Text

License Amendment Request Supplement for Risk-Informed Completion Times
	ML17307A188
Person / Time
Site:	Palo Verde
Issue date:	11/03/2017
From:	Lacal M; Arizona Public Service Co
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	102-07587-MLL/TNW
	Download: ML17307A188 (309)
	v • d • e

10 CFR 50.90 Maria L. Lacal Senior Vice President, Nuclear Regulatory & Oversight Palo Verde Nuclear Generating Station P.O. Box 52034 Phoenix, AZ 85072 Mail Station 7605 102-07587-MLL/TNW Tel 623 393 6491 November 3, 2017 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

Dear Sirs:

Reference:

Arizona Public Service (APS) Company Letter 102-07060, License Amendment Request to Revise Technical Specifications to Adopt TSTF-505-A, Revision 1, Risk-Informed Completion Times, dated July 31, 2015 [Agency Documents Access and Management System (ADAMS)

Accession Number ML15218A300]

Subject:

Palo Verde Nuclear Generating Station Units 1, 2, and 3 Docket Nos. STN 50-528, 50-529, and 50-530 Renewed Operating License Nos. NPF-41, NPF-51, NPF-74 License Amendment Request Supplement for Risk-Informed Completion Times In accordance with the provisions of section 50.90 of title 10 of the Code of Federal Regulations (10 CFR), APS submitted in the referenced letter a request for a license amendment to revise the technical specifications (TS) for Palo Verde Nuclear Generating Station (PVNGS) Units 1, 2, and 3.

This license amendment request (LAR) supplement replaces information provided in the referenced letter. The enclosure to this letter provides an updated description and assessment of the proposed amendment for risk-informed completion times (RICT). Attachment 1 provides marked up pages of the existing TS to show the proposed changes. Attachment 2 provides revised (clean) TS pages. For information, provides marked up pages of the existing TS Bases to show the proposed changes. of the enclosure to this letter contains a proposed regulatory commitment (as defined by NEI 99-04, Guidelines for Managing NRC Commitment Changes, Revision 0) and license conditions. The commitment contained in of the enclosure supersedes the commitments in the referenced letter.

Attachments 5 through 16 of the enclosure provide updated probabilistic risk assessment information to support NRC review of this LAR supplement.

A member of the STARS Alliance LLC Callaway

Diablo Canyon

Palo Verde

Wolf Creek

102-07587-MLL/TNW ATTN: Document Control Desk U.S. Nuclear Regulatory Commission License Amendment Request Supplement for Risk-Informed Completion Times Page 2 The changes in this supplement were made as a result of the concerns identified in NRC letter dated November 15, 2016 (ADAMS Accession Number ML16300A245) where the NRC staff informed APS and other licensees of its decision to suspend NRC approval of TSTF-505-A, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b, because of concerns identified during the review of plant-specific LARs for adoption of the TSTF-505 traveler. The letter also stated that the NRC would continue reviewing applications already received and site-specific proposals to address NRC staff concerns.

APS has been actively participating in the public phone calls related to the RICT initiative to ensure APS understands the NRC staff concerns and the related resolutions. In order to address NRC staff concerns within this LAR supplement, APS used the methodology described in Risk-Informed Technical Specifications Initiative 4b, NEI 06-09 (Revision 0) - A, Risk-Managed Technical Specifications (RMTS)

Guidelines, issued in November 2006 which incorporates the NRC final safety evaluation, dated May 17, 2007 (ADAMS Accession Number ML12286A322).

Finally, APS has reviewed and applied to the extent possible changes approved in the NRC safety evaluation issued on August 8, 2017 (ADAMS Accession number ML15127A669) for the lead plant for the RICT initiative. The approach used by APS and the changes included in this LAR supplement were described to the NRC staff in a pre-submittal phone call on August 31, 2017.

This LAR supplement does not affect the conclusions of the no significant hazards consideration determination [10 CFR 50.91(a)] provided in the original LAR.

APS requests approval of the proposed license amendment within one year, with the amendment being implemented within 180 days of issuance.

In accordance with the PVNGS Quality Assurance Program, the Plant Review Board reviewed and approved this LAR supplement. By copy of this letter, this LAR supplement is being forwarded to the Arizona Radiation Regulatory Agency pursuant to 10 CFR 50.91(b)(1).

Should you have any questions concerning the content of this letter, please contact Matthew S. Cox, Licensing Section Leader, at (623) 393-5753.

I declare under penalty of perjury that the foregoing is true and correct.

Executed on ___November 3, 2017_______

(Date)

Sincerely, Digitally signed by Andrews, George Andrews, George W(Z99748)

DN: cn=Andrews, George W(Z99748)

W(Z99748)

Reason: I am approving this document as delegated for Maria Lacal Date: 2017.11.03 07:35:00 -07'00' MLL/TNW/NTA

102-07587-MLL/TNW ATTN: Document Control Desk U.S. Nuclear Regulatory Commission License Amendment Request Supplement for Risk-Informed Completion Times Page 3

Enclosure:

Description and Assessment of Proposed Amendment for Risk-Informed Completion Times cc:

K. M. Kennedy NRC Region IV Regional Administrator S. P. Lingam NRC NRR Project Manager for PVNGS M. M. Watford OBanion NRC NRR Project Manager C. A. Peabody NRC Senior Resident Inspector for PVNGS T. Morales Arizona Radiation Regulatory Agency (ARRA)

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table of Contents

1.0 DESCRIPTION

2.0 ASSESSMENT 3.0 REGULATORY SAFETY ANALYSIS

4.0 ENVIRONMENTAL CONSIDERATION

ATTACHMENTS:

1. Proposed Technical Specification Changes (Mark-up)

2. Revised Technical Specification Pages (Clean Copy)

3. Technical Specification Bases Changes (Mark-up)

4. License Conditions and Regulatory Commitment

5. List of Revised Required Actions to Corresponding Probabilistic Risk Assessment (PRA) Functions

6. Information Supporting Consistency with Regulatory Guide 1.200, Revision 2

7. Information Supporting Technical Adequacy of PRA Models without PRA Standards Endorsed by Regulatory Guide 1.200, Revision 2

8. Information Supporting Justification of Excluding Sources of Risk Not Addressed by the PVNGS PRA Models

9. Baseline Core Damage Frequency (CDF) and Large Early Release Frequency (LERF)

10. Justification of Application of At-Power PRA Models to Shutdown Modes

11. Probabilistic Risk Assessment Model Update Process

12. Attributes of the Configuration Risk Management Program Model

13. Key Assumptions and Sources of Uncertainty

14. Program Implementation

15. Monitoring Program

16. Risk Management Action Examples i

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times

1.0 DESCRIPTION

In accordance with the provisions of section 50.90 of title 10 of the Code of Federal Regulations (10 CFR), Arizona Public Service Company (APS) submitted in reference 1, a request for a license amendment to revise the technical specifications (TS) for Palo Verde Nuclear Generating Station (PVNGS) Units 1, 2, and 3. Reference 2 provided the APS response to a specific information request regarding instrumentation.

This license amendment request (LAR) supplement replaces information provided in reference 1. The enclosure to this letter provides an updated description and assessment of the proposed amendment for risk-informed completion times (RICT). Attachment 1 provides marked up pages of the existing TS to show the proposed changes. Attachment 2 provides revised (clean) TS pages. For information, Attachment 3 provides marked up pages of the existing TS Bases to show the proposed changes. of the enclosure to this letter contains a proposed regulatory commitment (as defined by NEI 99-04, Guidelines for Managing NRC Commitment Changes, Revision 0) and license conditions. The commitment contained in Attachment 4 of the enclosure supersedes the commitments in reference 1. Attachments 5 through 16 of the enclosure provide updated probabilistic risk assessment information to support NRC review of this LAR supplement.

The changes in this supplement were made as a result of the concerns identified in NRC letter dated November 15, 2016 (Reference 5) where the NRC staff informed APS and other licensees of its decision to suspend NRC approval of TSTF-505-A, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4b, because of concerns identified during the review of plant-specific LARs for adoption of the TSTF-505 traveler. The letter also stated that the NRC would continue reviewing applications already received and site-specific proposals to address NRC staff concerns.

APS has been actively participating in the public phone calls related to the RICT initiative to ensure APS understands the NRC staff concerns and the related resolutions. In order to address NRC staff concerns within this LAR supplement, APS used the methodology described in Risk-Informed Technical Specifications Initiative 4b, NEI 06-09 (Revision 0) -

A, Risk-Managed Technical Specifications (RMTS) Guidelines, issued in November 2006 which incorporates the NRC final safety evaluation, dated May 17, 2007 (References 4 and 6).

Finally, APS has reviewed and applied to the extent possible changes approved in the NRC safety evaluation issued on August 8, 2017 (Reference 3) for the lead plant for the RICT initiative. The approach used by APS and the changes included in this LAR supplement were described to the NRC staff in a pre-submittal phone call on August 31, 2017.

The LAR supplement involves TS completion times (CT) for required actions (RA) to provide the option to calculate a RICT. A new program, the risk informed completion time program, is added to TS Section 5, Administrative Controls.

In addition as described in section 2.3 of this enclosure, this enclosure includes the addition of a license condition, to address the scope of the probabilistic risk assessment (PRA) methods approved by the NRC staff for use in the PVNGS RICT program. Additionally, APS 1

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times requests that license conditions implemented by license amendment numbers 171 and 200 be deleted because these conditions are no longer applicable.

2.0 ASSESSMENT 2.1 Applicability of Published Safety Evaluation APS reviewed the safety evaluation for NEI 06-09-A (Reference 4), and the safety evaluation for the lead plant for risk-informed completion times (Reference 3) and concluded that they are applicable to PVNGS Units 1, 2, and 3.

2.2 Verifications and Regulatory Commitments The following attachments are provided in accordance with Section 4.0, Limitations and Conditions, of the safety evaluation for NEI 06-09-A (Reference 4):

Attachment 4 to this enclosure lists the APS license conditions and regulatory commitment regarding changes necessary to support implementation of RICT.

Attachment 5 to this enclosure identifies each of the TS required actions (RA) to which the RICT program will apply, with a comparison of the TS functions to the functions modeled in the PRA of the structures, systems and components (SSC) subject to those actions.

Attachment 6 to this enclosure provides a discussion of the results of peer reviews and self-assessments conducted for the plant-specific PRA models which support the RICT program, as required by regulatory guide (RG) 1.200, An Approach for Determining the Technical Adequacy of Probabilistic Risk Assessment Results for Risk-Informed Activities, Revision 2, dated March 2009, Section 4.2.

Attachment 7 to this enclosure is a placeholder to retain the format since each APS PRA model used for the RICT program is addressed using a standard endorsed by the NRC.

Attachment 8 to this enclosure provides appropriate justification for excluding sources of risk not addressed by the PRA models.

Attachment 9 to this enclosure provides the plant-specific baseline core damage frequency (CDF) and large early release frequency (LERF) to confirm that the potential risk increases allowed under the RICT Program are acceptable.

Attachment 10 to this enclosure is a placeholder to retain the format since each APS PRA model used for the RICT program is addressed using a standard endorsed by the NRC.

Attachment 11 to this enclosure provides a discussion of the programs and procedures that assure the PRA models that support the RICT Program are maintained consistent with the as-built, as-operated plant.

Attachment 12 to this enclosure provides a description of how the baseline PRA model, which calculates average annual risk, is evaluated and modified for use in the configuration risk management program (CRMP) to assess real-time configuration risk, and describes the scope of and quality controls applied to the CRMP.

2

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Attachment 13 to this enclosure provides a discussion of how the key assumptions and sources of uncertainty in the PRA models were identified for this LAR, and how their impact on the RICT program was assessed and evaluated.

Attachment 14 to this enclosure provides a description of the implementing programs and procedures regarding the plant staff responsibilities for the RICT Program, including risk management action (RMA) implementation.

Attachment 15 to this enclosure provides a description of the monitoring program as described in NEI 06-09-A (Reference 4).

Finally, attachment 16 to this enclosure provides a description of the process to identify RMAs and includes specific examples of RMAs.

2.3 Proposed Technical Specification and License Condition Changes APS proposes the addition of the following conditions to the PVNGS renewed operating licenses of Units 1, 2, and 3 to address the scope of the PRA methods approved by the NRC staff for use in the PVNGS RICT program.

1. Plant procedures needed to implement the risk-informed completion time (RICT) program shall be in place before a RICT is used.

2. The risk assessment approach and methods, shall be acceptable to the NRC, be based on the as-built, as-operated, and maintained plant, and reflect the operating experience of the plant as specified in RG 1.200. Methods to assess the risk from extending the completion times must be PRA methods accepted as part of this license amendment, or other methods approved by the NRC. If the licensee wishes to use a newly developed method, and the change is outside the bounds of this license condition, the licensee will seek prior NRC approval, via a license amendment.

Additionally, APS requests that license conditions implemented by license amendment (LA) numbers 171 and 200 be deleted because these conditions are no longer applicable.

LA number 171 adopted TSTF-448 which provided a schedule for implementation of various control room habitability tests. These tests have been completed therefore this license condition is no longer applicable.

LA number 200 authorized the Unit 3 train B emergency diesel generator (EDG) extended required action completion time which is no longer applicable.

APS proposes certain changes to the original LAR (Reference 1). These proposed differences between the PVNGS original LAR and this LAR supplement are provided in Table 1 -

Supplement Summary Table.

3

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 1 1.3 Changes to the example in TS section 1.3 reflect a loss of function similar to the RICT lead plant Completion Times submittal.

2 3.3.4 This LCO is no longer included in the RICT LAR supplement, primarily since it is not modeled in PRA.

Reactor Protective This is consistent with how it was communicated to the NRC in reference 2.

System (RPS) Logic and Trip Initiation 3 3.3.6 This LCO is included in the RICT LAR supplement, with changes:

Engineered Safety

Condition A (matrix logic) is no longer included since it is not modeled in PRA.

Features Actuation

Condition B is being kept (one channel of manual trip or ESFAS initiation logic).

System (ESFAS)

Condition C is no longer included (loss of function for instrumentation).

Logic and Manual

Condition D is being kept (one channel of ESFAS actuation logic).

Trip

Condition E is no longer included (loss of function for instrumentation).

4 3.4.9 This LCO is no longer included in the RICT LAR supplement since the pressurizer heaters are not modeled in PRA.

Pressurizer 5 3.4.10 This LCO is included in the RICT LAR supplement, similar to the RICT lead plant submittal.

