Text

Proposed Tech Specs Re RHR SW Pumps Required for multi-unit Operation & Cold Shutdown
	ML18039A222
Person / Time
Site:	Browns Ferry
Issue date:	12/30/1997
From:	; TENNESSEE VALLEY AUTHORITY
To:	;
Shared Package
ML18039A221	List: ML18039A220; ML18039A222;
References
	NUDOCS 9801090088
	Download: ML18039A222 (182)
	v • d • e

ENCLOSURE 2 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)Units 1, 2, and 3 PROPOSED TECHNICAL SPECIFICATION (TS)CHANGE TS-395 MAEGCED PAGES I.AFFECTED PAGE LIST Unit 1-pages 3.5/4.5-11,, 3.5/4.5-29 Unit 2-pages 3.5/4.5-11, 3.5/4.5-27 Unit 3-pages 3.S/4.S-11, 3.S/4.5-30 II.MARKED PAGES See attached.<<PBoio~ooe 0@OOOQQ9'71230 POR AOO" part P i

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment ZOV 05>9SO Time Limit 1 Unit Fueled ts e ue d 2 Units Fueled Un t De ue ed 3 Units Fueled SW E CW R SW CW R RSW EECW None 30 Days 4 and 3 S (~3 3 and 2 and 3 W<)(w~R d(b)(or)4 and 3 and 3 7 clnd 2 (or.)6 and 3 7 Days and 2 4 and 2 6 and 2 Note: (A)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.(B)When each pump is supplied from a separate 4-kv shutdown hoard..(C)This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.(D)For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .BFN Unit 1 3.5/4.5-11 AhIEHOMBT NO.I 76 II II/e 3.5 S~S (Cont')NOV 0 2595 When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.IThere are four RHR heat exchanger headers (A, B, C,&D)with one RHR Iheat exchanger from each unit on each header.There are two RHRSM pumps on each header;one normally assigned to each header (A2, B2, ,C2, or D2)and one on alternate assignment (Al, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header.One RHRSM pump can supply the full'flow requirement of one.RHR heat exchanger.

Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.

The minimum number of RHRSW pumps which are required to be operable by this specification ensure at the RHRSW stem will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.This includes a single'$~failure of diesel generator A or B which would result in the loss of two RHRSW pumps.The RHR Service Mater System was designed as a shared system for three units.The specification, as written, is conservative when consider-, ation is given to particular pumps being out of service and to'oss e va v ng arrangemen s.If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow.'ontinued operation if the actual system cooling requirements can be~assured.I Since the standby coolant supply capability provides added long term'edundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed.This time'i limit does not reduce the other requirements associated with RHRSM/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to'he RHR heat exchanger header supplying the standby coolant supply , connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containmei.t remains OPERABLE.Because of the availability of an equal makeup and cooling capability, a 30-day repair period is justified.

Should the capability to provide standby coolant supply be lost, a 10-day repair time is justified based on the low probability for ever needing the standby coolant supply.Mith only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system).If only'three RHRSW pumps are'PERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).3.5.D E ui ment Area Coolers There is an equipment area cooler for each RHR pump and an equtP=e>t area cooler for each set (two pumps, either the A and C or B and D pumps)of core spray pumps.The equipment area coolers take s".:'.n BFH Unit 1 3.5/4.5-29 4MENDMENT 10""5 e0 Table 3.5-1 NOV 0 5 1980 Minimum RHRSW and EECW Pump Assignment Time Limit 1 Unit Fueled 2 nits Defue ed 2 Units Fueled U t De ue ed 3 Units Fueled Hone 30 Days R RSW EECW and 3 3 and 2 SW CW and 3 (r~onus (or)4 and 3 R SW ECW 7 and 3 7 and 2 (or)6 and 3 7 Days and 2 4 and 2 6 and 2 Note: (A)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.(B)When each pump is supplied from a separate 4-kv shutdown board.(C)This condition is satisfied with 2 RHRSW pumps when each pump is, aligned to a separate RHRSW header.(D)For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .BFN Unit 2 3.5/4.5-11 AMBOQENT No.y Vg

3.5 When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The minimum number of RHRSW pumps which are required to be operable by this s ecification ensur the RHRSW em will satisfy its'safety functions for all three units ,following a design'basis event on one unit and a postulated single active failure.This includes a single failure of diesel generator A or B w'hich would result in the loss of two RHRSW pumps.~BS~S (Cont'd)NOV 0 3 8%are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable..The control air comoressors only usc the EECW north header as an emergency backup supply.There are four RHR heat exchanger headers (A,, B, C,&D)vith one RHR heat exchanger from each unit on each header.There are tvo RHRSW Ipumps on each header;one normally assigned to each header (A2f B2 C2, or D2)and onc on alternate assignment (Al, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flov supplied by both RHRSW pumps to any tvo of the three RHR heat exchangers on the header.One RHRSW pump can supply the full flov requirement of one RHR heat exchanger.

Tvo RHR heat cxchangers can morc than adequately

handle the cooling requirements of one unit in any abnormal or postaccident situation.

'The RHR Service Water System vas designed as a shared system for three'units.The specification, as vritten, is conservative vhcn consider-ation is given to particular pumps being, out of service and to possible valving arrangements.

If unusual operating conditions arise such that more pumps are out of service than allovcd by this'specification, a special case request may bc made to the HRC to allov'ontinued operation if the actual system cooling requirements can bc assured.'ince the standby coolant supply capability provides added long term'edundancy to the other emergency and containment cooling systems, a 5-hour time to establish flov path availability is alloved.This time limi.t does not reduce the other requirements associated vith RHRSW/EECW system pump operability.

'hould one of the tvo RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of thc unit containment remains OPERABLE.Because of the availability of an equal makeup and cooling capability; a 30-day repair period is justi.fied.

Should the capability to provide standby coolant supply bc lost, a 10-day repair time is)ustified'based on the lov probability for ever needing the'tandby coolant supply.I With only onc unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system).If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the rcquiremcnt of Specification 3.5.B.5 (RHR system).3.5.D E u a Coo s Thcrc is an equipment area cooler for each RHR pump and an equipmcnt area cooler for each set (tvo pumps, either thc A and C or B and D pumps)of core spray pumps.The equipment area coolers.take suction BFH Unit 2 3.5/4.5-27 NENMEHT NO.2 4 0 4

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment SOY 05 igloo Time Limit 1 Unit Fueled ts De ue d SW E CW A 2 Units Fueled n t Defue ed H SW EECW 3 Units Fueled R RSW ECW A None 30 Days and'3+C~)3 and 2 and 3 5 an (or)4 and 3 and 3 7 an 2 (or)6 and 3 7 Days~and 2 4 and 2 6 and 2 Note: (A)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.I (B)When each pump is supplied from a separate 4-kv shutdown board.(C)This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.(D)For units with fuel loaded, the minimum I~W pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN condition for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .BFN Unit 1 3.5/4.5-11 AhlEHOM97 go.g 7 6 I 1 3.5~B SES (Cont'd)NOV 08~are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.When the decay heat level has decreased sufficiently following~shutdown, the entire shutdown cooling load can be~adequately handled by one RHR heat exchanger.

'he minimum number of IQGKW pumps which are equired to be erable by this ecification ensur that the RHRSW system will satisfy its'afety functions for all three units , following a design basis event on one!unit and a postulated single active failure.', This includes a single'ailure of diesel generator A or B which would result in the loss of two RHRSW pumps.There are four RHR heat exchanger headers (A, B, C,&D)vith one RHR ,heat exchanger from each unit on each header.There are tvo RHRSW pumps on each header;one normally assigned to each header (A2, B2,'C2, or D2)and one on alternate assignment (Al, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flov supplied by!,both RHRSW pumps to any tvo of the three RHR heat exchangers on the header.One RHRSW pump can supply the full flov requirement of one RHR heat exchanger.

Tvo RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.

The RHR Service Water System vas designed as a shared system for three units.The specification, as written, is conservative vhen consider-ation is given to particular pumps being out of service and to possible valving arrangements.

If unusual operating conditions arise suc a more pumps are ou o service than alloved by this specification, a special case request may be made to the NRC to allo+continued operation if the actual system cooling requirements can be assured.Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flov path availability is alloved.This time ,limit does not reduce the other requirements associated vith'RHRSW/EECW system pump operability.

