemoredetailedinformation:"bydisplayingthereadinessand'performanceofselectedplantsystems,criticalsafetyfunctions"andchannelmalfunctions.ArelativelylargedatabaseisusedtosupporttheoperationoftheSAS.Fromthisdatabaseareducedsetofparametersareselectedforcontinuousdisplaytotheoperatorduringplantoperationtogiveanoverviewofplantsafetystatus.Some"conditioning"ofdataisperformedusingSASalgorithmstoreducethenumberofdisplaysthatarerequiredwithout,losingfunctionsthatmayprovidekeyindicationofsafetystatus.Figure1showsthetoplevelSAS,orSPDSdisplay.Theselectionof"parametersfordisplayonSPDSisbasedupontheWestinghouseOwnersGroup(WOG)EmergencyResponseGuidelines(ERGs).Adetailedequipment,specificationdevelopedbyagroupofutilitiesincludingRGEandwhichdescribes,amongotherthings,thefunctionalandtechnicalrequirementsforSAShasbeensubmitted.ThisadditionalinformationwassubmittedwithaletterfromJohnE.MaiertoDennisM.CrutchfielddatedJune8,1981.

L.'ij1ipJ4l"'q,Jl' WestinhouseOwnersGrouEmerencResonseGuidelinesTheWestinghouseOwnersGrouphasanalyzedabroadspectrumofeventsequencestodeterminesignificant'iskcontributors.EmergencyResponseGuidelineswerethendevelopedtoprovidefullproceduralcoverageforatleastallthosesequenceswithcolinedfunctionalfailureprobabilitiesequaltoorgreaterthan10perreactoryear(i;ncludingtheinitiatingevent).JustificationfortheselectionofthiscutoffvaluewasarelativeriskevaluationwhichwasprovidedtotheNRCwithaWOGletterOG-61fromR.W.JurgensentoStephenH.HanauerdatedJuly7,1981.TheERGsprovideprioritizedoperatorguidanceforrecoveringtheplantfromanemergencytransientwhileat.thesametimeensuringthattheplantsafetystateisexplicitlymonitoredandmaintainedduringrecovery.TheERGsarecomposedoftwodistincttypesofprocedures:oOptimalRecoveryGuidelines,andoCriticalSafetyFunctionRestorationGuidelinesandStatusTreesTheOptimalRecoveryGuidelinesprovideguidancefortheoperatortorecovertheplantfromnominaldesignbasisfaultedandupsetconditions.TheCriticalSafetyFunctionrestorationGuidelines,whenusedwiththeaccompanyingCriticalSafetyFunctionStatusTrees,provideasystematicmeansforaddressinganychallengetoplant.CriticalSafetyFunctions,whichisentirelyin'dependentofinitiatingevent.Theavailabilityofbothtypesofproceduralguidancepermitstheoperatortorespondtovirtuallyanyplantupsetcondition,includingmultiplefailureconditions,and'failuressubsequenttoinitialdiagnosiswhichcouldrequireadditionaloperatoractionbeyondthatspecifiedintheOptimalRecoveryGuidelinesfortheeventswhichtheycover.Duringrecoveryfromanevent,theoperatorcontinuallymonitorstheCriticalSafetyFunctionstoassurecontinued'plantsafety.IfachallengetoaCriticalSafetyFunctionoccurs,theoperatorisdirectedbyuseofStatusTreestospecificFunctionRestorationProcedures'esignedtorestorethechallengedsafetyfunction(s)tosafeconditions.UponrestorationofallCriticalSafetyFunctions,appropriateoptimalrecoveryactionsarecontinued.Thestatustreesprovidetheoperatorwithasystematcandexplicitmeansfordeterminingthesafetystatusoftheplantforanyemergencysituation.Useofthestatustreesprovidesindependentverification"oftheattainmentandmaintenanceof'safeplantconditionsthroughouttherecovery.ConcurrentuseofstatustreesandtheappropriateOptimalRecoveryGuidelinesalsoprovidesamethodforidentifyingthemodeofCriticalSafetyFunctus:onchallengeindependentofspecificeventdiagnosesandnominalprescribedrecoveryactions.Therefore,useofthestatustreesinconjunctionwiththeOptimalRecoveryGuidelinesprovidesasystematicwayofidentifyingandcopingwithsubsequent/multiplefailuresituations.

