ML20090M802
| ML20090M802 | |
| Person / Time | |
|---|---|
| Site: | Prairie Island  |
| Issue date: | 03/20/1992 |
| From: | NORTHERN STATES POWER CO. |
| To: | |
| Shared Package | |
| ML20090M798 | List: |
| References | |
| NUDOCS 9203250302 | |
| Download: ML20090M802 (46) | |
Text
-_
a
~
i l
l Exhibit B Prairie Island Nuclear Generating Plant License Amendment Request Dated March 20, 1992 Proposed Changes Marked Up On Existing Technical Specifications Pages Exhibit B consists of existing and new Technical Specifications pages with the propose I changes highlighted on those pages. The existing pages af fected by this License Amendment Request. are listed below:
TS-v TS.3.3-7 Table TS.3.5-1 Table TS.3.5 6 TS.3.7 1 TS.3.7-2
^;S.3.7-3 TS.4.5 2 TS.4.5.3 TS.4.6-1 15.4.6-2 B.3.3-3 B.3.5-2 B.3.5-3 B.3.5-4 B.3,5-5 B.3.7-1 B.4.6 1 I
9203250302 920320 PDR ADOCK 0S000282 P PDR
a i
l m I i
TS v >
l IASI.E OF CCNTENTS (Continggyl). '
TS SECTION IITL2 [ME_
4.0 SURVEILLANCE REQUIREMENTS TS.4.1 1 4.1 operational' Safety Review TS.4.1 1 -
'4.2 Inservice Inspection and Testing of Puu.ps and Valves Requirements TS.4.2-1 i A. Inspection Requirements TS.4.2 1
- B. Corrective Measures TS.4.2 2
-C.-Records TS.4.2 3 4.3 ' Primary Coolant System Pressure Isolation Valves TS,4.3-1 4.4 : Containment System Tests TS.4.4 1 A. Containment Leakage Tests TS.4.4 ?,
B. Emergency Charcoal Filter Systems TS.4.4-3 C. L Containment-Vacuum Breakers TS.4.4 4 ,
D. Residual-lleat Removal Systam. TS.4.4 4 E. Containment Isolation Valves TS.4.4 5
- F, Post Accident Containment Ventilation System TS.4.4-5 G. Containment and Shield-Building Air Temperature TS.4.4-5 li.. Containment Shell Temperature TS.4.4-5 ,
I. Electric ilydrogon Recombinere TS.4.4-5 4.5 Engincored Safety Features TS.4.5-1 .
_A.; System 1 Tests- TS.4.5 1- !
- 1 Safecy Injection Systen TS.4.5-1 12..Ccntainment SprayzSysten TS.4.5 .3. Containment Fan Coolors TS.4.5-2
. . L4. Component-Coaling 19atcr System TS.4.5-2 4
- 15. Cooling Vater System TS.4.5 2
-B. Component Testa- TS.4.5a33 ~ ,
1, Fumpa- -TS.4.5-33 2 Containment-Fan' Motors: TS.4.5 3
- 3. Valves TS.4.5-3
' 4 fr - Periodic = Testing of. Emergency : Power System. -TS.4.6-1
, -A Diesel Generators TS.4.6 1
-L. Station Gatteries TS.4.6 3 4
.C. Pressurizer Heater Emergency Power Supply TS.4,6-3=
4.7 Main. Steam Isolation Valves- TS.4.7-1 4
4.8 Steam and Power Conversion _ Systems- TS.4.8 1
.A. Auxiliary Feedwater System .
TS.4.8-1.
B. Steam Generator Power Operated Rellef valves TS.4.8-2
_C. Stenm Exclusion System TS.4.8-2 <
4.9L Reactivity' Anomalies
_ TS.4.9-1 4410 Radiation Environmental Monitoring Program TS.4.10-1 A. Samp1s Collection.and Analysis TS.4.10-1 B.' Land Use Census TS.4.10-2 C. Interlaboratory comparison Program TS.4.10-2 ;
4.11. -Radioactive Source Laakage Test TS.4.11 1 e-
) e + r - W v -
n, . . . . . ~ - - . - .
TS.3.3-7 3.3.D. Cooline Water _Syst ern I 1. A reactor shall not be made or maintained critical nor shall reactor coolant system average temperature exceed 200*F, unless the following conditions are satisfied (except as specified in 3,3.D.2 below).
- a. Tw>-dhe4%lr4wnToVoff tlie ' five cooling wat er pumps are OPERABIL,-
und?IfJbneld!esel drivenfcooling i water" pump Dis?inoperableXthen J121 pooling water pump shallib'aialigned aish'o wn iii the table below. _ All changes: ;.inithclyalvt pooiti6ns;:Lshall be ittndore- direct: administrative controit In6potabid Va.l g Alignahnt I Fower!Supplyfto .
Purep Bus 27.(W121 Cooling 1 Water Pump)
- 12 MV;320 W er: MV432036 closed: and
~
CFS1thi hssociated! BkrcLoc'keif0ff ~
Water Fuhil Bus :!25 MW32030,and'MV?32035Mpen;JandJ b6th"Bkrs Locked Off
- 22 C6o11ng MVf32034 thPassociat tov [hd4Bkr. Locked:OffMVi32035?cloisei!Fatid
, Wtor"LPump Bus 26 FVy32017[hnd1 MV- 32036?o pe n i ' ariil botipBkra iocked off L
l>r4wo- mo t+r--dr4wm-em44ng--wew+-t'uap-or+ opsd.6 ebb [Tso[Waf6guhrdsitrbv;e1i g ycresnslire?.0PERABLE{
hj;gsbleiolingua t e ri he aU6 t s'fa ri,0 P EIMB LE) p)%fas ti 0111 supply fo f f 19J 0003 ga11pnail s ?abailabl e; f6ri tneldiese13 driven hoolingpwater < pumpssint the6 interconnected EUnitdo#dienoldfist ? oil
~ oforagnitankt.i. j Note Lthat: the'19;000) gallonirequirementais : included in fthQO;000!giltori(total).dic pl:1fueltoil?requiremedtfof;Spectffcation 3 @ A150for0 Units 1!
2.. During STARTUP 0PERATION or POWER 0PERATION, the followin6 conditions of. .
inoperability may exist provided STARTUP OPERATION is discentinued until
, OPERABILITY is restored. If OPERABILITY is not restored within the time specified, be-in at least HOT SHUTDOWN within the next 6 houts and in COLD -
SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
a , - Orw ' ' -!>4aenTwo bf(the five cooling water pumps may be inoperable for 7 dayskith the following StipjtlatfonJ44oul-4ee4*+th-4Mel-dr4wn ew44 nywat+r-pwepa-du14ag--onys+mieeut4w4Nkty--por4od H. nwl4e4+
4 I
,..,~.c - ,
4 TS.3.3-7 (continued)
(1) the-et4+r%t4em4-elven-f. ump-ond-4+ewmeee4et+Lak eI geaoreter er+4PERA%E, 6-)----t4t e.--eng4 neovel---sa f c t y f e c tu ree-e asse4+tel-w kth-t4MPERA EE d4euel-dr4ven-cool 4ng-wat+r-pump c r - OPERAMA--en4 4)---he t4e-t**14*c f r em t-rweendenten-gr !d - t the-td ont. ' '" - f+guarde
- buwww+re4PERA%Sr (4) tu :::er --#4ver realh+3-watzer-pumpa-eh=M4e4FERA%Er
- b. On o f-the tu regul+ed--4mtee-hlvx ::a1 h:g unter ;wueiwy- -bo 4eeperable f-or icye-powide4-be+h-4teoel-dr4*en ccel h:g unt c: pt:pc
. are -0 PEP./,%Er I f 3hFTihopirsblifpdapM ars Ts6y ' rwolo f ' thy s e pp12. Cooling Wa t e r : Pap ,
- 221;CoolinglWaher i PumpJandj #121] C6olingi Wateri Pump, l thelj following conditionaishalljspplf; TlE$ th0E3N51iYe Arsdisa fe tpfTs s t6 f e s ?dsi6 cia ted @ithith sf O PERABLE safeguard @poolingjwater]pumplarej0PERABLE;jan_d (2 )Cbb th 7phtiFfr6iuy ttranpin tis's ioUnit!
bdsesiarsiMEMLEj;(applicab1Mt'o; n'"%1;l[operction;onlf) riWi t of)the (UnitT47 hand kVJ s a fe p gythis$sisditi6tisof Tinsperkb1111 tpT(i!e Mtwo?ssfissards": ptsps .
- Inoperable! Mitaul taneously)f finhyjnots (exceedM7;nd_ays? linnany
$hs@6t@e30; day / periods
- e ch], One of' the two required cooling water headers may be inoperable for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> provided:
(1)' the diesel-driven pump-and the diesel generator associated with safety features on the OPERABLE header are OPERABLE.
(2) the horitontal actor-driven pump associated with the OPERABLE header and the vertical motor-driven pump are OPERABLE.
dvdf One of the Safeguards Travelir.g Screens may _ be inoperable for 90 days provided a sluice Bate connecting - the Emergency Bay and the Cire Water Bay is open ((xcept during periods of testing not to exceed 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />) ev'd7 Both Safeguards Traveling Screens may be inoperable for. 7 days provided a sluice gate connecting the Emerger :y Bay and the Cire Water Bay is_open.
E d.! The Emergency Cooling Water line from the Mississippi River way be inoperable for 7 days provided that a sluice gate connecting the Emergency Bay and the Cire Uater Bay is open.
6 .[ ' i , .} !!;li .j'! 6 .it> , ii [ *<li'l:! !;
m$ o ev u v. . 2 mbJC 7 w Cm N 2
d ., .
e.
s-3 .,.
i-, ,
0 -- l 6c a
% s2 ;c. c 5 eut,. e i J s %. r_ r 3 7 c,- 5 f t c
2 g 5 5. -
?
1 2 5. .
1 l e
~0.0: ~.
't 1
6 Q
- 7. :t 1,,.
^
i 1l 5
i.
f e) 1
'S L.
v U 8 8- 7 4 'o t i
nn oU f ;, -
S t r T e s.
eo N e1 lf s
I -t pi O ms
\
P Ta. v oe T Ed E
di. c l a
S e l' s'0-., %
e nr eg .
G i4
- 6 .,.
5l 5 3 5
ep wu (0 o:,
N S 1 2 2 t -
T l
I T N
^
t j
1 t, -.
1 es I I :i_
.,. 1 ' . bd i
i 5. . i r 7
) M O i r 0 : '
a r a d I P U 9 3 0 t,.
7 4; -
irgu e L :
u T 1.,
n N E :- ee tf i O S na 6.
t I e n i - s n
(
o c
T A
T N
G N
I T
r c 0 1
t m5 2 e
c
? i ha el 2 1 ' 2 t c E I t ? i- i 1 M M 5
- 1 n r,
- U 0 d ^
5 R T
M 9 E g a
5 5 ' a 2 i t, ll c
3 S t 2' e N l S I 1
6
)
l
) 't e
? il T
N v a nf E O r n -
Uol L
) e i i B
I T
- . l a
d nr m :dp A
- i r o e hic A e n U n n ai T I g ,i n t
- a m g % y t y 1' e I t o t ( a ( n [l N l n 1 2s., t l ! t p I o ,
i e e e V % yC4: e c g D g D i m no i
r d
( a av J
' a a yc i
e l lr, t e t e l '
t e e e? f l m ? m hr r d g D D, e o i e A a a i
t e S r t e "o ;-
- n..
V T f
' T oc
- b a L g l m s -. e D
E E
N D e
V o i i-.
T T>. L e
4 2
{cd)l.
s R N E A fn E H . a N C a b di I e2 G dl N it E vi on r U.,
s pf e jr s n yf eo so a ui T
Bt a
fgs I sr td N d o i r na U rt og
? as pp L
A ue gR te; u N e O f e ss I
T ag 'g dr S a C t na N Vl iu U K o t g F 4V is kf i a
. Ls 0
i:I ij2 1 '
4 j: .4il; :i ; i : j
}i .;i; ;4ii:.