Should one of the tvo RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become.inoperable, an equal capability for long-term'~luid makeup'to the unit reactor and for cooling of the unit containment Iremains OPERABLE.Because of the availability of an equal makeup and cooling capability, a 30-day repair period is justified.

Should the capability to provide standby coolant supply be lost, a 10-day repair ,time is justified based on the lov probability for ever needing the~~standby coolant supply.With only one unit fueled, four RHRSW pumps are required to be~OPERABLE for indefinite operation to meet the requirements of'Specification 3.5.B.1 (RHR system).If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).3.5.D E ui ment rea Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (tvo pumps, either the A and C.or B and 0 pumps)of core spray pumps.The equipment area coolers.take sue:'."n BFN Unit 3 3.5/4.5-30

>>i~s~~~mr e.i 39 I I ENCLOSURE 3 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)Units 1, 2, and 3 PROPOSED TECHNICAL SPECIFICATION (TS)CHANGE TS-395 REVISED PAGES I.AFFECTED PAGE LIST Unit, 1 Pages 3.5/4.5-11, 3.5/4.5-29 Unit 2 Pages 3.5/4.5-11, 3.5/4.5-27 Unit 3 Pages 3.5/4.5-11,'.5/4.5-30 II.REVISED PAGES See attached.

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit None 1 Unit Fueled 2 Units Defueled RHRSW EECW A 4(D)and 3 2 Units Fueled 1 Unit Defueled RHRSW EECW A 5(B)(D)and 3 (or)6(D)and 3 3 Units Fueled RHRSW EECW A 8(D)and 3 30 Days and 2 and 2 (or)and 3 7 and 2 (or)6 and 3 7 Days 2(C)and 2 and 2 6 and 2 Note: (A)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.(B)When each pump is supplied from a separate 4-kv shutdown board.(C)This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.(D)For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .0 BFN Unit 1 3.5/4.5-11 r n~t~tt', llII I t' 3.5 BASES (Cont'd)are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.There are four RHR heat exchanger headers (A, B, C, t D)with one RHR heat exchanger from each unit on each header.There are two RHRSW pumps on each header;one normally assigned to each header (A2, B2, C2, or D2)and one on alternate assignment (Al, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header.One RHRSW pump can supply the full flow requirement of one RHR heat exchanger.

Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.>>

When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system for three units.The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements.

The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps.If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation if the actual system cooling requirements can be assured.Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed.This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE.Because of the availability of an equal makeup and cooling capability, a 30-day repair period is)ustified.

Should the capability to provide standby coolant supply be lost, a 10-day repair time is)ustified based on the low probability for ever needing the standby coolant supply.With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.l (RHR system).If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.S (RHR system).3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps)of core spray pumps.The equipment area coolers take suction~Unit 1 3.5/4.5-29 t~I lt I',I[$h IV' Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit None 1 Unit Fueled (2 Units Defueled)RHRSW EECW A 4(D)and 3 2 Units Fueled (1 Unit Defueled)RHRSW EECW A 5(B)(D)and 3 (or)6(D)and 3 3 Units Fueled RHRSW EECW A 8(D)and 3 30 Days and 2 and 2 (or)and 3 7 and 2 (or)6 and 3 7 Days 2(C)and 2 and 2 6 and 2 Note: (A)(~)I (C)I (D)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.When each pump is supplied from a separate 4-kv shutdown board.This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .BFN Unit 2 3.5/4.5-11 1~4 P~~

3,5 BASES (Cont'd)are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.There are four RHR heat exchanger headers (A, B, C, 6 D)with one RHR heat exchanger from each unit on each header.There are two RHRSW pumps on each headers one normally assigned to each header (A2, B2, C2, or D2)and one on alternate assignment (A1, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header.One RHRSW pump can supply the full flow requirement of one RHR heat exchanger.

Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.

When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system for three units.The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements.

The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps.Zf unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation if the actual system cooling requirements can be assured.Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed.This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE.Because of the availability of an equal makeup and cooling capability, a 30-day repair period is)ustified.

Should the capability to provide standby coolant supply be lost, a 10-day repair time is)ustified based on the low probability for ever needing the standby coolant supply.With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system).Zf only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps)of core spray pumps.The equipment area coolers take suction Unit 2 3.5/4.5-27

Table 3.5-1 Minimum RHRSW and EECW Pump Assignment Time Limit None 1 Unit Fueled (2 Units Defueled)RHRSW EECW A 4(D)and 3 2 Units Fueled (1 Unit Defueled)RHRSW EECW A 5(B)(D)and 3 (or)6(D)and 3 3 Units Fueled RHRSW EECW A 8(D)and 3 30 Days and 2 and 2 (or)and 3 7 and 2 (or)6 and 3 7 Days 2(C)and 2 and 2 6 and 2 Note: (A)(C)At least one OPERABLE pump must be assigned to each header.Only automatically starting pumps may be assigned to EECW header service.When each pump is supplied from a separate 4-kv shutdown board.This condition is satisfied with 2 RHRSW pumps when each pump is aligned to a separate RHRSW header.(D)For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in the COLD SHUTDOWN CONDITION for more than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .0 BFN Unit 3 3.5/4.5-11

~'l 0~~",~

3'BASES (Cont'd)are not safety related, are able to be fed from both headers thus assuring continuity of operation if either header becomes inoperable.

The control air compressors only use the EECW north header as an emergency backup supply.There are four RHR heat exchanger headers (A, B, C, 6 D)with one RHR heat exchanger from each unit on each header.There are two RHRSW pumps on each headers one normally assigned to each header (A2, B2, C2g or D2)and one on alternate assignment (Al, Bl, Cl, or Dl).One RHR heat exchanger header can adequately deliver the flow supplied by both RHRSW pumps to any two of the three RHR heat exchangers on the header.One RHRSW pump can supply the full flow requirement of one RHR heat exchanger.

Two RHR heat exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.

When the decay heat level has decreased sufficiently following shutdown, the entire shutdown cooling load can be adequately handled by one RHR heat exchanger.

The RHR Service Water System was designed as a shared system.for three units.The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements.

The minimum number of RHRSW pumps which are required to be OPERABLE by this specification ensures that the RHRSW System will satisfy its safety functions for all three units following a design basis event on one unit and a postulated single active failure.This includes a single failure of diesel generator A or B which would result in the loss of two RHRSW pumps.If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation if the actual system cooling requirements can be assured.Since the standby coolant supply capability provides added long term redundancy to the other emergency and containment cooling systems, a 5-hour time to establish flow path availability is allowed.This time limit does not reduce the other requirements associated with RHRSW/EECW system pump operability.

Should one of the two RHRSW pumps normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection become inoperable, an equal capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains OPERABLE.Because of the availability of an equal makeup and cooling capability, a 30-day repair period is)ustified.

Should the capability to provide standby coolant supply be lost, a 10-day repair time is)ustified based on the low probability for ever needing the standby coolant supply.With only one unit fueled, four RHRSW pumps are required to be OPERABLE for indefinite operation to meet the requirements of Specification 3.5.B.1 (RHR system).If only three RHRSW pumps are OPERABLE, a 30-day LCO exists because of the requirement of Specification 3.5.B.5 (RHR system).3.5.D E i ment Area Coolers There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps)of core spray pumps.The equipment area coolers take suction Unit 3 3.5/4.5-30

ENCLOSURE 4 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)Units 1, 2, and 3 PROPOSED IMPROVED TECHNICAL SPECIFICATION (TS)CHANGE TS-395 MARKED PAGES I.AFFECTED PAGE LIST Unit 1-pages 3.7-1 through-3, B3.7-1 through-6 Unit 2-pages 3.7-1 through-3, B3.7-1 through-6 Unit 3-pages 3.7-1 through-3, B3.7-1 through-6 I,I.REVISED PAGES See attached.