'I CriticalSafetyFunctionRestorationGuidelinesdescribeoperatoractionswhichcouldbeeffectiveinrespondingtochallengestotheplantcriticalsafetyfunctions.TheseCriticalSafetyFunctionRestorationGuidelinesprovideguidanceformaintainingtheplantinasafestatewithout.regardtoinitiatingeventorcomb'inationsofsubsequentorconsequentialfailures'aftereventdiagnosis.TheCriticalSafetyFunctionRestorationGuidelinesareidentifiedbynotingthespecificmodeoffailureindicatedattheterminusofeachCriticalSafetyFunctionStatusTree.Theseterminalfailuremodesareaddressedthroughthecreationofappropriatefunctionrestorationguidelineswhichcollect,ineachguidelinefortheoperator'suse,thepotentialmethodsforresponsetoidentifiedfailuremodes.CriticalSafetyFunctionRestorationGuidelineshavebeendevelopedbaseduponthe'ollowingCriticalSafetyFunctions.MaintenanceofSUBCRITICALITYMaintenanceofCORECOOLINGMaintenanceofaHEATSINKMaintenanceofReactorCoolantSystemINTEGRITYMaintenanceofCONTAINMENTIntegrityControlofReactorCoolantINVENTORYTheconceptofCriticalSafetyFunctionRestorationisbasedonthepremisethatradiationreleasetotheenvironment.canbeminimizedifthebarrierstoradiationreleaseareprotected.RestorationimpliesreturningtheplantstatetoasafestatusinwhichtheCriticalSafetyFunctionsaresatisfied.GuidancefordiagnosisoftheplantsafetystateindependentofeventsequenceiscontainedintheCritical'afetyFunctionStatusTrees.AStatusTreeexistsforeachofthesixCriticalSafetyFunctionswhich,asaset,definetheplantsafetystate.Theplantparametersthatdefinethestateof'achCriti'calSafetyFunctionareidentifiedontheassociatedStatusTree..Typically,onlyafewparametersarerequiredtoidentifythestatusofaCriticalSafetyFunction.TheSubcriticalityStatusTreeisreproducedinFigure2asanexampleofthesest'atustrees.KePlant,InstrumentationFollowingdevelopmentoftheERGs,instrumentationwasidentifiedth'atmonitorstheplantvariableswhichprovidetheprimaryinformationrequiredtopermittheControl'RoomOperating'Staffto:a)PerformtheeventdiagnosisspecifiedintheERG's.

014 b)Takethespecifiedpreplannedmanuallycontrolledactions,forwhichnoautomaticcontrolisprovided,thatarerequiredforsafetysystemstoaccomplishtheirsafetyfunctionformitigationofthedesignbaseaccident;andc)Reachandmaintainasafeshutdowncondition.Theinstrumentationwasidentifiedwhichmonitoredthoseplantvariablesthatprovideinformationtoassesstheprocessofaccomplishingormaintainingtheplantcriticalsafetyfunctions,i.e.,reactivitycontrol,reactorcorecooling,heatsinkmaintenance,reactorcoolantsystemintegrity,reactorcontainmentintegrityandreactorcoolantsystemi.nventorycontrol.AlistingofthisinstrumentationisgiveninTable1.SPDSParametersThelistofinstrumentationdevelopedfromtheERGsincludesalltheparametersthatarenecessarytogiveearlyindicationsofpotentiallyadversesafetyconditionsandincludesparametersnecessarytomonitorproperfunctioningofmitigatingequipmentaftertheresponsetoatransienthasbeeniniti.atedorto"assistinlongtermoperatorresponse."Thelattergroup'includesauxiliaryfeedwaterflow,refuelingwaterstoragetanklevel'andcondensatestoragetanklevel.Thus,therelativelysmalllistofinstrumentationnecessarytoimplementtheERGscanbefurtherlimited.Theremainingessentialinstrumentsthatare"earlyindicators"arecandidatesforinclusionontheSPDS.Allareeitherdirectlydisplayed,arecombined(grouped)throughanalgorithmtogiv'eacommonindicationforsimi.larparametersorarenarrowrangeinstrumentsusedtoinitiateautomaticactionandwhichcanbemonitoredbyanotherwiderangeinstrument,.Anexampleofgroupingisthecombo.nationofcontainmentpressureandcontainmentwaterleveltoproduceabistableindicationofcontainmentenvironment.Anexampleofanarrowrangeinstrumentwhichinitiatesactionbutwhi'chcanbemonitored"byanotherinstrumentispressurizerpressure(1700-2500psig)whichisoverlappedbyRCSpressure(0-3000psig).AdiscussionofeachoftheERGrequiredinstrumentsshownonTable1andtheGinnaSPDSparametersisgivenbelow.SpecificanalogpointparametersusedtogeneratetheSPDSdisplayaregiven"onTable2.BecausetheSPDSisnot.yetinstal1ed,someofthepointparameterIDsmaychangealthough"thefunctionbeingmonO=oredwillberetainedonthedisplay.Figure1isanillustrationoftheSPDSdisplay.TheAIDSsection"givestheoperatoragraphicalindicationoftherelativelikelihoodofthreemajoracct.dents.AmessageareaisreservedtopresentinformationonseveralparametersasshownonTable2.Theremainingportionsofthedisplayareagiveanalogand/ordigitalindicationsofselectedparameters,orforsecondaryradiationandcontainment,environment,presentbistablealarmindicators.