Pressurizer Safety

Condition A is for one PSV being inoperable and the appropriate loss of function (LOF) notes Valves (PSV) - have been added.

Modes 1, 2, and 3 4

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 6 3.4.12 This LCO is included in the RICT LAR supplement. The pressurizer vent paths are modeled in the PRA Pressurizer Vents and credited in the PVNGS safety analysis for the steam generator tube rupture event as described in updated final safety analysis report (UFSAR) section 15.6.3. The pressurizer vent TS at PVNGS has similarities to the pressurizer power-operated relief valves (PORVs) TS 3.4.11 addressed in the RICT lead plant submittal:

Condition A for two or three vents paths is being kept.

Condition B for all vents paths inoperable is being kept and the appropriate LOF notes have been added. The wording of note 1 was modified to be more specific that the RICT is not applicable as opposed to the entire condition being not applicable when the last pressurizer vent path is intentionally made inoperable since this condition is part of the current licensing basis and not a new condition. Also, the wording was changed to be more precise that it is the last pressurizer vent path, as opposed to all vent paths, that renders the RICT not applicable.

7 3.5.1 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant Safety Injection submittal Accumulator TS:

Tanks (SIT) -

Condition A for a SIT inoperable due to boron concentration not within limits is no longer in RICT Operating scope since it is a parameter.

Condition B for one SIT inoperable for reasons other than boron is also not in scope since the loss of a SIT is a loss of function condition which would be limited to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and PVNGS already has a 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months completion time.

Condition C for two or more SITs being inoperable for reasons other than boron is being kept similar to the RICT lead plant submittal approval. This is a loss of function condition with the appropriate notes added. The wording of note 1 was changed to be more precise that it is the second or a subsequent SIT, as opposed to two or more SITs, intentionally made inoperable that render the condition being not applicable.

5

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 8 3.5.3 This LCO is included in the RICT LAR supplement but has changes:

ECCS - Operating

Condition A for one low pressure safety injection (LPSI) subsystem inoperable is kept. The RICT lead plant submittal did not have this condition in their TS.

Condition B is kept but has changes. This is for one or more ECCS trains being inoperable AND at least 100% of the flow equivalent to one train being available. The portion after the AND is now kept in the TS similar to the RICT lead plant submittal to ensure it is not a loss of function.

Condition C is no longer included since it is only for less than 100% of flow available.

9 3.5.5 This LCO is included in the RICT LAR supplement but has changes:

Refueling Water Tank

Condition A for the RWT being inoperable for boron or temperature not within limits is no longer in (RWT) the RICT scope since they are parameters.

Condition B for the RWT being inoperable for reasons other than Condition A is being kept. It is a loss of function and all appropriate notes have been added, this is similar to the RICT lead plant submittal.

10 3.6.2 This LCO is included in the RICT LAR supplement without any changes:

Containment Air

Only Condition C is in the scope of RICT and is for the airlock being inoperable for reasons other Locks than Condition A (one door in the airlock inoperable) or B (interlock mechanism inoperable). There is already a required action in Condition C to evaluate overall containment leakage rate is per TS 3.6.1 so this is not a loss of function condition, this is similar to the RICT lead plant submittal.

6

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 11 3.6.3 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Containment Isolation Valves (CIVs)

Condition A for one CIV inoperable is being kept.

Condition B for two CIVs in the same penetration is being kept and the appropriate LOF notes have been added. The wording of note 2 was modified to be more specific that the RICT is not applicable as opposed to the entire condition being not applicable when the second CIV is intentionally made inoperable since this condition is part of the current licensing basis. Also, the wording was changed to be more precise that it is the second CIV, as opposed to the first two CIVs, that renders the RICT not applicable.

Condition C for one CIV inoperable in penetrations with only one CIV and a closed system inside containment is being kept. This is not a loss of function condition due to the closed system inside containment.

Condition D for one or more containment purge (CP) valves having leakage above their limit is being kept in RICT scope. The loss of function notes have been added with a clarifier that the notes only apply when there is a loss of function condition since if there is one CP valve operable, it would not be a loss of function condition. The wording of note 1 was modified to be more specific that the RICT is not applicable as opposed to the entire condition being not applicable when the second CP valve is intentionally made inoperable since this condition is part of the current licensing basis and not a new condition. Also, the wording was changed to be more precise that it is the second CP valve, as opposed to the first two, that renders the RICT not applicable.

12 3.6.6 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Containment Spray System

Condition A for one train of containment spray is being kept within the RICT scope.

Condition C for two trains is no longer included.

13 3.7.2 This LCO is included in the RICT LAR supplement but has changes:

Main Steam Isolation

Condition F for one MSIV inoperable in MODE 1 is being kept with no changes.

Valves (MSIVs)

Condition G for more than one MSIV inoperable is being kept and the appropriate LOF notes have been added. The wording of note 1 was changed to be more precise that it is the second or a subsequent MSIV, as opposed to two or more MSIVs, intentionally made inoperable that render the condition being not applicable.

7

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 14 3.7.3 This LCO is included in the RICT LAR supplement but has changes. The MFIVs are modeled in the PRA Main Feedwater and credited in the safety analysis to close during a steam line break and a feedwater line break:

Isolation Valves

Condition A for one or more MFIVs inoperable is being kept.

(MFIVs)

Condition B for two valves in the same flow path is being kept and the appropriate LOF notes have been added. The wording of note 1 was modified to be more specific that the RICT is not applicable as opposed to the entire condition being not applicable when the second valve in the affected flow path is intentionally made inoperable since this condition is part of the current licensing basis and not a new condition. Also, the wording was changed to be more precise that it is the second valve in the affected flow path, as opposed to the first two, that renders the RICT not applicable.

15 3.7.4 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant:

Atmospheric Dump

Condition A is being kept for one ADV (per SG) without any changes.

Valves (ADVs)

Condition B is being kept but has a clarifier on the applicability of the loss of function notes since if one ADV is operable (with as many as three being inoperable) it is not a loss of function. With all four ADVs inoperable, it is a loss of function condition. The wording of note 1 was changed to be more precise that it is the last ADV, as opposed to all ADVs, intentionally made inoperable that renders the condition not applicable.

16 3.7.5 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Auxiliary Feedwater (AFW) System

Condition A for one steam supply inoperable is being kept.

Condition B for one AFW train inoperable for reasons other than condition A is being kept.

Condition C for two AFW trains inoperable is being kept. It is a loss of function condition that has the appropriate notes added along with a clarifier since if one of the two AFW trains that is inoperable is the non-class AFW pump, it would not be a loss of function. The wording of note 1 was changed to be more precise that it is the second AFW train, as opposed to two AFW trains, being inoperable that renders the condition not applicable.

17 3.7.6 This LCO is no longer included in the RICT LAR supplement primarily since it is a single train system that Condensate Storage was not within the RICT lead plant submittal.

Tank (CST) 8

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 18 3.7.7 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Essential Cooling Water (EW) System

Condition A for one train of EW inoperable is being kept.

Condition B for two trains of EW inoperable is being kept but is a loss of function condition that has the appropriate notes added.

19 3.7.8 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Essential Spray Pond System (ESPS)

Condition A for one train of ESPS inoperable is being kept.

Condition B for two trains of ESPS inoperable is being kept but is a loss of function condition that has the appropriate notes added.

20 3.7.9 This LCO is no longer included in RICT LAR supplement, primarily since it is a single train system.

Ultimate Heat Sink (UHS) 21 3.7.10 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant submittal:

Essential Chilled Water (EC) System

Condition A for one train of EC inoperable is being kept.

Condition B for two trains of EC inoperable is being kept but is a loss of function condition that has the appropriate notes added.

22 3.7.12 This LCO is no longer included in the RICT LAR supplement, primarily since Condition A for one train Control Room inoperable already allows 30 days to restore and Condition B for two trains inoperable was not within the Emergency Air RICT lead plant submittal.

Temperature Control System (CREATCS) 9

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 23 3.8.1 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant:

AC Sources -

Condition A for one offsite circuit inoperable is being kept without changes.

Operating

Condition B for one diesel generator (DG) inoperable is being kept without changes. The Note above the 10 day Completion Time regarding License Amendment 200 is being deleted since it is no longer applicable.

Condition C for two offsite circuits inoperable is being kept without changes.

Condition D for one offsite circuit and one DG inoperable stays without changes.

Condition E for two DGs inoperable is being kept but has loss of function notes added. Note 1 was modified to be more precise that it is the second diesel generator, not two diesel generators, that renders the condition not applicable.

Condition F for one DG Sequencer inoperable is being kept without changes.

Old Condition I for three or more required alternate current (AC) sources inoperable is being kept in the RICT scope but changes to be a loss of function and designate it as new condition H. The wording of note 1 was changed to be more precise in that it is the third or a subsequent required AC source, as opposed to three or more required AC sources, intentionally made inoperable that renders the condition being not applicable.

24 3.8.4 This LCO is included in the RICT LAR supplement but has changes, similar to the RICT lead plant:

DC Sources -

Condition A for one battery charger on a subsystem inoperable is being kept in RICT scope.

Operating However, required Action A.1 for restoring the battery terminal voltage to greater than minimum float voltage is no longer included in the RICT scope because it is a parameter. Only required action A.3 for restoring the battery charger to operable status stays.

Condition B for one direct current (DC) electrical power subsystem being inoperable for reasons other than Condition A is being kept.

Condition C for two DC electrical subsystems being inoperable is being kept but is a loss of function condition that has all of the appropriate LOF notes added. The wording on note 1 was changed to be more precise that it is the second DC electrical subsystem, not two DC electrical subsystems, intentionally made inoperable that renders the condition being not applicable.

10

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times Table 1 - Supplement Summary Table ITEM # PVNGS Limiting Description of Change in this LAR supplement Condition of Operation (LCO) 25 3.8.7 This LCO is included in the RICT LAR supplement but has changes:

Inverters - Operating

Condition A for one inverter being inoperable is being kept.

Condition B for two or more inverters being inoperable stays in scope but has a clarifier since this condition does not always result in a loss of function. PVNGS design has two trains of inverters with a total of four inverters channels A, B, C and D. Channels A and C are train A. Channels B and D are train B. If two inverters in the same train are inoperable and the other two inverters on the opposite train remain operable, it is not a loss of function. The wording of note 1 was changed to be more precise that it is the second or a subsequent required inverter, as opposed to two or more required inverters, intentionally made inoperable that renders the Condition being not applicable.

26 3.8.9 This LCO is included in the RICT LAR supplement but has changes:

Distribution Systems -

Condition A for one AC electrical power distribution subsystem being inoperable is being kept.

Operating

Condition B for one AC vital instrument bus being inoperable is being kept.

Condition C for one DC electrical power distribution subsystem is being kept

New Condition D for two or more electrical power distribution subsystems being inoperable is being kept in scope but is a loss of function condition and has the appropriate notes added. The wording of note 1 was changed to be more precise that it is the second or a subsequent electrical power distribution subsystem, as opposed to two or more electrical power distribution subsystems, intentionally made inoperable that renders the Condition being not applicable.

27 5.5.20 The TS program for risk informed completion time is included with changes to coincide with the TS program language from the RICT lead plant with minor changes. Editorial changes were made on the Risk-Informed pages for the Battery Monitoring Program of TS 5.5.19 to eliminate reference to the SFP Transition.

Completion Time Program 11

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times 3.0 REGULATORY SAFETY ANALYSIS APS has evaluated the proposed change to the TS using the criteria in 10 CFR 50.92 and has determined that the proposed change does not involve a significant hazards consideration.

APS requests adoption of the proposed changes to the TS and plant specific TS, to modify the TS requirements related to completion times for required actions to provide the option to calculate RICT based on risk levels associated with equipment determined to be inoperable that are within the scope of the RICT program. The allowance is described in a new program in TS Section 5, Administrative Controls, entitled Risk Informed Completion Time Program. The proposed RICT program conforms to the NRC model safety evaluation, Final Safety Evaluation for Nuclear Energy Institute (NEI) Topical Report (TR) NEI 06-09-A, Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS) Guidelines, dated May 17, 2007 (References 4 and 6). of the enclosure to this letter contains a proposed regulatory commitment (as defined by NEI 99-04, Guidelines for Managing NRC Commitment Changes, Revision 0) and license conditions. The commitment contained in Attachment 4 of the enclosure supersedes the commitments in reference 1.

As required by 10 CFR 50.91(a), Notice for Public Comment, an analysis of the issue of no significant hazards consideration was provided in the original license amendment request.

This LAR supplement does not affect the conclusions of the no significant hazards consideration determination [10 CFR 50.91(a)] provided in the original LAR (Reference 1).

4.0 ENVIRONMENTAL CONSIDERATION

APS has reviewed the environmental evaluation included in the model safety evaluation published on March 15, 2012, as part of the Notice of Availability (77 FR 15399). APS has concluded that the NRC staff findings presented in that evaluation are applicable to PVNGS.

The proposed change would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, Standards for Protection Against Radiation, or would change an inspection or surveillance requirement.

However, the proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22, Criterion for categorical exclusion; identification of licensing and regulatory actions eligible for categorical exclusion or otherwise not requiring environmental review. Therefore, pursuant to 10 CFR 51.22, no environmental impact statement or environmental assessment need be prepared in connection with the proposed change.

