Text

Proposed Advanced BWR Tech Specs Covering Control Rod Accumulators,Reactor Internal Pumps - Operating,Rhr Suppression Pool Cooling,Eccs - Operating,Uhs & Reactor Bldg Cooling Water & Reactor Bldg Svc Water Sys
	ML20094D209
Person / Time
Site:	05000605
Issue date:	12/12/1991
From:	; GENERAL ELECTRIC CO.
To:	;
Shared Package
ML20094D207	List: ML20094D204; ML20094D209;
References
	NUDOCS 9112190169
	Download: ML20094D209 (29)
	v • d • e

_ _ _ _ _ _ _ _ _ _ _ _ _

h

,, i 3.1 REACTIVITY CONTROLSYSTEM 3.1.5 Control Rod Scram Accumulators LCO 3.1.5 Each control rod scra.n accumulator shall be OPERABLE.

APPLICABILITY: MODES 1 and 2 ACTIONS -

......................... NOTE.-----.--..-....-.-..-.-.-

Separate Condition entry is allowed for each control rod scram accumulator CONDITION REQUIREDACTION COMPLETION TIME AL One or more control rod scram A.1 Declare the associated control 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months accumulator (s) inoperable rod (s) or control rod pair (s) inoperable.

SURVEILLANCE REQUIREMENTS SURVElLLANCE FREQUENCY SR 3.1.5.1 Verify each control rod scram accumulator pressure is 7 days 2 [1850] psig. '

Explanation for Oliferences in ABWR Specification Relative to Draft ITS

-f '

The ABWR CRD system riiffers from past BWR designs in several key rospects. With regards to the tech spec for control rod scram accumulator operability the pertinent differences are that each HCU provides the scram force for a pair of control rods (except for the center control rod which has its own accumulator) and because there is no scram discharge volume the scram function must be accomplished against reactor pressure (i.e. there is no scram assist fro n reactor pressure). Thus, a properly charged accumulator is the only means for assuring scram. To protect against the simultaneous loss of adequate pressure in multiple scram accumulators (such as would occur on loss of CRD charging water due to the trip of the running CRD pump) an automatic scram is initiated by the RPS syaem on sensed low CRD charging water header pressure. This assures a scram occurs while there is still sufficient accumulator charge to scram all rods.

The ABWR spec for this function is based on the traditional BWR spec for the case with low RPV pressure. However, there is no need to make the spec conditional on low charging water header pressure as there is an automatic safety function in place to address this con::ern. Consequently, affected rods are simply declared inoperable within a short time. This assures that they are t'Jlly inserted and disarmed, via the spec on control rod operability, such that the accumulator function is no longer needed.

9112190169 911: .1 Z POR ADOCK 050>O605 A PDR

3.4 REACTORCOOUWTSYSTEM 3.4.1 Reactor internal Pomos (RIPS) Ooeratina

='

LCO 3.4.1 At least nine RIPS shall be in operation, G

With only eight RIPS in operation THERMAL POWER shall be s 95% RTP, G

With only seven RIPS in operation THERMAL POWER shall be s 90% RTP.

APPLICABILITY: . MODES 1 and 2.

ACTIONS CONDITION REQUIREDACTION COMPLETION TPAE A. Five or six RIPS in operation. A.1 Recuce THERMAL POWER to s 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months 25% RTP.

atQ A.2 Restore at least seven RIPS to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months operation.

B. Four or less RIPS in operation. 8.1 Reduce THERMAL POWER to s 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months f 5% RTP.

!1NR B.2 Restore at least seven RIPS to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months operation.

C, Required Action and associated C.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A or B not met. '

SURVEILLANCE REQUIREMENTS SURVEILLN4CE pp m SR 3.4.1.1 Verify at least nine RIPS are in operation at any THERMAL 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months POWER level, G

With only eight RIPS in operation, verify THERMAL POWER is s 95% RTP, G

With only seven RIPS in operation, verify THERMAL POWER is s 90% RTP.

Explanation for Differences in ABWR Specification Relative to Draft ITS The ABWR has 10 recirculation pumps internal to the vessel rather than two recirc pumps located on ext 9tnalloops as with recent BWRs. However, the bases for this LCO is essentially the same as in the past, i.e. the operatin0 state of the recirculation system must be consistent with the power / flow operating conditions assumed in the plant LOCA and transient analyses.

For ABWR rated core flow can be attained with only nine of ten RIPS in operation. However, the core flow that can be attained with less than nine RIPc operating is less. Therefore, at least nine RIPS are required to be in operation. to ensure during a LOCA the assumptions of the LOCA analysis are satisfied without restriction. With less than nine RIPS in operation, all potential power and Ibw operating states have not been accour.ted for in either the LOCA or transient analysis. Therefore, certain restrictions apply depending on the number of RIPS operating.

With less than nine RIPS in operation the THERMAL POWER must be restricted so that the assumptions of the LOCA and transient analyses are niet. Wih only seven or eight RIPS cocrating THERMAL POWER is restricted to s 90% and s 95% RTP, respectively. However, operation may continue indefinitely. With less than seven pumps operating, THERMAL POWER is testricted even further and operation may only continue for a short time.

For the case of 5 or 6 pumps running, THERMAL POWER must be reduced to s 25% RTP because of potential stacility concerns. With less than 5 pumps operating, power must be reduced to s 5% RTP due to the lack of detailed analysis of the actual flow distribution with less than half of the pumps in operation providing forced flow at higher power levels.