RCSPressureERGAssumptionThereactorcoolantsystem(RCS)isassumedtohaveatleasttwowiderangepressuretransmittersconnectedtotheresidualheatremoval(RHR)hotlegsuctionlines.Therangeofthesechannelsistypically0t'o3000psig.Thisinstrumentationisassumedtobe"subjecttoadversecontainmentconditions.GinnaInstrumentThereactorcoolantsystemhastwowiderangepressuretransmitters,PT420andPT420A.PT420isconnectedtotheRHRhotlegsuctionandPT420Aisconnectedtoanuppertaponthepressurizer.BothofthesewiderangepressureindicationsareincludedintheSPDSshownonTable2.TheyareaveragedtoprovidetheSPDSRCSpressureindicationshownonFigure1.RCSHotandColdLeTemeraturesERGAssumptionEachRCShotandcoldlegisassumedtohaveadeepwellmountedRTDtomonitorwiderangeRCStemperature.Therangeofthesechannelsistypically0to700'F.TrendingoftemperaturesisnecessaryformonitoringRCSnaturalcirculate.onandcooldownrates.GinnaInstrumentationHotlegRTDs409A-1and'410A-1andcoldle'gRTDs409B-1and410B-1willbedirectimmersiontypeRTDsandwillprovideinputtotheSPDSasshownonTable2".TherangeoftheRTDsis0to700F.ReactorVesselLevelERGAssumptionForthoseplantsthathaveaReactorVesselLiquidInventorySystem(RVLIS),theinstrumentisusedtomeasurevessellevel.TheRVLISsystemisassumedtohavedesignfeaturestypicalofaWestinghouse-designedRVLIS.AWestinghousedesignedsystem.includesthreerangestoprovideindicationfromthebottomtothetopofthevesselwithanycombinationofreactorcoolantpumpsoperating.ForthoseplantswithoutaRVLIS,ERGshavebeenwrittentoprovideappropriateresponseswithoutlevelindication.InsomecasesalternativeindicationsareusedtodirectanappropriateresponseandinothercasesamoreconservativeactionistakenbydeletingtheRVLISindicationaltogether.

III8 GinnaInstrumentationAreactorvessellevelinstrumentdoesnotcurrentlyexistatGinna,however,RGEhascommittedtoinstalladifferentialpressuretypeinstrumentbytheendofthe1986refuelingoutage.Theinstrumentwillprovideanindicationfromthebottomtothetopof'thevessel.'Adescription'ftheproposedinstrumentwasprovidedinanRGEletterdatedAugust7,1984.Thisinstrument"isnotcurrentlyscheduledtobeabidedtotheSPDS.RochesterGasandElectrichaspreviouslystateditspositioninlettersdatedJuly2,1980,December15,1'980,December30,1980,January19,1982,andAugust7,1984thataninstrumenttoaccuratelymeasurereactorvesselwaterlevelcouldserveausefulpurpose,butthatsuchadeviceisnotnecessaryforproperresponsetoemergencysituations.RG&Ealsoisno'tconvincedthatreactorvesselwaterlevel(inventorytrend)instrumentsprovideaclear,unambiguousindicationofinadequatecorecooling,althoughtheymayindicatecoolantvoidformationinthelimitedspanabovethevesselpipingpenetrations.OneconsultantwithsignificantexperienceanddirectparticipationwiththeWestinghouseOwnersGroupstudiedinadequatecorecoolingsituationsforRGE(seeRG&EletterdatedNovember29,1983)andconcludedthat"existingplantinstrumentationandproceduresareadequatetoadviseoperatorsofhowtorespondtovoidsinthereactorvesselheador'distributedthroughthereactorcoolantsystem".Hisfindingconfirmsthat,theERGsdevelopedforplantswithoutaRVLISareviable.Themajorreasonthat,RGEobjectedtoinstallingandusingtheRVZISisthat,severalinstanceshavebeenidentified(seetheWestinghouseERGbackgrounddocuments)whentheRVZISmaygiveanambiguousindication.Theseinclude:1)abreakintheupperhead,2)periodsofreactorvesselupperplenuminjection,3)periodsofaccumulatorinjectionintoahighlyvoideddowncomer,4)periodswhenthereactorvesselupperhead=behaveslikeapressurizer,and5)periodsofvoidredistributionintheRCS.SeveraladditionalinstanceshavebeenidentifiedwhichmayresultinbiasedRVLISindications.Theseinclude:1)reverseflowsinthereactorvessel,and2)coreblockage.Atothertimeswhentheoperatorcandeterminethattheseconditionsdonotexisttheinstrument,shouldgivereasonableresults.TherangeofbreaksizesoverwhichtheRVZISwillprovideusefulinformationisfromsmallleakstobreaksinthe'limitingsmallbreakrange.Thesystemconditionswillchangeataslow"enoughrateforbreaksinthisrangesothat.theRVZISindicationwillaccuratelytrendwithRCSinventory.Forlargerbreaks,theresponseoftheRVZISmaybeerratic,duetorapidpressurechangesinthevesselintheearlyportionoftheb1owdown.TheRVLISreading,however,forlargebreaks,willbeusefulformonitoringaccidentrecovery"whenothercorroborativeindicationscanalsobeobserved".