12

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times

References:

1. Arizona Public Service (APS) Company Letter 102-07060, License Amendment Request to Revise Technical Specifications to Adopt TSTF-505-A, Revision 1, Risk-Informed Completion Times, dated July 31, 2015 (ADAMS Accession Number ML15218A300)

2. APS Letter 102-07227, Response to Request for Additional Information Regarding License Amendment Request to Adopt TSTF-505, dated April 11, 2016 (ADAMS Accession Number ML16102A463)

3. Vogtle Electric Generating Plant Units 1 and 2 - Issuance of Amendments Regarding implementation of Topical Report Nuclear Energy Institute NEI 06-09, Risk-Informed Technical Specifications Initiative 4B, Risk-Managed Technical Specification (RMTS) Guidelines, Revision 0-A, dated August 8, 2017 (ADAMS Accession Number ML15127A669)

4. Nuclear Energy Institute (NEI) 06-09, Revision 0 - A, Risk-Informed Technical Specifications Initiative 4b, Risk-Managed Technical Specifications (RMTS)

Guidelines (NEI 06-09-A), dated November 13, 2006 (ADAMS Accession Number ML12286A322)

5. Issues with Technical Specification Task Force Traveler TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times - RITSTF Initiative 4B, dated November 15, 2016 (ADAMS Accession Number ML16300A245)

6. Final Safety Evaluation for Nuclear Energy Institute (NEI) Topical Report (TR) NEI 06-09, Risk-informed Technical Specifications initiative 4B, Risk-Managed Technical Specifications (RMT) Guideline (TAC NO. MD4995), dated May 17, 2007 (ADAMS Accession Number ML071200238) 13

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times ATTACHMENT 1 Proposed Technical Specification Changes TS Mark-up Pages 1.3-13 3.7.7-1 3.3.6-1 3.7.8-1 3.3.6-2 3.7.10-1 3.4.10-1 3.8.1-2 3.4.12-1 3.8.1-3 3.5.1-1 3.8.1-4 3.5.3-1 3.8.1-5 3.5.5-1 3.8.4-1 3.6.2-3 3.8.7-1 3.6.3-1 3.8.7-2 3.6.3-2 3.8.9-1 3.6.3-3 3.8.9-2 3.6.3-4 5.5-19 3.6.6-1 5.5-19a 3.7.2-2 3.7.3-1 3.7.4-1 3.7.5-1 3.7.5-2

Completion Times 1.3 1.3 Completion Times

______________________________________________________________________________

EXAMPLES EXAMPLE 1.3-7 (continued)

The Completion Time clock for Condition A does not stop after Condition B is entered, but continues from the time Condition A was initially entered. If Required Action A.1 is met after Condition B is entered, Condition B is exited and operation may continue in accordance with Condition A, Insert 1 provided the Completion Time for Required Action A.2 has not expired.

______________________________________________________________________________

IMMEDIATE When "Immediately" is used as a Completion Time, the COMPLETION TIME Required Action should be pursued without delay and in a controlled manner.

PALO VERDE UNITS 1,2,3 1.3-13 AMENDMENT NO. 117

INSERT 1 (1.3-13)

EXAMPLES EXAMPLE 1.3-8 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One subsystem A.1 Restore subsystem to 7 days inoperable. OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program B. ------NOTES------ B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Not applicable subsystem to OPERABLE when second status. OR subsystem intentionally In accordance made inoperable. with the Risk Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two subsystems inoperable.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not AND met.

C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months When a subsystem is declared inoperable, Condition A is entered.

The 7 day Completion Time may be applied as discussed in Example 1.3-2. However, the licensee may elect to apply the Risk Informed Completion Time Program which permits calculation of a Risk Informed Completion Time (RICT) that may be used to complete the Required Action beyond the 7 day Completion Time.

INSERT 1 (1.3-13 continued)

The RICT cannot exceed 30 days. After the 7 day Completion Time has expired, the subsystem must be restored to OPERABLE status within the RICT or Condition C must also be entered.

If a second subsystem is declared inoperable, Condition B may also be entered. The Condition is modified by two Notes. The first note states it is not applicable if the second subsystem is intentionally made inoperable. The second Note provides restrictions applicable to these "loss of function" Conditions.

The Required Actions of Condition B are not intended for voluntary removal of redundant subsystems from service. The Required Action is only applicable if one subsystem is inoperable for any reason and the second subsystem is found to be inoperable, or if both subsystems are found to be inoperable at the same time. If Condition B is applicable, at least one subsystem must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or Condition C must also be entered. The licensee may be able to apply a RICT or to extend the Completion Time beyond 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , but not longer than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , if the requirements of the Risk Informed Completion Time Program are met. If two subsystems are inoperable and Condition B is not applicable (i.e., the second subsystem was intentionally made inoperable), LCO 3.0.3 is entered as there is no applicable Condition.

The Risk Informed Completion Time Program requires recalculation of the RICT to reflect changing plant conditions. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after the plant configuration change, whichever is less.

If the 7 day Completion Time clock of Condition A or the 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Completion Time clock of Condition B have expired and subsequent changes in plant conditions result in exiting the applicability of the Risk Informed Completion Time Program without restoring the inoperable subsystem to OPERABLE status, Condition C is also entered and the Completion Time clocks for Required Actions C.1 and C.2 start.

If the RICT expires or is recalculated to be less than the elapsed time since the Condition was entered and the inoperable subsystem has not been restored to OPERABLE status, Condition C is also entered and the Completion Time clocks for Required Actions C.1 and C.2 start. If the inoperable subsystems are restored to OPERABLE status after Condition C is entered, Conditions A, B, and C are exited, and therefore, the Required Actions of Condition C may be terminated.

ESFAS Logic and Manual Trip 3.3.6 3.3 INSTRUMENTATION 3.3.6 Engineered Safety Features Actuation System (ESFAS) Logic and Manual Trip LCO 3.3.6 Six channels of ESFAS Matrix Logic, four channels of ESFAS Initiation Logic, two channels of Actuation Logic, and four channels of Manual Trip shall be OPERABLE for each Function in Table 3.3.6-1.

APPLICABILITY: According to Table 3.3.6-1.

ACTIONS

NOTE-------------------------------------

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months with one Matrix Logic OPERABLE status.

channel inoperable.

OR Three Matrix Logic channels are inoperable due to a common power source failure de-energizing three matrix power supplies.

B. One or more Functions B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months with one Manual Trip OPERABLE status.

or Initiation Logic channel inoperable. Insert 2 (continued)

PALO VERDE UNITS 1,2,3 3.3.6-1 AMENDMENT NO. 117

INSERT 2 OR In accordance with the Risk Informed Completion Time Program Reviewers Note:

The Insert 2 is used repeatedly throughout this package. The insert will not be provided as a separate page every time it is used. This will be the only time the insert page will follow the marked-up TS page.

ESFAS Logic and Manual Trip 3.3.6 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. One or more Functions C.1 Open at least one Immediately with two Initiation contact in the Logic channels or affected trip leg of Manual Trip channels both ESFAS Actuation affecting the same Logics.

trip leg inoperable. AND C.2 Restore channels to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

D. One or more Functions D.1 --------NOTE---------

with one Actuation One channel of Logic channel Actuation Logic may inoperable. be bypassed for up to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for Surveillances, provided the other channel is OPERABLE.

Restore inoperable 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months channel to OPERABLE status. Insert 2 E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time of Conditions for Containment Spray Actuation Signal, Main E.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Steam Isolation Signal or Auxiliary Feedwater Actuation Signal not met.

(continued)

PALO VERDE UNITS 1,2,3 3.3.6-2 AMENDMENT NO. 117

Pressurizer Safety Valves-MODES 1, 2, and 3 3.4.10 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves - Modes 1, 2 and 3 LCO 3.4.10 Four pressurizer safety valves shall be OPERABLE with lift settings 2450.25 psia and 2549.25 psia.

APPLICABILITY: MODES 1, 2, and 3,

NOTE----------------------------

The lift settings are not required to be within LCO limits during MODES 3 and 4 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions.

This exception is allowed for 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME Insert 3 A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

Insert 2 B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND OR B.2 Be in MODE 4 . 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Two or more pressurizer safety valves inoperable.

PALO VERDE UNITS 1,2,3 3.4.10-1 AMENDMENT NO. 117

INSERT 3 (3.4.10-1)

NOTES------------------------------

1. Not applicable when pressurizer safety valve intentionally made inoperable.

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Pressurizer Vents 3.4.12 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.12 Pressurizer Vents LCO 3.4.12 Four pressurizer vent paths shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3.

MODE 4 with RCS pressure q 385 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Two or three required A.1 Restore required 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months pressurizer vent paths pressurizer vent inoperable. paths to OPERABLE status. Insert 2 Insert 4 B. All pressurizer vent B.1 Restore one 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months paths inoperable. pressurizer vent path to OPERABLE status. Insert 2 C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time of Condition A, or B not met.

C.2 Be in MODE 4 with RCS 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months pressure < 385 psia.

PALO VERDE UNITS 1,2,3 3.4.12-1 AMENDMENT NO. 117, 188

INSERT 4 (3.4.12-1)

NOTES------------------------------

1. Not applicable when last pressurizer vent path intentionally made inoperable.

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

SITs-Operating 3.5.1 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.1 Safety Injection Tanks (SITs) - Operating LCO 3.5.1 Four SITs shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODES 3 and 4 with pressurizer pressure q 1837 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SIT inoperable due A.1 Restore SIT to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months to boron concentration OPERABLE status.

not within limits.

OR One SIT inoperable due to inability to verify level or pressure.

B. One SIT inoperable for B.1 Restore SIT to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months reasons other than OPERABLE status.

Condition A.

Insert 5 D C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A AND D

or B not met.

C.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months

, B, or C pressure to D < 1837 psia.

D. Two or more SITs D.1 Enter LCO 3.0.3. Immediately inoperable.

PALO VERDE UNITS 1,2,3 3.5.1-1 AMENDMENT NO. 117, 118

INSERT 5 (3.5.1-1)

C. ----- NOTES ----- C.1 Restore all but one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months SIT to OPERABLE status.

1. Not applicable OR when the second or a subsequent SIT intentionally In accordance made inoperable. with the Risk Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Two or more SITs inoperable for reasons other than Condition A.

ECCS Operating 3.5.3 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.3 ECCS Operating LCO 3.5.3 Two ECCS trains shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODE 3 with pressurizer pressure q 1837 psia or with RCS Tc q 485°F.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One LPSI subsystem A.1 Restore subsystem to 7 days inoperable. OPERABLE status. Insert 2 B. One or more trains B.1 Restore train(s) to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable for reasons OPERABLE status.

other than Condition A. Insert 2 AND At least 100% of the ECCS flow equivalent to a single OPERABLE ECCS train available.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time not met.

C.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months pressure to

< 1837 psia.

AND C.3 Reduce RCS Tc to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months

< 485°F.

PALO VERDE UNITS 1,2,3 3.5.3-1 AMENDMENT NO. 117, 124

RWT 3.5.5 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.5 Refueling Water Tank (RWT)

LCO 3.5.5 The RWT shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. RWT boron A.1 Restore RWT to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months concentration not OPERABLE status.

within limits.

OR RWT borated water temperature not within limits.

Insert 6 B. RWT inoperable for B.1 Restore RWT to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months reasons other than OPERABLE status.

Condition A. Insert 2 C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.5.5-1 AMENDMENT NO. 117

INSERT 6 (3.5.5-1)

NOTES------------------------------

1. Not applicable when RWT is intentionally made inoperable.

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Containment Air Locks 3.6.2 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.1 Verify an OPERABLE 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months door is closed in the affected air lock.

AND B.2 Lock an OPERABLE door 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months closed in the affected air lock.

AND B.3 --------NOTE---------

Air lock doors in high radiation areas may be verified locked closed by administrative means.

Verify an OPERABLE Once per 31 days door is locked closed in the affected air lock.

C. One or more C.1 Initiate action to Immediately containment air locks evaluate overall inoperable for reasons containment leakage other than Condition A rate per LCO 3.6.1.

or B. AND C.2 Verify a door is 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months closed in the affected air lock.

AND C.3 Restore air lock to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status.

Insert 2 (continued)

PALO VERDE UNITS 1,2,3 3.6.2-3 AMENDMENT NO. 117

Containment Isolation Valves 3.6.3 3.6 CONTAINMENT SYSTEMS 3.6.3 Containment Isolation Valves LCO 3.6.3 Each required containment isolation valve shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS

NOTES-----------------------------------

1. Penetration flow paths except for 42 inch purge valve penetration flow paths may be unisolated intermittently under administrative controls.

2. Separate Condition entry is allowed for each penetration flow path.

3. Enter applicable Conditions and Required Actions for system(s) made inoperable by containment isolation valves.

4. Enter applicable Conditions and Required Actions of LCO 3.6.1, "Containment," when leakage results in exceeding the overall containment leakage rate acceptance criteria.

5. A 42 inch refueling purge valve is not a required containment isolation valve when its flow path is isolated with a blind flange tested in accordance with SR 3.6.1.1.

CONDITION REQUIRED ACTION COMPLETION TIME A. ---------NOTE--------- A.1 Isolate the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Only applicable to penetration flow path penetration flow paths by use of at least with two required one closed and Insert 2 containment isolation de-activated valves. automatic valve,

closed manual valve, blind flange, or One or more check valve with flow penetration flow paths through the valve with one required secured.

containment isolation valve inoperable AND except for purge valve leakage not within limit.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-1 AMENDMENT NO. 117, 166

Containment Isolation Valves 3.6.3 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. (continued) A.2 --------NOTE---------

Isolation devices in high radiation areas may be verified by use of administrative following means. isolation

Verify the affected Once per 31 days penetration flow path for isolation is isolated. devices outside containment AND Prior to entering MODE 4 from MODE 5 if not performed within the previous 92 days for isolation devices inside containment S

B. ---------NOTE--------- B.1 Isolate the affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Only applicable to penetration flow path penetration flow paths by use of at least Insert 2 with two required one closed and Insert 7 containment isolation de-activated valves. automatic valve,

closed manual valve, or blind flange.

One or more penetration flow paths with two required containment isolation valves inoperable except for purge valve leakage not within limit.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-2 AMENDMENT NO. 117, 166

INSERT 7 (3.6.3-2)

2. RICT is not applicable when the second containment isolation valve is intentionally made inoperable.

3. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Containment Isolation Valves 3.6.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. ---------NOTE--------- C.1 Isolate the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Only applicable to penetration flow path penetration flow paths by use of at least Insert 2 with only one required one closed and containment isolation de-activated valve and a closed automatic valve, system. closed manual valve,

or blind flange.

One or more AND penetration flow paths with one required C.2 --------NOTE---------

containment isolation Isolation devices in valve inoperable. high radiation areas may be verified by use of administrative following means. isolation

Verify the affected Once per 31 days penetration flow path Insert 8 is isolated.

D. One or more D.1 Isolate the affected 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months penetration flow paths penetration flow path with one or more by use of at least Insert 2 required containment one closed and purge valves not de-activated within purge valve automatic valve with leakage limits. resilient seals, or blind flange.

