ML18153C061

Proposed Tech Specs,Upgrading Portions of Sections 3.0 & 4.0,per Generic Ltr 87-09,restricting Changing of Operational Conditions While in Limiting Conditions for Operation & Allowing Entry Into Action Statement

ML18153C061
Person / Time
Site:	Surry
Issue date:	01/09/1990
From:	VIRGINIA POWER (VIRGINIA ELECTRIC & POWER CO.)
To:
Shared Package
ML18153C060	List: ML18153C059 ML18153C061
References
GL-87-09, GL-87-9, NUDOCS 9001180273
Download: ML18153C061 (23)

Text

• ATTACHMENT 1 PROPOSED TECHNICAL SPECIFICATION CHANGES '?00118027::::

900109 -~ PDR ADOCK 05000280 P PDC *

• TS 3.0-1 3.0 LIMITING CONDITIONS FOR OPERATION 3.0.1 In the event a Limiting Condition for Operation and/or associated modified requirements cannot be satisfied because of circumstances in excess of those addressed in the specification, the unit shall be placed in at least hot shutdown within six hours and in at least cold shutdown within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> unless corrective measures are completed that permit operation under the permissible action statements for the specified time interval as measured from initial discovery or until the reactor is placed in a condition in which the specification is not applicable.

Exceptions to these requirements shall be stated in the individual specifications.

3.0.2 When a system, subsystem, train, component or device is determined to be inoperable solely because its emergency power source is inoperable, or solely because its normal power source is inoperable, it may be considered operable for the purpose of satisfying the requirements of its applicable Limiting Condition for Operation, provided:

(1) its corresponding normal or emergency power source is operable; and (2) all of its redundant system(s), subsystem(s}, train(s), component(s) and device(s) are operable, or likewise satisfy the requirements of this specification.

Unless both conditions (1) I I __J BASIS *

• TS 3.0-2 and (2) are satisfied, the unit shall be placed in at least hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in at least cold shutdown within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. This specification is not applicable in cold shutdown or refueling shutdown conditions.

3.0.3 Entry

into an operational condition shall not be made when the conditions for the Limiting Conditions for Operation are not met and the associated action statement requires a shutdown if they are not met within a specified time interval.

Entry into an operational condition may be made in accordance with action statement requirements when conformance to them permits continued operation of the facility for an unlimited period of time. This provision shall not prevent passage through or to operational conditions as required to comply with action statement requirements.

Exceptions to these requirements are stated in the individual specifications.

3.0.1 This specification delineates the action to be taken for circumstances not directly provided for in the action statements and whose occurrence would violate the intent of the specification.

For example, Specification

3.3 requires

each Reactor Coolant System accumulator to be operable and provides explicit action requirements if one accumulator is inoperable.

Under the terms of Specification 3.0.1, if more than one accumulator is inoperable, the unit is required to be in at least hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. As a further example, Specification

3.4 requires

two Containment Spray Subsystems to be operable and provides

• TS 3.0-3 explicit action requirements if one spray system is inoperable.

Under the terms of Specification 3.0.1, if both of the required Containment Spray Subsystems are inoperable, the unit is required to be in at least hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in at least cold shutdown in the next 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. It is assumed that the unit is brought to the required condition within the required times by promptly initiating and carrying out the appropriate action. 3.0.2 This specification delineates what additional conditions must be satisfied to permit operation to continue, consistent with the actions for power sources, when a normal operable.

It specifically prohibits or emergency power source is not operation when one division is inoperable because its normal or emergency power source is inoperable and a system, subsystem, train, component or device in another division is inoperable for another reason. The provisions of this specification permit the action statements associated with individual systems, subsystems, trains, components and devices to be consistent with the action statements of the associated electrical power source. It allows operation to be governed by the time limits of the action statement associated with the Limiting Condition for Operation for the normal or emergency power source, not the individual action statements for each system, subsystem, train, component or device that is determined to be inoperable solely because of the inoperability of its normal or emergency power source. For example, Specification 3.16 requires in part that two emergency diesel generators be operable.

The action statement provides for L

• TS 3.0-4 out-of-service time when one emergency diesel generator is not operable.

If the definition of operable were applied without consideration of Specification 3.0.2, all systems, subsystems, trains, components and devices supplied by the inoperable emergency power source would also be inoperable.

This would dictate invoking the applicable action statements for each of the applicable Limiting Conditions for Operation.

However, the provisions of Specification

3.0.2 permit

the time limits for continued operation to be consistent with the action statement for the inoperable emergency diesel generator instead, provided the other specified conditions are satisfied.