TABIE2SPDSPARAMETERSAngloParametersPointIDsFormofReactorCoolant,LoopPressurePressurizerI,evelCoreExitThermocouplesContainmentPressureContainmentSumpALevelContainmentRadiationAirEjectorRadiationSteamGeneratorBlowdownRadiationSteamGeneratorASteamFlowSteamGeneratorBSteamFlowSteamGeneratorALevelSteamGeneratorBLevelSteamGeneratorAPressureSteamGeneratorBPressureSteamGeneratorAFeedFlowSteamGeneratorBFeedFlowPowerRangePowerLevelHotLegTemperatureLoopAHotLegTemperatureLoopBColdLegTemperatureLoopAColdLegTemperatureLoopBSourceRangeDetectorIntermediateRangePowerLevelDiitalParametersP0420,P0420AL04267L0427,L0428TCA07-TCL10(TotalP0945,P0947,P0949L2039,L2044R02R15R19F0464,F0465F0474,F0475I,0460L0470P0468,P0469,P0482P0478;P0479,P0483F0466,F0467F0476;F0477N41,N42,N43,N44T0409A-1T0410A-1T0409B-1T0410B-1N31,N32N35,N36PointIDsof39TCs)AAAATCABABDSBSBAAIIAAAAMIIIIMMPressurizerPORVPositionReactorTripSignalMainSteamkineIsolationSignalSafetyInjectionActuationSignalFeedwaterIsolationActuation'SignalCirculatingWaterPumpStatusReactorCoolantPumpStatusSourceRangeHighVoltageStatusV0430,V0431RXTAl,RXTBlMSISIGA,MSISIGBSISIGA,SISIGBFWSIGA,FWSIGB,'KR051,BKR052RXT16,RXT17BLOCK1,BLOCK2tkRMBMBMB"MB:MB'BMBNotesATheseparametersareaveragedtogiveasingleindication.AATheseparametersareaveragedtogiveasingleindicationandarealsousedasinputtothesubcoolingindicators.ABTheseparametersareaveragedandusedasoneinputtothecontainmentenvironmentbistableindicator.DThisparameterisadirectinput.tothecontainmentenvironmentbistableindicator.SBTheseparametersareusedasinputstoasinglebistableindicator.IThisparameterfeedsananalogindicator.MTheseparametersareaveragedtoprintamessageinthemessageblock.MBThesebistableindicatorsproducemessagesinthemessageblock.ATCCoreexitthermocouplesareaveragedfordisplayontheSPDSandprovideinputtothesubcoolingcalculation.Upperheadthermocouplesareaveragedandprovideinputtothetopofheadsubcoolingcalculation.18

'Ihfg1lfI'II, Thus,becauseERGshavebeenwrittensothatthestatusofalltheCriticalSafetyFunctionscanbeassessedandalloperatoractionsnecessarytodx.agnoseeventsandbringtheplanttoasafeshutdownconditioncanbeperformedwithoutRVKISindication,thevessellevelparameterneednotbeaddedtotheSPDSindication.SteamGeneratorNarrowRaneWaterLevelERGAssumptionEachsteamgeneratorisassumedtohaveatleastthreechannelsofanarrowrangedeltaPmeasurementsystem.Therangeofthenarrowrangemeasurementchannelsis0to100percentofspan.ThenarrowrangeinstrumentsarehotcalibratedandprovidelevelindicationsinthesteamgeneratorsbetweentheU.-tubsandthesecondarymoistureseparatois.GinnaInstrumentationEachsteamgeneratorhasthreenarrowrangedeltaPmeasurementsystems.Therangeofthenarrowrangemeasurementchannelsis0to100percentofspan.ThenarrowrangeinstrumentsarehotcalibratedandprovidelevelindicationsinthesteamgeneratorsbetweentheU-tubesandthesecondarymoistureseparators.S/GAlevelisprovidedbyLT461,462,463S/GBlevelisprovidedbyLT471,472,473.Becausethewiderangesteamgeneratorlevelindicationincludestherangeofthenarrowrangeinstruments,widerangelevelisadequateforSPDSdisplayandearlyindicationofpotentiallyadversesafetyconditions.SteamGeneratorWideRaneWaterLevelERGAssumptionEachsteamgeneratorisassumedtohaveatleastonewiderangedeltaPmeasurementsystem.Thewiderangeinstrumentsaregenerallycoldcalibrated(ambientcontainmentconditions,depressurizedsteamgeneratorandsecondaryinventoryatcontainmenttemperatureconditions)andareusedprimarilyforperformingsteamgenerator"wetlayup"followingplantshutdown.Theinstrumentprovideslevelindicationsinthesteamgeneratorbetweenthetubesheetandthesecondarymoistureseparators.GinnaInstrumentationIvEachsteam'eneratorhasonewiderangedeltaPmeasurementsystem.Thewiderangeinstrumentsarecoldc'alibrated(ambientcontainmentconditions,depressurizedsteamgeneratorandsecondary inventoryatcontainment.temperatureconditions).Theinstrument,provideslevelindicationsinthesteamgeneratorbetweenthetubesheetandthesecondarymoistureseparators.S/GAwiderangelevel:LT460S/GBwiderangelevel:LT470BothwiderangelevelindicationsareprovidedintheformofananalogreadoutontheSPDSasshownonTable2andFigure1.Eventhoughthe,widerangeleveltransmittersarecoldcalibrated,adequateindicationaccuracy'xiststoprovideanearlyindication,ofpotentiallyadversesafetyconditionsa'ndtoassureacceptable"operatorresponserequiredbytheERGs.'etpointsintheERGswhichtriggeroperatorresponseorestablishthatcriticalsafetyfunctions-arebeingmetwillbeadjustedtoaccountforthecoldcalibrationandreferencelegprocesserrors.Inaddition,duringnormaloperationtheoperatorisusedtoseeingaparticularwiderangelevelthatcorrespondstotheacceptablenarrowrangelevelandwillbealerttoanychangesinthisnormallevel.PressurizerPressureERGAssumptionItisassumedthatatleastthreepressuretransmittersareconnectedtothepressurizer.Therangeofthechannelsistypically1700to2500psig.GinnaInstrumentationTherearefourpressuretransmittersconnectedtothepressurizer:PT429,430,431,449.Therangeofthechannelsis1700to2500psig.AllofthesepressurechannelsareincludedintheSASinputsbutarenot,displayedontheSPDS.WiderangeRCSpressureprovidesthesamemonitoringcapabilityandisdisplayedontheSPDS.PressurizerLevelERGAssumptionThepressurizerisassumedtohaveatleastthreechannelsofadeltaPlevelmeasurementsystem.Theinstrumentsprovidelevelindicationsforapproximatelythetotalheightofthepressurizer.Therangeofthemeasurementsystemis0to100percentofspan.

