ML20196B972

From kanterella
Revision as of 08:23, 13 November 2020 by StriderTol (talk | contribs) (StriderTol Bot change)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
Proposed Tech Specs,Allowing Limited Inoperability of Bast Level Channels & Transfer Logic Channels to Provide for Required Testing & Maint of Associated Components
ML20196B972
Person / Time
Site: Prairie Island  Xcel Energy icon.png
Issue date: 11/25/1998
From:
NORTHERN STATES POWER CO.
To:
Shared Package
ML20196B954 List:
References
NUDOCS 9812010217
Download: ML20196B972 (21)


Text

.- _ - . .. . .. ..

l .

l EXHlBIT B PRAIRIE ISLAND NUCLEAR GENERATING STATION l 1

License Amendment Request dated November 25,1998 l l l

l 1

Appendix A, Technical Specification Pages l Marked Up Pages (shaded material to be added, strikethrough material to be removed)

TS.3.2-1  !

Table TS.3.5-2B (Page 6 of 9) l Table TS.3.5-2B (Page 9 of 9)

B.3.5-1 B.3.5-4

! B.3.5-5 i

B.3.5-6 l

l l

l l

l l

l 9812010217 981125 l- PDR P pon ADDCK 05000282{1

s TS.3.2-1 REV 111 10/27/80 i 3.2 CHEMICAL AND VOLUME CONTROL SYSTEM Applicability

. Applies to the operational status of the chemical and volume control system.  ;

Qbjective To define those conditions of the chemical and volume control system i necessary to assure safe reactor operation and safe COLD SHUTDOWN. '

Snecification A. When fuel is in a reactor and reactor coolant system average temperature is at or below 200*F there shall be at least one flow path to the core for boric acid injection. If no OPERABLE flow path exists. suspend all operations involving CORE ALTERATIONS or 7

positive reactivity changes.

B. - A ' reactor shall not be made or maintained critical nor shall the reactor coolant system average temperature exceed 200'F unless the following conditions are satisfied (except as specified in 3.2.C or  ;

3.2.D belo ): '

1. Two of the three charging pumps shall-be OPERABLE.
2. At least one boric acid tank shall be aligned to the unit and l shall contain a minimum of 2000 gallons of 11.5% to 13% by weight boric acid solution at a temperature of at least 145'F.

l

3. System piping, valves and pumps shall be OPERABLE to the extent l of establishing two independent flow paths for boric acid injection -- one flow path from the boric acid tanks to the core and one flow path from the refueling water storage tank to the core.
4. Two channels of heat tracing shall be OPERABLE for the flow paths from the boric acid tanks required to meet the requirements of

-Specification-3.2.B.3. i

5. Automatic valves, piping, and interlocks associated with the above components which are required to operate for the steam line break
accident are OPERABLE.

l.

i i

l-t

- - . - - - _ - _ _ _ _ _ . . _ ~ ._______...._ _ ___. ._.- -- _.- ----___- __ _ - _ - _ _ _ _ _

E TABLE TS.3.5-2B (Page 6 of 9)

ENGINEERED SALETY FEATURE ACTUATION SYSTEM INSTRUMENTATION MINlMUM

. TOTAL NO. CHANNELS CHANNELS A_PPLICABLE EMNCTIONAL UNIT OF CHANNELS TO TRI_E OPERABLE MODES ACTION

8. LOSS OF POWER
a. Degraded Voltage 4/ Bus 2/ Bus 3/ Bus 1, 2, 3, 4 31, 32, 33 4kV Safeguards Bus (2/ phase on (1/ phase 2 phases) on 2 phases)
b. Undervoltage 4/ Bus 2/ Bus 3/ Bus 1. 2, 3, 4 31. 32, 33 4kV Safeguards Bus (2/ phase on (1/ phase 2 phases) on 2 phases)

NN l  ! -

d kva an4;r ex meu  ; s ail raama 34

,m ..