3.7 PLANT SYSTEMS-Note-------------

The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .RHRSW System 3.7.1 3.7.1 Residual Heat Removal Service Mater (RHRSW)System LCO 3.7.1,-NOTES-W 2 units fueled, each subsyst least one 0 B RHRSM pum have at 2.With 3 uni ed, two RHRS t P BLE RHRSW pumps.tems must have Four RHRSW subsystems shall be OPERABLE with of OPERABLE pumps as listed below: 1.1 unit fueled-four OPERABLE RHRSW pumps.2.2 units fueled-six OPERABLE RHRSW pumps.APPLICABILITY:

NOD'ES 1, 2, and 3-Four-RHRSM-subsystems-shaH-be-OPERAB~

the numbe ACTIONS I 3.3 units fueled-eight OPERABLE RHRSW pumps.NOTE Enter applicab e'nd Required Aetio ,"Residual Heat Removal (RHR)Shutdown Coolin utdown," for RHR"shutdown cooling made inopera H ystem.NDITION REQUIRED ACTION C PK N TINE A.One RHRSW subsystem or required pump inoperable.

A.l re RHRSW subsys e equired pump to OPERABL status.30 days (continued)

/MS~+I BFN-UNIT 1 3.7-1 Amendment 1'4 Insert A CONDITION REQUIRED ACTION COMPLETION TIME One required RHRSW pump inoperable.

A.1--------Notes-------

1.Only applicable for the 2 units fueled condition.

2.Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for a 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .Immediately Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.30 days OR A.2 Restore required RHRSW pump to OPERABLE status.(continued)

RHRSW System 3.7.1 CONDITION RE(UIRED ACTION COMPLETION TIME B.wo RHRSW subsystems i perable.B.l--------NOTE--------

Only applicable when two units are fueled.Verify at least three OPERABLE RHRSW'pumps are associated with two OPERABLE RHRSW subsystems.

1 hou B.2---=----NOTE-------

Only applicab when three units re fueled.Verif at least four E BLE RHRSW pumps a associated with wo PERABLE RHRSW subsy ems.1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .3 Restore one inoperable RH W subsystem to OP BLE status.7 days C.Three or mo e RHRSW subsystem inoperable.

OR Re ired Action B.l or.2 and associated ompletion Time not met.C.1 Restore the required RHRSW subsystems to OPERABLE status.hours (continued)

BFN-UNIT 1 3~7 2 Amendment h.\

Insert B CONDITION REQUIRED ACTION COMPLETION TIME One RHRSW subsystem inoperable.

B.1-------Note-------

Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days Two required RHRSW pumps inoperable.

C.1 Restore one inoperable RHRSW pump to OPERABLE status 7 days Two RHRSW subsystems inoperable.

D.1--------Note

Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days Three or more required RHRSW pumps inoperable Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Three or more RHRSW subsystems inoperable.

F.1--------Note--------Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months 1 (continued)

,

I~~~I~~p g~~.~~~~~~/~~~~I~I~~I~~~~~~I I~~~~I~~~~1~'~I~I~~~~~I~~~~I~~

h RHRSW System B 3.7.1 B 3.7'LANT SYSTEMS B 3.7.1 Residual Heat Removal Service Water (RHRSW)System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe, reactor shutdown following a Design Basis Accident (DBA)or transient.,The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.I , a heat exchanger, a suction source, and associated valves, piping and instrumentation.

The system is initiated manually from each of the three units control rooms.If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core.The system can be manually started any time the dg ddb ttg tg!'d clears, and is assumed to be manually started within 10 minutes after the LOCA.T he RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One loop with one pump operating is capable of providing 50/of the required cooling capacity to maintain safe shutdown dtt!f!f t!-However-,one-pump

-i~eapa@~ef-prov-M+ng-su4'-Ament-eoal4ng-

~pacA4~o-m

'own-cond+tAen

-for-each-ef'-t by<<!f loop with one or two OPERABLE pumps dependent-ope~e--number-o4-feels-uo+4s The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 ,(Ref.1).Cooling water is pumped by the RHRSW pumps from the Wheeler , Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

0 BFN-UNIT 1 B 3.7-1 (continued)

Amendment l 4 RHRSW System B 3.7.1 BASES (continued)

APPLICABLE SAFETY ANALYSES The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment

" following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively).

These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.d The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since'there are certain*alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these an'alyses, manual initiation of the OPERABLE RHRSW s'ubsystems and, the associated RHR System is assumed to occur 10 minutes after a DBA.The RHRSW flow assumed in the analyses is~gpm per pump with two pumps operating in one loop.In this a the maximum suppression chamber water'temperature and 9'<><pressure are 177'F (as reported in Reference 7)and 49.6 psig, respectively, well below the design temperature f281'F d i 11 bl p f62pig.~The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).BFN-UNIT 1 B 3.7-2 (continued)

Amend--en'.

I Additionally, since the RHRSW pumps are shared between the three'FN units, the number of OPERABLE pumps required is also~'ependent on the number of units fueled.(continued)

RHRSW System 8 3.7.1 CO'n addition to the required number I of OPERABLE subsystems, there l'ust be an adequate number of pumps OPERABLE to provide cooling for thc fueled non-accident units.Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power An OPERABLE RHRSW subsystem consists of The number of required OPERABLE RHRSW pumps required is modified by a Note which specifics that the number of~required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note , acknowledges the fact that decay heat'removal requirements are substantially reduced for fueled Mode 4 or 5 for over 24 J APPLICABILITY e-vequ+red-number

-o$-QitERABLE

-RHRSW-pumps-dependent-th s It~d b.An OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rat.-4n'~" s ne-PERABLE-pump-per

-RHRSQ-subsy-skerrh

-Noke~gec-i4'its-44~

n n-I f-th~llnN-have-ewe-OPERABLE

-RHRStt-pumps with at least one OPERABLE W pump in the flow path.I 1 In NODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")arid decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of thes'e systems.In NODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.ACTIONS eee-iettteeeie g-thee-ehe-p~sn'I-Ann~'sn-no N n bl~I IR-n~~n n'arms-.5~~p n nn-t~h-cempenent~(continued)

BFN-UNIT 1 B 3.7-3 Amendment t P BASES/~/E~Rz C RHRSM System B 3.7.1 ACTIONS (continued)

A.l W h one RHRSW subsystem or required pump inoperable, the ino erable RHRSW subsystem or required pump must be restor d to 0 RABLE status within 30 days.With the unit in thi condi'on, the remaining OPERABLE RHRSW subsystems are adequat to perform the RHRSW heat removal function.However, he overall reliability is reduced because single failure co ld result in reduced primary containmen cooling capability.

The 30 day Completion Time is based the availability f equipment in excess of normal r undancy requirements a d the low probability of an eve occurring requiring RHRSW uring this period.B.1 B.2 and B.3 Required Action B.1 re ires verificat on that at least three OPERABLE RHRSW pum s are assoc'ed with the two OPERABLE RHRSW subsystems.

The Re ired Action is modified by a Note indicating that t e req red action is applicable only when two units are fuel.equired Action B.2 requires verification.that at ast four OPERABLE RHRSW pumps are associated with the o OPERABLE RHRSW subsystems.

The Required Action is modif ed a Note indicating that the required action is app cable'ly when three units are fueled.Required Action B.3 re uires that with two RHRSW subsystems inoperable, one inop able RHRSW subsys m be restored to OPERABLE status wit in 7 days.With the it(s)in this condition, the re ining OPERABLE RHRSW su ystems are adequate to perf rm the RHRSW heat removal nction.However, the o rail reliability is reduced b ause a single failure in th OPERABLE RHRSW subsystems could esult in loss of RHR$function.The 7 day Completion T e is based on the red fidant RHRSW capabilities afforded by t OPERABLE subsyste and the l,ow probability of an event occu ring requiri RHRSW during this period.C.1 ith three or more RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.(continued)

BFN-UNIT I 8 3.7-4 Amendment I'1t Insert C A.1 and A.2 Required Action A.1 requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.The Required Action is modified by two Notes.Note I indicates that the required action is applicable only when two units are fueled.In the two unit fueled condition a single failure (loss of a 4kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required action A.1 is met.Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE if the other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required action A.1 cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.B.1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perfoim the RHRSW heat removal fupction.However, the overall reliability is reduced because a single failure of the, OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

RHRSW System B 3.7.1 BASES ACTIONS continued)