< ! a4 (
h TABLE TS.3.5-6 -
INSTRUMENT OPERATING CONDITIONS FOR AUXILIARY ELECTRICAL SYSTEM ,
1 -2 3 4 f
, ' MINIMUM MINIMUM PERMISSIBLE OPERATOR ACTION IF- !
OPERABLE DEGREE OF- BYPASS CONDITIONS OF COLUMN FUNCTIONAL UNIT CHANNELS REDUNDANCY CONDITIONS 1 OR 2 CANNOT BE MET i v
- 1. Degraded Voltage 4-/-Be 4;4Be ---
Place inoperable channel in the 4KV Safeguards Busses 3/ Bus; 2/ bus tripped condition within one hour i or be in hot shut.down.*** l
} 2. -
' cec of -^1: age 4 ,tB e 44w I c r -apara' '
c2 !- the 4A1 refcgun-d a r:ppr r = dirir- >!thir cr- ' awe g _. t . m p ._ , e g g s )- r t-
- .. . 3 3. 7 ,
b.
ce of 'citaan 4,he W 4t44eepacal,4c c'-~! i-
^-
% f a g=rd tr!pp: > 'i ;i- - it'i- - - - ' '- r R= (55 4 'r bc '- '-t -
r': t d r=+ **
, UndsrVoltags .5/ Sus 2/ Bus -F Place ~linoperableichanneF inTche
~4KVfSafeguards]. Busses tripped; condition within"one; hour or be?In-hog shtcdown.***
~
s C
r w
3 s-
. m.
c v.
v.
6 m
- If minimum conditions are not cet within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, steps shall be taken to place the unit in cold
- shutdown conditions.
TS.3.7-1
~3.7 AUXILIARY ELECTRICAL SYSTEPS app 11.23hil.iu Applies to the availability of electrical power for the operation of plant auxiliaries.
Objectives To define those conditions cf electrical power availability necessary to assure safe reactor operation and continuing availability of engineered safeguards., '
Speci ficetten ,
A. A reactor shall not be made or maintained critical nor shall reactor
- 1-coolant system average temperature exceed 200* F unless all of tne following requirements'are satisfied for the applicable unit (except as specified in 3.7.B below):
- 1. At'least two separar.e paths from the transmission grid to thc34* W unllt 4 kV safeguards distribution system each capable of providinb adequato power.to minimum t,afety related equipment, shall be OPEP.ABLE.
2, The 4 kV safeguards buses 15 and 16 (Unit 2 buses: 25 and 26) shall he l energized,
- 3. The 480 V safeguards buses 110 and 120 (Unit 2 buses:-.4L10 . :d 220F211) 212C221[ ands 222), and their safeguards motor control centers shall"be energined, j; 4. Reactor protection. instrument AC buses shall be energized: 111, 112, L 113 and 114 (Unit.2 buses: 211, 212, 213 and'214).
l S . D1 ced-D2 diccel gece-rate:wme-4PEPJ. ELE, and c fuel cu@>f--7bOOO j .gallen; ia ..v 11 ble'1- th: I n t or oenweted-stea age--t4mke-for- - t4w- 41eeel-l geter-a+ere- and-the-44e.+1-4&c r e ci r.g unter- punp c .
EjlTh%76M)MIMsunip3pWifipfc6hditionsypulg
~
(a)UUditMF JD1?sndOD2Tldiss61?gshsfathis"Kre! OPERABLE flandhi?fdsl Tsiipp 1F? o f?51 ; OOW ge 11 ons ?i s i availabls t for i the t DIEsndtD2 Tilih s si l,
sb nerh A6 rs 11nidS Wnit S181dt$ rconnec t A M diese is fus N%1lfs borage cdhkii, j Aftistd1E !deifsspplyh6fN.0.0001 sallonsjiissMlab el f' ort ths DliAddkD2fd14se19 5 eneratMst!andTelieYdiesuMiriWnscoblingwitkr
@jgsj {thhlUpt31[intirhMpect(hdJdfMMueQ611[jf terage- i:5nkA? l p.gwares. Ds:sarrsgatasirgrasereassam.orsaamasarescael
.-4 .
lD5! add?Ii6Tdie'sel fpne$a to rs @p!Ne[Up@2Mn ta rconjec tiAfdidS Q fue_1@ lis t$fdss T-Enkhi
TS,3.7-1 (continued) 6.-Both batteries with their associated chargers and both d-c safeguard systerns shall be OPERABLE,
- 7. No more than one of the Instrument AC Panelo 111, 112, 113 and 114 (Unit 2 panels: 211, 212, 213 and 214) shall be powered frem Panel 117 (Unit 2 panel: 217) or it s associated instrument inverter bypass source.
4 o
N ~..
i n
4( .
f
t TS.3.7 2 3.7.B. During STARTUP OPERATION or POWER OPERATION, any of the following I conditions of inoperability may exist for the times specified, provided STARTUP OPERATION is discontinued until OPERABILITY is restored. If OPERABILITY is not restored within the time specified, place the affected unit (s) in at least 110T SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and be in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
- 1. One diesel generator may be inoperable for 7 days (total for both diesel generators during any consecutive 30 day period) provided (a) the OPERABILITY of the other diesel generator is demonstrated
- by performance of surveillance requirement A.6.A.1.c within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> **, (b) all engineered safety features equipment associated _
with the operatle diesel generator is OPERABLE, (c) the two required paths from tue grid to the-plant' unit 4 kV safeguards distribut!cn system aro OPERABLE and (d) ^the ' OPERABILITY of the two required paths from the grid shall be verified OPERABLE within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.
c
- 2. One of the two required paths from the grid to the-plant unit 4 kV safeguarde distribution system may be inoperable for 7 days provided (a) D1 and D2 (Unit'2: D5 Land D6) diesel generators are E already operating or are demonstrated to be OPERABLE by sequentially performing surveillance requirement 4.6. A.l .e on each diesel generator within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> and (b) the OPERABLE path from the grid shall be verified OPERABLE vi. thin 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.
- 3. One of the two required paths from the grid to the-planCiunft 4 kV safeguards distribution system and one diesel generator may be ino; arable for 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> provided, (a) the OPERABILITY of the other diesel generator is demonstrated
- by performance of Surveillance .
Requirement 4.6.A.l.e within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> **, (b) all engineered safety
) features equipment associated with the OPERABLE diesel generator is OELRALLE, and (c) the OPERABLI path from the grid sball be verified OPERABLE within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> >
thereafter.
K
- 4. Both of the two required paths from the grid to the-y?onfunit 4 kV safeguards distribution system may be inoperable for 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> provided the D1 and 2 ;(Unit 2: .L05fandfD6)fdiasel generators are already operating or are demonstrated te be OPERABLE by sequentially performing Surveillance requirement 4.6.A.l.e on each diesel generator within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
- The OPERABILITY of the other diesel generator need not be demonstrated if the diesel generator inoperability was due tc preplanned preventative maintenance or testing.
- This test is required to be completed regardless of when the inrperable diesel generator is restored to OPERABILITY.
- _ _ . _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _._m_______.______________._____-._m_ _ . _ _ _ _ _ _ _ _ _ _
I l
J T5.3.7 3 3,7.B.S.D1.andD2;(Uiift[2 ICD 5%ndlD6)]dieselgeneratorsmaybeinoperable for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> provided the two required paths from the grid to the plant $initi 4 kV safeguards distribution system are OPERABLE and the OPERABILITY of the two required paths from the grid are verified OPERABLE within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />,
- 6. One 4 kV safeguards bus (and its associated 480 V bus (Usit 2': i kuss;ppfincluding associated safeguards motor vontrol censersi~or one ;
480 V safegunrds bus _ including associated safeguards motor control l
. centers may be inoperable oor not fully energized for 8 hcurs provided ]
'4t-e-+edundant oc=terper-e-441the'ie3OndantE4'kV[enfeguaVds' bus' *and iSMssuaiatedM8_0Msafegdards3bu_s1(Ubic[2i ])useA)?are verified ~
OPERABLE-and the diesel generator and safeguards equipment associated with 4-te-eount+rpar(th@sdduilantipairi are OPERABLE. ;
i 7.-One battery charger may be_ inoperable for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> provided, (a).its associated battery is OPERABLE, (b) its redundant' counterpart is ;
verified.0PERABII. and (c) the diesel generator and safeguards equipment associated with its counterpart are OPERABLE.
- 8. Lone battery;may be inoperable for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> provided that the other battery _and both battery chargers remain OPERABLE.
- 9. In addition to the requirements of Specification.TS.3,7.A.7 a second inverter supplying Instrument AC Panels 111, 112, 113, and 114 may
-(Unit 2 panels 211, 212, 213 and 214) be powered from an inverter bypass (source for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
L t
t 4 e,---a + a er -s.,e ,, a- a ,-- .e w, eeN ,-or,~ , ow-s n --,-s, - 43
_. - -. . _. . -- - . . . - . - . - _ - . . - - . - ~ . . _ _ ~ . - -.- . .
Y t
f TS.4.5-2 3, pontainment Fan Coolers 4 Each fan cooler unit shall be tested during cach reactor refueling shutdown to verify proper operation of all essential features including low motor speed, cooling water valves, and normal ventilation system dampers. Individual unit performance will be monitored by observing the terminal. temperatures of the fan coil unit and by verifying a cooling water flow rate of greatar than or equal to 900 gpm to each fan coil unit.
4 Component Coolin2 Water System
- a. System tests shall be performed during each reactor refueling shutdown. Operation of the system will be initiated by tripping the actuation instrumentatiow, b The test will be considered satisf a tory if control board indication and visual observations indicate that all components nave operated satisfactorily.
- 5. Cooline Wster sys.tes
- a. System tests shall be performed r4t each refueling shutdown. Tests shall consist of an automatic start of each diesel engine;Lautomatic '
$N5$$3MtMSS$lkMN$topdriven]coolirigjatorjuinp and _autcmatic operation of valves required to mitigate accidents includinb those valves-that isolate non-essential equipment from the sysrem.
Operation of the system _will be initiated by c, simulated accident signal to the actuation-instrumentation. The tests will bs.
considered satisfactory it control board indication and visual observations indicato that all co.nponents have operated satisfactorily;and if cooling wacet flow paths required for accident pitigation have been established,
- b. At-least once mach 18 months, subject eacn diesel engine to a thorough inspection in accordance.with procedures preparad in conjunction .with the -manufneturer's recommendations for this clar- ,I standby service. 1
)
4
. - . - - . - . . . - . . ~ . - . - . - . .. - - . . - - - . .-. -
TS.4.5 3 4.5.B. 02ntpm tla Tests
- 1. Emtns
- a. The safety injection pumps, residual heat removal pumps and containment spray pumps shall be started and operated at intervals of ore month. Acceptable 1cvels or performance shall be that the pumps start and reach their required developed head on minimum recirculation flow and the control board indications and visual observations indicate that the pumps are operating '
properly _ for at least IS ' mir ates.
- b. A test consisting of a manually-initiated start of each diesel engir.e, and assumption of load within one minute, ; hall be conducted monthly. ,
- cf.lThe"fisties1634toffdfiVenWo611.ngEwster pdsploW111hioperated
,' atTquar te rlylinterva'.sb fAnl acceptable f14velCof sobrformanco '~
shal16dEthatsthMpum60Atarts"and i rsaciestitANdkdirsd' ilevel$ ped 5hea#dhdItNeiconr.rol f bbar@in'ofstions'/and5vis6a1
'ob r e rva tibn s? indi)a tQtija tith A[p umpSir! j pu r a tingip rop e r lyf foi-at[leastilSfminutss) 2, pontainment Fan Motors Tha Containment Fan Coil Units rhall ha run on low motor speed for at least 15 ininutes at intervals of one month. Motor current shall be- neasured ned compared to the nominal current expected for the test conditions.
- 3. Valves
- a. The refueling-water storage-tank outlet valves shall be tested in accordance with Section 4.2.