I in==om msu a  ! f f bmm imm k ? b!

ws t o" i o

b a

L l

_ . _ _ _ _ . _ _ _ . _ _ . _ _ _ _ ______________.m_________..______% __ . _ _ _ _ _ _ _ _ _ _ ______m_ -

_ . _ _ _ _ _ u..s__ _ .-we- e =.______-m__._.u. _ _ . _ < . .-_-.-__._____m_._-.u-

-_______.________e--

TABLE 3.5-2B (Page 9 of 9)

Action Statements ACTION 30: With the number of OPERABLE channels ACTION 33: If the requirements of ACTIONS 30 or 31 one less than the Total Number of cannot be met within the time Channels, declare the associated specified, or with the number of auxiliary feedwater pump inoperable and OPERABLE channels three less than the take the action required by Total Number of Channels, declare the Specification 3.4.2. However, one associated diesel generator (s) .

channel may be bypassed for up to 8 inoperable and take the ACTION required hours for surveillance testing per by Specification 3.7.B.

Specification 4.1 provided the other channel is OPERABLE. &#M$$18'EW ACTION 31: With the number of OPERABLE channels ' tigiberf .

N F

MC_ _ fW one less than the Total Number of Ll l T d M _ > Mitt %1ii!

Channels. operation in the applicable HODE may proceed provided the i

hhmaneE W itt $ 1e L::onetitients93591(gli :bsMWebaMtled

"_lf$neh M inoperable channel is placed in the Minianna C " ' '

bypassed condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. Wegg . LFM . W ' ' ' 'Ttbl idopdrab. "i .

ACTION 32: With the number of OPERABLE channels two less than the Total Number of stutuksJ' Aasit?

- M[te}

h aijidtfbalWiliM

'iwishinXtifsGnest Channels, operation in the applicable Jonist SL _ NS1littDOWal MODE may proceed provided the following . L hi '~ "glhD1hougii2 conditions are satisfied:

W@IME41IhiotietheinopentaMU

a. One inoperable channel is placed in EastorettMiineperen16hentslito the bypassed condition within 6 DPEltAB14 hours, and. )ies in Estd(4tMustitJalsn@

eDbMS8WIDC111%Mitiiisi 25bsbrs Ssi thissutT&henka?stidfl6JCdLD

b. The other inoperable channel is hBUTDOWN!sithiniths%fdlio0inIDd placed in the tripped condition hodr,s3 h 2 !s!

within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, and. <

h@CTIDNNE'N35 cb"asEElsiasyi SeYia~op'7sb1Rf6EES $@

e - t=8

c. All of the channels associated with itdT1thbucatori servell haseMes tisagjpe s [ *e r the redundant 4kV Safeguards Bus Sp6Eificatida W If33Restord$atklaast ,0,,."

are OPERABLE. Onlitidhria151?ifd 7098tAttf atstus Mthis u ithisf1thoetrYoilinitietStheishtism cx 6

hheessai 2 esp 14eeEthetaffektedhteiiEiii  ? 4 ,

IlOTr. .icdadibeilm"at31eesi40T c to hug 90NW%il.*MVth inantEbhonisMand3ii 'E COLIP3801!BlNBijtithis3th41fd11ownsidQ homesid

]

. . _ _ . _ _ _ _ _ _ . . _ _ _ . _ _ . _ _ _ _ _ _ . _ _ _ _ . _ _ _ . _ _ __.._______m_______ __ __. - _ . - _ . - - _ . . . . - . . , .

f. , 4 B.3.5-1 REV-441 S A10/94 3.5 INSTRUMENTATION SYSR.M DBr&ti Instrumentation has been provided to sense accident conditions and to initiate reactor trip and operation of the Engineered Safety Features (Reference 1). The OPERABILITY of the Reactor Trip System and the Engineered Safety System instrumentation and interlocks ensures that: (1) the associated ACTION and/or reactor trip will be initiated when the parametet monitored by each channel or combination thereof reaches its setpoint. (2) the specified coincidence logic and sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance consistent with maintaining an appropriate level of reliability of the Reactor Protection and Engineered Safety Features instrumentation and, (3) sufficient system functions capability is available from diverse parameters.

The OPERABILITY of these systems is required to provide the overall reliability redundancy and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analysis.

