ML20091G856
| ML20091G856 | |
| Person / Time | |
|---|---|
| Site: | Three Mile Island  |
| Issue date: | 05/31/1984 |
| From: | Baxter T GENERAL PUBLIC UTILITIES CORP., SHAW, PITTMAN, POTTS & TROWBRIDGE |
| To: | Office of Nuclear Reactor Regulation |
| References | |
| NUDOCS 8406040386 | |
| Download: ML20091G856 (24) | |
Text
-
Ibdbh6 00CMETED 094RC May 31, 1984
'8,1 ff -4 A11 :10 UNITED STATES OF AMERICA NUCLEAR REGULATORY COMMISSION BEFORE THE DIRECTOR OF NUCLEAR REACTOR REGULATION In the Matter of )
)
GPU NUCLEAR CORPORATION ) Docket No. 50-289
(Three Mile Island Nuclear )
Station, Unit No. 1) )
LICENSEE'S AMENDED RESPONSE TO UNION OF CONCERNED SCIENTISTS' PETITION FOR SHOW CAUSE CONCERNING TMI-l EMERGENCY FEEDWATER SYSTEM On January 20, 1984, the Union of Concerncd Scientists filed a Petition for Show Cause Concerning TMI-l Emergency Feedwater System. . Licensee filed its response to the UCS peti-tion on February 24, 1984, and subsequently filed amended responses on March 26, April 26 and May 16, 1984. This fourth amendment is necessary to reflect additional factual develop-ments which have occurred since the last amendment.
In the original and previous revisions of the "GPU Nuclear Technical Response to Union of Concerned Scientists' Petition for Show Cause Concerning TMI-l Emergency Feedwater System,"
Licensee's discussion of the environmental qualification issues has included the~ statement (at page 4) that "[t]he environ-mental qualification of the.TMI-l EFW system under 10 C.F.R. S 50.49 will be completed by June, 1984 . . .".
e406o4o386 840531 ? #
PDR ADOCK 05000289 PDR O) fL .t G
=: -
,e l
4 Since the last revision, however, Licensee has concluded, based on its further review, that the terminations on the EFW i
pump motors have not been documented as qualified for the Main Steam Line Break environment. Consequently, Licensee is in the process of redoing the connections with qualified terminations.
This work will be accomplished in, but not prior to, June, 1984. Accordingly, the enclosed Revised Technical Response clarifles the schedule for completing the environmental quali-fication of the EFW system.
A new reference is also added to page 4 to reflect Licens-ee's responses to the Staff's more recent findings from envi-ronmental qualification audits.
Respectfully submitted, SHAW, PITTMAN, POTTS & TROWBRIDGE
- , - _
- _ = . r Thomas A. Baxter, P.C.
1800 M Street, N.W.
Washington, D.C. 20036 (202) 822-1090 Counsel for Licensee l
Dated: May 31, 1984 f
Attachment REVISION #4 (May 31, 1984)
GPU NUCLEAR TECHNICAL RESPONSE TO UNION OF CONCERNED SCIENTISTS' PETITION FOR SHOW'CAUSE CONCERNING TMI-1 EMERGENCY FEEDWATER SYSTEM I. Introduction The UCS Petition describes what UCS alleges to be defi-ciencies in the Emergency Feedwater (EFW) System at TMI-1 as it will be configured at the time of plant restart and throughout Cycle 5 operation. Each of the alleged deficiencies is addressed below. While the UCS Petition concentrates on per-ceived shortcomings in the EFW system, these allegations should not be weighed in a vacuum, but rather should be assessed with an understanding of the capabilities of the EFW system and the substantial improvements made to the qualification and reliability of that system since the accident at TMI-2. In brief, Licensee has already implemented the following modifica-tions to the EFW system:
. safety-grade automatic starting of the EFW pumps;
. control of EFW independent of the ICS;
. condensate storage tank-low-level alarm;
. safety-grade steam generator level indica-tions, independent of the ICS;
. redundant two-hour air supply in the event of a loss of.all AC power; '
. . EFW flow control valves' failure mode modified to fail open on loss of instrument air;
. addition'of flow-limiting cavitating venturis in each EFW line; and
. safety-grade EFW. flow indication. R.3 The additional modifications which will be undertaken dur-ing the Cycle 6' refueling outage will result in a-fully .
safety-grade:EFW' system. Contrary 1to UCS's assertion-that:
w s;.
N- - ~.] . -, ,_ _ 'l
O Licensee admitted, in our August 23, 1983 submittal, that the "EFW system needs to be upgraded" in order to provide increased reliability to mitigate design basis accidents (UCS Petition at 4, emphasis added), Licensee's submittal was merely noting the
" purpose" of the additional, long-term modifications. (Ref.
2.) Licensee stands by its original position that the TMI-1 EFW system is sufficiently reliable to allow operation during Cycle 5, pending completion of the long-term modifications.
II. Environmental Qualification UCS alleges that the TMI-1 EFW system is not environ-mentally qualified, and begins the discussion in its petition on this point with a reference to General Design Criterion 4 of i ' Appendix A to 10 C.F.R. Part 50. As relevant background for this and other references in the UCS Petition to the General Design Criteria, the Staff's finding associated with the issu-ance of the TMI-1 operating license is quoted:
The Three Mile Island Unit 1 plant was de-signed and constructed to meet the intent of the AEC's General Design Criteria, as originally pro-posed in July 1967. Construction of the plant was about_60% complete and the Final Safety Analysis Report (ESAR) had been filed as Amendment 12 with the Commission before publication of the revised General Design Criteria in February 1971 and the present version of the criteria in July 1971. As a result, we did not require the applicant to reanalyze the plant on the basis of the revised criteria. However, our technical review did as-sess the plant against the General Design Design Criteria now in effect and we conclude-that the plant design conforms to the intent of these newer criteria. (Ref. 1 at 3-1.)
With' respect-to_ safety-related electrical equipment, the i NRC has been pursuing environmental qualification (i.e., com-pliance_With GDC-4) on a generic. basis first through'IE Bulle-tin 179-01B, and now through its regulation on environmental
! qualification of electric equipment important to safety for nu-clear power plants, 10 C.F.R. 5.50.49, which-first became effective June-30,1 1982. Pursuant to section 50.49, TMI-l is to achieve final' environmental qualification.of the electric equipment within the scope of that section by March 31, 1985.