In this case, this would mean that the corresponding normal power source must be operable, and all redundant systems, subsystems, trains, components and devices must be operable, or otherwise satisfy Specification 3.0.2 (i.e, be capable of performing their design function and have at least one normal or one emergency power source operable).

If they are not satisfied, shutdown is required in accordance with this specification.

As a further example, Specification 3.16 requires in part that two physically independent circuits between the off site transmission network and the on site Class IE distribution system be operable.

The action statement provides out-of-service time when one required offsite circuit is not operable.

If the definition of operable were applied without consideration of Specification 3.0.2, all systems, subsystems, trains, components and devices supplied by the inoperable normal power source, one of the offsite circuits, would be inoperable.

This would dictate invoking the applicable action statements for each of the applicable LCOs. However, the provisions of Specification

3.0.2 permit

the time limits for continued operation to be consistent with the action

• TS 3.0-5 statement for the inoperable normal power source instead, provided the other specified conditions are satisfied.

In this case, this would mean that for one division the emergency power source must be operable (as must be the components supplied by the emergency power source) and all redundant system, subsystems, trains, components and devices in the other division must be operable, or likewise satisfy Specification 3.0.2 (i.e., be capable of performing their design functions and have an emergency power source operable).

In other words, both emergency power sources must be operable and all redundant systems, subsystems, trains, components and devices in both divisions must also be operable.

If these conditions are not satisfied, shutdown is required in accordance with this specification.

In cold shutdown or refueling shutdown conditions, Specification 3.0.2 is not applicable, and thus the individual action statements for each applicable Limiting Condition for Operation in these conditions must be adhered to. 3.0.3 This specification establishes limitations on condition changes when a Limiting Condition for Operation is not met. It precludes placing the facility in a higher condition of operation when the requirements for a Limiting Condition for Operation are not met and continued noncompliance to these conditions would result in a shutdown to comply with the action statement requirements if a change in condition were permitted.

The purpose of this specification is to ensure that facility operation is not initiated or that higher conditions of operation are not entered when corrective action is being taken to obtain compliance with a specification by restoring equipment to operable status or parameters to

• TS 3.0-6 specified limits. Compliance with action statement requirements that permit continued operation of the facility for an unlimited period of time provides an acceptable level of safety for continued operation without regard to the status of the plant before or after a condition change. Therefore, in this case, entry into an operational condition may be made in accordance with the provisions of the action statement requirements.

The provisions of this specification should not, however, be interpreted as endorsing the failure to exercise good practice in restoring systems or components to operable status before plant startup. When a shutdown is required to comply with action statement requirements, the provisions of Specification 3.0.3 do not apply because they would delay placing the facility in a lower condition of operation.

• TS 4.0-1 4.0 SURVEILLANCE REQUIREMENTS

4.0.1 Surveillance

Requirements provide for testing, calibrating, or inspecting those systems or components which are required to assure that operation of the units or the station will be as prescribed in the preceding sections.

4.0.2 Surveillance

Requirement specified time intervals may be adjusted plus or minus 25 percent to accommodate normal test schedules.

4.0.3 Failure

to perform a surveillance requirement within the allowed surveillance interval, defined by Specification 4.0.2, shall constitute noncompliance with the operability requirements for a Limiting Condition for Operation.

The time limits of the action statement requirements are applicable at the time it is identified that a surveillance requirement has not been performed.

The action statement requirements may be delayed for up to 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> to permit the completion of the surveillance when the allowable outage time limits of the action statement requirements are less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. Surveillance requirements do not have to be performed on inoperable equipment.

4.0.4 Entry

into an operational condition shall not be made unless the surveillance requirement(s) associated with a Limiting Condition of Operation has been performed within the stated surveillance interval or as otherwise specified.

This provision shall not

• TS 4.0-2 prevent passage through or to operational conditions as required to comply with action statement requirements.

4.0.5 Surveillance

Requirements for inservice inspection and testing of ASME Code Class 1, 2, and 3 components shall be applicable as follows: a. Inservice inspection of ASME Code Class 1, 2, and 3 components and inservice testing of ASME Code Class 1, 2, and 3 pumps and valves shall be performed in accordance with Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda as required by 10 CFR 50, Section 50.55a(g), except where specific written relief has been granted by the Commission pursuant to 10 CFR 50, Section 50.55a(g)(6)(i).

b. Surveillance intervals specified in Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda for the inservice inspection and testing activities required by the ASME Boiler and Pressure Vessel Code and applicable Addenda shall be applicable as follows in these Technical Specifications:

• TS 4.0-3 ASME Boiler and Pressure Vessel Code and Applicable Required Frequencies Addenda Terminology for for Performing Inservice Inspection and Inservice Inspection Testing Activities and Testing Activities Monthly At least once per 31 days Quarterly or Every 3 months At least once per 92 days Cold Shutdown At 1 east once per CSD Refueling Shutdown At least once per RSD c. The provisions of Specification 4.0.2 are applicable to the above required frequencies for pump and valve testing only. Extensions for inservice inspection of components will be to the requirements of Section XI of the ASME Boiler and Pressure Vessel Code. d. Performance of the above inservice inspection and testing activities shall be in addition to other specified Surveillance Requirements.

e. Nothing in the ASME Boiler and Pressure Vessel Code shall be construed to supersede the requirements of any Technical Specification.

• TS 4.0-4 BASES 4.0.1 This specification provides that surveillance activities necessary to ensure the Limiting Conditions for Operation are met and will be performed during all operating conditions for which the Limiting Conditions for Operation are applicable.

4.0.2 The provisions of this specification provide allowable tolerances for performing surveillance activities beyond those specified in the nominal surveillance interval.

These tolerances are necessary to provide operational flexibility because of scheduling and performance considerations.

The phrase 11 at l east 11 associated with a survei 11 ance frequency does not negate this allowable tolerance value and permits the performance of more frequent surveillance activities.

4.0.3 This specification establishes the failure to perform a Surveillance Requirement within the allowed surveillance interval, defined by the provisions of Specification 4.0.2, as a condition that constitutes a failure to meet the operability requirements for a Limiting Condition for Operation.

Under the provisions of this specification, systems and components are assumed to be operable when surveillance requirements have been satisfactorily performed within the specified time interval.

However, nothing in this provision is to be construed as implying that systems or components are operable when they are found or known to be inoperable although still meeting the surveillance requirements.

This specification also clarifies that the action statement requirements are applicable when Surveillance Requirements have not been completed within the allowed surveillance interval and that the time limits of the action

• TS 4.0-5 statement requirements apply from the point in time it is identified that a surveillance has not been performed and not at the time that the allowed surveillance interval was exceeded.

Completion of the surveillance requirement within the allowable outage time limits of the action statement requirements restores compliance with the requirements of Specification 4.0.3. However, this does not negate the fact that the failure to have performed the surveillance within the allowed surveillance interval, defined by the provisions of Specification 4.0.2, was a violation of the operability requirements of a Limiting Condition for Operation.

Further, the failure to perform a surveillance within the provisions of Specification 4.0.2 is a violation of a Technical Specification requirement and is, therefore, a reportable event under the requirements of IOCFR50.73(a)(2)(i)(B) because it is a condition prohibited by the plant 1 s Technical Specifications.

If the allowable outage time limits of the action statement requirements are less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or a shutdown is required to comply with action statement requirements, e.g., Specification 3.0.1, a 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> allowance is provided to permit a delay in implementing the action statement requirements.

This provides an adequate time limit to complete surveillance requirements that have not been performed.

The purpose of this allowance is to permit the completion of a surveillance before a shutdown is required to comply with action statement requirements or before other remedial measures would be required that may preclude completion of a surveillance.

The basis for this allowance includes consideration for plant conditions, adequate planning, availability of personnel, the time required to perform the surveillance, and the safety significance of the delay in completing the required surveillance.

This

• TS 4.0-6 provision also provides a time limit for the completion of surveillance requirements that become applicable as a consequence of condition changes imposed by action statement requirements and for completing surveillance requirements that are applicable when an exception to the requirements of Specification 4.0.4 is allowed. If a surveillance is not completed within the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> allowance, the time limits of the action statement requirements are applicable at that time. When a surveillance is performed within the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> allowance and the surveillance requirements are not met, the time limits of the action statement requirements are applicable at the time that the surveillance is terminated.

Surveillance requirements do not have to be performed on inoperable equipment because the action statement requirements define the remedial measures that apply. However, the surveillance requirements have to be met to demonstrate that inoperable equipment has been restored to operable status. 4.0.4 This specification establishes the requirement that all applicable surveillances must be met before entry into an operational condition specified in the applicability statement.

The purpose of this specification is to ensure that system and component operability requirements or parameter limits are met before entry into a condition for which these systems and components ensure safe operation of the facility.

This provision applies to changes in operational conditions associated with plant shutdown as well as startup.

4.0.5 *

• TS 4.0-7 Under the provisions of this specification, the applicable surveillance requirements must be performed within the specified surveillance interval to ensure that the Limiting Conditions for Operation are met during initial plant startup or following a plant outage. When a shutdown is required to comply with action statement requirements, the provisions of Specification 4.0.4 do not apply because this would delay placing the facility in a lower condition of operation.