- b. The accumulator check valves will be checked for OPEP. ABILITY during each refueling shutdown.
- c. The boric acid tank valves to the' Safety _ Injection System shall be tested at-intervals of one month,
- d. The spray chemical edditive tank valves shall be cycled by operator action at _ intervals of one month.
- e. Actuation circuits for Cooling Water System valves that icolate non-essential equipment from the system shall be
! tested monthly.
! f. All motor-operated valves in the SIS, PJ!R, Containment
- Spray, Cooling Water, and Component Cooling Water System L that are designed for operation during the safety injection l
or recirculation phase of emergency core cooling, shall be.
tested' for OPERABILIT'l at each refueling shutdown.
l
TS.4.6-1 14 . 6 PERIODIC TESTING OF EMERGENCY POWER SYSTEM AEnlicabi11Ly Applies to periodic testing and surveillance requirements of the emergency power system.
- Dh.ird119.
To verify that the emergency power sources and equipment are OPERABLE.
Snecification The followir.g tests and surveillance shall be performed:
A, Diesel 0 9nerators
- 1. At least once each month, for each diesel generator:
- a. Verify the fuel level in the day tank. -
b; Verify the fuel level in the fuel storage tank.
! c. Verify that a sample of diesel fuel from the fuel storage: tank is within the acceptable-limits specified in Table 1 of ASTM D975 4377 L when checked for viscosity, water, and sediment.
d'. Verify 7 the fuel transfer pump can be-started and transfers fuel from' i the storage system to the day tank,
- e. Verify the diese1' generator can start and gradually accelerate to
- synchronous speed 4WL.+pa) with generator voltage and frequency at 4160 t 420 volts and 60 1 1,2-117. Subsequently, manually opummten Thyisyhr6 isis 5 the gent ator, gradually' load to at least 1650 kQ(Unit gn;;5100ikVitWR100;wW),and arate for at least 60 minutes. This test should be conducted in accordance with the manufacturer's l 'recomrendations regarding engine prelube, warm up, loading-and shutdown e - cedures where possible.
L r
i I'
~ - _ - - . . _ . - - . =- ..- - _ . - - - - - - - . ._- . - ._~ - .- - -
TS.4.6-2 4,6.A.2. At least once each 6 months, for each diesel generator:
- a. Verify the diesel generator starts and accelera es to at leant-000 etm3 N hhrohardT @ ecid in less than or equal to 10 seconds,
- b. Verify the generator voltage and frequency to be 4160 1 420 volts and 60 i 1.2 Hz within 10 seconds after the start signal,
- c. Manually synchronize tho Lgenerator, load to at least 1650 kV (Unit ME}{00igjy6153Ehyginlessthanerequalto60secondsand
- operate for at least one hour,
- d. This test should be conducted lu accordance with the '
manufacturer's recommendations regardind engine prelube and shutdown proceduros where possible.
3, At least once each 18 months:
- a. Subject each diesel generator to a thorough inspection in accordance with precedures prepared in conjunction with the manufacturer's recommendations for this class of standby service,
- b. For each unit, simulate a loss of offsite power in conjuration with a safety injection signal, and:
1, Verify de-energization of the emergency buses and load shedding from the emergency b oes.
- 2. Verify the diesels start on the auto-start signal and energize
-the: emergency buses in one minute. This test should be
, eenduer+e3cnfuctbd in accordance with the manufacturer's -
recommendations-regarding engine prelube and shutdown uprocedures where possible.
- 3. Verify that the auto-connected loads do not exceed 3000 kw
_GniM2f9510QW{.
4 4.-Verify that the diesel generator system-trips, except those for engine overspeed, ground fault, and generator differential current, are automatically bypassed.
, c. Verify- the capability of- each generator. to operate at least one hour while loaded to 3000 kvp(U61 Q2kj5100]kUJs525300fkW);.
- d. Verify the capability of each generator to reject a load of at
. least 650_ kw fIfii1M2r"38$0pW)Jwithout tripping,
- e. During this test,_ operation of the emergency lighting system shall be-ascertained.
d
--g. -
,- e m
e - 4 B.3.3 3 3,3 5JGINEERED SAETY FEATURES, JLrts.ng continued The containment cooling i' unction is provided by two independent systems:
containment fan cooler uni:s and containment sprays. During normal operation, four containment fan cooler units are utilized to remove heat lost from equipment and piping within the contaitunent. In the event of the Design Basis Accident, any one of the following combinations vill provide sufficient cooling to reduce containment pressure: four containmer.: fan cooler units, two containment spray pumps or two containment fan cooler units plus one containo nt spray pump (Reference 4), Two of the four containment fan cooler unit.s are permitted to be inoperable during. POWER OPERATION. Thic is an abnormal operating situation, in that plant operating procedures require that inoperable containment fan cooler units be repaired as soon as practical. Ilowever, because of the difficulty of access to make repairs, it is important on occasion to be able to operate temporarily with only two contairenent fan cooler units. Tuo containmant fan cooler units can provide adequate cooling for normal operation when the cor.taincent fan cooler units are cooled by the chilled water system (Reference 3). Compensation for this mode of operation is provided by the high degree of redundancy of containment cooling systems during a Design Basis Accident.
One component cooling water pump together with one con.ponent cooling heat exchanger can accommodate the heat removal load on one unit, either following a loss-of-coolant accident or during normal plant shutdown. The four pumps of the two unit facility can be cross connected as necessary to accommodate remporary outage of the pump, If, during the post-accident phase, the component cooling water supply were lost, core and containment cooling could be maintained until repairs were effected (Reference 5).
Normal cccling-wat+r cupply ic frc- tue mtw-+1r4vew-pumet. backed .:;4y--*
4Mrd :::tcr-dr4ve:, p=pp6o1{hg%iit'sfEnd[bejsuppliidlbf$f)hsFof[thE@6 h6xi lhbnYalisotbridfiVerfpumpspbyfaj s'afeguardsinfotorEdrivenyljapMby
- AtNE opM9fsayguards[dieselydriyen pumps ( (Reference 6).-4-n-time cf cceplete lecc cf ctctie r pcuer, cc:.licg uctor ic capp1!c byA tue diccel-de1 ecr p=p uhich-c tert cut ecc tin'ly , c:_ch cer >ieg hel f--the--faa ecc1c:'c--4w-occF :ccete r Operation of a single cooling water pump ef cither' type provides sufficient cooling in.one unit during the injection and recirculation phases of a postulated loss-of-coolant accident plus-sufficient cooling to maintain the second unit in a hot standby condition.
TST373 (01TiiTsisifisP~6hiEeP udtosa ti6? S a fusfUnj dsd 6h 7 sigh 5f[tsiths Edolinf}atMhe'adAhlsoldficusaluenithotinlign? otk b UERABi.E"'
"~
- afkfM9hSPympsMhhpumenfeguardaitrainI^ " '
TSg 311P,WaTsls6TdssHFisTchit"1217 c'6511nfwase$ piunVi'sValigned(toiproVida coolihgivat drEto ? th51 samej[ train las 'Ahe itsaiM from whidh M istbeingl pawsrsd
~
[(e Wi fs1211coolin6/wa teri pumpfi s h ali g~ne'd s to Trdin i B j e.co lirig; wat e r hEade_rMitbeedEtoibe[powetedfrom Buss 2.6yand,
a P
l 4
B,3.3 3 (contloued) 313? ENGINEEREYSAFETY FEATURES DAU.A$081tinued tiltfistilyMDihel?ColndratM D6" int the even' t Tofyloss9ei"offsits power) P Othelbwise, she(sinslo ' f allure Tofi a dieselfgeneratoricould leavoWne- train of7engin.eeredJrefety; features vit!3 outi; power And the othor/ trainivithout pooling? pater {
r The Gilhienfifuelis upplyT6 ff i9.',000 Tg'a11onsiw111T supply? one Tdi e s el; d r iir e n co'o116[witer /ptutp(fori14? dafs ,0 Note { thatithel19,0003 6alloiKresiuf rementiis
? ncluded':in(theWO?OOOLgallmiftotalidie6els fue$i1[requisement. of i ^'
NPhh.IIiShNkNNINANl$3d85Ih[.1$
The Safeguards Traveling Screens and Emergency Cooling Water Supply line j
.are designed to provide a supply of screened cooling water in the event '
, that an earthquake 1) destroys Dam No. 3 (dropping the water level in the norms 1 canal to the screenhouse) and 2) causes the banks bordering the normal' canal to the screenhouse to collapse eliminating the river as a source of cooling water. The Safeguards Traveling Screens and Emergency Cooling Water Supply line provide an alternate supply of water to the bafeguards Bay, which contains the two diesel driven and the one vertical motc : driven cooling water pumps. Their nonnal supply is from the Circ l
P i
ll L
l l
I' l
l~
l +
I L
l' l
B.3.5 2 3.5 INSTPUMENTATION E H Di Bfita continued Steam 1.ine Isolation (continued) line flow in coincidence with low T g and safety injection or high steam flow (lli-Hi) in coincidence wich safety injection. Adequate protection is i% .! afforde:1 for breaks luside or outside the containment even when it is f( assumed that the steam line check valves do not function properly.
i .
Containment Ventilation Isolaticn _
. e s'
(
Valves in the containment purge and inservice purge systems automatically close on receipt of a Safety Injection signal or a high radiation signal.
g Gaseous and particulate sonitors in the exhaust stream or a gaseous monitor in the exhaust stack provide the high radiation signal.
Ventilation System Isolation In the event of a high energy line rupture outside of containment, redundant isolation dampors in certain ventilation ducts are closed (Reference 4).
Safeguards Bus Voltage Relays are provided on buses 15,16, 25, and 26 to detect-lee c f ecl cge UndarQ61Eage and degraded voltage (the voltage level at which safety related equipment may tiot operate properly) ., (Relapsfate. not'provided "on 4 kWsaftiguards;ibus?2Eto[ detect'.i undervoltage 'and ; degraded voltage t since Voltage (lalmonitioredion;thef4' kVl source l safeguards-bust (1Jo. .. bus ~-.25 or? bus 26)? to"which it is con.nected;;J4t4on@-of-vohage Upon; z r receipt of Lan undervoltagel signal the automatic voltage restoring scheme is4*4+4*t+d' 4*e+diete4y/actuatedPafteriafshortitims?dslap jhich 4 hventsiactuhttod abririghbruaMeransibutm ((such fasJm6tmrfatartin5).f andj which,pll'ows prbtyctive[re1iyingjoperationiduringtaults.
3 f When degraded voltage is ,
smsed,- th >chage-s ectering cchece 1:. inklet+4-4-f-omwyt ele "cir ge is net-r+etered-w4-thI- c. cha t tire period Thic t4ma-dehy-pr+ vent-e A
4nk4*tlen - e f th >ci t c ge . re c t e r i ng c chame whe r le r-ge-4eada-ere-owrt >
'e- ec1 t cge-*ement-as44y-t41 o-4>el cu the degr+ded veltcge settalet,-
S6ytimeldelsysf are Lactuated? ;1Th6(firstF eimeTdelafTis TI'ong~ en0 ugh to l allow for-normal; transients. -The first(timecdelay anndnciaces;that-a sustained descded voltage .conditionfexists_and enables; logic;which will~; ensure that voltage?anWtiming are adeiuateJ l for safetyjinjection loads by autoinatic'al19
' erforming 3helfo110 wing (upon Lreceiptjef; af safety;injectionisignal:
p
~
11 1Autdis ta r t 1;thij disselgend rator !
2 /Seplarateithe ;bssill.fr'olis;thR grid;
- 3. pl.nadithe Lbus .ontol theidiesp1 generat6r p arid GR Startythe;1ood seqtienceri(including;'s afegyfi njktion ;1oads),.
4.