With less than seven RIPS operatin0 the steady state power and flow characteristics of the core have not been fully analyzed. Therefore, even at reduced power levels, continued operation is allowed for only a short time while an attempt is made to restore at least seven pumps to operating status. With less than seven pumps restored to operating status within the Required Completion Time, the reactor is required to be in MODE 3. In this condition, the R!Ps are not required to be operating because of the reduced saverity of design basis accidents and minimal dependence on the forced flow characteristics.

Because of the inciaased number of pumps involved, and theli distribution around the periphery of the bottom head region, pun.p to pump flow mismatch is not of concern for the ABWR, Thus, the surveillance requirement specified simply checks for pumps in operation, and not for flow mismatch.

)

3 :

> . a

=. .

3,S EMERGENCY CORE COOUNG SYSTEMS (ECCS) 3.5.1 ECCS Operating LCO 3.5.1 All ECCS subsystems shall be OPERABLE, M

All Automatic Depressurization System (ADS) valves shall be OPERABLE.

APPLICABILITY: MODE 1, MODES 2 and 3, except that:

(a) ADS is not required to be OPERABLE with reactor steam dome pressure s 50 psig; and, (b) RCIC is not required to be OPERABLE with reactor steam dome pressure s 150 psig.

'ACTICNS CONDITON REQUIREDACTION COMPLETION TIME A. One injection subsystem A.1 Restore Inopernble 30 days inoperable.

subsystem to OPERABLE l status.

B. Two injection subsystems B.1 Restore one inoperable 14 days inoperable, each in a different subsystem to OPERABLE division, status ,

CuTwo inpction subsystems C.1 Restore one inoperable 7 days inoperable, both in the same subsystem to OPERABLE division, status D. -Three injection subsystems D.1 Restore one inoperable 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months inoperable, each in a different subsystem to OPERABLE division, status.

E. Required Action and associated E.1 Be in MODE 3 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A, B, or C not rnot. E E.2 Be in MODE 4. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months L F. Three injection subsystems: F.1 Enter LCO 3.0.3 Immediately inoperable, two of which are in the same division, G

Four or more injection

subsystems inoperable.

1

s , > ,

CONDITION REQUIREDACTION COMPLETION TIME G - -- -NOTE - -

G.1 -NOTE----

This Condition may exist Provisions of LCO 3.0.4 are concurrently with Conditions not applicable.

A through D, -- - - -- -

Restore ADS valve to Prior to startup One ADS valve inoperable. OPERABLE status. from next refueling outage H. -

--NOTE-- .

H.1 Verify at least two high Immediately This Condition may exist pressure ECCS injection concurrently with Conditions subsystems are OPERABLE.

A through D.

E H.2 Restore one ADS valve to 30 days Two ADS valves inoperable.

OPERABLE status.

l. Three or more ADS valves 1.1 Be in Mode 3. 12 nours inoperable, g O l.2 Reduce reactor steam dome 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months Required Action and associated pressure to s 50 psig.

Completion Time of Condition H not rnet.

SURVEILLANCE FRECJENCY SR 3.5.1.1 Demonstrate that ECCS subsystem piping is filled with water . 31 days from the pump discharge va've to the isolation valve.

SR 3.5.1.2 --..----.----.---. NOTE--------------

LPFL subsystems may be considered OPERABLE during alignment to and operation in the RHR shutdown cooling mode when below 135 psig in MODE 3,it capable of being manually realigned and not otherwise inoperable.

Verify that each ECCS subsystem manual, power-operated and 31 days automatic valve in the flow path, that is not locked, sealed or otherwise secured in position, is in its correct position.

SR 3.5.1.3 Verify Atmospheric Control System supply pressure to ADS 31 days valves 2161 psig.

)

~6 .

. SURVEILLANCE FREOUDCY SR 3.5.1.4 Demonstrate that each ECCS pump develops the specified flow in accordance rate against a system head corresponding to the specified reactor with the pressure: Inservice Testing Program 4

or 92 days SYSTEM HEAD CORRESPCfDN3

. TO REACTOR SYSTEM FLOW RATE PRESSURE OF LPFL 2 4200 gpm 2 40 psig HPCF 2 800 gpm 2 1177 psig SR 3.5.1.5 Demonstrate, with reactor pressure s 1177 psig, that the RCIC 92 days pump can develop a flowrate 2 800 gpm against a system head g 4 corresponding to reactor pressure 21177 psig.

12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when reactor steam dome pressure is 2 920 psig-

l. SR 3.5.1.6 ......--...--.-.---NOTE----------------

l SR 3.0.4 is not appFcable. '

, Demonstrate with reactor pressure 5165 psig, that the RCIC 18 months pump can dtvelop a flow rate 2 800 gpm against a system head g corresponding to reactor pressure 2150 psig.

Once only, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when reactor steam dome pressure 1

is 2150 ps10, SR 3.5.1.7 -------------.-NOTE-------- --- ----- 18 months Vessel injection may be excluded.

Demonstrate that each ECCS subsystem actuates on an actual or

- simulated automatic initiation signal.

4 4

4 b

l l

o, 3 SURVEILLANCE FREQUENCY

- SR 3.5.1.8 ...-...-NOTE-------- 18 months Valve actuation may be excluded.

Demonstrate that the ADS actuates on an actual or simulated automatic initiation signal.

SR 3.5.1.9 - --- -

TE------------

SR 3.0.4 is not F1 0 Demonstrate that each 4 A 'n manually actuated 18 months at reactor st6am dom g

Once only, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months af ter reactor steam dome pressure is 2 [ ] psig.