AND (continued)

PALO VERDE UNITS 1,2,3 3.6.3-3 AMENDMENT NO. 117, 166

INSERT 8 (3.6.3-3)

NOTES------------------------------

1. RICT is not applicable when the second containment purge valve is intentionally made inoperable.

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

Containment Isolation Valves 3.6.3 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME D. (continued) D.2 --------NOTE---------

Isolation devices in high radiation areas may be verified by use of administrative following means. isolation

Verify the affected Once per 31 days penetration flow path for isolation is isolated. devices outside containment AND Prior to entering MODE 4 from MODE 5 if not performed within the previous 92 days for isolation devices inside containment AND D.3 Perform SR 3.6.3.6 Once per 92 days for the resilient seal purge valves following closed to comply with isolation Required Action D.1.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND E.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.6.3-4 AMENDMENT NO. 117

Containment Spray System 3.6.6 3.6 CONTAINMENT SYSTEMS 3.6.6 Containment Spray System LCO 3.6.6 Two containment spray trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3.

MODE 4 when RCS pressure is q 385 psia ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One containment spray A.1 Restore containment 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months train inoperable. spray train to OPERABLE status. Insert 2 B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A AND not met.

B.2 Be in MODE 4 with RCS 84 hours9.722222e-4 days 0.0233 hours 1.388889e-4 weeks 3.1962e-5 months pressure < 385 psia.

C. Two containment spray C.1 Enter LCO 3.0.3. Immediately trains inoperable.

PALO VERDE UNITS 1,2,3 3.6.6-1 AMENDMENT NO. 117

MSIVs 3.7.2 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME E. Three or more MSIV E.1 Declare each affected Immediately actuator trains MSIV inoperable.

inoperable.

OR Required Action and associated Completion Time of Condition A, B, or C not met.

F. One MSIV inoperable in F.1 Restore MSIV to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months MODE 1. OPERABLE status.

Insert 2 Insert 9 G. Required Action and G.1 Be in MODE 2. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion H Time of Condition F H not met. or G I

H. ---------NOTE--------- H.1 Close MSIV. 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Separate Condition I entry is allowed for AND each MSIV.

H.2 Verify MSIV is Once per 7 days closed.

One or more MSIVs I inoperable in MODE 2, 3, or 4.

J I. Required Action and I.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion J Time of Condition H AND not met.

I I.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months J

PALO VERDE UNITS 1,2,3 3.7.2-2 AMENDMENT NO. 117, 163

INSERT 9 (3.7.2-2)

G. ----- NOTES ----- G.1 Restore all but one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months MSIV to OPERABLE status.

1. Not applicable OR when the second or a subsequent MSIV In accordance intentionally with the Risk made inoperable. Informed Completion Time Program

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two or more MSIVs inoperable in MODE 1.

MFIVs 3.7.3 3.7 PLANT SYSTEMS 3.7.3 Main Feedwater Isolation Valves (MFIVs)

LCO 3.7.3 Four economizer MFIVs and four downcomer MFIVs shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4 except when MFIV is closed and deactivated or isolated by a closed and deactivated power operated valve.

ACTIONS

NOTE------------------------------------

Separate Condition entry is allowed for each penetration flow path.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more MFIVs A.1 Close or isolate 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable. inoperable MFIV.

Insert 10 AND A.2 Verify inoperable Once per 7 days MFIV is closed or isolated.

B. Two valves in the B.1 Isolate affected flow 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months same flow path path.

inoperable.

AND B.2 Verify inoperable Once per 7 days MFIV is closed or isolated.

(continued)

PALO VERDE UNITS 1,2,3 3.7.3-1 AMENDMENT NO. 117 158

INSERT 10 (3.7.3-1)

A.1 Restore MFIV(s) to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

OR OR In accordance with the Risk Informed Completion Time Program A.2.1 Close or isolate inoperable 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months MFIV(s).

AND A.2.2 Verify inoperable Once per 7 days MFIV(s) is closed following Isolation or isolated.

B. ----- NOTES ------

1. RICT is not B.1 Restore one valve 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months applicable when to OPERABLE the second valve status. OR in the affected flow path is In accordance with intentionally OR the Risk Informed made inoperable. Completion Time Program

2. The following Section 5.5.20 constraints are B.2.1 Isolate affected 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months applicable: parts flow path.

b, c.2, c.3, d, e, f, g, and h. AND

Two valves in the B.2.2 Verify inoperable Once per 7 days same flow path MFIV(s) is closed following Isolation inoperable. or isolated.

ADVs 3.7.4 3.7 PLANT SYSTEMS 3.7.4 Atmospheric Dump Valves (ADVs)

LCO 3.7.4 Four ADV lines shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is being relied upon for heat removal.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. --------NOTE--------

Separate Condition A.1 Restore ADV line to 7 days entry is allowed for OPERABLE status.

each SG. Insert 2

One required ADV line inoperable.

Insert 11 B. Two or more ADV lines B.1 Restore one ADV line 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months inoperable with both to OPERABLE status on ADV lines inoperable each SG.

on one or more SGs.

Insert 2 C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 4 without 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months reliance on steam generator for heat removal.

PALO VERDE UNITS 1,2,3 3.7.4-1 AMENDMENT NO. 165, 191 (CORRECTED PAGE)

INSERT 11 (3.7.4-1)

NOTES------------------------------

1. Not applicable when the last ADV intentionally made inoperable resulting in loss of safety function.

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

AFW System 3.7.5 3.7 PLANT SYSTEMS 3.7.5 Auxiliary Feedwater (AFW) System LCO 3.7.5 Three AFW trains shall be OPERABLE.

NOTE----------------------------

Only one AFW train, which includes a motor driven pump, is required to be OPERABLE in MODE 4.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is relied upon for heat removal.

ACTIONS

NOTE-------------------------------------

LCO 3.0.4.b is not applicable.

CONDITION REQUIRED ACTION COMPLETION TIME A. One steam supply to A.1 Restore affected 7 days turbine driven AFW equipment to OPERABLE pump inoperable. status. Insert 2 OR

NOTE---------

Only applicable if MODE 2 has not been entered following refueling.

One turbine driven AFW pump inoperable in MODE 3 following refueling.

B. One AFW train B.1 Restore AFW train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable for reasons OPERABLE status.

other than Condition A Insert 2 in MODE 1, 2, or 3.

(continued)

PALO VERDE UNITS 1,2,3 3.7.5-1 AMENDMENT NO. 165, 197

AFW System 3.7.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME Insert 12 D C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion D Time of Condition A AND or B not met.

, B, or C C.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months OR D

Two AFW trains inoperable in MODE 1, 2, or 3 D. Three AFW trains D.1 --------NOTE---------

inoperable in MODE 1, LCO 3.0.3 and all E 2, or 3. other LCO Required E Actions requiring MODE changes are suspended until one AFW train is restored to OPERABLE status.

Initiate action to Immediately restore one AFW train to OPERABLE status.

E. Required AFW train E.1 --------NOTE---------

inoperable in MODE 4. LCO 3.0.3 and all F F other LCO Required Actions requiring MODE changes are suspended until one AFW train is restored to OPERABLE status.

Initiate action to Immediately restore one AFW train to OPERABLE status.

PALO VERDE UNITS 1,2,3 3.7.5-2 AMENDMENT NO. 117

INSERT 12 (3.7.5-2)

C. ----- NOTES ----- C.1 Restore at least 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months one AFW train to OPERABLE status.

1. Not applicable OR when second AFW train intentionally In accordance made inoperable with the Risk resulting in loss Informed of safety Completion Time function. Program

2. The following Section 5.5.20 constraints are applicable when there is a loss of function:

parts b, c.2, c.3, d, e, f, g, and h.

Two AFW trains inoperable in MODE 1, 2, or 3.

EW System 3.7.7 3.7 PLANT SYSTEMS 3.7.7 Essential Cooling Water (EW) System LCO 3.7.7 Two EW trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One EW train A.1 --------NOTE---------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.6, "RCS Loops MODE 4" for shutdown cooling made inoperable by EW.

Restore EW train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

Insert 2 Insert 13 C B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion C Time of Condition A AND not met.

B.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months C

PALO VERDE UNITS 1,2,3 3.7.7-1 AMENDMENT NO. 117

INSERT 13 (3.7.7-1)

B. ----- NOTES ----- B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months EW train to OPERABLE status.

1. Not applicable OR when second EW train intentionally In accordance made inoperable. with the Risk Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two EW trains inoperable.

ESPS 3.7.8 3.7 PLANT SYSTEMS 3.7.8 Essential Spray Pond System (ESPS)

LCO 3.7.8 Two ESPS trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One ESPS train A.1 --------Notes--------

inoperable. 1. Enter applicable Conditions and Required Actions of LCO 3.8.1.

AC Sources Operating, for emergency diesel generator made inoperable by ESPS.

2. Enter applicable Conditions and Required Actions of LCO 3.4.6.

RCS Loops MODE 4, for shutdown cooling made inoperable by ESPS.

Restore ESPS train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

Insert 2 Insert 14 C B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion C Time of Condition A AND not met.

B.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months C

PALO VERDE UNITS 1,2,3 3.7.8-1 AMENDMENT NO. 117

INSERT 14 (3.7.8-1)

B. ----- NOTES ----- B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months ESPS train to OPERABLE status.

1. Not applicable OR when second ESPS train intentionally In accordance made inoperable. with the Risk Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two ESPS trains inoperable.

EC 3.7.10 3.7 PLANT SYSTEMS 3.7.10 Essential Chilled Water (EC) System LCO 3.7.10 Two EC trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One EC train A.1 Restore EC train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable. OPERABLE status.

Insert 2 Insert 15 C B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C

B.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months C

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.10.1 Verify each EC System manual, power In accordance operated, and automatic valve in the flow with the path, that is not locked, sealed, or Surveillance otherwise secured in position, is in the Frequency correct position. Control Program SR 3.7.10.2 Verify the proper actuation of each EC In accordance System component on an actual or simulated with the actuation signal. Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.7.10-1 AMENDMENT NO. 117, 188

INSERT 15 (3.7.10-1)

B. ----- NOTES ----- B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months EC train to OPERABLE status.

1. Not applicable OR when second EC train intentionally In accordance made inoperable. with the Risk Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two EC trains inoperable.

AC Sources Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. (continued) A.3 Restore required 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months offsite circuit to OPERABLE status. Insert 2 B. One DG inoperable. B.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for the OPERABLE AND required offsite circuit(s). Once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter AND B.2 Declare required 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from feature(s) supported discovery of by the inoperable DG Condition B inoperable when its concurrent with redundant required inoperability of feature(s) is redundant inoperable. required feature(s)

AND B.3.1 Determine OPERABLE 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months DG is not inoperable due to common cause failure.

OR B.3.2 Perform SR 3.8.1.2 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months for OPERABLE DG.

AND (continued)

PALO VERDE UNITS 1,2,3 3.8.1-2 AMENDMENT NO. 164, 197

AC Sources Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME Deleted B. (continued) B.4 Restore DG -------NOTE------ NOTE to OPERABLE For the Unit 3 from LA status. Train B DG failure 200 on December 15, 2016, restore the inoperable DG to OPERABLE status within 62 days.

10 days Insert 2 C. Two required offsite C.1 Declare required 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from circuits inoperable. feature(s) discovery of inoperable when Condition C its redundant concurrent with required inoperability of feature(s) is redundant required inoperable. feature(s)

AND C.2 Restore one 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months required offsite circuit to Insert 2 OPERABLE status.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-3 AMENDMENT NO. 197, 200

AC Sources Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. One required offsite ------------NOTE-------------

circuit inoperable. Enter applicable Conditions AND and Required Actions of LCO 3.8.9, "Distribution One DG inoperable. Systems Operating," when Condition D is entered with no AC power source to a train.

D.1 Restore required 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months offsite circuits to Insert 2 OPERABLE status.

OR D.2 Restore DG 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months to OPERABLE status. Insert 2 Insert 16 E. Two DGs inoperable. E.1 Restore one DG to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months OPERABLE status. Insert 2 F. One automatic load F.1 Restore automatic 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months sequencer inoperable. load sequencer to OPERABLE status. Insert 2 AND F.2 Declare required 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from feature(s) supported discovery of by the inoperable Condition F sequencer inoperable concurrent with when its redundant inoperability of required feature(s) redundant is inoperable. required feature(s)

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-4 AMENDMENT NO. 117

INSERT 16 (3.8.1-4)

NOTES------------------------------

1. Not applicable when second DG intentionally made inoperable.

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

AC Sources Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME G. --------NOTE-------- G.1 Restore required 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Condition G is not capability of the applicable for Class offsite circuit(s).

1E bus(es) provided with a two stage time OR delay for the degraded voltage relays and a fixed time delay for the loss of voltage relays.

One or more required offsite circuit(s) do not meet required capability.

NOTE------------

Enter LCO 3.8.1 Condition A or C for required offsite circuit(s) inoperable.

G.2 Transfer the ESF 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months bus(es) from the offsite circuit(s) to Insert 17 the EDG(s).

I H. Required Action and H.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion AND I Time of Condition A, B, C, D, E, F, or G not met. H.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months G or H I I. Three or more I.1 Enter LCO 3.0.3. Immediately required AC sources inoperable.

PALO VERDE UNITS 1,2,3 3.8.1-5 AMENDMENT NO. 123, 201

INSERT 17 (3.8.1-5)

H. ----- NOTES ----- H.1 Restore required AC 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months source(s) to OPERABLE status.

1. Not applicable OR when the third or a subsequent required AC In accordance source with the Risk intentionally Informed made inoperable. Completion Time Program

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Three or more required AC sources inoperable.

DC Sources Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources Operating LCO 3.8.4 The Train A and Train B DC electrical power subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One battery charger on A.1 Restore battery 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months one subsystem terminal voltage to inoperable. greater than or equal to the minimum established float voltage.

AND A.2 Verify battery float Once per 12 FXUUHQWDPSV hours AND A.3 Restore battery 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months charger to OPERABLE status.

Insert 2 B.1 Restore DC electrical 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months B. One DC electrical power subsystem to power subsystem Insert 2 OPERABLE status .

inoperable for reasons other than Condition A.

Insert 18 D C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D

C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months D

PALO VERDE UNITS 1,2,3 3.8.4-1 AMENDMENT NO. 117, 193

INSERT 18 (3.8.4-1)

C. ----- NOTES ----- C.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months DC electrical power subsystem to

1. Not applicable OR OPERABLE status.

when second DC electrical power subsystem In accordance intentionally with the Risk made inoperable. Informed Completion Time Program

2. The following Section 5.5.20 constraints are applicable:

parts b, c.2, c.3, d, e, f, g, and h.

Two DC electrical power subsystems inoperable.