hPaweI"0 GinnaInstrumentationThepressurizerhasfourchannelsofadeltaPlevelmeasurementsystem.LT426,427Sc428arehotcalibratedandprovidelevelindicationsforapproximatelythetotalheightof'thepressurizer.LT433isacoldcalibratedtransmitterusersprimarilyduringplantsutdown.Therangeofthemeasurementsystemis0to100percentofspan.AsshownonTable2,threechannels,LT426,427and428,areprovidedontheSPDS.SteamGeneratorPressureERGAssumptionEachsteamgeneratorisassumedtohaveatleastthreepressuretransmitterslocatedinitsmainsteamlineupstreamof'themainsteamlineisolationvalve.Thisinstrumentationisnotassumedtobesubjecttoadversecontainmentconditions.Typically,thesepressuretransmittersarelocatedoutsidecontainmentintheauxiliarybuildingorsteamtunnelarea.Therangeoftheseinstrumentsxstypically0to1300psig.GinnaInstrumentationEachsteamlinehasthreechannelsofpressuremeasurement,upstreamofthemainsteamlineisolationvalve.Thesepressuretransmittersarelocatedoutsidecontainmentintheintermediatebuilding.SteamGeneratorApressureisindicatedbyPT468,469and482:SteamGeneratorBpressureisindicatedbyPT478,479,and483.Therangeof,theseinstrumentsis0to1400,psig.IAllofthesesteamlinepressurechannelsareincludedon"theSPDSasshownonTable2.CoreExitTemeratureERGAssumptionCoreexitthermocouple(CET)temperaturesarenecessaryforprovidinganindication"ofinadequatecorecoolingandaninput.inthedeterminationofRCSsubcooling.Severalofthethermocouplesshouldbelocatedtomonitorthemost'robablehighest,temperatureareaofthecore.Also,severalofthecoreexitthermocouplesshouldbelocatedinthevicinityofthevesselhotlegnozzleoutlets.TherangeofthecoreexitthermocoupletemperaturereadoutshouldbefromplantcoldshutdownconditionstothemaximumcoretemperaturefollowingadesignbasisLOCA.Atypicalreadout.rangeis100to2200'F.10 IIhIIt(1 GinnaInstrumentationTheCETsystemhas36thermocouplespositionedtomeasurefuelassembly'outletcoolant.temperaturesat.preselectedcorelocationsincludingprobablehighesttemperatureareasandthevicinitiesofthehotlegnozzles.Threethermocouplesarealsoprovidedtomeasuretemperaturesinthereactorvesselheadarea.TherangeoftheCETtemperaturereadoutwillbe0to2300'Ffollowingcompletionofamodificationscheduledfor1985.AllCETswillprovideinputtotheSPDSasshownonTable2.RCSSubcoolinERGAssumptionRCSsubcoolingcaneitherbecomputedmanuallyusingasteamtableorusingacomputerbasedalgorithm.ThepressureinputcanbesuppliedbyRCSwiderangepressureandpressurizerpressure.Generally','hepr'essurevalueusedfordeterminingthesystemsaturationtemperatureisanauctioneeredlowvalueofthoseinputs.ThetemperatureinputsthatcanbeusedinthecomputationareRCShotlegtemperatures,RCScoldlegtemperatures,andcoreexit,thermocoupletemperatures.ThetemperaturevalueusedintheERGstodetermineRCSsubcoolingistypicallythecoreexitthermocoupletemperatures.GinnaInstrumentationTwocalculationsareperformedbytheSAScomputerforSPDSsubcooling.CoresubcoolimgiscalculatedbyaveragingthetenhottestcoreexitTCsandcomparingthistemperaturetoasaturationtemperaturethatisdeterminedusingRCSpressureandsteamtablealgorithms.TopofHeadSubcoolingiscalculatedbyaveragingthethreet'op-of-headTCsandcomparingthistemperaturetothes'arnesaturationtemperature.Bothofthesesubcoolingtemperaturesaredisplayed'nSPDSasshownonFigure1.AuxiliarFeedwaterFlowERGAssumptionTheauxiliaryfeedwater(AFW)supplylinestoeachsteamgeneratorhaveatleastoneauxiliaryfeedwaterflowmeasurementindicatedinthecontrolroom.Ifeachsteamgeneratorissuppliedwithauxiliaryfeedwaterflowfrommorethanoneauxiliaryfeedwaterpump,theflowmeasuringdeviceindicatestotalflowtoe'ach'steamgenerator.Totalauxiliaryfeedwaterflowtoallsteamgeneratorsisdeterminedbyaddingtheauxiliaryflowtoeachofthesteamgenerators.

