Text

Proposed Tech Specs,Rewriting Electrical Power Sys Sections of TS & Bases to Closely Emulate STS
	ML18065A377
Person / Time
Site:	Palisades
Issue date:	12/27/1995
From:	; CONSUMERS ENERGY CO. (FORMERLY CONSUMERS POWER CO.)
To:	;
Shared Package
ML18065A376	List: ML18065A375; ML18065A377;
References
	NUDOCS 9601030242
	Download: ML18065A377 (140)
	v • d • e

ATTACHMENT I CONSUMERS POWER COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST - ELECTRICAL POWER SYSTEMS Proposed Pages 29 Pages

----~--

9601030242 951227 PDR ADOCK 05000255 P PDR

PALISADES PLANT TECHNICAL SPECIFICATIONS TABLE OF CONTENTS

SECTION 1.0 DEFINITIONS DESCRIPTION PAGE NO 1-1 1.1 OPERATING DEFINITIONS 1-1 1.2 MISCELLANEOUS DEFINITIONS 1-5 2.0 SAFETY LIMITS AND LIMITING SAFETY SYSTEM SETTINGS 2-1 2.1 SAFETY LIMITS - REACTOR CORE 2-1 2.2 SAFETY LIMITS - PRIMARY COOLANT SYSTEM PRESSURE 2-1 2.3 LIMITING SAFETY SYSTEM SETTINGS - RPS 2-1 Table 2.3.1 Reactor Protective System Trip Setting Limits 2-2 82.1 Basis - Reactor Core Safety Limit B 2-1 82.2 Basis - Primary Coolant System Safety Limit B 2-2 B2.3 Basis - Limiting Safety System Settings B 2-3 3.0 LIMITING CONDITIONS FOR OPERATION 3-1 3.0 APPLICABILITY 3-1

3 .1 3 .1.1 3.1.2 Figure 3-1 Figure 3-2 PRIMARY COOLANT SYSTEM Operable Components Heatup and Cooldown Rates Pressure - Temperature Limits for Heatup Pressure - Temperature Limits for Cooldown 3-1 b 3-lb 3-4 3-5 3-6 3.1.3 Minimum Conditions for Criticality 3-12 3.1.4 Maximum Primary Coolant Radioactivity 3-17 3.1.5 Primary Coolant System Leakage Limits 3-20 3.1.6 Maximum PCS Oxygen and Halogen Concentration 3-23 3.1. 7 Primary and Secondary Safety Valves 3-24a 3.1.8 Over Pressure Protection Systems 3-25a Figure 3-4 LTOP Limit Curve 3-25c 3.1.9 Shutdown Coo 1. i ng 3-25h 3.2 CHEMICAL AND VOLUME CONTROL SYSTEM 3-26 3.3 EMERGENCY CORE COOLING SYSTEM 3-29 3.4 CONTAINMENT COOLING 3-34 3.5 STEAM AND FEEDWATER SYSTEMS 3-38 3.6 CONTAINMENT SYSTEM 3-40 Table 3.6.1 Containment Penetrations and Valves 3-40b 3.7 ELECTRICAL POWER SYSTEMS 3-41 83.7 Bases - Electrical Power Systems B 3.7-1 3.8 REFUELING OPERATIONS 3-46 3.9 Deleted 3-49 i

Amendment No.

PALISADES PLANT TECHNICAL SPECIFICATIONS TABLE OF CONTENTS

SECTION 4.0 4.1

4.2 DESCRIPTION

SURVEILLANCE REQUIREMENTS OVER PRESSURE PROTECTION SYSTEM TESTS EQUIPMENT AND SAMPLING TESTS PAGE NO 4-1 4-6 4-7 Table 4.2.1 Minimum Frequencies for Sampling Tests 4-9 Table 4.2.2 Minimum Frequencies for Equipment Tests 4-11 Table 4.2.3 HEPA Filter and Charcoal Adsorber Systems 4-14 4.3 SYSTEMS SURVEILLANCE 4-16 Table 4.3.1 Primary Coolant System Pressure Isolation Valves 4-19 Table 4.3.2 Miscellaneous Surveillance Items 4-23 4.4 Deleted . 4-24 4.5 CONTAINMENT TESTS 4-25 4.5.1 Integrat~d Leakage Rate Tests 4-25 4.5.2 Local Leak Detection Tests 4-27 4.5.3 Recirculation Heat Removal Systems 4-28a 4.5.4 Surveillance for Prestressi ng System 4-29 4.5.5 End Anchorage Concrete Surveillance 4-32 4.5.6 Containment Isolation Valves 4-32 4.5.7 Deleted. 4-32a 4.5.8 Dome Delamination Surveillance 4-32a

4.6 4.6.1 4.6.2 4.6.3 4.6.4 4.6.5 SAFETY INJECTION AND CONTAINMENT SPRAY SYSTEMS TESTS 4-39 Safety lnjecti-on System Containment Spray System Pumps Valves Containment Air Cooling System 4-39 4-39 4-40 4-39 4-40 4.7 EMERGENCY POWER SYSTEM TESTS 4-42 4.8 MAIN STEAM STOP VALVES 4-44 4.9 AUXILIARY FEEDWATER SYSTEM 4-45 4.10 REACTIVITY ANOMALIES 4-46 4.11 Deleted 4-46 4.12 AUGMENTED ISi PROGRAM FOR HIGH ENERGY LINES 4-60 4.13 Deleted 4-65 4.14 AUGMENTED I~I PROGRAM FOR STEAM GENERATORS 4-66 4.15 PRIMARY SYSTEM FLOW MEASUREMENT 4-70 4.16 ISi PROGRAM FOR SHOCK SUPPRESSORS (Snubbers) 4-71 4.17 INSTRUMENTATION SYSTEMS TESTS 4-75 Table 4.17.1 Surveillance for the RPS 4-76 Table 4-17.2 Surveillance for ESF Functions 4-77 Table 4-17.3 Surveillance for Isolation Functions 4-78 Table 4-17.4 Surveillance for Accident Monitoring 4-79 Table 4-17.5 Surveillance for Alternate Shutdown 4-80 Table 4-17.6 Surveillance for Other Safety Functions 4-81 84.17 Basis - Instrumentation Systems Surveillance B 4.17-1 iii Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.I AC Sources - Operating Specifications The following AC electrical power sources shall be OPERABLE:

a. Two qualified circuits between the offsite transmission network and the onsite Class IE AC Electrical Power Distribution System; and

b. Two Diesel Generators (DGs} each capable of supplying one train of the onsite Class IE AC Electrical Power Distribution System.

Applicability Specification 3.7.I applies when the plant is above COLD SHUTDOWN.

Action 3.7.I.A With one required offsite circuit inoperable:

I. Perform surveillance 4.7.I.I (Offsite Source Check) for the required OPERABLE offsite circuit; within I hour and once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter, and

2. Restore required offsite circuits to OPERABLE status; within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

3.7.I.B With one DG inoperable:

I. Perform surveillance 4.7.I.I (Offsite Source Check) for the required offsite circuits; within I hour and once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter,

2. Declare required feature(s) supported by the inoperable DG to be inoperable when its redundant required feature(s) is inoperable; within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from discovery of an inoperable DG concurrent with inoperability of redundant required feature(s),

3. Determine that the OPERABLE DG is not inoperable due to common cause failure; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , or Perform surveillance 4.7.I.2 (DG start test) for the OPERABLE DG; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and *

4. Restore the DG to OPERABLE status; such that the total time when any required DG is inoperable does not exceed 7 days (total for both) in any calendar month .

3-4I Amendment No. §3., 6-1-,

3.7 ELECTRICAL POWER SYSTEMS

3.7.1 3.7.1.C AC Sources - Operating Action (continued)

With two required offsite circuits inoperable:

1. Declare required feature(s) inoperable when the redundant required feature(s) is inoperable; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from discovery of two inoperable required offsite circuits concurrent with the inoperability of redundant required feature(s), and

2. Restore one required offsite circuit to OPERABLE status; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3.7.1.D With one required offsite circuit inoperable and one DG inoperable:

1. Restore required offsite circuits to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , or

2. Restore DGs to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

3.7.1.E With two DGs inoperable:

1. Restore one DG to OPERABLE status; within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

3.7.1.F With one or both automatic load sequencers inoperable:

1. Declare the affected DGs inoperable; immediately.

3.7.1.G With Fuel Transfer Pump P-18A inoperable:

1. Declare DG 1-2 inoperable; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 3.7.1.H With Fuel Transfer Pump P-188 inoperable:

1. Restore P-18B to OPERABLE status; within 7 days.

3.7.1.I With both Fuel Transfer Pumps inoperable:

1. Restore one Fuel Transfer Pump to operable status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.1.J If any action required by 3.7.1.A through 3.7.1.I is not met and the associated completion time has expired:

1. The reactor shall be placed in HOT SHUTDOWN; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

2. The reactor shall be placed in COLD SHUTDOWN; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.1.K With three or more required AC sources inoperable:

1. Enter Specification 3.0.3 immediately .

3-42 Amendment No. 88,

3.7 ELECTRICAL POWER SYSTEMS

3.7.2 AC Sources - Shutdown Specifications The following AC electrical power sources shall be OPERABLE:

a. One qualified circuit between the offsite transmission network and the onsite Class IE AC Electrical Power Distribution Systems required by Specification 3.7.10, "Distribution Systems -

Shutdown"; and

b. One Diesel Generator (DG) capable of supplying one train of the onsite Class IE AC electri~al power distribution subsystem(s) required by Specification 3.7.10.

Applicability Specification 3.7.2 applies when the plant i~ in COLD SHUTDOWN or REFUELING SHUTDOWN with fuel in the reactor, and during movement of irradiated fuel assemblies.

Action 3.7.2.A With the required off site circuit inoperable, initiate the following actions immediately:

1.

2~2 Declare affected required features with no offsite power available to be inoperable, or:

2.1 Suspend REFUELING OPERATIONS, and Suspend movement of irradiated fuel assemblies, and 2.3 Suspend operations involving positive reactivity additions, and 2.4 Restore the required offsite source to OPERABLE status.

3.7.2.B With the required DG inoperable, initiate the following actions immediately: *

1. Suspend REFUELING OPERATIONS, and

2. Suspend movement of irradiated fuel assemblies, and

3. Suspend operations involving positive reactivity additions, and

4. Restore the required DG to OPERABLE status *

3-43 Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.3 DG Fuel Oil and Lube Oil Specifications The stored DG fuel oil and DG lube oil shall be within limits.

Applicability Specification 3.7.3 applies when any DG is required to be OPERABLE.

Action 3.7.3.A With stored fuel oil inventory< 23,700 and~ 20,110 gallons:

1. Restore stored fuel oil inventory to within limits; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.3.B With stored lube oil inventory< 175 and~ 150 gallons:

1. Restore the lube oil inventory to within limits; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.3.C With stored fuel oil viscosity, or water and sediment not within limits:

1. Restore stored fuel oil viscosity, and water and sediment to within limits; within 7 days.

3.7.3.D With stored fuel oil properties, other than viscosity, and water and sediment not within limits:

1. Restore stored fuel oil properties to within limits; within 31 days.

3.7.3.E If any action required by 3.7.3.A through 3.7.3.D is not met and the associated completion time has expired, or if Specification 3.7.3 is not met for reasons other than those addressed in 3.7.3.A, through 3.7.3.D:

1. Declare both DGs inoperable; immediately .

3-44 Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.4 DC Sources - Operating Specifications The following DC electrical power sources shall be OPERABLE:

a. Station Battery DOI and Charger DIS, and

b.

Station Battery D02 and Charger DI6.

Applicability Specification 3.7.4 applies when the plant is above COLD SHUTDOWN.

Action 3.7.4.A With one required charger inoperable:

I. Place the cross-connected charger for the affected battery in service; immediately, and

2. Restore the required charger to OPERABLE status; within 7 days.

3.7.4.B With one battery inoperable:

1. Pl ace both chargers in service for the affected battery;

3.7.4.C 2.

immediately, and Restore the battery to OPERABLE status; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

If any action required by 3.7.4.A or 3.7.4.B is not met and the associated completion time has expired:

I. The reactor shall be placed in HOT SHUTDOWN; within I2 hours, and 2.. The reactor shall be placed in COLD SHUTDOWN; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3-45 Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.5 DC Sources - Shutdown Specifications DC electrical power sources shall be OPERABLE to support the DC electrical power distribution subsystems required by Specification 3.7.10, "Distribution Systems - Shutdown."

Applicability Specification 3.7.5 applies when the plant is in COLD SHUTDOWN or REFUELING SHUTDOWN with fuel in the reactor, and during movement of irradiated fuel assemblies.

Action 3.7.5.A With one or more required DC source inoperable, initiate the following actions immediately:

1. Declare affected required features to be inoperable, or:

2.1 Suspend REFUELING OPERATIONS, and 2.2 Suspend movement of irradiated fuel assemblies, and 2.3 Suspend operations involving positive reactivity additions, and

2.4 Restore the required DC sources to OPERABLE status .

3-45a Amendment No. -l-6-l-,

3.7 ELECTRICAL POWER SYSTEMS

3.7.6 Battery Cell Parameters Specifications Battery cell parameters for Station Batteries DOI and D02 shall be within the limits of Table 3.7.6-1 and average electrolyte temperature of representative cells shall be ~ 70°F.

Applicability Specification 3.7.6 applies when associated DC electrical power source is required to be OPERABLE.

Action 3.7.6.A With one or more batteries with one or more battery cell parameters not within Category A or B limits:

1. Verify pilot cells electrolyte level and float voltage meet Table 3.7.6-1 Category C limits; within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months ; and

2. Verify battery cell parameters meet Table 3.7.6-1 Category C limits; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and once per 7 days thereafter; and

3. Restore battery cell parameters to Category A and B limits of Table 3.7.6-1; within 31 days .

3.7.6.B With any action required by 3.7.6.A not met and the associated completion time expired, or With one or more batteries with average electrolyte temperature of representative cells < 70°F, or With one or more batteries with one or more battery cell parameters not within Category C limits:

I. Deel are the affected battery inoperable; immediately .

3-45b Amendment No. 1-,

3.7 ELECTRICAL POWER SYSTEMS

3.7.6 Battery Cell Parameters (continued)

Table 3.7.6-1 Battery Surveillance Requirements CATEGORY A: CATEGORY B: CATEGORY C:

PARAMETER NORMAL CHARGE NORMAL CHARGE MINIMUM CHARGE LIMITS FOR EACH LIMITS FOR EACH LIMITS FOR EACH PILOT CELL CONNECTED CELL CONNECTED CELL Electrolyte > Minimum mark, and > Minimum mark, and Above top of Level s %inch above1111 s %inch above plates, and not maximum mark maximum mark 101 overflowing Float ~ 2.13 v ~ 2.13 v > 2.07 v Voltage No cell more than 0.020 below the

Specific Gr avi ty'bllcl ~ 1.200 ~ 1.200 average of all connected cells and The average of all connected cells

~ 1.190 (a) It is acceptable for the electrolyte level to temporarily increase above the specified maximum during equalizing charges provided it is not overflowing.

(b) Corrected for electrolyte temperature and level. Level correction is not required, however, when battery charging is < 2 amps when on float charge.

(c) A battery charging current of < 2 amps when on float charge is acceptable for meeting specific gravity limits following a battery recharge, for a maximum of 7 days. When charging current is used to satisfy specific gravity requirements, specific gravity of each connected cell shall be measured prior to expiration of the 7 day allowance .

3-45c Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.7 Inverters - Operating Specifications Inverters D06, D07, 008, and D09 shall be OPERABLE.

Applicability Specification 3.7.7 applies when the plant is above COLD SHUTDOWN.

Action 3.7.7.A One inverter inoperable,

1. Complete the applicable actions of Specification 3.7.9, "Distribution Systems - Operating" if any Preferred AC bus is de-energized, and

2. Restore the inverter to OPERABLE status; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3.7.7.B If any action required by 3.7.7.A is not met and the associated completion time has expired:

1. *The reactor shall be placed in HOT SHUTDOWN; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

2. The reactor shall be placed in COLD SHUTDOWN; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3-45d Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.8 Inverters - Shutdown Specifications Inverters shall be OPERABLE to support the Preferred AC Buses required by Specification 3.7.10, "Distribution Systems - Shutdown."

Applicability Specification 3.7.8 applies when the plant is in COLD SHUTDOWN or REFUELING SHUTDOWN with fuel in the reactor, and during movement of irradiated fuel assemblies.

Action

3. 7. 8. A With one or more required i nve.rters inoperable, tn it i ate the fo 11 owing actions immediately:

1. Declare affected required features to be inoperable, or:

2.1 Suspend REFUELING OPERATIONS, and 2.2 Suspend movement of irradiated fuel assemblies, and 2.3 Suspend operations involving positive reactivity add1tions, and

2.4 Restore the required inverters to OPERABLE status .

3-45e Amendment No.

3.7 ELECTRICAL POWER SYSTEMS

3.7.9 Distribution Systems - Operating Specifications The left and right trains of AC, DC, and Preferred AC power distribution subsystems listed in Table 3.7.9-1 shall be OPERABLE.

Applicability Specification 3.7.9 applies when the PCS is above COLD SHUTDOWN.

Action 3.7.9.A With one or more subsystems of one AC electrical power distribution train inoperable:

I. Comply with 3.7.9.E, if applicable, and

2. Restore the electrical power distribution train to OPERABLE status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.9.B With one Preferred AC bus inoperable:

1. Comply with 3.7.9.E, if applicable, and

2. Restore the Preferred AC bus to OPERABLE status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.9.C With one or more subsystems of one DC electrical power distribution train inoperable:

1. Comply with 3.7.9.E, if applicable, and

2. Restore the DC electrical power distribution train to OPERABLE status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.9.D If the action required by 3.7.9.A, through 3.7.9.C is not met and the associated completion time has expired:

1. The reactor shall be placed in HOT SHUTDOWN; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

2. The reactor shall be placed in COLD SHUTDOWN: within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.9.E With any inoperable distribution subsystem that results in a loss of a safety function:

1. Enter Specification 3.0.3; immediately .

3-45f Amendment No.

3.7 ELECTRICAL POWER SYSTEMS 3.7.9 Distribution Systems - Operating (continued)

Table 3.7.9-1 Safety Related Electrical Distribution Trains TYPE VOLTAGE LEFT TRAIN RIGHT TRAIN AC Power 2400 Bus IC Bus ID Distribution Subsystems 480 Bus 11 Bus 12 480 Bus 19 Bus 20 480 MCC I MCC 2 480 MCC 7 MCC 8 480 MCC 21 MCC 22 480 MCC 23 MCC 24

480 MCC 25 MCC 26 DC Power 125 Bus DlO-L Bus D20-L Distribution 125 Bus DlO-R Bus D20-R Subsystems

Preferred AC 125 125 125 120 Pnl DllA Pnl Dll-1 Pnl Dll-2 Bus Y-10 Pnl D21A Pnl D21-l Pnl D21-2 Bus Y-20 Subsystems 120 Bus Y-30 Bus Y-40

3-45g Amendment No.

3.7 ELECTRICAL POWER SYSTEMS 3.7.10 Distribution Systems - Shutdown Specifications The necessary portion of AC, DC, and Preferred AC electrical power distribution subsystems listed in Table 3.7.9-1 shall be OPERABLE to support equipment required to be OPERABLE.

Applicability Specification 3:7.10 applies when the plant is in COLD SHUTDOWN or REFUELING SHUTDOWN with fuel in the reactor, and during movement of irradiated fuel assemblies.

Action 3.7.10.A With one or more required AC, DC, or Preferred AC electrical power distribution subsystems inoperable, initiate the following actions immediately:

1. Declare affected required features supplied by an inoperable distribution subsystem to be inoperable, or:

2.1. Suspend REFUELING OPERATIONS, and 2.2. Suspend movement of irradiated fuel assemblies, and

2.3. Suspend operations involving positive reactivity additions, and 2.4. Restore the required AC, DC, and Preferred AC electrical power distribution subsystems to OPERABLE status, and 2.5. Declare affected required shutdown cooling trains inoperable .

3-45h Amendment No.

3.17 INSTRUMENTATION SYSTEMS Specification 3.17.2 The Engineered Safety Feature (ESF} logic channels and associated instrumentation for the functions listed in Table 3.17.2 shall be OPERABLE except as allowed by the permissible operational bypasses column.

Applicability Specification 3.17.2 applies when the PCS temperature is ~ 300°F.

Action 3.17.2.1 With one ESF manual control channel or ESF logic channel inoperable for one or more functions:

a} Restore the channel to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.17.2.2 With one ESF instrument channel inoperable for one or more functions, except SIRWT Level:

a} Pl ace the tr-i p unit for eac-h affected, ESF function in the tripped condition within 7 days.

3.17.2.3 With two ESF instrument channels inoperable for one or more functions, except SIRWT Level:

a}

b}

Place one channel trip unit for each affected ESF function in the tripped condition within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , and Restore one channel to OPERABLE status within 7 days.

3.17.2.4 With one SIRWT Level channel inoperable:

a} Bypass the level switch within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , and b) Restore the channel to OPERABLE status within 7 days.

3.17.2.5 If any action required by 3.17.2 is not met AND the associated completion time has expired, or if the number of OPERABLE channels is less than specified in the "Minimum OPERABLE Channels":

a) The reactor shall be placed in HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and b) The reactor shall be placed in a condition where the affected equipment is not required, within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3-66 Amendment No. ~'

3 .17 INSTRUMENTATION SYSTEMS

Table 3.17.2 Instrumentation Operating Requirements for Engineered Safety Features Required ESF Minimum OPERABLE Permissible Operational Functional Unit Channels Channels Bypasses

1. Safety Injection Signal (SIS)

a. Manual Initiation 2 1 None.

b. SIS Logic 2 1 None.

(Initiation, Actuation, and low pressure block auto reset)

c. CHP Signal SIS Initiation 2 1 None.

(5P Relay Output)

d. Pressurizer Pressure 4 2 ~ 1700 psi a Instrument Channels PCS pressure.

2. Recirculation Actuation Signal (RAS)

a.

b.

c.

Manual Initiation RAS Logic SIRWT Level Switches 2

2 4 3 1

1 None.

None.

3. Auxiliary Feedwater Actuation Signal (AFAS)

a. Manual Initiation 2 1 None.

b. AFAS Logic 2 1 None.

c. "A" Steam Generator Level 4 2 None.

d. "B" Steam Generator Level 4 2 None.

3-67 Amendment No. ~'

3.17 INSTRUMENTATION SYSTEMS

Basis: Action Statements 3.17.2 (conti.nued)

Action 3.17.2.5 - Required action AND associated completion time not met -

If the required action cannot be met within the associated completion time, or if the number of OPERABLE channels is less than allowed, the plant must be placed in a condition where the inoperable equipment is not required.

Twelve hours are allowed to bring the plant to HOT SHUTDOWN, and 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months to reach conditions where the affected equipment is not required, to avoid unusual plant transients. Both the 12 and the 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months time periods start when it is discovered that Action 3.17.2.5 is applicable.

Basis: Table 3.17.2

1. Safety Injection Signal (SIS) - SIS is actuated by manual initiation, by a CHP signal, or by 2 out of 4 Pressurizer Pressure channels decreasing below the setpoint. SIS initiates the following actions:

a) Start HPSI &lPSI pumps b) Enable Containment Spray Pump Start on CHP.

c) Initiate Safety Injection Valve operations Each Manual Actuation channel consists of one pushbutton which directly starts the SIS actuation logic for the associated train.

The Low Pressurizer Pressure signal for each SIS train can be blocked when 3 out of 4 channels indicate below 1700 psia. This block prevents undesired actuation of SIS during a normal plant cooldown. The block signal is automatically removed when 2 out of 4 channels exceed the setpoint.

The Pressurizer Pressure instrument channels which provide input to SIS are the same channels which provide an input to the RPS. The RPS receives an analog signal from each Pressurizer Pressure channel; each SIS initiation logic train receives a binary signal from a group of four relays, each actuated by a bistable in one of the four instrument channels. The contacts of these relays are wired into a 2 out of 4 logic. It is the output of this pressurizer pressure 2 out of four logic circuit that is blocked during plant cooldowns. A similar arrangement of bistables and relays provide the pressurizer low pressure block permissive signal. The initiation and block circuits are illustrated in Reference 4.

Each SIS logic train is also actuated by a contact pair on one of the CHP initiation relays for the associated CHP train .

B 3.17-15 Amendment No. -162-,

3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.2 (continued)

Each train of SIS actuation logic consists of a group of "SIS" relays which energize and seal in when the initiation logic is satisfied. These SIS relays actuate alarms and control functions. One of the control functions selects between an immediate actuation circuit, if offsite power is avail.able, and a time sequenced actuation circuit, if only diesel power is available. These actuation circuits initiate motor operated valve opening and pump starting. The SIS actuation logic is illustrated in Reference 5.

2. .Recirculation Actuation Signal (RAS} - RAS is actuated by manually actuating the circuit "Test" switch or by two of the four level sensors in the SIRWT reaching their setpoints. RAS initiates the following actions:

a) Trip LPSI pumps (this trip can be manually bypassed) b) Switch HPSI &Spray suction from SIRWT to Containment Sump c) Adjust cooling water to Shutdown Cooling Heat Exchangers The four SIRWT level sensors each de-energize two relays, one per logic train, when tank level reaches the setpoint*. Each channel of level sensor and associated output relays is powered from a different Preferred AC bus. Two Preferred AC buses are powered, through

inverters, from each station battery. The manual RAS control for each train de-energizes two of these relays, initiating RAS through the logic train.

Each train of RAS logic consists of the output contacts of the relays actuated by the level switches arranged in a "l out of 2 taken twice" logic. The contacts are arranged so that at least one low level signal powered from each station battery is required to initiate RAS. Loss of a single battery, therefore, cannot either cause or prevent RAS initiation. When the logic is satisfied, two DC relays are energized to initiate RAS actions and alarms. The RAS logic is illustrated in Reference 6.

3. Auxiliary Feedwater Actuation Signal CAFAS) - AFAS is actuated by manual action or by 2 out of 4 level sensors on either steam generator reaching their setpoints. Manual actuation of Auxiliary Feedwater may be accomplished through pushbutton actuation of each AFAS channel or by use of individual pump and valve controls. Each AFAS channel starts the associated AFW pump(s) and opens the associated flow control valves.