This specification ensures replacements of ASME Code testing of ASME Code Class that inservice inspection, repairs, and Class 1, 2, and 3 components and inservice 1, 2, and 3 pumps and valves will be performed in accordance with a periodically updated version of Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda as required by 10 CFR 50, Section 50.55a. Specific relief from portions of the above requirements has been provided in writing by the Commission and is not a part of these Technical Specifications.

This specification includes a clarification of the frequencies for performing the inservice inspection and testing activities required by Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda. This clarification is provided to ensure consistency in surveillance intervals throughout these Technical Specifications and to remove any ambiguities relative to the frequencies for performing the required inservice inspection and testing activities.

Under the terms of this specification, the more restrictive requirements of the Technical Specifications take precedence over the ASME Boiler and ~I

• TS 4.0-8 Pressure Vessel Code and applicable Addenda. For example, the Technical Specification definition of operable does not grant a grace period before a device that is not capable of performing its specified function is declared inoperable and takes precedence over the ASME Boiler and Pressure Vessel Code provisions which allows a valve to be incapable of performing its specified function for up to 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> before being declared inoperable.

• ATTACHMENT 2 \ DISCUSSION AND SIGNIFICANT HAZARDS CONSIDERATION EVALUATION

• DISCUSSION The proposed changes detailed in the "Description of Changes" upgrade portions of Sections 3.0 and 4.0 of the Surry Power Station Technical Specifications (TS). These changes incorporate conclusions reached in Generic Letter 87-09, "Sections 3.0 and 4.0 of the Standard Technical Specifications (STS) on the Applicability of Limiting Conditions for Operation and Surveillance Requirements".

The Staff has previously evaluated these changes to achieve consistency in the generic letter and determined that the modifications will result in improved technical specifications.

Standard Technical Specifications are not in use at Surry; therefore, only Sections 3.0.4 (renumbered 3.0.3), 4.0.3, and 4.0.4 of the Generic Letter were incorporated.

Limiting Conditions for Operation (LCO) -3.0.3 TS Section 3.0, "Limiting Conditions for Operation", is silent on the subject of condition changes when the requirements for an LCO are not met. Inclusion of the requirements of the Generic Letter establishes more conservative operating conditions by assuring that operation is not initiated or that higher conditions of operation are not entered when corrective action is being taken to obtain compliance with a specification.

This restriction on changing operational status applies only where the action statement establishes a specified time interval in which the LCO must be met or a shutdown of the affected unit would be required.

For a LCO that has an action statement permitting continued operation for an unlimited period of time, entry into an operational condition may be made. I of 7

• Surveillance Requirements -4.0.3 TS Section 4.0, "Surveillance Requirements", is silent on the consequences of failure to perform surveillance requirements within the allowed surveillance interval.

Specifying the operability requirements and time limit applicability serves to clarify the intent of the specification.

Revised TS 4.0.3 also permits delaying the requirement of an action statement for up to 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> to permit the completion of a missed surveillance when the allowable outage time limits of the action statement are less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or require a shutdown.

As discussed in the Generic Letter~ it is overly conservative to assume that systems or components are immediately inoperable because a surveillance requirement has not been performed.

Generally, the opposite is in fact the case. The vast majority of surveillances confirm that the tested system or component is within requirements and operable.

When a surveillance is missed, it is this positive verification of operability that has not been confirmed by the performance of the required surveillance.

Because the allowable outage time limits of some action statements do not provide an appropriate time limit for performing a missed surveillance before shutdown requirements may apply, the TS should include a time limit that would allow a delay of the required actions to permit the performance of the missed surveillance.

This time limit should be based on considerations of plant conditions, adequate planning, availability of personnel, the time required to perform the surveillance, as well as the safety significance of the delay in completion of the surveillance.

Generic Letter 87-09 states that, based on these considerations, 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is an acceptable time limit for completing a missed 2 of 7

• surveillance when the allowable outage times of the action statements are less than this time limit or when shutdown action statements apply. The Generic Letter concludes that the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> time limit adequately balances the risks associated with an allowance for completing the surveillance within this period against the risks associated with the potential for a plant upset and challenge to safety systems when the alternative is a shutdown to comply with action statements before the surveillance can be completed.

Surveillance Requirements -4.0.4 TS Section 4.0, 11 Surveillance Requirements 11 , is silent on the requirement to perform surveillance requirements associated with an LCO prior to entering into an operational condition.