Explanation for Differences In ABWR Specification Relative to Draft ITS The ABWR ECCS network consists of 3 compli tely separate divisions of injection capability, with ~

each division having both a high pressure and a low pressure injection subsystem. Each division can be powered from its own dedicated emergency diesel generator. There is also an ADS system.

Overall, the ABWR ECCS has greater redundancy when compared with past designs because of its 3 independent divisions and its increased high pressure capability. ABWR ECC3 capability is also improved because of the elimination of the external recirculation loops and thsir associated spectrum of potential breaks. The ECCS LCO has thus been developed to reflect the imprcved ABWR performance. The AOTs for situations where there are 1,2 and in some cases 3. subsystems out of service have been extended accordingly. However, with 2 or 3 subsystems out special sensitivity has been given to combinations that result in reduced divisional redundancy. This approach is intended to provide any necessary operating flexibility that might be anticipated without having to resort to overly complicated specifications. Similarly, for simplicity, the ADS requirements have been specifieJ relatively independently from the injection sub;ystems. However, for the case with multiple ADS valves out the increased importance of high pressure injection capability has been reflected.

i 1

!L 3,6 CONTAINMENT SYSTEMS 3.6.2.3 Residual Heat Removal (RHR) Suppression Pool Cooling LCO 3.6.2.3 Three RHR Suppression Pool Cooling subsystems shall be OPERABLE.

APPLICABlUTY: MODES 1,2, and 3.

ACTICNS CONDmON REQUIREDACTION COMPLETION TIME A One RHR suppression pool A.1 Restore RHR suppression 30 days cooling subsystem inoperable, pool cooling subsystem to OPERABLE status.

B, Two RHR suppression pool B.1 Restore one RHR suppression 7dhs cooling subsystems inoperable. pool cooling subsystem to OPERABLE status.

C. Three RHR Suppression Pool C.1 Restore one RHR suppression 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Cooling subsystems inoperable. pool cooling subsystern to OPERABLE statt.s.

D. Required Action and associated D.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A, g B or C not met.

D.2 Be in MODE 4 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMENTS SURVEluANCE FRECUENCY SR 3.6.2.3.1 Verify each RHR Suppression Pool Cooling manual, 31 days automatic, or power operated valve not locked, sealed or otherwise secured in position,-is in its correct position or can be aligned to its correct position.

SR 3.6.2.3.2 Demonstrate each RHR oump develops a flow rate in accordance with 24200 gpm through the associated RHR heat the Inservice exchanger while operating in the Suppression Pool Testing Program, Cooling modo, or 92 days 9

Explanation for Dl!!erences in ABWR Specification Relative to Draft ITS The ABWR differs from BWR/6 only in that all three RHR subsystems have heat exchangers such that each loop is capable of operating in the suppression pool cooling mode. This extra redundancy results in a higher overall level of capability and reliability for the containment heat removal function, Additionally, the RHR heat exchanger is in the loop providing heat removal capability in all normal modes of operation, including after automatic initiation in response to a LOCA signal.

Thus, even in the post LOCA core flooding modo containment heat is being removed via the RHR beat exchangers, For ABWR, having a single subsystem inoperab;e does not present as severe a problem as having one of two loops out in currently operating plants Consequently, although the LCO tor ABWR requires that the suppression pool cooling function of all three subsystems be OPERABLE (as opposed to just two) during applicable MODES, the Completion Time for the initial subsystem out of service has been accordir: gly extended, l

s 1

i v

f.

,c 4 4 ,

3.7- PLANT SYSTEMS 3.7.1 Ultimate HeaLSink (UHS)] [ NOTE: The UHS is a Site Specific item)

LCO 3.7.1 The UHS shall be OPERABLE.

APPLICABILITY: MODES 1, 2, aad 3.

ACTIONS CONDITION REOUIREDACTION COMPLETION TIME -

A The UHS is inoperable. A.1 Restore the UHS to OPERABLE 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months status.

.CB A.2 Declare the associated RCW/RSW 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months subsystem (s) inoperable.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREOUEFCY SR 3.7.1.1 Verify the UHS water levelis ? [that equivalent to a volume 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months representing a 30 day supply).

SR 3.7.1.2 Verify the UHS water temperature is s 95 F. 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

[SR 3.7.1.3 Operate each UHS active component for 215 minutes, 31 daysl

Explanation for ~ Differences 'in ABWR Specification Relative to Draft ITS L The UHS LCO for ABWR has been separated from the service water LCO for simplicity as it is site specific and the exact details of the specification wil have to be supplied by the applicant referencing the ABWR SSAR. There is not intended to be any difference in the Tech Spec requirements for the ABWR UHS as compared to thase included in the ITS. Basically, if the UHS is inoperable, the affected RCW/RSW subsystem (s) must be declared inoperable. Tho site specific specification may also need to

! address dagraded UHS conditions that do not require that the UHS be immediately declared inoperable.

l+

l

- 3.7 PLANT SYSTEMS

3. 7.2 . Reactor BuildiDQ Coolina Water (RCW) and Reactor Buildina Service Water (RSW) Systems LCO 3.7.2 The Divisions 1,2, and 3 RCW and RSW subsystems shall be OPERABLE.

APPLICABILITY: MODES 1,2, and 3.

' ACTIONS CONDITION REQUIREDACTION COMPLETION TIME A........ NOTE---- A.1 ------NOTE-.---.....