The steam generator level instrument channels which provide input to AFAS are the same channels which provide an input to the RPS. Both the AFAS cabinets and the RPS receive analog signals from the instrument channel, and both have their own bistables to initiate actuation on low 1evel .

B 3.17-16 Amendment No. ~'

3.17 INSTRUMENTATION SYSTEMS Each AFAS train contains a 2 out of 4 logic for each steam generator .

One AFAS logic train actuates motor driven AFW Pump P-BA and turbine driven Pump P-88 and the associated flow control valves; the other actuates motor driven Pump P-BC and the associated valves. Each train provides flow to both steam generators. The AFAS logic uses solid state logic circuits. It is illustrated in reference 7 .

B 3.17-17 Amendment No. 62-,

4.2 EQUIPMENT SAMPLING AND TESTS

Table 4.2.2 Minimum Freguencies for Eguigment Tests FSAR Section Test Freguency REFERENCE I. CONTROL RODS Drop Times of All Refueling 7.6.1.3 Full Length Rods

2. CONTROL RODS Partial ;Movement Every 92 Days 7.6.1.3 of all Rods (Minimum of 6 In}

3. Pressurizer Set Point One Each 4.3.7 Safety Valves Refuel i.ng

4. Main Steam Set Point Five Each 4.3.4 Safety Valves Refueling

5. Refueling System Functioning Prior to 9.11.4 Interlocks Refueling Operations

6. Service Water Functioning Refueling 9.1.2

System Valve Actuation on SIS and RAS

7. Primary System Leakage Evaluate Daily 4.7.1

8. Deleted

9. Boric Acid Verify proper Dai,.y Heat Tracing temperature readings.

10. Safety Injection Verify that level and Each Shift Tank Level and pressure indication Pressure is between independent high high/low alarms for level and pressure .

Amendment No. , 8-1-,

4-11

~' .J.6.2., -!§.&, H+, .J.9.2.,

4.7 ELECTRICAL POWER SYSTEMS TESTS

4.7.1 AC Power Source Tests - Operating Verify each AC source required by Specification 3.7.1 is OPERABLE by the following surveillance. Momentary transients outside the specified range do not invalidate a DG load test. Credit may be taken for unplanned events that satisfy a surveillance requirement.

4.7.1.1 Verify correct alignment and voltage for each required offsite circuit; each 7 days.

4.7.1.2 Verify each DG starts from standby conditions is ready for loading in

~ 10 seconds, and achieves steady state voltage ~ 2280 and ~ 2520 V, and frequency~ 59.5 and ~ 61.2 Hz; each 31 days.

4.7.1.3 Verify; each 31 days; that each DG operates for~ 60 minutes;

a. For ~ 15 minutes loaded above its peak accident loading, and

b. For the remainder of the test loaded ~ 2300 kW and ~ 2500 kW.

4.7.1.4 Verify each DG starting air tank pressure is ~ 200 psig; each 31 days.

4.7.1.5 Verify each DG day tank contains~ 2500 gallons of fuel oil; each 31 days.

4.7.1.6 Verify each fuel oil transfer pump and the fuel oil transfer system

4.7.1.7 controls operate to transfer fuel oil from the Fuel Oil Storage Tank to each DG day tank and engine mounted tank; each 92 days.

Verify automatic transfer of safety related buses from the normal AC source to Startup Transformer 1-2; each 18 months.

4.7.1.8 Verify; each 18 months; that each DG rejects a load greater than or equal to its largest single post-accident load, and:

a. Following load rejection, the frequency is ~ 68 Hz;

b. Within 3 seconds following load rejection, the voltage is ~ 2280 and ~ 2640 V; and

c. Within 3 seconds following load rejection, the frequency is

~ 59.5 and ~ 61.5 Hz .

4-42 Amendment No. ~, 92-, ~,

4.7* ELECTRICAL POWER SYSTEMS TESTS 4.7.1 AC Power Sources - Operating (continued) 4.7.1.9 Verify that each DG, operating at a power factors 0.9, does not trip, and voltage is maintained s 4000 V during and following a load rejection of ~ 2300 and s 2500 kW; each 18 months.

4.7.1.10 Verify; each 18 months; on an actual or simulated loss of offsite power:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. Energizes permanently connected loads in s 10 seconds,

2. Energizes auto-connected shutdown loads through the automatic load sequencer,

3. Maintains steady state voltage ~ 2280 and s 2520 V,

4. Maintains steady state frequency~ 59.5 and s 61.2 Hz, and

5. Supplies permanently connected loads for~ 5 minutes.

4.7.1.11 Verify, each 18 months, that each DG operates at a power factor s 0.9 for ~ 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

a. For ~ 100 minutes loaded above its peak accident loading, and

b. For the remainder of the test loaded ~ .2300 and s 2500 kW.

4. 7 .1.12 Verify; each 18 months; that each DG:

a. Can be synchronized with offsite power while supplying its associated 2400 volt bus upon a simulated restoration of offsite power;

b. Can transfer loads to an offsite power source; and

c. Can be returned to ready-to-load operation.

4.7.1.13 Verify the time of each sequenced load is within+/- 0.1 seconds of the design timing for each automatic load sequencer; each 18 months .

4-43 Amendment No. ee, -76, -1G2-, 2-S,

4.7 ELECTRICAL POWER SYSTEMS TESTS

4.7.1 AC Power Sources - Operating (continued) 4.7.1.14 Verify; each 18 months; that on an actual or simulated loss of offsite power signal in conjunction with an actual or simulated Safety Injection Signal:

1. De-energization of emergency buses;

2. Load shedding from emergency buses;

3. DG auto-starts from standby condition and:

a) Energizes permanently connected loads in ~ 10 seconds, b) Energizes auto-connected emergency loads through its automatic load sequencer, c) Achieves steady state voltage ~ 2280 and ~ 2520 V, d) Achieves steady state frequency~ 59.5 and ~ 61.2 Hz, and e) Supplies permanently connected loads for~ 5 minutes.

4.7.1.15 Verify, by analytical means, each 18 months that diesel generator steady state automatically connected electric loads do not exceed the continuous rating of 750 amp at 2400 volts .

4-43a Amendment No.

4.7 ELECTRICAL POWER SYSTEMS TESTS

4.7.2 AC Power Source Tests - Shutdown Verify each AC power source required by Specification 3.7.2 is OPERABLE by the following surveillance. Momentary transients outside the specified range do not invalidate a DG load test. Credit may be taken for unplanned events that satisfy a surveillance requirement.

4.7.1.1, Offsite source check 4.7.1.2, DG starting test 4.7.1.4, DG starting air check 4.7.1.5, DG day tank level check 4.7.1.6, Fuel transfer check 4.7.1.15, DG load verification 4.7.3 DG Fuel Oil and Lube Oil Verify that the fuel oil and lube oil for each required DG is adequate by the following surveillance:

4.7.3.1 Verify that the Fuel Oil Storage Tank contains~ 23,700 gallons of fuel;

4.7.3.2 4.7.3.3 each 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

Verify stored lube oil inventory is ~ 175 gallons; each 31 days.

Verify properties of new fuel oil and stored fuel oil are tested in accordance with, and maintained within the limits of, the Fuel Oil Testing Program, Specification 6.8.4c.

4.7.3.4 Check for and remove excess accumulated water from the Fuel Oil Storage Tank; each 92 days.

4.7.3.5 Clean the Fuel Oil Storage Tank, removing all water and sediment; each 10 years.

4-43b Amendment No.

4.7 ELECTRICAL POWER SYSTEMS TESTS 4~7.4 DC Power Sources - Operating Verify each DC source required by Specification 3.7.4 is OPERABLE by the following surveillance.

4.7.4.1 Verify battery terminal voltage is ~ 123 V on float charge; each 7 days.

4.7.4.2 Verify no visible corrosion at battery terminals and connectors, or verify each battery connection resistance is s 120% of the resistance

. measured during installation; each 92 days.

4.7.4.3 Inspect battery cells, cell plates, and racks for visual indication of physical damage or abnormal deterioration; each 12 months.

4.7.4.4 Remove visible terminal corrosion and verify cell to cell and terminal connections are coated with anti-corrosion material; each 12 months.

4.7.4.5 Verify each battery connection resistance is s 120% of the resistance measured during installation; each 12 months.

4.7.4.6 Verify each required battery charger supplies ~ 180 amps at ~ 125 volts for ~ 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months ; each 18 months.

4.7.4.7* Verify_ battery capacity is adequate to supply, and maintain in OPERABLE status, the required emergency loads for the design duty cycle when subjected to a battery service test; each 18 months. (The modified performance discharge test of surveillance 4.7.4.8 may be performed in lieu of this test.}

4.7.4.8* Verify battery capacity is~ 80% of the manufacturer's rating when subjected to a performance discharge test or a modified performance discharge test; each 60 months. This test shall be ~erformed each 12 months when battery shows degradation or has reached 85% of the expected life with capacity< 100% of manufacturer's rating, or each 24 months when battery has reached 85% of the expected life with capacity~

100% of manufacturer's rating.

These tests must be performed in COLD SHUTDOWN or REFUELING SHUTDOWN.

4.7.5 DC Power Sources - Shutdown Verify each DC source required by Specification 3.7.5 is OPERABLE by the following surveillance:

4.7.4.1, Float voltage check, 4.7.4.2, Connector condition check, 4.7.4.3, Battery physical inspection, 4.7.4.4, Battery connector cleaning and coating, and 4.7.4.5 Battery connector resistance check.

- 4-43c Amendment No.

4.7 ELECTRICAL POWER SYSTEMS TESTS

4.7.6 4.7.6.1 Battery Cell Parameters Verify that the cell parameters of each required battery are within limits by the following surveillance:

Verify battery cell parameters meet Table 3.7.6-1 Category A limits; each 31 days.

4.7.6.2 Verify average electrolyte temperature of representative cells is

~ 70°F; each 31 days.

4.7.6.3 Verify battery cell parameters meet Table 3.7.6-1 Category B limits; each 92 days.

4.7.7 Inverters - Operating Verify that each inverter required by Specification 3.7.7 is OPERABLE by the following surveillance:

4.7.7.1 Verify correct inverter voltage, frequency, and alignment to Preferred AC buses; each 7 days.

4.7.8 Inverters - Shutdown Verify that each inverter required by Specification 3.7.8 is OPERABLE by the following surveillance:

4.7.8.l 4.7.9 Verify correct inverter voltage, frequency, and alignment to Preferred AC buses; each 7 days.

Distribution Subsystems - Operating Verify that the power distribution subsystems required by Specification 3.7.9 are OPERABLE by the following surveillance:

4.7.9.1 Verify correct breaker alignments and voltage to required AC, DC, and Preferred AC electrical power distribution subsystems; each 7 days.

4.7.10 Distribution Subsystems - Shutdown Verify that the power distribution subsystems required by Specification 3.7.10 are OPERABLE by the following surveillance:

4.7.10.1 Verify correct breaker alignments and voltage to required AC, DC, and Preferred AC electrical power distribution subsystems; each 7 days .

4-43d Amendment No.

4.17 INSTRUMENTATION SYSTEMS TESTS

Functionai Unit Table 4.17.2 Instrumentation Survei1lance Reguirements for En9ineered ~afety Features CHANNEL

. CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION

1. Safety Injection Signal (SIS)

a. Manual Initiation NA 18 months NA

b. SIS Logic NA (a) NA (Initiation, Actuation, and low pressure block auto reset)

c. CHP Signal SIS inittation NA 18 months NA (SP Relay Output)

d. Pressurizer Pressure 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

Instrument Channels

2. Recircu*lati.on Actuation Signal (RAS:)

a . Manual Initiation NA 18 months NA

b.

c.

RAS Logic SIRWT Level SwitChes NA NA 18 months*

18 months*

NA 18 months*

3. Auxiliary Feedwater Actuation Signal (AFAS)

a. Manual Initiation NA 18 months NA

b. AFAS Logic NA 92 days NA

c. "A" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

d. "B" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18. months*

(a) Test normal and emergency power functions using test circuits each 92 days.

Verify all automatic actuations and automatic resetting of low pressure block each 18 months.

For Cycle 11 only, this surveillance need not be performed until prior to startup for Cycle 12 .

Amendment No. ~, 64, 4-77

ADMINISTRATIVE CONTROLS

6.8.4 (continued)

b. Radiological Environmental Monitoring Program A program shall be provided to monitor the radiation and radionuclides in the environs of the plant. The program shall provide (1) representative measurements of radioactivity in the highest potential exposure pathways, and (2) verifications of the accuracy of the effluent monitoring program and modeling of environmental exposure pathways. The program shall (I) be contained in the ODCM, (2) conform to the guidance of Appendix I to 10 CFR 50, ~nd (3) including the following:

1. Monitoring; sampling, analysis, and reporting of radiation and radionuclides in the environment in accordance with the methodology and parameters in the ODCM.

2. A Land Use Census to ensure that changes in the use of areas at and beyond the SITE BOUNDARY are identified and that modifications to the monitoring program are made if required by the results of this census, and

3. Participation in a Interlaboratory Comparison Program to ensure that independent checks on the precision and accuracy of the measurements of radioactive materials in environmental sample matrices are performed as part of the quality assurance program for environmental monitoring.

~

'~~

c. Fuel Oil Testing Program A fuel oil testing program to implement required testing of both new fuel oil and stored fuel oil shall be established. The program shall include sampling and testing requirements, and acceptance criteria, in accordance with applicable ASTM Standards. The program shall establish the following:

1. Acceptability of new fuel oil prior to addition to the Fuel Oil Storage Tank, and acceptability of fuel oil stored in the Fuel Oil Storage Tank, by determining that the fuel oil has: a) An API gravity or an absolute specific gravity, b) A kinematic viscosity, and c) Water and sediment content within limits for ASTM 20 fuel oil.

2. Other properties specified in ASTM 0 975 for fuel oil in the Fuel Oil Storage Tank are within limits for ASTM 20 fuel oil .

6-13 Amendment No. -36, 64,

ATTACHMENT 2 CONSUMERS POWER COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST - ELECTRICAL POWER SYSTEMS Proposed TS Bases Pages 66 Pages

. AC Sources - Operating B 3.7.1 and 4.7.1 ELECTRICAL POWER SYSTEMS B 3.7.1 and 4.7.1: AC Sources - Operating BASES BACKGROUND The plant Class IE Electrical Power Distribution System AC sources consist of the offsite power sources, and the onsite standby power sources, Diesel Generators 1-1 and 1-2 (DGs).

As required by 10 CFR 50, Appendix A, GDC 17, the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the Engineered Safety Feature (.ESF) systems.

The AC power system at Palisades consists of a 345 kV switchyard, three circuits connecting the plant with

off-site power (station power, startup, and safeguards transformers), the on-site distribution system, and two DGs.

The on-site distribution system is divided into safety related (Class 1-E) and non-safety related portions *

. The switchyard fnterconnects six transmtssion. lines from th~

off-site transmission system and the output line from the.

Palisades main generator. These lines are connected in a "breaker and a half" scheme between the Front (F) and Rear (R) buses such that any single off-site line may supply the Palisades station loads when the plant is shutdown.

Two circuits supplying Palisades 2400 volt buses from off-site are fed d1'rectly from a switchyard bus *through the startup and safeguards transformers. They are available both during operation and during shutdown. The third circuit supplies the plant loads by "back feeding" through the main generator output circuit and station power transformers after the generator has been disconnected by a motor operated disconnect.

The station power transformers are connected into the main generator output circuit. Station power transformers 1-1 and 1-2 connect to the generator 22 kV output bus. Station power transformer 1-3 connects to the generator output line on the high voltage side of the main transformer. Station power transformers 1-1 and 1-3 supply non-safety related 4160 volt loads during plant power operation and during backfeeding operations. Station power transformer 1-2 can supply both safety related and non-safety related 2400 volt loads during plant power operation or backfeedi*ng operation .

- PALISADES B 3.7-1 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES BACKGROUND The three startup transformers are*connected to a common (continued) 345 kV overhead line from the switchyard R bus. Startup transformers 1-1 and 1-3 supply 4160 volt non-safety related station loads; Startup Transformer 1-2 can supply both safety related and non*-safety related 2400 volt loads. The startup transformers are available during operation and shutdown.

Safeguards Transfo~mer 1-1 is connected to the switchyard F bus. It feeds station 2400 volt loads through an underground line. It is available to supply these loads during operation and shutdown.

The onsite distribution system consists of seven main distribution buses (4160 volt buses IA, IB, IF, and IG, and 2400 volt buses IC, ID, and IE) and supported lower voltage buses, motor control centers (MCCs), and lighting panels.

The 4160 volt. buses and 2400 volt bus lE are not safely related. Buses IC and ID and their supported buses and MCCs form two independ~nt, redundant, safety related d.istribution trains. Each distribution train supplies one train of engineered safety features equipment.

ln the event of a generator trip, all loads supplied by the station power transformers are automatically transferred to the startup transformers. Loads supplied by the safeguards transformer are unaffected by a plant trip. If power is lost to the safeguards transformer, the 2400 volt loads will automatically transfer to startup transformer I-2. If the startup transformers are not energized when these transfers occur, their output breakers will be blocked from closing and the 2400 volt safety related buses will be energized by the DGs.

The two DGs each supply one 2400 volt bus. They provide backup power in the event of loss of off-site power, or loss of power to the associ.ated 2400 volt bus. The c.ont i nuous rating of the DGs is 2500 kw, with 110 percent overload permissible for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months p~riod. The required fue 1 in the Fuel Oil Storage Tank and DG Day Tank will

supply one DG for a minimum period of 7 days assuming accident l-0ading conditions and fuel conservation practices .

PALISADES B 3.7-2 Amendment:

AC Sources - Operating B 3.7.I and 4.7.I BASES BACKGROUND If either 2400 volt bus, IC or ID, experiences a sustained

{continued) undervoltage, the associated DG is started, the affected bus is separated from its offsite power sources, major loads are stripped from that bus and its supported buses, the DGs are connected to the bus, and ECCS or shutdown loads are started by an automatic load sequencer.

The DGs share a common fuel oil storage and transfer system.

A single buried Fuel Oil Storage Tank is used to maintain the required fuel oil inventory. Two fuel transfer pumps are provided. The fuel transfer pumps are necessary for long term operation of the DGs. Testing has shown that each DG consumes about 2.6 gallons of fuel oil per minute at 2400 kW. Each day tank is required to contain at least 2500 gallons. Therefore, each fuel oil day tank contains sufficient fuel for more than I5 hours of full load

{2500 kW) operation. Beyond that time, a fuel transfer pump is required for continued DG operation.

Either fuel transfer pump is capable of supplying either DG.

However, each fuel transfer pump is not capable, with normally available switching, of being powered from either DG. DG I-I can power either fuel transfer pump, but DG I-2 can only power P-I8A. The fuel oil pumps supply a common fuel oil storage tank, and common piping.

Fuel transfer pump P-I8A is powered from MCC-8, which is normally connected to Bus ID {DG I-2) through Station Power Transformer I2 and Load Center I2. In an emergency, P-I8A can be powered from Bus IC {DG I-I) by cross connecting Load Centers II and I2.

Fuel transfer pump P-I8B is powered from MCC-I, which is normally connected to Bus IC {DG I-I) through Station Power Transformer I9 and Load Center I9. P-I8B cannot be powered, using installed equipment, from Bus ID (DG I-2) .

PALISADES B 3.7-3 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES APPLICABLE The safety analyses do not explicitly address AC electrical SAFETY power. They do, however, assume that the Engineered Safety ANALYSES Features (ESF) are available. The OPERABILITY of the ESF functions is supported by the AC Power Sources.

The design requirements are for each assumed safety function to be available under the following conditions:

a. The occurrence of an accident or transient,

b. The resultant consequential failures,

c. A worst case single active failure,

d. Loss of all offsite or all onsite AC power, and

e. The most reactive control rod fails to insert.

One proposed mechanism for the loss of off-site power is a perturbation of the transmission grid because of the loss of the plant's generating capacity. A loss of off-site power as a result of a generator trip can only occur during POWER OPERATION, with the generator connected to the grid.

However, it is also assumed in analysis for events in HOT STANDBY, such as a steam line break or control rod ejection at zero power. No specific mechanism for initiating a loss of off-site power when the plant is not on the line is discussed in the FSAR.

In most cases, it is conservative to assume that off-site power is lost concurrent with the accident and that the single failure is that of a DG. That would leave only one train of safeguards equipment to cope with the accident, the other being disabled by the loss of AC power. Those analyses which assume that a loss of off-site power and failure of a single DG accompany the accident also assume 10 seconds for the DG to start and connect to the bus, and additional time for the sequencer to start each safeguards load. *

PALISADES B 3.7-4 Amendment:

AC Sources - Operating B 3.7.1 and 4.7wl BASES APPLICABLE The same assumptions are not conservative for all accident SAFETY analyses. When analyzing the effects of a steam or feed ANALYSES line break, the loss of the condensate and feedwater pumps (continued) would reduce the steam generator inventory, so a loss of off-site power is not assumed.

In COLD SHUTDOWN and REFUELING SHUTDOWN, loss of off-site power is treated as an initiating event.

LCO Two qualified circuits between the offsite transmission network and the onsite Class IE Electrical Power Distribution System and an independent DG for each safeguards train ensure availability of the required power

to shut down the reactor and maintain it in a safe shutdown condition after an anticipated operational occurrence or a postulated OBA.

General Design Criterion 17 requires, in part, that:

"Electric power from the transmission network to the onsite electric distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights of way) designed and located so as to minimize to the extent practical the likelihood of their simultaneous failure under operating and postulated accident and environmental conditions."

The qualified offsite circuits available are Safeguards

Transformer 1-1 and Startup Transformer 1-2 .. Station Power Transformer 1-2 is not qualified as a required source for LCO 3.7.1 since it is not independent of the other two offsite circuits. This LCO does not prohibit use of Station Power Transformer to power the 2400 safety related buses, but the two qualified sources must be OPERABLE.

Each offsite circuit must be capable of maintaining acceptable frequency and voltage, and accepting required

loads during an accident, while supplying the 2400 volt safety related buses .

PALISADES B 3.7-5 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES LCO Following a loss of offsite power, each DG must be capable (continued) of starting and connecting to its respective 2400 volt bus.

This will be accomplished within 10 seconds after receipt of a DG start signal. Each DG must also b~ capable of accepting required loads within the assumed loading sequence intervals, and continue to operate until offsite power can be restored to the 2400 volt safety related buses.

Proper sequencing of loads and tripping of nonessential loads are required functions for DG OPERABILITY.

APPLICABILITY The AC sources are required to be OPERABLE above COLD SHUTDOWN to ensure that redundant sources of off-site and on-site AC power are available to support engineered safeguards equipment in the event of an accident or transient. The AC sources also support the equipment necessary for power operation, plant heatups and cooldowns, and shutdown operation.

The AC source requirements for COLD SHUTDOWN and REFUELING SHUTDOWN are addressed in LCO 3.7.2, "AC Sources -

Shutdown."

ACTIONS To ensure a highly reliable power source remains with the one offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on a more frequent basis. Since the Required Action only specifies "perform," a failure of SR 4.7.1.1 acceptance criteria does not result in a Re_quired Action not met.

However, if a second required circuit fails SR 4.7.1.1, the second offsite circuit is inoperabl~, and Condition C, for two offsite circuits inoperable, is entered .

PALISADES B 3.7-6 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES ACTIONS A.2

{continued)

According to the reconvnendations of Regulatory Guide

{RG) 1.93, operation may continue in Condition Afor a period that should not exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . With one offs1te circuit inoperable, the reliability of the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the plant safety systems. In this Condition, however, the remaining OPERABLE offsite circuit and DGs are adequate to supply electrical power to the onsite Class IE Distribution System.

The 72 hour8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a OBA occurring during this period.

To ensure a highly reliable power source remains with an inoperable DG, it is necessary to verify the availability of the offsite circuits on a more frequent basis. Since the Required Action only specifies "perform," a failure of SR 4.7.1.1 acceptance criteria does not result in a Required Action being not met. However, if a circuit fails to pass SR 4.7.1.1, it is inoperable. Upon offsite circuit inoperability, additional Conditions and Required Actions must then be entered.

The requirement to declare required features inoperable carries with it the requirement to take those actions required by the LCO for that required equipment.

Required Action B.2 is intended to provi-de assurance that a loss of offsite power, during the period that a DG is inoperable, does not result in a complete loss of safety function of critical systems. These features are designed with redundant safety related trains. Redundant required feature failures consist of inoperable features with a train redundant to the train that has an inoperable DG .

PALISADES B 3.7-7 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES**

ACTIONS The Completion Time for Required Action B.2 is intended to (continued) allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the Completion Time "clock." In this Required Action, the Completion Time only begins on discovery that both:

a. An inoperable DG exists; and

b. A required feature on the other train is inoperable.

If at any time during the existence of this Condition (one DG inoperable) a redundant required feature subsequently becomes inoperable, this Completion Time begins to be tracked.

Discovering one required DG inoperable coincident with one or more inoperable required supporting or supported features, or both, that are associated with the OPERABLE DG, results in starting the Completion Time for Required Action B.2. Four hours from the discovery of these events existing concurrently, is acceptable because it minimizes risk while

allowing time for restoration before subjecting the plant to transients associated with shutdown.

In this Condition, the remaining OPERABLE DG and offsite circuits are adequate to supply electrical power to the onsite Class IE Distribution System. Thus, on a component basis, single failure protection for the required feature's function may have been lost; however, function has not been lost.

The 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Completion Time takes into account the OPERABILITY of the redundant counterpart to the inoperable required feature. Additionally, the 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a OBA occurring during this period .

PALISADES B 3.7-8 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES ACTIONS B.3 (continued}

Required Action B.3 provides an allowance to avoid unnecessary testing of the OPERABLE DG. If it can be

. determined that the cause of the inoperable DG does not exist on the OPERABLE DG, SR 4.7.1.2 (test starting of the OPERABLE DG} does not have to be performed. If the cause of inoperability exists on other DGs, the other DGs would be declared inoperable upon discovery and Condition E of LCD 3.7.1 would be entered. Once the failure is repaired, the common cause failure no longer exists and Required Action B.3.1 is satisfied. If the cause of the initial inoperable DG cannot be confirmed to not exist on the remaining DGs, performance of SR 4.7.1.2 suffices to provide assurance of continued OPERABILITY of that DG.

In the event the inoperable DG is restored to OPERABLE status prior to completing 3.7.1.B.3 the corrective action system would normally continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months constraint imposed while in Condition B.