I The requisite num e ubsyste pumps must be restored to OPERABLE s 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Ti'sed on the Comp e'mes provided for e-RH suppression pool cooling and spray n's..1 and D.2 p/gCRf 1 SURVEILLANCE REQUIREMENTS If the ItSht subsystems cannot be restored t P RABLE status within th associated Completio'mes, the unit must be placed in a NOD'ich the does not apply.To" achieve this status, the'st be placed in at least MODE 3 within 12-hour in 9 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The'llowed Complet'mes are reasona based on operating experienc o reach the required unit con'ns from full pow onditions in an orderly manner and withou allenging unit systems.SR'.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation,'nd ensures correct valve positions; BFN-UNIT 1 B 3.7-5 (continued)

Amendment 0 h I i I t 1

-Insert D With two RHRSW subsystems inoperablc, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.I With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within S hours.The 3 hour3.472222e-5 days 8.333333e-4 hours 4.960317e-6 weeks 1.1415e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.lWi th three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within 3 hours3.472222e-5 days 8.333333e-4 hours 4.960317e-6 weeks 1.1415e-6 months .The 3 hour3.472222e-5 days 8.333333e-4 hours 4.960317e-6 weeks 1.1415e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion

'imes, the unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1 BASES (continued)

REFERENCES 1.FSAR, Section 10.9.2.FSAR, Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3.2.

es+gn-Cmit~ia-BFN-56-+9&I~

4-NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.GE-NE-B13-01755-2, Revision 1, February 1996.BFN-UNIT 1 8 3.7-6 Amendment E

---N---ote------, The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .RHRSW System 3.7.1 3.7.1 Residual Heat Removal Service Mater (RHRSM)System LCO 3.7.1 NOTES Wit 1-or 2 units fueled, each subsys least one OPZRABL RHRSW pum s have at 2.With 3 units , two RHRS ubs.tems must have two P E RHRSM pumps.APPLICABILITY:

ACTIONS-Foun-IIHREtt-subsyet~tes-eh&1-be-BPERAHEE-.

Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below: 1.i unit fueled-four OPERABLE RHRSW pumps.2.2 units fueled-six OPERABLE RHRSW pumps.3.3 units fueled-eight OPERABLE RHRSW pumps.Enter ap cable-Con itions and Required Actions of LCO 4%~ua Heat Removal (RHR)Shutdown Coo i~yste-ot-Shutdo n, for RHR shutdown cooling made inoperable b RSW-Sy NDITION REQUIRED ACTION CO EBO~TI RE A.One RHRSM subsystem.

or A.l required pump inoperable.

es-RHRSW subsystem uired pump to OPERABLE status.30 days (continued)

Zn/SE/2y BFN-UNIT 2 3.7-1 Amendment 1,

Insert A CONDITION REQUIRED ACTION COMPLETION TIME Orie required RHRSW pump inoperable.

A..1--------Notes-------

1.Only applicable for the 2 units fueled condition.

Immediately 2.Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 fora 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .OR Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.30 days A.2 Restore required RHRSW pump to OPERABLE status.(continued)

RHRSW System 3.7.1 CONDITION REQUIRED ACTION COMPLETION TI B.Tw RHRSW subsystems inop able.B.l--------NOTE--------

Only applicable when two units are fueled.AND 8.2 Verify at least three OPERABLE RHRSW pumps are associated with two OPERABLE RHRSM subsystems.

NOTE-------

Only applicable when three unit are fueled.1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months AND zyB.3 Verj>y at least four RABLE RHRSW pumps ar associated with wo PERABLE RHRSW subsy tems.Restore one inoperable R gSW subsystem to 01 RABLE status.1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months 7 days C.Three or mor RHRSM subsystems inoperable.

OR Requi ed Action B.l or B.2 nd associated Co pletion Time not 5t.C.1 Restore the required RHRSW subsystems to OPERABLE status.8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months '(continued)

BFN-UNIT 2 3.7-2 Amendment II I 0:0 Insert B CONDITION REQUIRED ACTION COMPLETION TIME One RHRSW subsystem inoperable.

B.1------Note-------Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days Two required RHRSW pumps inoperable.

C.1 Restore one inoperable RHRSW pump to OPERABLE status 7 days Two RHRSW subsystems inoperable.

D.1------Note--------

Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days Three or more required RHRSW pumps inoperable Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Three or more RHRSW subsystems inoperable.

F.1--------Note--------

Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months (continued)

RHRSW System 3.7.1 COITION RE(UIRED ACTION~CONPL IO TINE D.Required Action A.l, B.3, or C.l and associated Completion Time not met.0.2 Be in OD Be in NODE 4.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FRE(UENCY SR 3.7.1.1 Verify each RHRSW manual and power operated valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.31 days CONDITION REQUIRED ACTION COMPLETION TIME G.Required Action and associated Completion Time not met.I G.1 Be in MODE 3.AND G.2 Be in MODE 4.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 36 hours BFN-UNIT 2 3 0 7 3 Amendment l 0 RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS B 3.7.1 Residual Heat Removal Service Water (RHRSW)System BASES 0 BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA)or transient.

The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One loop with one pump operating is capable of providing 50%of ,the required cooling capacity to maintain safe shutdown conditions for one unitiARe~g-a-design-bas~eeident

-.~owever~ne-pump-i.~<

pa~paoi4'y&o-mQnta4n-a-safe-shutdown-Gond4Men-for

-each-ef'-o~cc1de~Q4s As such a subsystem consists of a loop with one or two OPERAHLE~pump Aepende~po~e-

-number-of-fuelged-ups The RHRSW System is designed with sufficient redundancy so that no single active component.failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 (Ref.1)., a heat exchanger, a suction source, and associated valves, ,Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

piping and instrumentation.

IThe system is initiated manually from each of the three units control rooms.If operating during a loss of coolant-accident (LOCA)., the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core.The system can be manually started any time the d g d d 1 11 g tg clears, and is assumed to be manually started within 10 minutes after the LOCA.BFN-UNIT 2 B 3.7-1 (continued)

Amendment I L ,

RHRSW System B 3.7.1 APPLICABLE SAFETY ANALYSES The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively), These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA.The RHRSW flow assumed in the analyses is-4809-pm per pump with two pumps operating in one loop.In this as , the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 7)and 49.6 psig, respectively, well below the design temperature of 281'F aod maximum allowable pressure of 62 psig.Wbiams--a4so-bel ow-the-200-'F-1-imi4-imposed-by-Deign-Gr i teria--BFN-50-7064A-(Ref~)-for~1-1-pl ant-trans i ents-inv&v4n~RV-

-o peraVens The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).BFN-UNIT 2 B 3.7-2 (continued)

Amendment E

Additionally, since the RHRSW pumps are shared between the three RHRSW System BFN units, the number of OPERABLE pumps required is also B 3.7.1 dependent on the number of units fueled.BASES (continued)

LCO In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling for the fueled non-accident units.The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of ired RHRSW um s ma be'equ.p p reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in Mode 4 or 5 for over 24 , h APPLICABILITY Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the.system functions to remove post accident heat loads,-assuming the worst case single active failure occurs coincident with the loss of offsite power.An OPERABLE RHRSW subsystem consists ogg Sere-quirmdnu-mber of--ORERABLZ RH-R SW pumpme Pe nde nt-upon-@he-number

-of-um4s-fu&e~nd n OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rat.-The-LCO is-mode-fled-byWwo-Not,es Nate-I-spe ail'-i~~ha4

-whe~~rd~~Ae~here mu~e~4.~ne MRGNBLE-pump-per

-RHRS~ubsyMe~at~pem41a~hat-when-3-uni4;-s-are-fueled~wo-of

-the-RHRSW-subsystem~ust Mave-two-OPHNBLE

-RHRSW-pumps

)with at least one OPERABLE I RHRSWpumpinthefiowpath., J In MODES I, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")and decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of these systems.In MODES 4 and 5, the OPERABILITY requirements of the RHRSW.System are determined by the systems it supports.ACTIONS'e-Actions-are-modi-fied-by-a-Note-indicating-that-the-

~ppl1catAe-Condition~

LC(LXA~b~ntera~nbkequired

-AetAon~ken-i fiche-inoperabl.e-RHRSWmubsyMe~wsuW~n-.