Inverters Operating 3.8.7 3.8 ELECTRICAL POWER SYSTEMS 3.8.7 Inverters Operating LCO 3.8.7 The required Train A and Train B inverters shall be OPERABLE.

NOTE----------------------------

One inverter may be disconnected from its associated DC bus for a 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to perform an equalizing charge on its associated battery, provided:

a. The associated AC vital instrument bus is energized from its Class 1E constant voltage source regulator; and

b. All other AC vital instrument buses are energized from their associated OPERABLE inverters.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required inverter A.1 ---------NOTE---------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.8.9, "Distribution Systems - Operating" with any vital instrument bus de-energized.

Restore inverter to 7 days OPERABLE status.

Insert 2 (continued)

PALO VERDE UNITS 1,2,3 3.8.7-1 AMENDMENT NO. 117 180

Inverters Operating 3.8.7 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME Insert 19 C B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion C Time not met. AND B.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months C

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.7.1 Verify correct inverter voltage, frequency, In accordance and alignment to required AC vital with the instrument buses. Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.8.7-2 AMENDMENT NO. 117, 188

INSERT 19 (3.8.7-2)

B. ----- NOTES ----- B.1 Restore all but one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months inverter to OPERABLE status.

1. Not applicable OR when the second or a subsequent required In accordance inverter with the Risk intentionally Informed made inoperable Completion Time resulting in Program loss of safety function.

2. The following Section 5.5.20 constraints are applicable when there is a loss of function:

parts b, c.2, c.3, d, e, f, g, and h.

Two or more required inverters inoperable.

Distribution Systems Operating 3.8.9 3.8 ELECTRICAL POWER SYSTEMS 3.8.9 Distribution Systems Operating LCO 3.8.9 Train A and Train B AC, DC, and AC vital instrument bus electrical power distribution subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One AC electrical A.1 Restore AC electrical 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months power distribution power distribution Insert 2 subsystem inoperable. subsystem to OPERABLE status.

B. One AC vital B.1 Restore AC vital 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months instrument bus instrument bus electrical power electrical power distribution subsystem distribution inoperable. subsystem to OPERABLE status. Insert 2 (continued)

PALO VERDE UNITS 1,2,3 3.8.9-1 AMENDMENT NO. 117 197

Distribution Systems Operating 3.8.9 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. One DC electrical C.1 Restore DC electrical 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months power distribution power distribution subsystems inoperable. subsystem to OPERABLE Insert 2 status.

Insert 20 E D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time not met.

E D.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months E

E. Two or more inoperable E.1 Enter LCO 3.0.3. Immediately distribution subsystems that result in a loss of safety function.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.9.1 Verify correct breaker alignments and In accordance voltage to required AC, DC, and AC vital with the instrument bus electrical power Surveillance distribution subsystems. Frequency Control Program PALO VERDE UNITS 1,2,3 3.8.9-2 AMENDMENT NO. 188, 197

INSERT 20 (3.8.9-2)

D. ----- NOTES ----- D.1 Restore electrical 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months power distribution subsystem(s) to

1. Not applicable OR OPERABLE status.

when the second or a subsequent electrical power In accordance distribution with the Risk subsystem Informed intentionally Completion Time made inoperable Program resulting in loss of safety function.

2. The following Section 5.5.20 constraints are applicable when there is a loss of function:

parts b, c.2, c.3, d, e, f, g, and h.

Two or more electrical power distribution subsystems inoperable.

Before SFP transition Programs and Manuals 5.5 Delete 5.5 Programs and Manuals (continued)

______________________________________________________________________

5.5.19 Battery Monitoring and Maintenance Program (continued)

4. In Regulatory Guide 1.129, Regulatory Position 3, Subsection 5.4.1, State of Charge Indicator, the following statements in paragraph (d) may be omitted: When it has been recorded that the charging current has stabilized at the charging voltage for three consecutive hourly measurements, the battery is near full charge. These measurements shall be made after the initially high charging current decreases sharply and the battery voltage rises to approach the charger output voltage.

5. In lieu of RG 1.129, Regulatory Position 7, Subsection 7.6, Restoration, the following may be used: Following the test, record the float voltage of each cell of the string.

b. The program shall include the following provisions:

1. Actions to restore battery cells with float voltage < 2.13 V;

2. Actions to determine whether the float voltage of the UHPDLQLQJEDWWHU\FHOOVLV9ZKHQWKHIORDWYROWDJHRID

battery cell has been found to be < 2.13 V;

3. Actions to equalize and test battery cells that had been discovered with electrolyte level below the top of the plates;

4. Limits on average electrolyte temperature, battery connection resistance, and battery terminal voltage; and

5. A requirement to obtain specific gravity readings of all cells at each discharge test, consistent with manufacturer recommendations.

(continued)

________________________________________________________________________

PALO VERDE UNITS 1,2,3 5.5-19 AMENDMENT NO. 193, 203

After SFP transition Programs and Manuals 5.5 5.5 Programs and Manuals (continued)

______________________________________________________________________

5.5.19 Battery Monitoring and Maintenance Program (continued)

4. In Regulatory Guide 1.129, Regulatory Position 3, Subsection 5.4.1, State of Charge Indicator, the following statements in paragraph (d) may be omitted: When it has been recorded that the charging current has stabilized at the charging voltage for three consecutive hourly measurements, the battery is near full charge. These measurements shall be made after the initially high charging current decreases sharply and the battery voltage rises to approach the charger output voltage.

5. In lieu of RG 1.129, Regulatory Position 7, Subsection 7.6, Restoration, the following may be used: Following the test, record the float voltage of each cell of the string.

b. The program shall include the following provisions:

1. Actions to restore battery cells with float voltage < 2.13 V;

2. Actions to determine whether the float voltage of the remaining batWHU\FHOOVLV13 V when the float voltage of a battery cell has been found to be < 2.13 V;

3. Actions to equalize and test battery cells that had been discovered with electrolyte level below the top of the plates;

4. Limits on average electrolyte temperature, battery connection resistance, and battery terminal voltage; and

5. A requirement to obtain specific gravity readings of all cells at each discharge test, consistent with manufacturer recommendations.

Insert 21 5.5.20 Not Used

______________________________________________________________________

PALO VERDE UNITS 1,2,3 5.5-19a AMENDMENT NO. 193, 203

INSERT 21 (5.5-20) 5.5.20 Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09 (Revision 0) - A, Risk-Managed Technical Specifications (RMTS) Guidelines. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODE 1 and 2.

c. When a RICT is being used, any plant configuration change within the scope of the Configuration Risk Management Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after the plant configuration change, whichever is less.

3. Revising the RICT is not required if the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for voluntary entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. Use of a RICT is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more of the trains are considered PRA functional as defined in Section 2.3.1 of NEI 06-09 (Revision 0) - A. The RICT for these loss of function conditions may not exceed 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

INSERT 21 continued

f. Use of a RICT is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more trains are considered "PRA Functional" as defined in Section 2.3.1 of NEI 06-09 (Revision 0) - A. However, the following additional constraints shall be applied to the criteria for "PRA Functional."

1. Any SSCs credited in the PRA Functionality determination shall be the same SSCs relied upon to perform the specified Technical Specifications safety function.

2. Design basis success criteria parameters shall be met for all design basis accident scenarios for establishing PRA Functionality, during a Technical Specifications loss of function condition, where a RICT is applied.

g. Upon entering a RICT for an emergent condition, the potential for a common cause (CC) failure must be addressed.

If there is a high degree of confidence, based on the evidence collected, that there is no CC failure mechanism that could affect the redundant components, the RICT calculation may use nominal CC factor probability.

If a high degree of confidence cannot be established that there is no CC failure that could affect the redundant components, the RICT shall account for the increased possibility of CC failure. Accounting for the increased possibility of CC failure shall be accomplished by one of two methods. If one of the two methods listed below is not used, the Technical Specifications front stop shall not be exceeded.

1. The RICT calculation shall be adjusted to numerically account for the increased possibility of CC failure, in accordance with RG 1.177, as specified in Section A-1.3.2.1 of Appendix A of the RG. Specifically, when a component fails, the CC failure probability for the remaining redundant components shall be increased to represent the conditional failure probability due to CC failure of these components, in order to account for the possibility the first failure was caused by a CC mechanism.

OR

INSERT 21 continued

2. Prior to exceeding the front stop, RMAs not already credited in the RICT calculation shall be implemented. These RMAs shall target the success of the redundant and/or diverse structures, systems, or components (SSC) of the failed SSC and, if possible, reduce the frequency of initiating events which call upon the function(s) performed by the failed SSC.

Documentation of RMAs shall be available for NRC review.

h. A RICT entry is not permitted, or a RICT entry made shall be exited, for any condition involving a TS loss of Function if a PRA Functionality determination that reflects the plant configuration concludes that the LCO cannot be restored without placing the TS inoperable trains in an alignment which results in a loss of functional level PRA success criteria.

Enclosure Description and Assessment of Proposed Amendment for Risk-Informed Completion Times ATTACHMENT 2 Revised Technical Specification Pages (Clean copy) 1.3-13 3.7.5-5 1.3-14 3.7.7-1 1.3-15 3.7.7-2 3.3.6-1 3.7.8-1 3.3.6-2 3.7.8-2 3.4.10-1 3.7.10-1 3.4.10-2 3.7.10-2 3.4.12-1 3.8.1-1 3.4.12-2 3.8.1-2 3.5.1-1 3.8.1-3 3.5.1-2 3.8.1-4 3.5.3-1 3.8.1-5 3.5.5-1 3.8.1-6 3.6.2-3 3.8.1-7 3.6.3-1 3.8.1-8 3.6.3-2 3.8.1-9 3.6.3-3 3.8.1-10 3.6.3-4 3.8.1-11 3.6.3-5 3.8.1-12 3.6.3-6 3.8.1-13 3.6.3-7 3.8.1-14 3.6.6-1 3.8.1-15 3.7.2-2 3.8.1-16 3.7.2-3 3.8.1-17 3.7.3-1 3.8.1-18 3.7.3-2 3.8.4-1 3.7.4-1 3.8.4-2 3.7.4-2 3.8.4-3 3.7.5-1 3.8.4-4 3.7.5-2 3.8.7-1 3.7.5-3 3.8.7-2 3.7.5-4 3.8.9-1 3.8.9-2 3.8.9-3 5.5-20 5.5-21 5.5-22

Completion Times 1.3 1.3 Completion Times

______________________________________________________________________________

EXAMPLES EXAMPLE 1.3-7 (continued)

The Completion Time clock for Condition A does not stop after Condition B is entered, but continues from the time Condition A was initially entered. If Required Action A.1 is met after Condition B is entered, Condition B is exited and operation may continue in accordance with Condition A, provided the Completion Time for Required Action A.2 has not expired.

EXAMPLES EXAMPLE 1.3-8 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One subsystem A.1 Restore subsystem to 7 days inoperable. OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program B. --------NOTES------- B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Not applicable subsystem to OPERABLE when second status. OR subsystem intentionally In accordance with made inoperable. the Risk Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Two subsystems inoperable.

PALO VERDE UNITS 1,2,3 1.3-13 AMENDMENT NO. 117

Completion Times 1.3 1.3 Completion Times

______________________________________________________________________________

EXAMPLES EXAMPLE 1.3-8 (continued)

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time not met.

C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months When a subsystem is declared inoperable, Condition A is entered. The 7 day Completion Time may be applied as discussed in Example 1.3-2. However, the licensee may elect to apply the Risk Informed Completion Time Program which permits calculation of a Risk Informed Completion Time (RICT) that may be used to complete the Required Action beyond the 7 day Completion Time.

The RICT cannot exceed 30 days. After the 7 day Completion Time has expired, the subsystem must be restored to OPERABLE status within the RICT or Condition C must also be entered.

If a second subsystem is declared inoperable, Condition B may also be entered. The Condition is modified by two Notes. The first note states it is not applicable if the second subsystem is intentionally made inoperable. The second Note provides restrictions applicable to these "loss of function" Conditions. The Required Actions of Condition B are not intended for voluntary removal of redundant subsystems from service. The Required Action is only applicable if one subsystem is inoperable for any reason and the second subsystem is found to be inoperable, or if both subsystems are found to be inoperable at the same time. If Condition B is applicable, at least one subsystem must be restored to OPERABLE status within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or Condition C must also be entered. The licensee may be able to apply a RICT or to extend the Completion Time beyond 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , but not longer than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , if the requirements of the Risk Informed Completion Time Program are met. If two subsystems are inoperable and Condition B is not applicable (i.e., the second subsystem was intentionally made inoperable), LCO 3.0.3 is entered as there is no applicable Condition.

The Risk Informed Completion Time Program requires recalculation of the RICT to reflect changing plant conditions. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after the plant configuration change, whichever is less.

PALO VERDE UNITS 1,2,3 1.3-14 AMENDMENT NO.

Completion Times 1.3 1.3 Completion Times

______________________________________________________________________________

EXAMPLES EXAMPLE 1.3-8 (continued)

If the 7 day Completion Time clock of Condition A or the 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Completion Time clock of Condition B have expired and subsequent changes in plant conditions result in exiting the applicability of the Risk Informed Completion Time Program without restoring the inoperable subsystem to OPERABLE status, Condition C is also entered and the Completion Time clocks for Required Actions C.1 and C.2 start.

If the RICT expires or is recalculated to be less than the elapsed time since the Condition was entered and the inoperable subsystem has not been restored to OPERABLE status, Condition C is also entered and the Completion Time clocks for Required Actions C.1 and C.2 start. If the inoperable subsystems are restored to OPERABLE status after Condition C is entered, Conditions A, B, and C are exited, and therefore, the Required Actions of Condition C may be terminated.

______________________________________________________________________________

IMMEDIATE When "Immediately" is used as a Completion Time, the COMPLETION TIME Required Action should be pursued without delay and in a controlled manner.

PALO VERDE UNITS 1,2,3 1.3-15 AMENDMENT NO.

ESFAS Logic and Manual Trip 3.3.6 3.3 INSTRUMENTATION 3.3.6 Engineered Safety Features Actuation System (ESFAS) Logic and Manual Trip LCO 3.3.6 Six channels of ESFAS Matrix Logic, four channels of ESFAS Initiation Logic, two channels of Actuation Logic, and four channels of Manual Trip shall be OPERABLE for each Function in Table 3.3.6-1.

APPLICABILITY: According to Table 3.3.6-1.

ACTIONS

NOTE-----------------------------------------------------

Separate Condition entry is allowed for each Function.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months with one Matrix Logic OPERABLE status.

channel inoperable.