Specified surveillance and maintenance outage times have been determined in accordance with WCAP-10271, " Evaluation of Surveillance Frequencies and

, Out of Service Times for the Reactor Protection Instrumentation System",

l and supplements to that report. Out of service times were determined '

i based on maintaining an appropriate level of reliability of the Reactor i Protection SyJtem and Engineered Safety Features instrumentation'.ET(BErid I XElF5EESTTrEEs~EEumEEEElWYSidh3Eoilde^dfiEEdiEf3Dr'anhfer24f h a fetElinj e cti$$suc tionivasdiquodelkcIlinithis sWCAP , j The evaluation of surveillanes recquenc4es and out of service times for l the reactor protection and engineered safety feature instrumentation described in WCAP-10271 included the allowance for testing in bypass. The evaluation assumed that the average amount of time the channels within a I given trip function would be in bypass for testing was 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

l Safety Injection l

l The Safety Iniection System is actuated automatically to provide emergency j j cooling and ruduction of reactivity in the event if a loss-of-coolant  ;

accident or a eteam line break accident.
Safety injection in response to a loss-<!-c
nn. accident (LOCA) is provided by a high containment pressurs s -! 3nal wacked up by the low pressurizer pressure signal. These cvrc.H ict s would accompany the depressurization and coolant loss during 9 LOCA.

Safety injection in response to a stsam itne break is provided directly by a low steam line pressure signal, backc3 up by the low pressurizer pressure signal and, in case of a break within the containment, by the high containment pressure signal.

The safety injection of highly borated water will offset the temperature-induced reactivity addition that could otherwise result from cooldown following a steam line break.

B.3.5-4 REV 111 S/20/04 3.5 INSTRUMENTATION SYSTEM Basas continued M EN E NN **F7ih393cENUE60 The( MM '

~~beric@TGE.TEUBE7tWrews 1 a p

Mafst Ea.

stim.g 1

' Qhhg n

Bibe? ' " sborsMacid/stsrsgd

/~ -,Litom{deTdflo. fi_irvelW5ii m m7 ~ m

^

.a N, P8HpsysucticaJr9el j

$~ ' .. ,

I p -

RMrege(t48tkM59td l s J"Yo l

init$

hesocistudi isEssidimanc$$#astsidiM$NasT4Eis mditpibe3NMalas Limiting Instrument Setpoints

1. The high containment pressure limit is set at about 10% of the maximum internal pressure. Initiation of Safety Injection protects against loss of coolant (Reference 2) or steam line break accidents as discussed in the safety analysis.

! i

2. The Hi-Hi containment pressure limit is set at about 50% of the maximum internal pressure for initiation of containment spray and at about 30% for initiation of steam line isolation. Initiation of Containment Spray and Steam Line Isolation protects against large loss of coolant (Reference 2) or steam line break accidents (Reference 3) as discussed in the safety analysis.
3. The pressurizer low pressure limit is set substantially below system operating pressure limits. Fowever, it is sufficiently high to protect against a loss of coolant accident as shown in the safety analysis (Reference 2). ,
4. The steam line low pressure signal is lead / lag compensated and its set-point is set well above the pressure expected in the event of a l large steam line break accident as shown in the safety analysis l (Reference 3). )

l

5. The high steam line flow limit is set at approximately 20% of nominal j full-load flow at the no-load pressure and the high-high steam line I flow limit is set at approximately 120% of nominal full-load flow at

! the full load pressure in order to protect against large steam break

[ accidents. The coincident low T.,,, setting limit for steam line isolation initiation is set below its hot shutdown value. The safety analysis shows that these settings provide protection in the event of a large steam break (Reference 3). '

I 6. Steam generator low-low water level and 4.16 kV Bus 11 and 12 (21 and i 22 in Unit 2) low bus voltage provide initiation signals for the Auxiliary Feedwater System. Selection of these setpoints is discussed in the Bases of Section 2.3 of the Technical Specification.

i 4

h

- . - . - - . -- -. . . ~ _ . .- . - .-.~.-. - .- - - . - - - . _ -

4 ~g

B.3.5-5 REV 111 S/10/94 .

i l

3.5 INSTRUMENTATION SYSTEM Bases continued Limiting Instrument Setpoints (continued)

7. High radiation signals providing input to the Containment Ventilation  ;

Isolation circuitry are set in accordance with the Radioactive l Effluent Technical Specifications. The setpoints are established to l prevent exceeding the limits of 10 CFR Part 20 at the SITE BOUNDARY. ,

l

8. The degraded voltage protection setpoint is 294.8% and 596.2% of nominal 4160 V bus voltage. Testing and analysis have shown that all  ;

safeguards loads will operate properly at or above the minimum l degraded voltage setpoint. The maximum degraded voltage setpoint is l chosen to prevent unnecessary actuation of the voltage restoring l scheme at the minimum expected grid voltage. The first degraded voltage time delay of 8 i 0.5 seconds has been shown by testing and  ;

analysis to be long enough to allow for normal transients (i.e., motor j starting and fault clearing). It is also longer than the time required to start the safety injection pump at minimum voltage. The second degraded voltage time delay is provided to allow the degraded i voltage condition to be corrected within a time frame which will not  ;

cause damage to permanently connected Class IE loads.