According to Generic Letter 84-15, 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is reasonable to confirm that the OPERABLE DG is not affected by the same problem as the inoperable DG.

In Condition B, the remaining OPERABLE DG and offsite circuits are adequate to supply electrical power to the onsite Class IE Distribution System for a limited period.

The Completion Time, which limits the time when any required DG is not OPERABLE to 7 days (total for both DGs} in any calendar month, is a feature of the original Palisades licensing basis .

PALISADES B 3.7-9 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES ACTIONS ~

(continued)

The requirement to declare required features inoperable carries with it the requirement to take those actions required by the LCO for that required equipment.

Required Action C.1, which *PPlies when two required offsite circuits are inoperable, is intended to provide assurance that an event with a coincident single failure will not result in a complete loss of redundant required safety functions. The Completion Time for this failure of redundant required features is reduced to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from that allowed for one train without offsite power (Required Action A.2). The rationale for the reduction to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is that RG 1.93 recommends a Completion Time of 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months for two required offsite circuits inoperable, based upon the assumption that two complete safety trains are OPERABLE.

When a concurrent redundant required feature failure exists, this assumption is not the case, and a shorter Completion Time of 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is appropriate. These features are powered from redundant AC s~fety trains.

The Completion Time for Required Action C.1 is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the Completion Time "clock." In this Required Action, the Completion Time only begins on discovery that both:

a. All required offsite circuits are inoperable; and b~ A required feature is inoperable.

If at any time during the existence of Condition C (two offsite circuits inoperable), a required feature becomes inoperable, this Completion Time begins to be tracked .

PALISADES B 3.7-10 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES ACTIONS C.2 (continued)

According to the reconunendations of RG l.93, operation may continue in Condition C for a period that should not exceed 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . This* level of degradation means that the offsite electrical power system does not have the capability to accomplish a safe shutdown and to mitigate the effects of an accident; however, the onsite AC sources have not been degraded. This level of degradation generally corresponds to a total loss of the inunediately accessible offsite power sources.

With both of *the required offsite circu1ts inoperable,

.sufficient onstt_e AC sources are available to maintain the plant in a safe shutdown condition in the event of a DBA or transient. In fact, a simultaneous loss of offsite AC

sources, a LOCA, and a worst case single failure were postulated as a part of the design basis in the safety analysis. Thus, the 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Completion Time provides a period of time to-effect restoration of one of the offsite circuits commensurate with the imp.ortance of maintaining an AC electrical power system capable of meeting its design criteria *

If two offsite sources are restored within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , unrestricted operation may continue. If only one offsite source is restored within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , power operation continues in accordance with Condition A.

D.l and D.2 In Condition D, individual redundancy is lost in both the offsite electrical power system and the onsite AC electrical power.system. The 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.

According to the. recommendations of RG 1.93, operation may continue in Condition D for a period that should not exceed 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

-. PALISADES B 3.7-11 Amendment:

AC Sources - Operating B l.7.1 and 4.7.1 BASES ACTIONS E. l (continued)

With both DGs inoperable, there are no remaining standby AC sources. Thus, with an assumed los~ of offsite electrical power, no AC source would be available to power the minimum required ESF functions. Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a short time could be less than that associated with an immediate con.trolled shutdown (the immediate shutdown could cause grid instability, *which could result in a total loss of AC power). Since an inadvertent generator trip could also result tn a total loss of offsite AC power, however, th~ time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an* immediate controlled shutdown and to minimize the risk associated with this level of degradation.

According to the recommendations of RG 1.93, with both DGs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

F.1

The sequencer is an essential support system to the DG.

With the sequencer inoperable, the associated DG is unable to perform fts specified function; and must thereby be

immediately declared to be inoperable.

G.1. H.1. and I.I Since DG 1-2 cannot power fuel transfer pump P-18B, without P-18A, DG 1-2 becomes dependant on offsite power or DG 1-1 for its fuel supply (beyond the 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months it will operate on the day tank), and does not.meet the LCO requirement for independence. Since the condition is not as severe as the DG itself being inoperable, 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is allowed to restore the fuel transfer pump to operable status prior to declaring the DG inoperable.

Without P-18B, either DG can still provide power to the remaining fuel transfer pump, neither DG is directly

affected. Continued operation with a single remaining fuel transfer pump, however, must be limited since an additional single active failure (P-18A) could diS~ble the onsite power system. Because the loss of P~lBB is less severe than the loss of one DG, a 7 day Completion Time is allowed .

PALISADES B 3.7-12 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES ACTIONS If both fuel transfer pumps are inoperable, the onsite AC (continued) sources are limited to about 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months duration. Since this condition is not as severe as both DGs being inoperable, 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months is allowed to restore one fuel transfer pump to OPERABLE status.

J. I and J. 2 If the inoperable AC power sources cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

Condition K corresponds to a level of degradation in which all redundancy in the AC electrical power supplies has been lost. At this severely degraded level, any further losses

in the AC electrical power system will cause a loss of function. Therefore, no add"itional time is justified for continued operation. The unit is required by LCO 3.0.3 to commence a controlled shutdown.

SURVEILLANCE The AC sources are designed to permit inspection and REQUIREMENTS testing of all important areas and features, especially those that have a standby function, in accordance with 10 CFR 50, Appendix A, GDC 18. Periodic component tests are supplemented by extensive functional tests during refueling outages (under simulated accident conditions)~ The SRs for demonstrating the OPERABILITY of the DGs are in accordance with the recommendations of Regulatory Guide (RG) 1.9 and RG 1.137 *

- PALISADES B 3.7-13 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE Where the SRs discussed herein specify voltage and frequency REQUIREMENTS tolerances for the DGs operated in the "Unit" mode, the

.(continued) following is applicable. The minimum steady state output voltage of 2280 volts is 95% of the nominal 2400 volt generator rating. This value is above the setting of the primary undervoltage relays (127-1 and 127-2) and above the minimum analyzed acceptable bus voltage. It also allows for voltage drops to motors and other equipment down through the 120 volt level. The specified maximum steady state output voltage of 2520 volts is 105% of the nominal generator rating of 2400 volts. It is below the maximum voltage rating of the safeguards motors, 2530 volts. The specified minimum and maximum frequencies of the DG are 59.5 Hz and 61.2 Hz, respectively. The minimum value assures that ESF pumps provide sufficient flow to meet the accident analyses.

The maximum value is equal to 102% of the 60 Hz nominal frequency and is derived from the recommendations given in RG 1. 9.

Higher maximum tolerances are specified for final steady state voltage and frequency following a loss of load test, because that test must be performed with the DG controls in the "Parallel" mode. Since "Parallel" mode operation*

introduces both voltage and speed droop, the DG final conditions will not return to the nominal "Unit" mode settings.

These SRs are modified by two notes. One note states that momentary transients outside the required band do not invalidate this test. This is to assure that a minor change in grid conditions and the resultant change in DG load, or a similar event, does not result in a surveillance being unnecessarily repeated. The other allows taking credit for unplanned events which satisfy the SR. Several SRs carry a limitation against performance during specified plant conditi-ons. If an unplanned event should occur, during these specified conditions, which satisfy the requirements of the SR, it may be documented as completion of the SR .

PALISADES B 3.7-14 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE SR 4.7.1.1 (Offsite Source check}

REQUIREMENTS (continued} This SR assures that the required offsite circuits are OPERABLE. Each offsite circuit must be energized from associated switchyard bus through its disconnect switch to be OPERABLE.

Since each required offsite circuit transformer has only one possible source of power, the associated switchyard bus, and since loss of voltage to either the switchyard bus or the transformer is alarmed in the control room, correct alignment and voltage may be verified by the absence of these alarms.

The 7 day Frequency is adequate because disconnect switch positions cannot change without operator action and because their status is displayed in the control room.

SR 4. 7.1. 2 (DG starting test}

This SR helps to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the plant in a safe shutdown condition .

The monthly testing starting of the DG provides assurance that the DG would start and be ready for loading in the time period assumed in the safety analyses. The monthly test, however does not, and is not intended to, test all portions of the circuitry necessary for automatic starting and loading. The operation of the bus undervoltage relays and their auxiliary relays which initiate DG starting, the control relay which initiates DG breaker closure, and the DG breaker closure itself are not verified by this test.

Verification of automatic operation of these components requires de-energizing the associated 2400 volt bus and cannot be done during plant operation. For this test, the 10 second timing is started when the DG receives a start .

signal, and ends when the DG voltage sensing relays actuate .

.For the purposes of SR 4.7.1.2, the DGs are manually started from standby conditions. Standby conditions for a DG mean the diesel engine is not running, but its coolant and oil temperatures are being maintained consistent with manufacturer recommendations .

PALISADES B 3.7-15 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE Three relays sense the terminal voltage on each DG. These REQUIREMENTS relays, in conjunction with a load shedding relay actuated (continued) by bus undervoltage, initiate automatic closing of the DG breaker. During monthly testing, the actuation of the three

voltage sensing .relays is used as the timing point to determine when the DG is_ready fQr loading.

The 31 day Frequency for performance of SR 4.7.1.2 agrees with the original licensing basis for the Palisades plant, and is consistent with the testing frequency recommendation of Generic Letter 94-01.

SR 4. 7.1.3 (DG loading* test)

This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads for at least 15 minutes.

A minimum total run time of 60 minutes is required to stabilize engine temperatures.

The 31 day Frequency for this Surveillance is consistent with the original Palisades licensing basis and with the testing frequency recommendation of Generic.Letter 94-01 .

SR 4.7.1.4 (DG starting air pressure check)

This Surveillance ens~res that, without the aid of the refill compress~r, sufffcient air start capacity for each DG is available. The pressute specified in this SR is intended to reflect the lowest value at which successful starts can be accomplished.

The 31 day Frequency takes into account the capacity, capabil i ty, redundancy, and* diversity of the AC sources and other indications available in the cont~ol room, including alarms, to alert the operator to below normal air start pressur*e .

PALISADES B 3.7-16 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE SR 4.7.1.5 (DG day tank level check)

REQUIREMENTS (cont i nu.ed) This SR provides verification that the level of fuel oil in the day tank is at or above the level at which fuel oil is

automatically added. The specified level is adequate for a minimum of 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months of DG operation at full load.

The 31 day Frequency is adequate to assure that a sufficient supply of fuel oil is available, since low level alarms are provided and plant operators would be aware of any uses of the DG during this period.

SR 4..7.1.6 (Fuel Transfer system checks)

This SR demo.nstrates that each fuel transfer pump and the fuel transfer system controls operate and control transfer of fuel from the Fuel Oil Storage Tank to each day tank and engine mounted tank. This is required to support continuous operati~n of standby power sources.

This SR provides assurance that the following portions of the fu.e l transfer system is OPERABLE:

Fuel Transfer Pumps Day and engine mounted tank filling solenoid valves Day and eng.ine mounted tank automatic level controls The 92 day Frequency corresponds to the testing requirements for pumps in the ASME Code,Section XI. Additional

assurance of fuel transfer system OPERABILITY is provided during the monthly starting and loading tests for each DG when the fuel oil system will function to maintain level in the day and engine mounted tanks.

SR 4.7.1.7 (Fast transfer vetification)

Transfer of the safety related buses from the normal AC power source, that used during power operation, to the offsite circuit which meets the GDC 17 "immediately available" criterion (Startup Transformer 1-2) demonstrates the OPERABILITY of the "immediately available" circuit and of the fast transfer circuitry for use with that normal AC source .

PALISADES B 3.7-17 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE The 18 month Frequency of the Surveillance is based on REQUIREMENTS engineering judgment, taking into consideration the plant (continued) conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

Operating experience has shown that these components usually pass the SR when performed at the 18 month Frequency.

Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

SR 4.7.1.8 (DG largest load rejection test)

Each DG is provided with an engine overspeed trip to prevent damage to the engine. The loss of a large load could cause diesel engine overspeed, which, if excessive, might result in a trip of the engine. This Surveillance demonstrates the DG load response characteristics and capability to reject the largest single load without exceeding predetermined voltage and frequency and while maintaining a specified margin to the overspeed trip. This Surveillance may be accomplished with the DG in the "Parallel" mode.

An acceptable method is to parallel the DG with the grid and l~ad the DG to a load equal to or greater than its single largest post-accident load. The DG breaker is tripped while its voltage and frequency (or speed) are being recorded.

The time, voltage, and frequency tolerances specified in this SR are derived from the recommendations of RG 1.9, Revision 3 (RG 1.9).

RG 1.9 recommends that the increase in diesel speed during the transient does not exceed 75% of the difference between synchronous speed and the overspeed trip setpoint, or 15% above synchronous speed, whichever is lower. The Palisades DGs have a synchronous speed of 900 rpm and an overspeed trip setting range of 1060 to 1105 rpm.

Therefore, the maximum acceptable transient frequency for this SR is 68 Hz.

The minimum steady state voltage is specified to provide adequate margin for the switchgear and for both the 2400 and 480 volt safeguards motors; the maximum steady state voltage is 2400 +10% volts as recommended by RG 1.9 *

PALISADES B 3.7-18 Amendment:

AC Sources. - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE The minimum acceptable frequency is specified to assure that REQUIREMENTS the safeguards pumps powered from the DG would supply (continued) adequate flow to meet the safety analyses. The maximum acceptable steady state frequency is slightly higher than the +2% (61.2 Hz) recommended by RG 1.9 because the test must be performed with the DG controls in the Parallel mode.

The increased. frequency allowance of 0.3 Hz is based on the expected speed differential associated with performance of the test while in the "Parallel" mode.

The 18 month surveillance Frequency is consistent with the recommendation of RG 1.9.

SR 4.7.1.9 (DG full load rejection test)

This Surveillance demonstrates the DG capability to reject a full load without overspeed tripping or exceeding the predetermined voltage limits. The DG full load rejection may occur because of a system fault or inadvertent breaker tripping. This Surveillance ensures proper engine and generator load response under a complete loss of load.

These acceptance criteria provide DG damage protection. The 4000 volt limitation is based on generator rating of

2400/ 4160 volts. While the DG is not expected to experience this transient during an event and continue to be available, this response ensures that the DG is not degraded for future application, including re-connection to the bus if the.trip initiator can be corrected or isolated.

In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing must be performed using a power factor

~ 0.9. This power factor is chosen to be representative of the actual design basis inductive loading that the DG would experience.

The 18 month Frequency is consistent with the recommendation of RG 1.9 and is intended to be consistent with expected fuel cycle lengths.

SR 4.7.1.10 (Loss of off-site power without SIS test)*

As recommended by RG 1.9 this Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source. This test verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and re-energizing of the emergency buses and respective loads from the DG .

PALISADES B 3.7-19 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE The requirement to energize permanently connected loads is REQUIREMENTS met when the DG breaker closes, energizing its associated (continued} 2400 volt bus. Permanently connected loads are those which are not disconnected from the bus by load shedding relays.

They are energized when the DG breaker closes. It is not necessary to monitor each permanently connected load. The DG auto-start and breaker closure time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. For this* test, the 10 second timing is started when the DG receives a start signal, and ends when the DG breaker closes.

The requirement to verify that auto-connected shutdown loads are energized refers to those loads which are actuated by the Normal Shutdown Sequencer. Each load should be started to assure that the DG is capable of accelerating these loads at the intervals programmed for the Normal Shutdown Sequence. The sequenced pumps may be operating on recirculation flow.

The requirements to maintain steady state voltage and frequency apply to the "steady state" period after all sequenced loads have been started. This period need only be long enough to achieve and measure steady voltage and frequency.

The Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.

The requirement to supply permanently connected loads for

~ 5 minutes, refers to the duration of the DG connection to the associated safeguards bus. It is not intended to require that sequenced loads be operated throughout the 5 minute period. It is not necessary to monitor each permanently connected load.

The requirement to verify the connection and supply of permanently and automatically connected loads is intended to demonstrate the DG loading logic. This testing may be accomplished in any series of sequential, overlapping, or total steps so that the required connection and loading sequence is verified.

The Frequency of 18 months is consistent with the recommendations of RG 1.9 .

PALISADES B 3.7-20 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE SR 4.7.1.11 (DG 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months load test)

REQUIREMENTS

. (continued) RG 1.9 recommends demonstration once per 18 months that the DGs can start and run. continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , ~ 100 minutes of which is at a load above its analyzed peak accident loading and the remainder of the time at a load equivalent to the continuous duty rating of the DG. The 100 minutes required by the SR satisfies the intent of the recommendations of the RG, but allows some tolerance between the time requirement and the DG ratirig. Without this tol~rance, the load would have to be reduced at precisely 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months to satisfy the SR without exceeding the manufacturer's rating of the DG.

The DG starts for this Survei 11 ance can be performed either from standby or hot conditions.

In .order to ensure that the DG is tested under load conditions that are as close to design conditions as possible, testing must be performed using a power factor of s 0.9. This power factor is chosen to be representative of the actual design basis inductive loadi~g that*the DG would experience. The load band is provided to avoid routine overloading of the DG. Routine ove*rloading m(ly result in more frequent inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The 18 month Frequency is consistent with the recommendations of RG 1.9.

SR 4.7.1.12 (DG load transfer to offsite)

As recommended by RG 1.9, this Surveillance ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and that the DG can be returned to.ready to load status when offsite power i's restored. The test is performed while the DG is supplying its associated 2400 volt bus, but not necessarHy carrying the sequenced accident loads. The DG is considered to be in ready to load status when the *DG is at rated speed and voltage, the output breaker is -0pen, the automatic load sequencer is reset, and the DG controls are returned to "Unit".

The Frequency of 18 months is consistent with the recommendations of RG 1.9 *

PALISADES B 3.7-21 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE SR 4.7.1.13 (Sequencer timing check)

REQUIREMENTS (continued) If power is lost to bus IC or ID, loads are sequentially connected to the bus by the automatic load sequencer. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs by concurrent motor starting currents. The 0.1 second load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and ensures that safety analysis assumptions regarding ESF equipment time delays are met. Logic Drawing E-17 Sheet 4 provides a summary of the automatic loading of safety related buses.

The Frequency of 18 months is consistent with the recommendations of RG I.9, takes into consideration plant conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

SR 4.7.1.14 (Loss of offsite power with SIS test)

In the event of a OBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to

ESF systems so that the fuel, PCS, and containment design limits are not exceeded.

The requirement to energize permanently connected loads is met when the DG breaker closes, energizing its associated 2400 volt bus. Permanently connected loads are those which are not disconnected from the bus by load shedding relays.

They are energized when the DG breaker closes. It is not necessary to monitor each permanently connected load. The DG auto-start and breaker closure time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. For this test, the 10 second timing is started when the DG receives a start signal, and ends when the DG bre~ker closes.

The requi*rement to verify that auto-connected shutdown 1oads are energized refers to those loads which are actuated by the OBA Sequencer. Each load should be started to assure that the DG is capable of accelerating these loads at the intervals programmed for the OBA Sequence. The sequenced pumps may be operating on recirculation flow of in other testing mode. The requirements to maintain steady state voltage and frequency apply to the "steady state" period after all sequenced loads have been started. This period need only be long enough to achieve and measure steady voltage and frequency .

PALISADES B 3.7-22 Amendment:

AC Sources - Operating B 3.7.1 and 4.7.1 BASES SURVEILLANCE The Surveillance should be continued for a minimum of REQUIREMENTS 5 minutes in order to demonstrate that all starting (continued) transients have decayed and stability has been achieved.

The requirement to supply permanently connected loads for

~ 5 minutes, refers to the duration of the DG connection to the associated 2400 volt bus~ It is not intended to require that sequenced loads be operated throughout the 5 minute period. It is not necessary to monitor each permanently connected load.

The Frequency of 18 months takes into consideration plant conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 18 months.

SR 4.7.1.15 (DG load verification)

This item is intended to provide assurance that the electrical loads which are automatically connected to the DG during an accident sequence do not exceed its continuous rating. The test may be accomplished by analytical means*

rather than by physical testing, and addresses running . i current of the loads rather than starting current. The I

REFERENCES requirement to perform the test each 18 months is based on the required frequency of an equivalent requirement in the former CE STS, NUREG 0212.

1. 10 CFR 50, Appendix A, GDC 17.

2. Regulatory Guide 1.93, December 1974.

3. Generic Letter 84-15, July 2, 1984.

4. 10 CFR 50, Appendix A, GDC 17.

5. 10 CFR 50, Appendix A, GDC 18.

6. Regulatory Guide 1.9, Rev. 3, July 1993.

7. Regulatory Guide 1.137, Rev. 1, October 1979.

8. Generic Letter 94-01, May 31, 1994.

9. ASME, Boiler and Pressure Vessel Code,Section XI.

10. IEEE Standard 308-1978.

11. Palisades Logic Drawing E-17, Sheet 4.

PALISADES B 3.7-23 Amendment:

AC Sourc~s - Shutdown B 3.7.2 and 4~7.2

ELECTRICAL POWER SYSTEMS B 3.7.2 and 4.7.2:

. BASES AC Sources - Shutdown BACKGROUND A description of the AC sources is provided in the Bases for LCO 3.7.1, "AC Sources_~ Operating."

APPLICABLE The safety analyses do not explicitly address electrical SAFETY power. They do, however, assume that var*ious electrically ANALYSES powered and controlled equipment is available. Electrical power is necessary to terminate and mitigate the effects of many postulated events which could occur in COLD SHUTDOWN or REFUELING SHUTDOWN.

Analyzed events which might occur during COLD SHUTDOWN or REFUELING SHUTDOWN are Loss of PCS inventory or Loss of PCS Flow, (which in COLD SHUTDOWN or REFUELING SHUTDOWN would be grouped as a Loss of Shutdown Cooling event), and

radioactive releases (Fuel Handling Accident, Cask Drop, Radioactive Gas Release, Etc.).

In general, when the plant is shut down, the Technical Specifications requirements ensure that the plant has the capability to mitigate the consequences.of postulated accidents. However, assuming a single failure and concurrent loss of all offsite or all onsite power is not required. The rationale for this is based on the fact that many Design Basis.Accidents (DBAs) that are analyzed in above COLD SHUTDOWN have no specific analyses in COLD SHUTDOWN -0r REFUELING SHUTDOWN. Worst case bounding events are deemed not credible in COLD SHUTDOWN or REFUELING SHUTDOWN because the primary.coolant temperature and pressure, and the corresponding stresses result in the probabilities of occurrence being significantly reduced, and in minimal consequences .

PALISADES B 3.7-24 Amendment:

AC Sources - Shutdown B 3.7.2 and 4.7.2 LCO This LCO requires that one offsite circu-it to be OPERABLE.

One OPERABLE offsite circuit ensures that all required loads may be powered from offsite power. Since only one offsite AC source is required, independence is not a criterion. Any of the three offsite supplies, Safeguards Transformer 1-1, Station Power Transformer 1-2, or Startup Transformer 1-2 is acceptable as a qualified circuit.

An OPERABLE DG, associated with a distribution subsystem required to be OPERABLE by LCO 3.7.10, ensures a diverse power source is available to provide electrical power support, assuming a loss of the offsite circuit.

Together, OPERABILITY of the required offsite circuit and DG ensures the availability of sufficient AC sources to operate

the plant in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents and loss of shutdown cooling).

The DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective 2400 volt bus on detection of bus undervoltage, and accepting required

loads. Proper "Normal Shutdown" loading sequence, and tripping of nonessenti~l loads, is a required function for DG OPERABILITY. A Service Water Pump must be started soon after the DG to assure continued DG operability. The OBA loading sequence is not required to be OPERABLE since the Safety Injection Signal is disabled during COLD SHUTDOWN.

APPLICABILITY The AC sources re_qu ired to be OPERABLE in COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of i~radiated fuel assemblies provide assurance that equipment and instrumentation is available to:

a. Provide coolant inventory makeup,

b. Mitigate a fuel handling acci~ent~

PALISADES B 3.7-25 Amendment:

AC Sources - Shutdown B 3.7.2 and 4.7.2 APPLICABILITY c. Mitigate shutdown events that can lead to core damage, (continued)

d. Monitoring and maintaining the plant in a COLD SHUTDOWN or REFUELING .SHUTDOWN condition.

The AC source requirements for above COLD SHUTDOWN are addressed in LCO 3.7.1, "AC Sources - Operating".

ACTIONS An offsite circuit would be considered inoperable if it were not available to supply the 2400 volt safety related bus or buses required by LCO 3.7.10. Si*nce the required offsite AC source is only required to support features required by other LCOs, the option to declare those required features with no offsite power available to be inoperable, assures that appropriate ACTIONS will be implemented in accordance with the affected LCOs ..

A.2.1, A.2.2. A.2.3, A.2.4, B.l, B.2. B.3, and B.4

ACTION A.I may involve undesired and unnecessary administrati~e efforts, therefore, ACTIONs A.l provide alternate, but sufficiently conservative, ACTIONs.

With the required DG inoperable, the minimum required diversity of AC power sources is not available.

ACTIONs A.2 and B.2 require suspension of REFUELING OPERATIONS, movement of irradiated fuel assemblies, and operations involving positive reactivity additions. The suspension of REFUELING OPERATIONS and movement of irradiated fuel assemblies does not preclude actions to place a fuel *ssembly in a safe location; the suspension of positive reactivity additions does not preclude actions to maintain or increase reactor vessel invent9ry provided the required SHUTDOWN MARGIN is maintained.

These ACTIONS minimize the probability or the occurrence of postulated events. It is further required to immediately initiate action to restore the required AC sources (and to continue this action until restoration is accomplished) in order to provide the necessary AC power to the plant safety systems .

PALISADES . B 3.7-26 Amendment:

AC Sources - Shutdown B 3.7.2 and 4.7.2

BASES ACTIONS

.{continued)

The Completion Time of "immediately" is consistent with the required times for actions requiring prompt attention. The restoration of the required AC power sources should be completed as quickly as possible in order to minimize the time during which the plant safety systems may be without sufficient power.

SURVEILLANCE SR 4.7.2.l (Shutdown AC power surveillance)

REQUIREMENTS SR 4.7.2.1 requires the SRs from LCO 3.7.1 that are necessary for ensuring the OPERABILITY of the AC sources in COLD SHUTDOWN and REFUELING SHUTDOWN.

The SRs from LCO 3.7.l which are required are those which both support a feature required in COLD SHUTDOWN or REFUELING SHUTDOWN and can which be performed without effecting the OPERABILITY or reliability of the required sources.