B.3.5 3
~
3.5 INSTRUMENTATION SYSTEM p.ggf,,g continued Ths M c6hdfloWghtRhim6[d6f4 7 1M Wad? W allosTth6[degradsd Woltage Eondit1Anisoiba n.4scited'by extsrnalPactionsiwithin aftime periodf that
~
ki11NoQds6'MdsmagshtofopesAting s equipmentt LIfNoitagelis not- ristored EnhhikthW?tihejpSrijddthe-logic.;automatica11$peffortnitheifollowings IWAWtsi s tif tithe !di e se D geriera t ori
. 2 NSepAstMthUbOs9 fromichelgridi Si%oadehet bush $RhsTdieselfgsribratorj ?and MstyN3hdoddypMQsuclir}
Auxiliary Feedwater System-Actuation
! The'following signals automatically start the pumps and open the steam admission control. valve to the turbine driven pump of the affected unit:
1, Low low water level in either steam generator
.?. Trip of both main t'eedwater pumps
- 3. Safety Injection; signal l 4. Undervoltage on both 4.16 kV nornal buses (turbine driven pump only)
Manual-control from both the control room and the Hot Shutdown Panel are also available. The design provides assurance that water can be supplied to the steam generators for decay heat removal when the normal feodwater .
system is not-available.
-Limiting Instrument Setpoints g
- 1. The high containment pressure limit is set at about 10% of the maximum ~
- l. internal pressure. Initiation of Safety Injection protects against loss of coolant (Reference 2) or steam'line break accidents as discussed in the safety analysis.
2, The Hi-Hi containment pressure limit is set at about 50% of the maximum internal ~ pressure for initiation of-containment spray and at about 306 I
for initiation of steam line isolatio'n. Initiation of Containment Spray and Steam 1.ine Isolation protects against large loss of coolant (Reference 2) or steam line break eccidents (Reference 3) as discussed in the safety analysis.
l l 3. The pressurizer low pressure limit is set substantially below systen L operating pressure limits. However, it is suffin ently high to protect j
.against a loss of. coolant. accident as sbown in the-safety analysis (Reference 2).
s a s-v-re-* w , - . + - ,,-.. . , , . .v- - r ,, .w- y+ +--am~.
B.3.5 4 3.5 INSTPlMENTATION SYSTEM Dale,g eontinued Limiting Instrument Setpoints (continued)
- 4. The steam.line low pressure signal is lead / lag compensated and its set point la set well above the pressure expected in the event of a large steam line break accident as shown in the safety analysis (Reference 3).
- 5. The high steam line flow limit is set at approximately 20% of nominal full-load flow at the no load pressure and the high high stear line flow limit is set at approximately 120% of nominal full-load flow at the full load pressure in order to protect against large steam break accidents.
The coincident low T setting limit for steam line isolatfan initiationissetbelyow its hot shutdown value. The safet. analysis shows that these settings provide protection in the event of a large steam break (Reference 3).
- 6. Steam generator low low water level and 4.16 kV Bus 11 and 12 (21 and 22 in Unit 2) low bus voltage provide initiation signals for the Auxiliary Feedwater System. Selection of these setpoints is discussed in the Bases of Section 2.3 of the Technical Specification.
- 7. liigh radiation signals providing input to the Containment Ventilation Isolation circuitry are set in accordan:o with the Radioactive Effluent Technical Specifications. The setpoints are established to prevent exceeding the limits of 10 CFR Part 20 at the SITE BOUNDARY.
- 8. The degraded voltage protection setpoint is ' 901 2% (Up;1til2fj8T.5Af3} 5%)
of nominal 4160 V bus voltage. Testing and analysis have shown that all safeguards loads will'operato properly at or above the sihisum? degraded voltage setpoint NThbTmakimb5"de Madednr51tsgsTheW hideL4slch6senTto-pYeifsritIUhheeWGirylactuationjof-the!voltager5storingschyme@ tithe mihimum # expe c ted i gt id , volt a geMThai firs t d e'gradedj v61tagn etime Ide lay ^ o f 8$ 0i 5fneconds?ha s)be e n[sh6bn (by? te s t!ingfund f a nnlys is stoille! 1ong ; e nough to iallbw fforinathSD transients (iie dmot6r Ls tarting! and! faul e c16ar11@d Mt(iealiofl6hger/[thniYthsitiierequirddsoistart? thsicafetp linjedisionippmda@;minimnivoltage;@The[secondid.egradpdWoltageMime "'
t daI5ftisip@rovideditoia116w?
w_= -
heidegradednoltAge;conditi6n;toibeborhet.
- - - ~ - - -c - .
connected! Cla&lEtloadsy;-The degraded erha8+-tree *1*n-44ae d^107 d M2 :ccenda hac been -- chour by - t-est4eg--and-anelycic t e be 1 c sr g- -enough-+e alleu fer teltcge d1 1 -wl+4eg fr= the at-ening cf Icrge 1cade. ----TMe t ime delcy ic c1cc ce= 1+ tent-wi-t-h-the-eawi=c t ic^ delcy- cec =ed !r the EGGS-anelys4e-4er-v%+t4w , cf _cfety inJ+e44en-per ' aax4me--l-k44 ee4he-degrede4 wltcge ce tpelet--hac bec ' catal-ished-t-a-prevee '
unncec:ccry cete tic 1 cf tEr co44 age-reste*4 ng-eehemer
B.3.5-5 3.5 INSTRUMENTATION SYSTEM Bases continued Limiting Instrument Setpoints.(continued)
The'undsrvoltige7setpointfis!:75 T(2 ? S f s fl norai nat busW61 tago , s The 61nimQsetpointLensures; equipment?operatekaboWehe(limiting 5Lva16elof 75C(of140001V)? fo6ont?mindte7operationU Th'e i75%1 masimum(setpointiis hhosenfisipievent6nscessary}actuatiosofithe3voltagerestorinsischbme duringj voltagoj dips "wliicinoccuridusing%otori s'tharting h iThe.tundervol tage' ti'meydolayfofL4f 5125ja_econd@has; been shown-byitesting' a6d analysi'sjto ,
be ong'enouhhjo 'al'loRforfnormalftrannients !at(d shor t r enough to UP erate ? pri;or to ;Lthey degraded;vbitagenlogich previdingj a ' rapid? trans fer so?a6Talternste? source M c lace af valtcg protectic- c e tp4et-4+ ap[edE4= Asijd5E$f35e1: r1 'M04t-tue -I t*ypv--R44*ye-4w! t i c t c c repid (1ccc thac tus-ceccade) *.- cfc: to-aw-ahernotre ce rec :- Icce cf vc! t e ge .- Instrument Operating Conditions During plant-operations, the complete instrumentation systems will normally be in service. Reactor safety is provided by the Reactor Protection System, which automatically initiates appropriate action to prevent exceeding established limits. Safety is not compromised, however, by continuing operation uith certain instrumentation channels out of service since provisions were made for this in the plant design. This specification outlines limiting conditions for operation necessary to preserve the effectiveness of the Reactor Control and Protection Systen when any one or more of the channels is out of service. Almc.it. all reactor protection channels are supplied with sufficient redundancy to provide the capability for CHANNEL CALIBRATION and test at power. Exceptions are bac'kup channels such as reactor coolanc pump breakers. The removal of one trip channel on process' control equipment is accomplished by placing that channel bistable in a tripped mode; e.g, a two-out-of-three circuit becomes a one out-of two circuit. The source and intermediate range nuclear instrumentation system channels are not
~ intentionally placed in a tripped mode since these are one-out of-two trips, and the trips are therefore bypassed during testing. Testing does not trip the system unless a trip condition exists in a concurrent channel.
Re fe rences
- 1. USAR, Section 7.4.2
- 2. USAR, Section 14.0.1 3,- USAR, Section 14.5.5
- 4. FSAR', Appendix I-
1 i B.3.7 1 3.7 AUX 1LIARY ELECTRICAL SYSTEM Bases The intent of this specification is to provide assurance that at least one external source and one standby source of electrical power is always available to accomplish safe shutdown and containment isolation and to operate required engineered safeguards equipment following an accident. Plant auxiliary power can be supplied from four separate external power sources which have multiple off-site network connections: the reserve transformer from the 161 kV portion of the plant substation; the second reserve transformer from the 345 kV pcirtion of the plant substation and the two cooling tower transformers, one of which is supplied from a tertiary winding on the substation auto transformer, and the other direccly from the 345 kV switchyard. Any one of the four sources is sufficient, under analyzed conditions, to supply all the necessary accident and post-accident load requirements fot one reactor, along with the shutdown of the seennd reactor, Each source separately supplies the safeguards buses in such manner that items of equipment which are redundant to each other are supplied by separate sources and buses. 1 Each diesel generator 7-011or~D2 (Unit?2F D5 or 06)] is connected to-onei its?assblciated 4160 vo'It ' safeguards lius ifi-coeh-cf the nec--renetee! Unit lynit)2) and eac_hydiess1[ganerato'r[has sufficient capacity to start sequentially and operate the safeguards equipment supplied by-+neLits psRKth'd bus. The set of safeguarda equipment items supplied by each buc is, alone, sufficient to maintain adequate cooling of the fuel and to maintain containment pressure within the design value in the event of
- a loss-of-coolant accident.
Eaeh-dicaci ctarte cutematicc!!y up e Ice ccitage e ite - aseccicte:' hua 4*-el-tF c r mit and-both diccc1 generaterc ctcrt in-the-event cf c acfety i nj ee t !*n-e4enal-f c r ! thc r-reaster . The-udelem,-fuelwmpply af 70,000
-gallen: 2112 cupply one dieselwmelept-er pump cm! cne diccel generatcr (1ccded par US?" Tahic S,^ 1) f*r--gr+at e r t hn r la d:+ya,-
l Addi-t4 cr:1 diecc1 fue4--ean-ncr:211y 5: obtained u! &M a feu hom-e,-- Tbi accurec c cdequct capply e err 1: the - > cat-ef4he-pebabl+ l l ma*!=u- fic ch V i Ifftf6"offsite sssrdeTIPsvallab1WtM thsTasdosiatsd~ bus 7sachTdiesel startspautomatically!.upontr.eceiptjof tan 5undervoltageisignalfonfits associated.;busQd Both7dieseligenerators[startiin1the eventL;of:a.nafety [
'inj ectioti} signal" feri the irsastori . (The; miniinum!fue15 supply" off 511,000
- l. gh116ns w ill E supplyfonej Uni ~t 1?diesk1} genera tor Efor}14 g days . (NoteEthat 1
l the151;000;gallonvrequiremsntJisfincludedrin?the;10l,000 gallon? total l_ 'requir'ement;for(Unitilb : The ".totaltfuel supply: ofc 70,000 gallonswyill l . supply /snejdieselvdrivesRcooling;wa'erpumpfandToneiUnitilidiec01 t
'generatorj(loadedLper?USAR Table!874fl.)1for) greater?than114-days?(Unit 2h (A @ e1[ supply;of;61',300fgallsnsivillisupply;oneLUnit/2;, diesel l
l ?:
. - - - . -. - ~. _, -. . - . - . - . - _ . . . . .. . . . . - . . - - .- .- B.3,7 1 (continued) ! p,enorhtorfforj7Fdays'Ea G ated--load ~calddlated periths ccnservative method'of ANSI-N195-1976', ( Ajminimum fuelisupply 'of; 75,000' gallons:lvas bonnervativelyf chosen to.isu}iply one Unit' 21 diese1L generator' for 14 days calbufatedLper!ithentip dependent method-'of ANSIpN195L1976.) . Additional diesel} fuel can'nWmally;bei obtained within;a .few1 hoursj-?- l This1 assures
.anj.[ade(dateisupplylevenfinj the 3 vent [ofjthof probablef.;maxiinumfflood) l Following the inoperability of a Diesel Generator, the-et4a+f vedundant diesel generator is tested to prove that the cause of the inop rability does not af fect both diesel generators. However, if the diesel generator is inoperable due to preplanned preventative maintenance, operability of the-et4x+[rsdundaht diesel generator does not need to bo l proven, i
I
B.4.6-1 4.6~ PERIODIC TESTING OF EMEFGENCY POWER SYSTEMS Lun E The monthly tests specified for the diesel generators will demonstrate their continued capability to start and to carry load. The fuel supplies and_ starting circuits and controls are continuously monitored, l and abnormal conditions in these systems would be alarm indicated without need for test startup. i I The less frequent overall system test will demonstrate that the emergency power. system and the control systems for the engineered safeguards equipment will function automatically in the event of loss of all other sources of'a-c power, and that the diesel generators will start automatically in the event of a loss-of-coolant accident. This test will demonstrate proper tripping of motor feeder breakers, main supply and tie breakers on the affected bus, and sequential starting of essential = equipment, as well_as the OPERABILITY of the diesel generators. Thyloaid# ejection (tes,t' vill? demonstrate theycapabilitylto rej(ct3hQigio11argeatiemergency,;1oadWith_oittf trippingi Tho'specified test. frequencies provide reasonable assuranen that any
~
-mechanical or electrical deficiency will be detected'and corrected before it can result in failure of one emergency power tpply to respond
.when called upon to function. It's possible failur,' respond is, of course, anticipated by providing two diesel gena-at pep} unit, each supplying, through an independent bus, a complete arm adequate set of engineered safeguards-equipment. Further, both diesel generators are provided as backup to multiple sources of external power, and this multiplicity- of sources should be considered with regard to adequacy of test frequency, Each. diesel genera:or .can start and be ready to accept- full. load within 10 seconds, and will sequentially start and supply the power requirements for one complete set _ of safeguards equipment in approximately one minute (Reference 1).