The undervoltage setpoint is 75 i 2.5% of nominal bus voltage. The j minimum setpoint ensures equipment operates above the limiting value of 75% (of 4000 V) for one minute operation. The 75% maximum setpoint is chosen to prevent unnecessary actuation of the voltage restoring j scheme during voltage dips which occur during motor starting. The l undervoltage time delay of 4 1.5 seconds has been shown by testing j and analysis to be long enough to allow for normal transients and j short enough to operate prior to the degraded voltage logic, providing I a rapid transfer to an alternate source.

Instrument Operating Conditions During plant operations, the complete instrumentation systems will normally be in service. Reactor safety is provided by the Reactor Protection System, which automatically initiates appropriate action to prevent exceeding established limits. Safety is not compromised, however, by continuing operation with certain instrumentation channels out of service since provisions were made for this an the plant design. This specification outlines limiting conditions for operation necessary to preserve the effectiveness of the Reactor Control and Protection System when any one or more of the channels is out of service.

Almost all reactor protection channels are supplied with sufficient l redundancy to provide the capability for CHANNEL CALIBRATION and test at '

power. Exceptions are backup channels such as reactor coolant pump breakers. The removal of one trip channel on process control equipment is accomplished by placing that channel bistable in a tripped mode: e.g.. a l two-out-of-three circuit becomes a one-out-of-two circuit. The source and I intermediate range nuclear instrumentation system channels are not

- .. _- . . - ~ . __ .- -_ . _ . _ . -. . -.

o ,

II8EM I l

n l

I-p 1

intentionally.placed in a tripped mode since these are one-out of-two  !

trips, and the trips are therefore bypassed during testing. Testing does not trip the system unless a trip condition exists in a concurrent channel.

1 References

1. USAR, Section 7.4.2 I
2. USAR, Section 14.6.1
3. USAR, Section 14.5.5
4. FSAR, Appendix I l i

l i

I t

l i

i I

I i

l-4 l

l

l EXHIBIT C j

\

PRAIRIE ISLAND NUCLEAR GENERATING STATION License Amendment Request dated November 25,1998 Appendix A, Technical Specification Pages Revised Pages i

TS.3.2-1 Table TS.3.5-2B (Page 6 of 9)

Table TS.3.5-2B (Page 9 of 9)

B.3.5-1 B.3.5-4 B.3.5-5 ,

B.3.5-6 I

l I

i l

]

~,

TS.3.2-1 1

l 3.2 CHEMICAL AND VOLUME CONTROL SYSTEM i

Applicability Applies to the operational status of the chemical and volume control '

system.

Qbjective To define those condition of the chemical and volume control system necessary to assure safe reactor operation and safe COLD SHUTDOWN.

Specification

]

A. When fuel is in a reactor and reactor coolant system average temperature is at or below 200*F there shall be at least one flow path to the core for boric acid injection. If no OPERABLE flow path exists, suspend all operations involving CORE ALTERATIONS or positive reactivity changes. l l

B. A reactor shall not be made or maintained critical nor shall the reactor coolant system average temperature exceed 200 F unless the following conditions are satisfied (except as specified in 3.2.C or 3.2.D below, or Table TS.3.5-2B):

1. Two of the three charging pumps shall be OPERABLE.
2. At least one boric acid tank shall be aligned to the unit and shall contain a minimum of 2000 gallons of 11.5% to 13% by weight boric acid solution at a temperature of at least 145F.
3. System piping, valves and pumps shall be OPERABLE to the extent l

of establishing two independent flow paths for boric acid

injection -- one flow path from the boric acid tanks to the core and one flow path from the refueling water storage tank to the Core.
4. Two channels of heat tracing shall be OPERABLE for the flow paths from the boric acid tanks required to meet the requirements of Specification 3.2.B.3.

l S. Automatic valves, piping, and interlocks associated with the above

! components which are required to operate for the steam line break l accident are OPERABLE.