With only one DG available, many tests cannot be performed since their performance would render that DG inoperable during the test. This is the case for tests which require DG loading: SRs 4.7.1.3, 4.7~1.8, 4.7.1.9, 4.7.1.10, 4.7.1~11, 4.7.1.12, 4.7.1.13, and 4.7.1.14.

With only one DG and onlj one offsite circuit available, SR 4.7.1~7 cannot be performed.

REFERENCES None .

PALISADES B 3.7-27 Amendment:

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3

ELECTRICAL POWER SYSTEMS B 3.7.3 and 4.7.3:

BASES Diesel Fuel Oil and Lube Oil BACKGROUND The diesel generators (DGs) are provided with a storage tank having a required fuel oil inventory sufficient to operate one diesel for a period of 7 days, while the DG is supplying maximum post-accident loads. This onsite fuel oil capacity is sufficient to operate the DG for longer than the time to replenish the onsite supply from offsite sources.

Fuel oil is transferred from the Fuel Oil Storage Tank to either day tank by either of two Fuel Transfer Pumps.

For proper operation of the standby DGs, it is necessary to ensure the proper quality of the fuel oil. Regulatory Guide (RG) 1.137 addresses the recommended fuel oil practices as supplemented by ANSI Nl95-1976.

The DG lubrication system is designed to provide sufficient lubrication to permit proper operation of its associated DG under all loading conditions. The system is required to circulate the lube oil to the diesel engine working surfaces and to remove excess heat generated by friction during operation. The onsite storage in addition to the engine oil sump is sufficient to ensure 7 days of continuous operation.

This supply is sufficient supply to allow the operator to replenish lube oil from offsite sources. Implicit in this LCO is the requirement to assure, though not necessarily by testing, the capability to transfer the lube oil from its storage location to the DG oil sump, while the DG is running.

APPLICABLE A description of the Safety Analyses applicable above COLD SAFETY SHUTDOWN is provided in the Bases for LCO 3.7.1 "AC Sources ANALYSES - Operating"; during COLD SHUTDOWN and REFUELING SHUTDOWN, in the Bases for LCO 3.7.2 "AC Sources - Shutdown" .

PALISADES B 3.7-28 Amendment:

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3 LCO Stored diesel fuel oil is required to have sufficient supply for 7 days of full accident load operation. It is also required to meet specific standards for quality. The specified 7 day requi.rement and the 6 day quantity listed in Condition 3.7.3.A are taken from the Engineering Analysis associated with Event Report E-PAL-93-0268.

Additionally, sufficient lube oil supply must be available to ensure the capability to operate*at full accident load for 7 days. This requirement is in addition to the lube oil contained in the engine sump. The specified 7 day requirement and the 6 day quantity listed in Condition 3.7.3.B are based on an assumed lube oil consumption of 1 gallon per hour.

These requirements, in conjunction with an ability to obtain rep.l acement supplies within 7 days, support the availability of the DGs. DG day tank fuel requirements, and fuel transfer capability from the* storage tank to the day tanks, are addressed in LCOs 3.7.1, and 3.7.2 .

APPLICABILITY The DGs are required by LCOs 3.7.1 and 3.7.2 to ensure the availability of the r*equired AC power to shut down the reactor and maintain it in a safe shutdown condition following a loss of riff-site power. Since stored diesel fuel oil and lube oil support LCOs 3.7.1 and 3.7.2, stored diesel fuel oil and lube oil are required to be within limits when either DG is required to be OPERABLE.

ACTIONS In this Condition, the available DG fuel oil supply is less than the required 7 day supply, but enough for at least 6 days. This condition allows sufficient time to obtain additional fuel and to perform the sampling and analyses required prior to addition of fuel oil to the tank. A period of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is considered sufficient to complete restoration of the required inventory prior to declaring the DGs inoperable .

PALISADES B 3.7-29 Amendment:

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3

BASES ACTIONS (continued)

B.1 In this Condition, the available DG lube oil supply is less than* the required 7 day supply, but enough for at least 6 days. This condition allows sufficient time to obtain additional lube oil. A period of 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months is considered sufficient to complete restoration of the required inventory prior to declaring the DGs inoperable.

Diesel fuel oil with viscosity, or water and sediment out of limits is not necessarily unacceptable for short term DG operation. Viscosity is important primarily because of its effect on the handling of the fuel by the pump and injector system; water and sediment provides an indication of fuel contamination. When the fuel oil stored in the Fuel Oil Storage Tank is determined to be out of viscosity, or watet and sediment limits, but acceptable for short term DG

operation, it will be restored to within limits within 7 days. (If the fuel oil stored in the Fuel Oil Storage Tank is determined to be unacceptable for even short term usage, the affected DGs must be declared inoperable.) The 7 day Completion Time allows for further evaluation, re-sampling, and re-analysis of the DG fuel oil.

With the stored fuel oil properties defined in the Fuel oil Testing Program not within the required limits, but acceptable for short term DG operation, a period of 31 days is allowed for restoring the stored fuel oil properties.

This period provides sufficient time to determine if new fuel oil, when mixed with stored fuel oil, will produce an acceptable mixture, or if other methods to restore the stored fuel oil properties are required. This restoration may involve feed and bleed procedures, filtering, or combinations of these procedures. Even if a DG start and load was required during this time interval and the fuel oil properti~s were outside limits, there is a high likelihood that the DG would still be capable of performing its intended function .

PALISADES B 3.7-30 Amendment:

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3 ACTIONS E.1 (continued)

With a Required Action and associated Completion Time not met, or with diesel fuel oil or lube oil not within limits for reasons other than addressed by.Conditions A through D, the associated DG may be incapable of performing its intended function and must be immediately declared inoperable.

SURVEILLANCE SR 4.7.3.1 (fuel oil quantity check)

.REQUIREMENTS This SR provides verification that there is an adequate inventory of fuel oil in the storage tank to support either

.DG's operation for 7 days at full post-accident load. The 7 day period is sufficient time to place the plant in a safe shutdown condition and to bring in replenishment fuel from an offsite location.

The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Frequency is specified to ensure that a sufficient supply of fuel oil is available, since the Fuel

Oil Storage Tank is the fuel oil supply for the diesel fire pumps, heating boilers, and rad waste evaporators, in addition to the DGs.

SR 4.7.3.2 (Lube oil quantity check)

This Surveillance ensures that sufficient lube oil inventory is available to support at least 7 days of full accident load operation for one DG. The 175 gallons requirement is based on an estimated consumption of 1 gallon per hour.

A 31 day Frequency is adequate to ensure that a sufficient lube oil supply is onsite, since DG starts and run times are closely monitored by the plant staff.

SR 4.7.3.3 (Fuel oil quality check)

The tests listed below are a means of determining whether new fuel oil and stored fuel oil are of the appropriate grade and have not been contaminated with substances that would have an immediate, detrimental impact on diesel engine combustion. *

PALISADES B 3.7-31 Amendment:

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3

BASES SURVEILLANCE REQUIREMENTS (continued)

Testing for viscosity, specific gravity, and water and sediment is completed for fuel oil delivered to the plant prior to its being added to the Fuel Oil Storage Tank. Fuel oil which fails the test, but has not been added to the Fuel Oil Storage Tank does not imply failure of this SR and requires no specific action. If results from these tests are within acceptable limits, the fuel oil may be added to the storage tank without concern for contaminating the entire volume of fuel oil in the storage tanks.

Fuel oil is tested for other of the parameters specified in ASTM D975 in accordance with the Fuel Oil Testing Program required by Specification 6.8.4c. Fuel oil determined to have one or more measured parameters outside acceptable limits will be evaluated for its effect on DG operation.

Fuel oil which is determined to be acceptable for short term DG operation, but outside limits will be restored to within limits in accordance with Condition D. Fuel oil which is determined to be unacceptable for even short term DG operation is caus~ for the DGs to be declared inoperable.

SR 4.7.3.4 (Fuel Oil Storage Tank water check)

Microbiological f6uling is a major caus~ of fuel oil degradation. There are numerous bacteria that can grow in fuel oil and cause fouling, but all must have a water environment in order to survive. Removal of water from the Fuel Oil Storage Tank once every 31 days eliminates the necessary environment for bacterial survival. This is the most effective means of controlling micro~iological fouling.

In addition, it reduces the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, and contaminated fuel oil, and from breakdown of the fuel oil by bacteria. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system. The Surveillance Frequencies and acceptance criteria are established in the Fuel Oil Testing Program based, in part, on those recommended by RG 1.137. This SR is for preventative maintenance. The presence of water does not necessarily represent failure of this SR provided the accumulated water is removed in accordance with the requirements of the Fuel Oil Testing Program .

PALISADES B 3.7-32 Amendment: .

Diesel Fuel and Lube Oil B 3.7.3 and 4.7.3

BASES SURVEILLANCE REQUIREMENTS (continued) 1.. ' ' ...

SR 4.7.3.5 (Fuel Oil Storage Tank cleaning)

The Fuel Oil Storage Jank should be cleaned at 10 year intervals in accordance with the Fuel Oil Testing Program.

Since Palisades does not have individual fuel oil tanks for each DG and the Fuel Oil Storage Tank cannot be removed from service for draining; cleaning may be performed by methods which do not require removing it from service. This SR is for preventative maintenance. The presence of sediment does not necessarily represent.a failure of this SR, provided that accumulated sediment is removed during performance of the Surveillance.

. ~ :,'-*~ ..

REFERENCES 1. Regulatory Guide 1.137.

2. ANSI Nl95-1976, Appendix B.

3. ASTM Standards, 0975, Table 1.

PALISADES B 3.7-33 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

ELECTRICAL POWER SYSTEMS B 3.7.4 and 4.7.4: DC Sources - Operating BASES BACKGROUND The station DC electrical power system provides the AC power system with control power. It also provides control power to selected safety relatecr equipment and power to the preferred AC Buses (vi.a inverters)

As required by 10 CFR 50, Appendix A, GDC 17, the DC electrical power system is designed to,have sufficient independence, redundancy, and testability to perform its safety functions, assuming a single failure

.. ;v The 125 volt DC electrical power system consists of two independent and redundant safety related Class IE DC power sources. Each DC source consists of one 125 battery, two

battery chargers, and the associated control equipment.and interconnecting cabling.

Each station battery has two associated battery chargers, one powered by the associated AC power distribution system (the directly connected chargers) and one powered from the opposite AC power distribution system (the cross connected

chargers). The battery chargers are normally operated in pairs, either both direct connected chargers or both cross connected chargers, to assure a divers~ AC supply.

During normal operation, the 125 volt DC load is powered -

from the battery chargers with the batteries fl oat i ng on the system. In case of loss of normal power from the battery charger, the DC load continues to be powered from the station batteries.

The DC power distribution system is described in the Bases for LCO 3.7~9, "Distributions System Operating".

Each battery has adequate storage capacity to carry the required load continuously for at least 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months and to perform three complete cycles of intermittent loads discussed in the FSAR, Chapter 8.

Each 125 volt battery is separately- housed in a ventilated r6om apart from its charger and distribution centers. Each DC source is separated physically and electrically from the other DC source to ensure that a single failure in one source does not caus~ a failure in a redundant source .

- PALISADES B 3.7-34 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES BACKGROUND (continued)

The batteries for the DC power sources are sized to produce required capacity at ~0% of nameplate rating, corresponding to warranted capacity at:end of life cycles and the 100%

design demand. The voltage limit is 2.13 volts per cell, which corresponds to-ii""' fota l mini mum voltage output of 125.7 volts per battery discussed in the FSAR, Chapter 8.

The criteria for sizing large lead storage batteries are defined in IEEE-485. ,:

Each DC electrical power source h.as ample power output capacity for the steady state operation of connected loads during normal operation, while at the same time maintaining its battery fully charged*.. Each battery charger also has sufficient capacity to restore the battery from the design minimum charge to its fully charged state within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months while supplying normal steady state loads discussed in the FSAR, Chapter 8.

APPLICABLE A description of the Safety Analyses applicable above COLD

SAFETY ANALYSES LCO SHUTDOWN is provided in the Bases for LCO 3.7.1 "AC Sources

- Operating".

The DC power sources, each consisting of one battery, one directly connected battery charger and the corresponding control equipment and interconnecting cabling supplying power to the associated bus within the train are required to be OPERABLE to ensure the availability of DC control power and Preferred AC power to shut down the reactor and maintain it in a safe condition.

An OPERABLE DC electrical power source requires its battery to be OPERABLE and connected to the associated DC bus. In order for the battery to remain OPERABLE, one charger must be in service.

PALISADES B 3.7-35 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES LCO (continued)

The LCO specifies chargers DIS and Dl6 because those chargers are powered .by the AC power distribution system and DG associated with the battery they supply. If only the cross connected chargers'~were OPERABLE, and a 1oss of off-site power shoul d--9cciir concurrent 1y with the 1oss of one DG, both safeguards:.trains would eventually become disabled. One train would- be disabled by the lack of AC motive power; the other would become disabled when the battery, whose only OPERABLE charger is fed by the failed DG, became dep 1eted. , *

. ': :~::.~

.~i;.t:*>i '... .

The required charger~-:;::P.J~* and __ pl6, must be OPERABLE, but need not actually be in service because the probability of a concurrent loss of offsite power and loss of one DG is low, battery charging current is not needed immediately after an accident, and the standby chargers may be placed in service quickly.

APPLICABILITY The DC sources are required to be OPERABLE above COLD SHUTDOWN to ensure that redundant sources of DC power are available to support engineered safeguards equipment and plant instrumentation in the event of an acci~ent or transient.* The DC sources also support the equipment and instrumentation necessary for power operation, plant heatups and cooldowns, and shutdown operation.

The DC source requirements for COLD SHUTDOWN and REFUELING SHUTDOWN are addressed in LCO 3.7.5, "DC Sources -

Shutdown."

ACTIONS A. I and A. 2 With one of the required chargers (D15 or D16) inoperable, the cross connected charger must be immediately placed in service, if it is not already in service, to maintain the battery in OPERABLE status. In order to limit the time when the DC source is not capable of continuously meeting the single failure criterion, the required charger must be restored to OPERABLE status within 7 days.

The 7 day completion time was chosen to allow trouble shooting, location of parts, and repair .

PAL'ISADES B 3.7-36 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES ACTIONS (continued)

B.1 and B.2 With one battery inoperable, the associated DC system cannot meet its design. It lacks both the surge capacity and the independence from AC power sources which the battery provides if offsite power is lost. Placing the second battery charger in service provides two benefits:

1) restoration of the capacity to supply a sudden DC power demand, and 2) restoration of adequate DC power in the affected train as soon as either AC power distribution system is re-energized following a loss of offsite power.

In order to restore the DC source to its design capability, the battery must be restored to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Completi-0n Time is a feature of the original Palisades licensing basis and reflects the availability to provide two trains of DC power from either AC distribution system. Furthermore, it provides a reasonable time to assess plant status as a function of the inoperable DC electrical power source and, if the battery is not restored to OPERABLE status, to prepare to effect an orderly and safe plant shutdown .

C.l and C.2 If the inoperable DC electrical power source cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems .

PALISADES . B 3.7-37 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES SURVEILLANCE REQUIREMENTS SR 4.7.4.1 (Float voltage check)

Verifying battery terminal voltage while on float charge helps to ensure the effectiveness of the charging system and the ability of the batteries to perform thetr. intended function. Float charge is the condition in which the charger is supplying the continuous current required to overcome the internal losses of a battery and maintain the battery in a fully charged state. The specified voltage is the product of the Table 3.7.6-1 Category C limit for an individual cell and the number of cells in the battery. It corresponds to the minimum acceptable setting of the low voltage alarm on the DC buses. The 7 day Frequency is consistent with manufacturer and IEEE-450 recommendations.

SR 4.7.4.2 (Terminal and connector condition check)

Visual i.nspection to detect corrosion of the battery terminals and connectors, or measurement of the resistance of each inter-cell and terminal connection, provides an indication of physical damage or abnormal deterioration that could potentially degrade battery performance .

The specified limit of 120% of the resistance at initial installation is in accordance with the manufacturers recommendations.

The Surveillance Frequency for these inspections, which can detect conditions that can cause power losses due to resistance heating, is 92 days. This Frequency is considered acceptable based on operating experience related to detecting corrosion trends.

SR 4.7.4.3 (Battery inspection)

Visual inspection of the battery cells, cell plates, and racks provides an indication of physical damage or abnormal deterioration that could potentially degrade battery performance.

The 12 month Frequency for this SR is consistent with IEEE-450, which recommends detailed visual inspection of cell condition and rack integrity on a *yearly basis .

PALISADES B 3.7-38 Amendment:

DC Sources - Operating B 3. 7 ..4 and 4. 7. 4

BASES SURVEILLANCE REQUIREMENTS SR 4.J.4.4 and SR 4.7.4.5 (Cleaning and resistance)

(continued) Visual inspection and resistance measurements of int'er-cell and terminal connections provide an indication of physical damage or abnormal deterioratiori that could indicate degraded battery condition. The anticorrosion material is used to help ensure good electrical connections and to reduce terminal deterioration. The visual inspection for corrosion is not intended to require removal of and inspection under each termi na*l connection. The removal of visible corrosion is a preventive maintenance SR. The presence of visible corrosion does not.necessarily represent

a. failure of this SR provided visible corrosion is removed during performance of SR 4.7.4.4.

The Surveillance Frequencies of 12 months is consistent with IEEE-450, which recommends cell to cell and terminal connection resistance measurement on a yearly basis.

SR 4.7.4.6 (Charger test)

This SR requires that each battery charger be capable of supplying 180 amps at 125 volts for ~ 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .. These requirements are based on the design capacity of the chargers. The chargers are rated at 200 amps; the specified 180 amps provides margin between the charger rating and the test requirement.

The Surveillance Frequency i's acceptable, given the plant conditions required to perform the test and the other administrative controls existing to ensure adequate charger performance during these 18 month intervals. In addition, this Frequency is intended to be consistent with expected fuel cycle lengths.

SR 4.7.4.7 (Service test)

A battery service test is a special test of battery capability, as found, to satisfy the design requirements (battery duty cycle) of the DC electrical power system. The discharge rat~ and test length should correspond to the design duty cycle requirements as specified in FSAR Chapter 8 *

PALISADES B 3.7-39 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES SURVEILLANCE REQUIREMENTS The Surveillance Frequency of 18 months is consistent with the recommendations of RG 1.32 and RG 1.129, which state (continued) that the battery service test should be performed during refueling operations, or at some other outage, with intervals between tests not to exceed 18 months.

The reason for the restriction that the plant be in COLD SHUTDOWN or REFUELING SHUTDOWN is that performing the Surveillance requires disconnecting the battery from the DC distribution buses and connecting it to a test load resistor bank. This action makes the battery inoperable and completely unavailable for use.

SR 4.7.4.8 (Performance test)

A battery performance discharge test is a test of constant current capacity of a battery, normally done in the "as found" condition, after having been in service, to detect any change in the capacity determined by the acceptance test.. The test is intended to determine over a11 battery degradation due to age and usage .

The modified performance discharge test is a simulated duty cycle consisting of just two rates; the one minute rate published for the battery or the largest current load of the duty cycle, followed by the test rate employed for the performance test, both of which envelope the duty cycle of the service test. Since the ampere-hours removed by a rated one minute discharge represents a very small portion of the battery capacity, the test rate can be changed to that for the performance test without compromising the results of the performance discharge test. The battery terminal voltage for the modified performance discharge test should remain above the minimum battery terminal voltage specified in the battery service test for the duration of time equal to that of the service test.

A modified discharge test is a test of the battery capacity and its ability to provide a high rate, short duration load (usually the highest rate of the duty cycle). This will often confirm the battery's ability to meet the critical period of the load duty cycle, in addition to determining its percentage of rated capacity. Initial conditions for the modified performance discharge test should be identical to those specified for a service test .

PALISADES B 3.7-40 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES.

SURVEILLANCE REQUIREMENTS Either the battery performance discharge test or the modified performance discharge test is acceptable for (continued) satisfying SR 4.7.4.7; however, only the modified performance discharge test*may be used to satisfy SR 4.7.4.8 while satisfying the requirements of SR 4.7.4.7 at the same time.

The acceptance criteria for this Surveillance are consistent with the recommendations of IEEE-450 and IEEE-485. These references recommend that the battery be replaced if its capacity is below 80% of the manufacturer rating. A capacity of 80% shows that the battery rate of deterioration is increasing, even if there is ample capacity to meet the load requirements.

The Surveillance Frequency for this test is normally 60 months. If the battery shows degradation, or if the battery has reached 85% of its expected life and capacity is

< 100% of the manufacturer's rating, the Surveillance Frequency is reduced to 12 months. However, if the battery shows no degradation but has reached 85% of its expected life, the Surveillance Frequency* is only reduced to 24 months for batteries that retain capacity ~ 100% of the manufacturer's rating. Degradation is indicated, according to IEEE-450, when the battery capacity drops by more than 10% relative to its capacity on the previous performance test or when it is ~ 10% below the manufacturer's rating.

These Frequencies are consistent with the recommendations in IEEE-450.

The reason for the restriction that the plant be in COLD SHUTDOWN or REFUELING SHUTDOWN is that performing the Surveillance requires disconnecting the battery from the DC distribution buses and connecting it to a test load resistor bank. This action makes the battery inoperable and completely unavailable for use .

PALISADES B 3.7-41 Amendment:

DC Sources - Operating B 3.7.4 and 4.7.4

BASES REFERENCES 1. 10 CFR.50, Appendix A, GDC 17.

2. FSAR, Chapter 8.

3. IEEE-485-1983, -June-1983.

4. Regulatory Guide 1.93, December 1974.

5. lEEE-450-1987.

6. Regulatory Guide 1.32, February 1977.

7. Regulatory Guide 1.129, December 1974 .

PALISADES B 3.7-42 Amendment:

DC Sources - Shutdown B 3.7.5 and 4.7.5

ELECTRICAL POWER SYSTEMS B 3.7.5 and 4.7.5: DC Sources - Shutdown BASES BACKGROUND A description of the DC sources is provided in the Bases for LCO 3.7.4, "DC Sources - Operating."

APPLICABLE A description of the Safety Analyses applicable during COLD SAFETY ANALYSES. SHUTDOWN and REFUELING SHUTDOWN is provided in the Bases for LCO 3.7.2 "AC Sources - Shutdown".

LCO This LCO requires those, and only those, DC power sources which supply the DC distribution subsystems required by LCO 3.7.10, to be OPERABLE. Each DC source consists of one battery, one battery charger, and the corresponding control equipment and interconnecting cabling. This ensures the availability of sufficient DC power sources to maintain the plant in a safe manner and to mitigate the consequences of postulated events during shutdown {e.g., fuel handling accidents and loss of shutdown cooling} .

APPLICABILITY The DC power sources required to be OPERABLE in COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of irradiated fuel assemblies provide assurance that equipment and instrumentation is available tG:

a. Provide coolant inventory makeup,

b. Mitigate a fuel handling accident,

c. Mitigate shutdown events that can lead to core damage,

d. Monitoring and maintaining the plant in a COLD SHUTDOWN or REFUELING SHUTDOWN condition.

The DC source requirements for above COLD SHUTDOWN are addressed in LCO 3.7.4, "DC sources - Operating" .

PALISADES B 3.7-43 Amendment:

DC Sources - Shutdown B 3.7.5 and 4.7.5

BASES ACTIONS Since the required DC source is only required to support features required by other LCOs, the option to declare those required features with no DC power available to be inoperable, assures that appropriate ACTIONS will be implemented in accordance with the affected LCOs.

A.2.1. A.2.2. A.2.3. and A.2.4 ACTION.A.I may involve undesired and unnecessary administrative effor,ts, therefore, ACTIONs A.2 provide alternate, but sufficiently conservative, ACTIONs.

ACTIONs A.2 require suspension of REFUELING OPERATIONS, movement of irradiated fuel assemblies, and operations involving positive reactivity additions. The suspension of REFUELING OPERATIONS and movement of irradiated fuel assemblies does not preclude actions to place a fuel assembly in a safe location; the suspension of positive reactivity additions does not preclude .actions to maintain

or increase reactor vessel inventory provided the required SHUTDOWN MARGIN is maintained.

These ACTIONS minimize the probability or the occurrence of postulated events. It is further required to immediately initiate action to r~store the required DC sources (and to continue this action until restoration is accomplished) in order to provide the necessary DC power to the plant safety systems.

The Completion Time of "immediately" is consistent with the required times *for actions requiring prompt attention. The restoration of the required DC power s.ources should be completed as quickly as possible in order to minimize the time during which the plant safety systems may be without sufficfent control and Preferred AC .power .

PALISADES B 3.7-44 Amendment:

DC Sources - Shutdown B 3.7.5 and 4.7.5

BASES SURVEILLANCE REQUIREMENTS SR 4.7.5.1 (Shutdown DC power surveillance)

SR 4.7.5.1 requires the SRs from LCO 3.7.4 that are necessary for ensuring the OPERABILITY of the AC sources in COLD SHUTDOWN and REF4~LING SHUTDOWN.

.

. :*~ .;

The SRs from LCO 3.7~4:which are required are those which can be performed without"effecting the OPERABILITY or reliability of the required DC source. With only one battery available, loading tests cannot be performed since their performance would .render that battery inoperable during the test. Th1$:is'the case for SRs 4.7.4.6, 4.7.4.7, and 4. 7.4.8. * ...... ,

REFERENCES None .

PALISADES B 3.7-45 Amendment:

Battery Cell Parameters B 3.7.6 and 4.7.6

ELECTRICAL POWER SYSTEMS B 3.7.6 and 4.7.6:

BASES Battery Cell Parameters BACKGROUND This LCO delineates the--limits on electrolyte temperature, level, float voltage, -and specific gravity for the DC power sou~ce batteries. A disc~ssion of these batteries is provided in the Bases for LCO 3.7.4, "DC Sources -

Operating".

APPLICABLE A description of the Safety Analyses applicable above COLD SAFETY SHUTDOWN is provided in the Bases for LC.O 3.7.1 "AC Sources ANALYSES - Operating"; during COLD SHUTDOWN and REFUELING SHUTDOWN, in the Bases for LCO 3.7.2 "AC Sources - Shutdown".

LCO Battery cell parameters must remain withtn acceptable limits to ensure availabi~ity of the required DC powe~ to shut down the reactor and maintain it in a safe condition after an anticipated operational occurrence or a postulated OBA.

Battery cell limits are conservatively established, allowing continued DC electrical system function even when Category A and B limits are not met.

The requirement to maintain the average temperature of representative cells above 70°F assures that the battery temperature fs within the design band. Battery capacity is a function of battery-temperature.