OR Three Matrix Logic channels are inoperable due to a common power source failure de-energizing three matrix power supplies.

B. One or more Functions B.1 Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months with one Manual Trip or OPERABLE status.

Initiation Logic channel OR inoperable.

In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.3.6-1 AMENDMENT NO. 117

ESFAS Logic and Manual Trip 3.3.6 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. One or more Functions C.1 Open at least one Immediately with two Initiation Logic contact in the affected channels or Manual Trip trip leg of both ESFAS channels affecting the Actuation Logics.

same trip leg inoperable. AND C.2 Restore channels to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

D. One or more Functions D.1 -------------NOTE----------

with one Actuation Logic One channel of channel inoperable. Actuation Logic may be bypassed for up to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for Surveillances, provided the other channel is OPERABLE.

Restore channel to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time of Conditions for Containment Spray Actuation Signal, Main E.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Steam Isolation Signal or Auxiliary Feedwater Actuation Signal not met.

(continued)

PALO VERDE UNITS 1,2,3 3.3.6-2 AMENDMENT NO. 117

Pressurizer Safety Valves-MODES 1, 2, and 3 3.4.10 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves - Modes 1, 2 and 3 LCO 3.4.10 Four pressurizer safety valves shall be OPERABLE with lift settings 2450.25 psia and 2549.25 psia.

APPLICABILITY: MODES 1, 2, and 3,

NOTE----------------------------

The lift settings are not required to be within LCO limits during MODES 3 and 4 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions.

This exception is allowed for 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. --------NOTES--------- A.1 Restore valve to 15 minutes OPERABLE status.

1. Not applicable when pressurizer safety OR valve intentionally made inoperable. In accordance with the Risk

2. The following Informed Section 5.5.20 Completion Time constraints are Program applicable: parts b, c.2, c.3, d, e, f, g, and h.

One pressurizer safety valve inoperable.

PALO VERDE UNITS 1,2,3 3.4.10-1 AMENDMENT NO. 117

Pressurizer Safety Valves-MODES 1, 2, and 3 3.4.10 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND OR B.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Two or more pressurizer safety valves inoperable.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance OPERABLE in accordance with the Inservice with the Testing Program. Following testing, lift Inservice settings shall be within +/- 1%. Testing Program PALO VERDE UNITS 1,2,3 3.4.10-2 AMENDMENT NO. 117

Pressurizer Vents 3.4.12 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.12 Pressurizer Vents LCO 3.4.12 Four pressurizer vent paths shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3.

MODE 4 with RCS pressure 385 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. Two or three required A.1 Restore required 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months pressurizer vent paths pressurizer vent inoperable. paths to OPERABLE status. OR In accordance with the Risk Informed Completion Time Program B. --------NOTES--------- B.1 Restore one 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months

1. Not applicable when pressurizer vent path last pressurizer to OPERABLE status.

OR vent path intentionally made inoperable. In accordance with the Risk

2. The following Informed Section 5.5.20 Completion Time constraints are Program applicable: parts b, c.2, c.3, d, e, f, g, and h.

All pressurizer vent paths inoperable.

PALO VERDE UNITS 1,2,3 3.4.12-1 AMENDMENT NO. 188,

Pressurizer Vents 3.4.12 ACTIONS (CONTINUED)

CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time of Condition A, or B not met.

C.2 Be in MODE 4 with RCS 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months pressure < 385 psia.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.12.1 Perform a complete cycle of each In accordance Pressurizer Vent Valve. with the Surveillance Frequency Control Program SR 3.4.12.2 Verify flow through each In accordance pressurizer vent path. with the Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.4.12-2 AMENDMENT NO. 188,

SITs-Operating 3.5.1 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.1 Safety Injection Tanks (SITs) - Operating LCO 3.5.1 Four SITs shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODES 3 and 4 with pressurizer pressure 1837 psia.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One SIT inoperable due A.1 Restore SIT to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months to boron concentration OPERABLE status.

not within limits.

OR One SIT inoperable due to inability to verify level or pressure.

B. One SIT inoperable for B.1 Restore SIT to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months reasons other than OPERABLE status.

Condition A.

C. --------NOTES-------- C.1 Restore all but one SIT 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Not applicable when to OPERABLE status.

the second or a OR subsequent SIT intentionally made inoperable. In accordance with the Risk Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Two or more SITs inoperable for reasons other than Condition A.

PALO VERDE UNITS 1,2,3 3.5.1-1 AMENDMENT NO. 118,

SITs-Operating 3.5.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time of Condition A, B, or C not met.

D.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months pressure to

< 1837 psia.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.5.1.1 Verify each SIT isolation valve is fully In accordance open. with the Surveillance Frequency Control Program SR 3.5.1.2 Verify borated water volume in each SIT is In accordance 28% narrow range and 72% narrow range. with the Surveillance Frequency Control Program SR 3.5.1.3 Verify nitrogen cover pressure in each SIT In accordance is 600 psig and 625 psig. with the Surveillance Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.5.1-2 AMENDMENT NO. 188,

ECCS Operating 3.5.3 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.3 ECCS Operating LCO 3.5.3 Two ECCS trains shall be OPERABLE.

APPLICABILITY: MODES 1 and 2, MODE 3 with pressurizer pressure 1837 psia or with RCS Tc 485°F.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One LPSI subsystem A.1 Restore subsystem to 7 days inoperable. OPERABLE status. OR In accordance with the Risk Informed Completion Time Program B. One or more trains B.1 Restore train(s) to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable for reasons OPERABLE status. OR other than Condition A.

AND In accordance with the Risk At least 100% of the Informed ECCS flow equivalent to Completion Time a single OPERABLE ECCS Program train available.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion AND Time not met.

C.2 Reduce pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months pressure to

< 1837 psia.

AND C.3 Reduce RCS Tc to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months

< 485°F.

PALO VERDE UNITS 1,2,3 3.5.3-1 AMENDMENT NO. 124,

RWT 3.5.5 3.5 EMERGENCY CORE COOLING SYSTEMS (ECCS) 3.5.5 Refueling Water Tank (RWT)

LCO 3.5.5 The RWT shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. RWT boron A.1 Restore RWT to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months concentration not OPERABLE status.

within limits.

OR RWT borated water temperature not within limits.

B. --------NOTES--------- B.1 Restore RWT to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months OPERABLE status.

1. Not applicable OR when RWT is intentionally made inoperable. In accordance with the Risk Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

RWT inoperable for reasons other than Condition A.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.5.5-1 AMENDMENT NO. 117

Containment Air Locks 3.6.2 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.1 Verify an OPERABLE 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months door is closed in the affected air lock.

AND B.2 Lock an OPERABLE door 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months closed in the affected air lock.

AND B.3 --------NOTE---------

Air lock doors in high radiation areas may be verified locked closed by administrative means.

Verify an OPERABLE Once per 31 days door is locked closed in the affected air lock.

C. One or more C.1 Initiate action to Immediately containment air locks evaluate overall inoperable for reasons containment leakage other than Condition A rate per LCO 3.6.1.

or B. AND C.2 Verify a door is 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months closed in the affected air lock.

AND C.3 Restore air lock to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.6.2-3 AMENDMENT NO. 117

Containment Isolation Valves 3.6.3 3.6 CONTAINMENT SYSTEMS 3.6.3 Containment Isolation Valves LCO 3.6.3 Each required containment isolation valve shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS

NOTES-----------------------------------

1. Penetration flow paths except for 42 inch purge valve penetration flow paths may be unisolated intermittently under administrative controls.

2. Separate Condition entry is allowed for each penetration flow path.

3. Enter applicable Conditions and Required Actions for system(s) made inoperable by containment isolation valves.

4. Enter applicable Conditions and Required Actions of LCO 3.6.1, "Containment," when leakage results in exceeding the overall containment leakage rate acceptance criteria.

5. A 42 inch refueling purge valve is not a required containment isolation valve when its flow path is isolated with a blind flange tested in accordance with SR 3.6.1.1.

CONDITION REQUIRED ACTION COMPLETION TIME A. ---------NOTE--------- A.1 Isolate the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Only applicable to penetration flow path penetration flow paths by use of at least OR with two required one closed and containment isolation de-activated In accordance valves. automatic valve, with the Risk

closed manual valve, Informed blind flange, or One or more Completion Time check valve with flow penetration flow paths Program through the valve with one required secured.

containment isolation valve inoperable AND except for purge valve leakage not within limit.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-1 AMENDMENT NO. 166,

Containment Isolation Valves 3.6.3 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. (continued) A.2 --------NOTE---------

Isolation devices in high radiation areas may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path following is isolated. isolation for isolation devices outside containment AND Prior to entering MODE 4 from MODE 5 if not performed within the previous 92 days for isolation devices inside containment B. --------NOTES-------- B.1 Isolate the affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Only applicable to penetration flow path penetration flow by use of at least one OR paths with two closed and de-activated required containment automatic valve, closed In accordance isolation valves. manual valve, or blind with the Risk flange.

2. RICT is not Informed applicable when the Completion Time second containment Program isolation valve is intentionally made inoperable.

3. The following Section 5.5.20 constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-2 AMENDMENT NO. 166,

Containment Isolation Valves 3.6.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. (continued)

One or more penetration flow paths containment isolation valves inoperable except for purge valve leakage not within limit.

C. ---------NOTE--------- C.1 Isolate the affected 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months penetration flow path Only applicable to by use of at least one OR penetration flow paths closed and with only one required de-activated automatic containment isolation In accordance valve, closed manual valve and a closed with the Risk valve, or blind flange.

system. Informed

Completion Time AND Program One or more penetration flow paths C.2 --------NOTE---------

with one required Isolation devices in containment isolation high radiation areas valve inoperable. may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path following is isolated. isolation PALO VERDE UNITS 1,2,3 3.6.3-3 AMENDMENT NO. 166,

Containment Isolation Valves 3.6.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. ---------NOTES--------- D.1 Isolate the affected 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

1. RICT is not penetration flow path applicable when the by use of at least OR second containment one closed and purge valve is de-activated In accordance intentionally made automatic valve with with the Risk inoperable. resilient seals, or Informed blind flange. Completion Time

2. The following Program Section 5.5.20 AND constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

One or more penetration flow paths with one or more required containment purge valves not within purge valve leakage limits.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-4 AMENDMENT NO. 117

Containment Isolation Valves 3.6.3 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME D. (continued) D.2 --------NOTE---------

Isolation devices in high radiation areas may be verified by use of administrative means.

Verify the affected Once per 31 days penetration flow path following is isolated. isolation for isolation devices outside containment AND Prior to entering MODE 4 from MODE 5 if not performed within the previous 92 days for isolation devices inside containment AND D.3 Perform SR 3.6.3.6 Once per 92 days for the resilient following seal purge valves isolation closed to comply with Required Action D.1.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND E.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.6.3-5 AMENDMENT NO. 188

Containment Isolation Valves 3.6.3 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.3.1 Verify each required 42 inch purge valve is In accordance sealed closed except for one purge valve in with the a penetration flow path while in Surveillance Condition D of this LCO. Frequency Control Program SR 3.6.3.2 Verify each 8 inch purge valve is closed In accordance except when the 8 inch purge valves are with the open for pressure control, ALARA or air Surveillance quality considerations for personnel entry, Frequency or for Surveillances that require the Control Program valves to be open.

SR 3.6.3.3 -------------------NOTE--------------------

Valves and blind flanges in high radiation areas may be verified by use of administrative means.

Verify each containment isolation manual In accordance valve and blind flange that is located with the outside containment and not locked, sealed Surveillance or otherwise secured and is required to be Frequency closed during accident conditions is Control Program closed, except for containment isolation valves that are open under administrative controls.

(continued)

PALO VERDE UNITS 1,2,3 3.6.3-6 AMENDMENT NO. 188,

Containment Isolation Valves 3.6.3 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.6.3.4 -------------------NOTE--------------------

Valves and blind flanges in high radiation areas may be verified by use of administrative means.

Verify each containment isolation manual Prior to entering valve and blind flange that is located MODE 4 from MODE 5 inside containment and not locked, sealed if not performed or otherwise secured and required to be within the previous closed during accident conditions is 92 days closed, except for containment isolation valves that are open under administrative controls.

SR 3.6.3.5 Verify the isolation time of each required In automatic power operated containment accordance isolation valve is within limits. with the Inservice Testing Program SR 3.6.3.6 Perform leakage rate testing for required In accordance with containment purge valves with resilient the Surveillance seals. Frequency Control Program AND Within 92 days after opening the valve SR 3.6.3.7 Verify each required automatic containment In accordance with isolation valve that is not locked, sealed, the Surveillance or otherwise secured in position, actuates Frequency Control to the isolation position on an actual or Program simulated actuation signal.

PALO VERDE UNITS 1,2,3 3.6.3-7 AMENDMENT NO.

Containment Spray System 3.6.6 3.6 CONTAINMENT SYSTEMS 3.6.6 Containment Spray System LCO 3.6.6 Two containment spray trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3.

MODE 4 when RCS pressure is 385 psia ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One containment spray A.1 Restore containment 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months train inoperable. spray train to OPERABLE status. OR In accordance with the Risk Informed Completion Time Program B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A AND not met.

B.2 Be in MODE 4 with RCS 84 hours9.722222e-4 days 0.0233 hours 1.388889e-4 weeks 3.1962e-5 months pressure < 385 psia.

C. Two containment spray C.1 Enter LCO 3.0.3. Immediately trains inoperable.

PALO VERDE UNITS 1,2,3 3.6.6-1 AMENDMENT NO. 117

MSIVs 3.7.2 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME E. Three or more MSIV E.1 Declare each affected Immediately actuator trains MSIV inoperable.

inoperable.

OR Required Action and associated Completion Time of Condition A, B, or C not met.

F. One MSIV inoperable in F.1 Restore MSIV to 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months MODE 1. OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program G. --------NOTES--------- G.1 Restore all but one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months MSIV to OPERABLE

1. Not applicable when status. OR the second or a subsequent MSIV intentionally made In accordance inoperable. with the Risk Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Two or more MSIVs inoperable in MODE 1.

H. Required Action and H.1 Be in MODE 2. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion Time of Condition F or G not met.

PALO VERDE UNITS 1,2,3 3.7.2-2 AMENDMENT NO. 163,

MSIVs 3.7.2 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME I. ---------NOTE--------- I.1 Close MSIV. 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Separate Condition AND entry is allowed for each MSIV. I.2 Verify MSIV is Once per 7 days

closed.