,. e TABLE TS.3.5-2B (Page 6 of 9)

ENGINEERED SAFETY FEATURE ACTUATION SYSTEM INSTRUMENTATIO_H M_INIMUM TOTAL NO. CHANNELS CHANNELS APPLICABL_E FUNCTIONAL UNIT OJ CHANNELS TO TRIP OPERABLE MODES ACTION

8. LOSS OF POWER
a. Degraded Voltage 4/ Bus 2/ Bus 3/ Bus 1, 2, 3, 4 31, 32, 33 4kV Safeguards Bus (2/phace on (1/ phase 2 phases) on 2 phases)
b. Undervoltage 4/ Bus 2/ Bus 3/ Bus 1, 2. 3, 4 31, 32, 33 4kV Safeguards Bus (2/ phase on (1/ phase 2 phases) on 2 phases)
9. BORIC ACID STORAGE TANK
a. Lo-Lo Level 2 channels 1 sensor 2 sensors 1. 2, 3, 4 34 with 2 per in one sensors per channel channel channel in both channels
b. Automatic Actuation Logic 2 1 2 1. 2. 3. 4 35, 36 and Actuation Relays E$

%s e"

b

t IABLE 3.5-2B (Page 9 of 9)

Action Statem_qrtt_a ACTION 30: With the number of OPERABLE channels ACTION 33: If the requirements of ACTIONS 30 or 31 one less than the Total Number of cannot be met within the time Channels, declare the associated specified, or with the number of auxiliary feedwater pump inoperable and OPERABLE channels three less than the take the action required by Total Number of Channels, declare the Specification 3.4.2. However, one associated diesel generator (s) channel may be bypassed for up to 8 inoperable and take the ACTION required hours for surveillance testing per by Specification 3.7.B.

Specification 4.1. provided the other channel is OPERABLE. ACTION 34: With the number of OPERABLE ,

channels less than the Total ACTION 31: With the number of OPERABLE channels Number of Channels, operation may one less than the Total Number of proceed provided the inoperable Channels, operation in the applicable channel is placed in the tripped MODE may proceed provided the condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and the inoperable channel is placed in the Minimum Channels OPERABLE bypassed condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. requirement is met. Restore the inoperable channel to OPERABLE ACTION 32: With the number of OPERABLE channels status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at two less than the Total Number of least HOT SHUTDOWN within the next Channels, operation in the applicable 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN MODE may proceed provided the following within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

conditions are satisfied:

ACTION 35: With one channel inoperable,

a. One inoperable channel is placed in restore the inoperable channel to the bypassed condition within 6 OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or hours, and, be in at least HOT SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD
b. The other inoperable channel is SHUTDOWN within the following 30 placed in the tripped condition hours. 2 52 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, and. Qp ACTION 36: Two channels may be inoperable for up M
c. All of the channels associated with to I hour for surveillance testing per s the redundant 4kV Safeguards Bus Specification 4.1. Restore at least &Pw are OPERABLE. one channel to OPERABLE status within this I hour or initiate the action *6 necessary to place the affected unit in a HOT SHUTDOWN, and be in at least HOT W SHUTDOWN within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

_. _ _. _ _ . - .__ _ - ______._.m.m. _ _ . . _ _ . . _ _ . - _ _ . - . _ _ _ . _ _ _ _

e ..

B.3.5-1 3.5 INSTRUMENTATION SYSTEM BAFEJi Instrumentation has been provided to sense accident conditions and to initiate reactor trip and operation of the Engineered Safety Features (Reference 1). The OPERABILITY of the Reactor Trip System and the Engineered Safety System instrumentation and interlocks ensures that: (1) {

the associated ACTION and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic and sufficient redundancy is maintained to permit a channel to be out of service for testing or '

maintenance consistent with maintaining an appropriate level of I reliability of the Reactor Protection and Engineered Safety Features l l

instrumentation and, (3) sufficient system functions capability is available from diverse parameters.

