05000529/LER-2004-002
| Docket Numbersequential Revmonth Day Year Year Month Day Yearnumber No. None 05000 | |
| Event date: | 07-14-2004 |
|---|---|
| Report date: | 09-10-2004 |
| Reporting criterion: | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function |
| Initial Reporting | |
| ENS 40870 | 10 CFR 50.72(b)(2)(iv)(B), RPS System Actuation |
| 5292004002R00 - NRC Website | |
1. REPORTING REQUIREMENT(S):
This LER (50-529/2004-002-00) is being submitted pursuant to 10 CFR 50.73(a)(2)(iv)(A), to report a reactor protection system (RPS) (EIIS: JC) initiated reactor trip, while critical on July 14, 2004 at approximately 0134 MST.
On July 14, 2004 at 0435 MST, APS made notification of the event to the Nuclear Regulatory Commission (NRC) via the emergency notification system (ENS 40870).
2. DESCRIPTION OF STRUCTURE(S), SYSTEM(S) AND COMPONENT(S):
The main generator excitation and voltage regulation system (Generrex) (EIIS: TL) is a static excitation and control system. The Generrex excitation system controls the terminal voltage or reactive volt-amperes of the main generator by controlling the field excitation. The system maintains voltage at the generator terminals based on the requirements of the power grid or commands by the operator. The major components of the system include: the excitation power source, the exciter cubicle containing the power rectifiers and related control equipment, the regulator cubicle, the generator brush-holder rigging and slip rings, and the control station with a mimic bus.
The reactor power cutback system (RPCS) (EIIS: JD) is a control system designed to accommodate loss of load or loss of one main feed pump events by providing a "step" reduction in reactor power. The step reduction in reactor power is accomplished by the simultaneous dropping of one or more pre-selected groups of full length regulating control element assemblies (CEAs) (EIIS: AA) into the core.
The RPS portion of the plant protection system (PPS) (EIIS: JC) provides a rapid and reliable shutdown of the reactor to protect the core and the reactor coolant system pressure boundary from potentially hazardous operating conditions. Shutdown is accomplished by the generation of reactor trip signals. The trip signals open the reactor trip switchgear breakers, de-energizing the control element drive mechanism coils, allowing all CEAs to drop into the core by the force of gravity.
The core protection calculator / control element assembly calculator (CPC/CEAC) (EIIS:
JC) system monitors pertinent reactor core conditions and provides an accurate, reliable means of initiating a reactor trip. The CPC system is an integral part of the PPS in that it provides two trips to the RPS. Trip signals are provided to the RPS whenever the minimum departure from nucleate boiling ratio (DNBR) or fuel design limit local power density (LPD) is approached during reactor operation. The CPCs incorporate a reactor cutback "flag" feature that activates when the Unit experiences a reactor power cutback.
The CPCs will not generate an out of sequence or subgroup CEA deviation penalty factor during the time the reactor power cutback flag is generated. The reactor power cutback flag permits out of sequence or subgroup CEA deviation for a short period of time (currently 10.35 seconds) to allow the reactor power cutback to rapidly step down power without initiating an automatic reactor scram as a result of the out of sequence or subgroup CEA deviation.
3. INITIAL PLANT CONDITIONS:
On July 14, 2004 at approximately 0134 MST Palo Verde Unit 2 was in Mode 1 (Power Operations), operating at approximately 100 percent power. There were no major structures, systems, or components that were inoperable at the start of the event that contributed to the event.
4. EVENT DESCRIPTION:
On July 14, 2004 at approximately 0134 MST Unit 2 was operating in Mode 1 at 100 percent power when the Unit experienced a reactor power cutback followed by an automatic reactor trip. At the time of the event, Palo Verde was in a severe thunderstorm.
Six lightning strikes had.landed in the vicinity of the Palo Verde switchyard in a 300 millisecond period. Approximately five seconds after the series of lightning strikes, the main generator tripped on a loss of field which in turn tripped the main turbine. The steam bypass control valves quick opened diverting main steam directly to the main condenser and a reactor power cutback initiated as designed for a large load reject event. CEAs for regulating groups 4 and 5 fully inserted into the core. Reactor power decreased as expected to approximately 68 percent. Approximately 11 seconds after the reactor power cutback, two channels (A and B) of the core protection calculators generated a low DNBR reactor trip. All CEAs automatically inserted into the core as designed. Heat removal was maintained to the main condenser by way of the steam bypass control system.
At 0147 MST, with Unit 2 in Mode 3 (Hot Standby), control room personnel (utility, licensed) classified the reactor trip as uncomplicated and entered the standard post trip procedure. There were no engineered safety feature actuations and none were required.
There was no loss of heat removal capability or loss of safety features associated with the event. Off site power remained available throughout the event. The NRC operations center was notified of the event at 0435 MST (re: ENS 40870).
5. ASSESSMENT OF SAFETY CONSEQUENCES:
The reactor trip did not result in a transient more severe than those already analyzed in the Updated Final Safety Evaluation Report chapters 6 and 15. The primary system and secondary pressure boundary limits were not approached and no violations of the specified acceptable fuel design limits occurred.
The event did not result in any challenges to the fission product barriers or result in the release of radioactive materials. Therefore, there were no adverse safety consequences or implications as a result of this event and the event did not adversely affect the safe operation of the plant or health and safety of the public.
The condition would not have prevented the fulfillment of any safety feature and did not result in a safety system functional failure as defined by 10 CFR 50.73(a)(2)(v).
6. CAUSE OF THE EVENT:
The event initiator (main generator loss of field trip) was attributed to a failure of the Generrex signal override circuit board induced by an electrical transient from a series of lightning strikes in the vicinity of the Palo Verde switchyard.
The cause of the reportable event (automatic reactor trip on low DNBR) was attributed to the application of an overly conservative planar radial peaking factor in the CPCs which resulted in an overly conservative DNBR calculation. The overly conservative DNBR value was greater than the trip setpoint that existed once the reactor power cutback flag cleared.
If APS determines that the cause of the reportable event is something other than conservative addressable constants for calculation of update DNBR, then a supplement to this report will be submitted.
7. CORRECTIVE ACTIONS:
The main generator and the Generrex system were evaluated in accordance with Palo Verde corrective action program. Failed components, including the Generrex signal override circuit board were replaced.
Calculation TA-13-000-2004-004, "Determination of a new ARM5 value for Units 1 and 2 Cycle 12 & Unit 3 Cycle 11," was revised to establish ARM5 values that would minimize the possibility of an automatic reactor trip following a reactor power cutback while at the same time not inhibit the required trip protection should the integrated system response following a reactor power cutback fall outside the design basis. (ARM5 is one of the CPC addressable constants for planar radial peaking factor.) The new ARM5 values have been incorporated into all three Unit's CPCs.
8. PREVIOUS SIMILAR EVENTS:
On June 7, 2004 Unit 3 experienced a main turbine control system malfunction that resulted in a reactor power cutback followed by an automatic reactor trip on low DNBR (LER 50-530/2004-002-00). The investigation and corrective actions associated with the June 7 event had not been completed at the time the event discussed in this LER occurred.