One or more MSIVs inoperable in MODE 2, 3, or 4.

J. Required Action and J.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition I AND not met.

J.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.2.1 -------------------NOTE--------------------

Not required to be performed prior to entry into MODE 3.

Verify closure time of each MSIV is In accordance within limits with each actuator train on with the an actual or simulated actuation signal. Inservice Testing Program PALO VERDE UNITS 1,2,3 3.7.2-3 AMENDMENT NO. 181

MFIVs 3.7.3 3.7 PLANT SYSTEMS 3.7.3 Main Feedwater Isolation Valves (MFIVs)

LCO 3.7.3 Four economizer MFIVs and four downcomer MFIVs shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4 except when MFIV is closed and deactivated or isolated by a closed and deactivated power operated valve.

ACTIONS

NOTE------------------------------------

Separate Condition entry is allowed for each penetration flow path.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more MFIVs A.1 Restore MFIV(s) to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable. OPERABLE status.

OR In accordance with the Risk OR Informed Completion Time Program A.2.1 Close or isolate 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable MFIV(s).

AND A.2.2 Verify inoperable Once per 7 days MFIV(s) is closed or following isolated. Isolation PALO VERDE UNITS 1,2,3 3.7.3-1 AMENDMENT NO. 158

MFIVs 3.7.3 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. --------NOTES---------- B.1 Restore one valve to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months OPERABLE status.

1. RICT is not OR applicable when the second valve in the OR In accordance affected flow path with the Risk is intentionally Informed made inoperable. Completion Time Program

2. The following Section 5.5.20 constraints are B.2.1 Isolate affected flow 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months applicable: parts b, path.

c.2, c.3, d, e, f, g, and h. AND

Two valves in the same B.2.2 Verify inoperable Once per 7 days flow path inoperable. MFIV(s) is closed or following isolated. Isolation.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.3.1 Verify the closure time of each MFIV is In accordance within limits on an actual or simulated with the actuation signal. Inservice Testing Program PALO VERDE UNITS 1,2,3 3.7.3-2 AMENDMENT NO. 181

ADVs 3.7.4 3.7 PLANT SYSTEMS 3.7.4 Atmospheric Dump Valves (ADVs)

LCO 3.7.4 Four ADV lines shall be OPERABLE.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is being relied upon for heat removal.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. --------NOTE--------

Separate Condition A.1 Restore ADV line to 7 days entry is allowed for OPERABLE status. OR each SG.

In accordance with the Risk One required ADV line Informed inoperable. Completion Time Program B. --------NOTES--------- B.1 Restore one ADV line 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

1. Not applicable when to OPERABLE status on the last ADV each SG. OR intentionally made In accordance inoperable resulting with the Risk in loss of safety Informed function. Completion Time Program

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

Two or more ADV lines inoperable with both ADV lines inoperable on one or more SGs.

PALO VERDE UNITS 1,2,3 3.7.4-1 AMENDMENT NO. 191, (CORRECTED PAGE)

ADVs 3.7.4 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 4 without 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months reliance on steam generator for heat removal.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.4.1 Verify one complete cycle of each ADV. In accordance with the Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.7.4-2 AMENDMENT NO. 188,

AFW System 3.7.5 3.7 PLANT SYSTEMS 3.7.5 Auxiliary Feedwater (AFW) System LCO 3.7.5 Three AFW trains shall be OPERABLE.

NOTE----------------------------

Only one AFW train, which includes a motor driven pump, is required to be OPERABLE in MODE 4.

APPLICABILITY: MODES 1, 2, and 3, MODE 4 when steam generator is relied upon for heat removal.

ACTIONS

NOTE-------------------------------------

LCO 3.0.4.b is not applicable.

CONDITION REQUIRED ACTION COMPLETION TIME A. One steam supply to A.1 Restore affected 7 days turbine driven AFW equipment to OPERABLE pump inoperable. status. OR OR In accordance

NOTE--------- with the Risk Only applicable if Informed MODE 2 has not been Completion Time entered following Program refueling.

One turbine driven AFW pump inoperable in MODE 3 following refueling.

B. One AFW train B.1 Restore AFW train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable for reasons OPERABLE status.

other than Condition A OR in MODE 1, 2, or 3.

In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.7.5-1 AMENDMENT NO. 197,

AFW System 3.7.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. -------NOTES-------- C.1 Restore at least one AFW 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months train to OPERABLE status.

1. Not applicable when OR second AFW train intentionally made inoperable resulting In accordance in loss of safety with the Risk function. Informed Completion Time Program

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

Two AFW trains inoperable in MODE 1, 2, or 3.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time of Condition A, B AND or C not met.

D.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months PALO VERDE UNITS 1,2,3 3.7.5-2 AMENDMENT NO. 117

AFW System 3.7.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME E. Three AFW trains E.1 --------NOTE---------

inoperable in MODE 1, LCO 3.0.3 and all other 2, or 3. LCO Required Actions requiring MODE changes are suspended until one AFW train is restored to OPERABLE status.

Initiate action to restore one AFW train Immediately to OPERABLE status.

F. Required AFW train F.1 --------NOTE---------

inoperable in MODE 4. LCO 3.0.3 and all other LCO Required Actions requiring MODE changes are suspended until one AFW train is restored to OPERABLE status.

Initiate action to restore one AFW train to Immediately OPERABLE status.

PALO VERDE UNITS 1,2,3 3.7.5-3 AMENDMENT NO. 188

AFW System 3.7.5 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.5.1 Verify each AFW manual, power operated, and In accordance automatic valve in each water flow path and with the in both steam supply flow paths to the Surveillance steam turbine driven pump, that is not Frequency locked, sealed, or otherwise secured in Control Program position, is in the correct position.

SR 3.7.5.2 -------------------NOTE--------------------

Not required to be performed for the turbine driven AFW pump until 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months after reaching 532°F in the RCS.

Verify the developed head of each AFW pump In accordance at the flow test point is greater than or with the equal to the required developed head. Inservice Test Program SR 3.7.5.3 -------------------NOTES-------------------

1. Not required to be performed for the turbine driven AFW pump until 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months after reaching 532°F in the RCS.

2. Not applicable in MODE 4 when steam generator is relied upon for heat removal.

Verify each AFW automatic valve that is not In accordance locked, sealed, or otherwise secured in with the position, actuates to the correct position Surveillance on an actual or simulated actuation signal. Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.7.5-4 AMENDMENT NO. 188,

AFW System 3.7.5 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.7.5.4 -------------------NOTES-------------------

1. Not required to be performed for the turbine driven AFW pump until 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months after reaching 532°F in the RCS.

2. Not applicable in MODE 4 when steam generator is relied upon for heat removal.

Verify each AFW pump starts automatically In accordance on an actual or simulated actuation signal. with the Surveillance Frequency Control Program SR 3.7.5.5 Verify the proper alignment of the required Prior to AFW flow paths by verifying flow from the entering MODE 2 condensate storage tank to each steam whenever unit generator. has been in MODE 5 or 6 for

> 30 days PALO VERDE UNITS 1,2,3 3.7.5-5 AMENDMENT NO.

EW System 3.7.7 3.7 PLANT SYSTEMS 3.7.7 Essential Cooling Water (EW) System LCO 3.7.7 Two EW trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One EW train A.1 --------NOTE---------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.4.6, "RCS Loops MODE 4" for shutdown cooling made inoperable by EW.

Restore EW train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program B. --------NOTES-------- B.1 Restore at least one EW 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months train to OPERABLE

1. Not applicable when status.

second EW train OR intentionally made inoperable.

In accordance

2. The following with the Risk Section 5.5.20 Informed constraints are Completion Time applicable: parts b, Program c.2, c.3, d, e, f, g, and h.

Two EW trains inoperable.

PALO VERDE UNITS 1,2,3 3.7.7-1 AMENDMENT NO. 117

EW System 3.7.7 ACTION (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.7.1 -------------------NOTE--------------------

Isolation of EW flow to individual components does not render the EW System inoperable.

Verify each EW manual, power operated, and In accordance automatic valve in the flow path servicing with the safety related equipment, that is not Surveillance locked, sealed, or otherwise secured in Frequency position, is in the correct position. Control Program SR 3.7.7.2 Verify each EW automatic valve in the flow In accordance path that is not locked, sealed, or with the otherwise secured in position, actuates to Surveillance the correct position on an actual or Frequency simulated actuation signal. Control Program SR 3.7.7.3 Verify each EW pump starts automatically on In accordance an actual or simulated actuation signal. with the Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.7.7-2 AMENDMENT NO. 188,

ESPS 3.7.8 3.7 PLANT SYSTEMS 3.7.8 Essential Spray Pond System (ESPS)

LCO 3.7.8 Two ESPS trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One ESPS train A.1 --------Notes--------

inoperable. 1. Enter applicable Conditions and Required Actions of LCO 3.8.1. AC Sources Operating, for emergency diesel generator made inoperable by ESPS.

2. Enter applicable Conditions and Required Actions of LCO 3.4.6. RCS Loops MODE 4, for shutdown cooling made inoperable by ESPS.

Restore ESPS train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program PALO VERDE UNITS 1,2,3 3.7.8-1 AMENDMENT NO. 117

ESPS 3.7.8 ACTION (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. ---------NOTES--------- B.1 Restore at least one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months ESPS train to OPERABLE

1. Not applicable when status.

second ESPS train OR intentionally made inoperable. In accordance

2. The following with the Risk Section 5.5.20 Informed constraints are Completion Time applicable: parts Program b, c.2, c.3, d, e, f, g, and h.

Two ESPS trains inoperable.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.8.1 -------------------Notes-------------------

Isolation of ESPS flow to individual components does not render ESPS inoperable.

Verify each ESPS manual and power operated In accordance valve in the flow path servicing safety with the related equipment, that is not locked, Surveillance sealed, or otherwise secured in position, Frequency is in the correct position. Control Program SR 3.7.8.2 Verify each ESPS pump starts automatically In accordance on an actual or simulated actuation signal. with the Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.7.8-2 AMENDMENT NO. 188,

EC 3.7.10 3.7 PLANT SYSTEMS 3.7.10 Essential Chilled Water (EC) System LCO 3.7.10 Two EC trains shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One EC train A.1 Restore EC train to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable. OPERABLE status. OR In accordance with the Risk Informed Completion Time Program B. --------NOTES--------- B.1 Restore at least one EC 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months

1. Not applicable when train to OPERABLE status.

second EC train OR intentionally made inoperable. In accordance

2. The following with the Risk Section 5.5.20 Informed constraints are Completion Time applicable: parts b, Program c.2, c.3, d, e, f, g, and h.

Two EC trains inoperable.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.7.10-1 AMENDMENT NO. 188

EC 3.7.10 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.10.1 Verify each EC System manual, power In accordance operated, and automatic valve in the flow with the path, that is not locked, sealed, or Surveillance otherwise secured in position, is in the Frequency correct position. Control Program SR 3.7.10.2 Verify the proper actuation of each EC In accordance System component on an actual or simulated with the actuation signal. Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.7.10-2 AMENDMENT NO.

AC Sources Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. (continued) A.3 Restore required 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months offsite circuit to OPERABLE status. OR In accordance with the Risk Informed Completion Time Program B. One DG inoperable. B.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for the OPERABLE AND required offsite circuit(s). Once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter AND B.2 Declare required 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from feature(s) discovery of supported by the Condition B inoperable DG concurrent with inoperable when inoperability of its redundant redundant required required feature(s) is feature(s) inoperable.

AND B.3.1 Determine OPERABLE 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months DG is not inoperable due to common cause failure.

OR B.3.2 Perform SR 3.8.1.2 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months for OPERABLE DG.

AND (continued)

PALO VERDE UNITS 1,2,3 3.8.1-2 AMENDMENT NO. 197,

AC Sources Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME B. (continued) B.4 Restore DG 10 days to OPERABLE status. OR In accordance with the Risk Informed Completion Time Program C. Two required offsite C.1 Declare required 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from circuits inoperable. feature(s) discovery of inoperable when Condition C its redundant concurrent with required inoperability of feature(s) is redundant required inoperable. feature(s)

AND C.2 Restore one 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months required offsite circuit to OR OPERABLE status.

In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-3 AMENDMENT NO. 200,

AC Sources Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. One required offsite -----------NOTE-----------

circuit inoperable. Enter applicable Conditions and Required Actions of AND LCO 3.8.9, "Distribution One DG inoperable. Systems Operating," when Condition D is entered with no AC power source to a train.

D.1 Restore required 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months offsite circuits to OPERABLE status. OR OR In accordance with the Risk Informed Completion Time Program D.2 Restore DG 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months to OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program

NOTES--------- E.1 Restore one DG to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months OPERABLE status.

1. Not applicable when OR second DG intentionally made In accordance with inoperable. the Risk Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

E. Two DGs inoperable.

PALO VERDE UNITS 1,2,3 3.8.1-4 AMENDMENT NO. 117

AC Sources Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME F. One automatic load F.1 Restore automatic 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months sequencer inoperable. load sequencer to OPERABLE status. OR AND In accordance with the Risk Informed Completion Time Program F.2 Declare required 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from feature(s) supported discovery of by the inoperable Condition F sequencer inoperable concurrent with when its redundant inoperability of required feature(s) redundant required is inoperable. feature(s)

G. --------NOTE-------- G.1 Restore required 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Condition G is not capability of the applicable for Class offsite 1E bus(es) provided circuit(s).

with a two stage time OR delay for the degraded voltage relays and a fixed time delay for the loss of voltage relays.

One or more required offsite circuit(s) do not meet required capability.

NOTE-----------

Enter LCO 3.8.1 Condition A or C for required offsite circuit(s) inoperable.

G.2 Transfer the ESF 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months bus(es) from the offsite circuit(s) to the EDG(s).

PALO VERDE UNITS 1,2,3 3.8.1-5 AMENDMENT NO. 201,

AC Sources Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME H.---------NOTES-------- H.1 Restore required AC 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months source(s) to OPERABLE

1. Not applicable when status.

the third or a OR subsequent required AC source In accordance intentionally made with the Risk inoperable. Informed

2. The following Completion Time Section 5.5.20 Program constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Three or more required AC sources inoperable.