~zopemtAe-RHRmhutdown-coal-ing~hi-s

-i.s-an-except1~n-to-

-LG0-3-.0A-and-ensures

-tahe-proper

-acth oner~ken-f~~hese-

~omponents (continued)

BFN-UNIT 2 B 3.7-3 Amendment

'J BASES Zn!SCPy'HRSW System B 3.7.1 ACTIONS (continued)

A.l'n D~within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completio Ti@es are reasonaEa~ased on operating experience

~each the required unit conNtions from full power~oefstions in an orderly manner and withou hrlTenging unit systems.SURVEILLANCE REQUIREMENTS SR 3.7.1.1 Verifying the correct'lignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

BFN-UNIT 2 B 3.7-5 (continued)

Amendment 0

Insert D With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.Tlie Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F,l I~Wi th three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unitmust be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1 BASES (continued)

REFERENCES 1.FSAR, Section 10.9.2.FSAR;Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3.2.

es-F9~Faerie-8 F&5~54~NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.GE-NE-B13-01755-2, Revision 1, February 1995.I BFN-UNIT 2 B 3.7-6 Amendment 0

1-Note-The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for a 24,hours.I~~3.7 PLANT SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System RHRSW System 3.7.1 LCO 3.7.1 1.2 units fueled, each subsystem least one DNB RHRSW pump.ave at 2.With 3 units , two RHRS bs-tems must have two E RHRSW pumps.APPLICABILITY:

ACTIONS-I~IIRSli~PKHABES-.

Four RHRSW subsystems shall be OPERABLE with the number , of OPERABLE pumps as listed below: MODES 1, 2, and 3 i.1 unitfueled-fourOPERABLERHRSWpumps.

2.2 units fueled-six OPERABLE RHRSW pumps.3.3 units fueled-eight OPERABLE RHRSW pumps.NOTE Enter applica e n~and Required Actions ,"Residual Heat Removal (RHR)Shutdown Coolin m-H utdown," for RHR shutdown cooling made inoperabl HRS ys em.CONDITION REQUIRED ACTION CONPL INE A.One RHRSW subsystem or required pump inoperable.

Res RSW s tern or required pump to P E status.30 days (Conti BFN-UNIT'3 3.7-1 Amendment JL~r../

Insert A CONDITION REQUIRED ACTION COMPLETION TIME One required RHRSW pump inoperable.

A..1--------Notes-------

1.Only applicable for the 2 units fueled condition.

Immediately 2.Only four RHRSW pumps powered from a separate 4kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for a 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .OR Verify 5 RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.30 days A.2 Restore required RHRSW pump to OPERABLE status.(continued) 0

/nP5c~)7 i RHRSW System 3.7.1 CONDITION RE(VIREO ACTION COMPLETION TINE B.o RHRSW subsystems in erable.B.I--------NOTE--------

Only applicable when two units are fueled.AND 8.2 Verify at least three OPERABLE RHRSW pumps are associated with two OPERABLE RHRSW subsystems.

NOTE-------

Only applica e when three unit are fueled.I h r Veri at least four BLE RHRSW pumps associated with wo ERABLE RHRSW subsy ems.I hour.3 Restore one inoperable RH W subsystem to OP BLE status;7 days C.Three or mo RHRSW subsystem inoperable.

OR Re ired Action B.l or B and associated ompletion Time not'et.C.1 Restore the required RHRSW subsystems to OPERABLE status.hours 0 BFN-UNIT 3 3.7-2 (continued)

Amendment

'IE J/

Insert B CONDITION REQUIRED ACTION COMPLETION TIME B.One RHRSW subsystem inoperable.

B..1-------Note-------

Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days Two required RHRSW pumps inoperable.

C.1 Restore one inoperable RHRSW pump to OPERABLE status 7 days D.Two RHRSW subsystems inoperable.

D.1-------Note-----

--Enter applicable conditions and Required actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days Three or more required RHRSW pumps inoperable E.1 Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Three or more RHRSW subsystems inoperable.

F.1-------Note-------Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW system.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months (continued)

RHRSW System 3.7.1 N DITION REQUIRED ACTION COMP TIME D.Required Action A.l, B.3, or C.l and associated Completion Time not met.Be in 9 N 0.2 Be in MODE 4.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.31 days CONDITION REQUIRED ACTION COMPLETION TIME G.Required Action and associated Completion Time not met.G.1 Be in MODE 3.AND G.2 Be in MODE 4.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 36 hours BFN-UNIT 3 3.7-3 Amendment ll\

RHRSW System B 3.7.1 8 3.7 PLANT SYSTEMS B 3.7.1 Residual Heat Removal Service Water (RHRSWJ System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA)or transient.

The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System..The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One'loop with one pump operating is capable of providing 50/of the required cooling capacity to maintain safe shutdown iiii f it.~.f f f'~~A f~9 v4dewn-eon n-for-each-t4-e-non-aaeiden4~+Q~

As such a subsystem consists of a.loop with one or two OPERABL pump 4ependene-open-the-The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 (Ref.1)., a heat exchanger, a suction , source,andassociatedvalves, Cooling water is pumped by the RHRSW pumps from the Wheeler'ipingandinstrumentation.,Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms.If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically.

power only that equipment necessary to reflood the core.The system can be manually started any time the degraded bus voltage signal'en-0Ir-clears, and is assumed to be manually started within 10 minutes after the LOCA.BFN-UNIT 3 B 3.7-1 (continued)

Amendment

.V RHRSW System 8 3.7.1 BASES (continued).

APPLICABLE SAFETY ANALYSES-%*Ma~5 5-byd~~edbdbydbddd-52~

5.2 The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively).

These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool.Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these analyses, manual initiation of the OPERABLE RHRSW subsystems

'arid the associated RHR System is assumed to occur 10 minutes af'ter a DBA.The RHRSW flow assumed in the analyses i m per pump with two pumps operating in one loop.In this as , the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 7)and 49.6 psig, respectively, well below the design temperature f 251'5 d 2 ll bl 5 2525 ib.~The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 6).BFN-UNIT 3 B 3.7-2 (continued)

Amendment

'

l Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also , dependent on the number of units fueled.BASES (continued)

RHRSW System B 3.7.1.LCO In addition to thc required number of OPERABLE subsystems, there'ust be an adequate number of pumps OPERABLE to provide'ooling for the fueled non-accident units.The number of required 0 P E RA B L E R H R S W j p u m p s , required is modified by a Note which specifies that the number o required RHRSW pumps may be reduced by one for each fueled uni that has been in MODE 4 or 5 fo over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note acknowledges thc fact that decay'eat removal requirements are substantially reduced for fueled e'AAMode4or5forover24 APPLICABILITY Four RHRSW subsystems are required to be OPERABLE to provide I the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power.An OPERABLE RHRSW subsystem consists o e-requ+red-.

number-of-OPERABLE-RHRSW-pumps-depende~

-upon-4he-number

-of-un+ts-fuAe~nd-b.n OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rate.bdd'PP'-~~.II A p~pdlkbbd"p PP~AHAII beO~Adb~kbp heo t~e-two-GPERABLE-RHRSW-pumps; with at least one OPERABLE RHRSW pump in the flow path.P In NODES I, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")and decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of these systems.In NODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.ACTIONS~e-Act-io~e-tnod-i-Aud-by-a-Note

-i+Nm4-kg-aha@-4he-

~ppl-i-cab~nd444e e-e~d-and-ReqAeed--AH'k'd-hb'AOAIHIISN b PO~p bodlkk-oed

<<o'-A'pl'~h~p e'k~~h-cempenents

-.(continued)

BFN-UNIT 3 B 3.7-3 Amendment 0)~N r'4/I RHRSM System B 3.7.1 BASES ACTIONS (continued)

Wi h one RHRSW subsystem or required pump inoperable, the ino qrable RHRSM subsystem or required pump must be resto ed to OP RABLE status within 30 days.With the unit in th'ondit'on, the remaining OPERABLE RHRSW subsystems are adequat to perform the RHRSW heat removal function.However, he overall reliability is reduced because single failure co ld result in reduced primary containmen cooling capability.