Each of the three subsystems 1. Enter applicable Conditions and may be in this Condition Required Actionsof LCO concurrently. 3.6.2.3 for RHR Suppression Pool Cooling made inoperable One RCW pump, one RSW pump by inoperable RCW/RSW.

and'or one RCW/RSW heat 2. Provisions of LCO 3.0.4 are not exchanger inoperable.in the applicable.

same subsystem. --- -- ---- - -- -

Restore the inoperable RCW/RSW 30 days component (s) to OPERABLE status.

G A.2 Declare affected RCW/RSW 30 days subsystem inoperable.

. B. - One RCW/RSW subsystem B.1 -----NOTE..--------

inoperable for reasons other 1. Enter applicable Conditions and than Condition A. Required Actions of LCO 3.8.1 for Diesei Generators made inoperable by inoperable RCW/RSW.

2. Enter applicable Conditions t.nd Required Actions of LCO 3.5.1 for ECCS made inoperable by laoperable RCWiRSW.

3. Enter applicable Coneitions and i

Required Actionsof LCO l 3.6.2.3 for RHR Suppression l

Pool Cooling made inoperable by inoperable RCW/RSW.

4. Enter applicable Conditions and Required Actions of LCO 3.4.9 foi RHR Shutdown Cooling made l

l inoperable by RCW/RSW.

L ............ ........... ,

Restore the inoperable RCW/RSW 7 days subsystem to OPERABLE status.

l 0

e a, CONDITION REQUIRED ACTION COMPLETION TIME C.- Two RCV!/RCW Divisions C.1 Restore one inoperable RCWiRSW 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months inoperable for reasons other subsystem to OPERABLE status, than Condition A.

D. Required Action and associated 0.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A, B or C not met. E D.2 Be in MODE 4. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEILLANCE REQUIREMEN1S SURVEILLANCE FREQUENCY SR 3.7.2.1 Verify water level in the RSW pump well of the intake structure 14 days is2[ ] feet.

12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months when pump well level is s [ ] feet.

SR 3.7.2.2 Verify for each required RCW/RSW subsystem each manual, 31 days powor operated or automatic valve in RCW/RSW llow paths servicing safety related systems or components not locked, sealed or otherwise secured in position is in its correct position.

SR 3.7.2.3 Verify each RCW/RSW subsystem actuates and/or reconfigures 18 months to the safety related mode of operation on an actual or simulated initiation signal.

Explanation for Differences in ABWR Cpecification Relative to Draft ITS This LCO is not intended to be oifferent in function from that contained in the ITS, but has been modifed to reflect the ABWR design. In ABWR, all safety rr: ad cooling is performed by an intermediate cooling water loop, the RCW system. The RCW system in turn is cooled by the RSW system which then rejects the heat to the UHS. The combined RCW/RSW system also removes heat during normal operation. There are 3 divslonal RCW subsystems, each cooled by an associated divisional RSW subsystem. Each RCW subsystem contains 2 pumps in para!lel and 3 heat exchangers in parallel. Each RSW subsystem contains 2 pumps in parallel circulate water fro the UHS through the 3 parallel RCW heat exchangers and back to the UHS.

During normat operation each combined RCW/RSW subsystem is in operation but with one of each component in standby. During DBA condiditons all components are put in operation. However, only the containment cooling function (i.e. suppression pool cooling) requires a full compliment of components.

-Other design basis accident mitigation features will fully perform their intended function even when serviced by a RCW/RSW subsystem that has some parallel components out of semice. Thus, this slightly degraded state is allowed for a limited time. However, support system operability requirements will assure that tne appropriate actions are taken for those systems relying on a fully functional RCW/RSW subsystem. Each RCW/RSW su~osystem also requires an OPERABLE UHS in order to be OPERABLE.

However, because the UHS is a site specific item for ABWR, its requirements have been segregated into a r separate specification in order to facillitate its downstream application as part of a site specific subrnittal.

/2

^ 3,8' ELECTRICAL POWER SYSTEMS 3,8,1 A.C. Sources Ooerating LCO 3.3.1 The following A.C. Electrical Power Sources shall be OPERABLE:

' A Two circuits between the offsite transmission network and the onsite Ct!tss 1E Distribution System, and B. Three diesel generators (DGs).

APPLICABILITY: MODES 1i2, and 3.

ACTIONS CONDITION REOU1REDACTION COMPLETION TIME A . One of the required circuits A,1 Perform SR 3.8.1.1 (offsite 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months from off-site inoperable. circuit check) for OPERABLE required offsite circuit. -

Once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter MQ A.2 Declare supported features with no 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months from offsite power available, associated discovery of no offsite with cross division failure, power to one divison inoperable. concurrent with cross division failure MQ A.3.1 Restore required offsite circuit to 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months OPERABLE status.

G A.3.2.1 Verify onsite combustion turbine 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months is available and capable of being g align 6d to each of the three essential AC buses Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months thereafter MQ

.A.3.2.2 Restore required offsite circut to 14 davs OPERABLE status.

-*. 4' .-

CONDITION ~ REQUIREDACTIOtI COMPLETION TIME B/--.--NOTE....--- B.I Perform SR 3.8.1.1 (offsite 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Required Actions B.3.1 or B.3.2 -circuit check) for OPERADLE g shall be completed if this required offsite circuit.

Condition is entered. Once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter One required diesel generator E (DG) inoperable.

B.2 Declare supported features. 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months from associated with cross divsion discovery of Condition failure, inoperable. B concurrent with cross division failure S

B.3.1 Determine OPERABLE DGs are not 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months inoperable due to common cause failure.

L 2 ,

l B.3.2 Perform SR 3.8.1.2 (DG start) for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months I

OPERA 3LE DGs.

B.4.1 Restore required DG to OPERABLE 14 days status.