An_ internal fault in the generator could damage the generator severely.
;Moreover, this change complies with BTP EICSB 17. Auto connected loads should not exceed the overload rating of the diesel generator for the 2000 hour _ maintenance internal, as prescribed in Regulatory Guide 1.9.
Station batteries will deteriorate with time,:but_ precipitous _ failure is extremely unlikely. The surveillance specified is that which has been demonstrated ~over the years to provide indication of a cell becoming unserviceable long before it fails. If a battery cell has deteriorated, or if a connection is loosa, the , voltage under load will drop excessively, indicating need for-replacement >or maintenance. __u__u_______ .-- - _ _ _ ,
l Exhibit C Prairie Island Nuclear Generating Plant , License Amendment Request Dated March 20, 1992 ) Revised Technical Specifications Pages
- Exhibit C consists of-revised and new pages for the Prairie Island Nitelear Generating Plant Technical Specifications with the proposed changes incorporated. The revised pages are listed below:
TS v TS.3.3-7 TS.3.3 8 Table TS,3.5-1 Page 2 of 2 Table TS.3.5-6 TS.3.7 1 TS.3.7-2 TS.3.7-3
.TS.4,5-2 TS.4.5 TS.4.5 4 TS.4.6 1
.TS 4.6-2 B.3.3-3 B,3.3-4 B.3.5-2 B.3.5-3 B.3.5-4
_B.3.5-5
= B.3.7-1.
B.3.7-2 B.4.6-1 o 4
+ / - _ _ - _ TS-v TABLE OF CONTENTS (Continuut). TS SECTION I1TI E __f6EE__ 4.0 SURVEILLANCE REQUIREMENTS TG.4.1 1 4.1 Operational Safety Review TS.4.1-1 4.2 Inservice Inspection and Testing of Pumps and Valves Requirements TS.A.2-1 A. Inspection Requirements TS.4.2 1 B. Corrective Measures TS.4.2-2 C. Records TS.4.2-3 4.3 Primary Coolant System Pressure Isolation Valves TS.4.3-1 4.4 Containment System Tests TS.4.4-1 A. Containment Leakage Tests TS.4,4-1 B. Emergency Charcoal Filter Systems TS.4.4-3 C. Containment */acuum Breakers TS.4.4-4 D. Residual Heat Removal System TS.4.4 4 E. Containment Isolation Valves TS.4.4-5 F. Post Accident Containe.ent Ventilation System TS.4.4-5 C. Containment and Shield Building Air Temperature TS.4.4-5 H. Containment Shell Temperature TS.4.4 5
- 1. Electric Hydrogen Recombiners TS.4.4-5 4.5 Engineered Safety Features TS.4.5 1 A. System Tests TS.4.5 1
- 1. Safety Injection System TS.4.5-1
- 2. Containment Spray System TS.4.5 1 3, Containment Fan Coolers TS.4.5-2
- 4. Component Cooling Vater System TS.4.5 2
- 5. Cooling Vater System TS.4.5-2 B. Component Tests TS.4.5-3
- 1. Pumps TS.4.5 3
- 2. Containment Fan Motors TS.4.5-3
- 3. Valves TS.4.5-3 4.6 Periodic Testing of Emergency Power System TS.4.6-1 A. Diesel Generators TS.4.6-1 B. Station Batteries TS,4.6-3 C. Pressurizer Heater Emergency Power Supply TS.4.6-3 4.7 Main Steam Isolation Valves TS.4.7-1 4.8 Steam and Power Conversion Systems TS 4.8-1 A. Auxiliary Feedwater System TS.4.8 1
- 3. Steam Generator Power Cporated Relief Valves TS.4.8-2 C. Steam Exclusion System TS.4.8-2 4.9 Reactivity Anomalies TS.4.9-1 4.10 Radiation Environmental Monitoring Program TS.4.10-1
-A. Sample Collection and Analysis TS.4.10-1 P., Land.Use Census TS.4.10-2 C. Interlaboratory Comparison Program TS.4.10-2 4.11 Radioactive Source Leakage Test TS.4.ll-1
_ _ . _ _ _ _ . _ _ . _ . _ _ . . . . _ _ . - _ . _ . . . . _ . _ _ _ _ . ~ _ _ . . . _ . _ . . . _ _ _ . - _ . ~ - _ . - . TS.3.3 7 3.3.D. Cooline Unter System
- 1. A reactor shall not be made or maintained critical nor shall reactor coolant system average temperature exceed 200* F, unless the following conditions are satisfied (except as specified in 3.3.D.2 below).
- a. Four of the five cooling water pumps are OPERABLE, and if one diesel- ]
driven cooling water pump is inoperable, then 121 cooling water pump ;
.shall be aligned as shown in the table below. All changes in the i valvo positions shall be under direct administrative control. :I 1
m. Inoperable Valve Alignment Power Supply to Pump Bus 27 (#121 m. _ Cooling Water Pump)
#12 MV-32037 or MV 32036 closed; and Cooling associated Bkr Locked Off Water Pump - -
Bus 25 MV-32034 and MV-32035 open; and both Bkrs Locked off a22- KV-32034 or MV 32035 closed; and Cooling the associated Bkr Locked Off MV 32037 and M7-32036 open; and botti Skrs locked off
- b. Two safeguards traveling screens are OPERABLE.
- c. Two cooling water-headers are OPERABLE,
- d. A fuel oil supply.of 19,000 gallons is available for the ciesel-driven cooling water pumps in the interconnected Unit i diesel fuel oil storage tanks. Note that the 19,000 gallon requirement is included in the 70,000 gallon total diesel fuel nil requirement of Specification 3.7. A.5 for Unit 1.
L b , l fu u N l: L
4 4 TS.3.3 6 3.3.D.2. During STARTUP OPERATION or POWER OPERATION, the following conditions of inoperability way utst provided STARTUP OPERATION is. discontinued until
- OPERABILITY is restored. If OPERABILITY is not restored within the tine specified, be in at least 110T SHUTDOWN within the next 6 hours ani. in COLD SHUTDOVN within the follow.ing 30 hours,
- u. Two of the five cooling water pumps may be inoperable for 7 days with the fellowing stipulation.
If the inoperable pumps are any two of these: #12 Cooling Vater Pump,
#22 Cooling Water Pump, and #121 Cooling Water Pump, the following conditions shall apply:
- 1. (1) the engineered safety features associated with the OPERABLE safeguards cooling water pturp are OPERABLE; and (2) both paths from transmission grid to r? > unit 4 kV safeguards
, buses are OPERABLE (applicable tt "att . operation only); and (3) this condition of inoperablility (i.e., two safeguards pumps inoperable simultaneously) may not exceed 7 dayo in any consecutive 30 day period.
- b. One of the two required cooling water headers may be inoptiable for
/2' hours provided:
(1) the diesel-driven pump and the diesel generator associated with safety features on the OPERAdi-E header are OPERABLE. (2) the horizontal motor driven pump associated with the OPTP ABLE header and the vertical motor drive. pump are OPERABLE.
- c. One of the Safeguards Traveling Screens may be_Jnoperable for 90 daya provided a aluice gate connecting the Emergency Bay and the Cire l Water Bay is open (excepr during periods of testing not to exceed 24 hours).
- d. Both Safeguards Traveling Screens may be inoperable -for 7 days provided a. sluice Bate connecting the Emergency Eny and the Cire Water Bay is open, e, The Emerget.cy Cooling. Water line from the Mississippi River may be inoperable for 7-days provided that-a sluice gate connecting the Emergency Bay and the Cire Water Bay is open.
ll i
l il fji !. H O"U ~ ~ d- v mW39 3 w Cm N I I Il c e s 3 - 1 l a v % 5 c eo 0 6 e c i c t r
. st 4 s c 2 3 5 e 55 . 5 l , t 2 e .
1: 0 1 1 S 'n 5 1 f T U ti 1 ot S 7 5 i
. I 8 83 e 4 nn O oU
" i 1 t r T T eo l f N E I S c p O e ms P G s oe cd T I' 3 a E T nr eg S I 1 c M e e p
- C J
I L 6 6 5 s s t wu es I' T I d i 2 's. o 0t 2 1 5 bd r f a
)
d e I M L U n t 0 5 1 5 i ma iu rg u 9 80 7 4 ee n N tf %~ i O i na t I is n T 8 o A el c T ha ( t c E' i 1 N nr i t 5 i d c
- T 2 e 3 S l N t e S I i T nf 1
- U o E O ) )
L I
- l a
l a d n no B T
- A A e g n n ai T I i i t .
T a m m ie I t o o l N l n 12 e n t p I o g im V
- yy a % y no i ( aa t ( a Uc 1 d l l l l c e e ee o e e hr r d g DD v g D t e
. A a a r a ot - S r g
t ee e t e b a L l mm d l m l D E e o ii n o i r E ; D V TT U V T od R N' f n E A a E H . . d N C a b e2
, I d G i t I
vi - E on rU
. p s r *, e eo s n rf so a s
ui Bt se T a td I sr d o na i r N. f rt og as pp L A ue gR t u e N e ss O f e gr d I ag
- S a na C t It gu N Vl Ko i e W 4V mf i a Ls 0
- 1
- lll ll l ll 'l llll ,lIl .lll. Illllllll!l l l 1ll' I , L
< jlfll ,f {]j1 11 l!llI ljl;1 llI l
. ?5o
; af y wE i]
r r u u eo eo hh hh t t e e nn nn i o i o l n* l n* ei* ei* nh . nh . nt n nt n I T aiw aiw h wo hwo F T.I M E c d c d I L nt nt d NCB OE eou l ih eou lih l o O bt s bt s c I FT ai ai TOO rd t rdt n C N eno eno i ASN poh poh 4 NA ec oc t ROC n n n n i OI idi idi n TT2 e e u
- AI epe epe M c pb c pb -
E T RMR PO O ai l rr ai l rr h t e S OC1 Pt o Pt o Y e S c a L l A p ~ C I o R t T C E n E L S e L B N k E I O a S I t Y 3SST - - R I SI - - e A MAD - - b I RPN L EYO l I FBC l 6 X a
- U h 5
A s 3 R s O p S F e T t S Y s E N FC L O ON , B I M A s s s A T UED u u r T 1 MEN B B u 1 1 2IRU / / o N NCD 2 2 h O I EE C MDR 4 2 G N n I i T ES h A MLL s s t R UBE u u i Z MAN B B w F 1I RN / / O NEA 3 3 t IPH e
> T MOC m -
N e E t M" o 1 n P T s s e S e e r i J s s a J s s u u s, eB B . g s os as in td d t o l r er ii T oa ga dt I Vu g au ni N t g od U d e l e cn ef of o L d a va mc A aS rS u N r e mn O gV dV i I eF nK nm T D4 U4 id C mt N u U . . fh F 1 2 I s Ilfl I ;llllilllI ,llll !llll!fI I l
4 TS.3.7-1 3,7 AU(ILI ARY ELECTRICAL SYSTiliS Applic u llity tion of plant Applies to the availability of electrical power for the opera auxiliaries. Obicetives y to To define those conditions of electrical power availability necessarlity of engineere assura safe reactor operation and continuing availabi safe guctds . Specification h ll reactor A. A reactor shall not be made or maintained critical nor s all of the following coolant system average temputature exceed 200'F unless a(except as specifled in requirements are satin:fied for the applicable unit 3.7.B below): i 4 kV j
- 1. At least two separate paths from the tranmoissicn gridpower iding adequate to the un t safeguards distribution system each capt.ble of provshell be OPERABLE, to minimum safety related equipment, 2f and 26) shall lie 2, The 4 kV safeguards buses 15 and 16 (Unit 2 buses:
energized. 211, 212, 221 and d.