The 30 day Completion Time is based n the availability f equipment in excess of normal r undancy requirements a d the low probability of an eve occurring requiring RHRSW uring this period.B.I B.2 and B.3 Required Action B.l re uires verificat' that at least three OPERABLE RHRSW pu s are associ ted with the two OPERABLE RHRSW subsystems The Req red Action is modified by a Note indicating that e requ'd action is applicable only when two units are fue d.equired Action B.2 requires verification that at 1 st four OPERABLE RHRSW pumps are associated with the o OPERABLE RHRSM subsystems.

The Required Action is modifi d y a Note indicating that the required action is appl'ble only when three units are fueled.Required Action B.3 req res that wit two RHRSW subsystems inoperable, one inoper le RHRSM subsy tern be restored to OPERABLE status withi 7 days.With th unit(s)in this condition, the rema ing OPERABLE RHRSW s bsystems are adequate to perfo the RHRSW heat removal unction.However, the over 11 reliability is reduced ecause a single failure in the ERABLE RHRSW subsystems coul result in loss of RHRSW unction.The 7 day Completion Time is based on the redung nt RHRSW capabilities afforded by he OPERABLE, subsystems yhd the low probability of an event oc urring requiring HRSW during this period.C.1 Wi h three or more RHRSW subsystems inoperable, the RHRSW stem is not capable of performing its intended function.(continued)

BFN-UNIT 3 B 3.7-4 Amendment

Insert C A.1 and A.2 Required Action A.I requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.The Required Action is modified by two Notes.Note 1 indicates that the required action is applicable only when two units are fueled.In the two unit fueled condition a single failure (loss of a 4kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required action A.1 is met.Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE if the other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required action A.1 cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.B.1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

Insert C A.l and A.2 Required Action A.1 requires immediate verification that five RHRSW pumps powered from separate 4kV shutdown boards are OPERABLE.The Required Action is modified by two Notes.Not~ndicates that the required action is applicable only when two units are fueled.In the two unit fueled condition a single failure (loss of a kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of 6 OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps operable with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required action A.1 is met.Note 2 requires only four RHRSW pumps powered from separate 4kV shutdown boards to be OPERABLE if the other fueled unit has been in Mode 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required action A.1 cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.B.1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

'C.1 0 With two required RHRSW pumps inoperable the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.

RHRSW System B 3.7.1 BASES ACTIONS (continued)

The req'site number of subsystems and pumps must be restored OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The our Completion Ti is based on the Completion Ti provided for the RHR supp ssion pool cooling and s y functions.

D.l and 0.2/~EWE If the RHRSW subsystems can re'stored to OPERABLE status within the associ ed Compl ion Times, the unit must be placed in a MODE i which the LCO s not apply.To achieve this stat , the unit must be pl d in at least MODE 3 within ours and in MODE 4 within hours.The allowed Com tion Times are reasonable, based q operating experien , to reach the required unit conditions f om full power onditions in an orderly manner and without ch enging unit systems.t SURVEILLANCE

=RE(UIREMENTS SR 3.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or, valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The 31 day Frequency is based on engineering judgment, is-consistent with the procedural controls governing valve operation, and ensures correct valve positions.

.0 BFN-UNIT 3 B 3.7-5 (continued)

Amendment

/A e-Insert D With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 7 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.I With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

The Required action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR.shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.1 and G.2"If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

RHRSW System B 3.7.1*REFERENCES 1.FSAR, Section 10.9.2.FSAR, Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3,2.

esign-C r+Lv.~~BFN-58-N64A

-,Pnmary-Eontainmerrl-NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.GE-NE-B13-01755-2, Revision 1, February 1996.BFN-UNIT 3 B 3.7-6 Amendment y

ENCLOSURE 5 TENNESSEE VALLEY AUTHORITY BROWNS FERRY NUCLEAR PLANT (BFN)Units 1, 2, and 3 PROPOSED IMPROVED TECHNICAL SPECIFICATION (TS)CHANGE TS-395 REVISED-ITS I.AFFECTED PAGE LIST Unit 1-Pages 3.7-1 through-3, B3.7-1 through-8 Unit 2-Pages 3.7-1 through-3, B3.7-1 through-8 Unit 3-Pages 3.7-1 through-3, B3.7-1 through-8 I I.REVISED PAGES See attached.

RHRSW System 3.7.1 3.7 PLANT SYSTEHS 3.7.1 Residual Heat Removal Service Water (RHRSW)System LCO 3.7.1-NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in NODE 4 or 5 for>24 hours.Four RHRSW subsystems shall be OPERABLE with the'umber of OPERABLE pumps as listed below: 1.1 unit fueled-four OPERABLE RHRSW pumps.2.2 units fueled-six OPERABLE RHRSW pumps.3.3 units fueled-eight OPERABLE RHRSW pumps.APPLICABILITY:

NODES 1, 2, and 3.0 BFN-UNIT 1 3.7-1 Amendment*Rl

RHRSW System 3.7.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.One required RHRSW pump inoperable.

A.1-------NOTES-------

1.Only applicable for the 2 units fueled condition.

2.Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for>24 hours.OR Verify five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.Immediately A.2 Restore required RHRSW pump to OPERABLE status.30 days (continued) 0 BFN-UNIT 1, 3.7-2 Amendment*Rl

RHRSW System 3.7.1 e ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TIME B.One RHRSW subsystems inoperable.

B.1--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days C.Two required RHRSW pumps inoperable.

C.l Restore one inoperable RHRSW pump to OPERABLE status.7 days D.Two RHRSW subsystems inoperable.

D.l--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made , inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days (continued)

BFN-UNIT 1 317 3 Amendment*Rl

RHRSW System 3.7.1 t ACTIONS continued CONDITION RE(UI RED ACTION COMPLETION TINE E.Three or more required RHRSW pumps inoperable.

E.l Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months F.Three or more RHRSW subsystems inoperable.

F.l--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months G.Required Action and associated Completion Time not met.G.1 AND Be in NODE 3.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months G.2 Be in MODE 4.36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months BFN-UNIT 1 3.7-4 Amendment*Rl

RHRSW System 3.7.1 SURVEILLANCE RE(UIREHENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.31 days BFN-UNIT 1 3.7-5 Amendment*Rl

RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS B 3.7.1 Residual Heat Removal Service Water (RHRSW)System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA)or transient.

The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One loop with one pump operating is capable of providing 50%of the required cooling capacity to maintain safe shutdown conditions for one unit.As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation.

The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 (Ref.1).Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms.If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core, The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.(continued)

BFN-UNIT 1 B 3.7-1 Amendment*Rl I

RHRSW System B 3.7.1 APPLICABLE SAFETY ANALYSES The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively).

These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the.associated RHR System is assumed to occur 10 minutes after a DBA.The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop.In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6)and 49.6 psig, respectively, well below the design t'emperature of 281'F and maximum allowable pressure of 62 psig.The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).(continued)

BFN-UNIT 2 B 3.7-2 Amendment*Rl RHRSW System B 3.7.1 BASES (continued)

LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power." Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.An OPERABLE RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling for the fueled non-accident units.The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note acknowledges the fact that decay heat removal.requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")and decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of these systems.In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.(continued)

BFN-UNIT 1 B 3.7-3 Amendment*Rl

RHRSW System B 3.7.1 ACTIONS A.1 and A.2 Required Action A.l requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.The Required Action is modified by two notes.Note 1 indicates that the required action is applicable only when two units are fueled.In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required Action A.l is met.Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required Action A.1 cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.(continued)

BFN-UNIT 1 B 3.7-4 Amendment*Rl

RHRSW System B 3.7.1 I ACTIONS (continued)

B.1 With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.0 BFN-UNIT 1 B 3.7-5 (continued)

Amendment*Rl I I 4, h RHRSW System B 3.7.1 ACTIONS (continued)

D.1 With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem, results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.l With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.(continued)

BFN-UNIT I B 3.7-6 Amendment*Rl 1 0 RHRSW System B 3.7.1 I ACTIONS F.l (continued)

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the'nit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.t SURVEILLANCE REQUIREMENTS F SR 3.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.(continued)

BFN-UNIT I B 3.7-7 Amendment*Rl I~

RHRSW System B 3.7.1 SURVEILLANCE RE(UIRENENTS SR 3.7.1.1 (continued)

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1.FSAR, Section 10.9.2.FSAR, Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3.2.