G B.4.2.1 Verify onsite combustion turbine 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months

! is available and capable of being l aligned to the associated essential E L AC bus Once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months l thereafter

[-: y l- -

B.4.2.2 Restore required offsite circuit to 14 davs OPERABLE status.

l:

I

/1

c, 4 * ,

CONDITION REQUIREDACTION COMPLETlON TIME C. Two required offsite circuits C.1 Declare supported features, 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from inoperable. associnted with cross divsion discovery of failure, inoperable. Condition C concurrent with cross division failuro M

C.2 Restore one required offsite 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months circuit to OPERABLE status.

D. One required offsite circuit D.1 -----.-NOTE- ----- --

Inoperable. Enter Applicable Conditions and Required Actions for Deenergized E AC Distribution Subeystem, LCO One required DG inoperable. 3.8.9.

Restore required offsite circuit to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status, G

D.2 Restore required DG to OPERABLE 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months status.

E. Two required DGs inoperable. E.1 Restore one required DG to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months OPERABLE status.

F. Required Action and associated F.! Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A, B, C, D or E not met.

RE!

F.2 Be in MODE 4. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months G Three or more required AC G.1 Enter LCO 3.0.3. Immediately sources inoperable. ,

a 1

/S 1 1

o 4 ,. ,

SURVEILLANCE REOUIREMENTS SURVEILLANCE FREOUENCY SR 3.8.1.1 Verify correct breaker alignment and indicated power - 7 days availability for each required off site circult.

SR 3.8.1.2 -

.-----.-NOTES------ -

As specified by Table

1. Performance of SR 3.8.1.8 satisfies this surveillance. 3.8.1 1

2. All diesel generator starts may be preceded by an engine prelube period, warmup procedures and gradually loaded as recommended by the manufacturer.

Verify each DG starts from standby conditions and achieves steady state voltage and frequency:

A 2 6210 V and s 7590 V; and B. 2 58.8 and s 61.2 Hz.

SR 3.8.1.3 ------.---.----------NOTES---------------- As specified by Table 3.8,1-1

1. DG loadings may include gradualloading as recommended by the manufacturer.

2. Momentary transients outside the load range do not invalidate this test,

3. - This SR shall be conducted on only one DG at a time.

4. This SR shall be performed prior to DG shutdown following a successful performance of SR 3.8.1.2 or SR 3.8.1.8. ,

Verify each DG is synchonized and loaded and operates for a 60 minutes at a load of:

A 2[ . ] kW and [ } kW for Diesel Generator A.

B. 2 [ ] kW and [ ] kW for Diesel Generator B.

C. 2 [ ] kW and [ ] kW for Diesel Generator C.

SR - 3.8.1.4 Verify pressure in required air-start receivers 2. [ ] psig. 31 days SR 3.8.1.5 Verify each fuel day tank [and engine mounted fuel tank) contains 31 days 2 i ) gal of fuel-SR 3.8.1.6 Chock for and remove accumulated water from each day tank [and 31 days engine mounted tank]. ,

SR 3.8.1.7 Verily the fuel transfer operates to [ automatically] transfer 92 days fuel from storage tank [s] to the day tank [and engine mounted tankl.

l l

/b

.'\ '.

~

SURVEILI.ANCE FREQUENDf SR 3.8,1.8 ' -----.--.-NOTES--------------- 184 days All DG starts may be preceded by an engine prelube perk 4.

Verify each DG starts from standby condition and achieves in s 13 seconds, voltage and frequency:

A. 2 6210 V and s 7590 V; and B. > 58.8 and s 61.2 Hz. _

SR .3.8.1.9 Verify [ automatic / manual]_ transfer of [ unit power supply] 18 months from the [ normal circuit to each required alternate off site circuit and between the required attemate off site] circuits.

SR 3 1.10 Verify each DG rejects a load 2 [ ] kW for [ Division 1,2 and 3] 18 months DGs and:

a. Following load rejection , the frequency is s [ ] Hz; and

b. Within [ ] seconds following lot.d rejection, the voltags is 2

[ } V and s [ ] V; and '

c. Within [ } secor.ds following load rejection, the frequency is 2[ ] Hz mid s [ -] Hz.

SR 3.8.1.11 Verify each DG does not trip and voltage is maintained s [ ]V 18 months during and following a load rejection of 2 [ ] kW and 5 [ ]

kW for [Divisins 1,2 and 3] DGs.

SR 3.8.1.12 ---------NOTES----------- 18 months All DG starts may be preceded by an engine prelube period. '

Verify on an actual or simulated loss of offsite power signal:

A. Deenergization of emergency buses; B. Load shedding from emergency buses; and .

C. DG auto starts froni standby condition and:

1. energizes permanently connected loads in s [13]

seconds;

2. energizes auto-connected shutdown loads through

[ automatic load sequencer];

3. maintains steady state voltage 2 [6210] V and s [7590]

V;

4. maintains steady state frequancy 2 {58.8) Hz and s

-[61.2] Hz; and

5. supplies permanently and auto-connected shutdown loads for a [5] minutes.

/1

I

., s ,

SURVEILLANCE FREQUENCY SR 3.8.1.13 -------------NOTES---- 18 months All DG starts may be preceded by an engine prolube period and warmup procedures as recommended by the manufactutor.