- 3. The 480 V safeguards buses l',0 and 120 (Unit 2 buaes:222 111, 112,
- 4. Reactor protection instrument AC 211, 212, 213buses and 214). shall be energized; 113 and 114 (Unic 2 busr3: ,
- 5. The following unit specific conditions apply:
Unit 1: D1 and D2 diesel generatorr are OPERABLE, and a fuel d D2 diesel (a) supply of $1,000 gallons is available for the D1 an generators tanks. in the Unit 1 interconnected dicsci fuel oil stor k D1 and D2 diesel generators and the diesel drive , DS and D6 dienel generators are OPERABLEland a fuel (b) Unit 2: supply of 75,000 gallcns is available for DS and D6 i tanks. d
- 6. Both battories with their associated chargers and both d c safeguar systems shall be OPERABLE.
AC panels 111, 112, 113 and 114 (Unit
- 7. No more than one of the Instrumentshall be poet. red from Panel 117 (Unit ?
2 panels: 211, 212, 213 and 214) inverter bypass source. panel: 217) or its associated instrument
- -- ~ - - _ _ _ ^ -
, t i
TS.3.7 2 , I 3.7.B. During STARTUP OPERATION or POWER OPERATION, any of the follosing conditions of inoperability may exist for the times specified, provided STARTUP opt' RATION is discontinued until OrERABILITY is restored. If OPERAB1h1TY is not restored within the time specified. place the affected unit (s) in at 1 cast HOT SilUTDOW within the next 6 - hours and be in COLD SilVTD%N within the following 30 hours.
- 1. One diesel generator may be inoperalle for 7 dayn (total for both j diesel generators during any concecutive 30 day period) provided (a) the OPERABILITY of the other diesel generator is demonstrated
- by perfortnance of surveillance requirement 4.6.A.1.e within 24 hours **, (b) all engineered safety features equipment associated ;
with the operable diesel generator is OPERAPLE, (c) the two ! required pathr frorn the grid to the unit 4 kV safeguards l distribution system are OPEPABLE and (d) the OPEPABIL1rY of the two required paths froin the Srid shall he verified OPERABLE within # 1 hour and at least once per b hours thereafter.
- 2. Ono of the two required paths from the Brid to the unit 4 kV I -
safeguards distribu*.lon system raay be inoperaMe for 7 days provided (a) D1 and D2 (Unit 2: DS and D6) diesel generators aro l altsady operating or are demonstrated to be OPERABLE by sequentially performin6 surveillance reqairement 4.6.A.i.e on each , diesel generator within 24 hours and (b) the OPERABLE path fron , thn grid shall be verified OPERABLE within 1 hour and at least ; once por 8 hours thereafter. *
- 3. One of the two required paths frorn tho grid to the unit 4 kV i
safeguards distribution system and one diesel generator may be inoperable for 17 hours provided. (a) the OPERABILITY of'the other diesel gen)rator is demonstrated
- by performance of Surveillance
' Requirement 4.6.A.1.e with!n 8 hours **, (b) all-engineered safety .
features equipment associated with the OPERABLE diesel generator ! is_OPERABl.E, and (c) the OPERABLE path from the grid . hall:be verified OPERABLE within 1 hour and at leest once pet ., hcura
- thereafter.
- - 4. Both of the two required paths from the grid to the unit 4 kV i safeguards distribution eystem may be inoperable for 12 hours provided the Dl_and D2 (Unit 2
- - D5 and D6) diesel generators are l- 4 already operating or are demonstrated to be OPERABLE by .
4equentially performing Surveillance requirement 4.6.A.1.e on each ! diesel generator within 8 hours.
- The OPERABILITY. of. the other diesel gene:*ator need not be demonstrated if the diesel generator inoperability vas due to preplanned preventative ,
maintanance or-testing.
** This test is required.to be completed regardless of when the inoperable diesel gene ator is restored to OPERAEILITY.
-',-g9,gr*'T'9'TW-'tT'*"-TV**"-*"Wwgrw-hpMtr MWN-Pwq
_ . _ . . _ _ _ . . _ _ . _ _ _ _ . _ _____...-____._______.m.._
]
TS.3.7-3 f n ! 3,7.B.$. D1 and !>2 (Unit 2: D' s and D6) diesel generators tuay be inoperable l for 2 hours provided the two required paths from the grid to the l unit 4 kV safeguards distribution system are OPERABLE and the l l OPERABILITY of the tito required paths from the grid are verified j OPERAALE within 1 hour.
- 6. One 4 kV *afeguards bus (and its associated 480 V bus (Unit 2:
busesi includlu6 associated safoguards motor control centers) or one 480 V safeguatds bus including asiociated safeguards motor control ' centers reay be inoperable or not fully energir.ed for 8 hours providad ; the redundant 4 kV safeguards bus and its associated 480 V safeguards bus (Unit 2; buses) are varified OPERABLE and the diesel generator and safeguards equipirent assoc!ated with the r dundant train are OPERABLE.
- 7. One battety charger _tnay bo inopidabic for 8 hours provided, (a) its [
- assonie; od battery is OPERAP,',E, (b) i ts redundant counterpart ~1s verified OPERABLE, and (c) the diesel generator and safeguards equipment associated with its counterparc are OPERABLE. t S. One battery inay. oc inoperable for 8 hours provided that the other battery and,both battery chargers remain OPERA.BLE. ,
- 9. In addit!.on to the requirements of Specificacion TS.3.7.A.7 a second i inverter : supplying instrument AC Panels 111,11't, 113. and 114 may (Unit 2 panels 211, 212, 213 and 214) be pownred frora an inverter .
kypass source for 8 hours. l t g ) 1 E
+v e , -+,--w-, ~, n , o n . m s, .,~r ~ - - - , . . ,, --,mn.-,- ~ , - - , .,--.e, , e .w.. ,-,,,----m,- n , -r r v v. 4 . w-- e
E T3.4.5-2
- 3. C.smt aintrent .nutQo1( rs Each fini cooler unit shall be testeu during each reactor ref ueling shutdown to verify proper operat ton of all casential features including low motor speed, cooling water valves, and normal ventilation system dampers. Individual unit perfortrance will be monitored by observing the terminal temperatu es of the fan coil unit and by serifying a cooling water flow rate of greater than or equal to 900 gpm to each fan coil unit.
' . D atimit m t Cooling Water.. System
(.
- a. System tests shall be performed during each reactor refueling shutdown. Operation of the system will be initiated by t r ippit;g the actuation instrumentation.
n b. The test will be considered satisfactory if control board in31 cation and visual observations indicate that all cortponents have operated satisfactorily. j
- s. OnduzJ!en_Satta
- n. System tests shall be performed at each refuelirig shutdown. Tests shs11 consist of an automatic statt of each diesel engine, automatic start of the vertical motor-driven cooling water pump and automatic operation of valves required to mitigate accidents including those
_ salves that isolate non.cssential equipment from the system. Operstion of the system will be initiated by a simulated accident 1 signal to the actuation instrumentation. The tests will be considered satisfsetory if control board indication and visual observationn indicate that all components have op" rated - satisf actorily and if cooling water finw paths required for accinent mitigation have been established.
- b. At least once each 18 months, subject each diesel engine to a thorough insp3ction in accordance with procedurea prepared in conjunction with the manufacturer's recommendstions for this class of standby .4ervice.
Th_ u . - 'M, i.--- - 2M
TS.4.5 3 4.5.B. Opmponent Iests 1 l' ump s
- a. The safety injection purups, residual heat removal pumps and containment spray punes shall be star ced and operated at intervala of one month. Acceptable levels of performance shall be that the pumps start and reach their required developed head cn minimurn recirculation flow and the control board indications and visual observations indicate that the puu.ps are operating properly for at least 15 intnutes.
- b. A test consisting of a manually-initiated start of each diesel engine, and assumption of load within one minute. shall be conducted nonthly. )
- c. The vertical motor driven cooling water pump shall be operatad at quarterly intervals. An acceptable level oi performance shall be that the pump se..rts and reaches its required developed head and the contral board indictions and visual observations indicate that the pump is operating proporly for at least 15 minuter..
- 2. Cpnta1nment Fan Morang The Coataisunent l'an Coi! Units shall be run on law motot- speed for at least 15 minutes at intervals of one month, Mctor current shall be measured and compared to the nominr1 current expected for the ttst conditions.
- 3. Valves L
- a. The refueling water i,torage tank outlet valves shall be tested in accordance with Section 4.2.
- b. The accumulator check valves util be checked fo" OPERABILITY during each refueling shutdown,
- c. The boric acid tank valves to the Safet.y Injection System shall be tested at intervals of one conth.
- d. The sprey chemical additive tank valves shall be cycled by operator action at intervals of one month,
- c. Actuation circuits for Cooling Water System valves that isolate non essential equipment from the system shall be tested monthly,
- f. All motor-operated valves in the SIS, RllR, Containment Spray, Coolirg Water, and Component Cooling Water System that aro designed for operation during the safety injection or reeirculation phase of emergency core cooling, shall be tested for OPEPABILITY at each refueling shutdown.
1
3-E t TS.4.5-4 4.5.B.3.g. The correct position of the throttle valves below shall be j verified as follows:
- 1. Within 4 hours following cotopiction of each valve stroking operation
- 2. Within 4 hours following maintenance on the valve when the Safety Injection System is required to be OPERAALE, and
- 3. Perloalcally at least once per 18 r.onths to the extent not verified in accordance with 1 and 2 abovo within this tiu period.
Ettu_.1 VaLyn Unu .LValvea SI 15-6 251 15 6 Sle15 7 251-15 7 SI 15 C 2SI 15 8 51 15 9 2SI 15 9
- h. Following completion of high head Safety Irjection System or Rilk system modifications that alter system flow characteristics a flow balance test shall be performed during shutdown co confitrn the following injection flow rates are echieved-1.1!ict.i Hend Sahtv inJir_Ll9.11.ji31u.m:
(a) Flow through all four injection linen plus miniflow shall not exceed 835 gpm with one pump in operation. (h) The .ninimum flow through loop A & B cold legs shall be 670 gpm with one punp in uparation. The flow rates in each leg shall be wichin 20 gpm of each other with ono pump in operation. (c) Flow orifices and thrott. ling valver will be used to limit nd balance flow through the reactor vesnel injection i lines to a maximum of the total flow 11 alt in Specificatica 4.5.B.3.h.1.(a) above, with one pump in operation. During this flow test the flow rates in each leg shall be within 50 gpra of each other.