1 The OPERABILITY of these systems is required to provide the overall  ;

i reliability, redundancy and diversity assumed available in the facility {

l design for the protection and mitigation of accident and transient  !

conditions. The integrated operation of each of these systems is I consistent with the assumptions used in the safety analysis. l Specified surveillance and maintenance outage times have been determined in accordance with WCAP-10271, " Evaluation of Surveillance Frequencies and l Out of Service Times for the Reactor Protection Instrumentation System",

and supplements to that report. Out of service times were determined based on maintaining an appropriate level of reliability of the Reactor Protection System and Engineered Safety Features instrumentation. (Boric Acid Storage Tank instrumentation which provides automatic transfer of  ;

safety injection suction was not modeled in this WCAP.)

The evaluation of surveillance frequencies and out of service times for the reactor protection and engineered safety feature instrumentation described in WCAP-10271 included the allowance for testing in bypass. The evaluation assumed that the average amount of time the channels within a given trip function would be in bypass for testing was 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. ,

i Safety Injection l The Safety Injection System is actuated automatically to provide emergency

! cooling and reduction of reactivity in the event of a loss-of-coolant j accident or a steam line break accident, i

Safety injection in response to a loss-of-coolant accident (LOCA) is

( provided by a high containment pressure signal backed up by the low l

pressurizer pressure signal. These conditions would accompany the j

depressurization and coolant loss during a LOCA.

I Safety injection in response to a steam line break is provided directly by

a low steam line pressure signal, backed up by the low pressurizer pressure signal and, in case of a break within the containment, by the

'. high containment pressure signal.

The safety injection of highly borated water will offset the temperature-induced reactivity addition that could otherwise result from

. cooldown following a steam line break, i

)

B.3.5-4 i

3.5 INSTRUMENTATION SYSTEM l Hagga continued i Automatic Transfer of Safety Injection Suction I The plant is equipped with three boric acid storage tanks for the two units. One tank is normally aligned to the safety injection system for each unit. Following initiation of the Engineered Safety Features, the safety injection pumps take suction from the aligned boric acid storage tank. When the boric acid storage tank level falls to the lo-lo level, an interlock automatically transfers the safety injection pumps suction from the boric acid storage tank to the refueling water storage tank. The boric acid storage tank that is not aligned to either unit, including its associated piping and interlocks, is not required to be OPERABLE.

Limiting Instrument Setpoints

1. The high containment pressure limit is set at about 10% of the maximum internal pressure. Initiation of Safety Injection protects against loss of coolant (Reference 2) or steam line break accidents as discussed in the safety analysis.
2. The Hi-Hi containment pressure limit is set at about 50% of the l maximum internal pressure for initiation of containment spray and at l about 30% for initiation of steam line isolation. Initiation of
Containment Spray and Steam Line Isolation protects against large loss of coolant (Reference 2) or steam line break accidents (Reference 3) as discussed in the safety analysis.
3. The pressurizer low pressure limit is set substantially below system operating pressure limits. However, it is sufficiently high to protect against a loss of coolant accident as shown in the safety i

analysis (Reference 2).

4. The steam line low pressure signal is lead / lag compensated and its l set-point is set well above the pressure expected in the event of a l large steam line break accident as shown in the safety analysis l (Reference 3).
5. The high steam line flow limit is set at approximately 20% of nominal full-load flow at the no-load pressure and the high-high steam line flow limit is set at approximately 120% of nominal full-load flow at the full load pressure in order to protect against large steam break

( accidents. The coincident low T ,, setting limit for steam line isolation initiation is set below its hot shutdown value. The safety i

analysis shows that these settings provide protection in the event of a large steam break (Reference 3).

6. Steam generator low-low water level and 4.16 kV Bus 11 and 12 (21 and 22 in Unit 2) low bus voltage provide initiation signals for the Auxiliary Feedwater System. Selection of these setpoints is discussed in the Bases of Section 2.3 of the Technical Specification.

i s .  !