Verify on an actual or simulated ECCS initiation signal each DG auto starts from standby condition and:

A In s [13) seconds after auto start and during tests, achieves and maintains voitage 2 [6210] V and s [7590) V; B. In s [13] seconds after auto start and d'Jring tests,. achieves and maintains frequency 2 [58.8] Hz and s [61.2) Hz; C Oparates for 2. [5] minutes; D. Permanently connected loads remain energized from the offsita power system; and E. Emergency loads are energized [or auto connected through the automatic load sequencer]to the offsitu power system.

SR 3.8.1.14 Verify eacg DG% automatic trips are bypassed on [ actual or 18 months simulated loss of voltage signal on the emergency bus concurrent with an actual or simulated ECCS initiation signal) except:

A Engine overspecd; B Generator differential current; and C Low lubo oil pre:,sure.

SR 3.8.1.15 - - - - - ---.----NOTES---------- - [- - 18 months Momentary transients outside the load range do not invalidate this test.

Venfy ech DG [ operating at a power factor of s [ ] for Divisions 1,2 and 3 DG3] operatestor 2 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

A During the first [2] hours loaded 2 [ ] kW and s [ ]

kW for [Divisins 1,2 and 3) DGs; and B. During the remaining [22] hours loaded 2 [ ] kW and 5 [

} kW for [Divisins 1,2 and 3) DGs.

/f

. j , y, SURVEtLLANCE FREOUENCY

- SR 3.8.1.16 .---- -. --.- -NOTES------------. 18 months

1. This surveillance shall bo performed within 5 minutes of shutting down the DG after the DG has operated 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at a load of 2 [ ] kW and s [ ] kW for [Divisins 1,2 and 3] DGs. Momentary transients outside the load range do not invalidate this test.

2. All DG starts may be preceded by prelube procedures as recommended by the manufacturer.

Verify each DG starts and achieves in s [13] seconds, voltage and frequency:

A 2 6210 V and s 7590 V: and B. 2 58.8 and <; 61.2 Hz. '

SR 3.8.1.17 Verify each DG: 18 months A, Synchronizes with offsite power source while loaded with emergency loads upon a simulated restoration of off site power; B. Transfers loads to the off site power source; and C. Returns to ready-to load operation.

SR 3.8.1.18 Verify with a DG operating in test mode and connected to its bus, 18 months an actual or simulated ECCS initiation signal overrides the test mode by:

A Returning DG to reacy-to-load operation; and B. Automatically energizing the emergency load with offsite power.

- SR 3.8.1.19 Verify interval between each load block is within i[10% of 18 months design interval] for each [ load sequence timer].

l /9

s ',

S'JRVEILLANCE FREQUENCY SR 3.8.1.20 -----------NOTES--------------- 18 months All DG starts may be preceded by prelube period procedures as recommended by the manuf acturer.

Verify on an actual or simulated loss of offsite power signal in conjunction with an actual or simulated ECCS initiation signal:

A. Deenergization of emergency buses; B. Load shedding from emergency buses; and C DG auto-starts from a standby condition and:

1. Energizes permanently connected loads in s [13]

seconds.

2. Enotgizes auto-connected shutdown loads through [ load sequencer).

3. maintains steady state voltage 2 [6210] V and s [7590)

V;

4. maintains steady state frequency 2 [58.8] Hz and s

[61.2] Hz; and

5. supplies permanently connected and auto-connected emergency !oads for a [5] minutes.

SR 3.8.1.01 ---------------NOTES--------- ---

10 years All DG starts may be preceded by prelube period procedures as recommended by the manufacturer.

Verify when started simultaneously from standby condition, the

[ Division 1,2 and 3] DGs each achieve in s [13] seccnds voltage and frequency:

A. 2 6210 V and s 7590 V; and B. 2 58.8 and s 61.2 Hz.

20

- .. _~ . . _ . . - . - -__ - ..

q7 Table 3A1:1 (Page 1 of 1)

Diesel GeneratorIctl Schedule NUMBER OF FAILURES IN LAST 25 VAllD 1ESTS (a) FREQUENCY s3 31 days a4 7 days (b)

(but no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months )

(a) Criteria for determining number of valid failures and valid tests shall be in accordance with Regulatory Position C.2.1 of Regulatory Guide 1.9, Revision 3, where the number of tests is determined on a per DG basis.

(b) This test frequency shall be maintained until seven consecutive failure free starts from standby conditions and load run demands have been performed. This is consistent with Regulatory Position [ -), of Regulatory Guide 1.9, Revision 3. If subsequent to the seven failure-tree tests one or more additional failures occur such that there are again four or more failures in the last 25 tests, the testing interval shall again be reduced as noted above and maintained until seven consecutive failure free tests have been performed.

[Noto: If Revision 3 of Regulatory Guide 1.9 is not appreved, the above table will be l

modified to be consistent with the existing version of Regulatory Guide 1,108, GL 84-15, or other approved version.

' Explanati ~

. Differences in ABWR Specification Relative to Draft ITS The ABWR ign includes 3 compMtels indeperent NCd divisions, each with its own emergency DG, Thus, the A h., AC power system is similar to that for BWR/6, except that each division is essentially -

identical, Tnus, this LCO is khended to closely approximate the ITS, However, in the ABWR each of the -

3 divisions is capaL of safely shutting down the plant under accident conditions. Because of this

_ increased capSility, selected AC power source AOTs for ABWR have been lengthened. Additionally, the ASWR design includes an onsite combustion turbine that can be aligned to, and has sufficient capacity to 1 power, any of the essential AC buses. Thus, an option has been included to extend the AOT for conditions L where either a single offsite AC source or a single onsite DG is cut of service, provided the availability -

of the onsite combustion turbine as a backup source can be verified.