tIIIt GinnaInstrumentationAFWflowtoeachsteamgeneratorcanbeprovidedbyamainmotordrivenauxiliaryfeedwaterpump(MAFWP),astandbymotordrivenauxiliaryfeedwaterpump(SAFE)oracommonturbinedrivenauxiliaryfeedwaterpump(TAFWP).AFWflowtosteamgeneratorAisprovidedbyredundanttransmittersFT2013andFT2001fromtheIQFWP,FT2006fromtheTAFWPandFT4084fromtheSAFWP.AFWflowtosteamgeneratorBisprovidedbyredundanttransmittersFT2014andFT2002fromtheMAFWP,FT2007fromtheTAFWPandFT4085fromtheSAFWP.AlthoughAFWflowtothesteamgeneratorsisusedelsewhereinSAS,itisnotanearlyindicationofpotentiallyadversesafetyconditions(suchassteamgeneratorlevel)andisnotdisplayedonSPDS.AFWflowismonitoredbySAStoassuretheproperoperationofmitigatingequipment;.RWSTLevelERGAssumptionAtleasttwochannelsofadeltaPmeasurementsystemareavailabletomonitortherefuelingwaterstoragetank"(RWST)level.TheinstrumentsprovidelevelindicationsforatleasttheminimumrequiredwatersupplytotheSIpumpsfollowingaLOCAandkeytheswitchoverfromtheinjectiontothecoldlegrecirculationmode.Therangeofthemeasurement,systemis0"to100percentofspan.GinnaInstrumentationTwochannelsofadeltaPmeasurementsystemareavailabletomonitortheRWSTlevel.LT920andLT921providelevelindicationsfor0-100%span.BothoftheselevelchannelsprovideinputtoSASbutarenotanearlyindicationofpotentiallyadversesafetyconditionsandarenotdisplayedonSPD'S.TheycanbemonitoredonlowerleveldisplaystoassureadequateSIpumpwatersupplyandtomonitortheswitchoverfromtheinjectiontotherecirculationmode.CSTLevelERGAssumptionAtleasttwochannelsofadeltaPmeasurementsystemareavailabletomonitorthelevelineachcondensatestoragetank(CST)thatprovidestheprimarywatersourcetotheauxiliaryfeedwaterpumps.Theinstrumentsshouldprovidelevelindicationsforatleasttheminimumrequiredwatersupplyfortheauxiliaryfeedwatersystem.Therangeofthemeasurementsystemis0to100percentofspan.12 GinnaInstrumentationTwochannelsofadeltaPmeasurementsystemareavailabletomonitorthelevelinthecondensatestoragetanksthatprovidetheprimarywatersourcetotheauxiliaryfeedwaterpumpsthroughacommonsupplyline.Theinstruments,LT2022Aand202'2B,provi.delevelindicationsfor0-100%ofspan(0-24ft)foreachtank.Condensatestoragetanklevelisnotaparameterwhichgivesdirectindicationofsafetystatusorimpendingadversesafetyconditions.Itisaparameterusedduringrecoveryfromaplanttransient.CSTlevel"ismonitoredonlowerlevelSASdisplaysbutisnotdisplayedonSPDS.Containment.PressureERGAssumptionAt,leasttwochannelsofcontainmentpressureareavailabletomonitorthecontainment.Theinstrumentsmustextendovertherangefromnormalconditioncontainmentpressuretocontainmentdesi.gnpressure.Foradrycontainment,"thisrangeistypically0to65psig.GinnaInstrumentationSixchannelsofcontainment'pressureareavailabletomonitorthecontainment.Theinstruments"extendover'the'angefromnormalconditioncontainmentpressuretothreetimescontainmentdesignpressure.PT945,947,949measure0-60psig.PT946,948,950measure10-200psia.ThreepressurechannelsprovideinputtotheSPDSContainmentEnvironmentbistableindicatortogiveearlywarningofpotentiallyadversesafetyconditionsasshownonTable2.ContainmentWaterLevelERGAssumptionAtleasttwochannelsofalevelmeasurementsystemareavailabletomonitorthewaterlevelinthecontainmentbuilding,.Thebottomtapofthemeasurement,systemshouldbelocatedinthecavitiesorsumpsinwhichwaterresultingfromalossofreactororsecondarycoolantwouldinitiallycollect.Thetoptapshouldbeatthemaximumexpectedfloodlevelinthecontainmentbuilding.Insomeinstances,duetothelargespanoftherequiredlevelmeasurement,twochannelsofnarrowrangeareimplementedwhichonlyprovideanindicationofwaterlevelinthereactorcavityorsump.Twochannelsofawiderangelevelsystemarethenutilizedfordeterminingcontainmentfloodlevel.Therangeofthemeasurementssystemsis0to100percentofspan.13 