Specifying these requirements serves to clarify the intent of the specification.

Also included in the specification is the provision which allows passage through or to operational conditions as required to comply with action statement requirements.

As discussed in the generic letter, the potential for a plant upset and challenge to safety systems may be heightened*

if surveillances are performed during actions to initiate a shutdown in order to comply with action statement requirements.

It is not the intent of Specification 4.0.4 to prevent passage through or to operational conditions to comply with action statement requirements and it should not apply when condition changes are imposed by action statement requirements.

3 of 7

., 0 *

• No Significant Hazards Consideration The standards used to arrive at a determination that a request for amendment involves no significant hazards consideration are included in the Commission's regulations, 10 CFR 50.92, which states that no significant hazards considerations are involved if the operation of the facility in accordance with the proposed amendment would not (1) involve a significant increase in the probability or consequences of an accident previously evaluated; or (2) create the possibility of a new or different kind of accident from any accident previously evaluated or (3) involve a significant reduction in a margin of safety. Each standard is addressed as follows: (1) Operation of the facility in accordance with the proposed amendment would not involve a significant increase in the probability or consequences of an accident previously evaluated.

Specification 3.0.3 has been added as a clarification to *specifically prohibit entry into an operational condition when the conditions for the LCO are not met and the associated action statement requires a shutdown if they are not completed within a specified time interval.

For an LCO that has action statement requirements permitting continued operation for an unlimited period of time, entry into an operational mode or other specified condition of operation should be permitted in accordance with those action statement requirements.

This clarification is consistent with existing NRC regulatory requirements for an LCO. 4 of 7

• Surveillances provide positive verification of operability.

A 24-hour time limit has been included in Specification

4.0.3 allowing

a delay of the required actions to permit the performance of the missed surveillance.

This change is justified in that it is overly conservative to assume that systems or components are immediately inoperable when a surveillance requirement has not been performed.

The NRC has concluded in the generic letter that a 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> time limit balances the risks associated with an allowance for completing the surveillance within this period against the risks associated with the potential for a plant upset and challenge to safety systems when the alternative is a shutdown to comply with action statement requirements before the surveillance can be completed.

The NRC has concluded that the potential for a plant upset and challenge to safety systems is heightened if surveillances are performed during actions to initiate a shutdown to comply with action statement requirements.

We concur with this assessment and conclude that this change does not increase the probabilities or consequences of an accident.

Specification 4.0.4 has been modified to note that its provisions shall not prevent passage through or to operational conditions as required to comply with action statement requirements.

This is consistent with the intent of the existing Technical Specifications and only represents a clarification.

Thus, no previously analyzed accident scenario is affected.

(2) Use of the modified specification would not create the possibility of a new or different kind of accident from any accident previously evaluated.

5 of 7

• As stated above, the proposed changes do not involve changes to the physical plant or operations.

The changes being proposed to achieve consistency with Generic Letter 87-09 are clarifications of existing specifications with the exception of the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> time limit to perform a missed surveillance.

As noted in the generic letter, that change addresses a balance between positive verification of operability and the potential risk of known transients or plant upsets which may occur during activities to initiate a shutdown.

This change does not alter any accident scenarios.

Therefore, the proposed changes do not create the possibility of a new or different kind of accident.

(3) Use of the modified specification would not involve a significant reduction in a margin of safety. For the changes intended to achieve consistency with the recommendations of Generic Letter 87-09 11 Sections 3.0 and 4.0 of the Standard Technical Specifications (STS) on the Applicability of Limiting Conditions for Operation and Surveillance Requirements, 11 the NRC Staff has previously evaluated these changes in the generic letter and determined that the modifications will result in improved technical specifications.

No other changes are proposed.

Therefore, use of the modified specification would not involve a significant reduction in the margin of safety. 6 of 7

• In addition, we believe this change request is of the type described in the Federal Register Notice of March 6, 1986 (51 FR 7744) as an example of amendments that are considered not likely to involve significant hazards considerations.

In particular, example (ii) applies to this change request by describing a change that constitutes additional limitations, restrictions, or controls not presently included in the technical specifications.

Example (vii) also applies to this change by describing a change to conform a license to changes in the regulations (Generic Letter 87-09), where the license change results in very minor changes to facility operations clearly in keeping with the regulations.

Based on the above, we have determined that the amendment request does not (1) involve a significant increase in the probability or consequences of an accident previously evaluated, (2) create the possibility of a new or different kind of accident from any accident previously evaluated, or (3) involve a significant reduction in a margin of safety; and therefore does not involve a significant hazards consideration.

7 of 7