- The EFW system has been included in the overall evaluation of TMI-1 under these generic programs.
Focusing upon a steam line break outside of containment, UCS states ". . . GPU recognizes that the TMI-l EFW system is
, .g-b -A ..u.
not qualified for the hostile environmental conditions result-ing from a main steam line break." UCS Petition at 6. What GPU in fact stated in the reference cited by UCS, which de-scribes long-term modifications to the system, is that:
Equipment which is part of the EFW system or which is required to act in support of this system and which is located in the Intermediate Building, shall either be upgraded to be qualified for the hostile environmental conditions resulting from a Main Steam Line Break (MSLB) in this building or be replaced with qualified equipment or be relocated to an environmentally accestable loca-tion which is otherwise suitable for their safety function. (Ref. 2, Enclosure at 11.)
While UCS asserts that ". . . several pipes carrying steam or high temperature water are located in the Intermediate Building . . .", UCS Petition at 6, the qualification program has utilized two specific main steam line breaks (24 inch and 12 inch), which produce the most severe environment for elec-trical equipment. Other breaks in the feedwater lines produce a much less severe environment and are not the basis for quali-fication.
The implications for the EFW system of a high energy line
, break in the Intermediate Building were recognized in the orig-inal licensing of TMI-1. As a result of an analysis of the consequences of all the postulated breaks in the Intermediate Building, utilizing criteria and guidelines provided by the Staff, corrective actions were identified. These included shielding of the EFW suction line and installation of addition-al piping restraints to prevent pipe whip damage and the fail-ure of a line connected to one steam generator from causing the failure of a line connected to the other steam generator. In addition, a.significantly augmented inservice inspection of critical welds was instituted for the postulated break loca-tions. The Gtaff's conclusion was stated as follows:
LThe staff _has evaluated the assessment per-formed by the applicant and has concluded that the applicant has analyzed the facilities in a manner l consistent with the criteria and guidelines pro-l vided by the staff. The staff agrees with the l
. applicant's_ selection of pipe failure locations and concludes that all required accident situa-tions have been addressed appropriately by the applicant. Furthermore, the staff has evaluated
! the locations where increased inservice inspection
! is proposed in lieu of plant modification and we r ; find this. justified'and acceptable. (Ref. 1 at 10-7.)-
m
. . - ~-
's - : ,
L <
r I
- c. ,
b.
The. augmented inservice inspection program for the Main Steam
- system is incorporated in the TMI-1 operating license (No.
i DPR-50, Technical Specification 4.15).
f
.The harsh environment in the Intermediate Building follow-ing-a main steam line break is being addressed in the review
'for TMI-l under IE Bulletin 79-01B and section 50.49. UCS ar-gues that.the current status is not known of EFW system compo-i nents for which the Technical Evaluation Report (TER) concluded that environmental' qualification had not been established, and
- 'that "it is known that many vital components in the TMI-1 EFW remain incapable of functioning properly during a steam line break." UCS Petition at 7, 8.
j 'As UCS and the Staff are aware, the deficiencies identi-L' fled in the Franklin Research Center TER on TMI-1, dated November 5, 1982,.were predominantly based on the uncertainty by Franklin Research Center as to whether Licensee had adequate documentation,to demonstrate the qualification of the identi-
- fied equipment (although Franklin had not requested the docu- a
. mentation). The purpose of the October 5, 1983 meeting with the Staff was not to achieve final resolution of the TER deficiencies, as UCS implies, but to discuss Franklin's con-l .cerns. (UCS also inaccurately represents the. December 16, 1983 meeting. Licensee discussed 120 equipment deficiencies, not 120 types of equipment having deficiencies. The 120 .
deficiencies address the entire plant'and not.just the EFW sys-1-
tem -- the focus of the UCS Petition.) There is'no equipment
, at TMI-1 classified by the NRC in the category II.b, " EQUIPMENT NOT' QUALIFIED.". (Ref. 3, TER at 4-3.)~ As discussed below, e
some. equipment is. classified category II.a, " EQUIPMENT QUALIFI-
. CATION NOT ESTABLISHED." -
e . While UCS may not be aware of the current status of the specific ~ components identified in its petition,. Licensee docu- R.1
.mentedithe, resolution of outstanding, qualification items in P letters to the Staff ~of: February lO and.22, 1984,.and May 7,.10 R.3,4 andi31, 1984 (Refs. 4, 24,.27,.28, 29).and by the-Revised Tech-e nical. Response'. The environmental qualification of the TMI-l
- :EFW system under-10 C.F.R. 550.49lwill be completed in June,
'1984, including replacement of the~ Bailey E/P Converters'for
- nthefEFW control valves'with qualified.I/P: Converters. -( Licens- - R.1
- 1eef has Leontinued :to work: onfimproving the schedule for this .
- - . modification, which had'been set for the Cycle;6 refueling out-- -
~"
Jage, and'has:now determined that=it will-beLeompleted by. June,.
~
-1984.)1 lThis' revision ~is to clarify-thatithe~ connections for the Enf pump ~ motors will:be replaced with. qualified connections
~
, R.4
- . during, June, 1984,anot prior to. June,~1984. Thus, .' the.. environ-F
. mentalC qualification _~of the ' TMI- l EFW system . poses no-undue - R.1 srisk'tocthe public health andLsafety:and does not' provide'an q~
, ; appropriate ~ basis for the UCS< Petition. .
?
I^ ,
e'-
'- I y e su -
w-:
~
- ;(-
> - ~- -r P. -v -w ~
~ ~
+ 7
~ . . . . ~~ .
III. Seismic Qualification The seismicity analysis for the licensing of TMI-1 indi-cated that the Pennsylvania area is relatively inactive seismically, based upon 200 years of historical data and 40 years of instrumental data. The TMI site is characterized by infrequent earthquakes of low intensity. This low intensity corresponds to a ground acceleration of 0.04g. (Ref. 5, sec-tion 2.8.) The Seismic I portion of TMI-1 was designed to withstand a ground acceleration of 0.12g acting horizontally for the Safe Shutdown Earthquake (SSE) condition (Ref. 5, sec-tion 5.1.2), which exceeds the 0.lg specified ground accelera-tion of Appendix A to 10 C.F.R. Part 100. Consequently, the portions of the TMI-l EFW system that are Seismic Category I are designed to more severe criteria than NRC regulations re-quire. Mechanical portions of the EFW system that are not now Seismic Category I are designed to the requirements of ANSI B31.1, " Power Piping." Fossil power plants and conventional portions of nuclear power plants designed to this standard have exhibited significant seismic resistance. (Refs. 6, 7; Ref. 8 at 2.)