-Surveillance requirements for DG fuel and lubricating oil have been intentionaily omitted from this:

specification at the present time, pending outcome of the ITS effort regarding their location (i.e. in a sparate specification or as part of this one). Such requirements are applicable to the ABWR DGs and are intended to be included as is appropriate consistent with the final iTS product. The issues of support system operability and cross divisional failure have been partially addrcssed to indicate their applicability for ABWR. The way in which these issues are fully reflected in the ABWR specifications

~will be consistent with the final outcome of the ITS program.

o

1, .

3.8 ELECTRICAL POWER SYSTEMS 3.8.4 D.C. Sources Operating LCO 3.8.4 The Divisions 1,2,3 and 4 DC electrical power subsystems shall be OPERABLE.

APPLICABILITY: MODES 1,2, and 3.

ACTIONS CONDITION REQUIREDACTK)N COMPLETION TIME A. Division 4 DC electrical power A.I Restore Division 4 DC electrical 30 days subsystem inoperable. power subsystem to OPERABLE status B. Division 1,2 or 3 DC electrical B.I Restore Division 1,2 and 3 DC 7 days power subsystem inoperable, electrical power subsystems to OPERABLE status.

Cs Two DC electrical power C.I Restore one inoperable DC 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months subsystems inoperable, electrical power subsystem to OPERABLE status.

D. Three or more DC electrical D.I Be in MODE 3. 12 houis power subsystems inoperable, g D.2 Be in MODE 4. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months Required Action and associated Completion Time of Condition A, B or C not met.

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.4.1 Verify battery terrninal voltage is 2 [129] V on float charge. 7 days -

SR 3.8.4.2 Verify no visible corrosion at terminals or connectors. 92 days G

Verify connection resistance is [s 150 x 10 6) ohms for

[ inter-cell, inter-rack, inter-tier and terminal connections)

SR 3.8.4.3 Verify cells, cell plates and battery racks show no visual 18 months indication of physical damage or abnormal deterioration, SR 3.8.4.4 Verify cell.to cell and terminal connections are clean, tight, 18 months free of sisible corrosion, and coated with anti-corrosion material.

SR 3.8.4.5 Verify connection resistance is [s 150 x 10 -6) ohms foi 18 months

-[ inter. cell, inter-rack, inter-tier and terminal connections]

SR 3.8.4.6 Verify each required battery char 0er will supply 2 500 18 months amperes for Div slons 1,2, and 3, and 2 200 amperes fer Division 4, at 2 [125] V for 218) hours.

SR 3.8.4.7 ....-....-......... NOTE.-...--......---..-- 18 months SR 3.8.4.8 may be performed in lieu of SR 3.8.4.7 once per 60 months.

Verify battery capacity is adequate to supply, and maintain in i OPERABLE status, the required emergency loadd for the design j duty cycle whsn subjected to a battery service test.

SR 3.8.4.8 Verify battery capacity is 2 [80%) of the manufacturer's ratirg 60 months when subjected to a performance discharge test. g L ....-NOTE..-----

Only app!icable when battery shows degradation or has l reached (85%) of the l expected life.

l , ,

j 12 months I"

> 9

- - - . . _- . - -_ .- - .- . . ~ . . - .- . - . - - _ . - .

10

., . 6

+ .

Explanallon for Differences In ABWR Specification Relative to Drail ITS For ABWR the DC electrical power system differs primarily in the number of redundant divisions employed. However, the function and physical characteristics of each DC division are essentially the same as past designs. The ABWR has 4 DC divisions whereas current plants typically have only 2 or 3 depending on tne vi'.tage of the plant. Addlionally, the ABWR design typically utilizes a more independent and seperate design between and within each division.

Each DC divisional bus feeds instruments and controls of that same division. Each such bus is energized by either a divisional AC bus fed thru a battery charger on float, or by a backup battery bank. A dedicated divisional battery bank exists for each DC division. However, because there are only 3 seperate divisions of AC power, only the Divisions 1,2 and 3 of the DC system battery chargers are fed from dedicated AC divisions. The division 4 battery charger is fed via the Division 1 AC system. However, the Division for 4 DC system is less critical because of its more limited role in actuating safety related functions.

Complete loss of any one of the DC divisions will affect all divisional 2 out to 4 logic trains, effectively making them either 2 out of 3 or 1 out of 3 logic, depending on the direction of the failure, and whether or not divisonal bypasses are activated. Thus, at the intrument trip level virtually all l&C systems could be effected. However, at_the divisonal equipment actuation level such a loss would only affect that division. For the most part this relates to the ECCS function. For example, if Division 2 DC is lost, both the RPS and the ECCS initiation logic could be affected for all divisions. However, assuming the other divisions continue to function properly, only the Division 2 ECCS equipment actuation would be potentially affected. Therefore, since Division 4 DC power does not feed or control any major mechanical components or systems, its' loss is not as critical and, relative to the loss of one of the other DC divisions, a longer AOT is justified.

The requirements regarding battery electrolyte have been intentionally omitted from this specification at the present time, pending outcome of the ITS effort regarding their location (i.e. in a sparate specification or as part of this one). Such requirements are applicable to the ABWR DC sources and are intended to be included as is appropriate.

f I

o I

l l

i

l l

i a . I 3.B ELECTRICAL POWER SYSTEMS :

3.8.6 D.C. Sources . Shutdown LCO 3.8.5 Three of the DMslons 1,2. 0 and 4 DC electrical power subsystems shall be OPERABL E. f

! APLICABILITY: MODES 4 and 5, !