Vil44 GinnaInstrumentationContainmentwaterlevelismeasuredbyredundant.narrowrangeandwiderangelevelinstruments.ContainmentnarrowrangelevelisprovidedbyLT2039andLT2044witharangeof0-30ft.NarrowrangelevelzsSumpAwherewaterwouldinitiallycollect.Widerange"containmentlevelisSumpBandismeasuredhyLT942andLT943,eachofwhichisaseriesofqualifiedfloat,switches.Thetopswitchisatthemaximumexpectedwaterlevel.LT2039andLT2044areincludedontheSPDS,asshownonTable2,toprovideearlyindicationofpotentiallyadversesafetystatus.WiderangeSumpBlevelindicationispartoftheSASCriticalSafetyFunctionstatusdisplaysthatcanbeusedduringrecoveryfromtheplanttransient.ContainmentRadiationLevelERGAssumptionAtleasttwochannelsofradiationdetectorsareassumedtobeavailableforcontainmentradiationmonitoring.Theradiationmonitoriscapableofprovidinganindicationofradiationlevelsfrombackgrondlevelstoapostulatedtotalintegrateddoserelease."Asinthecaseofthecontainmentwaterlevelsystem,anarrowandwiderangemonitoringsystemmaybeinstalled'toincreasethesensitivityatthelowerradiationlevels.GinnaInstrumentationTwochannelsofradiationdetectorsareavailableforcontainmentarearadiationmonitoring.Theradiationmonitorsarecapableofprovidinganindicationofradiationlevelsfrombackground'levelstoypostulatedTIDrelease.RM29andRM30havearangeof1to10R/hr.RM,'2'sa.lowrange"radiationmonitorwhichprovidesinputtotheSPDSContainment'Environmentbistableindicatortogiveearlywarningofpotentiallyadversesafetyconditions.RM29andRM30provideinputtolowerlevelSASdisplaysforaccidentmonitoring.SecondarRadiationLevelERGAssumptionAtleasttwochannelsofameasurement,systemfordetectingsecondaryradiationareassumedtobeavailab1etotheoperator.Severalmeansofimplementingthismonitoringfunctionareavailable.Thesemayincludededicatedsteamlineradiationmonitors,condenserairejec'torradiationmonitorsandsteamgeneratorblowdownradiationmonitors.Factorsthatimpacttheultimatedecisionfordeterminingtheplant-specificmeansofmonitoringsecondaryradiationincludelocationofmonitoringinstrumentation,qualificationofinstalledinstrumentationandalternateusesofinstalledinstrumentation(e.g.,calculationofeffluentrelease).The A.4tl$1vI!A' hradiationmonitoringsystemadoptedmust,becapableofprovidinganindicationofraBiationleve1sfromthoselevelsexistinginthesecondarysideduringnormaloperationwithmaximumTechnicalSpecificationleakagetothelevelexpected'followingadesignbasissteamgeneratortuberupture.GinnaInstrumentationSeveralchannelsofameasurementsystemfordetectingsecondaryradiationareavailabletotheoperator.Thyrsei.nc)udededicatedsteamlineradiationmonitorsRM31S32(10to10uCiggc),condenserairejectgrradiationmonitors(RM15&15A(10to10uCi/ccand10to10uCi/ccrespectively),andasteamgeneratorblowdownradiationmonitorRl9(10to10CPM).R15andR19,themonitorsexpectedtogivethefirstindicationofpotentiallyadversesafetyconditions,provideinputtotheSPDSSecondaryRadiationbistableindicatorasshownonTable2.NeutronFluxERGAssumptionAt,leasttwochannelsofinstrumentationareassumedtobeavailabletomonitorcoreneutronflux.TheinstrumentationiscapableofmonitoringneutronfluxfromsourcerangelevelstothemaximumexpectedcorereturntopowerlevelsduetoexcessiveRCScooldown.Severalinstalledinstrumentsarecapableofmonitoringtherequiredrange.Theseincludethesource,intermediateandpowerrangedetectors.GinnaInstrumentationNeutronfluxinstrumentatjonconsistsof2SourceRangechannels,N31ang1N32(1$o10CPS),2IntermediateRangechannels,N35andN36(10to10AMPS)and4PowerRangechannels,N41,42,43and44(0to120%).AlloftheseneutronfluxchannelsareincludedontheSPDSdisplayasshownonTable2.15 