APPLICABILITY The battery cell parameters are required solely for the support of the associated DC power sources. Therefore, they are only required when the DC power source is ~equired to be OPERABLE. Refer to the Applicability discussions in the Bases for LCO 3.7.4l "DC Sources - Operating" and LCO 3.7.5~

"DC Sources - Shutdown" .

- PALISADES B 3~7-46 Amendment:

Battery Cell Parameters B 3.7.6 and 4.7.6

BASES ACTIONS A.I, A.2. and A.3 With one or more cells in one or more batteries not within Category A or B limits but within the Category C limits, the battery is not fully charged but there is still sufficient capacity to perform the intended function. Therefore, the affected battery is not required to be declared to be inoperable and continued operation is permitted for a limited period.

The pilot cell electrolyte level and float voltage are required to be verified to meet the Category C limits within I hour (Required Action A.I). This check will provide a quick indication of the status of the remainder of the battery. One hour provides time to inspect the electrolyte level and to confirm the float voltage of the pilot cells.

Verification that all cells meet the Category C limits (Required Action A.2) provides assurance that during the time needed to restore the parameters to the Category A and B limits, the battery will still be capable of performing its intended function. A period of 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is allowed to complete the initial verification because specific gravity measurements must be obtained for each connected cell. Taking into consideration both the time required to perform the required verification and the assurance that the battery cell parameters are not severely degraded, this time is considered reasonable. The verification is repeated at 7 day intervals until the parameters are restored to Category A and B limits.

Battery cell parameters must be restored to Category A and B limits within 3I days .

PALISADES B 3.7-47 Amendment:

Battery Cell Parameters B 3.7.6 and 4.7.6

BASES ACTIONS (continued)

B.1 With the temperature of representative cells below the design temperature, or with one or more battery cells with parameters outside the Category C limits, sufficient capacity to supply the maximum expected load requirement is not assured and the corresponding battery must be declared inoperable.

Additionally, if battery cells cannot be restored to meeting Category A or B limits within 31 days, a serious difficulty with the battery is indicated and the battery must be

declared to be inoperable.

SURVEILLANCE SR -4~7.6.l (Pilot cell checks)

REQUIREMENTS This SR verifies that Category A battery cell parameters are consistent with IEEE-450, which recommends regular battery inspections (at least one per month) including voltage,

specific gravity, and electrolyte temperature of pilot cells.

SR 4.7.6.2 (Temperature checks)

This Surveillance verification that the average temperature of representative cells is > 70°F is consistent with a recommendation of IEEE-450, which states that the temperature of electrolytes in representative cells should be determined on a quarterly basis. The monthly frequency specified is a feature of the initial Palisades license, and is the same as those other pilot cell tests specified in Surveillance 4.7.6.1.

Lower than normal temperatures act to inhibit or reduce battery capacity. This SR ensures that the operating temperatures remain within an acceptable operating range.

This limit is based on manufacturer recommendations.

SR 4.7.6.4 (Connected cell checks)

The quarterly inspection of specific gravity and voltage is consistent with the recommendations of IEEE-450 .

PALISADES B 3.7-48 Amendment:

Battery Cell Parameters B 3.7.6 and 4.7.6

BASES SURVEILLANCE REQUIREMENTS Table 3.7.6-1 (continued) This table delineates the limits on electrolyte level, float voltage, and specific gravity for three different categories. Each category is discussed below.

Category A defines the fully charged parameter limit,for each designated pilot cell in each battery. The cells selected as pilot cells are those whose temperature, voltage and specific gravity approximate the state of charge of the entire battery.

Category B defines the normal parameter limits for each connected cell. The term "connected cell" excludes any battery cell that may be jumpered out.

The Category A and B limits for the Palisades batteries are the same. The two Categories are maintained in the table to be consistent with IEEE 450 terminology and with the Standard Technical Specifications.

The Category A and B limits specified for electrolyte level are based on manufacturer recommendations and are consistent with the guidance in IEEE-450, with the extra % inch allowance above the high water level indication for operating margin to account for temperatures and charge effects. In addition to this allowance, footnote a to Table 3.7.6-1 permits the electrolyte level to be abova the specified maximum level during equalizing charge, provided it is not overflowing. These limits ensure that the plates suffer no physical damage, and that adequate electron transfer capability is maintained in the event of transient conditions. IEEE-450 recommends that electrolyte level readings should be made only after the battery has been at float charge for at least 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

The Category A and B limit specified for float voltage is

~ 2.13 volts per cell. This value is based on a recommendation of IEEE-450, which states that prolonged operation of cells< 2.13 volts can reduce their life expectancy.

The Category A and B limit specified for specific gravity for each pilot cell is ~ 1.200. This value is characteristic of a charged cell with adequate capacity.

According to IEEE-450, the specific gravity readings are based on a temperature of 77°F (25°C) .

PALISADES B 3.7-49 Amendment:

Battery Cell Parameters B 3.7.6 and 4.7.6

BASES SURVEILLANCE REQUIREMENTS Category C defines the limit for each connected cell. These values, although reduced, provide assurance that sufficient (continued) capacity exists to perform the intended function and maintain a margin of safety. When any battery parameter is outside the Category C limit, the assurance of sufficient capacity described above no longer exists and the battery must be declared inoperable.

The Category C limit specified for electrolyte level (above the top of the plates and not overflowing) ensures that the plates suffer no physical damage and maintain adequate electron transfer capability. The Category C limit for float voltage is based on IEEE-450, which states that a cell voltage of 2.07 volts or below, under float conditions and not caused by elevated temperature of the cell, indicates internal cell problems and may require cell replacement.

The Category C limit of average specific gravity~ 1.190 is based on manufacturer recommendations (0.020 below the manufacturer recommended fully charged, nominal specific gravity). In addition to that limit, it is required that the specific gravity for.each connected cell must be no less than 0.020 below the average of all connected cells. This limit ensures that the effect of a highly charged or new cell does not mask overall degradation of the battery.

The footnotes to Table 3.7.6-1 are applicable to Category A, B, and C specific gravity. Footnote (b) to Table 3.7.6-1 requires the above mentioned correction for electrolyte level and temperature, with the exception that level correction is not required when battery charging current is

< 2 amps on fl oat charge. This current. prov.ides, in general, an indication of overall battery condition .

PALISADES B 3.7-50 Amendment:

Battery Cell Parameters

.B 3.7.6 and 4.7.6

BASES SURVEILLANCE REQUIREMENTS Because of specific gravity gradients that are produced during the recharging process, delays of several days may (continued) occur while waiting for the specific gravity to stabilize.

A stabilized charger current is an acceptable alternative to specific gravity measurement for determining the state of charge. This phenomenon is discussed in IEEE-450.

Footnote (c) to Table 3.7.6-1 allows the float charge current to be used as an alternate to specific gravity for up to 7 days following a battery equalizing recharge.

Within 7 days, each connected cell's specific gravity must be measured to confirm the state of charge. Following a minor battery recharge (such as equalizing charge that does not follow a deep discharge) specific gravity gradients are not significant, and confirming measurements may be made in less than 7 days.

REFERENCES 1. IEEE-450-1980.

PALISADES B 3.7-51 Amendment:

Inverters "" Operating B 3.7.7 and 4.7.7

ELECTRICAL POWER SYSTEMS

B 3.7.7 and 4.7.7: Inverters - Operating

.BASES BACKGROUND The inverters are the normal source of power for the Preferred AC buses. The function of the inverter is to provide continuous AC--electrical power to the Preferred AC buses, even in the event of an interruption to the normal AC power distribution system. A Preferred AC bus can be powered from the AC power distribution system via the Bypass Regulator if its associated inverter is out of service. An interlock prevents supplying more than one Preferred AC bus from the bypass regulator at any time. The station battery provides an uninterruptable power source for the instrumentation and controls for the Reactor Protective System (R~S) and the Engineered Safety Features (ESF).

APPLICABLE A description of the Safety Analyses applicable above COLD SAFETY SHUTDOWN is provided in the Bases for LCO 3.7.1 "AC Sources ANALYSES - Operating".

LCO The inverters ensure the ava:i l ability of Preferred AC power for the instrumentation required to shut down the reactor and maintain it in a safe condition after *an, anticipated operational occurrence or a postulated OBA.

Maintaining the inverters OPERABLE ensures that the redundancy incorporated into the RPS and ESF instrumentation and controls is maintained. The four i.nverters ensure an uninterruptable supply of AC electrical power to the Preferred AC buses even if the 2400 volt safety related

buses are de-energized.

An inverter is considered inoperable if it is not powering the associated Preferred AC bus, or if its output voltage or frequency is not within tolerances .

PALISADES B 3.7-52 Amendment:

Inverters - Operating B 3.7.7 and 4.7.7

BASES APPLICABILITY The inverters are required to be OPERABLE above COLD SHUTDOWN to ensure that redundant sources of Preferred AC power for instrumentation and control are available to support engineered safeguards equipment in the event of an accident or transient and for power operation, plant heatups and cooldowns, and shutdown operation.

Inverter requirements for COLD SHUTDOWN and REFUELING SHUTDOWN are addressed LCO 3.7.8, "Inverters - Shutdown".

ACTIONS A.I and A.2 With an inverter inoperable, its associated Preferred AC bus becomes inoperable until it is manually re-energized from the bypass regulator. An inoperable Preferred AC Bus is addressed in LCO 3.7.9.

Required Action A.I allows 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to fix the inoperable inverter and return it to service. The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months limit is based upon engineering judgment, taking into consideration the time required to repair an inverter and the additional risk to which the plant is exposed because of the inverter inoperability. This has to be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems such a shutdown might entail.

B.I and B.2 If the inoperable devices or components cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least HOT SHUTDOWN within I2 hours and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an

_orderly manner and without challenging plant systems .

PALISADES B 3.7-53 Amendment:

Inverters - Operating B 3.7.7 and 4.7.7

BASES SURVEILLANCE REQUIREMENTS SR 4.7.7.1 (Inverter checks)

This Surveillance verifies that the inverters are functioning properly and Preferred AC buses energized from the inverter. The verification of proper voltage and frequency output ensures that the required power is readily available for the instrumentation of the RPS and ESF connected to the Preferred AC buses. The 7 day Frequency

. takes into account the redundant capability of the inverters and other indications available in the control room that alert the operator to inverter malfunctions.

REFERENCES None .

PALISADES B 3.7-54 Amendment:

Inverters - Shutdown B 3.7.8 and 4.7.8

ELECTRICAL POWER SYSTEMS B 3.7.8 and 4.7.8: Inverters - Shutdown BASES BACKGROUND A description of the inverters is provt~ed ~~the Bases for LCO 3. 7~ 7, ."Inverters -~- . Operating 11 APPLICABLE A description of the Safety Analyses applicable during COLD SAFETY SHUTDOWN and REFUELING SHUTDOWN is provided in the Bases for ANALYSES LCO 3.7.2 "AC Sources - Shutdown".

LCO This LCO requires those, and only those, inverters necessary to support to Preferred AC buses required by LCO 3.7.10, to be OPERABLE.

This ensures the availability of sufficient Preferred AC electrical power to operate the plant tn a safe manner and to mitigate the consequences of postulated events during shutdown {e.g., fuel handling accidents and loss of shutdown cooling).

An inverter is considered inoperable if it is not powering the associated Preferred AC bus, or it its vol tag~ or frequency is not within tolerances.

APPLICABILITY The inverters required to be OPERABLE in COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of irradiated fuel assemblies provide assurance that ~quipment and instrumentation is available to:

a. Provide coolant inventory makeup,

b. .Mitigate a fuel handling accident,

PALISADES .B 3. 7-55 Amendment:

Inverters - Shutdown B 3.7.8 and 4.7.8 APPLICABILITY c. Mitigate shutdown events that can lead to core damage, (continued) d.* Monitoring and maintaining the plant in a COLD

. SHUTDOWN or REFUELING SHUTDOWN condition.

Inverter requirements-for** above COLD SHUTDOWN are addressed in LCO 3.7.7, "Inverters - Operating".

ACTIONS An inverter would be considered inoperable if it were not available to supply its associated Preferred AC bus. Since the inverter and its associated Preferred AC Bus is only required to support features required by other LCOs, the option to declare those required features without inverter supplied Preferred AC power available to be inoperable, assures that appropriate ACTIONS will be implemented in accordance with the affected.LCOs.

A.2.1. A.2.2. A.1.3. and A.2.4

ACTION A.I may involve undesired and unnecessary administrative efforts, therefore, ACTIONs A.2 provide alternate, but sufficiently conservative, ACTIONs.

ACTIONs A.2 require suspension of REFUELING OPERATIONS, movement of irradiated fuel assemblies, and operati.ons involving positive reactivity add:itions *. The suspension of REFUELING OPERATIONS and movement of irradiated fuel assemblies does not preclude actions to place a fuel assembly in a safe location; the suspensi-0n of positive reactivity additions does not pre*clude actions to maintain or increase reactor vessel inventory provided the required SHUTDOWN MARGIN is maintained.

These ACTIONS minimize the probability or the occ~rrence of postulated events. It is further requlred to immediately initiate action to restore the required inverters (and to continue this action until restoration h accomplished) in order to provide the required inverter supplied Preferred AC power to the plant instrument and control systems .

PALISADES B 3.7-56 Amendment:

Inverters - Shutdown B 3.7.8 and 4.7r8

_BA_SE_s______________________________--'---------~

ACTIONS The Completion Time of "inunediately" is consistent with the (continued) required times for actions requiring prompt attention. The restoration of the required inverters should be completed as quickly as possible in order to minimize the time during which the plant safety systems may be without inverter supplied Preferred AC. -p~wer.

SURVEILLANCE SR 4.7.8.l (inverter checks) .

REQUIREMENTS A description of the basis for this SR is provided in the bases for SR 4. 7. 7. 1.

REFERENCES None *

PALISADES B 3.7-57 Amendment:

. Distribution Systems - Operating B 3.7.9 and 4.7.9

ELECTRICAL POWER SYSTEMS B 3.7.9 and 4.7.9:

BASES Distribution Systems - Operating BACKGROUND The onsite Class IE AC, DC, and Preferred AC bus electrical power distribution systems are divided into two redundant and independent electrical power distribution trains .. Each electrical power distribution train is made up of several subsystems which include the safety related buses, load centers, motor control centers, and distribution panels shown in Table 3.7.9-I.

The Class IE 2400 volt safety related buses, Bus IC and Bus ID, are normally powered from offsite, but can be powered from the DGs, as explained in the Background section of the Bases for LCO 3.7.I, "AC Sources - Operating". Each 2400 volt safety related bus supplies one train of Class IE the 480 volt distribution system.

The I20 volt Preferred AC buses are normally powered from the inverters. The alternate power supply for the buses is

a constant voltage transformer, called the Bypass Regulator.

Use of the Bypass regulator is governed by LCO 3.7.7, "Inverters - Operating." The bypass regulator is powered from the non-Class IE instrument AC bus, Y-OI. The Instrument AC bus is normally powered through an automatic bus transfer switch, an instrument AC transformer, and isolation fuses. Its normal power source is MCC-I. Loss of power to MCC-I will cause automatic transfer of the Instrument AC bus to MCC-2.

There are two independent I25 volt DC electrical power distribution subsystems.

APPLICABLE A description of the Safety Analyses applicable above COLD SAFETY SHUTDOWN is provided in the Bases for LCO 3.7.I "AC Sources ANALYSES - Operating".

PALISADES B 3.7-58 Amendment:

Distribution Systems - - Operating B 3.7.9 and 4.7.9 LCO The AC, DC, and Preferred AC bus electrical power distribution subsystems are required to be OPERABLE. The required power distribution subsystems listed in Table 3.7.9-I ensure the availability of AC, DC, and Preferred AC bus electrical power for the systems required to shut down the reactor and maintain it in a safe condition after an anticipated operational occurrence or a postulated OBA.

Maintaining both trains of AC, DC, and Preferred AC bus electrical power distribution subsystems OPERABLE ensures that the redundancy incorporated into the plant design is not defeated. Therefore, a single failure within any electrical power distribution subsystem will not prevent safe shutdown of the reactor.

OPERABLE electrical power distribution subsystems require the buses, load centers, motor control centers, and distribution panels listed in Table 3.7.9-I to be energized to their proper voltages. In addition, tie breakers between redundant safety related AC power distribution subsystems must be open when a 2400 volt source is OPERABLE for each train. This prevents any electrical malfunction in any power distribution subsystem from propagating to the redundant subsystem. If any tie breakers are closed, the affected redundant electrical power distribution subsystems are considered inoperable. This applies to the onsite, safety related redundant electrical power distribution subsystems. It does not, however, preclude redundant Class IE 2400 volt buses from being powered from the same offsite circuit or preclude cross connecting Class IE 480 volt subsystems when 2400 volt power is available for only one train.

This LCO does not address the power source for the Preferred AC buses. The Preferred AC buses are normally powered from the associated inverter. An alternate source, the Bypass Regulator, is available to supply one Preferred bus at a time, to allow maintenance on an inverter. The proper alignment of the inverter output breakers is addressed under the inverter LCOs. Therefore a Preferred AC Bus may be considered operable when powered from either the associated inverter or the Bypass Regulator as long as the voltage and frequency of the supply is correct .

PALISADES B 3.7-59 Amendment:

Distribution Systems - - Operating B 3.7.9 and 4.7.9 APPLICABILITY The electrical power distribution subsystems are required to be OPERABLE above COLD SHUTDOWN to ensure that AC, DC, and Preferred AC power is available to the redundant trains and channels of safeguards equipment, instrumentation and

controls required to support engineered safeguards equipment in the event of an accident or transient.

Electrical power distribution subsystem requirements for COLD SHUTDOWN and REFUELING SHUTDOWN are addressed in LCO 3.7.10, "Distribution Systems - Shutdown".

ACTIONS An inoperable AC distribution subsystem can cause engineered safety features to be inoperable. If a redundant safety feature in the other train is concurrently inoperable, a loss of safety function could occur. ACTION A.I requires compliance with Condition 3.7.9.E to assure that the plant is shutdown if a safety function is lost .

With one or more required AC buses, load centers, motor cont~ol centers, or distribution panels, except Preferred AC buses, in one train inoperable, the redundant AC electrical power distribution subsystem in the other train is capable of supporting the minimum safety functions necessary to shut down the reactor and maintain it in a safe shutdown condition, assuming no single failure. The overall reliability is reduced, however, because an additional failure in the power distribution systems could result in the minimum required ESF functions not being supported.

Therefore, the required AC buses, load centers, motor control centers, and distribution panels must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

An inoperable Preferred AC bus can cause engineered safety features to be inoperable. If a redundant safety feature in the other train is concurrently inoperable, a loss of safety function could occur. ACTION B.l requires compliance with Condition 3.7.9.E to assure that the plant is shutdown if a safety function is lost. *

PALISADES B 3.7-60 Amendment:

Distribution Systems - - Operating B 3.7.9 and 4.7.9

BASES ACTIONS (continued)

B.2 With one Preferred AC bus inoperable, the remaining OPERABLE Preferred AC buses are capable of supporting the minimum safety functions necessary to shut down the plant and maintain it in the safe shutdown condition. Overall reliability is reduced, however, since an additional single failure could result in the minimum required ESF functions not being supported. Therefore, the Preferred AC bus must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months by powering it from the associated inverter or from the Bypass Regulator.

This 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months limit is more conse~vative than Completion Times allowed for the vast majority of components that are without adequate Preferred AC power and is a feature of the original Palisades licensing basis.

An inoperable DC distribution subsystem can cause engineered safety features to be inoperable. If a redundant safety feature in the other train is concurrently inoperable, a loss of safety function could occur. ACTION C.l requires compliance with Condition 3.7.9.E to assure that the plant is shutdown if a safety function is lost.

C.2 With a DC bus in one train inoperable, the rema1n~ng DC electrical power distribution subsystems are capable of supporting the minimum safety functions necessary to shut down the reactor and maintain it in a safe shutdown condition, assuming no single failure. The overall reliability is reduced, however, because a single failure in the remaining DC electrical power distribution subsystem could result in the minimum required ESF functions not being supported. Therefore, the required DC buses must be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months by powering the bus from the associated battery or charger.

This 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months limit is more conservative than Completion Times allowed for the vast majority of components which would be without power and is a feature of the original Palisades licensing basis~

PALISADES B 3.7-61 Amendment:

Distribution Systems - - Operating B 3.7.9 and 4.7.9 ACTIONS D.l and D.2 (continued)

If the inoperable distribution subsystem cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCO does not apply. To-~chieve this status, the plant must

be brought to at least HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

E. l Condition. E corresponds to a degradation in the electrical distribution system that, together with another existing equipment failure, causes a required safety function to be lost. When more than one LCO Condition is entered, and this results in the loss of a required function, the plant is in a condition outside the accident analysis. Therefore, no additional time is justified for continued operation.

LCO 3.0.3 must be. entered immediately to commence a controlled shutdown.

SURVEILLANCE SR 4.7.9.1 (AC* bus alignment check)

REQUIREMENTS This surveillance verifies that the required AC, DC, and Preferred AC bus electrical power distribution subsystems are functioni~g properly, with the correct circuit breaker alignment. The correct breaker alignment ensures the appropriate separation and independence of the electrical divisions is maintained.

For those buses which have undervoltage alarmed in the control room, correct voltage may be verified by the absence of an undervoltage alarm.

For those buses which have only one possible power source and have undervoltage alarmed in the control room, correct breaker alignment by the absence of an undervoltage alarm .

PALISADES B 3.7-62 Amendment:

Distribution Systems Operating B 3.7.9 and 4.7.9 SURVEILLANCE A Preferred AC Bus may be considered correctly aligned when REQUIREMENTS powered from either the:associated inverter or from the (continued) bypass regulator. A.n:iE!chani.cal interlock prevents connecting two o.r more- Preferred AC Buses to the Bypass Regulator. LCO 3.7.7 and SR 4.7.7.l address the condition of supplying a Preferre~:;-Ac Bus from the bypass regulator.