- 2. BILR System:
l The minimun flow through each RilR Reactor Vessel Injection line shall be at least 1800 gpm. l 7 m---...... . . - . . . - - * = * - = = " ' " '
.._ _ . . _ ~ _ . _ . _ . . . _ _ _ . . _ _ _ _ _ . . _ _ _ _ . . - . _ _ . . . _ _ . . . _ . _ _ . , _ . . _ _ . -
l 1 TS.4.6 1 ' I l i ,- 4.6 PERIODIC TESTING OF Dt?.RCENCY POWER SYSTDI Apolicabilty Applies to periodic testing and surveillance requirements of the ernerge* icy power system. Objective . To verify that the emergency power sources and equipment are OPERABLE. Snecificatigj} ! i The following teuts And surveillanc( shall be performed: i . A. Diesel Gener,Atarg. ,
- 1. At least once each month, for each diesel generator: i
- a. Ver14y the fuel-level in the day tr.uk. ,
I b.. Verify the fuel level in the fuel storage tank,
- c. Verify that a sample of diesel fuel from the fuel storage tank is 1 within the ricceptable liruits specified in Table 1 of ASTM D975 77 .
when check.ed for viscosity, water, and sedimer.t.
- d. Verify the fuel transfer pump can be started and transfers fuel frorn l the storage systern to the day tank.
e, Verify the-diesel generator can start and gradually' accelerate to l-synchronous speed with generator voltage and frequency at-4150 1 420 L volts and 60 i 1.2 Hzi Subsequently, manually synchronize the l generator, gradually loud to at least 1650 kW (Unit 2: 5100 kW to '
- 5300 KW) and operate for at least 60 ininutes. This test should be contlucted in accierdance with the inanufacturor's recorraendations regarding engine prelube, warm up, luading and shutdown procedures where possible, 9
t l. l t P V
? .--w e -
4-....w-Av.-#w w- ,.w-. . .v-w, h v ,-e e e - - ~~y- 4 ,,.....m*, , , , , - , - -e < +w y-- www=,--g+,--,qe- t4 e r w .i. -e e ' m , - v-vn* e. t-
-w w r- "-4
TS.4.6 2 4.6.A.2. At least once each 6 months, for each diesel generator: i
- a. Verity the dienel generator starts and accelerates to at least synchrorous speed in less than or equal to 10 seconds.
- b. Verify the get.erator voltage and f requency to be 4160 1 420 voitt and 60 1 1.2 11: within 10 secondt af ter the start signal.
- c. !!anually synchronize the generator, load to at least 1650 kW (Unit 2: $100 }& to 5300 kW) in less than or equal to 60 acconds and operate for at least one hour,
- d. This test should be conducted in accordance with the manufacturer's s ecomn:endat ions regarding engine prelube nod shutdown procedures where poasible.
- 3. At 1 cast once each 18 months; l
- a. S.:bject each diesel generator to r thorough inspection in accordance with procedures prepared in conjunction with the manufacturer's recommendations for this class of standby servire.
- b. For er.ch unit, simulate a losa of of fnite power in conjanction with a safety injection utgnal, ord:
- 1. Verify de-energization of the emergency buses and load shedding from the emergency buses.
- 2. Verify the dieuels start on the auto-start signal and energize the emergency buses in one minute. This test rhould be conducte<! in accordance with the manufacturor's recommendations l regarding engine prelube and shutdown procedures who;o possible.
3 Verify that the auto connected loads do not exceed 3000 kw ' (Unit 2: 5100 kW). l
- 4. Verify that the diesel generator system trips, ocept those for e ngirie overspeed, ground f at lt , and generator differential current, are automatically bypassed.
- c. Verify the capability of each generater te oper1ste at least cae hnur while loaded to 3000 kw (Unit 2: 5100 kW to $300 kW). l
- d. Verify the cap..bility of each generator to reject a load of at least 650 kv (Unit ?: 860 kw) without tripping. I
- c. During this test, operat ton of the emergency lighting system shall be ascertained, i l
_-_-___ -_x _ - _-____ ______-_ _ __ - __-_ ___ - ____ --__ _____ _ - __ - __ -_-_-__
_ _ _ . _ _ _ _ . _ . _ _ . _ _ __.____.~._..___.m..__.______.____m_ l B.3.3-3 ! 1 1 3.3 TdGR M JD SAP M IEATURES 3.e g continued 1 The .ontairvnent cooling function is provided by two independent systems: centainment f an cooler units and containment. sprays. During normal ! operation, four contaitunent f an cooler units are utilized to remwe heat ; lost from equipment and pipirg within the containment. In the event of the , Design Basis Accident, any one of the following cot.binationn will provide suf ficient cooling to reduce cont Sinment pressure: four containtnet4t fan cooler units, two contairunent spray pumpa or two contaitunent fan cooler i units plus one contaitunent spray pump (Reference 4) . Two of the four containment fan cooler units are permitted t.u be it. operable during DOWER OPERATION. This is an abnormal operat ing situation, in that plant l operating procedures require that inopecable containment fan cooler vnitu , be repaired as soon as practical. However, becauwe of the difficulty of access to make repairs., it is important on occasion to be able to operate ; temporarily with only two contai.nment fan cooler units. Two containment fan cooler unitr. can provide adequate cooling for norrnal operation when the containment fan cooler units are cooled by the chilled water system i (Reference 3). Cong enaation for this mode of operatJon is provided by the : high degree of redundancy of contaltunent cooling nyntems during a Deolge ' Bar,in Accident. One component cooling water pump together with one componenc co>1ing heat i exchana,er can accommodate the heat rnmoval load on one unie, either following a loss-of coolant accident or during norinal plant shutdown. The four pumps of the two unit facility can be cross connected as necessary to ; accommodate temporary outage of the pump. If, during the post accident phase, the component cooling war.or supply were lort, care and containment cooling could be maintained until repeirs were ef fected (Reference $). i , Cooling water can be aupplied by cither of the two horizontal motor drtven I pumps, by a safeguaJds motor-driven pump or by either of two safeguards diesel + driven pumps, (Reference 6) . Operation of a single cooling water pump provides sufficient cooling in one unit during the injection und recirculation phases of a postulated losx of coolant accident plus sufficicat cooling to maintuin the second unit in a hot atandby condition. TS.3. 3.D.1.a assures that an automatic Safety Injection uignal to the cooling water header isolation valves will noc align both OpCRABLF. safeguards pumps to the same safeguards train. , TS.3.3.D,1.a also assures that 121 cooling water pump is aligned to provide cooling water to the same train as the train from which it is being powered (e.g.. if 121 cooling water pump '.s aligned to. Train B cooling water header, it needs.to be powered from Bus 26 and, ultimately, Diesel i Generator D6 in tha event of a loss of offnite power). Otherwise, the single failure of e diesel generator could lenve one train of engineered safety features without power and the other train without cooling water. The minimum fuel supply of 19,000 gallons will supply one diesel driven cooling wat er pump for 14 days. Noto that the 19,000 gallon requirement is , included in the 70,000 gallon total diesel fuel oil requirement of
.,secification 3.7.A.5 for Unit 1.
1
------__.-.s_-______--m._ - . . - . . , . _ , - - , . . , . , , . , , - - . v --e.7%. #,,.y_..e ,. f,.-,_,_,.,%.r,. m. ,.,o e. y % r-y -m
i B.3.3 4 i 4 3.3 EUalNEERED__ SAFETY FFATUREE 3 J EqEra continued < l The Safeguards Travelinf. Screens and Emergency Cooling Water Supply line ! are designed to provide a supply of screeneo cooling water in the event chat an earthquake 1) 6estroys Dam No. 3 (dropping the water level in the normal canal to the screenhousa) and 2) causes the banFs bordering the normal canal to the screenhouse to collapse eliminating the rivor as a source of cooling water. The Safeguards Traveling Screens and Emergency Coo.1.ing Water Supply line provide an alternate supply of water to the Safeguards Bay, which contair.s the two diesel driven and the one vertical motor driven cooling water pumps. Their normal supply is from the Circ Vater Bs.y thru ona of two sluice Sates. Either one of the two , sluice gates or one of the two Safeguards Traveling Screens will ' adequately supply any of the three cooling water pumps. The Safeguards Travoling S;reens are not considered part of the " engineered safecy features associated with the operabic diesel driven cooling water pump" for determination of operability of df us.el driven ecollug water pumps. The component cooling water system and the cooli.ng water system provide ; water for cooling components used in normal operation, such as turbine generator coaponents, and reactor auxiliary components in addition to supplying watvr 'or accident fmmtions. These systems are designed to automatically provide two sep,e i ted"nd. ant paths in e.,ch system following an accident. Each reuundant path is capable of cooling required componentn in the unit having the accident and in tho oper-ating unic, t There are several aanual valves and manually controlled motor-crerated valves in the enginecred safety feature systems that could, if ono valve is improperly positioned, prevent = the required injection of emergency ; co,lant (Reference 7). These valves are used only when tho. reactor is ; suberitical and there-is adequate time for actuation by the reactor , i operator. To ensure that the manual valve alignment is appro- priate for safety injection during power operation, these valves are tagged and the valve. position will be changed only under direct a&ninistrative control. 'For the motor aperated valves, the motor control center supply >- breaker is physically locked in the open position to ensure that a single failure in the actuation circuit or power supply would not move the valve. RefrJ.em sa
- 1. USAR, Section 3.3,2
- 2. USAR, Section 14.64 1
.i . USAR, Section 6.3.2
- 4. USAR, Section~6.3 ,
- 5. USAR Section 10 4.2
- 6. USAR- Section 10.4.1 7, USAR, Figure 6;2 1 USAR, figure 6.2-2 USAR,-:Lgure 6.2-5 USAR,cFighre 10.2-11
- . . . - . - - - . . . . . . . . . . - - - . . . . ~ - - . - . - - . . - - . - - -. . - ...-..
' f*
rt 1,5 2 3,5 .INSTRWQiTATION SyhIDj basc.g continucci Stearn Line Isolation (continuod) lint flow in coincidence with low I and safety injection or high steam . flow (111 111) in cotricidence with anNty injection. Adequato protection is afforded for breaks inside or outside the containrtent even when it is assuna d that the steam line check valves-do not function properly. Ce.tairaent "entilatiou Isolation ) l Valves in the containment put ge and inservice purge systems automatically l ,. close on receipt of a Safety Injection signal or a high radiation signal. l Caseous and particulate monitors in the exhaust strearn or a gaseous tionitor , in the exhaust s uck provide che high radiation signal. ' i von:llation System Isolation 3 in the event of a high cer gy line , upture outside of containment,
- redundant isolation dampers in certain ventila':f on ductn are c1r sed j (Reference 4). .
1 Safeguards Bus 'oltage _i Relays are provided on bures 15, 16, 25, and 26 to detect undervoltage and degraded voltage (the voltage level at which safety related equipinent snay not operate properly); Relays ate'not ptVrided on 4 kV safeguards bus 27 to detect undervoltage and degraded voltage since voltago is monitored ta the 4 kV source-safeguards hus (i.e., bus 25 or bus 26) to which tr is connected. Upon receipt of an undervoltage signal the auternntic voltage restoring scheme is actuated after a short time delay which prevents ' actuation during n9rmal transients (such es motor starting) and which allows protectivo relaying operation during faults. When degraded voltage i_s sensed,~two time delays are actuated. The first time delay is long enough to allov for normal transientc. The first tf.me delay annunciates : tnat a sustained degraded voltage conditlori exists and enables logic which ! will ensur _ that voltage and timing are adequate for safety injection loads
- by automatically performing the foll>>wir.g upon roeipt of a safety '
- injection signal: '
1, Auto start the diesel generator;
?. Soparate the bus frorn the' grid; j 3.~ Load the bus onto the diesel generator; and' '
4 Start the load sequencer-(including safety injection loads). .n ; 4 e e 1
- ,;.-.. . - - . ...___._._._..J.... _,.-____,___.a _ . - . . - _ . _ . . . . -- .,....._-m.~.,-, - - _ - - , , , . -
, B 3.5 3 3.5 JES31R41NTAT101{,,,EYEIni Enata continued The second longer time delay-is used to allow the degraded voltage condition to be corrected by external actions within a tive period that will not causo dainage to operating a nipment, If voltage is not restored within that time period, the logic a .omatically performs the following:
- 1. Auto start the diesel generator;
- 2. Separate the bus from the grid;
- 3. Load the bus onto the diesel generator; and
- 4. Start the load sequencer.