It is clear that while Staff guidance for seismic qualifi-cation of PWR auxiliary feedwater systems has been evolving over a long-period of time, the evaluation to determine how to backfit seismic requirements to earlier plants has not resulted in the imposition of specific seismic requirements. (Ref. 9.)
In its information request of February 10, 1981 (Ref. 8), the Staff stated:
Although we are not at this time requesting that the.AFW System be modified to be in con-formance with the facility design seismic requirements, we have stated that our plan is to increase the seismic resistance, where necessary, to ultimately provide reasonable assurance that:the. system will function after the occurrence of earthquakes up to and including the-SSE.
~
Licensee has made numerous submittals of information to-the Staff. L in response to - Generic Letter 81-14, on the seismic qualification of the TMI-1 EFW system. The Staff's contractor,
-Lawrence Livermore National Laboratory (LLNL), has reviewed these responses and:1ssued Technical Evaluation Reports dated October'29, 1982'and July 7,:1983. While the~first TER identi-
.fied. deficiencies in Licensee's responses, LLNL concluded in its second TER that, with the actions taken and planned by Licensee (i.e., the long-term EFW modifications detailed in Reference 2), the TMI-1 EFWEsystem will be fully qualified to-Seismic. Category I at the next refueling outage (prior to-start
-- d.
up for Cycle 6 operation). Based upon this TER and its own evaluation of Cycle 5 operation, the Staff has concluded that there is reasonable assurance that the TMI-l EFW system will be able to withstand a SSE and perform its safety function. (Ref.
10.')
UCS challenges this conclusion, apparently, in its asser-
, tions that the TMI-l EFW system is not seismically qualified and that operation of TMI-l therefore would pose an undue risk to the health and safety of the public. As the assessment below will demonstrate, the UCS Petition is without technical merit and does not undermine the validity of the Staff's previ-ous safety evaluation.
A major fault in the UCS Petition is the extensive refer-ence, in the present tense, to findings in the first TER issued by LLNL, while virtually ignoring the second TER. UCS Petition at 9-15 (especially the list of "many vital components in the TMI-1 EFW system which are not environmentally qualified," UCS Petition at 10-11).
In'its final TER, LLNL concluded that the TMI-1 EFW system
, piping, valves, structures and power supplies possess a SSE I level of seismic capability, and that the initiation / control l
systam will possess such capability after the Cycle 6 refueling outage.
The available information, which provides reasonable as-surance that the EFW system will perform its safety function after a SSE,.and that has been ignored by the UCS Petition (at 10-11), includes:
- a. Recirculation lines of the EFW pumps. The TMI-1 Emergency Procedure for Earthquakes (1202-30) calls for closing of the Condensate Storage Tank B isolation valve-(CO-V-176) and the EFW pump recirculation isolation valves (EF-V20A/B and EF-V22) if the EFW pump recirculation lines are ruptured.
(Ref. 11, Item 1.) Licensee had originally planned to upgrade
( the supports for the EFW pump recirculation-line to-Seismic I R.3 during the Cycle 6 refueling outage, but has continued to work l on this modification during the current shutdown. Licensee will now complete _this modification prior to Restart.
- b. Portions of the EFW suction piping to the condenser L hotwell, for which there are no double isolation valves between the seismic Class I piping and the non-seismic Class-I piping.
Although TMI-l does not have a second isolation valve between
! SI/SIII piping to.the condenser hot well_for each line, the condensate storage system is single failure proof. 'There are two condensate storage tanks (CST) and Technical-Specifications
~
water. inventory in either tank is sufficient for safe shutdown.
l The common cross connect-between.the two condensate pipes m :
(containing CO-V14A/B) has two isolation valves (CO-Villa /B) and closure of either valve (CO-Villa /B) will ensure integrity of one CST inventory if one of the CO-V14A/B cannot be closed.
All of the valves involved (CO-V14A/B & CO-VlllA/B) are Seismic I and by the end of Cycle 6 refueling outage their routing (CO-V14A/B and CO-Villa /B) and power supplies (CO-Villa /B) will also be Seismic I. In the interim, manual operator action will ensure proper operation following a seismic event.
The TMI-l Emergency Procedure for Earthquake (1202-30) and relevant Alarm Response Procedures have been revised to in-struct the operator to isolate the damaged Condensate Storage Tank from the EFW system by closing valves CO-V14A/B and CO-V111A/B when tank level reaches the Tech Spec limit follow-ing EFW actuation, and following any recognizable seismic event (a seismic instrumentation alarm is available in the control room). (Ref. 12, TER Item 2.)
- c. EFW pumps' minimum flow valves (recirculation valves) i and their controlling flow switches and associated circuitry.
l The EFW pumps' minimum flow valves (EF-V8A/B/C) are seismically (Ref. 25.) The fact that their controlling flow qualified.
switches and circuitry are not seismically qualified has been
[ resolved by locking open EF-V8A/B/C. This will prevent.the possibility of dead heading the EFW pumps, and sufficient flow will still be available to the steam generators. (Refs. 18,
- 19.)
i
- d. Electro-pneumatic converters for the EFW flow control valves, EF-V-30A and EF-V-30B. The E/P Converters will be re-placed by June, 1984 with seismically qualified I/P Converters. R.1 A seismic event will not-result in a failure of the converters for the EFW flow control valves and thus sufficient flow will
- be established for the EFW system to perform its safety func-tion.
I
- e. Condensate storage tank low level alarms. The ac-tions described above in "a, b and c" will ensure sufficient inventory in the Condensate Storage Tanks and a sufficient flow path to the steam generators for the EFW system to-perform its safety function. (Ref. 11, Item 1.) Licensee has reviewed the failure modes in a seismic event for the condensate tank level instrumentation, (Ref. 11, Item 3.), and concluded that only in the event of a transmitter sensing line crimp (due to the transmitter falling) would the transmitter continue to read a static level. However the operator would note that no drawdown is-indicated and investigate the problem. It is incredible to assume that both transmitters would fail in this manner.