The 7 day Frequency t~ke~::*into account the redundant capability of the AC;)Q~:;+and .Preferred AC bus electrical power distribution stibsy$tems, and other indications available in the* contrpl~}foom that alert the operator to subsystein mal function~*/;;-t/.

~~~~l:E~Il~~.2:~*~ _

REFERENCES None .

PALISADES B 3.7-63 Amendment:

Distribution Systems - Shutdown B 3.7.10 and 4.7.10

ELECTRICAL POWER SYSTEMS B 3.7.10 and 4.7.10: Distribution Systems - Shutdown BASES BACKGROUND A description of the AC, DC, and Preferred AC bus electrical power distribution systems is provided in the Bases for LCO 3.7.9, "Distribution Systems - Operating".

APPLICABLE A description of the Safety Analyses applicable duri-ng COLD SAFETY SHUTDOWN and REFUELING SHUTDOWN is provided in the Bases for ANALYSES LCO 3.7.2 "AC Sources - Shutdown".

LCO This LCO requires those, and only those, AC, DC, and Preferred AC distribution subsystems to be OPERABLE which are necessary to support equipment required by other LCOs.

Maintaining these portions of the distribution system energized ensures the availability of sufficient power to operate the plant in a safe manner to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents).

APPLICABILITY The electrical power distribution subsystems required to be OPERABLE in COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of irradiated fuel assemblies, provide assurance that equipment and instrumentation is available to:

a. Provide coolant inventory makeup,

b. Mitigate a fuel handling accident,

c. Mitigate shutdown events that can lead to core damage,

d. Monitoring and maintaining the plant in a COLD SHUTDOWN or REFUELING SHUTDOWN condition.

The electrical power distribution subsystem requirements for above COLD SHUTDOWN are addressed in LCO 3.7.9, "Distribution Systems - Operating" .

PALISADES B 3.7-64 Amendment:

Distribution Systems - Shutdown B 3.7.10 and 4.7.10 ACTIONS Since the distribution systems are only required to support features required by other LCOs, the option to declare those affected required features to be inoperable, assures that appropriate ACTIONS will be implemented in accordance with the affected LCOs.

A.2.1. A.2.2. A.2.3. A.2.4, and A.2.5 ACTION A.I may involve undesired and unnecessary administrative efforts, therefore, ACTIONs A.2 provide alternate, but sufficiently conservative, ACTIONs.

ACTIONs A.2 require suspension of REFUELING OPERATIONS, movement of irradiated fuel assemblies, and operations involving positive reactivity additions, and declaration that affected shutdown cooling trains are inoperable. The suspension of REFUELING OPERATIONS and movement of irradiated fuel assemblies does not preclude actions to place a fuel assembly in a safe location; the suspension of positive reactivity additions does not preclude actions to

maintain or increase reactor vessel inventory provided the required SHUTDOWN MARGIN is maintained.

These ACTIONS minimize the probability or the occurrence of postulated events. It is further required to immediately initiate action to restore the required distribution subsystems (and to continue this action until restoration is accomplished) in order to provide the necessary electrical power to the plant safety systems.

The Completion Time of "immediately" is consistent with the required times for actions requiring prompt attention. The restoration of the required distribution subsystems should be completed as quickly as possible in order to minimize the time during which the plant safety systems may be without sufficient power. *

PALISADES B 3.7-65 Amendment:

Distribution Systems - Shutdown B 3.7.10 and 4.7.10 SURVEILLANCE SR 4.7.10.1 (AC bus alignment check)

REQUIREMENTS A description of the basis for this SR is provided in the bases for SR 4.7.9.l.

REFERENCES None.

PALISADES B 3.7-66 Amendment:

ATTACHMENT 3 CONSUMERS POWER COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST -. ELECTRICAL POWER SYSTEMS

Existing Pages Marked to Show Proposed Changes 18 Pages

[SECTION 3.7 COMPLETELY REPLACED BY PROPOSED PAGES]

ELECTRICAL SYSTEMS

Applicability Applies to -the availability of electrical power for the operati plant components.

To fine those conditions of electrical power availabil

y necessary to provi e for safe reactor operation and the continuing a ailability of engine ed safety features.

3.7.I The primary oolant system shall not be heated o at temperatures ove 300°F if the following elec are not operable:

a. Station powe transformer 1-2 (2400 V *

b. Start-up transf mer I-2 (2400 V).

c. 2400 V engineered afeguards bus s IC and ID.

d.

e.

f.

g.

MCC No. I, 2, 7 and 8

I25 V d-c buses No. I a Four preferred a-c b

h. Two station batter es and the d- systems including at least one battery charger each bus.

i. Both diesel g erators, with a minim of 2500 gallons of fuel in each day tan and a minimum of I6,000 allons of fuel in the undergroun storage tank.

j. Switchya ij battery and the d-c system witH one battery charger.

k. 240 V a-c power panels No. I and bre er distri-bution systems.

l.

3.7.2 The equirements of Specification 3.7.I may be modified t t one of the following conditions will be allowed. If ny of the ovisions of those exceptions are violated, the reactor sh ll be placed in a hot shutdown condition within I2 hours. If the violatio is not corrected within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , the reactor shall be placed in a co d shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3-4I Amendment No. -!-53-, l6-l

ELECTRICAL SYSTEMS (Cont'd)

a. Station power transformer I-2 (2400 V) may be inoperable for p to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel generators s demonstrated immediately.

Start-up transformer I-2 (2400.V) may be inoperable for p to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel gener. tors is demonstrated immediately. Continued operation beyon 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is ermissible provided that a report is sent to the N C immediately w'th an outline of the plans for prompt restorati of the start-up tr sformer and the additional precautions to be aken while the tran former is out of service, and continue op ating until notif d differently by the NRC.

c. 2400 V e gineered safeguards bus IC or ID y be inoperable for up to 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the operability of th diesel generator associated ith the operable bus is demo strated immediately and there are no inoperable engineered saf y feature components associated wi the operable bus.

d. 480 V distributi n bus II or I2 ma be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there ar afety feature components

associated with th

e. MCC No. I and 7 or 2 d 8 m .be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no ope able safety feature components associated with the oper e pair of MCC .

f. I25 V d-c bus No. I or ma be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no noper ble safety feature components associated with the perable s and adequate portable emergency lighting is availa e during t inoperability of the No. 2 bus.

g. One of the four referred a-c bus may be inoperable for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the r ctor protection an engineered safety feature systems suppl 'ed by the remaining th ee buses are all operable.

h. One of the station batteries may be in erable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , providin both battery chargers on the a fected bus are in operati

i. One the diesel generators may be inoperab e for up to 7 days*

(to al for both) during any month, provided t ,e other diesel is s rted to verify operability, shutdown and the controls are left

the automatic mode, and there are no inoperab e engineered safety feature components associated with the ope ble diesel generator.

IO days one time only, for the month of May I985 .

3-42 88 85

ELECTRICAL SYSTEMS (Cont'd)

j. 240 V a-c power panel No. 1 or power panel No. 2 may be inoperab~

provided that the associated ACB breakers are maintained operabJe by other means. If the ACB breakers are not maintained opera (e, either power panel may be inoperable for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months prov'Hed z

that the associated ACB breakers in the "open" position.

The switchyard battery may be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months pr, vided both battery chargers are operable.

1. TH 2400 V bus IE may be inoperable up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

m. d-c power panel No. 1 or power panel No. 2 ~Y be inoperable provi d the associated ACB breakers are maint 'ned operable by other m ans. If the ACB breakers are not mai ained operable, either p er panel may be inoperable for up o 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided that the a sociated ACB breakers are in th "open" position.

Basis The electrical system equip~nt is arranged s that no single contingency can inactivate enough safeguards equipment to j pardize the plant safety. The 480 V equipment is arranged 0 ~WO buszs. he 2400 V equipment also is supplied from two buses. -~

The normal source of auxiliary power th the plant at power is from the station power transformers being fe rom the main generator with standby power from the start-up, transformer, d emergency power from either one of two diesel generators. 11 To supple ent the standby power source, a spare 345 kV/22 transformer would be avai ble wh'ch, in combination with other mobile transformers, could be connect tl to take the place of the start-up transformer. *It is estimate that it coul take approximately six weeks to move all of the required e ipment on site nd to place it in service. 1 ~

There are two emergency p er sources on sit which do not require outside power or use of the star -up transformer. Upo loss of normal and standby power sources, the 240 V buses are energized f m the diesel generators.

Bus load shedding, tr nsfer to the diesel generat r and pickup of critical loads are carried o automatically. 131 When the turbine enerator is out of service for an e* tended period, the generator can b isolated by the removal of links int e bus between the generator and he main transformer, allowing the main t nsformer and the station powe transformers to be returned to service. 111

3-43

ELECTRICAL SYSTEMS {cont'd)

The two 4160 V buses each provide power for the primary coolant pumps an a condensate pump. 1 ~ Operation of the plant could continue if one of tho uses were not available as long as power level, etc, were in accorda ce with S tions 2 and 3.2.2 of these specifications. The design of the el trical sys em has been carried out with reliability as a prime considerat"on.

Stat n power is provided from three independent sources. The o age of any two so rces will not cause interruption of service to the stati power supply ~00 V or below, down to and including 125V d-c supply.

Equipment erved by auxiliary buses and MCC is arranged so at loss of an entire bus es not compromise safety of the p1ant during BA conditions. 131 For example, "f 2400 V bus 10 is lost, two service water umps, one containment s.p y pump and three containment air cooler. recirculation fans are lost. This eaves two containment spray pumps, o e containment air cooler recirculat n fan and one service water pump, which is more than sufficient to cont 1 containment pressure below t design value during the OBA.

The requirements for MC No. 1, 2, 7 and 8 and ~80 V di stri-but ions buses 11 and 12 will assure avail ility of safety eq pment such as charging pumps, boric acid pumps and safet injection valve

The 125 V d-c buses No. 1 and No. 2 are required for crit al instrument and control operations.

The total day tank capacity of 700 gal ons .on each diesel is considered more than adequate since approximate 28 urs running time (worst case loading) is available before transfer to f l oil from the 30,000-gallon underground storage is mandatory. Two 20-gpm esel oil transfer pumps with each being fed from a different diesel are a ai able for transferring fuel oil from the storage tank to the day tanks. n ad "tion, a connection is available outside the diesel rooms to pu oil di ectly into the day tanks from an oil tanker truck.

The 16,000 gallons in the torage tank in a ition to the day tank will provide a diesel operati under required loa ing conditions for a minimum period of 7 days. 15 It *s considered incredi-bl not to be able to secure fuel oil from one of veral sources within a ra ius of 70 miles in less than three days under the orst of weather conditions. One battery charger on each battery shall e operating so that the

3-44

ELECTRICAL SYSTEMS (Cont'd)

batteries will always be at full charge in anticipation of loss-of-ac p er incident. This ensures that adequate d-c power wi.ll be available for*

tarting the emergency generators and other emergency uses. Each bat ery has t battery chargers available rated at 200 amperes each. Except f the fir t minute following a OBA, the capacity of the two battery char ers will hand all required loads. The second battery continues to be a ilable in the e nt of a OBA to Rick up the load from its half of the ins alled engi nee ed safeguards*. 61 Each of the reactor protective syste channe 1s and the engi ered safeguards instrumentation-channels is suppli H by one of the preferred -c buses. The removal of one of the preferred c buses is permitted a the 2-of-4 logic can be changed to a 2-of-3 l-of-2 logic without comp mising reactor safety. 171 Reliable switch rd operation requires the availabili y of the d-c system in the switchyard fo breaker controls and the 240 V a system for air compressor operati

The power and air requireme ts are small, however, and readily adaptable t temporary hookup to al terna power panels or air compressors, so conti ued operation without the ime limitations is permitted provided the affected B breakers can be res red to operability through such temporary hookups. In all such situati s, restoration to normal conditions shall be accom Jished as soon as practicable.

The 2400 V bus lE is require to assure va.ilability of the pressurizer heaters.

To attain a high degree of relia il' y for starting and assuming load, the unit will be started to prove ope ility and shutdown with the controls left in the automatic ~start" positio .

References (1) FSAR, (2) FSAR, Question 8.4.

(3) FSAR, (4) FSAR, (5) FSAR, (6)

(.7)

3-45

ELECTRICAL SYSTEMS (Continued-)

SHUTDOWN COOLING ELECTRICAL REQUIREMENTS With the primary coolant system at ~ 3oo*F, and with fuel in the reactor, the shutdown cooling train(s) shall be electrically power d as follows:

One engineered safeguards bus (IC or ID) shall be operab and capable of being supplied by offsite power and an oper e diesel generator.

b. If wo trains of shutdown cooling are required spec fication 3.I.9, one engineered safeguards us (IC or ID) shall be op able and supplied by offsite power wh' e the other enginee ed safeguards bus (ID or IC) is ope able and capable of being su lied by offsite power and an op able diesel generator.

ACTION With less than the required electri l sources operable:

A. Immediately . itiate action o suspend REFUELING OPERATIONS,

B. Immediately fuel, tion to suspend movement of irradiated D. Immedia ly suspend operations ith a potential for draining or fuel pool, E. ediately initiate acti~n to restore the required electrical sources to operable status.

3-45a Amendment No. I6I August I2, 1 4

ELECTRICAL SYSTEM (Continued)

SHUTDOWN COOLING ELECTRICAL REQUIREMENTS (Continued) operability of the minimum specified power sources and associated ribution systems during shutdown and refueling ensures that:

The plant can be maintained in the shutdown of refuelin condition for extended time periods,- and

2. ufficient control capability is available for main aining the p nt status.

When a single ain of shutdown cooling must be operable o meet the minimum equipment opera 'lity requirements to remove decay heat the train must still function followin the loss of one electric supply (-o site power or diesel generator-)

When two trains of sh tdown cooling must be opera e to meet the minimum equipment operability quirements to remove de y heat, the loss of any single pump or the loss f one electrical supp (offsite power or diesel generator) must still lea a shutdown cooli train operable.

The action statements will m* imize the o urrence of postulated events, however, they should not prec de the or erly completion of an activity, such as fuel movement or crane opera ion, i order to get into a safe and conservative position .

3-45b

3.17 INSTRUMENTATION SYSTEMS

3.17.2 Specification The Engineered Safety Feature (ESF) logic channels and associated instrumentation for the functions listed in Table 3.17.2 shall be OPERABLE except as allowed by the permissible operational bypasses column.

Applicability Specification 3.17.2 applies when the PCS temperature is~ 300°F.

Action 3.17.2.1 With one ESF manual control channel or ESF logic channel inoperable for one or more functions:

a) Restore the channel to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.17.2.2 With one ESF instrument channel inoperable for one or more functions, except SIRWT Level:

a) Place the trip unit for each affected ESF function in the tripped condition within 7 days.

3.17.2.3 With two ESF instrument channels inoperable for one or more functions,

except SIRWT Level:

a) Place one channel trip unit for each affected ESF function in the tripped condition within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , and b) Restore one channel to OPERABLE status within 7 days.

3.17.2.4 With one SIRWT Level channel inoperable:

a) Bypass the level switch within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , and b) Restore the channel to OPERABLE status within 7 days.

3.17.2.5 With aAe er mere ~mergeAey Pewer SeqijeAeers iAeperable:

a) Declare the asseeiatee Diesel GeAerater iAeperable, immediately.

If any action required by 3.17.2 is not met AND the associated completion time has expired, or if the number of OPERABLE channels is less than specified in the "Minimum OPERABLE Channels":

a) The reactor shall be placed in HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and b) The reactor shall be placed in a condition where the affected equipment is not required, within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

Amendment No. ~

3-66

3.17 INSTRUMENTATION SYSTEMS

Table 3.17.2 Instrumentation Operating Requirements for Engineered Safety Features Required Minimum Permissible ESF OPERABLE Operat i ona1 Functional Unit Channels Channels Bypasses

1. Safety Injection Signal (SIS)

a. Manual Initiation 2 1 None.

b. SIS Logic 2 1 None.

(Initiation, Actuation, and low pressure block auto reset)

c. CHP Signal SIS Initiation 2 1 None.

(SP Relay Output)

d. Pressurizer Pressure 4 2 s 1700 psi a Instrument Channels PCS pressure.

2. Recirculation Actuation Signal (RAS)

a. Manual Initiation 2 1 None.

b.. RAS Logic 2 1 None.

c. SIRWT Level Switches 4 3 None.

3. Auxiliary Feedwater Actuation Signal (AFAS)

a. Manual Initiation 2 1 None.

b. AFAS Logic 2 1 None.

c. "A" Steam Generator Level 4 2 None.

d. "B" Steam Generator Level 4 2 None.

4. fmeraeAcv Pewer SeeijeAcers

a. DBA SeqijeAcer 2 1 NeAe.

e. Nermal Shijtee~iA SeqijeAeer 2 1 NeAe.

3-67 Amendment No. ~

3.17 INSTRUMENTATION SYSTEMS

Basis: Action Statements 3.17.2 (continued)

Aetien 3.17.2.§ One er mere seeueneers ineeerahle The Shutdewn Sequeneers previ de autemati e leading ef the diesel generaters in. ease ef a lass ef pe~ier ta the asseeiated safeguards 2499 velt bus. Beth pregrammed sequenees and the initiating legie must he eperahle. If a sequeneer is ineperahle, the asseeiated diesel genel"ater eannet per'ferm its designed autematie leading and must he deelared ineperahle. The eempletien time ef i1R111ediately" dees net 11 mean "instantaneeusly", rather it implies "start as quiekly as plant eenditiens permit and eentinue until eempleted."

Action 3 *17. 2. 6 11~!111~9.lli~ll - Regu ired action AND as soc iated como 1et ion ti me not met - If the requlred****act ion cannot be met within the as soc i ated comp 1et ion time, or if the number of OPERABLE channels is less than allowed, the plant must be placed in a condition where the inoperable equipment is not required.

Twelve hours are allowed to bring the plant to HOT SHUTDOWN, and 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months to reach conditions where the affected equipment is not required, to avoid unusual plant transients. Both the 12 and the 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months time periods start il!il!ii~:zml is applicable.

when it is discovered that Action 3.17.2.6 :*:*:*:*:*:*:*:*:*:-:-:<<*:*:*:*:*:*:-:*:*:*:-:*

Basis: Table 3.17.2

1. - Safety Injection Signal CSISl - SIS is actuated by manual initiation, by a CHP signal, or by 2 out of 4 Pressurizer Pressure channels decreasing below the setpoint. SIS in_itiates the following actions:

a) b)

c)

Start HPSI & LPS*I pumps Enable Containment Spray Pump Start on CHP Initiate Safety Injection Valve operations Each Manual Actuation channel consists of one pushbutton which directly starts the SIS actuation logic for the associated train.

The Low Pressurizer Pressure signal for each SIS train can be blocked when 3 out of 4 channels indicate below 1700 psia. This block prevents undesired actuation of SIS during a normal plant cooldown. The block signal is automatically removed when 2 out of 4 channels exceed the setpoint.

The pressurizer pressure insttument ihannels which provide input to SIS are the same channels which provide an input to the RPS. The RPS receives an analog signal from each Pressurizer Pressure channel; each SIS initiation logic train receives a binary signal from a group of four relays, each actuated by a bi stab1e in one of the fou-r instrument channe 1s.

The contacts of these relays are wired into a 2 out of 4 logic. It is the output of this pressurizer pressure 2.out of four logic circuit that is blocked during plant cooldowns. A similar arrangement of bistables and relays provide the pressurizer low pres:s.ure block permissive signal. The initiation and block cir~uits are illustrrated in reference 4.

Each SIS logic train is also actuated by a contact pair on one of the CHP initiation relays for the associated CHP train .

Each train of SIS actuation logic consists of a group of "SIS" relays which energize and seal in when the initiation logic is satisfied. These SIS B 3.17-15 Amendment No. 162

l 3.17 INSTRUMENTATION SYSTEMS

Basis: Table 3.17.2 (continued) relays actuate alarms and control functions. One of the control functions selects between an inunediate actuation circuit, if offsite power is available, and a time sequenced actuation circuit, if only diesel power is available. These actuation circuits initiate motor operated valve opening and pump starting. The SIS actuation logic is illustrated in reference 5.

2. - Recirculation Actuation Signal -fRASl - RAS is actuated by manually actuating the circuit "Test" switch or by two of the four level sensors in the SIRWT reaching .their setpoints. RAS initiates the following actions:

a) Trip LPSI pumps (this trip can be manually bypassed) b$witch HPSI & Spray suction from SIRWT to Containment Sump c)Adjust cooling water to Shutdown Cooling Heat Exchangers The four SIRWT level sensors each de-energize two relays, one per logic train, when tank level reaches the setpoint. Each channel of level sensor and associated output relays is powered from a different Preferred AC bus.

Two Preferred AC buses are powered, through inverters, from each station battery. The manual RAS control for each train de-energizes two of these relays, initiating RAS through the logic train.

Each train of RAS logic.consists of the output contacts of the relays actuated by the level switches arranged in a "l out of 2 taken twice" logic.

The contacts are arranged so that at least one low level signal powered from each station battery is required to initiate RAS. Loss of a single battery, therefore, cannot either cause or prevent RAS initiation. When the logic is satisfied, two DC relays are energized to initiate RAS actions and alarms.

The RAS logic is illustrated in reference 6.

3. - Auxiliary Feedwater Actuation Signal (AFAS) - AFAS is actuated by manual action or by 2 out of 4 level sensors on either steam generator reaching their setpoints. Manual actuation of Auxiliary Feedwater may be accomplished through pushbutton actuation of each AFAS channel or by use of individual pump and valve controls. Each AFAS channel starts the associated AFW pump(s) and opens the associated flow control valves.

The steam generator level instrument channels which provide input to AFAS are the same channels which provide an input to the RPS. Both the AFAS cabinets and the RPS receive analog signals from the instrument channel, and both have their own bistables to initiate actuation on low level.

Each AFAS train contains a 2 out of 4 logic for each steam generator. One AFAS logic train actuates motor driven AFW pump P-8A and turbine driven pump P-8B and the associated flow control valves; the other actuates motor driven pump P-8C and the associated valves. Each train provides flow to both steam generators. The AFAS logic uses solid state logic circuits. It is illustrated in reference 7.

4. EmeraeAcY Pewer SegHeAcers The EmergeAcy Pewer SeqHeAcers previde si§Aals te clese selected circHit hreakers timed te previde emergeAcy eqHipmeAt as seeA as pessihle after a less ef pewer, i.A the reqHired seqHeAce, yet Aet everlead the diesel geAerater with the resHltaAt startiA§ B 3.17-16 Amendment No. !62-

l 3.17 INSTRUMENTATION SYSTEMS

Basis: Table 3.17.2 (continued) cu\<'rents. One selid state J1regra1111Rahle seEluencer is Jl\C'evided fer each diesel generater. T'te J1regra1111Red sefiuences are Jlrevided hy each sefiuencer, a "9esign Basis Accident" (9BA) sefiuence which is actuated hy a less ef Jle,ter te the asseciated hus if a Safety lnjectien Signal is Jlresent, and a "Nermal Shutdewn" seE11:tence which is achated hy a less ef Jlewer te the asseeiated h1:ts if a Safety lnjeetien Signal is net Jlfesent. The seE11:teneers and asseeiated eire1:titry are ill1:tstrated in reference 5 *

B 3.17-17 Amendment No. ~

4.2 EQUIPMENT SAMPLING AND TESTS

Minimum Test Table 4.2.2 Frequenci~s for fqyipment Tests Fr,eguency FSAR Section REFERENCE

1. CONTROL RODS Drop Times of All Refueling 7.6.1.3 Full Length Rods

2. CONTROL RODS Partial Movement Every 92 Days 7.6.1.3 of all Rods (Minimum of 6 In)

3. Pressurizer Set Point One Each 4.3.7 Safety Valves Refueling

4. Mai'n Steam . Set Point Five Each 4.3.4 Safety Valves Refueling

5. Refueling System Functioning Prior to 9.11.4 Interlocks Refueling Operations

6. Service Water Functioning Refueling 9.1.2 System Valve Actuation on SIS and RAS

7. Primary System Evaluate Daily 4.7.1 Leakage

8. 9iesel Fijel Fijel hweA.tery 9a.i ly 8.4.1 Sijf)f)l y llJ\1111

9. Boric Acid Verify proper Daily Heat Tracing temperature readings.

10. Safety Injection Verify that level and Each Shift Tank Level and pressure indication Pressure is between independent high high/low alarms for level and pressure .

Amendment No. 12, 81, 133, 152, 155, 157, 162 4-11

4.7 EMERGENCY POWER SYSTEM PERIODIC TESTS

Applicability Applies to periodic testing and surveillance requirements of the emergency power system.

Objective To verify that the emergency power system will operly when required.

4.7.1

a. Each iesel generator shall be manually start ~ each month and demon rated to be ready for loading within 0 seconds. The signal initiat d to start the diesel shall.be var'ed from one test to another verify that A and B starting rcuits are operable. The generator all be synchronized from th control room, and loaded to 2400 +/-10 kW.