I. Required Action and I.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months Associated Completion Time of Condition A, AND B, C, D, E, F, G, or H not met. I.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.8.1-6 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.1 Verify correct breaker alignment and In accordance indicated power availability for each with the required offsite circuit. Surveillance Frequency Control Program SR 3.8.1.2 --------------------NOTES------------------

1. Performance of SR 3.8.1.7 satisfies this SR.

2. All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.

3. A modified DG start involving idling and gradual acceleration to synchronous speed may be used for this SR as recommended by the manufacturer. When modified start procedures are not used, the time, voltage, and frequency tolerances of SR 3.8.1.7 must be met.

4. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify each DG starts from standby In accordance condition and achieves steady state with the voltage 4000 V and 4377.2 V, and Surveillance frequency 59.7 Hz and 60.7 Hz. Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-7 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.3 -------------------NOTES-------------------

1. DG loadings may include gradual loading as recommended by the manufacturer.

2. Momentary transients outside the load range do not invalidate this test.

3. This Surveillance shall be conducted on only one DG at a time.

4. This SR shall be preceded by and immediately follow without shutdown a successful performance of SR 3.8.1.2 or SR 3.8.1.7.

Verify each DG is synchronized and loaded, In accordance and operates for 60 minutes at a load with the 4950 kW and 5500 kW. Surveillance Frequency Control Program SR 3.8.1.4 Verify each day tank contains 550 gal of In accordance fuel oil (minimum level of 2.75 feet). with the Surveillance Frequency Control Program SR 3.8.1.5 Check for and remove accumulated water from In accordance each day tank. with the Surveillance Frequency Control Program SR 3.8.1.6 Verify the fuel oil transfer system In accordance operates to automatically transfer fuel with the oil from the storage tank to the day tank. Surveillance Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-8 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.7 -------------------NOTE--------------------

1. All DG starts may be preceded by an engine prelube period followed by a warmup period prior to loading.

2. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify each DG starts from standby In accordance condition and achieves with the

a. In 10 seconds, voltage 3740 V and Surveillance frequency 58.8 Hz; and Frequency

b. Steady state voltage 4000 V and Control Program 4377.2 V, and frequency 59.7 Hz and 60.7 Hz.

SR 3.8.1.8 --------------------NOTE------------------

This Surveillance shall not normally be performed in MODE 1 or 2. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify manual transfer of AC power sources In accordance from the normal offsite circuit to each with the alternate offsite circuit. Surveillance Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-9 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.9 --------------------NOTE------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify each DG rejects a load greater than In accordance or equal to its associated single largest with the post-accident load, and: Surveillance Frequency

a. Following load rejection, the Control Program frequency is 64.5 Hz;

b. Within 3 seconds following load rejection, the voltage is 3740 V and 4580 V; and

c. Within 3 seconds following load rejection, the frequency is 58.8 Hz and 61.2 Hz.

SR 3.8.1.10 --------------------NOTE-----------------

If performed with the DG synchronized with offsite power, it shall be performed at a power factor of 0.89. However, if grid conditions do not permit, the power factor limit is not required to be met. Under this condition the power factor shall be maintained as close to the limit as practicable.

Verify each DG does not trip, and voltage In accordance is maintained 6200 V during and following with the a load rejection of 4950 kW and Surveillance 5500 kW. Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-10 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 -------------------NOTE--------------------

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4.

However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

3. Momentary voltage and frequency transients induced by load changes do not invalidate this test.

4. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify on an actual or simulated loss of In accordance offsite power signal: with the Surveillance

a. De-energization of emergency buses; Frequency Control Program

b. Load shedding from emergency buses;

c. DG auto-starts and:

1. energizes permanently connected loads in 10 seconds,

2. energizes auto-connected emergency loads through automatic load sequencer,

3. maintains steady state voltage 4000 V and 4377.2 V,

4. maintains steady state frequency 59.7 Hz and 60.7 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 5 minutes.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-11 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------NOTES------------------

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4.

However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

3. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify on an actual or simulated Engineered In accordance Safety Feature (ESF) actuation signal with the (without a loss of offsite power) each Surveillance DG auto-starts and: Frequency Control Program

a. In 10 seconds, achieves voltage 3740 V and frequency 58.8 Hz;

b. Achieves steady state voltage 4000 and 4377.2 V and frequency 59.7 Hz and 60.7 Hz;

c. Operates for 5 minutes on standby (running unloaded);

d. Permanently connected loads remain energized from the offsite power system; and

e. Emergency loads are energized (auto-connected through the automatic load sequencer) from the offsite power system.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-12 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.13 Verify each DG automatic trip is bypassed In accordance on actual or simulated loss of voltage with the signal on the emergency bus concurrent with Surveillance an actual or simulated ESF actuation Frequency signal except: Control Program

a. Engine overspeed;

b. Generator differential current;

c. Engine low lube oil pressure; and

d. Manual emergency stop trip.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-13 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.14 -------------------NOTES-------------------

1. Momentary transients outside the load range do not invalidate this test.

2. If performed with the DG synchronized with offsite power, it shall be performed at a power factor of 0.89.

However, if grid conditions do not permit, the power factor limit is not required to be met. Under this condition the power factor shall be maintained as close to the limit as practicable.

3. All DG starts may be preceded by an engine prelube period followed by a warmup period prior to loading.

4. DG loading may include gradual loading as recommended by the manufacturer.

Verify each DG operates for 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s: In accordance with the

a. For 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months loaded 4950 kW and Surveillance 5500 kW; and Frequency Control Program

b. For the remaining hours ( 2) of the test loaded 5775 kW and 6050 kW.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-14 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.15 -------------------NOTES-------------------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG, loaded 4950 kW and 5500 kW, has operated 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or until temperatures have stabilized.

Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

3. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify each DG starts and achieves In accordance

a. In 10 seconds, voltage 3740 V and with the frequency 58.8 Hz; and Surveillance Frequency

b. Steady state voltage 4000 V and Control Program 4377.2 V, and frequency 59.7 Hz and 60.7 Hz.

SR 3.8.1.16 -------------------NOTE-------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify each DG: In accordance

a. Synchronizes with offsite power source with the while loaded with emergency loads upon Surveillance a simulated restoration of offsite Frequency power; Control Program

b. Transfers loads to offsite power source; and

c. Returns to ready-to-load operation.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-15 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.17 -------------------NOTE--------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify, with a DG operating in test mode In accordance and connected to its bus, an actual or with the simulated ESF actuation signal overrides Surveillance the test mode by: Frequency Control Program

a. Returning DG to ready-to-load operation; and

b. Automatically energizing the emergency load from offsite power.

SR 3.8.1.18 -------------------NOTE-------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify interval between each sequenced load In accordance block is within +/- 1 second of design with the interval for each automatic load sequencer. Surveillance Frequency Control Program (continued)

PALO VERDE UNITS 1,2,3 3.8.1-16 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.19 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4.

However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

3. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify on an actual or simulated loss of In accordance offsite power signal in conjunction with an with the actual or simulated ESF actuation signal: Surveillance Frequency

a. De-energization of emergency buses; Control Program

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in 10 seconds,

2. energizes auto-connected emergency loads through load sequencer,

3. achieves steady state voltage 4000 V and 4377.2 V,

4. achieves steady state frequency 59.7 Hz and 60.7 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 5 minutes.

(continued)

PALO VERDE UNITS 1,2,3 3.8.1-17 AMENDMENT NO. 188,

AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.20 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. The steady state voltage and frequency limits are analyzed values and have not been adjusted for instrument error.

Verify, when started simultaneously, each In accordance DG achieves with the

a. In 10 seconds, voltage 3740 V and Surveillance frequency 58.8 Hz; and Frequency

b. Steady state voltage 4000 V and Control Program 4377.2 V, and frequency 59.7 Hz and 60.7 Hz.

PALO VERDE UNITS 1,2,3 3.8.1-18 AMENDMENT NO.

DC Sources Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources Operating LCO 3.8.4 The Train A and Train B DC electrical power subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One battery charger on A.1 Restore battery 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months one subsystem terminal voltage to inoperable. greater than or equal to the minimum established float voltage.

AND A.2 Verify battery float Once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months current 2 amps.

AND 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months A.3 Restore battery charger to OPERABLE OR status.

In accordance with the Risk Informed Completion Time Program B.1 Restore DC electrical 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months B. One DC electrical power subsystem to power subsystem OPERABLE status. OR inoperable for reasons other than In accordance Condition A. with the Risk Informed Completion Time Program PALO VERDE UNITS 1,2,3 3.8.4-1 AMENDMENT NO. 193,

DC Sources Operating 3.8.4 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME C. --------NOTES-------- C.1 Restore at least one DC 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months electrical power

1. Not applicable when subsystem to OPERABLE OR second DC status.

electrical power subsystem In accordance intentionally made with the Risk inoperable. Informed Completion Time

2. The following Program Section 5.5.20 constraints are applicable: parts b, c.2, c.3, d, e, f, g, and h.

Two DC electrical power subsystems inoperable.

D. Required Action and D.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND D.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months PALO VERDE UNITS 1,2,3 3.8.4-2 AMENDMENT NO. 193,

DC Sources Operating 3.8.4 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.4.1 Verify battery terminal voltage is greater In accordance than or equal to the minimum established with the float voltage. Surveillance Frequency Control Program SR 3.8.4.2 Deleted SR 3.8.4.3 Deleted SR 3.8.4.4 Deleted SR 3.8.4.5 Deleted SR 3.8.4.6 Verify each battery charger supplies In accordance 400 amps for Batteries A and B and with the 300 amps for Batteries C and D at Surveillance greater than or equal to the minimum Frequency established float voltage for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months . Control Program OR Verify each battery charger can recharge the battery to the fully charged state within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months while supplying the largest combined demands of the various continuous steady state loads, after a battery discharge to the bounding design basis event discharge state.

(continued)

PALO VERDE UNITS 1,2,3 3.8.4-3 AMENDMENT NO. 193,

DC Sources Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.7 -------------------NOTES-------------------

1. The modified performance discharge test in SR 3.8.6.9 may be performed in lieu of SR 3.8.4.7.

2. This Surveillance shall not be performed in MODE 1, 2, 3, or 4.

Verify battery capacity is adequate to In accordance supply, and maintain in OPERABLE status, with the the required emergency loads for the design Surveillance duty cycle when subjected to a battery Frequency service test. Control Program SR 3.8.4.8 Deleted PALO VERDE UNITS 1,2,3 3.8.4-4 AMENDMENT NO.

Inverters Operating 3.8.7 3.8 ELECTRICAL POWER SYSTEMS 3.8.7 Inverters Operating LCO 3.8.7 The required Train A and Train B inverters shall be OPERABLE.

NOTE----------------------------

One inverter may be disconnected from its associated DC bus for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to perform an equalizing charge on its associated battery, provided:

a. The associated AC vital instrument bus is energized from its Class 1E constant voltage source regulator; and

b. All other AC vital instrument buses are energized from their associated OPERABLE inverters.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One required inverter A.1 ---------NOTE---------

inoperable. Enter applicable Conditions and Required Actions of LCO 3.8.9, "Distribution Systems - Operating" with any vital instrument bus de-energized.

Restore inverter to 7 days OPERABLE status.

OR In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.8.7-1 AMENDMENT NO. 180

Inverters Operating 3.8.7 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. --------NOTES-------- B.1 Restore all but one 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months inverter to OPERABLE

1. Not applicable when status. OR the second or a subsequent required inverter In accordance intentionally made with the Risk inoperable resulting Informed in loss of safety Completion Time function. Program

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

Two or more required inverters inoperable.

C. Required Action and C.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND C.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.7.1 Verify correct inverter voltage, frequency, In accordance and alignment to required AC vital with the instrument buses. Surveillance Frequency Control Program PALO VERDE UNITS 1,2,3 3.8.7-2 AMENDMENT NO. 188,

Distribution Systems Operating 3.8.9 3.8 ELECTRICAL POWER SYSTEMS 3.8.9 Distribution Systems Operating LCO 3.8.9 Train A and Train B AC, DC, and AC vital instrument bus electrical power distribution subsystems shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One AC electrical A.1 Restore AC electrical 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months power distribution power distribution subsystem inoperable. subsystem to OPERABLE OR status.

In accordance with the Risk Informed Completion Time Program B. One AC vital B.1 Restore AC vital 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months instrument bus instrument bus electrical power electrical power OR distribution subsystem distribution inoperable. subsystem to OPERABLE In accordance status. with the Risk Informed Completion Time Program C. One DC electrical C.1 Restore DC electrical 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months power distribution power distribution subsystems inoperable. subsystem to OPERABLE OR status.

In accordance with the Risk Informed Completion Time Program (continued)

PALO VERDE UNITS 1,2,3 3.8.9-1 AMENDMENT NO. 197

Distribution Systems Operating 3.8.9 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME D. --------NOTES-------- D.1 Restore electrical 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months power distribution

1. Not applicable when subsystem(s) to the second or a OR OPERABLE status.

subsequent electrical power In accordance with distribution the Risk Informed subsystem Completion Time intentionally made Program inoperable resulting in loss of safety function.

2. The following Section 5.5.20 constraints are applicable when there is a loss of function: parts b, c.2, c.3, d, e, f, g, and h.

Two or more electrical power distribution subsystems inoperable.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time not met. AND E.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.9.1 Verify correct breaker alignments and In accordance voltage to required AC, DC, and AC vital with the instrument bus electrical power Surveillance distribution subsystems. Frequency Control Program PALO VERDE UNITS 1,2,3 3.8.9-2 AMENDMENT NO. 197,

Before SFP transition Programs and Manuals 5.5 5.5 Programs and Manuals (continued)

______________________________________________________________________

5.5.20 Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06-09 (Revision 0) -

A, Risk-Managed Technical Specifications (RMTS) Guidelines. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODE 1 and 2.

c. When a RICT is being used, any plant configuration change within the scope of the Configuration Risk Management Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months after the plant configuration change, whichever is less.

3. Revising the RICT is not required if the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for voluntary entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. Use of a RICT is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more of the trains are considered PRA functional as defined in Section 2.3.1 of NEI 06-09 (Revision 0) - A. The RICT for these loss of function conditions may not exceed 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

f. Use of a RICT is permitted for emergent conditions which represent a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE if one or more trains are considered "PRA Functional" as defined in Section 2.3.1 of NEI 06-09 (Revision 0) -

A. However, the following additional constraints shall be applied to the criteria for "PRA Functional."

______________________________________________________________________

PALO VERDE UNITS 1,2,3 5.5-20 AMENDMENT NO.