, 1 s'

B.3.5-5 1

3.5 INSTRUMENTATION SYSTEM i i

Bases continued Limiting Instrument Setpoints (continued)

7. High radiation signals providing input to the Containment Ventilation  ;

Isolation circuitry are set in accordance with the Radioactive Effluent Technical Specifications. The setpoints are established to prevent exceeding the limits of 10 CFR Part 20 at the SITE BOUNDARY.  ;

8. The degraded voltage protection setpoint is 294.8% and $96.2% of nominal 4160 V bus voltage. Testing and analysis have shown that all safeguards loads will operate properly at or above the minimum degraded voltage setpoint. The maximum degraded voltage setpoint is chosen to prevent unnecessary actuation of the voltage restoring scheme at the minimum expected grid voltage. The first degraded voltage time delay of 8 i 0.5 seconds has been shown by testing and i analysis to be long enough to allow for normal transients (i.e., motor starting and fault clearing). It is also longer than the time required to start the safety injection pump at minimum voltage. The second degraded voltage time delay is provided to allow the degraded voltage condition to be corrected within a time frame which will not cause damage to permanently connected Class IE loads.

l The undervoltage setpoint is 75 1 2.5% of nominal bus voltage. The 2 minimum setpoint ensures equipment operates above the limiting value j l of 75% (of 4000 Vi for one minute operation. The 75% maximum setpoint j is chosen to prevent unnecessary actuation of the voltage restoring .

I scheme during voltage dips which occur during motor starting. The undervoltage time delay of 4 1.5 seconds has been shown by testing and analysis to be long enough to allow for normal transients and short enough to operate prior to the degraded voltage logic, providing a rapid transfer to an alternate source.

l Instrument Operating Conditions During plant operations, the complete instrumentation systems will normally be in service. Reactor safety is provided by the Reactor Protection System, which automatically initiates appropriate action to prevent exceeding established limits. Safety is not compromised, however.

by continuing operation with certain instrumentation channels out of service since provisions were made for this in the plant design. This ,

specification outlines limiting conditions for operation necessary to )

preserve the effectiveness of the Reactor Control and Protection System l when any one or more of the channels is out of service.

Almost all reactor protection channels are supplied with sufficient a redundancy to provide the capability for CHANNEL CALIBRATION and test at power. Exceptions are backup channels such as reactor coolant pump l breakers. The removal of one trip channel on process control equipment is accomplished by placing that channel bistable in a tripped mode: e.g., a

! two-out-of-three circuit becomes a one-out-of-two circuit. The source and intermediate range nuclear instrumentation system channels are not l _ __ __ - _ ,

e ..

. .. g

., .?

+

I. B.3.5-6 3.5 . INSTRUMENTATION SYSTEM Bases. continued Instrument Operating Conditions (continued)

'ntentionally i placed in a tripped mode since these are one-out of-two trips,'and the trips are therefore bypassed during testing. Testing does not. trip'the' system unless a trip condition exists in a concurrent channel. i References

1. USAR Section 7.4.2  !
2. USAR, Section 14.6.1
3. USAR, Section 14.5.5  ;
4. FSAR, Appendix.I-  !

1 1

1 I

l i

i

.r l

1 J

l V \

i- i

. 1 1

i  !

lI i i  !

! 4 l

l I

1 i

FIGURE 1 BAST to RWST Transfer Logic Diagram (Two Sheets)

I 1

l l

j,,2 ,%,-@- - 4 ,,e- -*I-+

4- J -2eA--4h--na~- *--e--N'M

- '#--8 -4'd#-'-'d M*"I' # *" # M '* ' " ' " ' " **#AO#* '^#'# # ~'

-"'j

  • We e4.- g.
y gh M sg l

'k.J, I us u,Ii g

b j i sj bey i mgm  ;,

n ,

L . d 7 sjpi  ;

9,  !  ! I 1 p - <

4

.  ! i i  !

d; ;l

!i l b3 -

p d l1l:

b *

~1 y

r l

[s 1!$

L fhPllgI !! 3

'l ~. '

!! lu H titi

[f  !.

"y (

l l

.'gb,.mii s

ti lll

. n,i i

j ,

y 3 3

gg g A S ~

GA'  ?

58 ' -

r

--rm- : l b.

-Gli l j  ;

--avr-

  • i

.,!G

((

A -Ill!r.

g 7::}  ![

~ g asrm g - -

[  ;

ip  !

am g} '

ri- 4' $8s J ~

l n amu e

t P 1

Eg

%g .

,w.w ., .,mr ["; g] __

3 t

s y

awmjg Ic -a La D

a

~

l

-~ i i

aas,, g > -e ,e a

6.