Therefore, at-least one transmitter is expected to be avail-able. ,
l o
i In the Restart proceeding, the Licensing Board recognized and explicitly endorsed for Cycle 5 operation the non-safety-grade CST low-low level alarms as adequate pending the instal-lation of safety-grade alarms during the Cycle 6 refueling out-age. LBP-81-59, 14 N.R.C. 1211, 1363-64, 1373 (11 1033, 1037, 1059). These low-low alarms use the same transmitter as the low level alarms.
- f. Circuitry for main steam dump isolation valves MS-V2A, MS-V2B, MS-V8A and MS-V8B. Since the EFW system safety function can be achieved with the motor driven EEW pumps with-out relying on the turbine driven pump, the circuitry for these valves is not essential and need not be seismically qualified.
(Ref. 10, TER at 5; Ref. 12, Item 7.)
- g. Circuitry for condensate storage tank isolation valves CO-V10A, CO-V10B, CO-V14A and CO-V14B. The only non-seismic parts of the circuitry for valves CO-V10A/B are the cable routing through the turbine building and the electric power supplies. CO-V10A/B are normally open and are not re-quired to change position for the system to become operational.
Valves CO-V10A/B are locked open now and there is no need to seismically qualify the circuitry for these valves. The only l non-seismic part of the controls for valves CO-V14A/B is the cable routing through the turbine building. CO-V14A/B are nor-mally open and are required to change position for the system to become operational if a pipe break occurs in the hotwell makeup piping. (Ref. 19.) Manual closing of CO-V14A/B is pro-vided as discussed above in "b".
- h. Circuitry for condensate storage tank cross connect valves CO-Villa and CO-V111B. The non-seismic parts of the circuitry for valves CO-V111B are the cable routing through the turbine building and the electric power supplies. CO-Villa /B are not required to change position for the system to become operational. (Ref. 19.) (See "b" above.)
- 1. Control. systems for the atmospheric relief valves MS-V4A and MS-V4B. These valves are within the seismic bound-ary and will maintain their structural integrity during a seismic event. However, the control of these valves is not as-L sential for safe hot shutdown and, therefore, the control sys-l tem need not be seismically qualified. These valves will re-main closed on loss of instrument air or loss of electrical
[ signal. The MSV-4A/B can be manually operated.
l i j. Vent stacks for both the main steam relief and l-atmospheric dump valves. UCS argues that "it is very likely
-that the operator will not be able to enter the Intermediate Building to isolate the leak following an earthquake because of
. steam released to the building by failure of equipment which is not seismically qualified" -- the vent stacks for.MS-V-22A/B and MS-V-4A/B valves. UCS Petition at 13.
The pressure control valve (MS-V6) upstream of valves MS-V22A/B was modified to limit its travel at 65% of stroke to protect the EFW pump turbine from overpressurization due to the failure _of any steam supply valve. This reduces the potential for opening of valves MS-V22A/B. In addition, these valves will not lift simply because a vent stack fails or the EFW tur-bine driven pump is started.
Licensee previously had evaluated the design of the vent stacks for these. valves and found that these vent stacks were classified non-seismic and were designed for dead weight and discharge loads only. However, the supporting scheme for the MS-V22's stacks was judged by inspection to be seismically acceptable. (Ref. 14, Question 1 of Enclosure 1; Ref. 15.)
Also, as noted in item "i" above, operation of MSV-4A/B is not required for safe hot shutdown and the failure mode of these valves is closed. Nevertheless, Licensee had originally planned to upgrade the supports for the MS-V4A/B and MS-V22A/B to Seismic I during the Cycle 6 refueling outage, but has con- R.3 tinued to work on these modifications during the current shut-down. Licensee will now complete this work prior to Restart.
Therefore, the EFW System components will be protected from a steam environment created by a postulated vent stack break and the operator will be able to function in the Intermediate Building.
- k. Main steam isolation valve circuitry. Circuitry for these valves (MSV-1A, B, C, D) is not essential for plant shut-down (since the EFW turbine driven pump is not needed) and need not be seismically qualified. (Ref. 10, TER at 5; Ref. 12, Item 9; Ref. 11, Item 9.)
Following the dated list which is evaluated above, the UCS Petition proceeds to criticize use of a " static analysis" to
- establish the seismic qualification of valves. UCS Petition at
- 11. The very Standard Review Plan passage quoted by UCS belies its claim that static analysis has been rejected by the NRC:
" Analysis without.. testing is acceptable if structural integrity alone can assure the intended function." UCS Petition at 12.
Further, the seismic analyses for the 47 EFW valves utilized as inputs accelerations which were determined from a dynamic anal-ysis of the EFW piping system -- using the response spectrum Lapproach specified in the Standard Review Plan. The valves'and their characteristics (i.e., center of gravity, weights and ge-ometry) were realistically included in the dynamic model of the piping system. The piping was analyzed considering the Op-erating Basis Earthquake, and the acceleration results were then doubled to account'for the SSE pursuant to the TMI-l FSAR.
This approach is conservative since the increase in damping of 4
the piping system during the SSE was not considered.
1 N-
+
8 M
The accelerations used to analyze the valves were gener-ated using a fully qualified, realistic, " state of the art" dy-namic analysis of the EFW piping system. The dynamic model has been checked during the TMI-1 review in response to IE Bulle-tins 79-02 and 79-14, which showed that the pipe routing sup-port locations and pipe support construction are consistent with the analysis.
The analyses applied the dynamic acceleration from the piping analysis to the valve internals, pressure boundaries and actuators in a static manner, along with other consequential loads. This approach is justified because the valve internals are sufficiently stiff to preclude dynamic amplification within the valve itself.