IIIh4f~gII*Ilf ConclusionTheminimumsetofparametersfromwhichthesafetystatusoftheplantcanbeassessedhasbeenprovidedontheGonnaSPDS.ImportantplantfunctionsencompassedbytheSPDSparametersincludereactivitycontrol,reactorcorecoolingandheatremovalfromtheprimarysystem,reactorcoolantsystemintegrity,radioactivitycontrolandcontainmentconditions.Theparametersselectedprovidethecontrolroomoperatorwithameansofrapidlydetectingabnormalconditionsandevaluatingthesafetystatusoftheplant.TheparameterselectionisbasedupontheWOGERGlistofnecessaryinstrumentationandthereforeprovidestherequiredindicationforabroadspectrumofeventsequences.SPDSImlementationPlanRGEhaspreviouslyscheduledinstallationandoperationoftheSPDSandthemotherSAStobecompletein1987andinformedtheNRCStaffinaletterdatedApril"6,1984.Subsequenttothatletter,thevendor,ElectronicAssociatesInc.defaultedonthecontracttodelivertheSAS.RGEiscurrentlynegotiatingwithseveralothervendorstocompletethisworkandexpectstoselectanewcontractorshortly.RGEhasbeenencouragedthat,theremaynot,besignificant,delaysresultingfromEAI"sdefault.However,RGEcannotmakeafirmcommitmentontheSPDScompletiondateuntilcontractnegotiationswithanewvendorarecomplete.RGEisinreceiptofanNRCorderdatedJune12,1984andwilltake*appropriateactionifanextensionoftimeisrequired.16 tIIltEP TABLE1EMERGENCYRESPONSEGUIDELINEINSTRUMENTATIONINSTRUMENTRANGE1.RCSPressure2.RCSHotandColdLegTemp.3.ReactorVesselLevel*4.SteamGeneratorNarrowRangeLevel0-3000psig0-700F0-100%0-100%5.SteamGeneratorWideRangeLevel6.PressurizerPressure7.PressurizerLevel8.SteamlinePressure9.CoreExitTemp.10.RCSSubcooling11.AuxiliaryFeedFlow**12.RWSTLevel**13.CSTLevel**14.ContainmentPressure15.ContainmentWaterLevelfN1700-2500psig0-100%0-1300psig100-2200F0-100%'0-100/0-65psigBottomofsumptomaximumfloodlevel16.ContainmentRadiationLevel17.SecondaryRadiationLevelI18.NeutronFlux*OptionalInstrumentation.EmergencyResponseGuidelineshavebeenpreparedbothwithandwithoutreactorvessellevel.**Theseparametersarenotrequiredtogiveanearlyindicationofpotentiallyadversesafefyconditionsbut,areusedtomonitortheproperfunctioningofmitigatingequipmentortoassistinlong'termoperatorresponse.

'~,'J!~fMC AIDSABLOCASGTRLOSCCIClC32235PSIG49%RCSPFESSmEPRZRLEVELAA595F54$'FTHOTTCOLDAA595'F54$'FTHOTTCOLD19FEB8412:99:89AROWMODENCRiWOPERAGF44STATIONBFLOWS/GAS/GBTH!8AREAUSEDTODISPLAYIAESSASEsINDI.UDINeNEUTRONPLUxANDTHEDIOITAI.PARAITIETER8ONTA8LER.LBS/HRLBS/HRAAAA3.$E63.$E63.$E63.$E6TEAMFEEDSTEAMFEEDAA76$PS652%PRESSLEVELV6$PS!G5$%PRESSLEVELNotesFIGURESECONDARYCONTAM4M{XNTAIQ/EMTOPOFHEADRADIATIDNAAWRNENTRIDIATKNAIDOOOAIINOCORESUBCOOLINGCOREEXITTEMPERATURE2.3.4.TheparametervaluesshownonthisFigureareforillustrationonlyandmaynotberepresentativeofanygivenplantcondition.ThehorizontalmarkersarenormaloperatingrangesfortheparametersandareSPDSalarmpoints.Parameterrangesrepresentedontheanalogindicatorsarediscussedinthereporttext.Arrows{hY)indicatewhetheraparameterisincreasingordecreasing.

r 015202535"40~-.45505560657080'.840CRILIRC6IEAECCRCSINVEENTNTORY-100RECTOFR--20015REACT0TNOR.RNG.FR--250RETRCTPPETR.R.ES6THRNTHANG.ANNNTEOS.NTEEITARSTUPNQRTRAUPRATEERC.RNe.RIZNNTERATTER.AT0.DPRNPRNe.ATEG.ATEFR-FR-CSFSATFR-350-450-500e.STARTUPRATERE~~~ACTTC0ALLEF~g~,IsNRIZARTRNG.PRATCSFSATCSFSAT-600-650~~~~I-7504lI~,'~IIt~O~~e.I1'50'00250300350400'50530550650650700750'600.5~0900950')FT.GURE-,2..~uv.21/20/S4SetraintsonthisFioureareforillustrationonlyandmaychangaonthefinalCriticalSafetyFunctionStatusTreeI1000

,fI