b. A test sha 11 b c.onducted during e h refuel i ng outage to demonstrate the verall automatic operation of the emergency power system. The test hall be init' ted by a simulated simultaneous loss of normal and tandby pow sources and a simulated SIS signal. Proper oper tions s 11 be verified by bus load shedding

c.

and automatic startin of s ected motors and equipment to establish that restorat'o with emergency power has been accomplished within 30 s onds.

Each diesel generator shall e subjected to an inspection, in aecordance with pro dures pr ared in conjunction with the manufacturer's rec mendations or this class of standby service, at least once per. refueling cycl during plant shutdown. The licensee shall ilize his best e orts to conduct additional major diesel genera r inspections and ov rhauls during shutdown periods.

d. Diesel gen ator *electric loads shall ot be increased beyond the continuou rating of 750 amp at 2400 vo ts.

e. transfer pumps be operable each 4.7.2 very month, the voltage of each cell (to the nea st 0.01 volt),

the specific gravity and the temperature of a pilot cell in each battery shall be measured and recorded *

4-42 Amendment No. 7$, ~~' 102 February 11, 1987

--- -- ~

4. 7 EMERGENCY POWER SYSTEM .PERIODIC TESTS *(Continued)

b.

c.

Every three months, the specific gravity of each cell, the temperature reading of every fifth cell, the height of electrol and the amount of water added shall be measured and recorded.

At least once per refueling cycle, during shutdown, each st ion battery sha 11 be demonstrated operable by verifying that e.

battery capacity is adequate to supply and ma.intain in O RABLE status all of the actual emergency loads for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months w n the battery is subjected to a battery service test.

d. At least once every three refueling cycles, during hutdown, each.

tat ion battery shall be demonstrated operable b~ verifying that t battery capacity is at least 80% of the man acturer's rating whe subjected to a performance discharge test The performance disc rge test shall be performed in lieu of he battery service test. *

. 4.7.3 The correct func *on i ng of the emergency l

ght i-ng system outside of containment shall e verified at least o e each year. The emergency lighting system ins1 e containment shal be verified operable prior to each removal of the r actor head.

Basis

The emergency power system prov1 es R wer requirements for the engineered

. safety features tn the event of a . Each df the two diesel generators is capable of supplyin~ the minimum r uired safeguards equipment from independent buses. 11

1 This redun nc is a factor i*n establishing testing intervals. The monthly tests s ecifie above will demonstrate operability and load capacity of the dies generat The fuel supply and various controls are continuously mo itored and armed for abnormal conditions.

Starting on complete loss off-site powe will be verified by simulated lass-of-power tests durin refueling shutdo s. The emergency diesel generator limit of*750 peres at 2400 volts orresponds to the manufacture's nameplate kVa and kW r ing of these machines.

Considering system edundancy, the spec.ified test g intervals for the station batteries hould be adequate to detect and orrect any malfunction before it can re lt in system malfunction. Batteri will deteriorate with time, but preci ttous failure is extremely unlikely. he surveillance specified for very month and every three months is tha which has been demonstrate over the years to provide an indication of cell becoming

unservicea ~ long before it fails *

4-43 Amendment No. ~~, 7~, 1~1, 125 May 31, 1989

Basis {Continued)

The surveillance specified for each refueling cycle and for every three refueling cycles will provide ~n adequate demonstration of battery capac' y.

The battery service test will verify that the battery capacity is adequ e to eliver the design requirements of its connected emergency de load. le H ttery discharge test will verify that the battery capacity is at 1 st 80%

of the manufacturer's rating i.n addition to verifying that the batt ry cap ity is adequate to deliver the design requirements of its as ciated emerg ncy de loads. Results of these tests reflect all factors ich determ e battery capability.

(1) FSAR, Se tion 8.4.l *.

(2) FSAR, Sec 'on 8.5.2.2 *

4-43a Amendment No. 125 May 31, 1989

4.17 INSTRUMENTATION SYSTEMS TESTS

Table 4.17 .2 Instrumentation Survei 11 ance Regui rements for Engineered Safety Features CHANNEL CHANNEL FUNCTIONAL CHANNEL Functional Unit CHECK TEST CALIBRATION

1. Safety Injection Signal (SIS)

a. Manual Initiation NA 18 months NA

b. SIS Logic NA (a) NA (Initiation, Actuation, and low pressure block auto reset)

c. CHP Signal SIS initiation NA 18 months NA (SP Relay Output)

d. Pressurizer Pressure 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

Instrument Channels

2. Recirculation Actuation Signal (RAS) a . Manual Initiation NA 18 months NA

b. RAS Logic NA 18 months* NA

c. SIRWT Level Switches NA 18 months* 18 months*

3. Auxiliary Feedwater Actuation Signal (AFAS)

a. Manual Initiation NA 18 months NA

b. AFAS Logic NA 92 days NA

c. "A" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

d. 11 8 11 SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

4. EmeraeAey Power SeaueAeers

a. DBA Se~ueAeer NA 92 clays 18 moAtAS

b. Normal St-lutelo~1A Se~ueAeer NA 18 MoAtAS 18 moAtAS (a) Test normal and emergency power functions using test circuits each 92 days.

Verify all automatic actuations and *automatic resetting of low pressure block each 18 months .

For Cycle 11 only, this surveillance need not be performed until prior to startup for Cycle 12.

4-77 Amendment No. 6-2-, 64

ADMINISTRATIVE CONTROLS

6.8.4 (continued}

b. Radiological Environmental Monitoring Program A program shall be provided to monitor the radiation and radionuclides in the environs of the plant. The program shall provide (l} representative measurements of radioactivity in the highest potential exposure pathways, and (2} verifications of the accuracy of the effluent monitoring program and modeling of environmental exposure pathways. The program shall (l} be contained in the ODCM, (2} conform to the guidance of Appendix I to 10 CFR 50, and (3) including the following:

l} Monitoring, sampling, analysis, and reporting of radiation and radionuclides in the environment in accordance with the methodology and parameters in the ODCM.

2} A Land Use Census to ensure that changes in the use of areas at and beyond the SITE BOUNDARY are identified and that modifications to the monitoring program are made if required by the results of this census, and 3} Participation in a Interlaboratory Comparison Program to ensure that independent checks on the precision and accuracy of the measurements of radioactive materials in environmental

sample matrices are performed as part of the quality assurance program for environmental monitoring .

6-13 Ame'ndment No. -36, l.§4

ATTACHMENT 4 CONSUMERS POWER COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST - ELECTRICAL POWER SYSTEMS

Comparison of Existing and Proposed Requirements 8 Pages

ATTACHMENT 4 Compar.fson of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements First Column; Existing Parisades Tech Spec (TS) number Each numbered TS item is listed in the left-most column. Items which contain more than one requirement are listed once for each requirement.

Second Column; Palisades Proposed Tech Spec (PTS) number The nearest corresponding numbered PTS item is listed in the second column. If the item does not appear in PTS, it is noted as 'Deleted' or 'Relocated.' 'Deleted' is used where an item has *been eliminated as a tech spec, ie deleting, iaw GL 84-15, the requirement to test a D.G. when an ECCS pump in the opposite train becomes inoperaole.

'Relocated' is used where an item has been moved to a controlled program or document because it does not meet the "Criterion" of 10 CFR S0.36(c)(2)(ii).

Third Column; TS Item Description An abbreviation of the TS requirement appears in the third column. Each item is identified as: LCO, ACTION, SR, Admin, Exception, etc. Some items are implied, rather than explicit, ie a LCD is implied when an ACTION exists without a stated LCO.

Description Key; TS requirement type: Column 3 syntax:

Safety Limit SL: Safety limit; Applicable conditions Surveillance Requirement SR: Equipment to be tested; Test description; Frequency Limiting Safety Setting LSS: RPS Trip Chnl & setting Limiting Condition for Operation LCO: Equipment to be operable; Applicable conditions Action ACTN: Condition requiring action; Required action; Completion time Administrative Requirement Admn: Administrative requirement Permitted Instrument Bypass Byps: Bypassable component; conditions when bypass permitted Defined Term Def: Name of defined item Exception to other Requirement Xcpt: Excepted spec or condition; Applicable conditions Forth Column; Comments and Justif.ications for Change An identification of the change, and a brief justification for changes from TS to PTS is provided in the fourth column.

1

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes 3.7 3.7 Electrical S stems 3.7.1.a a.7.1.a LCO: Sta Pwr Xfmr 1~2; > 300"F Proposed LCO 3.7.1 replaces existing 3.7.1 a &b. It is more general and requires 2 qualified offsite sources. Bases for proposed LCD state that Station power transformer 1-2 may only be used as a required source in MODE 5 or 6 (LCO 3.7.2 requires only one offsite source, so independance is not an issue). Applicability of the proposed LCD extended from> 300"F to Modes 1 -

4, iaw STS.

3.7.1.b 3.7.1.a LCO: Startup Xfmr 1-2; > 300"F Proposed LCD 3.7.1 replaces existing 3.7.1 a & b. It is more general and requires 2 qualified offsite sources. Qualifying circuits at Palisades (during operation) are Safeguards Transformer 1-1 and Startup Transformer 1-2.

Applicability extended from> 300"F to Modes 1 - 4, iaw STS.

3.7.1.c 3.7.9 LCD: Eng Safeguards Buses lC and lD; > 300"F Applicability extended through Mode 4 iaw STS. PTS LC0.3.7.9 requires all .

buses required by TS LCO 3.7.1.a through g, and also requires buses which were listed in TSCR of 3/25/86. The required buses are listed in PTS table 3.7.9-1.

3.7.1.d 3.7.9 LCO: 480V Distribution Buses 11 & 12; > 300"F See 3.7.1.c comment, above.

3.7.1.e 3.7.9 LCD: MCC Nol, 2, 7, and 8; > 300"F See 3.7.1.c comment, above.

3.7.1.f 3.7.9 LCO: 125 V D-C Buses 1 and 2; > 300"F See 3.7.1.c comment, above.

I 3.7.1.g 3.7.9 LCO: Four preferred A-C Buses; > 300"F See 3.7.1.c comment, above.

3.7.1.h 3.7.4 LCO: 2 station Batteries; > 300"F Applicability extended through Mode 4 iaw STS. Restricted acceptable chargers to the directly connected chargers.

3.7.1.h 3.7.9 LCO: the DC distribution systems; > 300"F Applicability extended through Mode 4 iaw STS.

3.7.1.h 3.7.4 LCD: 1 battery charger per bus; > 300"F Applicability extended through Mode 4 iaw STS.

3.7.1.i 3.7.1.b LCD: DG 1-1 & 1-2; > 300"F Applicability extended through Mode 4 iaw STS.

3.7.1.i 4.7.1.5 LCO: 2500 gal fuel per day tank; > 300"F Requirement moved to SR. PTS requires day tank check whenever DG is required to be operable.

3.7.1.i 4.7.3.1 LCD: 16000 gal in storage tank; > 300"F Requirement moved to SR. Applicability extended to all Modes iaw STS.

Required capacity increased iaw DG accident loading analyses and DG fuel oil consumption testing.

2

ATTACHMENT 4 Comparison of existing Technical Spec.ifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number. TS requirement description Justification of Changes 3.7 .1.j Relocated LCO: Switchyard Battery; > 300"F Switchyard equipment requirements relocated to the Operating Requirements Manual. The operation of equipment in the switchyard is not assumed in the safety analysis, and does not meet any of the criteria of 10 CFR 50.36.

3.7.1.j Relocated LCO: Switchyard D-C system; > 300"F See 3.7.1.j conment, above.

3.7.1.j Relocated LCO: 1 swyd battery charger; > 300"F See 3.7.1.j conment, above.

3.7 .1.k Relocated LCO: Swyd 240V A-C Panels 1 & 2 and Dist sys; > 300"F See 3.7.1.j conment, above.

3.7.1.1 Relocated LCO: 2400 V. bus lE; > 300"F The requirement to have bus lE energized above 300"F has been relocated to the Operating Requirements Manual. Bus lE is not a safety grade bus. Its operability is not assumed in any safety analysis, and it does not meet any of the criteria of 10 CFR 50.36.

3.7.2 Applicable LCOs ACTN: Required action not met Specific Conditions and Actions are listed in 3.7.2.a through m, below.

3.7.2.a 3.7 .1.A ACTN: Sta Pwr Xfmr inop; restore w/in 24 hrs AOT extended to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months iaw STS. No feature at Palisades makes the AOT approved for STS inappropr*iate.

3.7.2.a Deleted ACTN: Sta Pwr Xfmr inop; test both.DGs Deleted iaw STS and GL 84-15.

3.7.2.b 3.7 .1.A ACTN: SU Xfmr inop; restore w/in 24 hrs AOT specified as 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . Existing AOT of 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months only requires submittal of a report to allow continuous operation with xfmr inoperable. Proposed AOT is more restrictive.

3.7.2.b Deleted ACTN: SU Xfmr inop; test both DGs Deleted iaw STS and GL 84-15.

3.7.2.b Deleted ACTN: SU Xfmr inop; notify NRC of > 24 hr outage Deleted. No similar requirement in STS; LCO requires 2 circuits from off-site, and limits operation to 72 hrs .with < 2 circuits.

3.7.2.c 3.7.9.A ACTN: Bus lC inop.; restore w/in 8 hrs Unchanged 3.7.2.c 3.7.9.E ACTN: Bus lC inop; no inop equip on lD The proposed action 3.7.9.E is modified from action 3.8.9.E of the STS. The STS contain a requirement for a Safety Functions Determination Program, section 5.5.15, to provide assurance that entry into the conditions of two or more sperate LCOs does not .result in the loss of a safety function. That is the intent of the restriction on having inoperable safety feature components on a redundant bus in the existing actions 3.7.2 "c through"g". Until a Safety Functions Determination Program is implemented at Palisades, the assurance that the AOT for an inoperable distribution bus does not allow continued operation with a loss of a safety function will be provided by the proposed action 3.7.9.E.

3.7.2.c Deleted ACTN: Bus lC inop; test opposite DG Deleted iaw STS and GL 84-15.

3

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes 3.7.2.c 3.7.9.A ACTN: Bus lD inop; restore w/in B hrs Unchanged 3.7.2.c 3.7.9.E ACTN: bus lD inop; no inop equip on lC See Note following 3.7.2.c, above.

3.7.2.c Deleted ACTN: Bus lD inop; test opposite DG Deleted iaw STS and GL 84-15.

3.7.2.d 3.7.9.A ACTN: Bus 11 inop; restore w/in 8 hrs Unchanged 3.7.2.d 3.7.9.E ACTN: Bus 11 inop; no inop equip on 12 See note following 3.7.2.c, above.

3.7.2.d 3.7.9.A ACTN: Bus 12 inop; restore w/in 8 hrs Unchanged 3.7.2.d 3.7.9.E ACTN: Bus 12 inop; no inop equip on 11 See note following 3.7.2.c, above.

3.7.2.e 3.7.9.A ACTN: MCC 1&7 inop; restore w/in 8 hrs PTS Condition applies even if only one MCC is de-energized. Otherwise unchanged.

3.7.2.e 3.7.9.E ACTN: MCC 1&7 inop; no inop equip on good MCCs See note following 3.7.2.c, above.

3.7.2.e 3.7.9.A ACTN: MCC 2&8 inop; restore w/in 8 hrs PTS Condition applies even if only one MCC is de-energized. Otherwise unchanged.

3.7.2.e 3.7.9.E ACTN: MCC 2&8 inop; no inop equip on good MCCs See note following 3.7.2.c, above.

3.7.2.f 3.7.9.C ACTN: 125VDC bus 1 inop; restore w/in 8 hrs Unchanged.

3.7.2.f 3.7.9.E ACTN: 125VDC bus 1 inop; no inop equip on bus 1 See note following 3.7.2.c, above.

3.7.2.f 3.7.9.C ACTN: 125VDC bus 2 inop; restore w/in 8 hrs Unchanged.

3.7.2.f 3.7.9.E ACTN: 125VDC bus 2 inop; no inop equip on bus 2 See note following 3.7.2.c, above.

3.7.2.f Relocated ACTN: 125VDC bus 2 inop; provide emerg lighting Emergency lighting requirements relocated to the Operating Requirements Manual. Emergency lighting is not addressed in accident analyses, nor in STS.

It does not meet any of the criterion in 10 CFR 50.36.

3.7.2.g 3.7 .9 B ACTN: Pref AC bus inop; restore w/in 8 hrs Unchanged.

3.7.2.g 3.7.9.E ACTN: 1 Pref AC bus inop; no inop equip on op buses . See note following 3.7.2.c, above.

3.7.2.h 3.7.4 B.2 ACTN: 1 battery inop; restore w/in 24 hrs Unchanged.

3.7.2.h -3.7.4 B.1 ACTN: 1 battery inop; run both chgrs on affected bus Unchanged.

4

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes 3.7.2.i 3.7 .1.B.3.2 ACTN: 1 DG inop; *test other DG In addition, PTS Action 3.7 .1 B.l allows an alternative; verification that DG is OPERABLE w/o actual start. Verification that the fault is not common is required is modeled after STS.

3.7.2.i 3.7 .l.b ACTN: 1 DG inop; controls on other DG in auto If the difficulty with the inop DG involved lineup of controls, Action 3.7.1.B.3.l would require verifying lineup of controls on the OPERABLE DG.

3.7.2.i 3.7 .l.B.4 Actn: Restore DG w/in 7 days/month (for both) Unchanged.

3.7.2.i 3.7.1.B.2 ACTN: 1 DG inop; no inop equip on other side The wording is changed to that used in STS. The proposed wording allows four hours in condition 3.7.1.B with inoperable required equipment where the existing requirement allows no time. There is no design feature at Palisades which would make the action approved for STS to be inappropriate for Palisades.

3.7.2.j Relocated ACTN: Swyd 240 VAC pnl inop; keep its ACBs operable See 3. 7.1. j comment; above.

3.7.2.j Relocated ACTN: Swyd 240 VAC pnl & ACBs inop; fix w/in 24 hrs See 3.7.1.j comment, above.

3.7.2.j Relocated ACTN: Swyd 240 VAC pnl &ACBs inop; keep ACBs open See 3.7.1.j comment, above.

3.7.2.k Relocated ACTN: Swyd batt inop; restore w/in 24 hrs See 3.7.1.j comment, above.

3.7.2.k Relocated ACTN: Swyd batt inop; both chgrs must be operable See 3.7.1.j comment, above.

3.7.2. l Relocated ACTN: 2400 VAC bus lE inop; restore w/in 24 hrs See 3.7.1. l comment, above.

3.7.2.m Relocated ACTN: Swyd 125 VDC pnl inop; keep its ACBs operable See 3.7.1.j comment, above.

3.7.2.m Relocated ACTN: Swyd 125 VDC pnl &ACBs inop; fix w/in 24 hrs See 3.7.1.j comment, above.

3.7.2.m Relocated ACTN: Swyd 125 VDC pnl &ACBs inop; keep ACBs open See 3.7.1.j comment, above.

3.7.3 3.7.2 LCO: Bus lC & lD AC sources, s300"F Proposed LCO 3.7.2 requires one offsite source and 1 DG when in Modes 5 & 6.

Since an operable offsite source, at Palisades, is capable of supplying both bus lC and bus lD, the requirement for AC sources is equivalent. Proposed LCO 3.7.10 requires AC buses which support required equipment to be operable.

These two proposed LCOs contain a 11 of the requirements of ei<i sting LCO 3. 7. 3.

The existing LCO is applicable s 300"F; proposed LCOs 3.7.2 and 3.7.10 are applicable in Modes 5 and 6. Proposed LCOs 3.7.1 and 3.7.9 require the AC sources and buses in Mode 4 (s 300"F and above Mode 5).

3.7.3 A 3.7.2 A.2.1 ACTN: Source inop; Suspend refueling ops; immediately Unchanged.

3.7.2.B.1 5

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes 3.7.3 B 3.7.2 A.2.2 ACTN: Source inop; suspend movement of irradiated fuel Unchanged.

3.7.2.B.2 3.7.3 c Relocated ACTN: Source Inop; Suspend crane operation; inmediately This action omitted from proposed TS. Heavy Load considerations are to be handled in plant procedures rather than in TS.

3.7.3 D Deleted ACTN: Source inop; Suspend PCS draining; inmediately This action was added to the existing TS due to its existence in an early draft of the STS. Since that time the action has been determined as inappropriate for PWRs and eliminated from STS.

3.7.3 E 3.7.2 A.2.4 ACTN: Source inop; Initiate action to restore source Unchanged.

3.7.2.B.4 3.17.2T#4a 3.7.1.b LCD: 2 DBA Sequencers; ~ 3DO"F Sequencers are required to be operable as part of the DG LCD. They are addressed in Action 3.7.l.F, in SR 4.7.1.13, and in the Bases. There is only one physical sequencer for each train. That sequencer has two progranmed sequences, one with SIS and one without.

3.17.2T#4b 3.7 .1.b LCD: 2 Shutdown Sequencers; ~ 3DD"F See discussion for 3.17.2Tl4a, above.

3.17.2.5 3.7.1.F ACTN: sequencer inop; declare DG inop; inmediately Unchanged.

4.2.2T#B 4.7.3.1 SR: DG Fuel Supply; inventory; daily Unchanged.

4.7 .1.a 4.7 .1.2 SR: DGs; start manually; 1 Mo The timing requirement was reworded to more closely match STS, but to retain the existing requirement to be "ready for loading" within 10 seconds. No change is proposed for the testing frequency.

4.7 .1.a Relocated SR: DGs; alternate tested start ckt; 1 Mo The requirement to test alternate circuits is not included in the proposed wording. Since the DG is not assumed to be single failure proof, the detail of verifying that both of the starting circuits function will be left to the testing procedure, as is done in STS.

4.7 .1.a 4.7.1.2 SR: DGs; verify start time < 10 sec; 1 Mo Unchanged.

4.7 .1.a 4.7 .1.3 SR: DGs; Test load to 2400 Kw; 1 Mo The loading requirement is changed to assure that the DG can supply peak accident loads.

4.7.1.b 4.7 .1.14 SR: DBA DG auto loading; integrated test; refueling Frequency changed to 18 mo; added requirements on voltage, frequency, and run time iaw STS.

6

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes 4.7 .l.b 4.7.1.13 & 14 LCO: OBA DG auto loading w/in 30 sec. The 30 sec requirement is replaced by SR 4.7.1.13 verifying design sequencer timing and SR 4.7.1.14 verifying actual loading of equipment onto DG.

Essentially unchanged.

4.7 .l.c Relocated SR: DGs; Inspect iaw Alco instructions; Refueling This is a maintenance requirement rather than an operability verification; the equivalent requirement was deleted from STS. The requirement has been relocated to the FSAR.

4.7 .l.d 4.7 .1.15 LCO: DG loads < 750A at 2400V Reworded for clarity.

4.7.1.e 4.7 .1.6 SR: Fuel Xfer pumps; verify operable; 1 Mo Frequency changed to 92 days iaw STS and ISi testing of other pumps.

4.7.2.a 4.7.6.1 & 3 SR: Sta Batt's; Record each cell voltage; 1 Mo Frequency for each cell changed to 92 days iaw STS. pilot cells required monthly.

4.7.2.a 4.7.6.1 SR: Sta Batt's; Record 1 pi lot cell s.g.; 1 Mo Unchanged.

4.7.2.a 4.7.6.2 SR: Sta Batt's; Record 1 pilot cell temp; 1 Mo Former 4.7.2.a (temperature of single pilot cell) and 4.7.2.b (temperature of every fifth cell) combined using STS words of "Represenative cells". Shorter testing interval (1 month) retained.

4.7.2.b 4.7.6.3 SR: Sta Batt's; Record each cell gravity; 3 Mo Unchanged.

4.7.2.b 4.7.6.2 SR: Sta Batt's; Record each 5th cell temp; 3 Mo Former 4.7.2.a (temperature of single pilot cell) and 4.7.2.b (temperature of every fifth cell) combined using STS words of "Represenative cells". Shorter testing interval (1 month) retained.

4.7.2.b 4.7.6.3 SR: Sta Batt's; Record level & water added; 3 Mo Deleted requirement to record water added.

4.7.2.c 4.7.4.7 SR: Sta Batt's; Service test; refueling Frequency changed to 18 months iaw STS.

4.7.2.d 4.7.4.8 SR: Sta Batt's; performance test; 1/3 refueling Frequency changed to 5 years iaw STS.

4.7.2.d 4.7.4.7 Xcpt: SR 4.7.2.d (perf test) may replace SR 4.7.2.c Unchanged.

4.7.3 Relocated SR: Emerg Light outside CB; verify operable; 1 year Relocated to the Operating Requirements Manual.

4.7.3 Relocated SR: Emerg Light in CB; verify operable; before head off Relocated to the Operating Requirements Manual.

4.17.2T#4a 4.17.2T#l.b SR: OBA Sequencers; Chnl Fune Test; 92 days The channel functional test of the OBA sequencer is accomplished by the quarterly test of the SIS logic. When Table 4.17.2 was created, the sequencer 7

ATTACHMENT 4 Comparison of existing Technical Specifications (TS) requirements with Proposed Technical Specifications (PTS) requirements TS Number PTS Number TS requirement description Justification of Changes SRs were included, even though somewhat redundant, to assure that the table was consistent.

4.17.2T#4a 4.7 .1.13 & 14 SR: OBA Sequencers; Chnl Cal; 18 mo. The timing (calibration) of the sequencer is required by the proposed SR 4.7.1.13 .. The functional testing is accomplished by proposed SR 4.7.1.14.

4.17.2T#4b 4.7 .1.10 SR: Shutdown Sequencers; Chnl Fune Test; 18 mo. Unchanged.

4.17.2T#4b 4. 7. 1.10 & .13 SR: Shutdown Sequencers; Chnl Cal; 18 mo. The timing (calibration) of the sequencer is required by the proposed SR 4.7.1.13. The functional testing is accomplished by proposed SR 4.7.1.10.

8

ATTACHMENT 5 CONSUMERS POWER COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST - ELECTRICAL POWER SYSTEMS

Comparison of STS and Proposed Requirements 14 Pages

ATTACHMENT 5 Comparison of Proposed Technisal Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements A listing of the proposed Palisades electrical Tech Specs (PTS) correlated to the CE Standard Tech Specs (STS).

First Column; Proposed Palisades Tech Spec (PTS) number Each PTS item is listed in the left-most column.

If an STS item has been omitted from PTS, the word 'Omitted' is used.

Second Column; CE Standard Tech Spec (STS) number The corresponding STS item is listed in the second column.

If a PTS item does not appear in STS, it is noted as 'Added'.

Third Column; Existing Palisades Tech Spec (TS) number The closest TS item is listed in the third column.

If a PTS item does not appear in TS, it is noted as 'New'.

Fourth Column; PTS Item Description An abbreviation of the PTS item appears in the third column.

Each item is identified as: LCO, ACTION, SR, Admin, Exception, etc.

In cases where an STS item was omitted frqm PTS, the description is of the STS item.

Description Key: PTS requirement type: Column 4 syntax:

Safety Limit SL: Safety limit; Applicable conditions*

Limiting Condition for Operation LCD: LCD Description; Applicable conditions Condition CONO: Description of non-conforming condition Action ACTN: Required action; Completion time Surveillance Requirement SR: Test description; Frequency Table Tabl: Title Administrative Requirement Admn: Administrative requirement Defined Term Def: Name of defined term Fifth Column; Conments and Explanations of Differences between PTS and STS.

A brief explanation of differences between PTS and STS is provided in the fifth column.

Global differences between the proposed Palisades Technical Specifications and the Standard Technical Specifications for CE plants. NUREG 1432:

The following changes are not discussed in the explanation of differences for each TS requirement.

1) Bracketed values have been replaced with appropriate values for Palisades. Typically, the basis for these values is provided in the bases document.

2) Each required action of the form "Perform SR X.X.X.X . . . "has been altered by a parenthetical sunmary of the SR requirements. This change allows a reader to understand the required actions without constantly turning pages to locate the referenced SR.

3) Terminology has been changed to reflect Palisades usage:

"RCS" becomes "PCS" Palisades terminology is "Primary Coolant System" rather than "Reactor Coolant System" "SIAS" becomes "SIS" Palisades terminology is "Safety Injection Signal" rather than "Safety Injection Actuation Signal" "AC Vital bus" becomes "Preferred AC bus" Palisades terminology.

4) MODEs become defined operating conditions References to MODES in the proposed Tech Specs have been converted to the.equivalent terms defined in Palisades TS.

Palisades TS do not use MODEs as defined in STS. For convenience, the definitions of the Palisades operating conditions are presented here:

POWER OPERATION The POWER OPERATION condition shall be when the reactor is critical and the neutron flux power range instrumentation indicates greater than 2%

of RATED POWER.