Here, stress analysis of the valves, considering accelera-tions derived from a dynamic analysis of the EFW piping system, reveals that the highest stress in the valves -- considering consequent loads due to the SSE, internal pressure and dead-weight -- ranges from 3 to 91 percent of the ASME Code allow-able stress values. (These ASME allowable stresses are based on a safety factor of at least four, considering the ultimate strength of the materials.) This means that both the structur-al integrity and operability of the valves are assured because the materials experience stresses and strains within their elastic limits. Consequently, deformations are small and tem-porary, such that the moving parts inside the valves and actuators are not affected. For all of these reasons, the
~ valve analyses are valid, t
As shown above, the TMI-1 EFW system has the capability to perform its safety function following a seismic event, coin-cident with loss of offsite power with a single failure of any active component. Even if the inventory from either one or both Condensate Storage Tanks is depleted due to the single failure of isolation valve CO-V14A or B, a secondary backup
. supply of river water is available from the. reactor building emergency cooling pumps -- an entirely seismic Class I supply, although establishment of this supply may require operator ac-tion in the Intermediate Building. (Ref. 14, Question 1 of En-closure 1, Enclosure 2 at 5.)
l UCS states that GPU apparently performed no evaluation of -
the potential effects of flooding the in,termediate Building from failure of the EFW system, and concludes that this is a
[ "significant omission." UCS Petition at 14. It might be if it L were true, but it.is not. Licensee has evaluated the conden- -
l sate piping from valves CO-V14A/B to the turbine building wall
! to determine if this piping will stay intact during an earth-quake. Seismic stress analysis of the condensate piping has ;
included the restraining capability of the supports in the non-seismic piping from the valves CO-V14A/B to the Turbine 6
O Building wall and into a portion of the piping that extends into the Turbine Building. These supports, which have a com-bined restraining capability in three directions, will result in low seismic stresses in the non-seismic part of the system.
If a pipe _ rupture is postulated beyond these supports, the
' break would be isolated and will not cause flooding in the In-termediate Building. Furthermore, there are no components vital to the EFW system which can be adversely affected by spray from a broken EFW pump recirculation line. (Ref. 11, Item 1.) Finally, the procedural action (discussed above) to isolate the recirculation line will limit the leakage rate through this small line and avoid a flooding problem.
With respect to a main feedwater .}.ine break, the time re-quired to jeopardize EFW equipment is p'resently 5.5 minutes, not 86 seconde -- UCS Petition at 15, n. 40. (Ref. 16.) How-ever, prior to restart, Licensee will have completed additional modifications which will extend to 25 minutes the time avail- R.2 able to_the operator to terminate flooding in the Intermediate Building before EFW components not qualified for submergence would be adversely affected. As describsd in Licensee's letter 5211 , dated June , 1984, from H.D. Hukill to ,R.2,4 J.F. Stolz, structural modifications to the Intermediate Build-i- ing which will provide more volume for the accumulation of flood water will be completed in June 1984. (Ref. 26.) This modification had previously been scheduled'for completion prior
, to-startup from the Cycle 6 refueling outage. (Ref. 2, Attach- R.2 ment at 5.). In addition, evaluation of the stress analysis for the main feedwater-lines from containment pen 3tration to the turbine building indicates that the maximum stress levels from 4
' combined operating and seismic conditions are at most 46.5 per- 1 R. 3 cent of the limits designated as the potential pipe rupture I stress level (B Feedwater line). (Ref. 5, Section 4.0 of Ap- l R.3,4
, pendix 14A.) The results of these stress analyses show that the non-seismic portion of the main feedwater lines inside the Intermediate Building has seismic resistance. Consequently, there is a low probability that a main feedwater line break would cause' flooding in the Intermediate Building following a seismic event.
+
. Finally, Licensee notes that UCS. repeatedly cites to the
-plans for further hardware modifications to the EFW system l- '(Ref. 2) as support forLthe proposition that the system is not
- seismically qualified, and asserts _that_GPU has~ concluded that at restart,the_TMI-l EFW system cannot withstand a' Safe Shut--
down-Earthquake. UCS Petitioncat 16. In contrast, it is.
Licennee's position.-that the TMI-1 EFW system at restart, con-sidering accomplished modifications and with the implementation of theiplan of procedural actions described above,.will be able to: perform its system function, in the unlikely event.it should
~
be1 called upon-to'do so following a design basis seismic event-during Cycle 5 operation.
s.
~,~~
~
N (i J .n .
IV. Single Component Failure UCS states that "[t]he TMI-l EFW system does not meet the single failure criterion because there is only a single flow control valve in the pipe used to deliver EFW to euch steam generator." UCS Petition at 19, 20. UCS does not address, however, the design modifications already accomplished which improve the reliability of the system.
The Main Steam Line Rupture Detection System (MSLRDS) sig-nals to the EFW control valves, EF-V30A/B, have been deleted to prevent unnecessary isolation of emergency feedwater under sin-gle failure conditions. In addition, a cavitating venturi in-stalled for each EFW line will limit flow to a ruptured steam generator to prevent containment overpressurization (or steam generator overfill condition), and will also ensure sufficient EFW flow to the intact steam generator. (Ref. 17.)
At restart, the arrangement of the EF-V30A/B conyrols will result in the valves failing open on either loss of instrument R.1 air or loss of control signal. Additionally, the EFW control valves are equipped with a handwheel which permits manual oper-ator action to establish flow to the intact steam generator.
When there is an initiation of the EFW system or failure of an EFW control valve, an auxiliary operator will be stationed at the control valves. (See TMI-l Abnormal Transient Procedure 1210-10.) The auxiliary operator will establish communications
. with the control room and will control the valves if EFW flow cannot be established from the control room.
Isolation of EFW flow, if required, to a ruptured steam generator can be achieved either by closing the affected EFW control valve or by closing the discharge header sectionalizing valves (EF-V2A/B), and then tripping the respective EFW pump.
UCS next states that "(ajnother way in which the EFW sys-tem does not meet the single failure criterion is that the EFW flow control valves are presently controlled by the Integrated i
Control System (ICS) which is not safety grade." UCS Petition at 20. The relationship between the EFW system and the ICS was
- considered extensively in the TMI-1. Restart proceeding. Pursu-l ant to Short-term action 1(b) of the Commission's August 9, j' 1979 Order and Notice of Hearing in that proceeding, Licensee has implemented automatic initiation of the EFW pumps indepen-dent of the ICS and, further, has provided separate manual EFW c flow control capability in the control room, which will allow
- the operators to manually control EFW flow to the steam genera-tors in the event of an ICS malfunction. The Licensing Board examined this issue and required no further modifications, E finding that the actions taken~provided a significant improve-L ' ment in safety. LBP-81-59, 14 N.R.C. 1211, 1285-86 (1 802),
.- -. - - . . . . - . = -- -- . . ~. -
To l
- , 1362'(1'1031)-(1981). The Appeal Board also evaluated the mat-l ter and considered ". . . the concerns regarding dependence on the,ICS for control of emergency feedwater to be resolved."