Auxiliary Feedwater System Actuation The following signals automatically start the pumps and open the steam admission control valve to the turbino driven pump of the affected unit: r
- 1. Lo s low water level in either sttam generator
- 2. Trip of both main feedwater pumps '
- 3. Safety Injection signal
- 4. Undervoltage on both 4,16 kV normal buses (turbine driven potp only)
Manual control from both the control room and the Hot Shutdown ?anel, are 4 also availabic. The design provides assurance that water can oc supplied to-the steam generators for decay heat removal when the normal feodwater system'is not available, > Limiting Instrument Setpoints i
- 1. The high containment pressure limit is set at about 10% of the maximum i L fnternal pressure. Initiation of Safety Injection protects agcinst loss of coolant (Reference 2) or steam line break accidents as discuased in the safety analy.is.
l 2 The Ili Hi containment prensure limit is set at about 50% of one maximum internal pressure for initiation of containment spray and at about 30% for' initiation of steam line isolation. Initiation of Containment spray and Steam Line isolation protects against large loss of- coolant (Reference'2) or steam lino braak accidents (Coference -3) as discussed in the safety analysis, 3.- The pressuriser low pressure limit is set substantially below system operating pressure limits, llowever, it is aufficiently high tn protect l against a loss of coolant accident as shown- in the safety analysis-(Reference'2), 1' ; l
- l
~ ~ , . . , _ , - - . , , . - - . . - - . - , . - - . , . ~ , . .. . . . - . - , . . . - , . . .,.,-,-------.-....,4...-..- . . . . . , - - - - - , -
B.3.5 4
- i. -
3.5 INSTRUMENTATION SYSTEti Basta continued Limiting Instrumcnt Setpoints (continued) ,
- 4. The steam line low pressure signal is 1 cad / lag compensated and its '
set coint is cet well above the pressure expected in the event of a large steam line break accident as shown in the safety analysis (Reference 3).
- 5. The hig) steam lina flow limit is set at app oximately 20% of nominal ;
full los flow at the no load pressure and the high high steam line flow limit is set at approximately 120% of noainal full-load flow at the full load pressure in order to protect against large steam break accidents. ' The coincident low T setting limit for steam line isolation initiation!rsetbelyow its hot shutdown value. The safety analysis shows that these settings provide protection in the event of a large steam break (Reference 3).
- 6. Steam generator low low water level and 4.16 kV Bus 11 and 12 (21 and 42 in Unit 2). low bus voltage provide iniciation sib nals for the Auxiliary Feedwater System. Selection of these setpoints is discussed in the Bases of Section 2.3 of the Technical Specification, ;
7, liigh radiation signals providing input to the containment ventilation Isolation circuitry are set in accordance with the Radioactive Effluent l Technical Specifications. The setpoints are established to prevent exceeding _the. limits of 10 CFR Part 20 at the EITE BOUNDARY, c ta= degraded voltage protection'setpoint is 961 2% (Unit 2: 87.51 3.5%) l of nominal 4160 V bus voltage. Testing and analysis have shown that all i feguards loads will operate properly at or above the minimum degraded oltage setpoint. lThe maximum degraded voltage setpoint is chosen to prevent. unnecessary actuation of the voltnge restoring schemo at the l minimum expected grid voltage. The first degradod voltage time delay of- j
- 8:1 0.5 second.t has been shown by testing and analysis to be long enough to allow for normal transients (!'.e., motor, starting and~ fault ,
clearing). It is also longer than the time required to start the safety- ' L. injection pump at minimum voltage. The second degraded voltage time L delay ~is provided to allow the degraded voltage condition to be L corrected within a time frame which will not cause damage to permanently - p connected Class 1E loads, b l, I lo f b e - - - , y y x, 4 ,im - -...--..~,.e. # r- w. .y . , . , . . - r 4. r .c . , - , . , * + . . . . . - . . , . e ....r.. ~ = . . - =m -.-,,w.., ,,-...-
_ _ . . _ . . _ _ . _ . _ - . . _ _ _ _ _ _ __._ _.. _ __~.. _ _ ._ _ __ . _ . _ _ _ _ . _ _ B.3.5-5 3.51NSTRUMENTATION SYSTEM . 8ades continued Limiting Instrument Setpoints (continued) , The undervoltage serpoint is 75 1 2.5% of nominal bus voltage. The : minimum setpoint ensures equipment operates above the limiting value of 1 754 (of 4000 V) for one minute operation. The 75% maximum setpoint is chosen to prevent unnecessary actuation of the. voltage restoring scheme ! during voltage dips which occur during motor starting. The undervoltage time delay of 4 1 1.5 seconds has been shown by testing and analysis to ; be long enough to allow for normal transients and shott enough to ; operato prior to the de6raded voltage ?ogic, providing a rapid transfer to an alternate source. g Instrument Operuting Conditions During plant' operations, the complete instrumentation systems will normally be in service. Reactor safety is provided by the Reactor Protection ,
-System, which automatically initiates appropriate action to prevent ;
exceeding eatablisix1 11mits. Gafety is not comprc.mised, however, Ly ; Jcontinuing operatio . <ith certain instrumentation channels out of service , since proviatona were made for this in the plant design. This , , specification outlines limiting conditions for operation necessary to. preserve the effectiveness of the Reactor Control and Protection System when any one or more ol' the channels is out of service. Almost all reactor protection channele are supplied with sufficient redundancy to provide the capability for-CilANNEL CALIBRATION and test at power. Exceptions are backup channela such as reactor coolant pump
- breakers.- The removal of one trip channel.on process control equipment-is n accomplished by placing that channel histable in a tripped mode; e.g. , a ;
two.out of three circuit becones a one out of two circuit. The source and ' intermediate range' nuclear instrumentation system channels are.not intentionally placed in a tripped mode since these are one out of two . trips, and the trips are therefore bypassed during testing. Toscing doss not trip the system unless a trip condition exists in a concurrent channel. Etftrs.asrJi
- 1. USAR.-Section 7.4.2-2, -USAR, Sec tion 14. 6.1 -
- 3. USAR, Section 14.5.5
- 4. FSAR, Appendis 1 I
,-,mm, ~. -_,4,.1.,-o. ,.,-m.,_- -,m., , , .m ,, m.,-~,- .4-.A.,~. ..m.,.... .- . . . - - , . . _ . - -
l i r E.3.7 1 ; 3.7 AUXill ARY ELECTRICAL. SYSTEM ; Enfha. The inten; af this specification is to provide astu.rance that at least f one extet al source and one scandby source of electrical power is always ' available to accompitsh safe shutdown and containment isolation and to operate required engineered safeguards equipment following an accident. Plant auxiliary power can be supplied froa four separnte external power , sources vhich have multiple off site network connectionn: the reserve transformer from the 161 kV portion of the plant substation; the second reserve transformer from the 34S kV portion of the plant substation and the two cooling towet transformers, one of which is supplied from a tertiary winding on the substation auto transformer, and the other directly from the 345 kV switchyard. Any one of the four sources is sufficient, unde.' analyred conditions, to supply all the necessary accident and post accident load requirements for one reactor, along with the shutdown of the second reactor. Each source separately supplies the safeguarda busos in such manner that ; items of equipment which are redundant to each other are supplied by separate sources and bases. Each diesel generator D1 or D2 (Unit 2: D5 or 06), tu connected to its. associated 4160 volt safeguards Sus ir Unit 1 (Unit 2) and each '
- diesel generator has sufficient capacity to start sequentially and operate the safeguards equipment supplied by its associated bun. The set of safeguards equipment items supplied by each bas is, alone,
, sufficient to maintain adequate cooling of the fuel and to maintain containment pressure within the design value in the event of a
- lous of coolant accident.
l If no offsite source is available to the associated bus, each diesel l starts automatically upon receipt of an undervoltage signal on its i associated bus. Both diesel generators start in the event of a safety [ injection si nal 6 for the reactor. The minimum fuel supply of 51,000 gallons will cupply one Unit I diesc1 generator for 14 days. Note that the 51,000 gellon requirement is included in the 70,000 gallon total requirement for Unit 1. The total fuel supply of 70,000 gallons will supply one diesel driven cooling wat(ir pump and one Unit 1 diesel generator (loadad per USAR Table 8,4 1) for greater than 14 days (Unit 2: A fuel supply of 61 300 gallons will supply one Unit 2 diesel 3
-generator'for-7-days at rated-load calculated per the conservative- ,
-method'of ANSI-N!95 1976. A mininum fuel supply of 75.000 gallons was
~
l-conservativaly chosen to supply one Unit 2 diesel generator for 14 days l calculated per the time dependent method of AN91 N195-1976.) Additional- ; l diesel fuel. can normally be obtained within a few houra. This assurcs L sus adequate supply even in the event of the pet.babic maximum flood. 1
- - ~ .
i B.3.7-2 3.7 AUXILIARY ELECTRICAL SYS M E.a12.a continued Following the inoperability of a Diesel Cencrator, the redundant diesel generator is tested to prove that the caure of the inoperability does not affect both diesel generators. However, if the dicac1 generator is inoperable I i cae to preplanned preventative maintenance, operability of the redundant l diesel generator does not need to be proven. The plant 125 volt d c power is norna11y supplied by two batteries for each ) plant, each of which will have a battery charger in service to maintain full j charge end to assure adequate power for starting the -! diesel generators and supplying other emergency loads. The arrangement es the auxiliary pwer sources and equipment and this opecification assure that no single fault condition will deactivate more than one redundant set of safeguard equipment items in one reactor and will therefore not result in failure of the plant protection system to respond adequately to a loss of coolant accident. { i k e I l-I l' Referenqn USAR, Section 8' l- USAR, Figure 8.2-2 l-
'I
s a B.4.6-1 4,6 PERIQDIC. TEXTINC OF PMERGENCY PO' DER SYSTEtil Bases The monthly tests specified for the diesel generators will demonstrate their continued capability to start and to carry load. The fuel supplies and starting circuits and controls are continuously monitored, and ahormal conditions in these systerns would be alarin indicated without need for test st9rtup. The less frequent overall system test will demonstrate t hr.t the ettergency power system and the control nyatems for the engineered safeguards equipment will function automatically in the event of loss of all other sources of a c power, and that t.he diesel generators will start automatically in the event of a inss-cf-coolant accident. This test vill demonstrate proper tripping of motor icoder breakers, main supply and tic breakers on the affected bus, and sequential starting of essential equipment, as well as the OPERABILITY of the diesel generators. The load rejection test will demonstrate the capability to j reject the singic largest emergency load without tripping. [ The specified test frequencies provide reasonable assurance thc.t any mechanical or electrical deficiency will be detected and corrected before it can result in failure of one emergency power supply to respond shen called upon to function. It's possible failure to respond is, of course, anticipated by providing two diesel generators per unit, each l supplying, through an independent bus, a complete and adequate set of engineered safe 6uards equipreent. Further, both diesel generators are provided as backup to multiple sources of external power, and this multiplicity of sources should be considered with regard to adequacy of test frequency. Each diesel generator can start and be ready to accept full load within 10 seconds, and will sequentially start and supply the power requirements for one complete set of saicguards equipment in approximately one minute (Refercnce 1). An internal fault in the generator could damage the generator severely. Moreover, this change complier, with BTP E1CSB 17. Auto connected loads should not exceed the overload rating of the diesel generator for the 2000 hour maintenance interval, as prescribed in Rec,ulatory Guide 1.9. Station batterios will deteriorate with time, but precipitous failure is extremely unlikely. The surveillance specified is that which has been demonstrated over the years to provida indication of a en11 becoming unserviceable long before it fails. If a battery cell has deteriorated, or if a connection is loose, the veltage under load will drop excessively, indicating need for replacement or maintenance. I
._}}