HOT STANDBY (MODE 2) The HOT STANDBY condition shall be when T.Vll is greater than 52S"F and any o( the CONTROL RODS are withdrawn and the neutron flux power range instrumentation indicates less than 2% of RATED POWER.

HOT SHUTDOWN (MODE 3) The HOT SHUTDOWN condition shall be when the reactor is subcritical by an amount greater than or equal to the margin as specified in Technical Specification 3.10 and T.Vll is greater than 52S"F.

Undefined (MODEs 3*& 4) There is no defined condition below 52S"F but above 210"F.

COLD SHUTDOWN (MODEs 5 & 6) The COLD SHUTDOWN condition shall be when the primary coolant is at SHUTDOWN BORON CONCENTRATION and T.Vll is less than 210"F.

SHUTDOWN BORON CONCENTRATION SHUTDOWN BORON CONCENTRATION shall be a Primary Coolant System boron concentration sufficient to assure the. reactor is subcritical by ~ 2% Ap with all CONTROL RODS in the core and the highest worth CONTROL ROD fully withdrawn.

REFUELING SHUTDOWN (MODE 6) The REFUELING SHUTDOWN condition shall be when the primary coolant is at .REFUELING BORON CONCENTRATION and T.Vll is less than 210"F.

REFUELING BORON CONCENTRATION REFUELING BORON CONCENTRATION shall be a Primary Coolant System boron concentration of at least 1720 ppm AND sufficient to assure the reactor is subcritical by ~ 5% Ap with all CONTROL RODS withdrawn.

REFUELING OPERATION A REFUELING OPERATION shall be any operation involving movement of core components (except for incore detectors) when the reactor vessel head (Core Alteration) is untensioned or removed with fuel in the reactor vessel.

2

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7 3.8 3.7/4.7 Electrical Power Distribution 3.7.1.a 3.8.1.a 3.7 .l.a&b LCO: Two off-site ckts OPERABLE, Modes 1-4 Unchanged.

3.7 .1.b 3.8.1.b 3.7 .1. i LCO: Two DGs OPERABLE, Modes 1-4 Unchanged.

Omitted 3.8.1.c 3.17.2#4 LCO: Two*sequencers operable, Modes 1-4 Omitted this part of the LCO iaw reviewers note. Palisades sequencers affect only DG loading. Proposed Condition F (sequencer inop) requires declaring DG inoperable, immediately.

3.7.1 A 3.8.1 A 3.7.2.a&b COND: one off-site ckt inop Unchanged.

3.7.1 A.1 3.8.1 A.1 New ACTN: Perform SR 4.7.1.1 Unchanged.

Omitted 3.8.1 A.2 NA ACTN: Declare features inop; 12 hrs Each Palisades offsite circuit is capable of supplying both trains of Class lE power distribution. Therefore, the loss of only one offsite circuit cannot result in the loss of offsite power to either train.

3.7.1 A.2 3.8.1 A.3 3.7.2.a&b ACTN: Restore offsite ckt to OPERABLE; 72 hrs Completion time of "AND 6 days etc" omitted. This completion time is intended to limit the time (to the sum of the AOTs for conditions A and B) when the LCD was not met and avoid repetitious entries into conditions A and B. The Palisades AOT (an existing license condition) for having a required DG inoperable is "7 days per month, total for both". This AOT not only makes the omitted 6 day AOT inappropriate, but, by itself, accomplishes the prohibition of repetitious entries into conditions A and B.

3.7.1 B 3.8.l B 3.7.2.i COND: One DG inop Unchanged.

3.7.1 B.1 3.8.1 B.1 3. 7.2. i ACTN: Perform SR 4.7.1.1; 1 hr Unchanged 3.7.1 B.2 3.8.1 B.2 New ACTN: Declare supported features inop; 4 hrs Unchanged.

3.7.1 B.3.1 3.8.1 e.3.1 New ACTN: Check for common cause; 24 hrs Unchanged.

3.7.1 B.3.2 3.8.1 B.3.2 3. 7.2. i ACTN: Perform SR 4.7.1.2; 24 hrs Unchanged.

3.7.1 B.4 3.8.1 B.4 3. 7.2. i ACTN: Restore DG to OPERABLE, 7 days/ mo (both) Retained DG AOT from existing license. Omitted Completion time*

of "AND 6 days etc". See discussion for Action 3.8.1 A.2, above.

3.7.1 c 3.8.l c 3.0.3 COND: Two offsite ckts inop Unchanged 3

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.1 C.1 3.8.1 C.l New ACTN: Declare supplied features inop, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Unchanged 3.7.1 C.2 3.8.1 C.2 3.0.3 ACTN: Restore one offsite circuit, 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Unchanged 3.7.1 D 3.8.1 D 3.0.3 COND: one DG &one off-site ckt inop Unchanged.

Omitted 3.8.1 D NA NOTE: Enter LCO 3.8.9 See discussion following STS action 3.8.1 A.2, above.

3.7.1 D.1 3.8.1 D.1 3.0.3 ACTN: Restore offsite ckt, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Unchanged.

3.7.1 D.2 3.8.1 D.2 3.0.3 ACTN: Restore DG, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Unchanged.

3.7.1 E 3.8.1 D 3.0.3 COND: two DGs inop Unchanged.

3.7.1 E.1 3.8.l E.1 3.0.3 ACTN: Restore 1 DG, 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months Unchanged.

3.7.1 F 3.8.1 F 3.17.2.5 COND: Sequencer inoperable Changed to "one or both"; modified action accordingly. This condition is retained from existing license to assure that it is understood that the sequencer is necessary to support DG operability during Modes 1 - 4.

3.7.1 F.1 3.8.1 F.1 3.17.2.5.a ACTN: Declare associated DG inop, illlTiediately Palisades sequencers affect only DG loading. They do not affect starting of ESS equipment when offsite power is available. Rather than delete Condition F, as reviewers note would allow, The existing TS action to immediately declare the DG"inoperable was moved here.

3.7.1 G Added New COND: P-18A inop Added new condition to address Palisades unique DG fuel xfer system 3.7.1 G.l Added New ACTN: Declare DG 1-2 inop, 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months DG 1-2 cannot power fuel transfer pump P-188; therefore, with P-18A inop, DG 1-2 is not independent and does not meet LCD 3.7 .1.b.

3.7.1 H Added New COND: P-188 inop Added new condition to address Palisades unique DG fuel xfer system 3.7.1 H.1 Added New ACTN: Restore P-188; 7 Days With P-188 inoperable, either DG can power the remaining pump, P-18A. Since having only one fuel oil xfer pump operable would not meet the single failure criterion, continued operation must be limited by a specified completion time. The condition is less severe than an inoperable DG, for which 7 days is allowed, so 7 days was chosen as a proposed completion time.

4

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.1 I Added New COND: Both FO. pumps inop Added new condition to address Palisades unique DG fuel xfer system 3.7 .1 1.1 Added New ACTN: Restore 1 FO pump; 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months With two fuel oil transfer pumps inoperable, both DGs are limited in their ability to meet a demand. However since each DG has 2500 gallons in its day tenk (more than 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months at full load) the condition is not as severe as having both DGs completely inoperable, where two hours are allowed.

3.7 .1.J 3.8.1 G 3.7.2 COND: req actions not met in time; Unchanged.

3.7.1 J.1 3.8.1 G.1 3.7.2 ACTN: Be in HSD; 12 hrs Retained existing AOTs for consistency with balance of TS.

3.7.1 J.2 3.8.1 G.2 3.7.2 ACTN: Be in CSD; 48 hrs Retained existing AOTs for consistency with balance of TS.

3.7.1 K 3.8.l H 3.0.3 COND: 3 AC sources inop Unchanged.

3.7.1 K.1 3.8.l H.1 3.0.3 ACTN: Enter 3.0.3, imnediately Unchanged.

4.7 .1.1 3.8.1.1 New SR: offsite ckt lineup check Reworded to reflect Palisades configuration. Palisades offsite sources are fed directly from a main switchyard bus through motor operated disconnece switches_; no circuit breakers are involved. Installed instrumentation is available for voltage, but not for available power.

4.7.1.2 3.8.1.2&7 4.7 .1.a SR: DG starting & timing check Combined SRs 3.8.1.2 & 3.8.1.7 since Palisades does not have any capability for other than a normal "fast start".

Therefore, notes 1 and 3 were omitted. Note 2 was also omitted since Palisades engines have a continuous prelube and preheat.

No modified starting is used for any testing. The SR wording and Frequency were changed to retain monthly testing as is in the existing license. Retained existing wording regarding starting time requirement.

4.7 .1.3 3.8.1.3 4.7 .1.a SR: DG loading test Portions of the maximum expected DG accident loading, when including potential operator connected loads as well as automatically connected loads, exceed the continuous DG rating of 2500 kw. Therefore, a short period of loading above the analyzed accident loading was added to the monthly test to assure that the DG can produce the necessary power. Longer duration loading is proposed in the 18 month 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months loading SR. The Frequency was changed to retain monthly testing as is in the existing license. Notes were omitted; Note 1 simply provides permission for gradual loading which is not prohibited 5

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences by any requirement, and is comnon practice. Note 2 is included in the introduction to the 4.7.1 SRs. Note 3 is unnecessary since, at Palisades, a DG is considered inoperable when it is paralleled to the grid for loading; both DGs would not be voluntarily made inoperable. Note 4 is because it is physically necessary to meet the acceptance criteria of STS SR 3.8.1.2 before a DG could be paralleled and loaded.

4.7 .1.4 3.8.3.4 New SR: DG starting air pressure check; 31 days Moved air system requirements to LCO 3.8.1 from LCO 3.8.3 because Palisades DG design does not include the 5 start requirement. With below nonnal pressure, no specific number of starts can be assured and the DG must be assumed to be inoperable.

4.7.1.5 3.8.1.4 New SR: DG day tank level check; 31 days Unchanged.

Omitted 3.8.1.5 NA SR: DG day tank water check This SR is not part of the existing Palisades licensing basis.

The DG day tanks have had no history of difficulty with accumulated water. Tank construction is flat bottemed and does not provide a sump for water collection or removal.

4.7.1.6 3.8.1.6 4.7.1.e SR: , DG fuel xfer system test Reworded SR to address controls as well as pumps since Palisades has asyrnnetric, shared, DG fuel oil transfer system.

Pump testing alone would not necessarily verify operability of automatic and manual controls.

4.7.1.2 3.8.1.7 4.7.1.a SR: DG timed start This STS SR combined with STS SR 3.8.7.2 because all DG starts at Palisades are "fast starts". See 4.7.1.2, above.

4.7 .1.7 3.8.1.8 New SR: Automatic transfer of off-site supplies Reworded for Palisades configuration.

4.7.1.8 3.8.1.9 New SR: DG largest load rejection test; 18 mo. Unchanged.

4.7.1.9 3.8.1.10 New SR: DG full load rejection test; 18 mo. Unchanged.

4.7.1.10 3.8.1.11 4.17.2 4.b SR: Simulated Loss of offsite Power; 18 mo. Prelube note omitted; otherwise unchanged.

Omitted 3.8.1.12 NA SR: DG start on ESF signal; 18 Mo. This is not a feature of the Palisades design. Palisades DGs start only on low voltage or loss of voltage.

Omitted 3.8.1.13 NA SR: Verification of DG trip bypass; 18 mo. This is not a feature of the Palisades design. Palisades DGs do not have trips which are bypassed on an ESF.

6

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 4.7 .l.11 3.8.1.14 New SR: DG 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months load test; 18 Mo. Reduced time above continuous load to avoid exceeding DG rating yet still meet the intent of the test. Palisades DGs have a continuous rating of 2500 kw and a 2 hour2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months rating of 2750 kw.

If the SR specifies 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at a load above the continuous rating, a test duration of more than 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months would exceed the DG rating and a test duration of less than 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months would not satisfy the SR. 100 minutes was chosen to demonstrate that the DG is not degrading, yet to specify testing within the rating of the DG.

Omitted 3.8.1.15 New SR: DG Hot Restart; 18 mo. This SR was not proposed. None of the accident analyses or design bases assume a hot restart of the DGs. This SR is not part of the _existing licensing basis.

4.7 .l.12 3.8.1.16 New SR: Transfer of DG load to offsite; 18 mo. Reworded.SR to clarify intent. Requirements are unchanged.

Omitted 3.8.1.17 NA SR: DG auto reset to standby; 18 mo. This is not a feature of the Palisades design.

4.7.1.13 3.8.1.18 New SR: Sequencer timing test; 18 mo. SR reworded to verify timing of each load, rather than the interviening interval. The Palisades sequencers are solid state devices which are verified to be within 0.1 seconds of the progranmed time. Plant testing is writen to verify that the timing meets the accident analyses, and DG load studies allow for maximum allowable sequencer error.

4.7 .l.14 3.8.1.19 4.7 .l.b SR: LOSP w/o SIS test Omitted note inappropriate to Palisades; Palisades DGs have continuous prelube. Used Palisades designations and values.

Omitted 3.8.1.20 NA SR: DG simultaneous start This SR is not a part of the existing Licensing basis.

4.7 .l.15 Added 4.7 .l.d SR: Verify DG load; 18 months Retained existtng SR. Palisades design automatically connected loads closely approach the continuous rating of the DG.

Retention of this SR is intended to assure that the loading is verified at least each 18 months.

Omitted 3.8.1-1 NA Tbl: DG test schedule No change is proposed for the DG testing frequency.

3.7.2.a 3.8.2.a 3.7.3 LCO: One off-site ckt OPERABLE, Modes 5 & 6 Unchanged.

3.7.2.b 3.8.2.b 3.7 .3 LCO: One DG OPERABLE, Modes 5 & 6 Unchanged.

3.7.2 A 3.8.2 A 3.7.3 COND: One req offsite source inop. Unchanged.

3.7.2 A.1 3.8.2 A.1 New ACTN: Declare affected equip inop; irrmediately Unchanged.

7

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.2 A.2.1 3.8.2 A.2.1 3.7.3 A ACTN: Suspend Core Alts; immediately Unchanged.

3.7.2 A.2.2 3.8.2 A.2.2 3.7.3 B ACTN: stop fuel moves; immediately Unchanged.

3.7.2 A.2.3 3.8.2 A.2.3 New ACTN: Stop positive Rx addition; immediately Unchanged.

3.7.2 A.2.4 3.8.2 A.2.4 3.7 .3 E ACTN: Initiate circuit restoration; immediately Unchanged.

3.7.2 B 3.8.2 B 3.7.3 COND: One req DG inop. Unchanged.

3.7.2 B.l 3.8.2 B.2.1 3.7.3 A ACTN: Suspend Core Alts; immediately Unchanged.

3.7.2 B.2 3.8.2 B.2.2 3.7.3 B ACTN: stop fuel moves; immediately Unchanged.

3.7.2 B.3 3.8.2 B.2.3 New ACTN: Stop positive Rx addition; immediately Unchanged.

3.7.2 B.4 3.8.2 B.2.4 3.7.3 E ACTN: initiate circuit restoration; immediately Unchanged.

4.7.2 3.8.2.1 4.7.1 SR: Required SRs from LCD 3.7.l, for Modes 5 & 6 Specified those SRs which test features required in Modes 5 & 6 and which can be perfonned w/~ making DG inoperable.

3.7.3 3.8.3 3.7.1 LCD: DG fuel oil & Lube oil; when DG required Moved air system requirements to LCD 3.7.1 because Palisades DG design does not include the 5 start requirement. With below normal pressure, no specific number of starts can be assured.

Revised LCD and Applicability wording to reflect Palisades shared fuel oil system.

3.7.3 A 3.8.3 A New COND: fuel < 23,700 gal and > 20,110 gal Reworded to reflect Palisades shared fuel oil system.

3.7.3 A.l 3.8.3 A.l New ACTN: Restore fuel oil within 48 hrs Unchanged.

3.7.3 B 3.8.3 B New COND: Lube oil < 7 and> 6 days supply Reworded to reflect Palisades shared lube oil storage and. to be consistent with wording of 3.7.3 A.

3.7.3 B.l 3.8.3 B.l New ACTN: Restore Lube oil w/in 48 hrs Unchanged.

3.7.3 c 3.8.3 c New COND: Fuel viscosity, water, sediment not in limits Rewrote condition to reflect Palisades fuel oil storage and usage conditions. Palisades has a single tank which stores fuel oil for both DGs, diesel fire pumps, heating boilers, and rad waste evaps. Consequently, the residence time for fuel in storage is short. With*a short storage time, particulate contamination is not limiting. New fuel is tested for viscosity, SG, and water and sediment prior to acceptance or addition to the tank. Stored fuel is sampled periodically.

8

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.3 C.l 3.8.3 C.l New ACTN: Restore fuel quality w/in 7 days Reworded to agree with reworded condition statement.

3.7.3 D 3.8.3 D New COND: Fuel out of spec other than Cond C Rewrote condition to complement Condition C.

3.7.3 D.1 3.8.3 D.1 New ACTN: Restore fuel properties; 31 days Changed Completion time from 30 to 31 days. 30 days is not standard usage within the STS project.

Omitted 3.8.3 E NA COND: DG air receiver low pressure The condition, action & surveillance for DG air starting moved to LCD 3. 7.1.

3.7.3 E 3.8.3 F New COND: Req Action not met or . Reworded to reflect Palisades shared fuel oil system.

3.7 .3 E.1 3.8.3 F.l New ACTN: Declare both DGs inoperable Reworded to reflect Palisades shared fuel oil system.

4.7.3.1 3.8.3.1 New SR: Fuel oil level check; 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Reworded and retained shorted surveillance interval due to Palisades shared fuel oil system and continuous multi purpose usage.

4.7.3.2 3.8.3.2 New SR: Lube oil inventory check; 31 days Unchanged.

4.7.3.3 3.8.3.3 New SR: Verify fuel oil properties; iaw program Unchanged.

Omitted 3.8.3.4 NA SR: Verify starting air pressure; 31 days Moved to LCD 3.7.1 4.7.3.4 3.8.3.5 New SR: FO storage tank water check; 31 days Added word "excess" due to difficulty in removing all water from FD storage tank and the height of the suction pipe above the tank bottom.

4.7.3.5 3.8.3.6 NA SR: Clean FO storage tank; 10 years Reworded because Palisades has only one tank to supply both DGs. Tank cannot be drained without defueling reactor.

Cleaning can be accomplished by vacuum cleaning of other method without draining tank.

3.7.4 3.8.4 3.7.1.h LCD: Two DC sources operable; Modes 1-4 Reworded to fit Palisades terminology and usage, and to specify that the cross-connected chargers are not, by themselves, adequate for continuous operation.

3.7.4 A Added New COND: One req charger inop This condition was added due to Palisades arrangement having redundant chargers for each battery, with one cross-connected to the opposite AC train. Addition of this condition allows limited continued operation if one of the required chargers becomes inoperable.

9

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.4 A.l Added New ACTN: Place x-conn charger in service; immediately This action is added to assure continued charging current is available to the battery during the time when a required charger is out of service. This action is implicit in the existing LCD which requires one of the two chargers to be operable.

3.7.4 A.2 Added New ACTN: Restore req charger to OPERABLE status; 7 days This action was added to assure the restoration of the required charger. The 7 day completion time is th~t currently allowed for a DG out of service, which is more limiting. The 7 days should allow for trouble shooting, location of parts, and repair.

3.7.4 B 3.8.4 A 3.7.2.h COND: One battery inoperable The actions for an inoperable DC source have been separated into two conditions, that for the charger (3.7.4 A) and that for the battery. The condition, associated actions, and completion times are retained from the existing Tech Specs.

3.7.4 B.l Added 3.7.2.h ACTN: Place both chargers in service; immediately This action, taken from the existing Tech Specs, was retained to assure that sufficient DC power was available.for the affected train. It also assures that DC power for that train would be restored, following a loss of off-site power, as soon as either AC train was re-energized.

3.7.4 B.2 3.8.4 A.l 3.7.2.h ACTN: Restore battery; 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Retained Completion Time from existing Tech Specs.

3.7.4 c 3.8.4 B 3.7.2 COND: Req action and completion time not met Unchanged.

3.7.4 C.l 3.8.4 B.l 3.7.2 ACTN: Be in HSD: 12 hrs Retained existing AOTs for consistency with balance of TS.

3.7.4 C.2 3.8.4 B.2 3.7.2 ACTN: Be in CSD; 48 hrs Retained existing AOTs for consistency with balance of TS.

4.7.4.1 3.8.4.1 New SR: Verify battery float voltage; 7 days Unchanged.

4.7 .4.2 3.8.4.2 New SR: Verify no corrosion; 92 days Reworded to limit connection resistance to 120% of installation value, in agreement with manufacturers specifications and with reviewer's note in STS bases.

4.7.4.3 3.8.4.3 New SR: Battery inspection; 18 mo. Specified that inspection be performed rather than to verify no damage. Changed wording avoids declaring the battery to be inoperable for observed damage which does not affect operability.

4.7.4.4 3.8.4.4 New SR: Remove corrosion; 18 mo. Unchanged.

10

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 4.7.4.5 3.8.4.5 New SR: Verify connection resistance; 18 mo. Reworded to limit connection resistance to 120% of installation value, in agreement with manufacturers specifications and with reviewer's note in STS bases.

4.7.4.6 3.8.4.6 New SR: Verify charger performance; 18 months Note restricting performance during operation was omitted. The availability of a redundant charger, at Palisades, allows performance of a charger test while the other charger is in service.

4.7.4.7 3.8.4.7 4.7.2.c SR: Battery service test; 18 months Unchanged.

4.7.4.8 3.8.4.8 4.7.2.d SR: Battery performance test; 60 months Unchanged.

3.7.5 3.8.5 New LCD: DC sourc~s to support LCD 3.7.10; Modes 5&6 Unchanged.

3.7.5 A 3.8.5 A New COND: One DC source inop Unchanged.

3.7.5 A.1 3.8.5 A.l NA ACTN: Declare affected equip inop; inmediately Unchanged.

3.7.5 A.2.1 3.8.5 A.2.1 New ACTN: Suspend Core Alterations; inmediately Unchanged.

3.7.5 A.2.2 3.8.5 A.2.2 New ACTN: Suspend fuel movement; inmediately Unchanged.

3.7.5 A.2.3 3.8.5 A.2.3 New ACTN: Suspend positive Rx addition; inmediately Unchanged.

3.7.5 A.2.4 3.8.5 A.2.4 New ACTN: Initiate DC source restoration; inmediately Unchanged.

4.7.5 3.8.5.1 New SR: Perform SRs for operable DC source Reworded for consistency with balance of proposed TS, and included all SRs from LCD 3.7.4.

3.7.6 3.8.6 3.7 .1.h LCD: Battery cell parameters w/in limits Added requirement for average temperature; Condition B and SR 4.7.6.4 each have requirements concerning battery cell temperature, but LCD does not require the battery to be within any temperature limits. Conditions are only entered is LCD is not met, and surveillance need to support a facet of the LCD.

3.7.6 A 3.8.6 A 3.7.2.h COND: Battery cell parameter not w/in limits Unchanged.

3.7.6 A.l 3.8.6 A.1 3.7.2.h ACTN: Verify pilot cell level & voltage; 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Unchanged.

3.7.6 A.2 3.8.6 A.2 3.7.2.h ACTN: Verify cells w/in Category C limits; 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Unchanged.

3.7.6 A.3 3.8.6 A.3 3.7.2.h ACTN: Restore cells to Category A & B limits; 31 days Unchanged.

11

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.6 B 3.8.6 B 3.7.2.h ACTN: Req Action not met, etc Unchanged.

3.7.8 B.l 3.8.6 B.l 3.7.2 ACTN: Declare battery inoperable; inmediately Unchanged.

4. 7 .6.1 3.8.6.l 4.7.2.a SR: Verify pilot cell parameters; 31 days Retained existing SR frequency.

4.7.6.2 3.8.6.3 4.7.2.a SR: Verify cell temperature; 31 days Retained existing SR frequency.

4.7.6.3 3.8.6.2 4.7.2.b SR: Verify all cells w/in limits; 92 days Omitted specific requirement to perform SR upon severe discharge or overcharge. These requirements are not requirements of the current Palisades license. With Palisades battery parameters, knowledge any severe discharge would comprise knowledge of failure to meet cell float voltage requirements of SRs 4.7 .6.1 and 4.7 .6.3. Failure to meet SR 4.7.6.l or 4.7.6.3 would require entering Condition 3.7.6 A; Action 3.7.6 A.2 requires performance of the measurements of SR 4.7.6.3. With the type of batteries used at Palisades, a severe overcharge would result in a reduced electrolyte level rather than an excessive battery terminal voltage. Similarly to a reduced voltage caused by a severe discharge, a reduced level caused by a severe overcharge would invoke the requirement of Action 3.7.6 A.2 to perform the measurements required by SR 4.7.6.3 w/in 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3 .7. 6-1 3.8.6-1 New Tabl: Battery Cell limits Unchanged.

3.7.7 3.8.7 New LCO: Inverters shall be operable; Modes 1-4 Omitted note which is not applicable to Palisades.

3.7.7 A 3.8.7 A New COND: one inverter inoperable Unchanged.

3.7.7 A.l 3.8.7 A Note New ACTN: Enter 3.7.9 if Pref AC bus de-energized Unchanged.

3.7.7 A.2 3.8.7 A.l New ACTN: Restore inverter; 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Unchanged.

3.7.7 B 3.8.7 B New COND: Req action not met, Etc Unchanged.

3.7.7 B.l 3.8.7 B.l New ACTN: Be in HSD; 12 hrs Retained existing AOTs for consistency with balance of TS.

3.7.7 B.2 3.8.7 B.2 New ACTN: Be in CSD; 48 hrs Retained existing AOTs for consistency with balance of TS.

4.7.7.1 3.8.7.1 New SR: Verify inverter performance; 7 days Unchanged.

3.7.8 3.8.8 New LCD: Required inverters operable; Modes 5 & 6 Unchanged.

12

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) requirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.8 A 3.8.8 A New COND: One or more inverter inoperable Unchanged.

3.7.8 A.l 3.8.8 A.l New ACTN: Declare affected equip inop; inmediately Unchanged.

3.7.8 A.2.1 3.8.8 A.2.1 New ACTN: Suspend Core Alterations; inmediately Unchanged.

3.7.8 A.2.2 3.8.8 A.2.2 New ACTN: Suspend fuel movement; inmediately Unchanged.

3.7.8 A.2.3 3.8.8 A.2.3 New ACTN: Suspend positive Rx addition; inmediately Unchanged.

3.7.8 A.2.4 3.8.8 A.2.4 New ACTN: Initiate DC source restoration; inmediately Unchanged.

4.7.8.1 3.8.8.l New SR: Verify inverter performance; 7 days Unchanged.

3.7.9 3.8.9 3.7.1 LCD: Elec Distribution buses operable; Modes 1-4 Unchanged.

3.7.9 A 3.8.9 A 3.7.2.c,d,e COND: AC dist inoperable Unchanged.

3.7.9 A.l 5.5.15 3.7.2.c,d,e ACTN: Verify no redundant equip inop Added an action to emulate similar requirement in existing TS.

Existing TS do not have the Safety Function Determination Program of STS.

3.7.9 A.2 3.8.9 A.l 3.7.2.c,d,e ACTN: Restore AC distribution 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Retained existing action and completion tine.

3.7.9 B 3.8.9 B 3.7.2.g COND: Preferred AC bus inop Unchanged.

3.7.9 B.l 3.8.9 B.l 3.7.2.g ACTN: Restore Preferred AC bus; 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Retained existing action and completion tine.

3.7.9 c 3.8.9 c 3.7.2.f COND: DC bus inoperable Unchanged.

3.7.9 C.l 3.8.9 C.l 3.7.2.f ACTN: Restore DC bus; 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Retained existing action and completion tine.

3.7.9 D 3.8.9 D. 3.7.2 COND: Req action not met Unchanged.

3.7.9 D.l 3.8.9 D.l 3.7.2 ACTN: Be in HSD; 12 hrs Retained existing AOTs for consistency with balance of TS.

3.7.9 D.2 3.8.9 D.2 3.7.2 ACTN: Be in CSD; 48 hrs Retained existing AOTs for consistency with balance of TS.

3.7.9 E 3.8.9 E 3.0.3 COND: Two or more dist systems inoperable Unchanged.

3.7.9 E.l 3.8.9 E.l 3.0.3 ACTN: Enter 3.0.3; inmediately Unchanged.

4.7.9.1 3.8.9.1 New SR: Verify breaker alignments; 7 days Unchanged.

13

ATTACHMENT 5 Comparison of Proposed Technical Specifications (PTS) reguirements and CE Standard Technical Specifications (STS) requirements PTS Number STS Number TS Number PTS (or STS) requirement Description Explanation of Differences 3.7.9-1 B 3.8.9-1 New Tabl: Table of required distribution buses Moved to LCD from 'Bases.

3.7.10 3.8.10 New LCD: Elec .dist buses operable; Modes 5 & 6 Unchanged.

3.7.10 A

3.8.10 A New COND: One or more bus inoperable Unchanged.

3.7.10 A.1 3.8.10 A.1 New ACTN: Declare affected equip inop; immediately Unchanged.

3.7.10 A.2.1 3.8.10 A.2.1 New ACTN: Suspend Core Alterations; immediately Unchanged.

3.7.10 A.2.2 3.8.10 A.2.2 New ACTN: Suspend fuel movement; immediately Unchanged.*

3.7.10 A.2.3 3.8.10 A.2.3 New ACTN: Suspend positive Rx addition; immediately Unchanged.

3.7.10 A.2,4* 3.8.10 A.2.4 New ACTN: Initiate DC source restoration; immediately Unchanged.

3.7.10 A.2:5 3.8.10 A.2.5 New ACTN: Declare affected SOC inoperable; immediately Unchanged.

4.7.10.l 3.8.10.1 New SR: Verify breaker alignments; 7 days Unchanged.

14

ML18065A377

Text

4.2 DESCRIPTION

Navigation menu

Search