ALAB-729, 17 N.R.C. 814, 833-34 (1983).
In addition, Licensee notes that the ICS has a reliable, p uninterruptible, on-site power supply. It is normally fed from an' inverter which is powered from the "A" diesel backed 480 Volt AC bus. 1Gunn the 480 Volt bus is unavailable, the in-
, verter-takes its power directly from one of the DC station bat-F. teries. In-the unlikely event of an independent inverter fail-r ure,.the.ICS_ power supply will be switched to a regulating transformer which'is fed directly from the same 480 Volt AC bus. The independent manual control stations described in the
[ previous paragraph are powered from a different inverter which
- is backed up by a_ separate set of DC station batteries. In the
- event of an independent failure of this inverter, the power supply for the manual control stations automatically switches to an alternative source backed'by the "B" diesel generator.
t In summary, means are available during Cycle 5 operation to. prevent the EFW system from being disabled by a single com-ponent failure.
l V. Emergency Feedwater Flow Instrumentation UCS. attacks the adequacy of the new EFW flow indicators, alleging that the replacement of the unqualified sonic flow
. devices by/ differential-pressure (D/P) transmitters " amounts to a request foi exemption from-the short-term lessons learned
! requirement for safety grade EFW flow instruments." UCS Peti-
{ tion at 24. (UCS's complaints regarding the EFW flow indica- .
tors are currently pendingJbefore the Commission.in the Restart Lproceeding by virtue of UCS filings dated December 9,fl983 and January 6, 1984.)~--UCS here is patently wrong; as detailed in our submittal to"the Staff of August 25, 1983, the EFW flow in-
.strumentation meets all. applicable environmental,-seismic.and l 'other safety-grade criteria. (Ref. 20, Attachment at 1,-2).
p' UCS's/ complaints regarding the qualification of the EFW
. flow indicators rest upon :its : claim that this -instrumentation ;
- -does notL" meet-the 1 10% accuracyLrequirementLin effect during
.the restart hearing." .UCS Petition at 24. As Licensee re-i;
' ported,'atLlow-EFW flow conditions-(i.e.,-~below1approximately.
120.gpm)',Leavitation:of.the EFW flow control. valves ~(EEV-30's)
, duejto low. flow against negligible backpressure resulted~in in-
- . dicationsLof EFW flow oscillations-outside
- 1 10% of the flow L ' rate. (Ref.'21; Ref. 22,' Attachment at.-1). However,.recently) reported test data, requested by'the NRC (Ref. 23),. confirm' .
g .thatrat-flows lof 120 gpmfand above,-the flow oscillations _
- a I" [,' . ,
a g, >
..~m v-xx_y: n - M c~:-
=~ ~ -
- l l
recorded are within i 10% (e.g., at 200 gpm flow rate the os-cillations were 1 7.5% (15 gpm); at 600 gpm, the oscillations were 1 4.2% (25 gpm).) (Ref. 22, Attachment at 1.) (The os-cillations reported were measured on recorder traces. The EFW flow meter face contains 25 gpm graduations and thus these f
small_ oscillations combined with meter damping are not readable
, on the meter itself. (Ref. 22, Attachment at 1.)) Further, as discussed in Licensee's most recent submittal, operators are directed to refer to the EFW flow indicators only in limited
. circumstances (i.e., upon EFW actuation with steam generator (SG) level below the SG level setpoint) and, additionally, are instructed not to rely on EFW flow indication for flow control at rates below 225 gpm. (Ref. 22, Attachment at 2.) Thus, it is clear that the EFW flow indicators are sufficiently accurate to perform their intended function.
With respect to UCS's reliance on the 1 10% accuracy requirement, Licensee would merely note that (while this crite-rion was part of an interim clarification of lessons learned requirements dated October 30, 1979) Item II.E.1.2 of NUREG-0737, which sets forth the latest position and clarifica-
! tion for_EFW flow indication, contains no such set accuracy i requirement. (Moreover, the Licensing Board decision itself
! makes no reference to this i 10% accuracy requirement.
LBP-81-59, 14 N.R.C. 1211, 1362 (1 1029) (1981).) Rather, as
! recognized by UCS, NUREG-0737 merely referenced IEEE Standard i 279-1971 which states, in pertinent part, that the system de-sign basis shall document the " minimum performance requirements including . . . system accuracies." 'See "UCS Rebuttal to Licensee's Reply Regarding EFW Flow Instrumentation," (January 6, 1984) at 5, quoting IEEE 279-1971, 6 3(9). Licensee con-tends that its documentation of EFW flow indication accuracy meets this requirement and, moreover, that the earlier 1 10%
accuracy criterion is met at EFW flows of 120 gpm and above.
l VI. Main Steam Line Rupture Detection System l
~
UCS asserts that the Main Steam Line Rupture Detection System (MSLRDS) ".
~
. . is not safety grade and requires modifi-l cations so that a single failure will not prevent isolation of main feedwater to the steam generator affected-by a main steam
- line break." UCS Petition at 29. As UCS notes, the potential for inadvertent isolation'of feedwater was considered in the TMI-1 Restart proceeding as a part of'the emergency feedwater reliability issues. LBP-81-59, 14 N.R.C. 1211, 1373-74
-(11^1060-64) (1981). The Appeal' Board found that the' opera-tors' capability to bypass the MSLRDS and manually open the EFW flow control valves if the MSLRDS isolates feedwater inadver-tently is an adequate solution for restart. ALAB-729, 17
'N.R.C. 814,~834,-887-88 (1983). In an Order _(January 27,_1984) .
_ . ,, .l ; _ _ , - , . . _
- fe , .
4 uc -
issued'inLthe TMI-1 Restart proceeding after the UCS Petition was filed, the Commission called for comments on the adequacy of Licensee's. proposed solution to the MSLRDS " problem."