. . . -t._.,

1 *

.=- '"

  • J
  • k ,

f g# -

, l

- {$ -

-( lh wa-:l '

  1. 8 t

?

j l',

= ., fy .

t awug @

k a

1

-awa, g -

mq i

i *-=-I -3 , 3, ayg, g O' s G

r, i

a ,[" -

i.' .

~

.ays g - C -- "D!i DJ 3, p v num g A

7:

g,u- i}-1 L" ~.

J{I- _g. ,l@

g n astm l .

L;, _

a

-a war l Q _

Oil m ,_ _J 5 a oh

{

~

2. .

g ag_n -

e m

3 9

I 7

. . ~ - .

i

+ea " -e-wea a ,.

g 1, . . .

-.Aa-' * " ".m..

.. x atw a -=..a -e~a.

.,--.2.+-~w...,,--o.-.aa

+ s sem e.--s--au-<4

.m a ,

<--+e-.6s.-+v+.+ --*'~.=4-* +4e-e-*-+w.-*~4 g -

  • I d* I 8 W
  1. Ia kj[!p TN$SIyd j'jj;!

!!i;.fi U  !-

Pl a 4i .4 4  :: dg:11 ~[

_h -

bn h

...................q&

I ^ Q- - 5 5 i

}

- [si h.

J, d ,

l" "Ia$,.' [ {t' 3

,i j b:

i fl:

T,, ~'

l.

@m _lec.s_+lB"/g+rn"

~ ~--

! i  !!r l m !

l -

e! -u i ey u; i;i 40Ilb ii l-u>g!!ri g s , , 4 a .[:. 'p;g 9 pg. c  ; , j  ;; , I _t e

i I j i = [F 1 g@h

--a.

loo .. m d w

-l ,

~

.b ;

e i

e i 4

e.m s  !

e r b '

-+

. e. : ,

e h

4 ,

~

~I' _1 j' - "~*

y _

g i

+ A N , -$ y

  • [mi/* .-. _=. , .=_ >

==

g _~j!j-L , 4 ps  ! __

4._ ,lE!M  !

i mmg) o 5

3

-g h8 ( l . awn

ir

.i , s l I .

siwN <

jgq

" J g _g_ g L

L .

i i,!L-6%-e--

li +Il

- i. -m g _._

ri f .N

! 6 [ag e M .* "

-I -- ^J  ! ma--- ';s ! '

-el l I gi 8

=.m- :!

{I i_xb  ;

4

- ~ I ~

I -- m

-(g +,

I I

- ,o 4 at, .

-uv- 3 .

ly'--4 ,!g; c-+f

__-._. - I -

t __,..,, . _

.., ,q Q .. r g 3

_.u m___ - [

m]. ,

1 Gaff l

}{f- I

,.n I -r ist M<f[I!j}; Ii

. . . ...a -a e i _ , ..,. . ,

r,-

, _ .__, _+. _. _._..1. ,

_ _ , . . ~ _. . _ . _,

FIGURE 2 Safety injection System Simplified Flow Diagram i

l l

I l

I i

1 l

l l

l i.

l i

r

O

_t% 1 == l z l ** I es. I w I o I u er minamTry "

. , ,, e i m

~

f ik! i!dd !! N i

f h j

~

s,

! i u 1 it$ l "I lll~l L

.  !! si d il "s E \ -

gj  !

m A 3 $.

l

  • T

,,  ! , -_---4: ,,'f

  • Y a g p a jh3 i "I i1

, . n

(:II'eesf,:u . IIid w go . -lig l

! j1adj il 1 4 il il

. Ti < a l

l ~

E i: g -

J- i i r 1 ( d g li p~ it h"i E"l f)i !l i 1

~

gr p- e t M u d, , , .

i iitn -

k 4@bi /@,2 C l 'l!Il

((gb[@pipf/M'.

~

~

, f _

!!brf@T  !" " ' ih L Jit -

l { s ry ,f* gni g  ?

i a0 i k b,, .

i ,

l lil i l-A l '

u! i Yi[i ny!lka ' I p -

1 9 fag $: ,

l

_ ,,, _i ,.i i

e i'

!M e' aN

  • i

,nel ie's l , iT Li i

'{ i s, g. , -

} $ $ $ [

% i=1 x i e i w iw I o I u l e l e