5.NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.6.GE-NE-B13-01755-2, Revision 1, February 1996.BFN-UNIT 1 B 3.7-8 Amendment*Rl

RHRSW System 3.7.1 3.7 PLANT SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System LCO 3.7.1 NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for>24 hours.Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below:~1.1 unit fueled-four OPERABLE RHRSW pumps.2.2 units fueled-six OPERABLE RHRSW pumps.3.3 units fueled-eight OPERABLE RHRSW pumps.APPLICABILITY:

MODES 1, 2, and 3.BFN-UNIT 2 3.7-1 Amendment*Rl

RHRSW System 3.7.1 e ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.,One required RHRSW pump inoperable.

A.l-------NOTES-------

1.Only applicable for the 2 units fueled condition.

2.Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for>24 hours.OR Verify five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.Immediately.A.2 Restore required RHRSW pump to OPERABLE status.30 days (continued)

BFN-UNIT 2 3.7-2 Amendment*Rl h

RHRSW System 3.7.1 ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TINE B.One RHRSW subsystems inoperable.

8.1--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days C.Two required RHRSW C.1 Restore one pumps inoperable.

inoperable RHRSW pump to OPERABLE status.7 days D.Two RHRSW subsystems inoperable.

0;1--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days (continued)

BFN-UNIT 2 3'3 Amendment*Rl IV RHRSW System 3.7.1 ACTIONS continued CONDITION REQUIRED ACTION COMPLETION TIME E.Three or more required RHRSW pumps inoperable.

E.1 Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months F.Three or more RHRSW subsystems inoperable.

F.1--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months G.Required Action and associated Completion Time not met.G.l AND Be in MODE 3.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months G.2 Be in MODE 4.36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months BFN-UNIT 2 3.7-4 Amendment*Rl f R'1 t RHRSW System 3.7.1 SURVEILLANCE REgUIRBlENTS SURVEILLANCE FRE(UENCY SR 3.7.1.1 Verify each RHRSW manual and power operated valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.31 daysBFN-UNIT 2 3.7-5 Amendment*Rl

RHRSW System 8 3.7.1 B 3.7 PLANT SYSTEMS B 3.7.1 Residual Meat Removal Service Water (RHRSW)System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe reactor shutdown following a Design Basis Accident (DBA)or transient.

The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One loop with one pump operating is capable of providing 50%of the required cooling capacity to maintain safe shutdown conditions for one unit.As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation.

The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 (Ref.1).Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms.If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core.The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.(continued)

BFN-UNIT 2 B 3.7-1 Amendment*Rl 6 I'V RHRSW System B 3.7.1 BASES (continued)

APPLICABLE SAFETY ANALYSES The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively).

These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA.The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop.In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6)and 49.6 psig, respectively, well below the design temperature of 281'F and maximum allowable pressure of 62 psig.The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).(continued)

BFN-UNIT 1 B 3.7-2 Amendment*Rl RHRSW System B 3.7.1 LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power.Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.An OPERABLE RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling fo}the fueled non-accident units.The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")and decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of these systems.In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.(continued)

BFN-UNIT 2 B 3.7-3 Amendment*Rl 5~1 I II RHRSW System B 3.7.1 BASES (continued)

I ACTIONS A.l and A.2 Required Action A.1 requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.The Required Action is modified by two notes.Note 1 indicates that the required action is applicable only when two units are fueled.In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required Action A.l is met.Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required Action A.1 cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With thei unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.(continued)

BFN-UNIT 2 B 3.7-4 Amendment*Rl RHRSW System 8 3.7.1 BASES I ACTIONS (continued)

B.l With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required'RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.(continued)

BFN-UNIT 2 B 3.7-5 Amendment*Rl

~1 A J RHRSW System B 3.7.1 BASES ACTIONS (continued)

D.l With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.'he seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.1 With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.(continued)

BFN-UNIT 2 8 3.7-6 , Amendment*Rl k II RHRSW System B 3.7.1 BASES I ACTIONS F.1 (continued) 4 The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.t SURVEILLANCE RE(UIREMENTS SR 3.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.(continued)

BFN-UNIT 2 B 3.7-7 Amendment*Rl N'1,f, RHRSW System B 3.7.1 BASES SURVEILLANCE RE(UIREHENTS SR 3.7.1.1 (continued)

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1.FSAR, Section 10.9.2.FSAR, Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3.2.

5.NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.6.GE-NE-B13-01755-2, Revision 1, February 1996.BFN-UNIT 2 B 3.7-8 Amendment*Rl RHRSW System 3.7.1~~3.7 PLANT SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System LCO 3.7.1 NOTES The number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for>24 hours.Four RHRSW subsystems shall be OPERABLE with the number of OPERABLE pumps as listed below: 1.1 unit fueled-four OPERABLE RHRSW pumps.2.2 units fueled-six OPERABLE RHRSW pumps.3.3 units fueled-eight OPERABLE RHRSW pumps.APPLICABILITY:

MODES 1, 2, and 3.0 BFN-UNIT 3 3.7-1 Amendment*Rl l ,!c4 I Cl P y3 RHRSW System 3.7.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.One required RHRSW pump inoperable.

A.1--------NOTES--------

1.Only applicable for the 2 units fueled condition.

2.Only four RHRSW pumps powered from a separate 4 kV shutdown board are required to be OPERABLE if the other fueled unit has been in MODE 4 or 5 for>24 hours.OR Verify five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.Immediately A.2 Restore required RHRSW pump to OPERABLE status.30 days (continued)

BFN-UNIT 3 3.7-2 Amendment*Rl

RHRSW System 3.7.1 e ACTIONS continued CONDITION REQUIRED ACTION COHPLETION TIME B.One RHRSW subsystems inoperable.

B.1--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling-Hot Shutdown," for RHR shutdown cooling made inoperable by the RHRSW system.Restore RHRSW subsystem to OPERABLE status.30 days C.Two required RHRSW C.1 pumps inoperable.

Restore one inoperable RHRSW pump to OPERABLE status.7 days D.Two RHRSW subsystems inoperable.

D.l--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7, for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.7 days (continued)

BFN-UNIT 3 3.7-3 Amendment*Rl

'III*f~a RHRSW System 3.7.1 ACTIONS continued CONDITION RE(UIRED ACTION COMPLETION TIME E.Three or more required RHRSW pumps inoperable.

E.1 Restore one RHRSW pump to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months F.Three or more RHRSW subsystems inoperable.

F.l--------NOTE--------

Enter applicable Conditions and Required Actions of LCO 3.4.7 for RHR shutdown cooling made inoperable by the RHRSW System.Restore one RHRSW subsystem to OPERABLE status.8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months G.Required Action and associated Completion Time not met.G.1 AND G.2 Be in MODE 3.Be in MODE 4.12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 36 hoursBFN-UNIT 3 3.7-4 Amendment*Rl 0

RHRSW System 3.7.1 t SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual and power operated valve in the flow path, that is not locked, sealed, or otherwise secured in position, is in the correct position or can be aligned to the correct position.31 days BFN-UNIT 3 3.7-5 Amendment*Rl

RHRSW System B 3.7.1 B 3.7 PLANT SYSTEMS C B 3.7.1 Residual Heat Removal Service Water (RHRSW)System BASES BACKGROUND The RHRSW System is designed to provide cooling water for the Residual Heat Removal (RHR)System heat exchangers, required for a safe r eactor shutdown following a Design Basis Accident (DBA)or transient.

The RHRSW System is operated whenever the RHR heat exchangers are required to operate in the shutdown cooling mode or in the suppression pool cooling or spray mode of the RHR System.The RHRSW System is common to the three BFN units and consists of four independent and redundant loops, each of which feeds one RHR heat exchanger in each unit.Each loop is made up of a header, two 4500 gpm pumps, a suction source, valves, piping, and associated instrumentation.

One loop with one pump operating is capable of providing 50%of the required cooling capacity to maintain safe shutdown conditions for one unit.As such, a subsystem consists of a loop with one or two OPERABLE pumps, a heat exchanger, a suction source, and associated valves, piping and instrumentation.