In. its submission of August 2, 1982 to the Staff, Licensee l
described the design changes to the MSLRDS to prevent unneces-
- sary isolation of emergency feedwater under single failure con-ditions. (Ref. 17.) In addition to those-changes, existing pressure switches inside containment for MSLRD (Static-O-Ring devices) will be replaced by June, 1984, with fully qualified 1 pressure. switches. (Ref. 4.) Therefore, in the event of a l > main steam line rupture in containment, the pressure switches will be capable of performing their intended function. All components of the MSLRDS located inside containment.will then
. .. be environmentally qualified. The following describes the MSLRD system configuration:
~
- 1. Each steam generator (S.G.) has.two outgoing steam lines, each line has two pressure switches for MSLRD.
- 2. Each S'.G.'has a_ parallel combination of startup and main FW control valves, and each control valve has a motor operated block
. valve upstream.
. 3. Upon MSLRD,;the FW is isolated from the af-E fected S.G. by closing its control valves and the block valves. Valve isolation logic is
- as follows
A. 'Startup and Main Control Valves (FW-V16A/B & FW-V17A/B):
4 (1) For isolation purposes, each valve is provided with two paths in-the pneumatic control circuit; however,
.only one path is required to 4
achieve isolation. ,
(2)' Each7 isolation path in the pneumat-
' .ic control circuit has two sole-noids. Each solenoid is energized tur a separate pressure' switch upon MSLRD. Both solenoids in either of.
the_ control paths must be energized
, for. isolation.
v _
'(3).;.Theisolenoids inLthe<same control f
! path are-powered from.the same
~
source but.the.two' paths receive' power from sep~arate sources, r
5 t -
s -
l ' '
.L . ~ . -
~ '
- -- r - ~- ~
l l
B. Block Valves:
(1) For Main FW Controls Valves l (FW-VSA/B):
Two pressure switches associated with either of the pneumatic con-trol paths (discussed in paragraph 3.A.2) must detect MSLR to cause a closure signal for the block valves. In this case, the isolation signals from RED & GREEN sources are tied together. Also the power for both the block valves is from the same source.
(2) For startup FW Control Valves (FW-V92A/B):
I Separate power sources are avail-able to the motor operators. A single failure will prevent block valve isolation, but the same fail-ure will not prevent control valve isolation.
- 4. On loss of instrument air, the control valves (FW-V16A/B and 17A/B) will fail closed which will result in FW isolation.
- 5. Electrical Separation. ~ Outside containment the MSLRDS circuits are not all routed in safety-related trays and therefore separation
. is not maintained throughout.
In conclusion, the MSLRDS is considered to be adequate from a. single failure standpoint -- that is, a single active failure-(such as a pressure switch, solenoid, control' relay, 125V CC power source) will not prevent isolation of feedwater and.will not-result in inadvertent isolation of feedwater. The MSLRDS is seismic Class I inside containment. Following a main steam line break in the reactor building the system will-func-tion to isolate feedwater from the affected steam generator
, since qualified pressure switches (for MSLRD) to be installed by June, 1984 will be suitable for the accident environment.
While electrical separation between the redundant circuits is not maintained outside containment,.since a few of them run in the.same trays / conduits, electrical separation outside contain-ment-is not required'for a main steam line break inside con-tainment. The MSLRDS, therefore,'is-adequate for operation until the fully safety grade modification is installed.
-p.
v - - ~
VII. Conclusion There is reasonable assurance that the emergency feedwater system at TMI-1, as modifled for restart and as augmented with plant procedures, will perfo its function i called upon to
, do so. .
i%
Richard F. Wilsori
~
Vice President-Technical Functions GPU Nuclear Corporation Sworn to and subscribed before me this J/u day of May, 1984.
An5 .
~
$1Lf6 Notary Public O ANNETTE M.L0flGo -
Notary Pubt:0 of New Jersey
, My commission expires MY C=* *
- 28 *7 .
9 8 1/,' .
1 4
.- +
4',,l .
g 9,,'
\;~i i
~.gr .f c.
,,'sr'I y
> ae 9
e i
- e i
l l
REFERENCES
- 1. Safety Evaluation by the Dire:torate of Licensing, U.S.
Atomic Energy Commission in the Matter of Metropolitan Edison Company, Jersey Central Power & Light Company, 1
Pennsylvania Electric Company, Three Mile Island Nuclear Station Unit 1, Dauphin County, Pennsylvania, Docket No.
50-289, July 11, 1973.
- 2. GPU Nuclear letter 5211-83-232 to NRC, Long Term EFW Mods (NUREG 0737 II.E.1.1), August 23, 1983.
- 3. Safety Evaluation Report by_the Office of Nuclear Reactor Regulation for GPU Nuclear Corporation, TMI-1, Docket No.
50-289, Environmental Qualification of Safety-Related Electric Equipment, December 10, 1982.
- 4. GPU Nuclear letter 5211-84-2038 to NRC, Environmental Qualification of Electrical Equipment, February 10, 1984.
- 5. GPU Nuclear, Final Safety Analysis Report (Updated Ver-sion), Three Mile Island Nuclear Station Unit 1.
- 6. USNRC NUREG-0766, Reconnaissance Report: Effects of November 8, 1980 Earthquake on Humboldt Bay Power Plant and Eureka, California Area.
- 7. USNRC NUREG/CR-1665, Equipment Response at the El Centro Steam Plant During the October 15, 1979 Imperial Valley Earthquake (October 1980).
- 8. USNRC Generic Letter No. 81-14 to All Operating Pressur-ized Water Reactor Licensees, Seismic Qualification of Auxiliary Feedwater Systems (February 10, 1981).
- 9. USNRC letter to All Operating Pressurized Water Reactor Licensees, Seismic Qualification of Auxiliary Feedwater Systems (October 21, 1980).
- 10. USNRC Safety Evaluation Report, Three Mile Island Unit 1, Seismic Qualification of the Auxiliary Feedwater System, August 12, 1983.
- 11. . Attachment 1 to GPU Nuclear letter 5211-83-040 to NRC, EFW Seismic Qualification, February 4, 1983.
- 12. GPU Nuclear letter 5211-82-301 to NRC, Emergency Feedwater System-Seismic, December 20, 1982.
. 13. GPU Nuclear letter 5211-83-133 to NRC, EFW Seismic Quali-fication,- May 2, 1983.
l t
e l
- 14. GPU Nuclear letter 5211-82-150 to NRC, Emergency Feedwater System-Seismic, July 7, 1982.
- 15. GPU Nuclear letter 5211-82-238 to NRC, Seismic Qualifica-tion of Emergency Feedwater System (EFW), September 29, 1982.