When handling ifradiated fuelin the secondary containment. !

i ACTO 4S CONDITION REQUIREDACTK)N COMPLETION TIME l A. LocS than the required D.C. A.I SusperdCORE ALTERATIONS Immediately electrical power subsystems OPERABLE.

hNQ A.2 .......... NOTE..-...... Immediately Provisions of LCO 3.0.3 are not applicable. .

Sucpond handling of irradiated fuel in the secondary containmont.

6LQ A.3 Suspend operations with a As soon as practicable ,

potential for draining the reactor ;

vessel.

bUQ A.4 Restore at least three D.C. As soon as practicable

! electrical power subsystems to OPERABLE status.

SURVEILLANCE REOU!REMENTS SURVEILLANCE FREOUDCY SR 3.8.5.1 Perform SR 3 8.4.1 through SR 3.8.4'.B According to applicable-SR3 for the required equipment. ,

l l

.]$

< . o o t

. Explanallon for Dillerences in ADWR Specification Relaftvo 10 Orall ITS

The key difference between the ABWR and past designs with regard to DC power systems is the number of f divisions employed. Th ABWR has 4 divisions of DC power to supply power to the 2 out of 4 logic employed in its safety protor. lion systems. Because the divisioreal bgic will revert to 2 out of 3 logic with the loss of a single division c,f power, and becauro this configuration has su!!icient reliability under shutdown conditions, only ? of tho 4 DC divslon't nned be OPERABLE during shutdown. Of course,if one of tht,4 DC divisions is out of service, there may bo some impact on supported systems and equipment.

However, during shutdown conditions loss of this equipment is required to be OPERABLE so that this i

situation is not of concern. Generic support system operability requirements will assure that DC power is availablo 10 those systams that need it during these conditions.

t d

, e

, e .

3.8 ELECTRICAL POWER SYSTEMS 3.8.7 invertern Opciaung LCO 3.8.7 The Division 1,2,3 and 4 inverters shall bo OPERABLE.

APPLICABILITY MODES 1,2, and 3 ACTO 4S CCNDITION REQUIRED ACTION CO*APLETION TIME A One of the Division 1,2,3 or 4 A.1 Vorily associated AC vital bus is 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months invertors inoperablo, powered from its Class 1E constant voltage source transformer.

l@

A.2.1 Rostore Division 1,2,3 and 4 7 days inverters to OPERABLE status.

G A.2.2 Declare affected equipment 7 days inocorable.

B Two of the Division 1,2,3 or 4 B.1 Verity associated AC vital buses 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months inverters inoperablo, are powered from their respective Class 1E constant voltago source transformers.

LM

,, B.2 Resbre one inoperable inverter to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months OPERABLE status.

C. Required Action and associated C.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Timo of Condition A or B not mot.

(M C.2 Bo in MODE 4 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months s

P

SURVEILLN4CE REQU!REMEM 3 SURVElLIANCE FfEGECY SR 3.8.7.1 Votify correct inverter voltage [and frequency), and alignment 7 days to required AC vital bus.

Explanation for Oltforences In ABWR Spotificallon Relative to Draft ITS The ABWR inverters are the same as those h previous BWRs. Because there are 4 divslons of instrument logic in ABWR there are also 4 divisiona! inverters, With the increased divisional roduncy of the AGWR logic, loss of a single divisionalinverter is not nearly as critical. Thus, for the caso el a single invertor inoperablo, a longer timo frame is allowed for its restoration. Additionally, if the invertw cannot be restored an option had been added to declare the affected equipment inoperable in lieu of entry into Condition C and consequently a shutdown. This is acceptable for ABWR u!nco 3 divisions of instrument channel logic is an acceptable condition for a limited time.

n

. - . . - . - - . - - - - - _ . . - . - - - . . - . . - - - - . . - . . = . . _ _ . - _ , . -

o u ,

3.8 ELECTRICAL POWER SYSTEMS 3.8.9 Distribution Systems . Qoeratina LCO 3.8.9 Division 1, 2. and 3 AC electrical power distribution subsystems and Division 1, 2,3 and 4 DC [and Vital bus) electrical power distribution subsystems shall be OPERABLE.

APPLICABILITY: MODES 1,2, and 3.

ACT.Ot43 CONDITION REQUIREDACTION COMPLETlON TIME A Divi $lon 1,2 or 3 AC electricai A.1 Restore Division 1,2, cnd 3 AC 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months power distribution subsystem electrical power distribution inoperable. subsystems to OPERABLE status.

G A.2 Declare affected equipment 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months inoperable.

B. Division 1,2,3 or 4 DC B,1 Restore Division 1,2,3 and 4 DC 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months ,

electrical power distribution electrical power distribution subsystem inoperable. subsystems to OPERABLE status.

2 B.2 Declare affected equipment 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months inoperable.

C. Required Action and associated C.1 Be in MODE 3. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Completion Time of Condition A or B not mot. ,

itEl C.2 Be in MODE 4. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months SURVEll.U\NCE FREQUENCY SR 3.8.9.1 Verify correct breaker alignment and voltage to required AC and 7 days DC electrical power distribution subsystems.

i l Explanation for Dillerences in ABWR Specificallon Relative to Draft ITS L

The intent of this specification is the same for ABWR. It has been modified to reilect the number of AC and DC divisions in the ABWR design. Furthermore, because of the increased divisional separation and dedication within the ABWR design, this specification has been simplified in order to acknowledge support system relationships, and implement the associated requirements, in a more straight forward manner.

- . - - - - - - -- _ - . - _. - . - -

ML20094D209

Text

Navigation menu

Search