The RHRSW System is designed with sufficient redundancy so that no single active component failure can prevent it from achieving its design function.The RHRSW System is described in the FSAR, Section 10.9 (Ref.1).Cooling water is pumped by the RHRSW pumps from the Wheeler Reservoir through the tube side of the RHR heat exchangers, and discharged back to the Wheeler Reservoir.

The system is initiated manually from each of the three units control rooms.If operating during a loss of coolant accident (LOCA), the system is automatically tripped on degraded bus voltage to allow the diesel generators to automatically power only that equipment necessary to reflood the core.The system can be manually started any time the degraded bus voltage signal clears, and is assumed to be manually started within 10 minutes after the LOCA.(continued)

BFN-UNIT 3 B 3.7-1 Amendment*Rl

~-4 0 0 RHRSW System B 3.7.1 BASES (continued)

APPLICABLE SAFETY ANALYSES The RHRSW System removes heat from the suppression pool to limit the suppression pool temperature and primary containment pressure following a LOCA.This ensures that the primary containment can perform its function of limiting the release of radioactive materials to the environment following a LOCA.The ability of the RHRSW System to support long term cooling of the reactor or primary containment is discussed in the FSAR, Chapters 5 and 14 (Refs.2 and 3, respectively).

These analyses explicitly assume that the RHRSW System will provide adequate cooling support to the equipment required for safe shutdown.These analyses include the evaluation of the long term primary containment response after a design basis LOCA.The safety analyses for long term cooling were performed for various combinations of RHR System failures and considers the number of units fueled.With one unit fueled, the worst case single failure that would affect the performance of the RHRSW System is any failure that would disable two subsystems or pumps of the RHRSW System (e.g, the failure of an RHR Suppression Pool Cooling/Spray return line valve which effectively disables two RHRSW subsystems or pumps).With two and three units fueled, a worst case single failure could also include the loss of two RHRSW pumps caused by losing a 4 kV shutdown board since there are certain alignment configurations that allow two RHRSW pumps to be powered from the same 4 kV shutdown board.As discussed in the FSAR, Section 14.6.3.3.2 (Ref.4)for these analyses, manual initiation of the OPERABLE RHRSW subsystems and the associated RHR System is assumed to occur 10 minutes after a DBA.The RHRSW flow assumed in the analyses is 4000 gpm per pump with two pumps operating in one loop.In this case, the maximum suppression chamber water temperature and pressure are 177'F (as reported in Reference 6)and 49.6 psig, respectively, well below the design temperature of 281'F and maximum allowable pressure of 62 psig.The RHRSW System satisfies Criterion 3 of the NRC Policy Statement (Ref 5).(continued)

BFN-UNIT 3 B 3.7-2 Amendment*Rl f t f RHRSW System B 3.7.1 LCO Four RHRSW subsystems are required to be OPERABLE to provide the required redundancy to ensure that the system functions to remove post accident heat loads, assuming the worst case single active failure occurs coincident with the loss of offsite power.Additionally, since the RHRSW pumps are shared between the three BFN units, the number of OPERABLE pumps required is also dependent on the number of units fueled.An OPERABLE'RHRSW subsystem consists of an OPERABLE flow path capable of taking suction from the intake structure and transferring, the water to the required RHR heat exchangers at the assumed flow rate with at least one OPERABLE RHRSW pump in the flow path.In addition to the required number of OPERABLE subsystems, there must be an adequate number of pumps OPERABLE to provide cooling for the fueled non-accident units.The number of required OPERABLE RHRSW pumps required is modified by a Note which specifies that the number of required RHRSW pumps may be reduced by one for each fueled unit that has been in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This Note acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in MODE 4 or 5 for over 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .APPLICABILITY In MODES 1, 2, and 3, the RHRSW System is required to be OPERABLE to support the OPERABILITY of the RHR System for primary containment cooling (LCO 3.6.2.3,"Residual Heat Removal (RHR)Suppression Pool Cooling," and LCO 3.6.2.4,"Residual Heat Removal (RHR)Suppression Pool Spray")and decay heat removal (LCO 3.4.7,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown").The Applicability is therefore consistent with the requirements of these systems.In MODES 4 and 5, the OPERABILITY requirements of the RHRSW System are determined by the systems it supports.(continued)

BFN-UNIT 3 B 3.7-3 Amendment*Rl N~

RHRSW System B 3.7.1 BASES (continued)

I ACTIONS A.l and A.2 Required Action A.1 requires immediate verification that five RHRSW pumps powered from separate 4 kV shutdown boards are OPERABLE.The Required Action is modified by two notes.Note I indicates that the required action is applicable only when two units are fueled.In the two unit fueled condition, a single failure (loss of a 4 kV shutdown board)could result in inadequate RHRSW pumps if two pumps are powered from the same power supply.This corresponds to the LCO requirement of six OPERABLE pumps when two units are fueled, which still provides the minimum required four RHRSW pumps with the worst case single failure.If five RHRSW pumps are powered from separate 4 kV shutdown boards, then no postulated single active failure could occur to prevent the RHRSW system from performing its design function.This is equivalent to any six RHRSW pumps OPERABLE with a maximum of two sets of two pumps allowed to be powered from the same power supply.Operation can continue indefinitely if Required Action A.l is met.Note 2 requires only four RHRSW pumps powered from separate 4 kV shutdown boards to be OPERABLE if the other fueled unit has been in NODE 4 or 5 greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .This acknowledges the fact that decay heat removal requirements are substantially reduced for fueled units in NODE 4 or 5 for greater than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .If Required Action A.l cannot be met, then Required Action A.2 must be complied with.With one RHRSW pump inoperable, the inoperable RHRSW pump must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.(continued)

BFN-UNIT 3 B 3.7-4 Amendment*Rl RHRSW System B 3.7.1 BASES I ACTIONS (continued)

B.l With one RHRSW subsystem inoperable, the inoperable RHRSW subsystem must be restored to OPERABLE status within 30 days.With the unit in this condition, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The 30 day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.,The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

C.1 With two required RHRSW pumps inoperable, the remaining RHRSW pumps are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure of the OPERABLE RHRSW pumps could result in a loss of RHRSW function.The seven day Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE RHRSW pumps and the low probability of an event occurring during this period.BFN-UNIT 3 B 3.7-5 (continued)

Amendment*Rl

'I 8 P'~~

RHRSW System B 3.7.1 ACTIONS (continued) 0.1 With two RHRSW subsystems inoperable, the remaining OPERABLE RHRSW subsystems are adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure could result in reduced primary containment cooling capability.

The seven day Completion Time is based on the availability of equipment in excess of normal redundancy requirements and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an.exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

E.l With three or more required RHRSW pumps inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of pumps must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the.RHR suppression pool cooling and spray functions.

F.l With three or more required RHRSW subsystems inoperable, the RHRSW System is not capable of performing its intended function.The requisite number of subsystems must be restored to OPERABLE status within eight hours.The eight hour Completion Time is based on the Completion Times provided for the RHR suppression pool cooling and spray functions.(continued)

BFN-UNIT 3 B 3.7-6 Amendment*Rl RHRSW System B 3.7.1 ACTIONS F.1 (continued)

The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.7 be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable RHR shutdown cooling.This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.

G.l and G.2 If the RHRSW subsystems cannot be restored to OPERABLE status within the associated Completion Times, the unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and in MODE 4 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months .The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.t SURVEILLANCE REQUIREMENTS SR 3.7.1.1 Verifying the correct alignment for each manual and power operated valve in each RHRSW subsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation.

This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather,,it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.BFN-UNIT 3 8 3.7-7 (continued)

Amendment*Rl W

RHRSW System B 3.7.1 BASES SURVEILLANCE RE(UIREHENTS SR 3.7.1.1 (continued)

The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions.

REFERENCES 1.FSAR, Section 10.9.2.FSAR, Chapter 5.3.FSAR, Chapter 14.4.FSAR, Section 14.6.3.3.2.

5.NRC No.93-102,"Final Policy Statement on Technical Specification Improvements," July 23, 1993.6.GE-NE-B13-01755-2, Revision 1, February 1996.BFN-UNIT 3 B 3.7-8 Amendment*Rl J i 0,

ML18039A222

Text

Navigation menu

Search