- 16. GPU Nuclear TDR-250, Rev. 1 (January 16, 1984), Review of Intermediate Building Flooding Following a Feedwater Line Break in the Intermediate Building of TMI Unit 1.
- 17. GPU Nuclear letter 5211-82-153 to NRC, Main Steam Line Rupture Detection System Changes, August 2, 1982.
- 18. GPU Nuclear letter 5211-83-055 to NRC, EFW Seismic Quali-fication Supplement, March 22, 1983.
- 19. GPU Nuclear letter 5211-82-018 to NRC, EFW Seismic Qualification-Electrical, February 16, 1982.
- 20. GPU Nuclear letter 5211-83-231 to NRC, EFW Flow Devices --
D/P Transmitters, August 25, 1983.
- 21. GPU Nuclear letter 5211-83-346 to NRC, EFW Flow Devices (D/P) Testing, November 23, 1983.
- 22. GPU Nuclear letter 5211-84-2032 to NRC, EFW Flow Instru-mentation, February 22, 1984.
- 23. USNRC letter to GPU Nuclear, January 18, 1984.
- 24. GPU Nuclear letter 5211-84-2044 to NRC, Environmental Qualification of Electrical Equipment, Supp. 1, February 22, 1984.
- 25. GPU Nuclear letter 5211-82-216 to NRC, Seismic Qualifica-tion of Emergency Feedwater System, September 14, 1982.
- 26. GPU Nuclear letter 5211 to NRC, Intermediate R.2 Building Flooding Modification, June , 1984. R.4
- 27. GPU Nuclear letter 5211-84-2110 to NRC, Environmental Qualification of Electrical Equipment, Supp. 3, May 7, R.3 1984.
- 28. GPU Nuclear-letter 5211-84-2114 to NRC, EFW System Envi-ronmental Qualification, May 10, 1984.
- 29. GPU Nuclear letter 5211-84-2122 to NRC, Environmental R.4 Qualification Audit, May 31, 1984.
May 31, 1984 UNITED STATES OF AMERICA NUCLEAR REGULATORY COMMISSION BEFORE THE DIRECTOR OF NUCLEAR REACTOR REGULATION In the Matter of ) Docket No. 50-289
GPU NUCLEAR CORPORATION )
)
(Three Mil.e Island Nuclear )
Station, Unit No. 1) )
CERTIFICATE OF SERVICE I hereby certify that copies of " Licensee's Amended Re-sponse to Union of Concerned Scientists' Petition for Show Cause Concerning TMI-l Emergency Feedwater System" and Revision 4 of "GPU Nuclear Technical Response to Union of Concerned Sci-entists' Petition for Show Cause Concerning TMI-l Emergency Feedwater System" were served this 31st day of May, 1984 by de-posit in the U.S. Mail, first class, postage prepaid, to all
~those on the attached Service List, except those marked with an asterisk which were served by hand delivery.
Thomas A. Baxter, P.C.
Dated: May 31, 1984 5
_ :-E - -- _ __ -
UNITED STATES OF AMERICA NUCLEAR REGULATORY COMMISSION In the Matter of )
)
METROPOLITAN EDISON COMPANY ) Docket No. 50-289
)
(Three Mile Island Nuclear )
Stetion, Unit No. 1) )
SERVICE LIST
- Lillian N. Cuoco, Esquire Gary J. Edles, Esquire Office of Executive Legal Director Chairman, Atomic Safety and Licensing U.S. Nuclear Regulatory Commission Appeal Board 4
Washington, D.C. 20555 U.S. Nuclear Regulatory Commission Washington, D.C. 20555
- Mr. James A. Van Vliet Office of Nuclear Reactor Dr. John H. Buck Regulation Atomic Safety and Licensing Appeal Washington, D.C. 20555 Board U.S. Nuclear Regulatory Commission Mr. Harold R. Denton Washington, D.C. 20555 Director Office of Nuclear Reactor Dr. Reginald L. Gotchy Regulation Atomic Safety and Licensing Appeal U.S. Nuclear Regulatory Commission Board Washington, D.C. 20555 U.S. Nuclear Regulatory Commission Washington, D.C. 20555 Chairman Nunzio J. Palladino U.S. Nuclear Regulatory Commission Ivan W. Smith, Esquire Washington, D.C. 20555 Chairman, Atomic Safety and Licensing Appeal Board Commissioner Victor Gilinsky U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Washington, D.C. 20555 Washington, D.C. ^20555 Sheldon J. Wolfe, Alternate Chairman Commissioner Thomas M. Roberts Atomic Safety and Licensing Board U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Washington, D.C. 20555 Washington, D.C. 20555 l Commissioner James K. Asslestine Mr. Gustave A. Linenberger, Jr.
U.S. Nuclear Regulatory Commission Atomic Safety and Licensing Board Washington, D.C. 20555 U.S. Nuclear Regulatory Commission Washington, D.C. 20555 Commissioner Frederick M. Bernthal U.S. Nuclear Regulatory Commission Richard J. Rawson, Esquire
. Washington, D.C. -20555 ' Office of Executive Legal Director U.S. Nuclear Regulatory Commission
- Docketing and Service Section Washington, D.C. 20555 Office of the Secretary U.S. Nuclear Regulatory-Commission Washington, D.C. 20555
3 IL' I m
e
'Maxine Woelfling, Esquire Marjorie M. Aamodt
~Acsistant Counsel-R. D. 5 D;partment of Environmental Coatesville, PA 19320 Resources 514-Executive House Steven C. Sholly
'Past Office Box -2357 Union of Concerned Scientists Harrisburg, PA 17120 Suite 1101 1346 Connecticut Avenue, N.W.
M3. Louise Bradford
.TMI ALERT' ANGRY /TMI PIRC
'1011 Green' Street 1037 Maclay Street Harrisburg, PA 17102 Harrisburg, PA 17103 Ellyn R. Weiss, Esquire Chauncey Kepford H2rmon, Weiss & Jordan Judith Johnsrud 2001 S Street, N.W., Suite 430 ECNP Washington, D.C.- 20009' 433 Orlando Avenue State College, PA 16801
-John A. Levin, Esquire A2sistant Counsel P&nnsylvania Public Utility Commission Post Office Box 3265 Harrisburg, PA. 17120 Y
T 9
" ^ * '
q . r -